[Security] Bump webpack from 5.72.1 to 5.76.2 in /frontend

Bumps webpack from 5.72.1 to 5.76.2. This update includes a security fix.

Vulnerabilities fixed

Cross-realm object access in Webpack 5 Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.

Patched versions: 5.76.0 Affected versions: >= 5.0.0, < 5.76.0

Release notes

Sourced from webpack's releases.

v5.76.2

Bugfixes

• Fix bug where a missing semicolon in generated bundle output for publicPathRuntime would cause concatenated runtime errors by @​snitin315 in webpack/webpack#16811
• Remove redundant semicolons generated in bundle runtime code after onScriptComplete function by @​ahaoboy in webpack/webpack#16347
• Fix bug where RealContentHashPlugin was not respecting output.hashSalt's ability to cause a force recalculation of [contenthash] for emitted assets by @​dmichon-msft #16789

Performance

• Improve memory and runtime performance of sourcemaps via hoisting Regular Expression literals to stored variables by @​TheLarkInn in webpack/webpack#15722
• Correct v8 deoptimization in ModuleGraph due to instance property declarations occurring outside of constructor by @​snitin315 in webpack/webpack#16830

Developer Experience

• Improved internal typings to match webpack-sources typings for Source instances by @​snitin315 in webpack/webpack#16805
• Update repo examples to include missing quotation by @​snitin315 in webpack/webpack#16812

New Contributors

• @​ahaoboy made their first contribution in webpack/webpack#16347

Full Changelog: https://github.com/webpack/webpack/compare/v5.76.1...v5.76.2

v5.76.1

Fixed

• Added assert/strict built-in to NodeTargetPlugin

Revert

• Improve performance of hashRegExp lookup by @​ryanwilsonperkin in webpack/webpack#16759

v5.76.0

Bugfixes

• Avoid cross-realm object access by @​Jack-Works in webpack/webpack#16500
• Improve hash performance via conditional initialization by @​lvivski in webpack/webpack#16491
• Serialize generatedCode info to fix bug in asset module cache restoration by @​ryanwilsonperkin in webpack/webpack#16703
• Improve performance of hashRegExp lookup by @​ryanwilsonperkin in webpack/webpack#16759

Features

• add target to LoaderContext type by @​askoufis in webpack/webpack#16781

Security

• CVE-2022-37603 fixed by @​akhilgkrishnan in webpack/webpack#16446

Repo Changes

• Fix HTML5 logo in README by @​jakebailey in webpack/webpack#16614
• Replace TypeScript logo in README by @​jakebailey in webpack/webpack#16613
• Update actions/cache dependencies by @​piwysocki in webpack/webpack#16493

New Contributors

• @​Jack-Works made their first contribution in webpack/webpack#16500
• @​lvivski made their first contribution in webpack/webpack#16491
• @​jakebailey made their first contribution in webpack/webpack#16614
• @​akhilgkrishnan made their first contribution in webpack/webpack#16446
• @​ryanwilsonperkin made their first contribution in webpack/webpack#16703

... (truncated)

Commits

• dbf7bf3 5.76.2
• 125449f Merge pull request #16830 from snitin315/fix/module-graph
• 3943cce fix: initialize this._cacheStage in ModuleGraph constructor
• 796b511 Merge pull request #16805 from snitin315/fix/improve-source-types
• be54e43 Merge pull request #16811 from snitin315/fix/add-missing-semicolon
• 976320d test: update StatsTestCases snapshots
• 44256c2 fix: add missing semicolon in AutoPublicPathRuntimeModule
• 9ca77a3 Merge pull request #15722 from webpack/feat/issue-15720
• 8f1b5ff Merge pull request #16347 from ahaoboy/main
• 0f82297 docs: fix typo in examples
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for webpack since your current version.

---

Dependabot commands

You can trigger Dependabot actions by commenting on this MR

• $dependabot rebase will rebase this MR
• $dependabot recreate will recreate this MR rewriting all the manual changes and resolving conflicts