HtmlWebpackPlugin saw a minor update from version 4.0.2 to 4.0.3, introducing subtle but potentially important changes primarily focused on improving developer experience and type safety. While the core functionality of simplifying HTML file creation for webpack bundles remains consistent, the update alters some of the underlying dependencies.
Specifically, version 4.0.3 includes updates to its type definitions. It introduces @types/webpack as a dependency, pulling in version 4.41.8. Furthermore, @types/tapable receives an update from version 1.0.4 to 1.0.5. These changes suggest a push towards better integration with webpack's typing system which provides developers with improved autocompletion, static analysis, and error detection within their IDEs when configuring and utilizing the plugin.
The update also seems to include some internal changes. Although the file count remains the same (13), the unpacked size increased slightly, from 123713 to 124060, which implies minor code adjustments that are not reflected in the public facing API. It is worth noting that the core dependencies like lodash, tapable and html-minifier-terser remain the same between the two versions. The development dependencies are also the same.
For developers already using HtmlWebpackPlugin, upgrading to 4.0.3 offers enhanced type safety, reducing the likelihood of runtime errors. Consider this upgrade to improve type checking in your projects.
The are not vulnerabilities for the version 4.0.3 of the package html-webpack-plugin