chore(deps): update webpack packages (major) #106731

matticbot · 2025-10-26T12:17:31Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@sentry/webpack-plugin (source)	`^1.21.0` -> `^4.6.1`
copy-webpack-plugin	`^10.2.4` -> `^13.0.1`
css-loader	`^6.11.0` -> `^7.1.2`
css-loader	`^3.6.0` -> `^7.1.2`
css-minimizer-webpack-plugin	`^3.4.1` -> `^7.0.4`
html-loader	`^0.5.5` -> `^5.1.0`
loader-utils	`^1.4.2` -> `^3.3.1`
postcss-loader	`^6.2.1` -> `^8.2.0`
style-loader	`^1.3.0` -> `^4.0.0`
webpack-bundle-analyzer	`^4.10.2` -> `^5.1.0`
webpack-cli (source)	`^4.10.0` -> `^6.0.1`
webpack-dev-middleware	`^5.3.4` -> `^7.4.5`

Release Notes

getsentry/sentry-javascript-bundler-plugins (@sentry/webpack-plugin)

`v4.6.1`

Compare Source

chore(deps): Update glob to 10.5.0 (#823)

Internal Changes

chore(core): Log release output (#821)

`v4.6.0`

Compare Source

fix(core): Stop awaiting build start telemetry to avoid breaking module federation builds (#818)
feat(core): Bump @sentry/cli from 2.51.0 to 2.57.0 (#819)

`v4.5.0`

Compare Source

docs: added info on debug flag value precedence (#811)
feat: add debug statements after sourcemap uploads (#812)
feat(core): Allow multi-project sourcemaps upload (#813)
fix: propagate the debug option to the cli (#810)

`v4.4.0`

Compare Source

feat(core): Explicitly allow undefined as value for authToken option (#805)
fix(core): Strip query strings from asset paths (#806)

Work in this release was contributed by @aiktb. Thank you for your contribution!

`v4.3.0`

Compare Source

feat(core): Extend deploy option to allow opting out of automatic deploy creation (#801)
feat(core): No asset globbing for direct upload (#800)

`v4.2.0`

Compare Source

feat(core): Add prepareArtifacts option for uploading sourcemaps (#794)
perf: use premove for build clean (#792)
fix(core): Forward headers option to sentry-cli (#797)

Work in this release contributed by @liAmirali. Thank you for your contribution!

`v4.1.1`

Compare Source

fix(react-native): Enhance fragment detection for indirect references (#767)

`v4.1.0`

Compare Source

feat(deps): Bump @sentry/cli to 2.51.0 #786
feat(core): Add flag for disabling sourcemaps upload #785
fix(debugId): Add guards for injected code to avoid errors #783
docs(options): Improve JSDoc for options #781
feat(core): Expose method for injecting debug Ids from plugin manager #784

`v4.0.2`

Compare Source

fix(core): Make moduleMetadata injection snippet ES5-compliant (#774)

`v4.0.1`

Compare Source

fix(core): Make plugin inject ES5-friendly code (#770)
fix(core): Use renderChunk for release injection for Rollup/Rolldown/Vite (#761)

Work in this release was contributed by @grushetsky. Thank you for your contribution!

`v4.0.0`

Compare Source

Breaking Changes

(Type change) Vite plugin now returns VitePlugin type instead of any
Deprecated function getBuildInformation has been removed

List of Changes

feat(core)!: Remove getBuildInformation export (#765)
feat(vite)!: Update return type of vite plugin (#728)

`v3.6.1`

Compare Source

fix(core): Observe and handle Sentry CLI sourcemap upload failures (#763)

`v3.6.0`

Compare Source

feat(core): Don't add debugIdUploadPlugin when sourcemaps option is disabled (#753)
fix(core): Avoid showing success message if upload was disabled or nothing was uploaded (#757)

`v3.5.0`

Compare Source

feat(core): Add hook to customize source map file resolution (#732)
fix(core): Avoid console output and telemetry init when plugins are disabled (#741)

Work in this release was contributed by @thecodewarrior. Thank you for your contribution!

`v3.4.0`

Compare Source

fix: Replace existing debug ID comments (#730)
feat: Expose bundler plugin primitives via createSentryBuildPluginManager (#714)

`v3.3.1`

Compare Source

fix(webpack5): All esm files must have .mjs postfix (#721)

`v3.3.0`

Compare Source

feat(webpack): Add @sentry/webpack-plugin/webpack5 export for webpack 5.1+ and compatible environments (#715)
feat: Only do automatic commit association for Vercel production environments (#711)

`v3.2.4`

Compare Source

Revert "feat(core): Use path instead of debug IDs as artifact names for debug ID upload (#700)" (#709)
ref: Remove deprecated use of useArtifacBundles (#707)

`v3.2.3`

Compare Source

feat(core): Use path instead of debug IDs as artifact names for debug ID upload (#700)
feat(webpack): Primarily use contentHash for debug ID hash (#702)
feat: Detect Vercel commits and env (#694)
feat: Default to automatically setting commits on release (#692)

`v3.2.2`

Compare Source

feat(annotation): Handle JSX member expressions (#690)
fix(core): Don't crash on recoverable CLI command error (#682)
chore: Suggest putting SENTRY_AUTH_TOKEN, SENTRY_ORG and SENTRY_PROJECT in passThroughEnv when using Turborepo (#675)

`v3.2.1`

Compare Source

deps: Bump @sentry/cli to 2.42.2 (#685)

`v3.2.0`

Compare Source

feat(core): Accept and await a promise in sourcemaps.filesToDeleteAfterUpload (#677)

`v3.1.2`

Compare Source

deps: Bump @sentry/cli to 2.41.1 (#671)

`v3.1.1`

Compare Source

fix(core): Disable release creation and source maps upload in dev mode (#666)

This fix disables any external calls to the Sentry API for managing releases or uploading source maps, when detecting that the plugin is running in dev-mode. While this rarely actually happened,
it also polluted the dev server output with unnecessary logs about missing auth tokens, which shouldn't
be required in dev mode.

`v3.1.0`

Compare Source

feat(webpack): Gate forced process exit behind experimental flag (#663)

`v3.0.0`

Compare Source

Breaking Changes

Injected code will now use let, which was added in ES6 (ES2015).
This means that ES6 is the minimum JavaScript version that the Sentry bundler plugins support.
Deprecated options have been removed:
- deleteFilesAfterUpload - Use filesToDeleteAfterUpload instead
- bundleSizeOptimizations.excludePerformanceMonitoring - Use bundleSizeOptimizations.excludeTracing instead
- _experiments.moduleMetadata - Use moduleMetadata instead
- cleanArtifacts - Did not do anything

List of Changes

fix!: Wrap injected code in block-statement to contain scope (#646)
chore!: Remove deprecated options (#654)
feat(logger): Use console methods respective to log level (#652)
fix(webpack): Ensure process exits when done (#653)
fix: Use correct replacement matcher for bundleSizeOptimizations.excludeTracing (#644)

Work in this release contributed by @jdelStrother. Thank you for your contribution!

`v2.23.1`

Compare Source

fix(v2/core): Make moduleMetadata injection code ES5-compliant (#773)

`v2.23.0`

Compare Source

chore(deps): bump nanoid from 3.3.6 to 3.3.8 (#641)
feat(core): Detect Railway release name (#639)
feat(core): Write module injections to globalThis (#636)
feat(react-component-annotate): Allow skipping annotations on specified components (#617)
ref(core): Rename release management plugin name (#647)

Work in this release contributed by @conor-ob. Thank you for your contribution!

`v2.22.7`

Compare Source

deps: Bump @sentry/cli to 2.39.1 and require specific version (#632)
feat(telemetry): Record if plugin is run in CI (#627)

`v2.22.6`

Compare Source

fix(core): Use sha256 instead of md5 to generate uuids from string (#619)

`v2.22.5`

Compare Source

fix: Ignore stderr output from git command (#613)
feat: Update Sentry telemetry to v8 (#604)
deps: Update @sentry/cli to 2.36.1 (#609)

`v2.22.4`

Compare Source

feat(react-component-annotate): Handle function body returning a ternary (#598)
fix: Allow injection plugins to apply to files with query parameters and fragments in their name (#597)

Work in this release contributed by @Thristhart. Thank you for your contribution!

`v2.22.3`

Compare Source

fix(core): Always instantiate global Error class in injected code snippets (#594)

`v2.22.2`

Compare Source

fix: Disable debug ID injection when sourcemaps.disable is set (#589)

`v2.22.1`

Compare Source

fix: Use sourcemaps.disable to disable debug ID upload instead of legacy upload (#587)
fix: Escape release string in injection snippet (#585)

`v2.22.0`

Compare Source

deps: Bump @sentry/cli to 2.33.1 (#581)
feat: Add bundleSizeOptimizations.excludeTracing option as alias to deprecated bundleSizeOptimizations.excludePerformanceMonitoring (#582)
fix(vite-plugin): Ensure post order of sentry-vite-release-injection-plugin to avoid breaking @rollup/plugin-commonjs step (#578)

`v2.21.1`

Compare Source

fix: Do not delete files before all upload tasks executed (#572)

Work in this release contributed by @tyouzu1. Thank you for your contribution!

`v2.21.0`

Compare Source

fix: Use sequential and post order for vite artifact deletion (#568)
feat: Add option to disable sourcemaps (#561)

Work in this release contributed by @tyouzu1. Thank you for your contribution!

`v2.20.1`

Compare Source

feat(telemetry): Collect whether applicationKey is set (#559)
fix: Wait for tasks depending on sourcemaps before deleting (#557)

`v2.20.0`

Compare Source

feat: Export esbuild plugin as default (#555)

`v2.19.0`

Compare Source

feat: Don't use word "error" in log message about telemetry (#548)
feat(core): Detect releases from more providers (#549)
fix: Always delete files when sourcemaps.filesToDeleteAfterUpload is set (#547)
fix(vite): Fix environment variable loading issue for Windows (#545)

Work in this release contributed by @Rassilion, and @mateusz-daniluk-xtb. Thank you for your contributions!

`v2.18.0`

Compare Source

feat: Add applicationKey option to identify application code from within the SDK (#540)
feat: Allow passing of meta-framework as telemetry data (#539)
feat: Promote experimental moduleMetadata option to stable (#538)
fix(esbuild): Invert warning about bundle: true (#542)

`v2.17.0`

Compare Source

feat: Deprecate and noop cleanArtifacts (#525)
feat: Support Heroku env vars when inferring release name (#517)
fix(docs): Update pnpm install commands (#516)
misc(esbuild): Log warning when attempting to inject debug IDs with esbuild bundle option active (#526)

Work in this release contributed by @et84121, and @duailibe. Thank you for your contributions!

`v2.16.1`

Compare Source

fix: Create word-based fidelity source mapping for code transformations (#513)
fix: Also match .cjs and .mjs files when finding files to upload in rollup-based bundlers (#509)

`v2.16.0`

Compare Source

feat(core): Add loggerPrefixOverride meta option (#506)

`v2.15.0`

Compare Source

feat: Make options argument optional (#502)
ref(annotate): Turn disabled message to debug log (#504)

`v2.14.3`

Compare Source

deps(core): Unpin @babel/core, find-up, and glob (#496)

Work in this release contributed by @allanlewis. Thank you for your contribution!

`v2.14.2`

Compare Source

feat(core): Bundle in Sentry SDK deps (#487)

`v2.14.1`

Compare Source

fix(core): Stop .env files from being picked up (#486)
feat(core): Add telemetry for React component annotations (#482)

`v2.14.0`

Compare Source

ref(component-annotate): Use default export (#478)

`v2.13.0`

Compare Source

ref(component-annotate): Conform to Babel plugin naming conventions

`v2.12.0`

Compare Source

ref(component-annotate): Prefix plugin name with babel

`v2.11.0`

Compare Source

feat(core): Include component name annotation plugin with all bundler plugins except esbuild (#469)
feat(component-annotate): Introduce new plugin to annotate frontend components at build-time (#468)

`v2.10.3`

Compare Source

fix(core): Safely flush telemetry

`v2.10.2`

Compare Source

deps(core): Bump @sentry/cli to ^2.22.3 (#451)

`v2.10.1`

Compare Source

chore: bump @sentry/cli dependency to 2.21.4 (#440)

`v2.10.0`

Compare Source

feat: deprecate excludeReplayCanvas config (#436)
feat: Add excludeReplayWorker to bundleSizeOptimizations (#433)

`v2.9.0`

Compare Source

feat: Allow to configure bundleSizeOptimizations (#428)
fix(core): Don't abort source map location guessing when the reference is a URL (#424)
fix(core): Widen detection of source maps with .cjs.map and .mjs.map (#422)

`v2.8.0`

Compare Source

build(core): Bump Sentry CLI to v2.21.2 (#415)
feat: Detect release name for Bitbucket pipelines (#404)
feat: Detect release name for Flightcontrol (#411)
fix(core): Move git revision to a separate function (#399)
fix(esbuild): Don't inject debug IDs into injected modules (#417)

Work in this release contributed by @hoslmelq, @mjomble, and @aquacash5. Thank you for your contributions!

`v2.7.1`

Compare Source

docs: Point to org auth token page (#393)
fix(webpack): Add default fallback to webpack import (#395)
fix: Save results of rewriteSourcesHook (#390)

Work in this release contributed by @adonskoy. Thank you for your contribution!

`v2.7.0`

Compare Source

feat: Add module metadata injection for esbuild (#381)
feat: Add module metadata injection for vite and rollup (#380)
ref: Emit high resolution source-maps with magic-string (#383)
ref: Run upload preparation with maximum concurrency (#379)

`v2.6.2`

Compare Source

fix: Fix regex in source map locating heuristic via sourceMappingURL (#376)
fix: Make sourceMappingURL heuristic more resilient (#378)

Thanks to @tomyam1 for identifying and pinpointing a bug that was hard to spot!

`v2.6.1`

Compare Source

fix: Don't crash on failed delete after upload (#373)

`v2.6.0`

Compare Source

deps: Bump sentry-cli to 2.20.1 (#355)
feat: Allow ommiting org when using organization auth token (#368)
ref: Make asset detection more robust (#369)

`v2.5.0`

Compare Source

deps: Bump and unpin Sentry SDK deps (#353)
docs: Remove misleading documentation (#339)
feat: Add experimental module metadata injection (#334)
fix: Fix 'identifiy' typo in log messages (#341)

Work in this release contributed by @chunfeilung. Thank you for your contribution!

`v2.4.0`

Compare Source

docs: Update instructions to install Vite plugin via pnpm (#331)
docs: Update minimum supported Node.js version to 14 (#327)
feat: Add configuration via .env.sentry-build-plugin file (#333)
ref: Use full git SHA for release name (#330)

Work in this release contributed by @ffxsam and @emilsivervik. Thank you for your contributions!

`v2.3.0`

Compare Source

feat(webpack): Generate deterministic debug IDs (#321)
feat: Add filesToDeleteAfterUpload alias for deleteFilesAfterUpload (#313)
feat: Sort globbed files to ensure deterministic bundle IDs (#318)
fix(esbuild): Don't override user code with proxy module (#322)
fix(esbuild): Fix debug ID generation (#325)
fix: Use SENTRY_RELEASE environment variable to set release.name option (#317)

Work in this release contributed by @smbroadley. Thank you for your contribution!

`v2.2.2`

Compare Source

fix(esbuild): Don't use namespace for esbuild proxy resolving (#311)
fix: Update commentUseStrictRegex to be lazy instead of greedy (#309)

Work in this release contributed by @jdk2pq. Thank you for your contribution!

`v2.2.1`

Compare Source

fix(esbuild): Inject different debug IDs into different output bundles (#301)
fix(webpack): Set minimum webpack 4 peer dep to 4.40.0 (#290)
fix: Use magic-string appendLeft instead of replace (#303)
ref: Improve log message when sourcemap cannot be found (#287)

`v2.2.0`

Compare Source

ref(core): Make better use of Sentry (#246)
ref(webpack): Use webpack peer dependency (#273)

Work in this release was made possible with help from @wojtekmaj and @dobladov. Thank you for your contributions!

`v2.1.0`

Compare Source

docs: Add removal of configFile option to migration guide (#266)
feat: Auto detect build artifacts (#257)
fix(core): Ignore query and hash in filepaths for release injection (#272)
fix(esbuild): Use absolute path for virtual file resolving (#269)
fix: Don't show log message if telemetry is disabled (#267)
fix: Use automatic release name detection for release injection (#271)

`v2.0.0`

Version 2.0.0 marks the official release of the @sentry/vite-plugin, @sentry/esbuild-plugin and @sentry/rollup-plugin packages.
They are now considered stable.

For the @sentry/webpack-plugin this is a major release with breaking changes.
Please refer to the migration guide for instructions on how to upgrade.

feat(core): Add deleteFilesAfterUpload option (#244)
feat(core): Implements rewrite sources for debug ID upload (#243)
fix(core): Account for undefined release name values (#251)
fix(webpack): Inject different debug IDs for different bundles (#242)
ref(core): Add new options type for future use (#216)
ref(core): Extract debug ID injection into separate plugins (#230)
ref(core): Extract debug ID sourcemap upload into a separate plugin (#231)
ref(core): Extract release injection into separate plugins (#218)
ref(core): Extract release management into a separate plugin (#232)
ref(core): Extract telemetry into a separate plugin (#234)
ref(core): Switch to v2 options (#237)
ref(core): Use debug ID as filename for upload (#247)
ref(core): Use factory function to create individual plugins (#229)
ref: Remove injectReleasesMap option (#236)

webpack-contrib/copy-webpack-plugin (copy-webpack-plugin)

`v13.0.1`

Compare Source

`v13.0.0`

Compare Source

⚠ BREAKING CHANGES

switch from globby and fast-glob to tinyglobby (#795) (19fd937)

For more information please visit tinyglobby.

The breaking change only affects the developer who used these options - gitignore and ignoreFiles in the globOptions option.

Please migrate to the ignore option.

Bug Fixes

concurrency option is limited to files now (#796) (d42469c)
the order of patterns provided by the developer is respected

12.0.2 (2024-01-17)

Bug Fixes

improve perf (#764) (a7379a9)

12.0.1 (2024-01-11)

Bug Fixes

improve perf (#760) ([55036ab](https://togithub.com/webpack-contrib/copy-

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

github-actions · 2025-10-26T12:17:52Z

Link to live branch is being generated...
Please wait a few minutes and refresh this page.

matticbot added [Type] Task dependencies Pull requests that update a dependency file Framework labels Oct 26, 2025

matticbot force-pushed the renovate/major-webpack-packages branch from 52ce954 to 73400ad Compare October 30, 2025 16:30

matticbot force-pushed the renovate/major-webpack-packages branch 2 times, most recently from 662bf6c to 9de5922 Compare November 14, 2025 08:30

matticbot force-pushed the renovate/major-webpack-packages branch from 9de5922 to fbaf274 Compare November 17, 2025 12:28

matticbot force-pushed the renovate/major-webpack-packages branch 3 times, most recently from 3ae5416 to e052b71 Compare December 1, 2025 05:24

matticbot force-pushed the renovate/major-webpack-packages branch 2 times, most recently from 259bf55 to 02bfd5c Compare December 20, 2025 07:38

chore(deps): update webpack packages

0abfec4

matticbot force-pushed the renovate/major-webpack-packages branch from 02bfd5c to 0abfec4 Compare December 22, 2025 09:39

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update webpack packages (major) #106731

chore(deps): update webpack packages (major) #106731

Uh oh!

matticbot commented Oct 26, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Oct 26, 2025 •

edited by matticbot

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

chore(deps): update webpack packages (major) #106731

Are you sure you want to change the base?

chore(deps): update webpack packages (major) #106731

Uh oh!

Conversation

matticbot commented Oct 26, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Breaking Changes

List of Changes

Breaking Changes

List of Changes

⚠ BREAKING CHANGES

Bug Fixes

12.0.2 (2024-01-17)

Bug Fixes

12.0.1 (2024-01-11)

Bug Fixes

Configuration

Uh oh!

github-actions bot commented Oct 26, 2025 • edited by matticbot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

matticbot commented Oct 26, 2025 •

edited

Loading

github-actions bot commented Oct 26, 2025 •

edited by matticbot

Loading