Skip to content

build: update js webpack to 5.104.0#3068

Merged
lklimek merged 6 commits intov3.1-devfrom
build/js-webpack-104
Feb 9, 2026
Merged

build: update js webpack to 5.104.0#3068
lklimek merged 6 commits intov3.1-devfrom
build/js-webpack-104

Conversation

@lklimek
Copy link
Copy Markdown
Contributor

@lklimek lklimek commented Feb 6, 2026

Issue being fixed or feature implemented

Update webpack to a non-vulnerable version to address production audit findings in JS/TS packages.

What was done?

  • Bumped webpack from ^5.94.0 to ^5.104.0 in:
    • @dashevo/dapi-client
    • @dashevo/platform-test-suite
    • @dashevo/wallet-lib
    • @dashevo/wasm-dpp
    • @dashevo/wasm-dpp2
    • @dashevo/wasm-sdk
    • dash (js-dash-sdk)
    • js-evo-sdk
  • Updated lockfile and PnP artifacts after install.

How Has This Been Tested?

  • yarn npm audit --environment production --all --recursive

Breaking Changes

None.

Checklist:

  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have added or updated relevant unit/integration/functional/e2e tests
  • I have added "!" to the title and described breaking changes in the corresponding section if my code contains any
  • I have made corresponding changes to the documentation if needed

For repository code-owners and collaborators only

  • I have assigned this pull request to a milestone

Summary by CodeRabbit

  • Chores

    • Updated webpack dev dependency to 5.104.0 across multiple packages.
  • Tests

    • Updated test vectors: several new test vector entries added and a few obsolete vectors removed to refresh test data.

## Issue being fixed or feature implemented
Update webpack to a non-vulnerable version to address production audit findings in JS/TS packages.

## What was done?
- Bumped `webpack` from `^5.94.0` to `^5.104.0` in:
  - @dashevo/dapi-client
  - @dashevo/platform-test-suite
  - @dashevo/wallet-lib
  - @dashevo/wasm-dpp
  - @dashevo/wasm-dpp2
  - @dashevo/wasm-sdk
  - dash (js-dash-sdk)
  - js-evo-sdk
- Updated lockfile and PnP artifacts after install.

## How Has This Been Tested?
- `yarn npm audit --environment production --all --recursive`

## Breaking Changes
None.

## Checklist:
- [ ] I have performed a self-review of my own code
- [ ] I have commented my code, particularly in hard-to-understand areas
- [ ] I have added or updated relevant unit/integration/functional/e2e tests
- [ ] I have added "!" to the title and described breaking changes in the corresponding section if my code contains any
- [ ] I have made corresponding changes to the documentation if needed

**For repository code-owners and collaborators only**
- [ ] I have assigned this pull request to a milestone
@github-actions github-actions bot added this to the v3.1.0 milestone Feb 6, 2026
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai bot commented Feb 6, 2026

📝 Walkthrough

Walkthrough

Updates webpack version from ^5.94.0 to ^5.104.0 in multiple package.json files and adds/removes several JSON test vector files under packages/rs-sdk/tests/vectors/.

Changes

Cohort / File(s) Summary
Webpack version bumps
packages/js-dapi-client/package.json, packages/js-dash-sdk/package.json, packages/js-evo-sdk/package.json, packages/wallet-lib/package.json, packages/wasm-dpp/package.json, packages/wasm-dpp2/package.json, packages/wasm-sdk/package.json, packages/platform-test-suite/package.json
Bumps webpack from ^5.94.0 to ^5.104.0 in devDependencies (and dependencies for platform-test-suite). No other changes to package manifests.
rs-sdk test vectors — deletions
packages/rs-sdk/tests/vectors/test_fetch_address_info/quorum_pubkey-106-1d5eecc0582c07c8837a7f86266662e038df51e859dea21df6086d8087bdac74.json, packages/rs-sdk/tests/vectors/test_fetch_addresses_infos/quorum_pubkey-106-1d5eecc0582c07c8837a7f86266662e038df51e859dea21df6086d8087bdac74.json, packages/rs-sdk/tests/vectors/test_sync_address_balances/quorum_pubkey-106-1d5eecc0582c07c8837a7f86266662e038df51e859dea21df6086d8087bdac74.json
Removed existing test vector files or their single-line contents (cryptographic hex strings).
rs-sdk test vectors — additions
packages/rs-sdk/tests/vectors/test_fetch_address_info/quorum_pubkey-106-7de001119f8c50fdfa069b8fb87145adca84aba4e91764350f442149fc57c87c.json, packages/rs-sdk/tests/vectors/test_fetch_addresses_infos/quorum_pubkey-106-7db20ca92ea46b5b95096f863c05718f0ab67a1c9b2ac291976746209763b34e.json, packages/rs-sdk/tests/vectors/test_sync_address_balances/quorum_pubkey-106-7de001119f8c50fdfa069b8fb87145adca84aba4e91764350f442149fc57c87c.json
Added new single-line test vector files containing hex-encoded quorum public key values (no surrounding JSON structure).

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

🐰 I hopped through package trees at dawn,

bumped Webpack numbers and tidied a lawn,
swapped some hex crumbs — old ones gone, new,
a tiny rabbit jig for the CI queue. 🥕✨

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The PR title 'build: update js webpack to 5.104.0' clearly describes the main change: updating webpack across JS packages from 5.94.0 to 5.104.0 to address security vulnerabilities.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch build/js-webpack-104

No actionable comments were generated in the recent review. 🎉


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

shumkov
shumkov previously approved these changes Feb 6, 2026
QuantumExplorer
QuantumExplorer previously approved these changes Feb 9, 2026
@lklimek lklimek dismissed stale reviews from shumkov and QuantumExplorer via f568101 February 9, 2026 09:53
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Feb 9, 2026

✅ gRPC Query Coverage Report

================================================================================
gRPC Query Coverage Report - NEW QUERIES ONLY
================================================================================

Total queries in proto: 53
Previously known queries: 47
New queries found: 6

================================================================================

New Query Implementation Status:
--------------------------------------------------------------------------------
✓ getAddressInfo                                /home/runner/work/platform/platform/packages/rs-sdk/src/platform/query.rs
✓ getAddressesBranchState                       /home/runner/work/platform/platform/packages/rs-sdk/src/platform/address_sync/mod.rs
✓ getAddressesInfos                             /home/runner/work/platform/platform/packages/rs-sdk/src/platform/fetch_many.rs
✓ getAddressesTrunkState                        /home/runner/work/platform/platform/packages/rs-sdk/src/platform/query.rs
✓ getRecentAddressBalanceChanges                /home/runner/work/platform/platform/packages/rs-sdk/src/platform/query.rs
✓ getRecentCompactedAddressBalanceChanges       /home/runner/work/platform/platform/packages/rs-sdk/src/platform/query.rs

================================================================================
Summary:
--------------------------------------------------------------------------------
New queries implemented: 6 (100.0%)
New queries missing: 0 (0.0%)

Total known queries: 53
  - Implemented: 50
  - Not implemented: 2
  - Excluded: 1

Not implemented queries:
  - getConsensusParams
  - getTokenPreProgrammedDistributions

@lklimek
Copy link
Copy Markdown
Contributor Author

lklimek commented Feb 9, 2026

Failing tests are not related.

@lklimek lklimek merged commit 184629b into v3.1-dev Feb 9, 2026
130 of 138 checks passed
@lklimek lklimek deleted the build/js-webpack-104 branch February 9, 2026 11:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants