build(deps-dev): bump webpack from 5.97.1 to 5.104.1 #7504

dependabot · 2026-02-05T23:18:58Z

Bumps webpack from 5.97.1 to 5.104.1.

Release notes

v5.104.1

5.104.1

Patch Changes

2efd21b: Reexports runtime calculation should not accessing WEBPACK_IMPORT_KEY decl with var.

c510070: Fixed a user information bypass vulnerability in the HttpUriPlugin plugin.

v5.104.0

5.104.0

Minor Changes

d3dd841: Use method shorthand to render module content in __webpack_modules__ object.

d3dd841: Enhance import.meta.env to support object access.

4baab4e: Optimize dependency sorting in updateParent: sort each module only once by deferring to finishUpdateParent(), and reduce traversal count in sortWithSourceOrder by caching WeakMap values upfront.

04cd530: Handle more at-rules for CSS modules.

cafae23: Added options to control the renaming of at-rules and various identifiers in CSS modules.

d3dd841: Added base64url, base62, base58, base52, base49, base36, base32 and base25 digests.

5983843: Provide a stable runtime function variable __webpack_global__.

d3dd841: Improved localIdentName hashing for CSS.

Patch Changes

22c48fb: Added module existence check for informative error message in development mode.

50689e1: Use the fully qualified class name (or export name) for [fullhash] placeholder in CSS modules.

d3dd841: Support universal lazy compilation.

d3dd841: Fixed module library export definitions when multiple runtimes.

d3dd841: Fixed CSS nesting and CSS custom properties parsing.

d3dd841: Don't write fragment from URL to filename and apply fragment to module URL.

aab1da9: Fixed bugs for css/global type.

d3dd841: Compatibility import.meta.filename and import.meta.dirname with eval devtools.

d3dd841: Handle nested __webpack_require__.

728ddb7: The speed of identifier parsing has been improved.

0f8b31b: Improve types.

d3dd841: Don't corrupt debugId injection when hidden-source-map is used.

2179fdb: Re-validate HttpUriPlugin redirects against allowedUris, restrict to http(s) and add a conservative redirect limit to prevent SSRF and untrusted content inclusion. Redirects failing policy are rejected before caching/lockfile writes.

d3dd841: Serialize HookWebpackError.

d3dd841: Added ability to use built-in properties in dotenv and define plugin.

3c4319f: Optimizing the regular expression character class by specifying ranges for runtime code.

d3dd841: Reduce collision for local indent name in CSS.

d3dd841: Remove CSS link tags when CSS imports are removed.

v5.103.0

Features

Added DotenvPlugin and top level dotenv option to enable this plugin

Added WebpackManifestPlugin

Added support the ignoreList option in devtool plugins

Allow to use custom javascript parse function

... (truncated)

Changelog

Sourced from webpack's changelog.

5.104.1

Patch Changes

2efd21b: Reexports runtime calculation should not accessing WEBPACK_IMPORT_KEY decl with var.

c510070: Fixed a user information bypass vulnerability in the HttpUriPlugin plugin.

5.104.0

Minor Changes

d3dd841: Use method shorthand to render module content in __webpack_modules__ object.

d3dd841: Enhance import.meta.env to support object access.

4baab4e: Optimize dependency sorting in updateParent: sort each module only once by deferring to finishUpdateParent(), and reduce traversal count in sortWithSourceOrder by caching WeakMap values upfront.

04cd530: Handle more at-rules for CSS modules.

cafae23: Added options to control the renaming of at-rules and various identifiers in CSS modules.

d3dd841: Added base64url, base62, base58, base52, base49, base36, base32 and base25 digests.

5983843: Provide a stable runtime function variable __webpack_global__.

d3dd841: Improved localIdentName hashing for CSS.

Patch Changes

22c48fb: Added module existence check for informative error message in development mode.

50689e1: Use the fully qualified class name (or export name) for [fullhash] placeholder in CSS modules.

d3dd841: Support universal lazy compilation.

d3dd841: Fixed module library export definitions when multiple runtimes.

d3dd841: Fixed CSS nesting and CSS custom properties parsing.

d3dd841: Don't write fragment from URL to filename and apply fragment to module URL.

aab1da9: Fixed bugs for css/global type.

d3dd841: Compatibility import.meta.filename and import.meta.dirname with eval devtools.

d3dd841: Handle nested __webpack_require__.

728ddb7: The speed of identifier parsing has been improved.

0f8b31b: Improve types.

d3dd841: Don't corrupt debugId injection when hidden-source-map is used.

2179fdb: Re-validate HttpUriPlugin redirects against allowedUris, restrict to http(s) and add a conservative redirect limit to prevent SSRF and untrusted content inclusion. Redirects failing policy are rejected before caching/lockfile writes.

d3dd841: Serialize HookWebpackError.

d3dd841: Added ability to use built-in properties in dotenv and define plugin.

3c4319f: Optimizing the regular expression character class by specifying ranges for runtime code.

d3dd841: Reduce collision for local indent name in CSS.

d3dd841: Remove CSS link tags when CSS imports are removed.

Commits

24e3c2d chore(release): new release (#20253)
2efd21b fix(re-exports): reexports runtime calculation should not accessing `__WEBPAC...
c510070 fix(security): userinfo bypass vulnerability in HttpUriPlugin allowedUris
4b0501c ci: fix release (#20252)
0c213ce ci: use \<@&1450591255485743204> over @here for discord notificationw
5bf8bc5 refactor: types for benchmarks and tests
505a5e7 chore(release): new release (#20188)
0c06680 refactor: update eslint configuration
2eb0d6a ci: release announcement (#20238)
b2b2459 ci: cancel in progress (#20239)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [webpack](https://github.com/webpack/webpack) from 5.97.1 to 5.104.1. - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.97.1...v5.104.1) --- updated-dependencies: - dependency-name: webpack dependency-version: 5.104.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]>

changeset-bot · 2026-02-05T23:19:04Z

⚠️ No Changeset found

Latest commit: 4b4a7d3

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

netlify · 2026-02-05T23:19:04Z

✅ Deploy Preview for tiptap-embed ready!

Name	Link
🔨 Latest commit	`4b4a7d3`
🔍 Latest deploy log	https://app.netlify.com/projects/tiptap-embed/deploys/698525662a99e20008adf56b
😎 Deploy Preview	https://deploy-preview-7504--tiptap-embed.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

pkg-pr-new · 2026-02-05T23:36:45Z

Open in StackBlitz

@tiptap/extension-character-count

npm i https://pkg.pr.new/@tiptap/extension-character-count@7504

@tiptap/extension-dropcursor

npm i https://pkg.pr.new/@tiptap/extension-dropcursor@7504

@tiptap/extension-focus

npm i https://pkg.pr.new/@tiptap/extension-focus@7504

@tiptap/extension-gapcursor

npm i https://pkg.pr.new/@tiptap/extension-gapcursor@7504

@tiptap/extension-list-item

npm i https://pkg.pr.new/@tiptap/extension-list-item@7504

@tiptap/extension-history

npm i https://pkg.pr.new/@tiptap/extension-history@7504

@tiptap/extension-table-cell

npm i https://pkg.pr.new/@tiptap/extension-table-cell@7504

@tiptap/extension-placeholder

npm i https://pkg.pr.new/@tiptap/extension-placeholder@7504

@tiptap/extension-list-keymap

npm i https://pkg.pr.new/@tiptap/extension-list-keymap@7504

@tiptap/extension-table-header

npm i https://pkg.pr.new/@tiptap/extension-table-header@7504

@tiptap/extension-table-row

npm i https://pkg.pr.new/@tiptap/extension-table-row@7504

@tiptap/extension-task-item

npm i https://pkg.pr.new/@tiptap/extension-task-item@7504

@tiptap/extension-task-list

npm i https://pkg.pr.new/@tiptap/extension-task-list@7504

@tiptap/core

npm i https://pkg.pr.new/@tiptap/core@7504

@tiptap/extension-audio

npm i https://pkg.pr.new/@tiptap/extension-audio@7504

@tiptap/extension-blockquote

npm i https://pkg.pr.new/@tiptap/extension-blockquote@7504

@tiptap/extension-bold

npm i https://pkg.pr.new/@tiptap/extension-bold@7504

@tiptap/extension-bubble-menu

npm i https://pkg.pr.new/@tiptap/extension-bubble-menu@7504

@tiptap/extension-bullet-list

npm i https://pkg.pr.new/@tiptap/extension-bullet-list@7504

@tiptap/extension-code

npm i https://pkg.pr.new/@tiptap/extension-code@7504

@tiptap/extension-code-block

npm i https://pkg.pr.new/@tiptap/extension-code-block@7504

@tiptap/extension-collaboration

npm i https://pkg.pr.new/@tiptap/extension-collaboration@7504

@tiptap/extension-code-block-lowlight

npm i https://pkg.pr.new/@tiptap/extension-code-block-lowlight@7504

@tiptap/extension-color

npm i https://pkg.pr.new/@tiptap/extension-color@7504

@tiptap/extension-details

npm i https://pkg.pr.new/@tiptap/extension-details@7504

@tiptap/extension-collaboration-caret

npm i https://pkg.pr.new/@tiptap/extension-collaboration-caret@7504

@tiptap/extension-document

npm i https://pkg.pr.new/@tiptap/extension-document@7504

@tiptap/extension-drag-handle

npm i https://pkg.pr.new/@tiptap/extension-drag-handle@7504

@tiptap/extension-drag-handle-react

npm i https://pkg.pr.new/@tiptap/extension-drag-handle-react@7504

@tiptap/extension-drag-handle-vue-2

npm i https://pkg.pr.new/@tiptap/extension-drag-handle-vue-2@7504

@tiptap/extension-drag-handle-vue-3

npm i https://pkg.pr.new/@tiptap/extension-drag-handle-vue-3@7504

@tiptap/extension-emoji

npm i https://pkg.pr.new/@tiptap/extension-emoji@7504

@tiptap/extension-floating-menu

npm i https://pkg.pr.new/@tiptap/extension-floating-menu@7504

@tiptap/extension-file-handler

npm i https://pkg.pr.new/@tiptap/extension-file-handler@7504

@tiptap/extension-font-family

npm i https://pkg.pr.new/@tiptap/extension-font-family@7504

@tiptap/extension-hard-break

npm i https://pkg.pr.new/@tiptap/extension-hard-break@7504

@tiptap/extension-heading

npm i https://pkg.pr.new/@tiptap/extension-heading@7504

@tiptap/extension-highlight

npm i https://pkg.pr.new/@tiptap/extension-highlight@7504

@tiptap/extension-image

npm i https://pkg.pr.new/@tiptap/extension-image@7504

@tiptap/extension-horizontal-rule

npm i https://pkg.pr.new/@tiptap/extension-horizontal-rule@7504

@tiptap/extension-italic

npm i https://pkg.pr.new/@tiptap/extension-italic@7504

@tiptap/extension-invisible-characters

npm i https://pkg.pr.new/@tiptap/extension-invisible-characters@7504

@tiptap/extension-link

npm i https://pkg.pr.new/@tiptap/extension-link@7504

@tiptap/extension-list

npm i https://pkg.pr.new/@tiptap/extension-list@7504

@tiptap/extension-mathematics

npm i https://pkg.pr.new/@tiptap/extension-mathematics@7504

@tiptap/extension-mention

npm i https://pkg.pr.new/@tiptap/extension-mention@7504

@tiptap/extension-node-range

npm i https://pkg.pr.new/@tiptap/extension-node-range@7504

@tiptap/extension-ordered-list

npm i https://pkg.pr.new/@tiptap/extension-ordered-list@7504

@tiptap/extension-paragraph

npm i https://pkg.pr.new/@tiptap/extension-paragraph@7504

@tiptap/extension-strike

npm i https://pkg.pr.new/@tiptap/extension-strike@7504

@tiptap/extension-superscript

npm i https://pkg.pr.new/@tiptap/extension-superscript@7504

@tiptap/extension-subscript

npm i https://pkg.pr.new/@tiptap/extension-subscript@7504

@tiptap/extension-table

npm i https://pkg.pr.new/@tiptap/extension-table@7504

@tiptap/extension-table-of-contents

npm i https://pkg.pr.new/@tiptap/extension-table-of-contents@7504

@tiptap/extension-text-align

npm i https://pkg.pr.new/@tiptap/extension-text-align@7504

@tiptap/extension-text

npm i https://pkg.pr.new/@tiptap/extension-text@7504

@tiptap/extension-text-style

npm i https://pkg.pr.new/@tiptap/extension-text-style@7504

@tiptap/extension-twitch

npm i https://pkg.pr.new/@tiptap/extension-twitch@7504

@tiptap/extension-typography

npm i https://pkg.pr.new/@tiptap/extension-typography@7504

@tiptap/extension-underline

npm i https://pkg.pr.new/@tiptap/extension-underline@7504

@tiptap/extension-unique-id

npm i https://pkg.pr.new/@tiptap/extension-unique-id@7504

@tiptap/extension-youtube

npm i https://pkg.pr.new/@tiptap/extension-youtube@7504

@tiptap/extensions

npm i https://pkg.pr.new/@tiptap/extensions@7504

@tiptap/html

npm i https://pkg.pr.new/@tiptap/html@7504

@tiptap/markdown

npm i https://pkg.pr.new/@tiptap/markdown@7504

@tiptap/react

npm i https://pkg.pr.new/@tiptap/react@7504

@tiptap/pm

npm i https://pkg.pr.new/@tiptap/pm@7504

@tiptap/starter-kit

npm i https://pkg.pr.new/@tiptap/starter-kit@7504

@tiptap/static-renderer

npm i https://pkg.pr.new/@tiptap/static-renderer@7504

@tiptap/suggestion

npm i https://pkg.pr.new/@tiptap/suggestion@7504

@tiptap/vue-2

npm i https://pkg.pr.new/@tiptap/vue-2@7504

@tiptap/vue-3

npm i https://pkg.pr.new/@tiptap/vue-3@7504

commit: 4b4a7d3

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 5, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps-dev): bump webpack from 5.97.1 to 5.104.1 #7504

build(deps-dev): bump webpack from 5.97.1 to 5.104.1 #7504

Uh oh!

dependabot bot commented on behalf of github Feb 5, 2026

Uh oh!

changeset-bot bot commented Feb 5, 2026

Uh oh!

netlify bot commented Feb 5, 2026 •

edited

Loading

Uh oh!

pkg-pr-new bot commented Feb 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

build(deps-dev): bump webpack from 5.97.1 to 5.104.1 #7504

Are you sure you want to change the base?

build(deps-dev): bump webpack from 5.97.1 to 5.104.1 #7504

Uh oh!

Conversation

dependabot bot commented on behalf of github Feb 5, 2026

v5.104.1

5.104.1

Patch Changes

v5.104.0

5.104.0

Minor Changes

Patch Changes

v5.103.0

Features

5.104.1

Patch Changes

5.104.0

Minor Changes

Patch Changes

Uh oh!

changeset-bot bot commented Feb 5, 2026

⚠️ No Changeset found

Uh oh!

netlify bot commented Feb 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for tiptap-embed ready!

Uh oh!

pkg-pr-new bot commented Feb 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

netlify bot commented Feb 5, 2026 •

edited

Loading