Bump braces, webpack and @wordpress/scripts

[dependabot]

Bumps braces to 3.0.3 and updates ancestor dependencies braces, webpack and @wordpress/scripts. These dependencies need to be updated together.

Updates braces from 3.0.2 to 3.0.3

Commits

• 74b2db2 3.0.3
• 88f1429 update eslint. lint, fix unit tests.
• 415d660 Snyk js braces 6838727 (#40)
• 190510f fix tests, skip 1 test in test/braces.expand
• 716eb9f readme bump
• a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
• 2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
• 9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
• 98414f9 remove funding file
• 665ab5d update keepEscaping doc (#27)
• Additional commits viewable in compare view

Updates webpack from 4.47.0 to 5.96.0

Release notes

Sourced from webpack's releases.

v5.96.0

Bug Fixes

• Fixed Module Federation should track all referenced chunks
• Handle Data URI without base64 word
• HotUpdateChunk have correct runtime when modified with new runtime
• Order of chunks ids in generated chunk code
• No extra Javascript chunks when using asset module as an entrypoint
• Use optimistically logic for output.environment.dynamicImport to determine chunk format when no browserslist or target
• Collision with global variables for optimization.avoidEntryIife
• Avoid through variables in inlined module
• Allow chunk template strings in output.devtoolNamespace
• No extra runtime for get javascript/css chunk filename
• No extra runtime for prefetch and preload in JS runtime when it was unsed in CSS
• Avoid cache invalidation using ProgressPlugin
• Increase parallelism when using importModule on the execution stage
• Correctly parsing string in export and import
• Typescript types
• [CSS] css/auto considers a module depending on its filename as css (pure CSS) or css/local, before it was css/global and css/local
• [CSS] Always interpolate classes even if they are not involved in export
• [CSS] No extra runtime in Javascript runtime chunks for asset modules used in CSS
• [CSS] No extra runtime in Javascript runtime chunks for external asset modules used in CSS
• [CSS] No extra runtime for the node target
• [CSS] Fixed url()s and @import parsing
• [CSS] Fixed - emit a warning on broken :local and :global

New Features

• Export CSS and ESM runtime modules
• Single Runtime Chunk and Federation eager module hoisting
• [CSS] Support /* webpackIgnore: true */ for CSS files
• [CSS] Support src() support
• [CSS] CSS nesting in CSS modules

v5.95.0

Bug Fixes

• Fixed hanging when attempting to read a symlink-like file that it can't read
• Handle default for import context element dependency
• Merge duplicate chunks call after split chunks
• Generate correctly code for dynamically importing the same file twice and destructuring
• Use content hash as [base] and [name] for extracted DataURI's
• Distinguish module and import in module-import for externals import's
• [Types] Make EnvironmentPlugin default values types less strict
• [Types] Typescript 5.6 compatibility

New Features

• Add new optimization.avoidEntryIife option (true by default for the production mode)

... (truncated)

Commits

• aff0c3e chore(release): 5.96.0
• 6f11ec1 refactor: module source types code
• b07142f refactor: module source types code
• 7d98b3c fix: Module Federation should track all referenced chunks
• 6d09769 chore: linting
• cb3cf61 chore: add test
• 69dd27e fix: Module Federation should track all referenced chunks
• 6a6f14f refactor: udate acorn
• db32353 refactor: code
• 79b8f00 refactor: update acorn
• Additional commits viewable in compare view

Updates @wordpress/scripts from 17.1.0 to 30.4.0

Release notes

Sourced from @​wordpress/scripts's releases.

19.6.0 RC2

Changelog

Enhancements

Components

• Add elevation tokens to storybook. (66122)
• Add foundations:Elevation to storybook. (66124)
• Add radius foundation and tokens to storybook. (66219)
• Combobox, FormTokenField: Show message when no matches found. (66142)
• Storybook: Organizes components under 'Utilities'. (66210)
• Tabs: Expose active tab item props, use ariakit prop types. (66223)
• Tabs: Remove custom logic. (66097)
• DropdownMenuV2: Rename to Menu. (66289)

Core data

• Core Data: Add the 'getEntitiesConfig' resolver. (65871)

Block Library

• Add Transformation from Separator to Spacer. (66230)
• Add lightbox option in gallery block link control. (64014)
• Archives: Add border block support. (63400)
• Border support added to comments. (66354)
• Cover Block: Add Image Resolution options. (62926)
• HTML Block: Force HTML preview in view mode. (66440)

Zoom Out

• Add keyboard shortcut in editor. (66400)
• Iterate zoom out shuffle into a more visual control. (66194)
• Use the zoom-level value to scale the iframe. (66280)

Site Editor

• Remove synchronization of canvas mode into store. (66213)
• Style Book: Clean up layout. (66255)
• Update site icon and title position. (66171)
• Editor Interface: Remove small header from global styles/plugin sidebar. (64474)
• Remove purple coloring from DocumentBar and PostCard. (66451)

Block Editor

• BlockGroupToolbar: Better i18n context for toolbar labels. (66211)

Data Views

• Fix alignment of action items in list layout. (66273)
• Templates: Hide media field in list view. (66573)

Global Styles

• Backport: Caching of global styles for blocks from core. (66349)
• Style Book: Add color tab. (65692)

Real-time Collaboration

• Inline Commenting: Disable comments on published posts for now. (66583)

... (truncated)

Changelog

Sourced from @​wordpress/scripts's changelog.

30.4.0 (2024-10-30)

Enhancements

• Add BlueOak-1.0.0 the GPLv2-compatible licenses recognized by check-licenses (#66139).
• Add an optional --root-folder argument to the plugin-zip command (#61375). By default, the command will use the plugin's name as the root folder of the zip. If the change in the behavior impacted your workflow, you could pass --no-root-folder to remove the root folder.

Internal

• Refactor to extract license related logic to a reusable module (#66179).

30.3.0 (2024-10-17)

New Features

• Add new build-blocks-manifest command to generate a PHP file containing block metadata from all block.json files in a project (#65866).

30.2.0 (2024-10-16)

30.1.0 (2024-10-03)

30.0.0 (2024-09-19)

Breaking Changes

• Updated stylelint dependency to ^16.8.2 (#64828).
• Switched default config from @wordpress/stylelint-config/scss to use @wordpress/stylelint-config/scss-stylistic to keep stylistic rules (#64828).

29.0.0 (2024-09-05)

Breaking Changes

• Fixed the issue with having 5 high severity vulnerabilities by upgrading the puppeteer-core package to the latest major version ^23.1.0 (#64597).

Enhancements

• Inlines CSS files imported from other CSS files before optimization in the build command (#61121).

Bug Fixes

• Added chunk filename in webpack config to avoid reading stale files (#58176).

28.6.0 (2024-08-21)

28.5.0 (2024-08-07)

28.4.0 (2024-07-24)

New Features

... (truncated)

Commits

• dcf4613 chore(release): publish
• 29094ac Update changelog files
• 41580fe Merge changes published in the Gutenberg plugin "release/19.6" branch
• 3c61eb6 chore(release): publish
• 4aff3e5 Update changelog files
• 4183a52 scripts: Add build-blocks-manifest command (#65866)
• ab34a7a chore(release): publish
• 764bf54 Update changelog files
• bf50781 Merge changes published in the Gutenberg plugin "release/19.5" branch
• 2e5495c chore(release): publish
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by gutenbergplugin, a new releaser for @​wordpress/scripts since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.