[Snyk] Upgrade webpack from 4.39.0 to 4.47.0

[ch-snyk-sa]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade webpack from 4.39.0 to 4.47.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 23 versions ahead of your current version.
• The recommended version was released 4 months ago, on 2023-09-06.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	265/1000 Why? CVSS 5.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: webpack

• 4.47.0 - 2023-09-06
  

  New Features

  • [Security] - Add support for md4 in Node >=18. by @ iclanton in #17628

  New Contributors

  • @ iclanton made their first contribution in #17628

  Full Changelog: v4.46.0...v4.47.0

• 4.46.0 - 2021-01-11
• 4.45.0 - 2021-01-08
• 4.44.2 - 2020-09-17
• 4.44.1 - 2020-07-30
• 4.44.0 - 2020-07-24
• 4.43.0 - 2020-04-21
• 4.42.1 - 2020-03-24
• 4.42.0 - 2020-03-02
• 4.41.6 - 2020-02-11
• 4.41.5 - 2019-12-27
• 4.41.4 - 2019-12-19
• 4.41.3 - 2019-12-16
• 4.41.2 - 2019-10-15
• 4.41.1 - 2019-10-11
• 4.41.0 - 2019-09-24
• 4.40.3 - 2019-09-24
• 4.40.2 - 2019-09-13
• 4.40.1 - 2019-09-13
• 4.40.0 - 2019-09-12
• 4.39.3 - 2019-08-27
• 4.39.2 - 2019-08-13
• 4.39.1 - 2019-08-02
• 4.39.0 - 2019-08-01

from webpack GitHub release notes

Commit messages

Package name: webpack

• dfffd6a 4.47.0
• 7395af8 Merge pull request #17628 from iclanton/webpack4-md4-hash
• 9b50972 Update SplitChunksPlugin to use the updated createHash function.
• 6f6ae98 Add support for md4 in Node >=18.
• 3956274 Merge pull request #13778 from StyleT/feature/custom_externals_for_systemjs_target_v4
• 1f11600 fix: fixed work of the non-system type externals for "system" library target
• 444e59f 4.46.0
• 758bb25 Merge pull request #12387 from webpack/bugfix/12386
• 79de1a2 enable backward-compatibility for resolve.roots
• ef75c04 Fix filename in azure pipeline
• 7714953 add test case
• 0331322 4.45.0
• e43bb4b Merge pull request #12372 from webpack/bugfix/split-chunks-min-size-4
• 4de8451 fix bug where cacheGroup index was inverted
• 3f69f3c fix bug where module size is added multiple times to the split chunk info
• c572c15 Merge pull request #11831 from Pyrolistical/patch-1
• 811395e Fixed resolve.roots default
• 2efeb4b 4.44.2
• 9635616 Merge pull request #11490 from webpack/bugfix/unknown-chunk-4
• 235b87b make sure to generate correct chunk connection for blocks that are only connected in some runtimes
• 4a1f068 Merge pull request #11180 from webpack/test/watch-production-4
• cd4af16 4.44.1
• 7895778 Merge pull request #11244 from webpack/bugfix/dynamic-reexport-default
• 46304c8 ignore default export when reexporting a dynamic module

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs