Bump webpack and webpack-dev-middleware

[dependabot]

Bumps webpack and webpack-dev-middleware. These dependencies needed to be updated together.
Updates webpack from 5.94.0 to 5.109.1

Release notes

Sourced from webpack's releases.

v5.109.1

Patch Changes

• Fix stray semicolon emitted before an imported call following a parenthesized sequence element. (by @​alexander-akait in #21533)

• Make require(esm) module.exports re-export analysis independent of module processing order. (by @​alexander-akait in #21521)

• Ignore ERR_SERVER_NOT_RUNNING on lazy-compilation backend dispose so compiler.close() succeeds on Bun. (by @​alexander-akait in #21521)

• Name the failing key when DefinePlugin fails to evaluate a typeof value. (by @​alexander-akait in #21503)

• Improve Deno compatibility: guard setNoDelay and force-close connections on lazy-compilation backend dispose, and return a real ArrayBuffer from the Node async/sync wasm loader so WebAssembly.instantiate accepts it. (by @​alexander-akait in #21524)

• Speed up the HTML parser and cut its peak memory: module-scope helpers/state and tokenizer callbacks, plus exact AST column pre-sizing. (by @​alexander-akait in #21492)

• Track CommonJS build dependencies by parsing sources when require.cache children are unavailable (e.g. Bun). (by @​alexander-akait in #21531)

• Cook common string-literal escapes on the JS parser fast path and own the tokenizer's cold-path readers. (by @​alexander-akait in #21500)

• Build the CSS parseA* AST on the SoA store instead of node classes, cutting parse memory and time. (by @​alexander-akait in #21498)

• Speed up and cut memory of the experimental CSS and HTML parsers: drop two derivable AST node columns, and scan long string, url, comment, and plaintext token bodies natively. (by @​alexander-akait in #21504)

• Speed up non-modules CSS parsing: skip redundant token re-reads, drop selector-prelude tokens without materializing nodes, allocate rule preludes lazily, and fast-path empty list seals. (by @​alexander-akait in #21511)

• Speed up stats generation and cut its peak memory: reuse cached sort comparators instead of thrashing the comparator caches on every sort, and drop redundant module-graph lookups and allocations in the extractors. (by @​alexander-akait in #21506)

• Speed up CSS parsing: byte-range function-name checks, indexed sibling lookahead. (by @​bjohansebas in #21520)

• Reduce allocations and redundant work across the code-generation, module-concatenation, exports/usage-analysis, hashing, and chunk-splitting hot paths. (by @​alexander-akait in #21516)

• Enable the Node.js compile cache in the webpack CLI entry point. (by @​bjohansebas in #21523)

• Encode the persistent cache with V8's value serializer. (by @​avivkeller in #21514)

• Speed up SplitChunksPlugin: reject non-subset chunk sets with 64-bit signatures, cache unnamed entry keys, and drop per-module closures. (by @​avivkeller in #21529)

• Initialize NormalModule._ast in the constructor so each instance keeps a single hidden-class shape. (by @​alexander-akait in #21515)

• Reduce allocations in the binary serialization hot paths. (by @​alexander-akait in #21526)

• Deduplicate and simplify several lib modules and speed up AggressiveMergingPlugin. (by @​alexander-akait in #21525)

• Rename nested const/let __webpack_require__ and __webpack_exports__ declarations in bundled webpack output. (by @​hai-x in #21508)

v5.109.0

Minor Changes

• Default experiments.typescript to "auto", enabling built-in TypeScript support on Node.js >= 22.6 when no TypeScript loader is registered. (by @​alexander-akait in #21477)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.109.1

Patch Changes

• Fix stray semicolon emitted before an imported call following a parenthesized sequence element. (by @​alexander-akait in #21533)

• Make require(esm) module.exports re-export analysis independent of module processing order. (by @​alexander-akait in #21521)

• Ignore ERR_SERVER_NOT_RUNNING on lazy-compilation backend dispose so compiler.close() succeeds on Bun. (by @​alexander-akait in #21521)

• Name the failing key when DefinePlugin fails to evaluate a typeof value. (by @​alexander-akait in #21503)

• Improve Deno compatibility: guard setNoDelay and force-close connections on lazy-compilation backend dispose, and return a real ArrayBuffer from the Node async/sync wasm loader so WebAssembly.instantiate accepts it. (by @​alexander-akait in #21524)

• Speed up the HTML parser and cut its peak memory: module-scope helpers/state and tokenizer callbacks, plus exact AST column pre-sizing. (by @​alexander-akait in #21492)

• Track CommonJS build dependencies by parsing sources when require.cache children are unavailable (e.g. Bun). (by @​alexander-akait in #21531)

• Cook common string-literal escapes on the JS parser fast path and own the tokenizer's cold-path readers. (by @​alexander-akait in #21500)

• Build the CSS parseA* AST on the SoA store instead of node classes, cutting parse memory and time. (by @​alexander-akait in #21498)

• Speed up and cut memory of the experimental CSS and HTML parsers: drop two derivable AST node columns, and scan long string, url, comment, and plaintext token bodies natively. (by @​alexander-akait in #21504)

• Speed up non-modules CSS parsing: skip redundant token re-reads, drop selector-prelude tokens without materializing nodes, allocate rule preludes lazily, and fast-path empty list seals. (by @​alexander-akait in #21511)

• Speed up stats generation and cut its peak memory: reuse cached sort comparators instead of thrashing the comparator caches on every sort, and drop redundant module-graph lookups and allocations in the extractors. (by @​alexander-akait in #21506)

• Speed up CSS parsing: byte-range function-name checks, indexed sibling lookahead. (by @​bjohansebas in #21520)

• Reduce allocations and redundant work across the code-generation, module-concatenation, exports/usage-analysis, hashing, and chunk-splitting hot paths. (by @​alexander-akait in #21516)

• Enable the Node.js compile cache in the webpack CLI entry point. (by @​bjohansebas in #21523)

• Encode the persistent cache with V8's value serializer. (by @​avivkeller in #21514)

• Speed up SplitChunksPlugin: reject non-subset chunk sets with 64-bit signatures, cache unnamed entry keys, and drop per-module closures. (by @​avivkeller in #21529)

• Initialize NormalModule._ast in the constructor so each instance keeps a single hidden-class shape. (by @​alexander-akait in #21515)

• Reduce allocations in the binary serialization hot paths. (by @​alexander-akait in #21526)

• Deduplicate and simplify several lib modules and speed up AggressiveMergingPlugin. (by @​alexander-akait in #21525)

• Rename nested const/let __webpack_require__ and __webpack_exports__ declarations in bundled webpack output. (by @​hai-x in #21508)

5.109.0

Minor Changes

... (truncated)

Commits

• ec39088 chore(release): new release (#21493)
• cea3698 fix: avoid stray semicolon after a parenthesized sequence element (#21533)
• 6926396 fix: track CommonJS build dependencies without require.cache children; run mo...
• bcb1abd chore(perf): improve caching in SplitChunksPlugin (#21529)
• c9268f1 Fix require(esm) module.exports re-export exports determinism (#21521)
• 59566fc chore(deps): bump postcss from 8.5.16 to 8.5.23 (#21527)
• e28262e refactor: reduce duplication and name magic constants across lib, speed up Ag...
• aa1e746 perf(serialization): reduce allocations in binary middleware hot paths (#21526)
• 929b113 perf: enable the Node.js compile cache in the CLI entry point (#21523)
• 4efcd73 Enable HotTestCases on Deno (#21524)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack since your current version.

Updates webpack-dev-middleware from 1.12.2 to 8.1.0

Release notes

Sourced from webpack-dev-middleware's releases.

v8.1.0

Minor Changes

• Reuse an already active MultiCompiler watching session instead of starting a duplicate one (requires webpack >= 5.109). (by @​bjohansebas in #2371)

v8.0.4

Patch Changes

• Replace the on-finished dependency with Node.js built-in stream.finished. (by @​bjohansebas in #2346)

v8.0.3

Patch Changes

• Respect req.url when modified by middleware such as connect-history-api-fallback. (by @​bjohansebas in #2304)

v8.0.2

Patch Changes

• Fixed compatibility with rspack. (by @​alexander-akait in #2295)

v8.0.1

Patch Changes

• Fixed compatibility with rspack. (by @​alexander-akait in 0b40cfd)

v8.0.0

Major Changes

• The getFilenameFromUrl function is now asynchronous, returning a Promise that resolves to the object with the found filename (or undefined if the file was not found) or throws an error if the URL cannot be processed. Additionally, the object contains the extra property with stats (file system stats) and outputFileSystem (output file system where file was found) properties. (by @​alexander-akait in #2284)

• Minimum supported Node.js version is 20.9.0. (by @​alexander-akait in #2284)

• Minimum supported webpack version is 5.101.0. (by @​alexander-akait in #2284)

Minor Changes

• Added support for plugin usage, useful when the middleware will be used as a webpack plugin (no stats output, no extra actions). (by @​alexander-akait in #2284)

• Added the forwardError option to enable error forwarding to next middleware. (by @​alexander-akait in #2284)

• Enable cacheImmutable by default for immutable assets. (by @​alexander-akait in #2284)

Patch Changes

• Improved initial loading module time. (by @​alexander-akait in #2284)

• Removed outdated code and improved performance by avoiding extra loops. (by @​alexander-akait in #2284)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

... (truncated)

Changelog

Sourced from webpack-dev-middleware's changelog.

8.1.0

Minor Changes

• Reuse an already active MultiCompiler watching session instead of starting a duplicate one (requires webpack >= 5.109). (by @​bjohansebas in #2371)

8.0.4

Patch Changes

• Replace the on-finished dependency with Node.js built-in stream.finished. (by @​bjohansebas in #2346)

8.0.3

Patch Changes

• Respect req.url when modified by middleware such as connect-history-api-fallback. (by @​bjohansebas in #2304)

8.0.2

Patch Changes

• Fixed compatibility with rspack. (by @​alexander-akait in #2295)

8.0.1

Patch Changes

• Fixed compatibility with rspack. (by @​alexander-akait in 0b40cfd)

8.0.0

Major Changes

• The getFilenameFromUrl function is now asynchronous, returning a Promise that resolves to the object with the found filename (or undefined if the file was not found) or throws an error if the URL cannot be processed. Additionally, the object contains the extra property with stats (file system stats) and outputFileSystem (output file system where file was found) properties. (by @​alexander-akait in #2284)

• Minimum supported Node.js version is 20.9.0. (by @​alexander-akait in #2284)

• Minimum supported webpack version is 5.101.0. (by @​alexander-akait in #2284)

Minor Changes

• Added support for plugin usage, useful when the middleware will be used as a webpack plugin (no stats output, no extra actions). (by @​alexander-akait in #2284)

• Added the forwardError option to enable error forwarding to next middleware. (by @​alexander-akait in #2284)

• Enable cacheImmutable by default for immutable assets. (by @​alexander-akait in #2284)

Patch Changes

... (truncated)

Commits

• fa7b110 chore(release): new release (#2372)
• 78a393b chore(deps-dev): bump find-my-way from 9.5.0 to 9.7.0 (#2373)
• 517723f feat: reuse an already active MultiWatching (#2371)
• 2677607 chore(release): new release (#2355)
• ba9b083 chore(deps-dev): bump @​hono/node-server from 2.0.6 to 2.0.10 (#2365)
• d13cb1a chore(deps): bump fast-uri from 3.1.2 to 3.1.4 (#2366)
• 8841f50 chore(deps-dev): bump shell-quote from 1.8.4 to 1.10.0 (#2367)
• 2849ccb chore(deps): bump actions/checkout in the dependencies group (#2363)
• 77f92eb chore(deps): replace on-finished with Node.js built-in stream.finished (#...
• 145a228 chore(deps): bump actions/setup-node in the dependencies group (#2354)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-dev-middleware since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.