[Snyk] Upgrade webpack from 4.43.0 to 4.44.0

[snyk-bot]

Snyk has created this PR to upgrade webpack from 4.43.0 to 4.44.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 21 days ago, on 2020-07-24.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Arbitrary Code Injection SNYK-JS-SERIALIZEJAVASCRIPT-570062	492/1000 Why? Proof of Concept exploit, CVSS 7.7	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: webpack

• 4.44.0 - 2020-07-24
  

  Features

  • Improve sideEffects flag behavior when dynamic modules are part of the tree
    • Fixes a bug which causes empty modules (or type-only modules) to "break" Tree Shaking
  • add splitChunks.enforceSizeThreshold to allow enfore splitting larger chunks unrelated from other limiations
    • Not set by default to avoid breaking change
    • It will be set by default to 50k in webpack 5
    • It's recommended to set it in webpack 4 too
  • add support for resolve.roots and default resolve.roots: [context]
    • This allows to resolve server-relative urls (e.g. /src/abc) to the project root (or other locations when configured)
    • This allows to use loaders that rely on that behavior

  Bugfixes

  • fix bug where splitChunks produced non-optimal results when minSize is set to 0
    • This lead to NaNs in some places which breaks ordering
  • Fix bug which lead to HMR not working for splitChunks in entrypoints
  • force update watchpack and chokidar for chokidar bugfix which causes files to stop being watched
• 4.43.0 - 2020-04-21
  

  Features

  • add module.hot.invalidate() to HMR API

  Dependencies

  • push versions for forced security updates

from webpack GitHub release notes

Commit messages

Package name: webpack

• d4603c6 4.44.0
• ea06f03 Merge pull request #11225 from webpack/deps/watchpack
• eae1ba0 update watchpack
• 42dc038 Merge pull request #11210 from webpack/ci/timeout-4
• 21e3c11 Merge pull request #11207 from webpack/backport/add-roots
• ce3ca7b watch test cases: close correctly, increase timeout
• 5c9c601 Improve description in config schema
• a925e6a add roots option
• 1879a81 Merge pull request #10776 from jeffin143/fix-10775
• 0d8ff5f keep old code style
• e128392 fix test case
• a41994a Merge pull request #11168 from webpack/bugfix/split-chunks
• f0568ec update snapshot
• cff07cd splitChunks improvements
• dfd2021 Merge pull request #10933 from webpack/test/dynamic-reexports
• 8063d2c add more test cases for dynamic reexports
• b343020 Merge pull request #10919 from webpack/bugfixes/side-effect-optimization
• 7ec220e add side effects test cases
• 8e7b249 improve side-effects handling for dynamic reexports
• 48229fa add optimization stats test case
• b862d6d file name was changed
• d0f7b8f Backport to webpack 4

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs