chore(deps): bump glob-parent and webpack

Open dependabot[bot] opened this issue 3 years ago • 0 comments

Bumps glob-parent to 5.1.2 and updates ancestor dependency webpack. These dependencies need to be updated together.

Updates glob-parent from 3.1.0 to 5.1.2

Release notes

v5.1.2

Bug Fixes

eliminate ReDoS (#36) (f923116)

v5.1.1

Bug Fixes

unescape exclamation mark (#26) (a98874f)

v5.1.0

Features

add flipBackslashes option to disable auto conversion of slashes (closes #24) (#25) (eecf91d)

v5.0.0

⚠ BREAKING CHANGES

Drop support for node <6 & bump dependencies

Miscellaneous Chores

Drop support for node <6 & bump dependencies (896c0c0)

v4.0.0

⚠ BREAKING CHANGES

question marks are valid path characters on Windows so avoid flagging as a glob when alone

Update is-glob dependency

Features

hoist regexps and strings for performance gains (4a80667)

question marks are valid path characters on Windows so avoid flagging as a glob when alone (2a551dd)

Update is-glob dependency (e41fcd8)

Changelog

Sourced from glob-parent's changelog.

5.1.2 (2021-03-06)

Bug Fixes

eliminate ReDoS (#36) (f923116)

6.0.2 (2021-09-29)

Bug Fixes

Improve performance (#53) (843f8de)

6.0.1 (2021-07-20)

Bug Fixes

Resolve ReDoS vulnerability from CVE-2021-35065 (#49) (3e9f04a)

6.0.0 (2021-05-03)

⚠ BREAKING CHANGES

Correct mishandled escaped path separators (#34)

upgrade scaffold, dropping node <10 support

Bug Fixes

Correct mishandled escaped path separators (#34) (32f6d52), closes #32

Miscellaneous Chores

upgrade scaffold, dropping node <10 support (e83d0c5)

5.1.1 (2021-01-27)

Bug Fixes

unescape exclamation mark (#26) (a98874f)

5.1.0 (2021-01-27)

Features

add flipBackslashes option to disable auto conversion of slashes (closes #24) (#25) (eecf91d)

5.0.0 (2021-01-27)

⚠ BREAKING CHANGES

Drop support for node <6 & bump dependencies

... (truncated)

Commits

eb2c439 chore: update changelog
12bcb6c chore: release 5.1.2
f923116 fix: eliminate ReDoS (#36)
0b014a7 chore: add JSDoc returns information (#33)
2b24ebd chore: generate initial changelog
9b6e874 chore: release 5.1.1
749c35e ci: try wrapping the JOB_ID in a string
5d39def ci: attempt to switch to published coveralls
0b5b37f ci: put the npm step back in for only Windows
473f5d8 ci: update azure build images
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by phated, a new releaser for glob-parent since your current version.

Updates webpack from 4.46.0 to 5.74.0

Release notes

Sourced from webpack's releases.

v5.74.0

Features

add resolve.extensionAlias option which allows to alias extensions

This is useful when you are forced to add the .js extension to imports when the file really has a .ts extension (typescript + "type": "module")

add support for ES2022 features like static blocks

add Tree Shaking support for ProvidePlugin

Bugfixes

fix persistent cache when some build dependencies are on a different windows drive

make order of evaluation of side-effect-free modules deterministic between concatenated and non-concatenated modules

remove left-over from debugging in TLA/async modules runtime code

remove unneeded extra 1s timestamp offset during watching when files are actually untouched

This sometimes caused an additional second build which are not really needed

fix shareScope option for ModuleFederationPlugin

set "use-credentials" also for same origin scripts

Performance

Improve memory usage and performance of aggregating needed files/directories for watching

This affects rebuild performance

Extensibility

export HarmonyImportDependency for plugins

v5.73.0

Features

add options for default dynamicImportMode and prefetch and preload

add support for import { createRequire } from "module" in source code

Bugfixes

fix code generation of e. g. return"field"in Module

fix performance of large JSON modules

fix performance of async modules evaluation

Developer Experience

export PathData in typings

improve error messages with more details

v5.72.1

Bugfixes

fix __webpack_nonce__ with HMR

fix in operator in some cases

... (truncated)

Commits

8f87b50 5.74.0
3e1f244 Merge pull request #16071 from devinan/patch-1
c7e14e2 Merge pull request #15910 from ludofischer/fix-message
7b63346 Merge pull request #15627 from webpack/feat/issue-12441
402d152 Merge pull request #15642 from webpack/set-use-credentials-without-origin-check
fcb0e35 Merge pull request #15996 from webdiscus/main
6dc6a19 Merge pull request #16031 from evantd/main
52351a6 Merge pull request #16033 from varunsh-coder/token-perms
555915b Merge pull request #16065 from webpack/fix/issue-16054
d4cab5b Merge pull request #16077 from webpack/fix-scheme
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Oct 10 '22 20:10 dependabot[bot]