Skip to content

Update dependency webpack to v5.110.2 - #2471

Merged
openshift-ci[bot] merged 1 commit into
release-4.19from
konflux/mintmaker/release-4.19/webpack-5.x
Sep 14, 2026
Merged

Update dependency webpack to v5.110.2#2471
openshift-ci[bot] merged 1 commit into
release-4.19from
konflux/mintmaker/release-4.19/webpack-5.x

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
webpack 5.109.25.110.2 age confidence

Release Notes

webpack/webpack (webpack)

v5.110.2

Compare Source

Patch Changes

v5.110.1

Compare Source

Patch Changes

v5.110.0

Compare Source

Minor Changes
  • Wrap concatenated modules in lazy __webpack_require__.cw accessors and inline require(), keeping a wrapped body's names and side effects intact. (by @​hai-x in #​21519)

  • Add performance hints reporting what a build costs: duplicate packages and modules, circular dependencies, broad contexts, large modules and chunks, hotspots, eval, missing PURE annotations, polyfills, redundant dynamic imports, OS-dependent rules, cache effectiveness, how chunks load, what splitting refused, why an optimization was skipped, and rules, defines, externals, aliases and barrel reexports nothing uses. An oversized asset names its largest modules, and an entrypoint carrying the runtime recommends optimization.runtimeChunk. Enable every check not set individually with performance.all, report hints in stats only with performance.hints: "stats", and get them in a stable order that leaves the build hashes unchanged. (by @​alexander-akait in #​21841)

  • Add the descriptionRelativePath module rule condition. (by @​alexander-akait in #​21705)

  • Add OS-independent glob matching to module rules. (by @​alexander-akait in #​21771)

  • Report inner-graph, AMD and bare module bailouts in optimizationBailout. (by @​alexander-akait in #​21740)

  • Allow marking externals as side-effect-free with a sideEffects flag. (by @​alexander-akait in #​21712)

  • Give externals the original request of a context module element. (by @​alexander-akait in #​21780)

  • Add the externalsPresets.nodeModules preset with an allowlist option to externalize installed packages, replacing the webpack-node-externals plugin. (by @​alexander-akait in #​21569)

  • Add output.library.umdAmdContainer for an AMD-style loader branch in UMD. (by @​hai-x in #​21770)

  • Resolve @custom-media values that are true / false or name another custom media. (by @​alexander-akait in #​21624)

  • Add the __webpack_css_server_styles__ module variable to read the CSS collected while rendering without a DOM, and keep that CSS in the order the styles were applied. (by @​alexander-akait in #​21576)

  • Patch the HTML <head> in place on hot update instead of forcing a full reload, including when a <script> that never executed is removed. (by @​alexander-akait in #​21624)

  • Scope counter names in CSS modules; fix the counter() counter-style and animation timeline keywords. (by @​alexander-akait in #​21600)

  • Derive import defer / import source from the target and fix the source phase. (by @​alexander-akait in #​21810)

  • Emit analyzable ESM urls for chunks, assets, styles, workers and wasm. (by @​alexander-akait in #​21788)

  • Tree shake CommonJS: module.exports object literals, exports destructured from a require() binding, unused method requires, and unused side-effect-free require() calls and reexports. (by @​alexander-akait in #​21841)

  • Resolve relative entry baseUri values and bake one side of a hash cycle. (by @​alexander-akait in #​21750)

  • Minify CSS further, only where the document is unchanged: shorthands and box longhands, font-weight, <position> and font-stretch keywords, colors (polar, Lab and hsl() converted to hex), numbers, times, zero units, calc() and every math function the spec names folded over constants, selector lists, An+B, keyframe selectors, media-feature ranges, unicode-range, transition layers, display, transforms, gradients, font families, identical repeated declarations, and rules an identical later one makes dead. Abilities are read off the target browsers, vendorPrefixes adds and drops vendor prefixes for them, and rewriteCustomProperties shortens custom property values. Minification never changes whether a declaration parses, and beautifying keeps every rule. (by @​alexander-akait in #​21841)

  • Safely minify CSS (with source maps) and HTML assets when optimization.minimize is enabled, unless a minimizer is already configured for them, making only transformations an engine cannot tell apart. Every rewrite is named as an option, so it can be switched off. (by @​alexander-akait in #​21841)

  • Minify HTML further where the parsed document is unchanged: drop redundant quotes, whitespace nothing renders, escapes text does not need, implied tags, optional end tags nothing prints behind, empty attributes and nested empty elements; fold enumerated values and casing; normalize each attribute against the element it is on; and rewrite style, token lists, srcset, sizes, URL, integer and boolean attributes, viewport content, inline <style> and a JSON <script> body through their own grammars. Adds the optimization.minimize.html options collapseWhitespace, mergeStyles, minifyConditionalComments, minifySrcdoc, preserveComments, removeEmptyAttributes, removeEmptyElements, removeImpliedTags, removeRedundantAttributes, sortAttributes and sortTokenLists, and keeps an end tag the parent, the next element or the adoption agency would otherwise restructure the tree over. (by @​alexander-akait in #​21841)

  • Suggest the closest name or a casing fix anywhere in a failed request. (by @​alexander-akait in #​21727)

  • Add aggregated shutdown hook to MultiCompiler. (by @​bjohansebas in #​21578)

  • Report which compilers changed on the MultiCompiler done hook. (by @​bjohansebas in #​21580)

  • Add [containedpath]/[containedfile] placeholders, used for [path]/[file] of asset and html modules with experiments.futureDefaults. (by @​alexander-akait in #​21592)

  • Support an object for an entry's html that overrides output.html per option. (by @​alexander-akait in #​21574)

  • Configure or exclude each asset type's minifier via optimization.minimize. (by @​alexander-akait in #​21663)

  • Support printing CSS and HTML beautified as well as minified. (by @​alexander-akait in #​21660)

  • Add renderEmbeddedSource, and minify what it offers out of the box. (by @​alexander-akait in #​21830)

  • Report bindings named eval, arguments or reserved words in ES module output. (by @​alexander-akait in #​21567)

  • Emit no development source map for module libraries, or any with futureDefaults. (by @​alexander-akait in #​21839)

  • Speed up builds and cut memory: faster CSS, HTML and JavaScript parsing and minification, a built-in scope analyzer replacing eslint-scope, faster dependency hot paths, module diagnostics, CommonJS export scanning and concatenated module renaming, runtime modules, parsers, generators and dependencies loaded only when used, one file watcher pool shared between MultiCompiler children, and lower parser, graph and startup memory. (by @​alexander-akait in #​21841)

  • Improve tree-shaking for a namespace reexported as default, and fix import d from "./mod"; d.member reading undefined in that case. (by @​alexander-akait in #​21841)

  • Warn on cross-kind CSS module export conflicts and let the class win. (by @​alexander-akait in #​21538)

  • Add output.resourceHints.dedupe to skip prefetch links for already preloaded/prefetched chunks. (by @​alexander-akait in #​21386)

Patch Changes
  • Let a memory-cache etag mismatch fall through to the file cache instead of reporting a miss. (by @​alexander-akait in #​21624)

  • Determine provided exports in dependency order, so a build's module hashes no longer depend on what the persistent cache held. (by @​alexander-akait in #​21630)

  • Emit no dead module and no failing require for an asset-url external. (by @​alexander-akait in #​21713)

  • Fix names, hidden devtools and cache reuse for CSS maps inlined into JS. (by @​alexander-akait in #​21558)

  • Follow the HTML spec more closely when parsing and printing: frameset content, quirks paragraphs and selects, <![CDATA[ outside foreign content as a bogus comment, <?target data?> as a processing instruction, </> dropped, comment data and DOCTYPE identifiers read from the tokenizer states, attributes merged from a repeated <html>/<body> tag, legacy JavaScript script types, void keygen and font format detection — and hand back the tree a parsed document was built from when printing it. (by @​alexander-akait in #​21841)

  • Clear a Watching's blocked flag when its build starts, so it reports only a child actually waiting for its MultiCompiler parent. (by @​bjohansebas in #​21639)

  • Fix AMD define() output using the wrong module and exports argument names. (by @​hai-x in #​21814)

  • Fix ReferenceError from import.meta.main using the wrong module argument. (by @​hai-x in #​21620)

  • Leave a @namespace URI alone instead of resolving and rewriting it as an asset. (by @​alexander-akait in #​21658)

  • Resolve escaped CSS names, and scope a grid area cell name as one name. (by @​alexander-akait in #​21665)

  • Track exports usage of side-effect-free modules an active import() evaluates. (by @​hai-x in #​21623)

  • Resolve absolute symlink targets and treat an unreadable context as missing. (by @​alexander-akait in #​21647)

  • Fix corrupted icon URLs in a .webmanifest with a BOM or non-ASCII text. (by @​alexander-akait in #​21655)

  • Respect strictThisContextOnImports for require() member calls. (by @​hai-x in #​21601)

  • Fix import.meta, [object Object] asset urls and crashes in build-time executed modules. (by @​alexander-akait in #​21841)

  • Inherit sideEffects past a type-only nested package.json for files under node_modules. (by @​xiaoxiaojx in #​21686)

  • Do not fail directory creation when the file system reports it already exists. (by @​alexander-akait in #​21698)

  • Fix top-level using and await using declarations in modules. (by @​alexander-akait in #​21557)

  • Fix DefinePlugin optional chains reading an undefined object member. (by @​lazerg in #​21823)

  • Fix MultiCompiler: compute the common outputPath by whole path segments, run again after a dependency validation failure, and recover watch mode from a fatal child error without leaking watchings. (by @​alexander-akait in #​21841)

  • Keep a nested bundle's runtime tables separate when bundling webpack output. (by @​alexander-akait in #​21568)

  • Keep the runtime out of strict mode when output.globalObject reads this. (by @​alexander-akait in #​21715)

  • Run an even-priority __webpack_require__.O handler without waiting. (by @​alexander-akait in #​21803)

  • Treat top-level this in a classic worker entry as its global scope. (by @​alexander-akait in #​21720)

  • Rehash runtime modules whose code changes under a content-named filename. (by @​alexander-akait in #​21828)

  • Fix namespace object reexports and string export names in module library output and emit a CommonJS entry's default as export default. (by @​alexander-akait in #​21589)

  • Keep tree-shaken JSON arrays as arrays when a prototype property is read. (by @​hai-x in #​21599)

  • Generate every CSS and HTML lookup table into lib/{css,html}/data.js from mdn-data, color-name and the spec IDL — including the value-type facts read out of the CSS value-definition grammars — leaving both syntax.js files algorithm only. (by @​alexander-akait in #​21841)

  • Support UNC paths in module and context replacement plugins. (by @​avivkeller in #​21645)

  • Emit less runtime code: shorter syntax where output.environment allows, no IIFE for a RuntimeModule without locals, no unread __webpack_esm_id__ and exports.id chunk exports, and an ESM entry chunk installing its own modules from its local bindings instead of importing itself. (by @​alexander-akait in #​21841)

  • Release the compilation and file system caches retained after compiler.close(). (by @​alexander-akait in #​21603)


Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • Every minute (* * * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Summary by CodeRabbit

  • Chores
    • Updated the bundled build tooling to webpack 5.110.2 for improved maintenance and compatibility.

@coderabbitai

coderabbitai Bot commented Sep 11, 2026

Copy link
Copy Markdown

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 7e6a9876-df5d-4376-8ab1-62339e234fa4

📥 Commits

Reviewing files that changed from the base of the PR and between c27aa19 and 8cf1565.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • package.json

Included review availability: Your plan provides up to 12 included reviews per hour; 7 remain after this review.


📝 Walkthrough

Walkthrough

The pull request updates the pinned webpack dependency in package.json from 5.109.2 to 5.110.2.

Changes

Webpack dependency update

Layer / File(s) Summary
Update webpack version
package.json
The pinned webpack dependency changes from 5.109.2 to 5.110.2.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Other

Suggested reviewers: sriroopar

Merge Risk: ⚪ Minimal · up to 8cf15

This is a synchronized webpack patch update with no identified merge-blocking risk.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the main change: updating the webpack dependency to version 5.110.2.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch konflux/mintmaker/release-4.19/webpack-5.x

Comment @coderabbitai help to get the list of available commands.

@openshift-ci
openshift-ci Bot requested review from kyoto and syedriko September 11, 2026 00:24
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-4.19/webpack-5.x branch from c27aa19 to 8cf1565 Compare September 14, 2026 00:22
@red-hat-konflux red-hat-konflux Bot changed the title Update dependency webpack to v5.110.1 Update dependency webpack to v5.110.2 Sep 14, 2026
@kyoto

kyoto commented Sep 14, 2026

Copy link
Copy Markdown
Member

/approve
/lgtm

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Sep 14, 2026
@openshift-ci

openshift-ci Bot commented Sep 14, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: kyoto

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Sep 14, 2026
@openshift-ci
openshift-ci Bot merged commit 1b171c6 into release-4.19 Sep 14, 2026
6 checks passed
@kyoto
kyoto deleted the konflux/mintmaker/release-4.19/webpack-5.x branch September 14, 2026 02:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant