Workbox webpack plugin version 4.3.0 is a minor release following version 4.2.0, designed to streamline service worker integration within Webpack build processes. Both versions serve the core purpose of generating a manifest of local files for precaching using workbox-sw, ultimately enhancing offline capabilities and improving web application performance. The key difference lies in the updated dependency on workbox-build, which progresses from version 4.2.0 to 4.3.0.
For developers considering upgrading, this signifies potential enhancements and bug fixes within the workbox build tooling itself. The core plugin functionality related to webpack remains consistent. Both versions support webpack versions 2, 3, and 4 as peer dependencies. Developers can expect similar configuration options and integration patterns across these versions.
Other dependencies like @babel/runtime and json-stable-stringify stay constant. Therefore, the upgrade primarily focuses on leveraging the improvements offered by the updated workbox-build dependency. Before updating, developers should consult the workbox-build changelog for details on the specific changes introduced in the 4.3.0 release to assess its impact on their project. Given the minor version bump, a smooth transition is generally anticipated.
All the vulnerabilities related to the version 4.3.0 of the package
Command Injection in lodash
lodash
versions prior to 4.17.21 are vulnerable to Command Injection via the template function.