chore(deps-dev): bump webpack from 5.51.1 to 5.79.0

[dependabot[bot]]

Bumps webpack from 5.51.1 to 5.79.0.

Release notes

Sourced from webpack's releases.

v5.79.0

New Features

• webpack will now support simple destructuring scenarios for treeshaking namespaced imports and DefinePlugin by @​vankop in webpack/webpack#16941

Bugfixes

• Truncate extremely long module names in DefaultStatsPrinter by @​snitin315 in webpack/webpack#16882
• Add [contenthash] template support in DllPlugin's name option by @​snitin315 in webpack/webpack#16935
• Fixed a bug where readRecords compiler hook was causing hangs in conjunction with the ReadRecordsPlugin by @​snitin315 & @​zookatron in webpack/webpack#16944
• webpack can now consume ESM bundles generated by webpack's esm output support by @​vankop in webpack/webpack#15608
• [CSS] - webpack now respects CSS's case-insensitivity with atTags like @MEDIA by @​alexander-akait in webpack/webpack#16915
• [CSS] - Fixes a bug where crossOriginLoading anonymous would not work when loading styles by @​chenjiahan in webpack/webpack#16925

Developer Experience

• Fix broken links and typos found in examples by @​snitin315 in webpack/webpack#16937
• Export more Externals Option types by @​snitin315 in webpack/webpack#12774

Contributor Experience

• Add new test case for ModuleFederationPlugin usage with shareScope option by @​snitin315 in webpack/webpack#16943
• Bump core-js from 3.20.3 to 3.30.0 by @​dependabot in webpack/webpack#16905
• Update all applicable local dependencies and devDependencies by @​alexander-akait in webpack/webpack#16919, webpack/webpack#16924, webpack/webpack#16936, webpack/webpack#16968
• Update to Jest 29 by @​alexander-akait in webpack/webpack#16947

New Contributors

• @​chenjiahan made their first contribution in webpack/webpack#16925
• @​karlhorky made their first contribution in webpack/webpack#16419
• @​zookatron made their first contribution in webpack/webpack#16301

Full Changelog: https://github.com/webpack/webpack/compare/v5.78.0...v5.79.0

v5.78.0

Features

• Implement amdContainer support for AMD libraries (Fixes #16561) by @​long76 in webpack/webpack#16562

Bugfixes

• [CSS] - Nested atRule's @media or @supports now properly are replaced with unique identifiers by @​noreiller in webpack/webpack#15812
• [CSS] - Fix bug where closing parenthesis in CSS were not properly parsed and compiled by @​janlent1 in webpack/webpack#16864
• Fix an issue where oneOf rule has been picked multiple times by @​xiaoxiaojx in webpack/webpack#16477
• Add createRequire support for node:module prefix by @​alexander-akait in webpack/webpack#16904
• Fix bug where self-referencing a package in a shared module failed by @​weareoutman in webpack/webpack#16685

Performance

• Make ErrorHelpers named functions; Add types by @​TheLarkInn in webpack/webpack#16893
• Introduce ModuleTypeConstants for plugins by @​TheLarkInn in webpack/webpack#16896
• Refactor memory footprint in string usages for multiple plugins by @​TheLarkInn in webpack/webpack#16894
• Add more module type constants, use them across codebase by @​TheLarkInn in webpack/webpack#16898

Contributor Experience

• Implement default PR Template to use GitHub Copilot for PR's integration and fix template name usage by @​geromegrignon in webpack/webpack#16890
• ci: update actions/cache to v3 by @​armujahid in webpack/webpack#16462

... (truncated)

Commits

• ecdcc1a 5.79.0
• c07ca8e Merge pull request #15608 from webpack/fix/consume-esm-bundled-library
• 3b8c9c6 Merge pull request #16419 from karlhorky/patch-1
• a9ea0d9 Merge pull request #16915 from webpack/fix-case-sensitivity-in-css
• 69d9c40 Merge pull request #16944 from snitin315/fix/read-records-callback
• 66f6472 Merge pull request #12774 from snitin315/export-more-types
• 96c5d21 Merge pull request #16882 from snitin315/limit-identifier-length
• 7f08e4d Merge pull request #16925 from chenjiahan/fix/css_cross_origin_loading
• ee1a267 Merge pull request #16935 from snitin315/fix/dll-plugin-contenthash
• 4cacd7e Merge pull request #16941 from webpack/feat/destructuring-assignment
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by thelarkinn, a new releaser for webpack since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security[bot]]

New dependency changes detected. Learn more about Socket for GitHub ↗︎

---

🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore [email protected] bar@* or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]

⚠️ Shell access

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.

Package	Module	Location	Source
[email protected] (upgraded)	child_process	bin/webpack.js	package.json via [email protected]

⚠️ Uses eval

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Avoid packages that use eval, since this could potentially execute any code.

Package	Eval Type	Location	Source
[email protected] (upgraded)	eval	dist/bundle.min.js	package.json via [email protected]
[email protected] (upgraded)	eval	dist/bundle.min.js	package.json via [email protected]
[email protected] (upgraded)	eval	dist/bundle.min.js	package.json via [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]

Pull request alert summary

Issue	Status
Install scripts	✅ 0 issues
Native code	✅ 0 issues
Bin script confusion	✅ 0 issues
Bin script shell injection	✅ 0 issues
Shell access	⚠️ 1 issue
Uses eval	⚠️ 3 issues
Unresolved require	✅ 0 issues
Invalid package.json	✅ 0 issues
HTTP dependency	✅ 0 issues
Git dependency	✅ 0 issues
GitHub dependency	✅ 0 issues
New author	✅ 0 issues
Potential typo squat	✅ 0 issues
Known Malware	✅ 0 issues
Telemetry	✅ 0 issues
Protestware/Troll package	✅ 0 issues

---

📊 Modified Dependency Overview:

🚮 Removed packages: [email protected]