Update webpack: 4.41.2 → 4.44.2 (minor)

[depfu]

Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ webpack (4.41.2 → 4.44.2) · Repo

Release Notes

4.44.2

Bugfixes

• make sure to generate correct chunk connection for blocks that are only connected in some runtimes
  • fixes a bug where filename contains undefined hash at runtime

4.44.1

Bugfixes

• fix bug in sideEffects optimization when using export * from "non-esm" and a default export.
• add missing optional peerDependencies for webpack-cli and webpack-command to support Yarn 2

4.44.0

Features

• Improve sideEffects flag behavior when dynamic modules are part of the tree
  • Fixes a bug which causes empty modules (or type-only modules) to "break" Tree Shaking
• add splitChunks.enforceSizeThreshold to allow enfore splitting larger chunks unrelated from other limiations
  • Not set by default to avoid breaking change
  • It will be set by default to 50k in webpack 5
  • It's recommended to set it in webpack 4 too
• add support for resolve.roots and default resolve.roots: [context]
  • This allows to resolve server-relative urls (e.g. /src/abc) to the project root (or other locations when configured)
  • This allows to use loaders that rely on that behavior

Bugfixes

• fix bug where splitChunks produced non-optimal results when minSize is set to 0
  • This lead to NaNs in some places which breaks ordering
• Fix bug which lead to HMR not working for splitChunks in entrypoints
• force update watchpack and chokidar for chokidar bugfix which causes files to stop being watched

4.43.0

Features

• add module.hot.invalidate() to HMR API

Dependencies

• push versions for forced security updates

4.42.1

Bugfixes

• update webassemblyjs dependencies for instruction update
• update mkdirp dependency for security reasons

4.42.0

Bugfixes

• Disable constant replacements in "use asm" scope
• Update schema to disallow functions for output.hotUpdateChunkFilename as this doesn't work
• Hoist exports in concatenated module to handle circular references with non-concatenated modules correctly
• Flag all modules as used in DLLs to fix missing exports

4.41.6

Bugfixes

• Windows network paths are considered as absolute paths
• fix hanging of FlagDependencyExportsPlugin when using export * in a circular matter

4.41.5

Bugfixes

• handle relative paths with webpack:// prefix in SourceMaps correctly
• fixes a non-determinism about providedExports with export * which caused changing module hashes and unnecessary HMR invalidation

4.41.4

Bugfixes

• fix case where __webpack_require__.e is not a function when using module concatenation
• fix incorrect imported module when using sideEffects in a certain constellation of export names

Performance

• lazy-require Webassembly related modules for improved startup performance

4.41.3

Security

• force upgrade terser-webpack-plugin dependency for security fix (not affecting webpack)

Funding

• add npm funding field to package.json

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by more commits than we can show here.

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu recreate

Recreates this PR, overwriting any edits that you've made to it

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)