dependabot[bot] opened a new pull request, #42634: URL: https://github.com/apache/superset/pull/42634
Bumps [webpack](https://github.com/webpack/webpack) from 5.108.4 to 5.109.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack/releases";>webpack's releases</a>.</em></p> <blockquote> <h2>v5.109.0</h2> <h3>Minor Changes</h3> <ul> <li> <p>Default <code>experiments.typescript</code> to <code>"auto"</code>, enabling built-in TypeScript support on Node.js >= 22.6 when no TypeScript loader is registered. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Default <code>experiments.css</code>, <code>experiments.html</code> and <code>experiments.asyncWebAssembly</code> to <code>"auto"</code>, enabling built-in support unless a loader is registered for those files; modules with inline or hook-injected loaders (e.g. html-webpack-plugin templates) keep being parsed as JavaScript. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Add <code>output.resourceHints</code> to emit resource hints (<code>preload</code>/<code>prefetch</code>/<code>modulepreload</code>/<code>preconnect</code>), on by default for ESM output, plus <code>module.parser.<type>.urlHints</code>, <code>css.fontPreload</code> and <code>javascript.dynamicImportCssPreload</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Add built-in build progress via <code>infrastructureLogging.progress</code>, plus <code>estimatedTime</code>, <code>phaseTimings</code>, progress bar <code>width</code> and <code>progressBar: "auto"</code> on <code>ProgressPlugin</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Concatenate CommonJS modules with statically analyzable exports; opt out via <code>optimization.concatenateModules: { commonjs: false }</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Wrap "weird" CommonJS modules into module concatenation instead of bailing out. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Add <code>output.html.inline</code> (<code>true | "script" | "style"</code>) and the <code>webpackInline</code> magic comment to inline chunk content into HTML. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Add <code>output.html.inject</code> to control where chunk tags are injected. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Add <code>output.html.title</code>, <code>output.html.meta</code> and <code>output.html.base</code> options for head generation. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Support per-icon link attributes (<code>sizes</code>, <code>media</code>, <code>color</code>, <code>type</code>, <code>crossorigin</code>) and arrays in <code>output.html.favicon</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21487";>#21487</a>)</p> </li> <li> <p>Add <code>output.html.manifest</code> to generate and link a web app manifest with hashed icons. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21487";>#21487</a>)</p> </li> <li> <p>Add <code>output.html.csp</code> to inject a Content-Security-Policy meta with inline-content hashes and an optional nonce. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21487";>#21487</a>)</p> </li> <li> <p>Add the <code>output.html</code> <code>injectTags</code> compilation hook to inject tags (script/link/meta/…) with <code>injectTo</code> placement. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21487";>#21487</a>)</p> </li> <li> <p>Add the <code>output.html</code> <code>transformTags</code> compilation hook to mutate, remove, or move (between <code><head></code> and <code><body></code>) a page's existing <code><script></code>/<code><link></code>/<code><style></code>/<code><meta></code> tags. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21487";>#21487</a>)</p> </li> <li> <p>Extend the HTML pipeline with <code>html</code> link sources (bundled as their own emitted page) and <code>rel="preload"</code>/<code>"prefetch"</code> links bundled as chunks. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Recognize more asset-bearing HTML sources: the <code>twitter:player:stream</code> meta, legacy SVG references, and Web App Manifest <code>icons</code>/<code>screenshots</code>/<code>shortcuts</code> URLs. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Add <code>module.parser.html.as</code> to parse HTML as a document or an element fragment. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Allow disabling a built-in HTML parser source via <code>type: false</code> in <code>sources</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Export <code>webpack.html.HtmlModulesPlugin</code> with <code>transformHtml</code>/<code>htmlEmitted</code> compilation hooks. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Resolve <code>@custom-media</code> (including media-type values) and <code>@custom-selector</code> in native CSS. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Scope <code>view-transition-name</code>/<code>-group</code>/<code>-class</code> names and <code>::view-transition-*()</code> pseudo references in CSS modules under <code>customIdents</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21486";>#21486</a>)</p> </li> <li> <p>Add <code>import.meta.glob</code> support, with a <code>caseSensitive</code> option and consistent hidden/<code>node_modules</code> matching. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Resolve <code>import.meta.resolve("./asset")</code> to the emitted asset URL via the <code>importMeta.resolve</code> parser option. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Add <code>import.meta.env</code> defaults: <code>MODE</code>, <code>DEV</code>, <code>PROD</code>, <code>SSR</code> and <code>BASE_URL</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack/blob/main/CHANGELOG.md";>webpack's changelog</a>.</em></p> <blockquote> <h2>5.109.0</h2> <h3>Minor Changes</h3> <ul> <li> <p>Default <code>experiments.typescript</code> to <code>"auto"</code>, enabling built-in TypeScript support on Node.js >= 22.6 when no TypeScript loader is registered. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Default <code>experiments.css</code>, <code>experiments.html</code> and <code>experiments.asyncWebAssembly</code> to <code>"auto"</code>, enabling built-in support unless a loader is registered for those files; modules with inline or hook-injected loaders (e.g. html-webpack-plugin templates) keep being parsed as JavaScript. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Add <code>output.resourceHints</code> to emit resource hints (<code>preload</code>/<code>prefetch</code>/<code>modulepreload</code>/<code>preconnect</code>), on by default for ESM output, plus <code>module.parser.<type>.urlHints</code>, <code>css.fontPreload</code> and <code>javascript.dynamicImportCssPreload</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Add built-in build progress via <code>infrastructureLogging.progress</code>, plus <code>estimatedTime</code>, <code>phaseTimings</code>, progress bar <code>width</code> and <code>progressBar: "auto"</code> on <code>ProgressPlugin</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Concatenate CommonJS modules with statically analyzable exports; opt out via <code>optimization.concatenateModules: { commonjs: false }</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Wrap "weird" CommonJS modules into module concatenation instead of bailing out. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Add <code>output.html.inline</code> (<code>true | "script" | "style"</code>) and the <code>webpackInline</code> magic comment to inline chunk content into HTML. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Add <code>output.html.inject</code> to control where chunk tags are injected. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Add <code>output.html.title</code>, <code>output.html.meta</code> and <code>output.html.base</code> options for head generation. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Support per-icon link attributes (<code>sizes</code>, <code>media</code>, <code>color</code>, <code>type</code>, <code>crossorigin</code>) and arrays in <code>output.html.favicon</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21487";>#21487</a>)</p> </li> <li> <p>Add <code>output.html.manifest</code> to generate and link a web app manifest with hashed icons. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21487";>#21487</a>)</p> </li> <li> <p>Add <code>output.html.csp</code> to inject a Content-Security-Policy meta with inline-content hashes and an optional nonce. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21487";>#21487</a>)</p> </li> <li> <p>Add the <code>output.html</code> <code>injectTags</code> compilation hook to inject tags (script/link/meta/…) with <code>injectTo</code> placement. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21487";>#21487</a>)</p> </li> <li> <p>Add the <code>output.html</code> <code>transformTags</code> compilation hook to mutate, remove, or move (between <code><head></code> and <code><body></code>) a page's existing <code><script></code>/<code><link></code>/<code><style></code>/<code><meta></code> tags. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21487";>#21487</a>)</p> </li> <li> <p>Extend the HTML pipeline with <code>html</code> link sources (bundled as their own emitted page) and <code>rel="preload"</code>/<code>"prefetch"</code> links bundled as chunks. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Recognize more asset-bearing HTML sources: the <code>twitter:player:stream</code> meta, legacy SVG references, and Web App Manifest <code>icons</code>/<code>screenshots</code>/<code>shortcuts</code> URLs. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Add <code>module.parser.html.as</code> to parse HTML as a document or an element fragment. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Allow disabling a built-in HTML parser source via <code>type: false</code> in <code>sources</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Export <code>webpack.html.HtmlModulesPlugin</code> with <code>transformHtml</code>/<code>htmlEmitted</code> compilation hooks. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Resolve <code>@custom-media</code> (including media-type values) and <code>@custom-selector</code> in native CSS. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Scope <code>view-transition-name</code>/<code>-group</code>/<code>-class</code> names and <code>::view-transition-*()</code> pseudo references in CSS modules under <code>customIdents</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21486";>#21486</a>)</p> </li> <li> <p>Add <code>import.meta.glob</code> support, with a <code>caseSensitive</code> option and consistent hidden/<code>node_modules</code> matching. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> <li> <p>Resolve <code>import.meta.resolve("./asset")</code> to the emitted asset URL via the <code>importMeta.resolve</code> parser option. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21477";>#21477</a>)</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/webpack/commit/21cd11a1f53567a42eee3a0be822b968a1ffcb12";><code>21cd11a</code></a> chore(release): new release (<a href="https://redirect.github.com/webpack/webpack/issues/21337";>#21337</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/7121604248329d1d8b2765d658ada19c4b38435a";><code>7121604</code></a> feat: native HTML output features (favicon attributes, manifest, CSP, tag inj...</li> <li><a href="https://github.com/webpack/webpack/commit/828a65ce2fb831fcb0eef00c1238bddd79234e35";><code>828a65c</code></a> feat: scope view-transition names in CSS modules (<a href="https://redirect.github.com/webpack/webpack/issues/21486";>#21486</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/27dfadba3b53833a292a789d5c2d345042a3759b";><code>27dfadb</code></a> fix: keep loader results as JavaScript when css/html support is implicitly en...</li> <li><a href="https://github.com/webpack/webpack/commit/8565f1a62ed703635945039732e5abf43d2f0e43";><code>8565f1a</code></a> fix: context hash crash on unsupported directory entries (<a href="https://redirect.github.com/webpack/webpack/issues/21484";>#21484</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/d93365535b2d6b976dec8f95b0dedf6ec4315c96";><code>d933655</code></a> chore(deps): bump test/test262-cases in the dependencies group (<a href="https://redirect.github.com/webpack/webpack/issues/21479";>#21479</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/5df3269ed9e603febb3e55febfb9354b30c4676f";><code>5df3269</code></a> chore(deps): bump the dependencies group with 11 updates (<a href="https://redirect.github.com/webpack/webpack/issues/21480";>#21480</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/06e8dbfc5d2ec49162f8df33b5b90faa6b6cde77";><code>06e8dbf</code></a> chore(deps): bump actions/checkout in the dependencies group (<a href="https://redirect.github.com/webpack/webpack/issues/21478";>#21478</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/c07ba06547c9dd05b4f648883a66bf070a4577f5";><code>c07ba06</code></a> docs: simplify, union and importance-order pending changelog entries (<a href="https://redirect.github.com/webpack/webpack/issues/21477";>#21477</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/6fcbd528f961e9c29b0b0ade527b1da883041938";><code>6fcbd52</code></a> build: verify internalSerializables in lint:special (<a href="https://redirect.github.com/webpack/webpack/issues/21476";>#21476</a>)</li> <li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.108.4...v5.109.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
