Skip to content

chore(deps-dev): bump webpack from 5.104.1 to 5.105.4#3041

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/webpack-5.105.4
Closed

chore(deps-dev): bump webpack from 5.104.1 to 5.105.4#3041
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/webpack-5.105.4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026 •
edited
Loading

Bumps webpack from 5.104.1 to 5.105.4.

Release notes

Sourced from webpack's releases.

v5.105.4

Patch Changes

  • Add Module.getSourceBasicTypes to distinguish basic source types and clarify how modules with non-basic source types like remote still produce JavaScript output. (by @​xiaoxiaojx in #20546)

  • Handle createRequire in expressions. (by @​alexander-akait in #20549)

  • Fixed types for multi stats. (by @​alexander-akait in #20556)

  • Remove empty needless js output for normal css module. (by @​JSerFeng in #20162)

  • Update enhanced-resolve to support new features for tsconfig.json. (by @​alexander-akait in #20555)

  • Narrows export presence guard detection to explicit existence checks on namespace imports only, i.e. patterns like "x" in ns. (by @​hai-x in #20561)

v5.105.3

Patch Changes

  • Context modules now handle rejections correctly. (by @​alexander-akait in #20455)

  • Only mark asset modules as side-effect-free when experimental.futureDefaults is set to true, so asset-copying use cases (e.g. import "./x.png") won’t break unless the option is enabled. (by @​hai-x in #20535)

  • Add the missing webpack_exports declaration in certain cases when bundling a JS entry together with non-JS entries (e.g., CSS entry or asset module entry). (by @​hai-x in #20463)

  • Fixed HMR failure for CSS modules with @​import when exportType !== "link". When exportType is not "link", CSS modules now behave like JavaScript modules and don't require special HMR handling, allowing @​import CSS to work correctly during hot module replacement. (by @​xiaoxiaojx in #20514)

  • Fixed an issue where empty JavaScript files were generated for CSS-only entry points. The code now correctly checks if entry modules have JavaScript source types before determining whether to generate a JS file. (by @​xiaoxiaojx in #20454)

  • Do not crash when a referenced chunk is not a runtime chunk. (by @​alexander-akait in #20461)

  • Fix some types. (by @​alexander-akait in #20412)

  • Ensure that missing module error are thrown after the interception handler (if present), allowing module interception to customize the module factory. (by @​hai-x in #20510)

  • Added createRequire support for ECMA modules. (by @​stefanbinoj in #20497)

  • Added category for CJS reexport dependency to fix issues with ECMA modules. (by @​hai-x in #20444)

  • Implement immutable bytes for bytes import attribute to match tc39 spec. (by @​alexander-akait in #20481)

  • Fixed deterministic search for graph roots regardless of edge order. (by @​veeceey in #20452)

v5.105.2

Patch Changes

v5.105.1

Patch Changes

... (truncated)

Changelog

Sourced from webpack's changelog.

5.105.4

Patch Changes

  • Add Module.getSourceBasicTypes to distinguish basic source types and clarify how modules with non-basic source types like remote still produce JavaScript output. (by @​xiaoxiaojx in #20546)

  • Handle createRequire in expressions. (by @​alexander-akait in #20549)

  • Fixed types for multi stats. (by @​alexander-akait in #20556)

  • Remove empty needless js output for normal css module. (by @​JSerFeng in #20162)

  • Update enhanced-resolve to support new features for tsconfig.json. (by @​alexander-akait in #20555)

  • Narrows export presence guard detection to explicit existence checks on namespace imports only, i.e. patterns like "x" in ns. (by @​hai-x in #20561)

5.105.3

Patch Changes

  • Context modules now handle rejections correctly. (by @​alexander-akait in #20455)

  • Only mark asset modules as side-effect-free when experimental.futureDefaults is set to true, so asset-copying use cases (e.g. import "./x.png") won’t break unless the option is enabled. (by @​hai-x in #20535)

  • Add the missing webpack_exports declaration in certain cases when bundling a JS entry together with non-JS entries (e.g., CSS entry or asset module entry). (by @​hai-x in #20463)

  • Fixed HMR failure for CSS modules with @​import when exportType !== "link". When exportType is not "link", CSS modules now behave like JavaScript modules and don't require special HMR handling, allowing @​import CSS to work correctly during hot module replacement. (by @​xiaoxiaojx in #20514)

  • Fixed an issue where empty JavaScript files were generated for CSS-only entry points. The code now correctly checks if entry modules have JavaScript source types before determining whether to generate a JS file. (by @​xiaoxiaojx in #20454)

  • Do not crash when a referenced chunk is not a runtime chunk. (by @​alexander-akait in #20461)

  • Fix some types. (by @​alexander-akait in #20412)

  • Ensure that missing module error are thrown after the interception handler (if present), allowing module interception to customize the module factory. (by @​hai-x in #20510)

  • Added createRequire support for ECMA modules. (by @​stefanbinoj in #20497)

  • Added category for CJS reexport dependency to fix issues with ECMA modules. (by @​hai-x in #20444)

  • Implement immutable bytes for bytes import attribute to match tc39 spec. (by @​alexander-akait in #20481)

  • Fixed deterministic search for graph roots regardless of edge order. (by @​veeceey in #20452)

5.105.2

Patch Changes

... (truncated)

Commits
  • 27c13b4 chore(release): new release (#20550)
  • 9b2f41e chore: bump terser plugin (#20569)
  • eafe060 fix: narrow the export presence guard detection (#20561)
  • 75d605c refactor: add AppendOnlyStackedSet iteration support and tests (#20560)
  • afa607d refactor: remove unused code (#20562)
  • 4098902 test: add source files for web-webworker and web-webworker-auto-public-path (...
  • f97be67 refactor: fix duplicated word in Compilation JSDoc (#20547)
  • 9d76fff refactor: add Module.getSourceBasicTypes for basic JS type detection (#20546)
  • a3d7839 fix: types for multi stats (#20556)
  • b8e9b05 fix: update enhanced-resolve to support new features for tsconfig.json (#...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for webpack since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot requested review from a team as code owners April 1, 2026 23:10
@dependabot dependabot Bot mentioned this pull request Apr 1, 2026
Closed
@v-jitendjain v-jitendjain mentioned this pull request Apr 3, 2026
Merged
v-sharmachir pushed a commit that referenced this pull request Apr 13, 2026
@v-jitendjain @dependabot
Combined PR for CG alerts fix and Dependabot PRs (#3043)
70b2301 
This pull request updates various dependencies across multiple packages
to keep them up-to-date with the latest versions, focusing primarily on
devDependencies and some runtime dependencies. The changes are mostly
minor version bumps for tools related to testing, linting, and core
libraries, ensuring improved compatibility, security, and stability.

**Dependency Updates**

This PR addresses the fix from below multiple PRs.
This pull request updates dependencies across multiple packages to
address security, compatibility, and performance improvements. Most
changes are minor version bumps to keep the project up-to-date with the
latest releases. The updates affect both development and production
dependencies, including core libraries such as `lodash`, `puppeteer`,
and various build tools.

**Dependency Updates:**

- Updated `lodash` to `^4.18.0` in all packages for security and bug
fixes.
[[1]](diffhunk://#diff-15c7bbe91d15418a9a67ee27f898b2b881568806b9776d6224a815f388a4b1b4L42-R43)
[[2]](diffhunk://#diff-5d02697f92ec66562e8de45c75ab37913364f2f0eab90e9129861e8411d20d79L42-R42)
[[3]](diffhunk://#diff-4df8a8998f2307d3e3125f1ef0157fe8d5878a45114e70acffc8cb90f7194446L56-R56)
[[4]](diffhunk://#diff-6e2e2a1851648938b325ba84de634407a4e69a644ea61102df15ca4a8a7a9758L82-R86)
[[5]](diffhunk://#diff-50d7c39a9430d37971aa76858165ab4f7921c4cc4340b28e9b673ce6982e63cfL33-R44)
[[6]](diffhunk://#diff-7b1fe15227f7a23db2c9debdc2b6160e9dec7dcdfe591b9271f92dc28a21daa5L60-R64)
[[7]](diffhunk://#diff-f8bb0e68d8b2f1dd65c0ed6b4f2b1c3b1fedbe91b9893c67f485a3cf0926ed1bL42-R45)
[[8]](diffhunk://#diff-45f0fcc93135222e12125f51c5d0ae73462ec95c8f7994f9045a53976e027bd4L46-R46)
[[9]](diffhunk://#diff-6b07e442fc527c911a7841554308068a91cd3aaaf6dc9b34d3a19741d8d393fcL32-R49)
[[10]](diffhunk://#diff-e40add904085cf1252e8e8bed56e2fce9408ee589e4e595474ab7acab49e0a72L33-R43)
[[11]](diffhunk://#diff-bcf99537f97358e0221755977853e0a69dbc88d3bd63c1be3614a04694fa1269L35-R52)
[[12]](diffhunk://#diff-fcf8edeb3d3a262d555d35a558ca8d9ed860495bc98fd56701eaa88159bad74fL40-R61)
[[13]](diffhunk://#diff-4945710ed2a432d08b95a9776d1ffd75a0c27d47b630740a01afe9f60fb3ceceL35-R52)
[[14]](diffhunk://#diff-4e067b14ff7c6b5da46919d90a650a8f8a254f4bc1f0d14f0b02b473d9563339L40-R60)
- Updated `puppeteer` to `^24.40.0` in relevant packages for improved
browser automation support.
[[1]](diffhunk://#diff-15c7bbe91d15418a9a67ee27f898b2b881568806b9776d6224a815f388a4b1b4L42-R43)
[[2]](diffhunk://#diff-6e2e2a1851648938b325ba84de634407a4e69a644ea61102df15ca4a8a7a9758L82-R86)
[[3]](diffhunk://#diff-7b1fe15227f7a23db2c9debdc2b6160e9dec7dcdfe591b9271f92dc28a21daa5L60-R64)
[[4]](diffhunk://#diff-e40add904085cf1252e8e8bed56e2fce9408ee589e4e595474ab7acab49e0a72L33-R43)
[[5]](diffhunk://#diff-fcf8edeb3d3a262d555d35a558ca8d9ed860495bc98fd56701eaa88159bad74fL40-R61)
[[6]](diffhunk://#diff-4e067b14ff7c6b5da46919d90a650a8f8a254f4bc1f0d14f0b02b473d9563339L40-R60)
- Updated `rimraf` to `^6.1.3` in all packages for file system cleanup
tasks.
[[1]](diffhunk://#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519L62-R64)
[[2]](diffhunk://#diff-15c7bbe91d15418a9a67ee27f898b2b881568806b9776d6224a815f388a4b1b4L33-R33)
[[3]](diffhunk://#diff-5d02697f92ec66562e8de45c75ab37913364f2f0eab90e9129861e8411d20d79L32-R32)
[[4]](diffhunk://#diff-4df8a8998f2307d3e3125f1ef0157fe8d5878a45114e70acffc8cb90f7194446L33-R38)
[[5]](diffhunk://#diff-6e2e2a1851648938b325ba84de634407a4e69a644ea61102df15ca4a8a7a9758L47-R71)
[[6]](diffhunk://#diff-50d7c39a9430d37971aa76858165ab4f7921c4cc4340b28e9b673ce6982e63cfL33-R44)
[[7]](diffhunk://#diff-7b1fe15227f7a23db2c9debdc2b6160e9dec7dcdfe591b9271f92dc28a21daa5L38-R49)
[[8]](diffhunk://#diff-4686f0475500e80f90a7dcc63c473ab9e25cb65e521c59853b4e1f581f442e7eL19-R19)
[[9]](diffhunk://#diff-143d838d248e5811e1ea75a654601dbadafd823bfb407622e6c763073a58b471L37-R46)
[[10]](diffhunk://#diff-f8bb0e68d8b2f1dd65c0ed6b4f2b1c3b1fedbe91b9893c67f485a3cf0926ed1bL32-R32)
[[11]](diffhunk://#diff-45f0fcc93135222e12125f51c5d0ae73462ec95c8f7994f9045a53976e027bd4L31-R36)
[[12]](diffhunk://#diff-6b07e442fc527c911a7841554308068a91cd3aaaf6dc9b34d3a19741d8d393fcL32-R49)
[[13]](diffhunk://#diff-e40add904085cf1252e8e8bed56e2fce9408ee589e4e595474ab7acab49e0a72L33-R43)
[[14]](diffhunk://#diff-bcf99537f97358e0221755977853e0a69dbc88d3bd63c1be3614a04694fa1269L35-R52)
[[15]](diffhunk://#diff-fcf8edeb3d3a262d555d35a558ca8d9ed860495bc98fd56701eaa88159bad74fL40-R61)
[[16]](diffhunk://#diff-4945710ed2a432d08b95a9776d1ffd75a0c27d47b630740a01afe9f60fb3ceceL35-R52)
[[17]](diffhunk://#diff-4e067b14ff7c6b5da46919d90a650a8f8a254f4bc1f0d14f0b02b473d9563339L40-R60)
[[18]](diffhunk://#diff-ed7e2e3366e522515ff94db1df62aef9f7789593e160668c2cf2a2c40bbd12d1L19-R19)

**Build and Tooling Updates:**

- Bumped versions of build tools and linters, including
`@typescript-eslint/parser`, `commander`, `webpack`, `rollup`, and
`@rollup/plugin-commonjs`, to their latest minor or patch releases for
improved development experience and compatibility.
[[1]](diffhunk://#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519L42-R44)
[[2]](diffhunk://#diff-4df8a8998f2307d3e3125f1ef0157fe8d5878a45114e70acffc8cb90f7194446L33-R38)
[[3]](diffhunk://#diff-6e2e2a1851648938b325ba84de634407a4e69a644ea61102df15ca4a8a7a9758L47-R71)
[[4]](diffhunk://#diff-143d838d248e5811e1ea75a654601dbadafd823bfb407622e6c763073a58b471L37-R46)
[[5]](diffhunk://#diff-7b1fe15227f7a23db2c9debdc2b6160e9dec7dcdfe591b9271f92dc28a21daa5L26-R26)
[[6]](diffhunk://#diff-7b1fe15227f7a23db2c9debdc2b6160e9dec7dcdfe591b9271f92dc28a21daa5L38-R49)
[[7]](diffhunk://#diff-45f0fcc93135222e12125f51c5d0ae73462ec95c8f7994f9045a53976e027bd4L31-R36)
[[8]](diffhunk://#diff-bcf99537f97358e0221755977853e0a69dbc88d3bd63c1be3614a04694fa1269L35-R52)
[[9]](diffhunk://#diff-fcf8edeb3d3a262d555d35a558ca8d9ed860495bc98fd56701eaa88159bad74fL40-R61)
[[10]](diffhunk://#diff-4945710ed2a432d08b95a9776d1ffd75a0c27d47b630740a01afe9f60fb3ceceL35-R52)
[[11]](diffhunk://#diff-4e067b14ff7c6b5da46919d90a650a8f8a254f4bc1f0d14f0b02b473d9563339L40-R60)
- Updated `jest`, `ts-jest`, and related test dependencies to maintain
up-to-date testing infrastructure.
[[1]](diffhunk://#diff-15c7bbe91d15418a9a67ee27f898b2b881568806b9776d6224a815f388a4b1b4L33-R33)
[[2]](diffhunk://#diff-5d02697f92ec66562e8de45c75ab37913364f2f0eab90e9129861e8411d20d79L32-R32)
[[3]](diffhunk://#diff-4df8a8998f2307d3e3125f1ef0157fe8d5878a45114e70acffc8cb90f7194446L33-R38)
[[4]](diffhunk://#diff-6e2e2a1851648938b325ba84de634407a4e69a644ea61102df15ca4a8a7a9758L47-R71)
[[5]](diffhunk://#diff-50d7c39a9430d37971aa76858165ab4f7921c4cc4340b28e9b673ce6982e63cfL33-R44)
[[6]](diffhunk://#diff-7b1fe15227f7a23db2c9debdc2b6160e9dec7dcdfe591b9271f92dc28a21daa5L38-R49)
[[7]](diffhunk://#diff-143d838d248e5811e1ea75a654601dbadafd823bfb407622e6c763073a58b471L37-R46)
[[8]](diffhunk://#diff-f8bb0e68d8b2f1dd65c0ed6b4f2b1c3b1fedbe91b9893c67f485a3cf0926ed1bL32-R32)
[[9]](diffhunk://#diff-45f0fcc93135222e12125f51c5d0ae73462ec95c8f7994f9045a53976e027bd4L31-R36)
[[10]](diffhunk://#diff-6b07e442fc527c911a7841554308068a91cd3aaaf6dc9b34d3a19741d8d393fcL32-R49)
[[11]](diffhunk://#diff-e40add904085cf1252e8e8bed56e2fce9408ee589e4e595474ab7acab49e0a72L33-R43)
[[12]](diffhunk://#diff-bcf99537f97358e0221755977853e0a69dbc88d3bd63c1be3614a04694fa1269L35-R52)
[[13]](diffhunk://#diff-fcf8edeb3d3a262d555d35a558ca8d9ed860495bc98fd56701eaa88159bad74fL40-R61)
[[14]](diffhunk://#diff-4945710ed2a432d08b95a9776d1ffd75a0c27d47b630740a01afe9f60fb3ceceL35-R52)
[[15]](diffhunk://#diff-4e067b14ff7c6b5da46919d90a650a8f8a254f4bc1f0d14f0b02b473d9563339L40-R60)

**Production Dependency Updates:**

- Updated `applicationinsights`, `@apify/log`, `@crawlee/browser-pool`,
`@crawlee/puppeteer`, `@opentelemetry/*`, and other key dependencies to
their latest compatible versions for improved observability, logging,
and crawling capabilities.
[[1]](diffhunk://#diff-6e2e2a1851648938b325ba84de634407a4e69a644ea61102df15ca4a8a7a9758L47-R71)
[[2]](diffhunk://#diff-6e2e2a1851648938b325ba84de634407a4e69a644ea61102df15ca4a8a7a9758L82-R86)
[[3]](diffhunk://#diff-6b07e442fc527c911a7841554308068a91cd3aaaf6dc9b34d3a19741d8d393fcL32-R49)
[[4]](diffhunk://#diff-bcf99537f97358e0221755977853e0a69dbc88d3bd63c1be3614a04694fa1269L35-R52)
[[5]](diffhunk://#diff-fcf8edeb3d3a262d555d35a558ca8d9ed860495bc98fd56701eaa88159bad74fL40-R61)
[[6]](diffhunk://#diff-4945710ed2a432d08b95a9776d1ffd75a0c27d47b630740a01afe9f60fb3ceceL35-R52)
[[7]](diffhunk://#diff-4e067b14ff7c6b5da46919d90a650a8f8a254f4bc1f0d14f0b02b473d9563339L40-R60)
[[8]](diffhunk://#diff-143d838d248e5811e1ea75a654601dbadafd823bfb407622e6c763073a58b471L37-R46)
[[9]](diffhunk://#diff-7b1fe15227f7a23db2c9debdc2b6160e9dec7dcdfe591b9271f92dc28a21daa5L38-R49)
- Added or updated specific sub-dependencies in `package.json` for
better resolution and security (`brace-expansion`, `file-type`).

**Other Dependency Bumps:**

- Updated `convict`, `deep-equal-in-any-order`, and other utility
libraries to latest versions for bug fixes and maintenance.
[[1]](diffhunk://#diff-50d7c39a9430d37971aa76858165ab4f7921c4cc4340b28e9b673ce6982e63cfL33-R44)
[[2]](diffhunk://#diff-f8bb0e68d8b2f1dd65c0ed6b4f2b1c3b1fedbe91b9893c67f485a3cf0926ed1bL42-R45)

These updates ensure the codebase remains secure, compatible with the
latest ecosystem changes, and benefits from recent bug fixes and
performance improvements. below Dependabot PRs are already merged into
this branch and tested on dev VM environment.
#3000
#2994
#2978
#3042
#3041
#3040
#3039
#3038
#3037
#3036
#3035
#3034
#3031
#3028
#3025
#3023
#3022
#3021
#3020
#3013
#3012
#3011
#3007

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps-dev): bump webpack from 5.104.1 to 5.105.4
a303617 
Bumps [webpack](https://github.com/webpack/webpack) from 5.104.1 to 5.105.4.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.104.1...v5.105.4)

---
updated-dependencies:
- dependency-name: webpack
  dependency-version: 5.105.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/webpack-5.105.4 branch from 00a7c44 to a303617 Compare April 13, 2026 06:43
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 1, 2026

Superseded by #3054.

@dependabot dependabot Bot closed this May 1, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/webpack-5.105.4 branch May 1, 2026 21:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

category: engineering dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants