chore(deps-dev): Bump webpack from 5.76.0 to 5.91.0

[dependabot[bot]]

Bumps webpack from 5.76.0 to 5.91.0.

Release notes

Sourced from webpack's releases.

v5.91.0

Bug Fixes

• Deserializer for ignored modules doesn't crash
• Allow the unsafeCache option to be a proxy object
• Normalize the snapshot.unmanagedPaths option
• Fixed fs types
• Fixed resolve's plugins types
• Fixed wrongly calculate postOrderIndex
• Fixed watching types
• Output import attrbiutes/import assertions for external JS imports
• Throw an error when DllPlugin needs to generate multiple manifest files, but the path is the same
• [CSS] Output layer/supports/media for external CSS imports

New Features

• Allow to customize the stage of BannerPlugin
• [CSS] Support CSS exports convention
• [CSS] support CSS local ident name
• [CSS] Support __webpack_nonce__ for CSS chunks
• [CSS] Support fetchPriority for CSS chunks
• [CSS] Allow to use LZW to compress css head meta (enabled in the production mode by default)
• [CSS] Support prefetch/preload for CSS chunks

v5.90.3

Bug Fixes

• don't mangle when destructuring a reexport
• types for Stats.toJson() and Stats.toString()
• many internal types
• [CSS] clean up export css local vars

Perf

• simplify and optimize chunk graph creation

v5.90.2

Bug Fixes

• use Math.imul in fnv1a32 to avoid loss of precision, directly hash UTF16 values
• the setStatus() of the HMR module should not return an array, which may cause infinite recursion
• __webpack_exports_info__.xxx.canMangle shouldn't always same as default
• mangle export with destructuring
• use new runtime to reconsider skipped connections activeState
• make dynamic import optional in try/catch
• improve auto publicPath detection

Dependencies & Maintenance

• improve CI setup and include Node.js@21

... (truncated)

Commits

• 60daca5 chore(release): 5.91.0
• 8dad9ce chore(deps-dev): bump @​babel/preset-react from 7.23.3 to 7.24.1
• a3229f9 chore(deps-dev): bump @​babel/core from 7.24.0 to 7.24.1
• 40c2e44 chore(deps-dev): bump @​types/node from 20.11.29 to 20.11.30
• a04faba chore(deps-dev): bump memfs from 4.7.7 to 4.8.0
• 8f22221 chore(deps): bump es-module-lexer from 1.4.1 to 1.4.2
• 8df6912 chore(deps): bump es-module-lexer from 1.4.1 to 1.4.2
• 711c618 chore(deps-dev): bump memfs from 4.7.7 to 4.8.0
• c462bb3 chore(deps-dev): bump @​types/node from 20.11.29 to 20.11.30
• f0d3e3e chore(deps-dev): bump @​babel/preset-react from 7.23.3 to 7.24.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security[bot]]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@types/[email protected]	None	0	25.7 kB	types
npm/@webassemblyjs/[email protected]	None	+5	431 kB	xtuc
npm/@webassemblyjs/[email protected]	None	+7	391 kB	xtuc
npm/[email protected]	environment, filesystem Transitive: shell	+6	2.41 MB	ai
npm/[email protected]	unsafe	0	210 kB	evilebottnawi
npm/[email protected]	environment	+2	190 kB	evilebottnawi
npm/[email protected]	environment, filesystem, network, unsafe Transitive: eval	+33	9.48 MB	evilebottnawi

🚮 Removed packages: npm/@types/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.