Commit Graph

18079 Commits

Author SHA1 Message Date
Ulises Gascón 36b322ad23
docs(security): add reference to webpack threat model
ref: https://github.com/webpack/security-wg/pull/9
2025-09-15 07:34:25 +02:00
dependabot[bot] 1f5e8e55c7
chore(deps-dev): bump memfs in the dependencies group (#19900)
Bumps the dependencies group with 1 update: [memfs](https://github.com/streamich/memfs).


Updates `memfs` from 4.38.3 to 4.39.0
- [Release notes](https://github.com/streamich/memfs/releases)
- [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/streamich/memfs/compare/v4.38.3...v4.39.0)

---
updated-dependencies:
- dependency-name: memfs
  dependency-version: 4.39.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-12 20:20:55 +03:00
Alexander Akait ce2f41e312
fix: force use es-lexer for mjs files for build dependencies (#19904) 2025-09-12 19:59:51 +03:00
Alexander Akait 16c6966b14
fix: types 2025-09-11 03:10:10 +03:00
Alexander Akait 6b70c4ac52
test: worker webpack options (#19898) 2025-09-10 16:49:49 +03:00
dependabot[bot] 06f4cb2a08
chore(deps): bump CodSpeedHQ/action from 4.0.0 to 4.0.1 (#19896)
Bumps [CodSpeedHQ/action](https://github.com/codspeedhq/action) from 4.0.0 to 4.0.1.
- [Release notes](https://github.com/codspeedhq/action/releases)
- [Changelog](https://github.com/CodSpeedHQ/action/blob/main/CHANGELOG.md)
- [Commits](6eeb021fd0...653fdc30e6)

---
updated-dependencies:
- dependency-name: CodSpeedHQ/action
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-10 14:39:22 +03:00
dependabot[bot] a4c722ed95
chore(deps-dev): bump the dependencies group with 2 updates (#19895)
Bumps the dependencies group with 2 updates: [globals](https://github.com/sindresorhus/globals) and [memfs](https://github.com/streamich/memfs).


Updates `globals` from 16.3.0 to 16.4.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](https://github.com/sindresorhus/globals/compare/v16.3.0...v16.4.0)

Updates `memfs` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/streamich/memfs/releases)
- [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/streamich/memfs/compare/v4.38.2...v4.38.3)

---
updated-dependencies:
- dependency-name: globals
  dependency-version: 16.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: memfs
  dependency-version: 4.38.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-10 14:38:49 +03:00
Alexander Akait 99c36fab8e
refactor: remove unused types (#19894) 2025-09-10 14:38:19 +03:00
Alexander Akait 95ce962897
refactor: avoid unnecessary the `defer` property for dependency (#19893) 2025-09-10 01:43:17 +03:00
Alexander Akait 930785fb00
fix: support `__non_webpack_require__` for ES modules 2025-09-09 22:11:56 +03:00
Xiao df204b5f71
feat: extractSourceMap supports HTTP URLs (#19882) 2025-09-09 18:52:36 +03:00
Alexander Akait cc8e6a195a
fix: types 2025-09-09 18:41:52 +03:00
dependabot[bot] c52d8b3b75
chore(deps-dev): bump the dependencies group with 2 updates (#19888)
Bumps the dependencies group with 2 updates: [assemblyscript](https://github.com/AssemblyScript/assemblyscript) and [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn).


Updates `assemblyscript` from 0.28.6 to 0.28.7
- [Release notes](https://github.com/AssemblyScript/assemblyscript/releases)
- [Commits](https://github.com/AssemblyScript/assemblyscript/compare/v0.28.6...v0.28.7)

Updates `eslint-plugin-unicorn` from 61.0.1 to 61.0.2
- [Release notes](https://github.com/sindresorhus/eslint-plugin-unicorn/releases)
- [Commits](https://github.com/sindresorhus/eslint-plugin-unicorn/compare/v61.0.1...v61.0.2)

---
updated-dependencies:
- dependency-name: assemblyscript
  dependency-version: 0.28.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: eslint-plugin-unicorn
  dependency-version: 61.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-09 14:42:48 +03:00
dependabot[bot] e4ae6e83ce
chore(deps-dev): bump the dependencies group with 5 updates (#19885)
Bumps the dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.28.3` | `7.28.4` |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.34.0` | `9.35.0` |
| [assemblyscript](https://github.com/AssemblyScript/assemblyscript) | `0.28.5` | `0.28.6` |
| [eslint](https://github.com/eslint/eslint) | `9.34.0` | `9.35.0` |
| [eslint-plugin-unicorn](https://github.com/sindresorhus/eslint-plugin-unicorn) | `60.0.0` | `61.0.1` |


Updates `@babel/core` from 7.28.3 to 7.28.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.4/packages/babel-core)

Updates `@eslint/js` from 9.34.0 to 9.35.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.35.0/packages/js)

Updates `assemblyscript` from 0.28.5 to 0.28.6
- [Release notes](https://github.com/AssemblyScript/assemblyscript/releases)
- [Commits](https://github.com/AssemblyScript/assemblyscript/compare/v0.28.5...v0.28.6)

Updates `eslint` from 9.34.0 to 9.35.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v9.34.0...v9.35.0)

Updates `eslint-plugin-unicorn` from 60.0.0 to 61.0.1
- [Release notes](https://github.com/sindresorhus/eslint-plugin-unicorn/releases)
- [Commits](https://github.com/sindresorhus/eslint-plugin-unicorn/compare/v60.0.0...v61.0.1)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-version: 7.28.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@eslint/js"
  dependency-version: 9.35.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: assemblyscript
  dependency-version: 0.28.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: eslint
  dependency-version: 9.35.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: eslint-plugin-unicorn
  dependency-version: 61.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-08 15:03:06 +03:00
Alexander Akait e5fd6a18fe
docs: update examples (#19883) 2025-09-08 15:02:43 +03:00
hai-x 6529f8c789
fix: type (#19881) 2025-09-08 14:58:12 +03:00
hai-x 407de36dfb
chore: bump watchpack (#19884) 2025-09-08 14:57:11 +03:00
dependabot[bot] 20abdce9b0
chore(deps): bump actions/setup-node from 4.4.0 to 5.0.0 (#19877)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4.4.0 to 5.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](49933ea528...a0853c2454)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-05 13:30:01 +03:00
dependabot[bot] c45737f0c4
chore(deps-dev): bump @types/node in the dependencies group (#19874)
Bumps the dependencies group with 1 update: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).


Updates `@types/node` from 24.3.0 to 24.3.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 24.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-05 12:34:43 +03:00
dependabot[bot] b865bf3468
chore(deps): bump actions/github-script from 7.0.1 to 8.0.0 (#19875)
Bumps [actions/github-script](https://github.com/actions/github-script) from 7.0.1 to 8.0.0.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](60a0d83039...ed597411d8)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-05 12:34:24 +03:00
dependabot[bot] 4888e41087
chore(deps): bump codecov/codecov-action from 5.5.0 to 5.5.1 (#19876)
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.0 to 5.5.1.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](fdcc847654...5a1091511a)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-05 12:33:36 +03:00
Xiao 57a8ebd761
fix: keep renderModule order consistent (#19867) 2025-09-05 12:31:05 +03:00
Alexander Akait 50119bb9b0
fix: output filesystem types 2025-09-05 12:29:55 +03:00
Alexander Akait d2d939cd7c
ci: fix CodSpeedHQ (#19873) 2025-09-05 12:28:58 +03:00
dependabot[bot] 7ddc38a376
chore(deps-dev): bump the dependencies group across 1 directory with 6 updates (#19871)
Bumps the dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.1.2` | `30.1.3` |
| [jest-circus](https://github.com/jestjs/jest/tree/HEAD/packages/jest-circus) | `30.1.2` | `30.1.3` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `16.1.5` | `16.1.6` |
| [terser](https://github.com/terser/terser) | `5.43.1` | `5.44.0` |
| [three](https://github.com/mrdoob/three.js) | `0.179.1` | `0.180.0` |



Updates `jest` from 30.1.2 to 30.1.3
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.1.3/packages/jest)

Updates `jest-circus` from 30.1.2 to 30.1.3
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.1.3/packages/jest-circus)

Updates `jest-cli` from 30.1.2 to 30.1.3
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.1.3/packages/jest-cli)

Updates `lint-staged` from 16.1.5 to 16.1.6
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lint-staged/lint-staged/compare/v16.1.5...v16.1.6)

Updates `terser` from 5.43.1 to 5.44.0
- [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terser/terser/compare/v5.43.1...v5.44.0)

Updates `three` from 0.179.1 to 0.180.0
- [Release notes](https://github.com/mrdoob/three.js/releases)
- [Commits](https://github.com/mrdoob/three.js/commits)

---
updated-dependencies:
- dependency-name: jest
  dependency-version: 30.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: jest-circus
  dependency-version: 30.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: jest-cli
  dependency-version: 30.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: lint-staged
  dependency-version: 16.1.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: terser
  dependency-version: 5.44.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: three
  dependency-version: 0.180.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-04 14:36:20 +03:00
Rafael Gonzaga deac8ba5e1
docs: add incident response plan (#19841) 2025-09-03 17:06:16 +03:00
Alexander Akait 2d25a95d8c
fix: types 2025-09-02 17:12:40 +03:00
dependabot[bot] 1ffd83f416
chore(deps-dev): bump @stylistic/eslint-plugin (#19864)
Bumps the dependencies group with 1 update in the / directory: [@stylistic/eslint-plugin](https://github.com/eslint-stylistic/eslint-stylistic/tree/HEAD/packages/eslint-plugin).


Updates `@stylistic/eslint-plugin` from 5.2.3 to 5.3.1
- [Release notes](https://github.com/eslint-stylistic/eslint-stylistic/releases)
- [Changelog](https://github.com/eslint-stylistic/eslint-stylistic/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint-stylistic/eslint-stylistic/commits/v5.3.1/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@stylistic/eslint-plugin"
  dependency-version: 5.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-01 22:59:27 +03:00
hai-x a61dbf4a64
fix: prevent inlining modules that have `this` exports (#19856) 2025-09-01 20:16:34 +03:00
Xiao 62924911ad
fix: fix conflicts caused by multiple concatenateModules 2025-09-01 16:49:53 +03:00
Aviv Keller df563e9b50
ci: pin and format workflows (#19859) 2025-09-01 16:48:25 +03:00
Alexander Akait 21988d7ab4
chore(deps): update 2025-09-01 16:37:30 +03:00
Alexander Akait 092b3fe533
docs: update examples (#19860) 2025-09-01 16:17:24 +03:00
Alexander Akait 851abce98b
docs: fix example title (#19858) 2025-09-01 15:55:02 +03:00
hai-x 47e80b56a7
fix: improve CommonJs bundle to ESM library (#19847) 2025-09-01 15:25:54 +03:00
Alexander Akait 47f9786b81
refactor: remove unused code 2025-08-29 22:53:13 +03:00
Alexander Akait 6ae1330fb2
refactor: code (#19853) 2025-08-29 20:28:44 +03:00
hai-x 740f0f629b
refactor: types (#19855) 2025-08-29 20:28:23 +03:00
Alexander Akait fd2f76d845
docs: extract source map example (#19854) 2025-08-29 20:07:49 +03:00
Alexander Akait 76ce24f414
feat: make `experiments.layers` stable (#19852) 2025-08-29 16:08:28 +03:00
Alexander Akait 8092e42124
refactor: remove unused code (#19850) 2025-08-29 14:27:40 +03:00
Alexander Akait 8ea693e6a0
feat: make the `topLevelAwait` experiment stable (#19849) 2025-08-29 14:27:30 +03:00
Alexander Akait b843ea827b
fix: allow to have any properties in `experiments` to prevent validation errors when an experiment is stable 2025-08-28 20:44:33 +03:00
hai-x 6b313c950d
ci: node@24 latest (#19846) 2025-08-28 17:26:47 +03:00
Alexander Akait 488ba2ef1d
test: stability benchmarks (#19844) 2025-08-28 13:49:41 +03:00
Alexander Akait 79304704b5
fix: many types 2025-08-28 13:34:30 +03:00
Even Stensberg 5b0f260913
docs: fix mention correct project in the governance section (#19842) 2025-08-27 19:28:48 +03:00
Xiao 64ce283d76
feat: add `extractSourceMap` option to implement the capabilities of loading source maps by comment 2025-08-27 18:53:50 +03:00
dependabot[bot] bb98bb1470
chore(deps-dev): bump the dependencies group with 2 updates (#19840)
Bumps the dependencies group with 2 updates: [memfs](https://github.com/streamich/memfs) and [node-gyp](https://github.com/nodejs/node-gyp).


Updates `memfs` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/streamich/memfs/releases)
- [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/streamich/memfs/compare/v4.38.1...v4.38.2)

Updates `node-gyp` from 11.4.1 to 11.4.2
- [Release notes](https://github.com/nodejs/node-gyp/releases)
- [Changelog](https://github.com/nodejs/node-gyp/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nodejs/node-gyp/compare/v11.4.1...v11.4.2)

---
updated-dependencies:
- dependency-name: memfs
  dependency-version: 4.38.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: node-gyp
  dependency-version: 11.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-27 18:52:36 +03:00
Xiao d224b7b334
feat: add `snapshot.contextModule `to configure snapshots for context modules 2025-08-25 22:16:48 +03:00