Bump json5, copy-webpack-plugin, terser-webpack-plugin, ts-loader, webpack and webpack-cli

[dependabot[bot]]

Bumps json5 to 2.2.3 and updates ancestor dependencies json5, copy-webpack-plugin, terser-webpack-plugin, ts-loader, webpack and webpack-cli. These dependencies need to be updated together.

Updates json5 from 2.2.0 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

• Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

• Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

• Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

• Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

• Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

• Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

Commits

• c3a7524 2.2.3
• 94fd06d docs: update CHANGELOG for v2.2.3
• 3b8cebf docs(security): use GitHub security advisories
• f0fd9e1 docs: publish a security policy
• 6a91a05 docs(template): bug -> bug report
• 14f8cb1 2.2.2
• 10cc7ca docs: update CHANGELOG for v2.2.2
• 7774c10 fix: add proto to objects and arrays
• edde30a Readme: slight tweak to intro
• 97286f8 Improve example in readme
• Additional commits viewable in compare view

Updates copy-webpack-plugin from 4.6.0 to 11.0.0

Release notes

Sourced from copy-webpack-plugin's releases.

v11.0.0

11.0.0 (2022-05-17)

⚠ BREAKING CHANGES

• minimum supported Node.js version is 14.15.0

v10.2.4

10.2.4 (2022-01-31)

Bug Fixes

• types (#666) (a1c2308)

v10.2.3

10.2.3 (2022-01-29)

Bug Fixes

• async to support (fd095fb)

v10.2.2

10.2.2 (2022-01-28)

Bug Fixes

• types (#664) (f58470e)

v10.2.1

10.2.1 (2022-01-20)

Bug Fixes

• types (#661) (324aecb)

v10.2.0

10.2.0 (2021-12-16)

Features

• removed cjs wrapper and generated types in commonjs format (export = and namespaces used in types), now you can directly use exported types (#654) (5901006)

v10.1.0

10.1.0 (2021-12-10)

... (truncated)

Changelog

Sourced from copy-webpack-plugin's changelog.

11.0.0 (2022-05-17)

⚠ BREAKING CHANGES

• minimum supported Node.js version is 14.15.0

build

• drop node v12 (#691) (675c676)

10.2.4 (2022-01-31)

Bug Fixes

• types (#666) (a1c2308)

10.2.3 (2022-01-29)

Bug Fixes

• async to support (fd095fb)

10.2.2 (2022-01-28)

Bug Fixes

• types (#664) (f58470e)

10.2.1 (2022-01-20)

Bug Fixes

• types (#661) (324aecb)

10.2.0 (2021-12-16)

Features

• removed cjs wrapper and generated types in commonjs format (export = and namespaces used in types), now you can directly use exported types (#654) (5901006)

10.1.0 (2021-12-10)

Features

... (truncated)

Commits

• f3b2c24 chore(release): 11.0.0
• 8424ca8 chore(deps): regenerate lock file (#693)
• 675c676 build: drop node v12 (#691)
• a2b1f19 chore: update gitub actions (#692)
• 238c062 chore: upgrade dependencies to the latest version (#688)
• e27006e ci: remove node v17 (#687)
• e50d708 chore: add node 18 to workflow (#686)
• f1a91e6 ci: don't install webpack again (#680)
• 64cf06f docs: add path string to options signature (#683)
• 4b18a6b docs: improve readme
• Additional commits viewable in compare view

Updates terser-webpack-plugin from 1.4.5 to 5.3.6

Release notes

Sourced from terser-webpack-plugin's releases.

v5.3.6

5.3.6 (2022-08-29)

Bug Fixes

• allow disable compress options for terser and swc (#514) (52c1aef)

v5.3.5

5.3.5 (2022-08-16)

Bug Fixes

• types (#512) (5c13ba7)

v5.3.4

5.3.4 (2022-08-12)

Bug Fixes

• respect environment options for terser and swc compress options (#509) (29bbc3a)

v5.3.3

5.3.3 (2022-06-02)

Fixes

• fix broken release

v5.3.2

5.3.2 (2022-06-02)

Chore

• switched to @jridgewell/source-map for error generation

v5.3.1

5.3.1 (2022-02-01)

Bug Fixes

• use TerserECMA type to fix type mismatch (#471) (68920cd)

v5.3.0

5.3.0 (2021-12-16)

... (truncated)

Changelog

Sourced from terser-webpack-plugin's changelog.

5.3.6 (2022-08-29)

Bug Fixes

• allow disable compress options for terser and swc (#514) (52c1aef)

5.3.5 (2022-08-16)

Bug Fixes

• types (#512) (5c13ba7)

5.3.4 (2022-08-12)

Bug Fixes

• respect environment options for terser and swc compress options (#509) (29bbc3a)

5.3.3 (2022-06-02)

Fixes

• fix broken release

5.3.2 (2022-06-02)

Chore

• switched to @jridgewell/source-map for error generation

5.3.1 (2022-02-01)

Bug Fixes

• use TerserECMA type to fix type mismatch (#471) (68920cd)

5.3.0 (2021-12-16)

Features

• removed cjs wrapper and generated types in commonjs format (export = and namespaces used in types), now you can directly use exported types (#463) (34fadde)

5.2.5 (2021-11-08)

... (truncated)

Commits

• 9718859 chore(release): 5.3.6
• 52c1aef fix: allow disable compress options for terser and swc (#514)
• c5a9d41 chore(release): 5.3.5
• 5c13ba7 fix: types (#512)
• 9ebedf2 ci: add job to cancel previous runs (#510)
• 9a6e47c chore(release): 5.3.4
• 29bbc3a fix: respect environment options for terser and swc compress options (#509)
• 64f2ff5 chore: update dependencies to the latest version (#508)
• d17562a ci: add GitHub token permissions for workflow (#505)
• 7515a5a chore(deps): update (#504)
• Additional commits viewable in compare view

Updates ts-loader from 5.4.5 to 9.4.2

Release notes

Sourced from ts-loader's releases.

v9.4.2

• Bug fix: Use custom transformer when building solution references #1025 - thanks @​feosuna1

9.4.1

• Hotfix: Disable enhanced-resolve - thanks @​manuth

v9.4.0

• Add Support for Resolving .cjs, .mjs, .cts and .mts Files #1503 - thanks @​manuth

v9.3.1

• Bug fix: Generate declaration files for js files if allowJs is set to true #1260 - thanks @​hediet and @​mvilliger

v9.3.0

• simplify configuration for fork-ts-checker-webpack-plugin - thanks @​piotr-oles

v9.2.9

• make v9 latest following v8 release - thanks @​johnnyreilly

v9.2.8

• Bug fix: support webpack 5 in ts-loader #1438 - thanks @​einatbar

v9.2.7

• cater for change in resolveTypeReferenceDirective API in TypeScript 4.7 #1421 - thanks @​johnnyreilly and @​cspotcode for inspiration in ts-node work here: TypeStrong/ts-node#1648

v9.2.6

• Docs fix for thread-loader / history - thanks @​johnnyreilly

v9.2.5

• Add function to get the latest program - thanks @​Zn4rK

v9.2.4

• Fix undefined configPath now falls back to default - thanks @​johnnyreilly

v9.2.3

• Fix error message for invalid getCustomTransformers modules - thanks @​blaky

v9.2.2

• Start consuming webpack loader types - thanks @​johnnyreilly
• Add webpack minimum version in peerDependencies - thanks @​afdev82

v9.2.1

• Make v9 latest in npm again - thanks @​johnnyreilly

v9.2.0

• Fixed impossibility to have several instances of ts-loader with different compiler options - thanks @​timocov

v9.1.2

• Fix removed files handling in watch mode - thanks @​gasnier

v9.1.1

... (truncated)

Changelog

Sourced from ts-loader's changelog.

9.4.2

• Bug fix: Use custom transformer when building solution references #1025 - thanks @​feosuna1

9.4.1

• Hotfix: Disable enhanced-resolve - thanks @​manuth

v9.4.0

• Add Support for Resolving .cjs, .mjs, .cts and .mts Files #1503 - thanks @​manuth

v9.3.1

• Bug fix: Generate declaration files for js files if allowJs is set to true #1260 - thanks @​hediet and @​mvilliger

v9.3.0

• simplify configuration for fork-ts-checker-webpack-plugin - thanks @​piotr-oles

v9.2.9

• make v9 latest following v8 release - thanks @​johnnyreilly

v9.2.8

• Bug fix: support webpack 5 in ts-loader #1438 - thanks @​einatbar

v9.2.7

• cater for change in resolveTypeReferenceDirective API in TypeScript 4.7 #1421 - thanks @​johnny_reilly and @​cspotcode for inspiration in ts-node work here: TypeStrong/ts-node#1648

v9.2.6

• Docs fix for thread-loader / history - thanks @​johnnyreilly

v9.2.5

• Add function to get the latest program - thanks @​Zn4rK

v9.2.4

• Fix undefined configPath now falls back to default - thanks @​johnnyreilly

v9.2.3

• Fix error message for invalid getCustomTransformers modules - thanks @​blaky

v9.2.2

• Start consuming webpack loader types - thanks @​johnnyreilly
• Add webpack minimum version in peerDependencies - thanks @​afdev82

... (truncated)

Commits

• 5e7220b Use custom transformer when building solution references (#1550)
• 87a9fff add missing comma in README.md (#1551)
• 620ee79 Typescript 4 9 (#1547)
• 3319b91 chore(deps): bump minimatch in /examples/project-references-example (#1530)
• 60e5784 Fix anchor jumping in README.md (#1521)
• 5c66d2b Update outdated LICENSE year (#1513)
• 64a4136 Bump terser from 4.8.0 to 4.8.1 in /examples/project-references-example (#1489)
• cf1d227 Bump lodash in /test/execution-tests/babel-codeSplitting (#1435)
• e76abb0 Add Tests and Remarks Concerning the New .cts And .mts File Extensions (#...
• d9fcbfd Hotfix: Disable enhanced-resolve (#1506)
• Additional commits viewable in compare view

Updates webpack from 4.46.0 to 5.75.0

Release notes

Sourced from webpack's releases.

v5.75.0

Bugfixes

• experiments.* normalize to false when opt-out
• avoid NaN%
• show the correct error when using a conflicting chunk name in code
• HMR code tests existance of window before trying to access it
• fix eval-nosources-* actually exclude sources
• fix race condition where no module is returned from processing module
• fix position of standalong semicolon in runtime code

Features

• add support for @import to extenal CSS when using experimental CSS in node
• add i64 support to the deprecated WASM implementation

Developer Experience

• expose EnableWasmLoadingPlugin
• add more typings
• generate getters instead of readonly properties in typings to allow overriding them

v5.74.0

Features

• add resolve.extensionAlias option which allows to alias extensions
  • This is useful when you are forced to add the .js extension to imports when the file really has a .ts extension (typescript + "type": "module")
• add support for ES2022 features like static blocks
• add Tree Shaking support for ProvidePlugin

Bugfixes

• fix persistent cache when some build dependencies are on a different windows drive
• make order of evaluation of side-effect-free modules deterministic between concatenated and non-concatenated modules
• remove left-over from debugging in TLA/async modules runtime code
• remove unneeded extra 1s timestamp offset during watching when files are actually untouched
  • This sometimes caused an additional second build which are not really needed
• fix shareScope option for ModuleFederationPlugin
• set "use-credentials" also for same origin scripts

Performance

• Improve memory usage and performance of aggregating needed files/directories for watching
  • This affects rebuild performance

Extensibility

• export HarmonyImportDependency for plugins

v5.73.0

... (truncated)

Commits

• 8241da7 5.75.0
• a91d923 Merge pull request #16458 from webpack/bugfix/semi
• 4608b11 Merge pull request #16457 from webpack/tooling/update
• dfdd0b0 Merge pull request #16122 from AnmolBansalDEV/bug/compilationCallback
• 23b9a1c Merge pull request #16167 from exposir/fixts
• 6f2c5e8 Merge pull request #16257 from alexzhang1030/calc_deterministic_verbose
• f7f36ad Merge pull request #16339 from Liamolucko/wasm-i64
• 761a542 fix semicolon position
• 2403a36 Merge pull request #16345 from ahabhgk/fix-eval-nosources
• c18203c update tooling
• Additional commits viewable in compare view

Updates webpack-cli from 3.3.12 to 5.0.1

Release notes

Sourced from webpack-cli's releases.

v5.0.1

5.0.1 (2022-12-05)

Bug Fixes

• make define-process-env-node-env alias node-env (#3514) (346a518)

v5.0.0

5.0.0 (2022-11-17)

Bug Fixes

• improve description of the --disable-interpret option (#3364) (bdb7e20)
• remove the redundant utils export (#3343) (a9ce5d0)
• respect NODE_PATH env variable (#3411) (83d1f58)
• show all CLI specific flags in the minimum help output (#3354) (35843e8)

Features

• failOnWarnings option (#3317) (c48c848)
• update commander to v9 (#3460) (6621c02)
• added the --define-process-env-node-env option
• update interpret to v3 and rechoir to v0.8
• add an option for preventing interpret (#3329) (c737383)

BREAKING CHANGES

• the minimum supported webpack version is v5.0.0 (#3342) (b1af0dc), closes #3342
• webpack-cli no longer supports webpack v4, the minimum supported version is webpack v5.0.0
• webpack-cli no longer supports webpack-dev-server v3, the minimum supported version is webpack-dev-server v4.0.0
• remove the migrate command (#3291) (56b43e4), closes #3291
• remove the --prefetch option in favor the PrefetchPlugin plugin
• remove the --node-env option in favor --define-process-env-node-env
• remove the --hot option in favor of directly using the HotModuleReplacement plugin (only for build command, for serve it will work)
• the behavior logic of the --entry option has been changed - previously it replaced your entries, now the option adds a specified entry, if you want to return the previous behavior please use webpack --entry-reset --entry './src/my-entry.js'

v4.10.0

4.10.0 (2022-06-13)

Bug Fixes

• changeTime is already in milliseconds (#3198) (d390d32)
• improve parsing of --env flag (#3286) (402c0fe)

Features

• added types (8ec1375)

v4.9.2

4.9.2 (2022-01-24)

... (truncated)

Changelog

Sourced from webpack-cli's changelog.

5.0.1 (2022-12-05)

Bug Fixes

• make define-process-env-node-env alias node-env (#3514) (346a518)

5.0.0 (2022-11-17)

Bug Fixes

• improve description of the --disable-interpret option (#3364) (bdb7e20)
• remove the redundant utils export (#3343) (a9ce5d0)
• respect NODE_PATH env variable (#3411) (83d1f58)
• show all CLI specific flags in the minimum help output (#3354) (35843e8)

Features

• failOnWarnings option (#3317) (c48c848)
• update commander to v9 (#3460) (6621c02)
• added the --define-process-env-node-env option
• update interpret to v3 and rechoir to v0.8
• add an option for preventing interpret (#3329) (c737383)

BREAKING CHANGES

• the minimum supported webpack version is v5.0.0 (#3342) (b1af0dc), closes #3342
• webpack-cli no longer supports webpack v4, the minimum supported version is webpack v5.0.0
• webpack-cli no longer supports webpack-dev-server v3, the minimum supported version is webpack-dev-server v4.0.0
• remove the migrate command (#3291) (56b43e4), closes #3291
• remove the --prefetch option in favor the PrefetchPlugin plugin
• remove the --node-env option in favor --define-process-env-node-env
• remove the --hot option in favor of directly using the HotModuleReplacement plugin (only for build command, for serve it will work)
• the behavior logic of the --entry option has been changed - previously it replaced your entries, now the option adds a specified entry, if you want to return the previous behavior please use webpack --entry-reset --entry './src/my-entry.js'

4.10.0 (2022-06-13)

Bug Fixes

• changeTime is already in milliseconds (#3198) (d390d32)
• improve parsing of --env flag (#3286) (402c0fe)

Features

• added types (8ec1375)

4.9.2 (2022-01-24)

Bug Fixes

• respect negatedDescription for flags from schema (#3102) (463b731)

... (truncated)

Commits

• 4a0f893 chore(release): publish new version
• 9de982c chore: fix cspell
• 32d26c8 chore(deps-dev): bump cspell from 6.15.1 to 6.16.0 (#3517)
• 2788bf9 chore(deps-dev): bump eslint from 8.28.0 to 8.29.0 (#3516)
• ac88ee4 chore(deps-dev): bump lint-staged from 13.0.4 to 13.1.0 (#3515)
• 346a518 fix: make define-process-env-node-env alias node-env (#3514)
• 3ec7b16 chore(deps): bump yeoman-environment from 3.12.1 to 3.13.0 (#3508)
• c8adfa6 chore(deps-dev): bump @​types/node from 18.11.9 to 18.11.10 (#3513)
• 0ad8cc2 chore(deps-dev): bump cspell from 6.15.0 to 6.15.1 (#3512)
• d30f261 chore(deps-dev): bump ts-loader from 9.4.1 to 9.4.2 (#3511)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.