build: bump webpack in dev dependencies also
What the developer wrote
Authored by Jon Griffiths
build: bump webpack in dev dependencies also
What changed, and why it matters
This commit simply updates the version of a build tool (webpack) used during development of the WebAssembly package. It does not change any runtime code that handles keys, transactions, or cryptography. There is no direct security issue visible in the change itself.
No security action required. If the webpack bump was triggered by a known vulnerability in webpack 5.75.0, the project should document the CVE in release notes or commit message, but the commit itself only performs the bump.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff bumps webpack from ^5.75.0 to ^5.105.0 in src/wasm_package/package.json devDependencies. No source code, build scripts, or cryptographic logic is modified. The change is a routine dependency version bump.
Changed components
src/wasm_package/package.jsonInspect captured patch +1 / −1
diff --git a/src/wasm_package/package.json b/src/wasm_package/package.json
index e2554e0..7b61274 100644
--- a/src/wasm_package/package.json
+++ b/src/wasm_package/package.json
@@ -18,7 +18,7 @@
"devDependencies": {
"buffer": "^6.0.3",
"test": "^3.2.1",
- "webpack": "^5.75.0",
+ "webpack": "^5.105.0",
"webpack-cli": "^5.0.0"
},
"browser": {
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.