Webpack-cli version 4.10.0 brings notable changes compared to its predecessor, version 4.9.2, impacting developers leveraging the webpack command-line interface. A key difference lies in the introduction of cross-spawn as a dependency in v4.10.0 (version ^7.0.3), replacing execa (^5.0.0) which was present in v4.9.2. This suggests a shift in how the CLI handles cross-platform process spawning. This change might affect certain build scripts or custom integrations that relied on the specific behavior of execa. Developers should review the implications of this dependency swap, ensuring compatibility with their existing workflows.
Furthermore, several dependency updates are present. Notably, @webpack-cli/info moves from version 1.4.1 to 1.5.0, and @webpack-cli/serve advances from 1.6.1 to 1.7.0 and @webpack-cli/configtest moves from 1.1.1 to 1.2.0 indicating improvements and potentially new features for displaying webpack information, serving development builds, and testing configurations, respectively. Developers should consult the changelogs for these sub-packages to understand the precise nature of these updates and their potential impact on their projects. The distribution size also changes, the newer version weighs 109137 unpacked against the 81900 of the older version, probably accounted by adding/updating dependencies so it could affect performance in environments with slow I/O. Finally, the dependency changes could bring security improvements. Both versions maintain peer dependency compatibility with webpack v4 and v5.
The are not vulnerabilities for the version 4.10.0 of the package webpack-cli