refactor: export a default expression's binding on demand - #22227

A pull request that is not going to merge still spent the full CI budget on
it. The seven heavy suites in test.yml were held behind `basic` alone, so a
red `lint` or `unit` launched all 26 integration legs; the eight benchmark
shards were held behind nothing at all, and on #22227 they ran for another 67
minutes after `basic` had already gone red — around 3.3 runner-hours of it.

Hold the test.yml suites behind all three cheap jobs, which are the three a
merge needs anyway, and add a gate job to benchmarks.yml that waits on the same
three check runs before the shards start. The gate only ever stops a pull
request: a push to main still benchmarks unconditionally, because CodSpeed
draws every later comparison against that baseline. It also fails open — a gate
that timed out, could not see the checks, or errored lets the shards run rather
than suppressing them on a guess.

A pull request that is not going to merge still spent the full CI budget on
it. The seven heavy suites in test.yml were held behind `basic` alone, so a
red `lint` or `unit` launched all 26 integration legs; the eight benchmark
shards were held behind nothing at all, and on #22227 they ran for another 67
minutes after `basic` had already gone red — around 3.3 runner-hours of it.

Hold the test.yml suites behind all three cheap jobs, which are the three a
merge needs anyway. benchmarks.yml becomes callable and test.yml calls it
behind the same three, so a pull request reaches the shards through `needs`
rather than through a job that polls: nothing is spent while the cheap suites
run, and a red one skips the shards outright.

A push to main keeps benchmarks.yml's own trigger and is never gated, because
CodSpeed draws every later comparison against that commit's baseline. Its
concurrency group is named rather than derived from `github.workflow`, which
reads as the caller's name once test.yml calls it.

A pull request that is not going to merge still spent the full CI budget on
it. The seven heavy suites in test.yml were held behind `basic` alone, so a
red `lint` or `unit` launched all 27 integration legs; the eight benchmark
shards were held behind nothing at all, and on #22227 they ran for another 67
minutes after `basic` had already gone red — around 3.3 runner-hours of it.

Hold the test.yml suites behind all three cheap jobs, which are the three a
merge needs anyway. benchmarks.yml becomes callable and test.yml calls it
behind the same three, so a pull request reaches the shards through `needs`
rather than through a job that polls: nothing is spent while the cheap suites
run, and a red one skips the shards outright.

A push to main keeps benchmarks.yml's own trigger and is never gated, because
CodSpeed draws every later comparison against that commit's baseline. Its
concurrency group is named rather than derived from `github.workflow`, which
reads as the caller's name once test.yml calls it.

A pull request that is not going to merge still spent the full CI budget on
it. The seven heavy suites in test.yml were held behind `basic` alone, so a
red `lint` or `unit` launched all 27 integration legs; the eight benchmark
shards were held behind nothing at all, and on #22227 they ran for another 67
minutes after `basic` had already gone red — around 3.3 runner-hours of it.

Hold the test.yml suites behind all three cheap jobs, which are the three a
merge needs anyway. benchmarks.yml becomes callable and test.yml calls it
behind the same three, so a pull request reaches the shards through `needs`
rather than through a job that polls: nothing is spent while the cheap suites
run, and a red one skips the shards outright.

A push to main keeps benchmarks.yml's own trigger and is never gated, because
CodSpeed draws every later comparison against that commit's baseline. Its
concurrency group is named rather than derived from `github.workflow`, which
reads as the caller's name once test.yml calls it.

A pull request that is not going to merge still spent the full CI budget on
it. The seven heavy suites in test.yml were held behind `basic` alone, so a
red `lint` or `unit` launched all 27 integration legs; the eight benchmark
shards were held behind nothing at all, and on #22227 they ran for another 67
minutes after `basic` had already gone red — around 3.3 runner-hours of it.

Hold the test.yml suites behind all three cheap jobs, which are the three a
merge needs anyway. benchmarks.yml becomes callable and test.yml calls it
behind the same three, so a pull request reaches the shards through `needs`
rather than through a job that polls: nothing is spent while the cheap suites
run, and a red one skips the shards outright.

A push to main keeps benchmarks.yml's own trigger and is never gated, because
CodSpeed draws every later comparison against that commit's baseline. Its
concurrency group is named rather than derived from `github.workflow`, which
reads as the caller's name once test.yml calls it.

* ci: gate the expensive jobs on lint, basic and unit

A pull request that is not going to merge still spent the full CI budget on
it. The seven heavy suites in test.yml were held behind `basic` alone, so a
red `lint` or `unit` launched all 27 integration legs; the eight benchmark
shards were held behind nothing at all, and on #22227 they ran for another 67
minutes after `basic` had already gone red — around 3.3 runner-hours of it.

Hold the test.yml suites behind all three cheap jobs, which are the three a
merge needs anyway. benchmarks.yml becomes callable and test.yml calls it
behind the same three, so a pull request reaches the shards through `needs`
rather than through a job that polls: nothing is spent while the cheap suites
run, and a red one skips the shards outright.

A push to main keeps benchmarks.yml's own trigger and is never gated, because
CodSpeed draws every later comparison against that commit's baseline. Its
concurrency group is named rather than derived from `github.workflow`, which
reads as the caller's name once test.yml calls it.

* ci: cancel superseded pull request runs

Four workflows had no concurrency group, so a new commit left the previous
commit's run going: CodeQL analyses both languages, pkg.pr.new publishes a
preview of code that has been replaced, and dependency-review and the labeler
each run again alongside the run they supersede.

Cancel them on a pull request and leave the `main` runs alone, as code-size
and deep-imports already do — code scanning reads a pull request's alerts
against the default branch's last analysis, and every push to main publishes
its own preview, so neither is superseded by anything.

The labeler is keyed on the pull request number rather than on `github.ref`,
which under `pull_request_target` is the base branch — the usual group would
have every open pull request cancelling the others' labelling.

pr-quality only fires on opened/reopened and release.yml only on a push to a
tag, so a new commit supersedes nothing there.

* test(css): compare the color corpus, and group the parser jobs by language

css-parsing-tests has 8366 cases and webpack compared 13 of them — the whole
color half was run only to confirm no crash, with upstream's expected values
discarded. They are CSSOM serializations rather than minifier output, so they
cannot be compared literally; reading both the input and that serialization
through webpack's own folding and canonicalizing to `#rrggbb` does compare,
wherever both land in sRGB. That is 796 cases, and webpack agrees on all of
them — no exception list.

Where it declines to fold (lab, lch, out-of-gamut) the two spellings are not
claims about the same thing, so those stay out rather than becoming noise:
comparing every case reports 5549 differences, essentially all of them that.

The three jobs reading an upstream parser corpus become one matrix, named for
the language rather than for whose repository the fixtures live in — which had
already drifted, since `html5lib` reads WPT for the corpus html5lib-tests
dropped. They differed only in submodule, suite and coverage flag.

* docs: name syntax-equivalence (chrome) among the coverage uploaders

Its matrix row sets `coverage: true` and the job's Codecov step runs on that
flag, so the list of suites to wait for was one short — and the sentence after
it said everything unlisted cannot move the number. A contributor following it
could read a coverage result as final while that job was still running.

This PR contains the following updates:

| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [webpack](https://github.com/webpack/webpack) | [`5.111.1` → `5.112.0`](https://renovatebot.com/diffs/npm/webpack/5.111.1/5.112.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/webpack/5.112.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/webpack/5.111.1/5.112.0?slim=true) |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/99) for more information.

---

### Release Notes

<details>
<summary>webpack/webpack (webpack)</summary>

### [`v5.112.0`](https://github.com/webpack/webpack/blob/HEAD/CHANGELOG.md#51120)

[Compare Source](webpack/webpack@v5.111.1...v5.112.0)

##### Minor Changes

- Apply `plugins` set on a multi-configuration array to the `MultiCompiler`. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22702](webpack/webpack#22702))

- Add `optimization.minimize.css.dropOverriddenDeclarations`, dropping a declaration a later one overrides where no target is named. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22175](webpack/webpack#22175))

- Export more plugins under their scope, move eleven loose exports under theirs, deprecate the old, and expose `template.DependencyTemplate`, `module.NullFactory` and `util.makeSerializable`. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22261](webpack/webpack#22261))

- Let `util.makeSerializable` take several requests, current one first. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22340](webpack/webpack#22340))

- Emit the source map `scopes` field, so a debugger resolves imported ESM bindings by name. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;21999](webpack/webpack#21999))

- Add `library.entryExports: "all"` to expose the exports of every entry module. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22235](webpack/webpack#22235))

- Recognize a required `const` binding assigned to `exports` as a re-export. (by [@&#8203;hai-x](https://github.com/hai-x) in [#&#8203;22276](webpack/webpack#22276))

- Accept glob patterns in more path, module and file filter options. (by [@&#8203;hai-x](https://github.com/hai-x) in [#&#8203;22422](webpack/webpack#22422))

- Bundle a run of inline `<script>` tags into one chunk the page can inline. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22188](webpack/webpack#22188))

- Add `module.parser.javascript.topLevelThis` for classic-script `this` semantics. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22193](webpack/webpack#22193))

- Add `module.parser.html.chunkName` and a `webpackChunkName` comment for tags. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22200](webpack/webpack#22200))

- Add `include`/`exclude` version and request filters to shared modules. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22297](webpack/webpack#22297))

- Keep module side-effect information in ESM output as PURE annotations. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;21789](webpack/webpack#21789))

- Add `optimization.splitChunks.dedupDepth` to discover chunk intersections. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22240](webpack/webpack#22240))

- Add `optimization.minimizeOptions.json`, on by default with `futureDefaults`. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22286](webpack/webpack#22286))

- Add `SSRManifestPlugin` and fix server-rendered CSS collection and adoption. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;21913](webpack/webpack#21913))

- Add an `ignore` hook to `output.copy` and keep unfollowed `from` symlinks. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22216](webpack/webpack#22216))

- Add `optimization.minimize.css.convertApproximateColors`. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22157](webpack/webpack#22157))

- Add XML parsing and SVG/XML minification with data URLs and attribute sorting. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22269](webpack/webpack#22269))

- Extract CSS/HTML license comments like JS and safely shorten CSS gradients. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22408](webpack/webpack#22408))

- Resolve an async `DefinePlugin.runtimeValue` over an async `beforeParse` hook. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22210](webpack/webpack#22210))

- Add CSS `customMedia`/`customSelectors` minimize options; resolve chained names. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22360](webpack/webpack#22360))

- Rename the `Harmony*` names to `ESM*` and deprecate the old spellings. (by [@&#8203;hai-x](https://github.com/hai-x) in [#&#8203;22283](webpack/webpack#22283))

- Reduce `css.syntax`/`html.syntax` to `parser`, `printer`, `SourceProcessor` with one node path. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22233](webpack/webpack#22233))

- Add a JavaScript `SyntaxTree` read like the CSS one, and `toEstreeObject`. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22608](webpack/webpack#22608))

- Fix minified code that threw, and add `pure_conversions` and `pure_heritage`. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22473](webpack/webpack#22473))

- Shorten more CSS values and selectors, fold longhands, order declarations and gather layer blocks. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22442](webpack/webpack#22442))

- Add `optimization.minimize.css.charset`; `false` drops `@charset` for UTF-8 CSS. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22632](webpack/webpack#22632))

##### Patch Changes

- Join rules a gathered `@layer` leaves adjacent, and an at-rule with a later one (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22204](webpack/webpack#22204))
  stating the same condition; read what a condition declares.

- Read escaped CSS names and functions as spelled, and minify them unescaped. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22262](webpack/webpack#22262))

- Minify JavaScript, CSS and HTML assets whose names carry a `#fragment`. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22277](webpack/webpack#22277))

- Require `minimizer-webpack-plugin` 5.12, so inline scripts in HTML minify again. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22296](webpack/webpack#22296))

- Minify the attributes of an HTML tag without rewriting the template in it. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22166](webpack/webpack#22166))

- Order joined at-rule selector lists and gather a repeated large `@layer` block. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22224](webpack/webpack#22224))

- Preserve case-sensitive template identifiers when minifying HTML tag attributes. (by [@&#8203;bjohansebas](https://github.com/bjohansebas) in [#&#8203;22177](webpack/webpack#22177))

- Match Acorn's strict directives, Unicode identifiers and expression validation. (by [@&#8203;bjohansebas](https://github.com/bjohansebas) in [#&#8203;22185](webpack/webpack#22185))

- Skip concatenating modules when `optimization.providedExports` is disabled. (by [@&#8203;hai-x](https://github.com/hai-x) in [#&#8203;22410](webpack/webpack#22410))

- Join rules a nesting lowering or duplicate drop left for a second pass. (by [@&#8203;aryanraj45](https://github.com/aryanraj45) in [#&#8203;22268](webpack/webpack#22268))

- Write U+00A0 in a minified HTML attribute as the character, not `&nbsp;`. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22208](webpack/webpack#22208))

- Escape a foreign `<script>` or `<style>` body, which is character data. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22233](webpack/webpack#22233))

- Name the runtime module whose generation fails while hashing. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22203](webpack/webpack#22203))

- Rebuild a module in watch when its missing unused dependencies swap. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22693](webpack/webpack#22693))

- Rebuild in watch mode when a file is deleted while a build is running. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22650](webpack/webpack#22650))

- Take out the declaration a lowered shorthand writes over, which its source spelling made look like a fallback. (by [@&#8203;aryanraj45](https://github.com/aryanraj45) in [#&#8203;22270](webpack/webpack#22270))

- Read a foreign `<script>` or `<style>` body as character data, not as raw text. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22258](webpack/webpack#22258))

- Keep an inline `<style>` body as written when rebuilding a page webpack emitted. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22265](webpack/webpack#22265))

- Fix minified HTML for `style` spellings, CSS quotes, `<noscript>` and a BOM. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22370](webpack/webpack#22370))

- Record a build dependency required through a spread on Bun. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22230](webpack/webpack#22230))

- Write a nested selector opening on a combinator against its parent the way the printer writes one. (by [@&#8203;aryanraj45](https://github.com/aryanraj45) in [#&#8203;22271](webpack/webpack#22271))

- Fix missing async stylesheets with a shared runtime. (by [@&#8203;bjohansebas](https://github.com/bjohansebas) in [#&#8203;22659](webpack/webpack#22659))

- Support deferred imports introduced by hot updates. (by [@&#8203;bjohansebas](https://github.com/bjohansebas) in [#&#8203;22668](webpack/webpack#22668))

- Fix trailing commas in `require.resolve()` and `require.resolveWeak()` calls. (by [@&#8203;bjohansebas](https://github.com/bjohansebas) in [#&#8203;22658](webpack/webpack#22658))

- Keep regular expressions, functions and plugins distinct in resolver caches. (by [@&#8203;bjohansebas](https://github.com/bjohansebas) in [#&#8203;22667](webpack/webpack#22667))

- Order the list a lowered nested selector lands in on what is written, not on what was. (by [@&#8203;aryanraj45](https://github.com/aryanraj45) in [#&#8203;22287](webpack/webpack#22287))

- Hoist a vendor-prefixed nested rule for a target that reads no nesting. (by [@&#8203;aryanraj45](https://github.com/aryanraj45) in [#&#8203;22308](webpack/webpack#22308))

- Name a hoisted nested rule in the dark-scheme copy it writes. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22318](webpack/webpack#22318))

- Minify data: URL payloads in HTML attributes and `new URL`, and web manifests. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22300](webpack/webpack#22300))

- fold a fallback's colors over the author's arguments, and print with (by [@&#8203;aryanraj45](https://github.com/aryanraj45) in [#&#8203;22314](webpack/webpack#22314))
  `recurseBlocks: false` rather than throwing

- Read a regular expression repeating a capture group name in linear time. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22187](webpack/webpack#22187))

- Make lazy barrels defer import declarations and keep no deferral across compilations. (by [@&#8203;hai-x](https://github.com/hai-x) in [#&#8203;22359](webpack/webpack#22359))

- Invalidate unaffected caches when connection activity or async status changes. (by [@&#8203;bjohansebas](https://github.com/bjohansebas) in [#&#8203;22431](webpack/webpack#22431))

- Order concatenated re-exports deterministically when their source order ties. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22697](webpack/webpack#22697))

- Regenerate a module's exports when a require() cycle forms or breaks around it. (by [@&#8203;aryanraj45](https://github.com/aryanraj45) in [#&#8203;22644](webpack/webpack#22644))

- Recompute re-exports, code and warnings when a module goes missing or returns. (by [@&#8203;bjohansebas](https://github.com/bjohansebas) in [#&#8203;22432](webpack/webpack#22432))

- Preserve loader resolution dependencies across cached rebuilds. (by [@&#8203;bjohansebas](https://github.com/bjohansebas) in [#&#8203;22430](webpack/webpack#22430))

- Read unwatched changes afresh and wait for restarted watch compilers to finish. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22646](webpack/webpack#22646))

- Parse loader output for `.wasm` as JavaScript when async wasm is auto-enabled. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22556](webpack/webpack#22556))

- Remove modules an async chunk inherits from a named parent chunk grown later. (by [@&#8203;hai-x](https://github.com/hai-x) in [#&#8203;22555](webpack/webpack#22555))

- Fix JavaScript minifier crashes, altered behavior, lost comments, unparsable output and null source map sources, including parameter aliases, ESTree trees and preserved names, and stop it writing into the caller's parse options. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22352](webpack/webpack#22352))

- Preserve the source phase of dynamic WebAssembly import contexts. (by [@&#8203;bjohansebas](https://github.com/bjohansebas) in [#&#8203;22604](webpack/webpack#22604))

- Await every async entry before resolving an ESM library import. (by [@&#8203;bjohansebas](https://github.com/bjohansebas) in [#&#8203;22617](webpack/webpack#22617))

- Keep unknown `import.meta` properties per module, alike for aliases and direct use. (by [@&#8203;bjohansebas](https://github.com/bjohansebas) in [#&#8203;22618](webpack/webpack#22618))

- Return WebAssembly modules directly from eager and weak source imports. (by [@&#8203;bjohansebas](https://github.com/bjohansebas) in [#&#8203;22606](webpack/webpack#22606))

- Handle missing ESM hot update manifests in Node.js without failing HMR checks. (by [@&#8203;bjohansebas](https://github.com/bjohansebas) in [#&#8203;22613](webpack/webpack#22613))

- Speed up JavaScript parsing: comment lookup, the tokenizer and the grammar. (by [@&#8203;bjohansebas](https://github.com/bjohansebas) in [#&#8203;22179](webpack/webpack#22179))

- Name a core module external by its key whichever spelling the code uses. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22565](webpack/webpack#22565))

- Prefix and drop 2009 flexbox names, keeping them where a box lays out by them. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22320](webpack/webpack#22320))

- Keep `initial` where Gecko or WebKit reads the property's keyword apart. (by [@&#8203;aryanraj45](https://github.com/aryanraj45) in [#&#8203;22176](webpack/webpack#22176))

- Fold `calc()` as lightningcss does, keeping it where a bare value is refused. (by [@&#8203;aryanraj45](https://github.com/aryanraj45) in [#&#8203;22205](webpack/webpack#22205))

- Keep a `color-mix()` whose hue rests on a gray's conversion residue. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22198](webpack/webpack#22198))

- Keep a shorthand's initial keyword where it parts two keywords of another slot. (by [@&#8203;dependabot](https://github.com/apps/dependabot) in [#&#8203;22518](webpack/webpack#22518))

- Group `lib/` and `lib/dependencies/` sources into directories. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22118](webpack/webpack#22118))

- Treat a browserslist target given at a bare major version (e.g. `safari 10`) as `<major>.0` when a feature's first supported version is a `[major, minor]` pair, so it is no longer reported as unsupported. (by [@&#8203;Eshiv-Pandey](https://github.com/Eshiv-Pandey) in [#&#8203;22280](webpack/webpack#22280))

- Keep the last HMR update with `output.clean`; stop rechecking removed files. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22339](webpack/webpack#22339))

- Read and print a CSS backslash as the spec does, and a NUL as U+FFFD. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22201](webpack/webpack#22201))

- Make minified CSS and HTML stable on a second pass, even for truncated input. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22290](webpack/webpack#22290))

- Minify a merged `<style>` run as one sheet, closing each where its input ended. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22302](webpack/webpack#22302))

- Minify JavaScript with webpack's printer under `futureDefaults`, `terser` otherwise. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22217](webpack/webpack#22217))

- Preserve `wrappedContextRegExp` flags when rebuilding context request matchers. (by [@&#8203;Eshiv-Pandey](https://github.com/Eshiv-Pandey) in [#&#8203;22303](webpack/webpack#22303))

- Minify CSS `@supports`, `@import` and `@custom-media` conditions, and exponent numbers. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22347](webpack/webpack#22347))

- Fold unitless `hsl()`/`hwb()` channels, and only where the separators are valid. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22242](webpack/webpack#22242))

- Split `@value` imports on the `from` keyword, not a substring in the path. (by [@&#8203;Eshiv-Pandey](https://github.com/Eshiv-Pandey) in [#&#8203;22306](webpack/webpack#22306))

- Destructure a dotted `DefinePlugin` key whose value is falsy or a runtimeValue. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22215](webpack/webpack#22215))

- Make `Stats.hasErrors()` read errors through the `processErrors` hook (via `getErrors()`), matching `hasWarnings()`, so a plugin that filters errors out of the hook is no longer contradicted by `hasErrors()`. (by [@&#8203;Eshiv-Pandey](https://github.com/Eshiv-Pandey) in [#&#8203;22281](webpack/webpack#22281))

- Allow wrapping an external concatenated module, now asked of the module itself, and re-exporting a JSON or asset `default` as a namespace object. (by [@&#8203;hai-x](https://github.com/hai-x) in [#&#8203;22226](webpack/webpack#22226))

- Match `urlHints` rules written with `and`, `or`, `not` and `glob` conditions; profile hook map taps, such as resolver and parser hooks, in `ProfilingPlugin`; report `import.meta` option errors inside `require.ensure` callbacks, not crash; and replace `any`, `object` and `Function` with precise types in the type definitions. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22681](webpack/webpack#22681))

- Reduce CSS and HTML build time and memory allocation. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22135](webpack/webpack#22135))

- Reuse free names instead of re-parsing modules for the entry IIFE rename. (by [@&#8203;hai-x](https://github.com/hai-x) in [#&#8203;22206](webpack/webpack#22206))

- Release each module's ast once scope-analysed, and encode each export path once. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22241](webpack/webpack#22241))

- Export a module library entry's default expression as its own binding, and keep (by [@&#8203;hai-x](https://github.com/hai-x) in [#&#8203;22227](webpack/webpack#22227))
  the export helpers where the entry is not inlined.

- Give a wrapped concatenated body the same function header as a module factory. (by [@&#8203;hai-x](https://github.com/hai-x) in [#&#8203;22254](webpack/webpack#22254))

- Skip reading every asset when no content hash is named. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22256](webpack/webpack#22256))

- Cut graph, cached set, lazy barrel and ESM import memory and allocations. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22289](webpack/webpack#22289))

- Stop a module source from being held as both a string and a buffer. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22294](webpack/webpack#22294))

- Read the browserslist data and options schema only when a build needs them. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22324](webpack/webpack#22324))

- Release the eval devtool's cached module sources after wrapping them. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22358](webpack/webpack#22358))

- Release the rendered module sources after emitting the chunks. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22365](webpack/webpack#22365))

- Cut the peak memory and time of minifying through webpack's printer. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22368](webpack/webpack#22368))

- Shrink minified JS: unwrap IIFEs, fold calls, drop dead code, split arrays. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22393](webpack/webpack#22393))

- Cut JavaScript minifier time and memory; keep token positions in large inputs. (by [@&#8203;bjohansebas](https://github.com/bjohansebas) in [#&#8203;22329](webpack/webpack#22329))

- Keep the `calc()` around a `steps()` count `jump-none` would reject bare. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22168](webpack/webpack#22168))

- Split the CSS syntax module into a parser file and a printer file. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22222](webpack/webpack#22222))

- Update enhanced-resolve to 5.26.0. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22358](webpack/webpack#22358))

- Update watchpack to 2.6.1. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22670](webpack/webpack#22670))

- Split the HTML syntax module into a parser file and a printer file. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22223](webpack/webpack#22223))

- Rename classes in `lib/` so each says what it does and no two share a name. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22361](webpack/webpack#22361))

- Keep the remote fallback index aligned with registered container externals when an `internal ` external precedes a real one. (by [@&#8203;Eshiv-Pandey](https://github.com/Eshiv-Pandey) in [#&#8203;22362](webpack/webpack#22362))

- Stop a minified inlined chunk leaving a doubled `;` in its `<script>`. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22370](webpack/webpack#22370))

- Stop `mergeDistantRules` mangling rules or reordering `all`, and merge more. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22370](webpack/webpack#22370))

- Minify by parsing with webpack's own parser rather than terser's. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22397](webpack/webpack#22397))

- Read JavaScript with webpack's parser alone when minifying, refusing early errors. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22397](webpack/webpack#22397))

- Parse an `assert(...)` call after an import with no semicolon, and a regular expression after `yield` in a generator method. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22406](webpack/webpack#22406))

- Keep the private names a direct `eval` reads when mangling. (by [@&#8203;aryanraj45](https://github.com/aryanraj45) in [#&#8203;22412](webpack/webpack#22412))

- Keep a class dropped for its effects where they read a private name it declares. (by [@&#8203;aryanraj45](https://github.com/aryanraj45) in [#&#8203;22421](webpack/webpack#22421))

- Parenthesize the right side of a private `in`, a `yield`, `await`, private `in` or optional chain tagging a template, and a `let` or `async` starting a statement or loop head, where the minifier printed code that no longer parsed or read otherwise. (by [@&#8203;aryanraj45](https://github.com/aryanraj45) in [#&#8203;22437](webpack/webpack#22437))

- Keep a name a parameter list or catch parameter reads from resolving to what the function body or catch block declares, which the minifier renamed or dropped as unused. (by [@&#8203;aryanraj45](https://github.com/aryanraj45) in [#&#8203;22439](webpack/webpack#22439))

- Scope and export a CSS Modules `@value` the same way whether local or imported. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22443](webpack/webpack#22443))

- Keep CSS `border: none` and gradient fallbacks for units a target cannot read. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22567](webpack/webpack#22567))

- Keep minified CSS safe for older browsers; drop dead fallbacks and overrides. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22696](webpack/webpack#22696))

- Keep CSS rules apart from a neighbor whose selector no browser parses. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22634](webpack/webpack#22634))

- Keep an `:nth-*()` argument with a space after its sign as written. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22700](webpack/webpack#22700))

- Keep minified CSS readable by browsers the compat data does not cover. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22701](webpack/webpack#22701))

- Keep a module its chunk still needs after `compilation.rebuildModule()`. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22705](webpack/webpack#22705))

- Keep a CSS rule nested under a selector opening on a combinator when lowering. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22707](webpack/webpack#22707))

- Use module paths for webpack's built-in minimizers so parallel minification can load them directly in workers instead of serializing their function sources. (by [@&#8203;xiaoxiaojx](https://github.com/xiaoxiaojx) in [#&#8203;22309](webpack/webpack#22309))

- Keep stats from an earlier build readable after a later build no longer has one of their modules. (by [@&#8203;alexander-akait](https://github.com/alexander-akait) in [#&#8203;22695](webpack/webpack#22695))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 9am on tuesday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNjcuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE2Ny4wIiwidGFyZ2V0QnJhbmNoIjoiZGV2ZWxvcCIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJyZW5vdmF0ZSJdfQ==-->

Reviewed-on: https://code.futo.org/harbor/harbor/pulls/1941
Reviewed-by: Mark Harding <mark@futo.org>