Update all

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
mini-css-extract-plugin	1.4.0 -> 1.4.1
node	14.16.0 -> 14.16.1
rollup (source)	2.43.1 -> 2.45.0
typescript (source)	4.2.3 -> 4.2.4
webpack	5.28.0 -> 5.31.0

---

Release Notes

webpack-contrib/mini-css-extract-plugin

v1.4.1

Compare Source

nodejs/node

v14.16.1

Compare Source

This is a security release.

Notable Changes

Vulnerabilities fixed:

• CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (High)
  • This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt
  • Impacts:
    • All versions of the 15.x, 14.x, 12.x and 10.x releases lines
• CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing (High)
  • This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt
  • Impacts:
    • All versions of the 15.x, 14.x, 12.x and 10.x releases lines
• CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
  • This is a vulnerability in the y18n npm module which may be exploited by prototype pollution. You can read more about it in GHSA-c4w7-xm78-47vh
  • Impacts:
    • All versions of the 14.x, 12.x and 10.x releases lines

Commits

• [467be7a950] - deps: upgrade npm to 6.14.12 (Ruy Adorno) #​37918
• [6bc8f58182] - deps: update archs files for OpenSSL-1.1.1k (Tobias Nießen) #​37938
• [403a014ef6] - deps: upgrade openssl sources to 1.1.1k (Tobias Nießen) #​37938

rollup/rollup

v2.45.0

Compare Source

2021-04-09

Features

• Support private class instance methods and accessors (#​4034)

Pull Requests

• #​4034: feat: add support for private class methods (@​dnalborczyk)

v2.44.0

Compare Source

2021-03-29

Features

• Add a new option makeAbsoluteExternalsRelative to opt out of renormalizing absolute external ids to relative ids (#​4021)
• Extend the resolveId plugin hook to allow forcing or preventing renormalization of absolute external ids (#​4021)
• Make the rendered code of individual modules available in the generated bundle (#​4028)

Bug Fixes

• Handle objects with __proto__ properties correctly (#​4019)

Pull Requests

• #​4019: Deoptimize ObjectExpression when a __proto__ property is present (@​marijnh)
• #​4021: Improve absolute path handling (@​lukastaegert)
• #​4026: chore: fix vscode launch config (change tdd to bdd) (@​jameslahm)
• #​4027: Post comment for PRs from forks (@​lukastaegert)
• #​4028: Expose rendered module code to generateBundle hook (@​btd)

webpack/webpack

v5.31.0

Compare Source

Features

• add a few more options for infrastructure logging:
  • infrastructureLogging.colors: Enables/Disables colorful output.
  • infrastructureLogging.appendOnly: Only appends lines to the output. Avoids updating existing output e. g. for status messages.
  • infrastructureLogging.stream: Stream used for logging output. Defaults to process.stderr.
  • infrastructureLogging.console: Custom console used for logging.
  • When stream is an TTY colors is enabled and appendOnly is disabled. Otherwise it's flipped.

Bugfixes

• Persistent Caching
  • fix caching crash when using fsevents in build dependencies
  • improve resolving of build dependencies when exports field is used
  • make problems during resolving build dependencies warnings instead of debug messages
• prioritize static reexport over runtime reexport for target determination
  • This helps in optimization by no longer opting out of optimization when some other exports any dynamic (from commonjs or empty/type-only modules)
• fix bug with subtraction of runtimes
  • This fixes a problem with concatenated modules in builds with multiple runtimes and force-merged shared chunks
• ensure that entrypoints are always re-executed when HMR-updated
  • This fixes no longer updating pages when the entrypoint crashed

v5.30.0

Compare Source

Features

• add GC to memory cache
  • opt-in via cache.maxGenerations when cache.type: "memory"
  • default for cache.type: "filesystem" and mode: "development"
  • configure via cache.maxMemoryGenerations when cache.type: "filesystem"
  • Generations = Rebuilds
• add GC for untouched filesystem cache files
• allow to configurate GC for the filesystem cache via cache.maxAge
• allow to disable memory cache when using the filesystem cache with cache.maxMemoryGenerations: 0
• Caches will be cleared on Compiler close resp Cache shutdown (after persisting for the filesystem cache)

Bugfixes

• add a few workarounds for v8 bug that causes memory leaks in optimized code (only partially fixes it)
• after serializing filesystem no longer keeps cache items in memory, instead it will read them from disk again when accessed

GC = Garbage Collection

v5.29.0

Compare Source

Bugfixes

• fix some edge cases for splitChunks.maxSize which cause too large chunks to be created
• add stats.groupModulesByType to the schema

Developer Experience

• add resolving trace for error during resolving build dependencies
• expose Stats-related types
• exports AsyncDependenciesBlock and Module/Const/NullDependency on the API

---

Configuration

📅 Schedule: "before 3am on Monday" (UTC).

🚦 Automerge: Enabled.

♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.