Skip to content

pkg: Update build packages#4029

Merged
ntucker merged 1 commit into
masterfrom
renovate/build
Jul 12, 2026
Merged

pkg: Update build packages#4029
ntucker merged 1 commit into
masterfrom
renovate/build

Conversation

@renovate

@renovate renovate Bot commented Jul 12, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@babel/core (source) 7.29.67.29.7 age adoption passing confidence
webpack 5.107.25.108.4 age adoption passing confidence
webpack-dev-server 5.2.55.2.6 age adoption passing confidence

Release Notes

babel/babel (@​babel/core)

v7.29.7

Compare Source

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

webpack/webpack (webpack)

v5.108.4

Compare Source

Patch Changes

v5.108.3

Compare Source

Patch Changes

v5.108.2

Compare Source

Patch Changes

v5.108.1

Compare Source

Patch Changes
  • Fix invalid property access for escaped namespace imports with multi-character mangled export names. (by @​xiaoxiaojx in #​21280)

  • Add frames to ProfilingPlugin TracingStartedInBrowser event so the trace loads in Chrome DevTools. (by @​alexander-akait in #​21269)

v5.108.0

Compare Source

Minor Changes
  • Treat top-level await and import.meta as ES module markers, matching Node.js syntax detection so no explicit module type is needed. (by @​alexander-akait in #​21218)

  • Add a bun target that emits ESM and externalizes bun:* and node.js built-in modules. (by @​alexander-akait in #​21248)

  • Support CommonJS reexports via Object.defineProperty value and getter descriptors. (by @​alexander-akait in #​21129)

  • Support JSON Schema const when generating CLI flags from a schema. (by @​alexander-akait in #​21087)

  • Support JSON Schema if/then/else when generating CLI flags from a schema. (by @​alexander-akait in #​21087)

  • Skip import specifiers, require() and import() calls in dead conditional branches gated by inlined imported constants (isDEV ? A : B), evaluated via getCondition. (by @​hai-x in #​21136)

  • CSS localIdentName [hash] now resolves to the local ident hash (matching css-loader); use [modulehash] for the module hash. (by @​alexander-akait in #​21259)

  • Add CSS parser as option and resolve url() inside HTML style attributes. (by @​alexander-akait in #​21157)

  • Add dedicated module classes for all built-in module types. (by @​alexander-akait in #​21164)

  • Support .html/.css for the default ./src entry under the html/css experiments. (by @​alexander-akait in #​21039)

  • Add defineConfig helper for typed configuration files. (by @​alexander-akait in #​21169)

  • Add a deno target (with versions, e.g. deno, deno2, deno1.40) that emits ESM, resolves node.js built-ins via the required node: specifier, and keeps Deno's own import protocols (npm:, jsr:, node:, http(s)://) external. (by @​alexander-akait in #​21247)

  • Use module-import for electron externals when the target supports ESM. (by @​alexander-akait in #​21184)

  • Add output.environment.logicalAssignment to emit ||= in runtime code when the target supports logical assignment operators. (by @​bjohansebas in #​21219)

  • Resolve and rewrite asset URLs inside <iframe srcdoc> in HTML modules. (by @​bjohansebas in #​21226)

  • Add HMR support for HTML modules with body/title DOM patching on update. (by @​alexander-akait in #​21011)

  • Add css-url html source type extracting url() references from CSS-valued attributes. (by @​alexander-akait in #​21250)

  • Add module.parser.html.sources option to disable or customize URL-attribute extraction for HTML modules, with script / script-module / stylesheet / stylesheet-inline types for custom attributes (by @​alexander-akait in #​21022)

  • Add module.parser.html.template option to transform HTML module source before parsing. (by @​alexander-akait in #​21055)

  • Extract more source URLs in HTML modules (SVG, legacy and obsolete attributes). (by @​alexander-akait in #​21241)

  • Inline export default <const> when the default-exported value is a primitive constant. (by @​hai-x in #​21189)

  • Support optimization.inlineExports for better tree-shaking. (by @​hai-x in #​20973)

  • Re-encode inline hash digests ([contenthash]/[chunkhash]/[fullhash]/[modulehash]) from the full content hash, so they carry full entropy and work under optimization.realContentHash and in dynamically-loaded chunk filenames; also preserve leading zero bytes in base-N digests. (by @​alexander-akait in #​21267)

  • Allow tree-shaking unused calls to /*#__NO_SIDE_EFFECTS__*/-annotated (pure) exports across module boundaries. (by @​hai-x in #​20907)

  • Defer building unused re-export targets of side-effect-free barrel modules. (by @​hai-x in #​21165)

  • Keep export mangling enabled for modules whose namespace object is used as a whole value, by materializing a decoupled namespace object that keeps the original export names. (by @​alexander-akait in #​21234)

  • Add output.environment.let option (paired with target's let capability) and emit let/const instead of var in generated runtime code wherever it is safe. Bindings that may be wrapped in runtime-condition if blocks (harmony imports, ConcatenatedModule external imports) continue to use var to preserve function scoping. (by @​alexander-akait in #​21010)

  • Add output.html to emit an HTML file per entrypoint, injecting its JS/CSS chunks (including dependOn shared chunks). (by @​alexander-akait in #​21215)

  • Add module.parser.javascript.pureFunctions to mark top-level names as side-effect-free for tree shaking. (by @​hai-x in #​21063)

  • Add universal to compiler.platform, true for universal targets ("universal" or ["web", "node"]). (by @​bjohansebas in #​21252)

  • Add output.strictModuleResolution to gate the runtime MODULE_NOT_FOUND guard. (by @​hai-x in #​21067)

  • Support an inline digest in hash path placeholders, e.g. [contenthash:base64:8]. (by @​alexander-akait in #​21259)

  • Support [uniqueName] and its [uniquename] alias in template paths. (by @​alexander-akait in #​21155)

  • Support CSS in Node for universal targets, collecting styles for SSR. (by @​alexander-akait in #​21208)

  • Improve commonjs, node-commonjs and global externals for universal targets. (by @​alexander-akait in #​21187)

  • Add a universal target preset (browser + web worker + Node.js + Electron + NW.js) that always outputs ECMAScript modules. (by @​alexander-akait in #​21214)

  • Support new Worker(new URL(...)) in universal (node + web) targets by resolving the Worker constructor from worker_threads when no global Worker exists. (by @​alexander-akait in #​21195)

  • Add output.workerChunkFilename and entry.worker for worker chunk filenames. (by @​alexander-akait in #​21128)

Patch Changes
webpack/webpack-dev-server (webpack-dev-server)

v5.2.6

Compare Source

Patch Changes
  • fix: allow undefined as the Server constructor options argument again (by @​bjohansebas in #​5695)

    Restores accepting undefined (defaulting it to {}) for the options
    argument, so passing a webpack config's optional devServer field type-checks and works as before.

  • Protect the built-in state-changing routes (/webpack-dev-server/invalidate and /webpack-dev-server/open-editor) against cross-site request forgery. Requests are now checked with Sec-Fetch-Site (falling back to an Origin/Host comparison when it is absent), so a cross-site page can no longer trigger a rebuild or open a file in the editor. Same-origin requests, user-initiated navigations, and non-browser clients (e.g. curl) are unaffected. (by @​bjohansebas in #​5698)

  • Handle malformed Host and Origin header values gracefully when validating requests. (by @​bjohansebas in #​5699)


Configuration

📅 Schedule: (in timezone America/Chicago)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@vercel

vercel Bot commented Jul 12, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
docs-site Building Building Preview, Comment Jul 12, 2026 6:41pm

Request Review

@changeset-bot

changeset-bot Bot commented Jul 12, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 90982bd

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions

Copy link
Copy Markdown
Contributor

Size Change: +83 B (+0.1%)

Total Size: 81.2 kB

📦 View Changed
Filename Size Change
examples/test-bundlesize/dist/rdcClient.js 10.9 kB +25 B (+0.23%)
examples/test-bundlesize/dist/webpack-runtime.js 784 B +58 B (+7.99%) 🔍
ℹ️ View Unchanged
Filename Size Change
examples/test-bundlesize/dist/App.js 1.46 kB +2 B (+0.14%)
examples/test-bundlesize/dist/polyfill.js 307 B 0 B
examples/test-bundlesize/dist/rdcEndpoint.js 8.07 kB 0 B
examples/test-bundlesize/dist/react.js 59.7 kB 0 B

compressed-size-action

@codecov

codecov Bot commented Jul 12, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.21%. Comparing base (f1c0831) to head (90982bd).

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #4029   +/-   ##
=======================================
  Coverage   98.21%   98.21%           
=======================================
  Files         154      154           
  Lines        3024     3024           
  Branches      601      601           
=======================================
  Hits         2970     2970           
  Misses         11       11           
  Partials       43       43           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Benchmark React

Details
Benchmark suite Current: 90982bd Previous: 38dbb52 Ratio
data-client: getlist-100 138.89 ops/s (± 4.1%) 129.87 ops/s (± 4.0%) 0.94
data-client: getlist-500 42.19 ops/s (± 5.3%) 41.07 ops/s (± 5.9%) 0.97
data-client: update-entity 333.33 ops/s (± 8.6%) 322.58 ops/s (± 9.1%) 0.97
data-client: update-user 317.54 ops/s (± 7.3%) 312.5 ops/s (± 4.8%) 0.98
data-client: getlist-500-sorted 44.64 ops/s (± 10.4%) 43.86 ops/s (± 10.3%) 0.98
data-client: update-entity-sorted 289.92 ops/s (± 5.7%) 303.03 ops/s (± 2.8%) 1.05
data-client: update-entity-multi-view 312.5 ops/s (± 6.1%) 285.71 ops/s (± 7.1%) 0.91
data-client: list-detail-switch-10 6.87 ops/s (± 9.3%) 8.2 ops/s (± 9.2%) 1.19
data-client: update-user-10000 72.46 ops/s (± 12.1%) 68.03 ops/s (± 12.4%) 0.94
data-client: invalidate-and-resolve 35.21 ops/s (± 6.0%) 35.78 ops/s (± 5.2%) 1.02
data-client: unshift-item 208.33 ops/s (± 5.6%) 200 ops/s (± 4.9%) 0.96
data-client: delete-item 274.02 ops/s (± 4.3%) 263.16 ops/s (± 6.6%) 0.96
data-client: move-item 163.93 ops/s (± 9.6%) 162.61 ops/s (± 8.0%) 0.99

This comment was automatically generated by workflow using github-action-benchmark.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Benchmark

Details
Benchmark suite Current: 90982bd Previous: 38dbb52 Ratio
normalizeLong 435 ops/sec (±4.28%) 439 ops/sec (±3.61%) 1.01
normalizeLong Values 405 ops/sec (±0.60%) 401 ops/sec (±0.81%) 0.99
normalizeLong Scalar 366 ops/sec (±4.09%) 357 ops/sec (±3.26%) 0.98
normalizeLong Scalar update 900 ops/sec (±1.62%) 895 ops/sec (±0.11%) 0.99
denormalizeLong 237 ops/sec (±6.50%) 235 ops/sec (±5.88%) 0.99
denormalizeLong Values 226 ops/sec (±5.22%) 225 ops/sec (±3.40%) 1.00
denormalizeLong donotcache 1001 ops/sec (±1.12%) 1074 ops/sec (±0.66%) 1.07
denormalizeLong Values donotcache 756 ops/sec (±0.13%) 769 ops/sec (±0.17%) 1.02
denormalizeLong Scalar donotcache 1035 ops/sec (±0.25%) 1151 ops/sec (±0.33%) 1.11
denormalizeShort donotcache 500x 1423 ops/sec (±1.35%) 1369 ops/sec (±0.08%) 0.96
denormalizeShort 500x 638 ops/sec (±7.26%) 577 ops/sec (±6.90%) 0.90
denormalizeShort 500x withCache 6846 ops/sec (±0.09%) 7087 ops/sec (±0.88%) 1.04
queryShort 500x withCache 3207 ops/sec (±0.07%) 3268 ops/sec (±0.87%) 1.02
buildQueryKey All 55668 ops/sec (±1.17%) 51839 ops/sec (±1.13%) 0.93
query All withCache 5964 ops/sec (±2.65%) 6303 ops/sec (±2.58%) 1.06
denormalizeLong with mixin Entity 214 ops/sec (±6.63%) 206 ops/sec (±7.99%) 0.96
denormalizeLong withCache 6933 ops/sec (±0.22%) 7002 ops/sec (±0.27%) 1.01
denormalizeLong withCache (Scalar churn) 6877 ops/sec (±0.89%) 6880 ops/sec (±0.89%) 1.00
denormalizeLong Values withCache 5196 ops/sec (±1.60%) 6408 ops/sec (±1.54%) 1.23
denormalizeLong Scalar withCache 7742 ops/sec (±0.39%) 7515 ops/sec (±0.35%) 0.97
denormalizeLong Scalar update withCache 4077 ops/sec (±1.01%) 5431 ops/sec (±0.56%) 1.33
denormalizeLong All withCache 6013 ops/sec (±0.28%) 6385 ops/sec (±0.30%) 1.06
denormalizeLong Query-sorted withCache 6251 ops/sec (±1.49%) 6519 ops/sec (±2.19%) 1.04
denormalizeLongAndShort withEntityCacheOnly 1696 ops/sec (±0.34%) 1583 ops/sec (±0.21%) 0.93
denormalize bidirectional 50 4332 ops/sec (±8.01%) 3908 ops/sec (±11.11%) 0.90
denormalize bidirectional 50 donotcache 42494 ops/sec (±0.21%) 44011 ops/sec (±0.24%) 1.04
getResponse 4458 ops/sec (±3.49%) 5188 ops/sec (±4.33%) 1.16
getResponse (null) 10172353 ops/sec (±0.43%) 9654609 ops/sec (±0.41%) 0.95
getResponse (clear cache) 203 ops/sec (±9.11%) 169 ops/sec (±10.92%) 0.83
getSmallResponse 3575 ops/sec (±1.15%) 3656 ops/sec (±0.24%) 1.02
getSmallInferredResponse 2946 ops/sec (±0.10%) 2922 ops/sec (±1.19%) 0.99
getResponse Collection 4477 ops/sec (±4.48%) 3829 ops/sec (±4.29%) 0.86
get Collection 2708 ops/sec (±0.25%) 2725 ops/sec (±1.04%) 1.01
get Query-sorted 4921 ops/sec (±1.98%) 4626 ops/sec (±0.89%) 0.94
setLong 445 ops/sec (±0.20%) 439 ops/sec (±0.26%) 0.99
setLongWithMerge 256 ops/sec (±0.14%) 243 ops/sec (±1.08%) 0.95
setLongWithSimpleMerge 271 ops/sec (±0.37%) 249 ops/sec (±0.88%) 0.92
setSmallResponse 500x 928 ops/sec (±1.57%) 848 ops/sec (±1.44%) 0.91

This comment was automatically generated by workflow using github-action-benchmark.

@ntucker
ntucker merged commit 93555f8 into master Jul 12, 2026
24 checks passed
@ntucker
ntucker deleted the renovate/build branch July 12, 2026 19:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant