dependabot[bot] opened a new pull request, #44885: URL: https://github.com/apache/superset/pull/44885
Bumps [webpack-sources](https://github.com/webpack/webpack-sources) from 3.5.1 to 3.5.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack-sources/releases";>webpack-sources's releases</a>.</em></p> <blockquote> <h2>v3.5.3</h2> <h3>Patch Changes</h3> <ul> <li>Hand out a recorded hash update as buffers, so cached data carries no big string. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack-sources/pull/289";>#289</a>)</li> </ul> <h2>v3.5.2</h2> <h3>Patch Changes</h3> <ul> <li> <p>perf: hash a string-backed source without materializing its buffer (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack-sources/pull/286";>#286</a>)</p> <p><code>RawSource.updateHash</code> and <code>OriginalSource.updateHash</code> called <code>buffer()</code>, which encodes the string to UTF-8 and memoizes the result — so every source that was hashed kept its content twice, as a string and as a buffer, for as long as the source lived. Node hashes a string as UTF-8, the same bytes <code>buffer()</code> produces, so the string is hashed directly instead and no digest changes.</p> <p>Measured on a webpack build of three.js + lodash-es (1033 modules, 2.71 MB of module source): retained <code>arrayBuffers</code> after the build drop from 8.74–8.76 MB to 5.81 MB with <code>devtool: false</code>, and from 9.35–12.11 MB to 6.42 MB with <code>devtool: "source-map"</code> — disjoint over six and five runs. 1029 <code>Buffer.from</code> calls per build are removed, one per module. CPU is unchanged: hashing those sources costs 9.23 ms via the buffer against 8.18 ms via the string, which no whole-build timing can resolve.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack-sources/blob/main/CHANGELOG.md";>webpack-sources's changelog</a>.</em></p> <blockquote> <h2>3.5.3</h2> <h3>Patch Changes</h3> <ul> <li>Hand out a recorded hash update as buffers, so cached data carries no big string. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack-sources/pull/289";>#289</a>)</li> </ul> <h2>3.5.2</h2> <h3>Patch Changes</h3> <ul> <li> <p>perf: hash a string-backed source without materializing its buffer (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack-sources/pull/286";>#286</a>)</p> <p><code>RawSource.updateHash</code> and <code>OriginalSource.updateHash</code> called <code>buffer()</code>, which encodes the string to UTF-8 and memoizes the result — so every source that was hashed kept its content twice, as a string and as a buffer, for as long as the source lived. Node hashes a string as UTF-8, the same bytes <code>buffer()</code> produces, so the string is hashed directly instead and no digest changes.</p> <p>Measured on a webpack build of three.js + lodash-es (1033 modules, 2.71 MB of module source): retained <code>arrayBuffers</code> after the build drop from 8.74–8.76 MB to 5.81 MB with <code>devtool: false</code>, and from 9.35–12.11 MB to 6.42 MB with <code>devtool: "source-map"</code> — disjoint over six and five runs. 1029 <code>Buffer.from</code> calls per build are removed, one per module. CPU is unchanged: hashing those sources costs 9.23 ms via the buffer against 8.18 ms via the string, which no whole-build timing can resolve.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/webpack-sources/commit/05f71a8f13f4cef173d10223aa0b2ce5d80213c9";><code>05f71a8</code></a> chore(release): new release (<a href="https://redirect.github.com/webpack/webpack-sources/issues/290";>#290</a>)</li> <li><a href="https://github.com/webpack/webpack-sources/commit/1c970709021ad8dc7b8a9b78c6a4f35cf1427e26";><code>1c97070</code></a> fix: hand out a recorded hash update as buffers (<a href="https://redirect.github.com/webpack/webpack-sources/issues/289";>#289</a>)</li> <li><a href="https://github.com/webpack/webpack-sources/commit/6f9c00efc9df51c25030a9fd3cee4e98b9898412";><code>6f9c00e</code></a> chore(deps): update dependencies and GitHub Actions (<a href="https://redirect.github.com/webpack/webpack-sources/issues/288";>#288</a>)</li> <li><a href="https://github.com/webpack/webpack-sources/commit/c22a0e368f4b4f4ac458ef782341c75fe26f3795";><code>c22a0e3</code></a> chore(release): new release (<a href="https://redirect.github.com/webpack/webpack-sources/issues/287";>#287</a>)</li> <li><a href="https://github.com/webpack/webpack-sources/commit/399bc8cb7e28152affc556b6293530bb89ff3086";><code>399bc8c</code></a> perf: hash a string-backed source without materializing its buffer (<a href="https://redirect.github.com/webpack/webpack-sources/issues/286";>#286</a>)</li> <li><a href="https://github.com/webpack/webpack-sources/commit/164c9e245215a2f33260d419c86f6a9587b7bf64";><code>164c9e2</code></a> chore(deps-dev): bump the dependencies group with 3 updates (<a href="https://redirect.github.com/webpack/webpack-sources/issues/283";>#283</a>)</li> <li><a href="https://github.com/webpack/webpack-sources/commit/2f8b8329b506ab9556a9c1f151e90cdc93b6d657";><code>2f8b832</code></a> ci: cancel superseded pull request runs (<a href="https://redirect.github.com/webpack/webpack-sources/issues/282";>#282</a>)</li> <li><a href="https://github.com/webpack/webpack-sources/commit/5905f85c7bc01f43c0f6aeffdca51195e37865be";><code>5905f85</code></a> chore(deps-dev): bump the dependencies group with 2 updates (<a href="https://redirect.github.com/webpack/webpack-sources/issues/280";>#280</a>)</li> <li><a href="https://github.com/webpack/webpack-sources/commit/9a6442a5e729c7521016f1ec3142eda9d3b0568d";><code>9a6442a</code></a> chore(deps-dev): bump the dependencies group with 2 updates (<a href="https://redirect.github.com/webpack/webpack-sources/issues/276";>#276</a>)</li> <li><a href="https://github.com/webpack/webpack-sources/commit/9c2b26772f49babdcfec2989a84105a12011fdc0";><code>9c2b267</code></a> chore(deps-dev): bump tooling from v1.26.4 to v1.28.1 (<a href="https://redirect.github.com/webpack/webpack-sources/issues/270";>#270</a>)</li> <li>Additional commits viewable in <a href="https://github.com/webpack/webpack-sources/compare/v3.5.1...v3.5.3";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
