codecov-browser-extension icon indicating copy to clipboard operation
codecov-browser-extension copied to clipboard
verified publisher icon codecov

Bump the npm_and_yarn group with 3 updates

Open dependabot[bot] opened this issue 1 year ago • 1 comments

Bumps the npm_and_yarn group with 3 updates: webpack, braces and serialize-javascript.

Updates webpack from 5.76.0 to 5.98.0

Release notes

Sourced from webpack's releases.

v5.98.0

Fixes

Performance Improvements

Chores

Features

Continuous Integration

New Contributors

Full Changelog: https://github.com/webpack/webpack/compare/v5.97.1...v5.98.0

v5.97.1

Bug Fixes

  • Performance regression
  • Sub define key should't be renamed when it's a defined variable

v5.97.0

Bug Fixes

  • Don't crash with filesystem cache and unknown scheme
  • Generate a valid code when output.iife is true and output.library.type is umd
  • Fixed conflict variable name with concatenate modules and runtime code
  • Merge duplicate chunks before

... (truncated)

Commits
  • f1bdec5 5.98.0
  • 9579f22 chore: adopt the new webpack governance model (#18804)
  • a1edb20 fix: node async wasm loader now use output.module to determinate code gener...
  • e55b08b perf: use startsWith for matching instead of converting the string to a regex
  • 6e14dba chore: fix typo (#19205)
  • f123ce5 fix: respect output.charset everywhere (#19202)
  • af20c7b fix: strip blob: protocol when public path is auto (#19199)
  • 80826c5 feat: implement /* webpackIgnore: true */ for require.resolve (#19201)
  • ac6ffca fix(types): correct BuildInfo and BuildMeta type definitions (#19200)
  • 8ac130a ci: fix
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by thelarkinn, a new releaser for webpack since your current version.


Updates braces from 3.0.2 to 3.0.3

Commits

Updates serialize-javascript from 6.0.0 to 6.0.2

Release notes

Sourced from serialize-javascript's releases.

v6.0.2

  • fix: serialize URL string contents to prevent XSS (#173) f27d65d
  • Bump @​babel/traverse from 7.10.1 to 7.23.7 (#171) 02499c0
  • docs: update readme with URL support (#146) 0d88527
  • chore: update node version and lock file e2a3a91
  • fix typo (#164) 5a1fa64

https://github.com/yahoo/serialize-javascript/compare/v6.0.1...v6.0.2

v6.0.1

What's Changed

New Contributors

Full Changelog: https://github.com/yahoo/serialize-javascript/compare/v6.0.0...v6.0.1

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the Security Alerts page.

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

dependabot[bot] avatar Feb 23 '25 01:02 dependabot[bot]

Bundle Report

Changes will decrease total bundle size by 1.95kB (-0.31%) :arrow_down:. This is within the configured threshold :white_check_mark:

Detailed changes
Bundle name Size Change
codecov-browser-extension-array-push 633.5kB -1.95kB (-0.31%) :arrow_down:

Affected Assets, Files, and Routes:

view changes for bundle: codecov-browser-extension-array-push

Assets Changed:

Asset Name Size Change Total Size Change (%)
vendor.js -1.37kB 379.66kB -0.36%
background.js -520 bytes 197.15kB -0.26%
popup.js -41 bytes 25.87kB -0.16%
githubFile.js -26 bytes 9.89kB -0.26%
githubPR.js 10 bytes 5.22kB 0.19%

codecov[bot] avatar Feb 23 '25 01:02 codecov[bot]

@dependabot rebase

ElioDiNino avatar Jun 10 '25 13:06 ElioDiNino

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot[bot] avatar Jun 10 '25 13:06 dependabot[bot]