# webpack changelog

> A static module bundler for modern JavaScript applications.

- Vendor: OpenJS Foundation
- Category: Frameworks & Libraries
- Official site: https://webpack.js.org
- Tracked by: What's New (https://whatsnew.fyi/product/webpack)
- Harvested from: GitHub (webpack/webpack)
- Entries below: 10 (newest first)

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

## Releases

### v5.109.2

- Date: 2026-07-28
- Version: v5.109.2
- Original notes: https://github.com/webpack/webpack/releases/tag/v5.109.2
- Permalink: https://whatsnew.fyi/product/webpack/releases/v5.109.2

- **fixed** — Resolve aliases pointing at a package directory whose name ends with .js
- **fixed** — Name CSS sources in source maps by their resource path, without the css prefix
- **fixed** — Delete no longer referenced files from the filesystem cache directory after storing the cache, age them by recorded time so restored caches are cleaned too, and collect every fully expired pack in one store instead of one per build
- **fixed** — Report universal as the loader context target for the universal target
- **fixed** — Skip require().prop in dead branches gated by inlined imported constants
- **changed** — Annotate configuration options and public hooks in the generated types with the @since JSDoc tag

###### Patch Changes

- Resolve aliases pointing at a package directory whose name ends with `.js` again. (by [@alexander-akait](https://github.com/alexander-akait) in [#21542](https://github.com/webpack/webpack/pull/21542))

- Name CSS sources in source maps by their resource path, without the `css ` prefix. (by [@bjohansebas](https://github.com/bjohansebas) in [#21536](https://github.com/webpack/webpack/pull/21536))

- Delete no longer referenced files from the filesystem cache directory after storing the cache, age them by recorded time so restored caches are cleaned too, and collect every fully expired pack in one store instead of one per build. (by [@bjohansebas](https://github.com/bjohansebas) in [#21528](https://github.com/webpack/webpack/pull/21528))

- Report `"universal"` as the loader context target for the universal target. (by [@alexander-akait](https://github.com/alexander-akait) in [#21540](https://github.com/webpack/webpack/pull/21540))

- Skip `require().prop` in dead branches gated by inlined imported constants. (by [@hai-x](https://github.com/hai-x) in [#21517](https://github.com/webpack/webpack/pull/21517))

- Annotate configuration options and public hooks in the generated types with the `@since` JSDoc tag. (by [@bjohansebas](https://github.com/bjohansebas) in [#21473](https://github.com/webpack/webpack/pull/21473))

### v5.109.1

- Date: 2026-07-27
- Version: v5.109.1
- Original notes: https://github.com/webpack/webpack/releases/tag/v5.109.1
- Permalink: https://whatsnew.fyi/product/webpack/releases/v5.109.1

- **fixed** — Fix stray semicolon emitted before an imported call following a parenthesized sequence element
- **fixed** — Make require(esm) module.exports re-export analysis independent of module processing order
- **fixed** — Ignore ERR_SERVER_NOT_RUNNING on lazy-compilation backend dispose so compiler.close() succeeds on Bun
- **changed** — Name the failing key when DefinePlugin fails to evaluate a typeof value
- **changed** — Improve Deno compatibility: guard setNoDelay and force-close connections on lazy-compilation backend dispose, and return a real ArrayBuffer from the Node async/sync wasm loader so WebAssembly.instantiate accepts it
- **changed** — Speed up the HTML parser and cut its peak memory: module-scope helpers/state and tokenizer callbacks, plus exact AST column pre-sizing
- **fixed** — Track CommonJS build dependencies by parsing sources when require.cache children are unavailable (e.g. Bun)
- **changed** — Cook common string-literal escapes on the JS parser fast path and own the tokenizer's cold-path readers
- **changed** — Build the CSS parseA* AST on the SoA store instead of node classes, cutting parse memory and time
- **changed** — Speed up and cut memory of the experimental CSS and HTML parsers: drop two derivable AST node columns, and scan long string, url, comment, and plaintext token bodies natively
- **changed** — Speed up non-modules CSS parsing: skip redundant token re-reads, drop selector-prelude tokens without materializing nodes, allocate rule preludes lazily, and fast-path empty list seals
- **changed** — Speed up stats generation and cut its peak memory: reuse cached sort comparators instead of thrashing the comparator caches on every sort, and drop redundant module-graph lookups and allocations in the extractors
- **changed** — Speed up CSS parsing: byte-range function-name checks, indexed sibling lookahead
- **changed** — Reduce allocations and redundant work across the code-generation, module-concatenation, exports/usage-analysis, hashing, and chunk-splitting hot paths
- **changed** — Enable the Node.js compile cache in the webpack CLI entry point
- **changed** — Encode the persistent cache with V8's value serializer
- **changed** — Speed up SplitChunksPlugin: reject non-subset chunk sets with 64-bit signatures, cache unnamed entry keys, and drop per-module closures
- **changed** — Initialize NormalModule._ast in the constructor so each instance keeps a single hidden-class shape
- **changed** — Reduce allocations in the binary serialization hot paths
- **changed** — Rename nested const/let __webpack_require__ and __webpack_exports__ declarations in bundled webpack output

###### Patch Changes

- Fix stray semicolon emitted before an imported call following a parenthesized sequence element. (by [@alexander-akait](https://github.com/alexander-akait) in [#21533](https://github.com/webpack/webpack/pull/21533))

- Make `require(esm)` `module.exports` re-export analysis independent of module processing order. (by [@alexander-akait](https://github.com/alexander-akait) in [#21521](https://github.com/webpack/webpack/pull/21521))

- Ignore ERR_SERVER_NOT_RUNNING on lazy-compilation backend dispose so `compiler.close()` succeeds on Bun. (by [@alexander-akait](https://github.com/alexander-akait) in [#21521](https://github.com/webpack/webpack/pull/21521))

- Name the failing key when DefinePlugin fails to evaluate a `typeof` value. (by [@alexander-akait](https://github.com/alexander-akait) in [#21503](https://github.com/webpack/webpack/pull/21503))

- Improve Deno compatibility: guard `setNoDelay` and force-close connections on lazy-compilation backend dispose, and return a real `ArrayBuffer` from the Node async/sync wasm loader so `WebAssembly.instantiate` accepts it. (by [@alexander-akait](https://github.com/alexander-akait) in [#21524](https://github.com/webpack/webpack/pull/21524))

- Speed up the HTML parser and cut its peak memory: module-scope helpers/state and tokenizer callbacks, plus exact AST column pre-sizing. (by [@alexander-akait](https://github.com/alexander-akait) in [#21492](https://github.com/webpack/webpack/pull/21492))

- Track CommonJS build dependencies by parsing sources when `require.cache` children are unavailable (e.g. Bun). (by [@alexander-akait](https://github.com/alexander-akait) in [#21531](https://github.com/webpack/webpack/pull/21531))

- Cook common string-literal escapes on the JS parser fast path and own the tokenizer's cold-path readers. (by [@alexander-akait](https://github.com/alexander-akait) in [#21500](https://github.com/webpack/webpack/pull/21500))

- Build the CSS `parseA*` AST on the SoA store instead of node classes, cutting parse memory and time. (by [@alexander-akait](https://github.com/alexander-akait) in [#21498](https://github.com/webpack/webpack/pull/21498))

- Speed up and cut memory of the experimental CSS and HTML parsers: drop two derivable AST node columns, and scan long string, url, comment, and plaintext token bodies natively. (by [@alexander-akait](https://github.com/alexander-akait) in [#21504](https://github.com/webpack/webpack/pull/21504))

- Speed up non-modules CSS parsing: skip redundant token re-reads, drop selector-prelude tokens without materializing nodes, allocate rule preludes lazily, and fast-path empty list seals. (by [@alexander-akait](https://github.com/alexander-akait) in [#21511](https://github.com/webpack/webpack/pull/21511))

- Speed up stats generation and cut its peak memory: reuse cached sort comparators instead of thrashing the comparator caches on every sort, and drop redundant module-graph lookups and allocations in the extractors. (by [@alexander-akait](https://github.com/alexander-akait) in [#21506](https://github.com/webpack/webpack/pull/21506))

- Speed up CSS parsing: byte-range function-name checks, indexed sibling lookahead. (by [@bjohansebas](https://github.com/bjohansebas) in [#21520](https://github.com/webpack/webpack/pull/21520))

- Reduce allocations and redundant work across the code-generation, module-concatenation, exports/usage-analysis, hashing, and chunk-splitting hot paths. (by [@alexander-akait](https://github.com/alexander-akait) in [#21516](https://github.com/webpack/webpack/pull/21516))

- Enable the Node.js compile cache in the webpack CLI entry point. (by [@bjohansebas](https://github.com/bjohansebas) in [#21523](https://github.com/webpack/webpack/pull/21523))

- Encode the persistent cache with V8's value serializer. (by [@avivkeller](https://github.com/avivkeller) in [#21514](https://github.com/webpack/webpack/pull/21514))

- Speed up SplitChunksPlugin: reject non-subset chunk sets with 64-bit sig

_[Truncated at 4000 characters — full notes: https://github.com/webpack/webpack/releases/tag/v5.109.1]_

### v5.109.0

- Date: 2026-07-23
- Version: v5.109.0
- Original notes: https://github.com/webpack/webpack/releases/tag/v5.109.0
- Permalink: https://whatsnew.fyi/product/webpack/releases/v5.109.0

- **changed** — Default experiments.typescript to auto, enabling built-in TypeScript support on Node.js >= 22.6 when no TypeScript loader is registered
- **changed** — Default experiments.css, experiments.html and experiments.asyncWebAssembly to auto, enabling built-in support unless a loader is registered for those files
- **added** — Add output.resourceHints to emit resource hints (preload/prefetch/modulepreload/preconnect), plus module.parser.<type>.urlHints, css.fontPreload and javascript.dynamicImportCssPreload
- **added** — Add built-in build progress via infrastructureLogging.progress, plus estimatedTime, phaseTimings, progress bar width and progressBar auto on ProgressPlugin
- **added** — Concatenate CommonJS modules with statically analyzable exports; opt out via optimization.concatenateModules: { commonjs: false }
- **added** — Wrap weird CommonJS modules into module concatenation instead of bailing out
- **added** — Add output.html.inline (true | script | style) and the webpackInline magic comment to inline chunk content into HTML
- **added** — Add output.html.inject to control where chunk tags are injected
- **added** — Add output.html.title, output.html.meta and output.html.base options for head generation
- **added** — Support per-icon link attributes (sizes, media, color, type, crossorigin) and arrays in output.html.favicon
- **added** — Add output.html.manifest to generate and link a web app manifest with hashed icons
- **added** — Add output.html.csp to inject a Content-Security-Policy meta with inline-content hashes and an optional nonce
- **added** — Add the output.html injectTags compilation hook to inject tags (script/link/meta/…) with injectTo placement
- **added** — Add the output.html transformTags compilation hook to mutate, remove, or move (between <head> and <body>) a page's existing <script>/<link>/<style>/<meta> tags
- **added** — Extend the HTML pipeline with html link sources (bundled as their own emitted page) and rel=preload/prefetch links bundled as chunks
- **added** — Recognize more asset-bearing HTML sources: the twitter:player:stream meta, legacy SVG references, and Web App Manifest icons/screenshots/shortcuts URLs
- **added** — Add module.parser.html.as to parse HTML as a document or an element fragment
- **added** — Allow disabling a built-in HTML parser source via type: false in sources
- **added** — Export webpack.html.HtmlModulesPlugin with transformHtml/htmlEmitted compilation hooks
- **added** — Resolve @custom-media (including media-type values) and @custom-selector in native CSS

###### Minor Changes

- Default `experiments.typescript` to `"auto"`, enabling built-in TypeScript support on Node.js >= 22.6 when no TypeScript loader is registered. (by [@alexander-akait](https://github.com/alexander-akait) in [#21477](https://github.com/webpack/webpack/pull/21477))

- Default `experiments.css`, `experiments.html` and `experiments.asyncWebAssembly` to `"auto"`, enabling built-in support unless a loader is registered for those files; modules with inline or hook-injected loaders (e.g. html-webpack-plugin templates) keep being parsed as JavaScript. (by [@alexander-akait](https://github.com/alexander-akait) in [#21477](https://github.com/webpack/webpack/pull/21477))

- Add `output.resourceHints` to emit resource hints (`preload`/`prefetch`/`modulepreload`/`preconnect`), on by default for ESM output, plus `module.parser.<type>.urlHints`, `css.fontPreload` and `javascript.dynamicImportCssPreload`. (by [@alexander-akait](https://github.com/alexander-akait) in [#21477](https://github.com/webpack/webpack/pull/21477))

- Add built-in build progress via `infrastructureLogging.progress`, plus `estimatedTime`, `phaseTimings`, progress bar `width` and `progressBar: "auto"` on `ProgressPlugin`. (by [@alexander-akait](https://github.com/alexander-akait) in [#21477](https://github.com/webpack/webpack/pull/21477))

- Concatenate CommonJS modules with statically analyzable exports; opt out via `optimization.concatenateModules: { commonjs: false }`. (by [@alexander-akait](https://github.com/alexander-akait) in [#21477](https://github.com/webpack/webpack/pull/21477))

- Wrap "weird" CommonJS modules into module concatenation instead of bailing out. (by [@alexander-akait](https://github.com/alexander-akait) in [#21477](https://github.com/webpack/webpack/pull/21477))

- Add `output.html.inline` (`true | "script" | "style"`) and the `webpackInline` magic comment to inline chunk content into HTML. (by [@alexander-akait](https://github.com/alexander-akait) in [#21477](https://github.com/webpack/webpack/pull/21477))

- Add `output.html.inject` to control where chunk tags are injected. (by [@alexander-akait](https://github.com/alexander-akait) in [#21477](https://github.com/webpack/webpack/pull/21477))

- Add `output.html.title`, `output.html.meta` and `output.html.base` options for head generation. (by [@alexander-akait](https://github.com/alexander-akait) in [#21477](https://github.com/webpack/webpack/pull/21477))

- Support per-icon link attributes (`sizes`, `media`, `color`, `type`, `crossorigin`) and arrays in `output.html.favicon`. (by [@alexander-akait](https://github.com/alexander-akait) in [#21487](https://github.com/webpack/webpack/pull/21487))

- Add `output.html.manifest` to generate and link a web app manifest with hashed icons. (by [@alexander-akait](https://github.com/alexander-akait) in [#21487](https://github.com/webpack/webpack/pull/21487))

- Add `output.html.csp` to inject a Content-Security-Policy meta with inline-content hashes and an optional nonce. (by [@alexander-akait](https://github.com/alexander-akait) in [#21487](https://github.com/webpack/webpack/pull/21487))

- Add the `output.html` `injectTags` compilation hook to inject tags (script/link/meta/…) with `injectTo` placement. (by [@alexander-akait](https://github.com/alexander-akait) in [#21487](https://github.com/webpack/webpack/pull/21487))

- Add the `output.html` `transformTags` compilation hook to mutate, remove, or move (between `<head>` and `<body>`) a page's existing `<script>`/`<link>`/`<style>`/`<meta>` tags. (by [@alexander-akait](https://github.com/alexander-akait) in [#21487](https://github.com/webpack/webpack/pull/21487))

- Extend the HTML pipeline with `html` link sources (bundled as their own emitted page) and `rel="preload"`/`"prefetch"` links bundled as chunks. (by [@alexander-akait](https://github.com/alexander-akait) in [#21477](https://github.com/webpack/webpack/pull/21477))

- Recognize more asset-bearing HTML sources: the `twitter:pl

_[Truncated at 4000 characters — full notes: https://github.com/webpack/webpack/releases/tag/v5.109.0]_

### v5.108.4

- Date: 2026-07-04
- Version: v5.108.4
- Original notes: https://github.com/webpack/webpack/releases/tag/v5.108.4
- Permalink: https://whatsnew.fyi/product/webpack/releases/v5.108.4

- **fixed** — Speed up non-CSS-Modules parsing by not building unused selector AST nodes
- **fixed** — Speed up non-CSS-Modules CSS parsing by dropping value tokens nothing reads
- **fixed** — Resolve HTML asset URLs against the document <base href>
- **fixed** — Reduce CPU and memory overhead of HTML and CSS parsing and code generation
- **fixed** — Reduce HTML parser memory and CPU by skipping unused AST nodes
- **fixed** — Reduce HTML parser memory by storing the AST in struct-of-arrays form
- **fixed** — Key the provided-exports cache on a lazy barrel's still-lazy re-export targets
- **changed** — Default output.globalObject to globalThis for universal targets
- **fixed** — Pass through new URL(...) directory references instead of resolving them

###### Patch Changes

- Speed up non-CSS-Modules parsing by not building unused selector AST nodes. (by [@alexander-akait](https://github.com/alexander-akait) in [#21324](https://github.com/webpack/webpack/pull/21324))

- Speed up non-CSS-Modules CSS parsing by dropping value tokens nothing reads. (by [@alexander-akait](https://github.com/alexander-akait) in [#21324](https://github.com/webpack/webpack/pull/21324))

- Resolve HTML asset URLs against the document `<base href>`. (by [@alexander-akait](https://github.com/alexander-akait) in [#21329](https://github.com/webpack/webpack/pull/21329))

- Add HTML integration tests: generateError output, ignored src, null-char parse. (by [@aryanraj45](https://github.com/aryanraj45) in [#21328](https://github.com/webpack/webpack/pull/21328))

- Reduce CPU and memory overhead of HTML and CSS parsing and code generation. (by [@alexander-akait](https://github.com/alexander-akait) in [#21332](https://github.com/webpack/webpack/pull/21332))

- Reduce HTML parser memory and CPU by skipping unused AST nodes. (by [@alexander-akait](https://github.com/alexander-akait) in [#21323](https://github.com/webpack/webpack/pull/21323))

- Reduce HTML parser memory by storing the AST in struct-of-arrays form. (by [@alexander-akait](https://github.com/alexander-akait) in [#21331](https://github.com/webpack/webpack/pull/21331))

- Key the provided-exports cache on a lazy barrel's still-lazy re-export targets. (by [@hai-x](https://github.com/hai-x) in [#21326](https://github.com/webpack/webpack/pull/21326))

- Default `output.globalObject` to `globalThis` for universal targets. (by [@alexander-akait](https://github.com/alexander-akait) in [#21314](https://github.com/webpack/webpack/pull/21314))

- Pass through `new URL(...)` directory references instead of resolving them. (by [@alexander-akait](https://github.com/alexander-akait) in [#21312](https://github.com/webpack/webpack/pull/21312))

### v5.108.3

- Date: 2026-06-29
- Version: v5.108.3
- Original notes: https://github.com/webpack/webpack/releases/tag/v5.108.3
- Permalink: https://whatsnew.fyi/product/webpack/releases/v5.108.3

- **changed** — Speed up CSS parsing and reduce CSS AST node memory
- **fixed** — Fix HMR codegen crash for harmony accept with unresolved imports
- **fixed** — Match harmony accept dependencies by module reference so HMR codegen handles imports without a module or chunk id

###### Patch Changes

- Speed up CSS parsing and reduce CSS AST node memory. (by [@alexander-akait](https://github.com/alexander-akait) in [#21285](https://github.com/webpack/webpack/pull/21285))

- Fix HMR codegen crash for harmony accept with unresolved imports. (by [@xiaoxiaojx](https://github.com/xiaoxiaojx) in [#21302](https://github.com/webpack/webpack/pull/21302))

- Match harmony accept dependencies by module reference so HMR codegen handles imports without a module or chunk id. (by [@alexander-akait](https://github.com/alexander-akait) in [#21303](https://github.com/webpack/webpack/pull/21303))

### v5.108.2

- Date: 2026-06-29
- Version: v5.108.2
- Original notes: https://github.com/webpack/webpack/releases/tag/v5.108.2
- Permalink: https://whatsnew.fyi/product/webpack/releases/v5.108.2

- **fixed** — Fix lazy barrel deferral of ungrouped side-effect imports
- **fixed** — Respect the node: prefix for node.js core modules used as externals

###### Patch Changes

- Fix lazy barrel deferral of ungrouped side-effect imports. (by [@hai-x](https://github.com/hai-x) in [#21291](https://github.com/webpack/webpack/pull/21291))

- Respect the `node:` prefix for node.js core modules used as externals. (by [@alexander-akait](https://github.com/alexander-akait) in [#21286](https://github.com/webpack/webpack/pull/21286))

### v5.108.1

- Date: 2026-06-26
- Version: v5.108.1
- Original notes: https://github.com/webpack/webpack/releases/tag/v5.108.1
- Permalink: https://whatsnew.fyi/product/webpack/releases/v5.108.1

- **fixed** — Fix invalid property access for escaped namespace imports with multi-character mangled export names
- **changed** — Add frames to ProfilingPlugin TracingStartedInBrowser event so the trace loads in Chrome DevTools

###### Patch Changes

- Fix invalid property access for escaped namespace imports with multi-character mangled export names. (by [@xiaoxiaojx](https://github.com/xiaoxiaojx) in [#21280](https://github.com/webpack/webpack/pull/21280))

- Add frames to ProfilingPlugin TracingStartedInBrowser event so the trace loads in Chrome DevTools. (by [@alexander-akait](https://github.com/alexander-akait) in [#21269](https://github.com/webpack/webpack/pull/21269))

### v5.108.0

- Date: 2026-06-25
- Version: v5.108.0
- Original notes: https://github.com/webpack/webpack/releases/tag/v5.108.0
- Permalink: https://whatsnew.fyi/product/webpack/releases/v5.108.0

- **added** — Treat top-level await and import.meta as ES module markers, matching Node.js syntax detection so no explicit module type is needed
- **added** — Add a bun target that emits ESM and externalizes bun:* and node.js built-in modules
- **added** — Support CommonJS reexports via Object.defineProperty value and getter descriptors
- **added** — Support JSON Schema const when generating CLI flags from a schema
- **added** — Support JSON Schema if/then/else when generating CLI flags from a schema
- **added** — Skip import specifiers, require() and import() calls in dead conditional branches gated by inlined imported constants
- **changed** — CSS localIdentName [hash] now resolves to the local ident hash; use [modulehash] for the module hash
- **added** — Add CSS parser as option and resolve url() inside HTML style attributes
- **added** — Add dedicated module classes for all built-in module types
- **added** — Support .html/.css for the default ./src entry under the html/css experiments
- **added** — Add defineConfig helper for typed configuration files
- **added** — Add a deno target that emits ESM, resolves node.js built-ins via the required node: specifier, and keeps Deno's own import protocols external
- **changed** — Use module-import for electron externals when the target supports ESM
- **added** — Add output.environment.logicalAssignment to emit ||= in runtime code when the target supports logical assignment operators
- **added** — Resolve and rewrite asset URLs inside <iframe srcdoc> in HTML modules
- **added** — Add HMR support for HTML modules with body/title DOM patching on update
- **added** — Add css-url html source type extracting url() references from CSS-valued attributes
- **added** — Add module.parser.html.sources option to disable or customize URL-attribute extraction for HTML modules
- **added** — Add module.parser.html.template option to transform HTML module source before parsing
- **added** — Inline export default <const> when the default-exported value is a primitive constant

###### Minor Changes

- Treat top-level await and `import.meta` as ES module markers, matching Node.js syntax detection so no explicit module type is needed. (by [@alexander-akait](https://github.com/alexander-akait) in [#21218](https://github.com/webpack/webpack/pull/21218))

- Add a `bun` target that emits ESM and externalizes `bun:*` and node.js built-in modules. (by [@alexander-akait](https://github.com/alexander-akait) in [#21248](https://github.com/webpack/webpack/pull/21248))

- Support CommonJS reexports via `Object.defineProperty` value and getter descriptors. (by [@alexander-akait](https://github.com/alexander-akait) in [#21129](https://github.com/webpack/webpack/pull/21129))

- Support JSON Schema `const` when generating CLI flags from a schema. (by [@alexander-akait](https://github.com/alexander-akait) in [#21087](https://github.com/webpack/webpack/pull/21087))

- Support JSON Schema `if`/`then`/`else` when generating CLI flags from a schema. (by [@alexander-akait](https://github.com/alexander-akait) in [#21087](https://github.com/webpack/webpack/pull/21087))

- Skip import specifiers, `require()` and `import()` calls in dead conditional branches gated by inlined imported constants (`isDEV ? A : B`), evaluated via `getCondition`. (by [@hai-x](https://github.com/hai-x) in [#21136](https://github.com/webpack/webpack/pull/21136))

- CSS `localIdentName` `[hash]` now resolves to the local ident hash (matching css-loader); use `[modulehash]` for the module hash. (by [@alexander-akait](https://github.com/alexander-akait) in [#21259](https://github.com/webpack/webpack/pull/21259))

- Add CSS parser `as` option and resolve `url()` inside HTML `style` attributes. (by [@alexander-akait](https://github.com/alexander-akait) in [#21157](https://github.com/webpack/webpack/pull/21157))

- Add dedicated module classes for all built-in module types. (by [@alexander-akait](https://github.com/alexander-akait) in [#21164](https://github.com/webpack/webpack/pull/21164))

- Support `.html`/`.css` for the default `./src` entry under the html/css experiments. (by [@alexander-akait](https://github.com/alexander-akait) in [#21039](https://github.com/webpack/webpack/pull/21039))

- Add `defineConfig` helper for typed configuration files. (by [@alexander-akait](https://github.com/alexander-akait) in [#21169](https://github.com/webpack/webpack/pull/21169))

- Add a `deno` target (with versions, e.g. `deno`, `deno2`, `deno1.40`) that emits ESM, resolves node.js built-ins via the required `node:` specifier, and keeps Deno's own import protocols (`npm:`, `jsr:`, `node:`, `http(s)://`) external. (by [@alexander-akait](https://github.com/alexander-akait) in [#21247](https://github.com/webpack/webpack/pull/21247))

- Use `module-import` for electron externals when the target supports ESM. (by [@alexander-akait](https://github.com/alexander-akait) in [#21184](https://github.com/webpack/webpack/pull/21184))

- Add `output.environment.logicalAssignment` to emit `||=` in runtime code when the target supports logical assignment operators. (by [@bjohansebas](https://github.com/bjohansebas) in [#21219](https://github.com/webpack/webpack/pull/21219))

- Resolve and rewrite asset URLs inside `<iframe srcdoc>` in HTML modules. (by [@bjohansebas](https://github.com/bjohansebas) in [#21226](https://github.com/webpack/webpack/pull/21226))

- Add HMR support for HTML modules with body/title DOM patching on update. (by [@alexander-akait](https://github.com/alexander-akait) in [#21011](https://github.com/webpack/webpack/pull/21011))

- Add `css-url` html source type extracting `url()` references from CSS-valued attributes. (by [@alexander-akait](https://github.com/alexander-akait) in [#21250](https://github.com/webpack/webpack/pull/21250))

- Add `module.parser.html.sources` option to disable or customize URL-attribute extraction for HTML modules, with `script` / `script-module` / `stylesheet` / `stylesheet-inline` types for custom attributes (by [@alexander-akait]

_[Truncated at 4000 characters — full notes: https://github.com/webpack/webpack/releases/tag/v5.108.0]_

### v5.107.2

- Date: 2026-05-25
- Version: v5.107.2
- Original notes: https://github.com/webpack/webpack/releases/tag/v5.107.2
- Permalink: https://whatsnew.fyi/product/webpack/releases/v5.107.2

- **changed** — Reduce per-file overhead in ContextModuleFactory.resolveDependencies by batching alternativeRequests hook calls to improve rebuild performance
- **fixed** — Include each external info's runtimeCondition in ConcatenatedModule#updateHash to prevent cache invalidation issues
- **fixed** — Fix HTML [contenthash] for referenced asset and inline-style URL changes
- **fixed** — Resolve chunk-hash placeholders in chunk URLs embedded into extracted HTML
- **removed** — Remove unnecessary __webpack_require__ runtime helpers in ESM library output with multi-module chunks
- **changed** — Rewrite NormalModule#getSideEffectsConnectionState walk as an iterative loop to restore rebuild performance while keeping deep import chains stack-safe
- **fixed** — Fix runtime ReferenceError on first activation of lazy-compiled module when output.library.type produces closure-wrapped bundle
- **fixed** — Fill in missing entryOptions when an async block joins an existing entrypoint
- **changed** — Release per-child codeGenerationResults in MultiCompiler and at Compiler.close to reduce memory retention
- **changed** — Reduce peak memory of SourceMapDevToolPlugin on large builds
- **fixed** — Fix slow require.context() and dynamic import() rebuilds in watch mode by using exact purge for watched context directories

###### Patch Changes

-   Reduce per-file overhead in `ContextModuleFactory.resolveDependencies` by batching `alternativeRequests` hook calls. Previously the hook was invoked once per file in the context (with a single-item array), paying per-call overhead (closure allocation, `resolverFactory.get`, intermediate arrays in `RequireContextPlugin`) for every file. The hook is now invoked once per directory with all matched files in one batch — `RequireContextPlugin`'s tap already iterates the items array, so the output is unchanged. Steady-state rebuild on a 4000-file `require.context` drops a further ~15 ms (after the watch-mode purge fix in the same release). (by [@alexander-akait](https://github.com/alexander-akait) in [#21020](https://github.com/webpack/webpack/pull/21020))

-   Include each external info's `runtimeCondition` in `ConcatenatedModule#updateHash` so changes to a concatenated external's runtime condition invalidate persistent caches instead of slipping through with the module id alone. (by [@alexander-akait](https://github.com/alexander-akait) in [#21023](https://github.com/webpack/webpack/pull/21023))

-   Fix HTML `[contenthash]` for referenced asset and inline-style URL changes. (by [@alexander-akait](https://github.com/alexander-akait) in [#21018](https://github.com/webpack/webpack/pull/21018))

-   Resolve chunk-hash placeholders in chunk URLs embedded into extracted HTML. (by [@alexander-akait](https://github.com/alexander-akait) in [#21018](https://github.com/webpack/webpack/pull/21018))

-   Remove unnecessary `__webpack_require__` runtime helpers in ESM library output with multi-module chunks. (by [@xiaoxiaojx](https://github.com/xiaoxiaojx) in [#21032](https://github.com/webpack/webpack/pull/21032))

-   Rewrite `NormalModule#getSideEffectsConnectionState` walk as an allocation-light iterative loop instead of a generator trampoline, restoring rebuild performance lost in #20993 while keeping deep import chains stack-safe. (by [@alexander-akait](https://github.com/alexander-akait) in [#21014](https://github.com/webpack/webpack/pull/21014))

-   Fix runtime `ReferenceError` on the first activation of a lazy-compiled module when `output.library.type` produces a closure-wrapped bundle (`umd`, `umd2`, `amd`, `amd-require`, `system`). (by [@alexander-akait](https://github.com/alexander-akait) in [#21013](https://github.com/webpack/webpack/pull/21013))

    External modules of these types reference closure-bound identifiers like `__WEBPACK_EXTERNAL_MODULE_react__`, supplied by the library wrapper that is generated once per chunk. When `lazyCompilation` activates an entry or import for the first time, any external dependency the lazily-built module pulls in arrives in a hot-update chunk that lives outside the original wrapper closure, so its factory body cannot resolve the closure identifier and only a manual page refresh recovers.

    The inactive `LazyCompilationProxyModule` now declares statically-enumerable externals (string and object forms of `externals`) as its own dependencies, so the initial entry chunk's library wrapper already exposes their closure identifiers. When activation later pulls in those externals through the lazily-compiled module, they resolve to the already-installed factories instead of throwing. Function and RegExp externals are not pre-populated because their effective request set isn't knowable up front.

-   Fill in missing `entryOptions` when an async block joins an existing entrypoint. (by [@alexander-akait](https://github.com/alexander-akait) in [#21026](https://github.com/webpack/webpack/pull/21026))

-   Release per-child `codeGenerationResults` in `MultiCompiler` and at `Compiler.close` to reduce memory retention. (by [@alexander-akait](https://github.com/alexander-akait) in [#21015](https://github.com/webpack/webpack/pull/21015))

-   Reduce peak memory of `SourceMapDevToolPlugin` on large builds (closes #20961). (by [@alexander-akait](https://github.com/alexander-akait) in [

_[Truncated at 4000 characters — full notes: https://github.com/webpack/webpack/releases/tag/v5.107.2]_

### v5.107.1

- Date: 2026-05-21
- Version: v5.107.1
- Original notes: https://github.com/webpack/webpack/releases/tag/v5.107.1
- Permalink: https://whatsnew.fyi/product/webpack/releases/v5.107.1

- **fixed** — Align the experimental HTML tokenizer with the WHATWG spec by fixing offset-range bugs in the script-data, content-mode end-tag, attribute-value, and EOF states
- **added** — Surface tokenizer parse errors to consumers via a new parseError callback with 'warning' for recoverable errors and 'error' for incomplete offset ranges
- **added** — Add the full WHATWG named character references table so decodeHtmlEntities handles all named entities including legacy bare forms and multi-code-point entities with proper longest-prefix backtracking
- **fixed** — Tree-shake CommonJS modules imported through const NAME = require(LITERAL) binding when only static members of NAME are read
- **fixed** — Fix RangeError: Maximum call stack size exceeded thrown from HarmonyImportSideEffectDependency.getModuleEvaluationSideEffectsState on long linear chains of side-effect-free imports by making traversal iterative instead of recursive
- **fixed** — Fix module.generator.html to use HtmlGeneratorOptions instead of EmptyGeneratorOptions
- **changed** — WebAssembly generator hooks now use EmptyGeneratorOptions instead of EmptyParserOptions
- **changed** — NormalModuleFactory#getParser, createParser, getGenerator, and createGenerator are now generic over the module-type string, returning specific parser/generator classes for known types
- **changed** — NormalModuleCreateData is now generic over the module type so parser, parserOptions, generator, and generatorOptions are narrowed to the specific class and options for the given type
- **fixed** — Link import bindings used inside define(...) callbacks in ES modules
- **fixed** — Emit <link rel="stylesheet"> tags for CSS chunks reachable from a <script src> entry in HTML-entry pipeline
- **changed** — CSS chunks are now sorted by the entrypoint's module post-order index so <link> tags appear in source import order
- **changed** — Copy nonce, crossorigin, and referrerpolicy attributes from the originating script tag onto emitted <link> tags
- **fixed** — Allow devtool and SourceMapDevToolPlugin or multiple SourceMapDevToolPlugin instances to coexist on the same asset

###### Patch Changes

-   Align the experimental HTML tokenizer with the WHATWG spec: fix offset-range bugs in the script-data, content-mode end-tag, attribute-value, and EOF states; surface tokenizer parse errors to consumers via a new `parseError` callback (`"warning"` when the tokenizer recovers and the emitted token is still well-formed, `"error"` when the offset range is incomplete — e.g. `eof-in-tag`); and add the full WHATWG named character references table so `decodeHtmlEntities` handles all named entities (including legacy bare forms like `&AMP` and multi-code-point entities like `&NotEqualTilde;`) with proper longest-prefix backtracking. (by [@alexander-akait](https://github.com/alexander-akait) in [#21000](https://github.com/webpack/webpack/pull/21000))

-   Tree-shake CommonJS modules imported through a `const NAME = require(LITERAL)` binding when only static members of `NAME` are read. Previously webpack treated every export of such modules as referenced (because the bare `require()` dependency reports `EXPORTS_OBJECT_REFERENCED`), so unused `exports.x = ...` assignments remained in the bundle even with `usedExports` enabled. The parser now forwards `NAME.x` / `NAME.x()` / `NAME["x"]` accesses to the underlying `CommonJsRequireDependency` as referenced exports, falling back to the full exports object the moment `NAME` is read in any other context (passed by value, destructured later, accessed with a dynamic key, …). This brings the binding form to parity with the existing destructuring form (`const { x } = require(...)`). (by [@alexander-akait](https://github.com/alexander-akait) in [#21003](https://github.com/webpack/webpack/pull/21003))

-   Fix `RangeError: Maximum call stack size exceeded` thrown from `HarmonyImportSideEffectDependency.getModuleEvaluationSideEffectsState` on long linear chains of side-effect-free imports. `NormalModule.getSideEffectsConnectionState` previously descended through `HarmonyImportSideEffectDependency.getModuleEvaluationSideEffectsState` recursively, adding two stack frames per module, which overflowed V8's stack at a few thousand modules deep. The traversal is now iterative. (by [@alexander-akait](https://github.com/alexander-akait) in [#20993](https://github.com/webpack/webpack/pull/20993))

-   Fix `NormalModuleFactory` parser/generator types: (by [@alexander-akait](https://github.com/alexander-akait) in [#20999](https://github.com/webpack/webpack/pull/20999))
    -   `module.generator.html` now uses `HtmlGeneratorOptions` instead of `EmptyGeneratorOptions` (the `extract` option was hidden from the `createGenerator` / `generator` hook types).
    -   WebAssembly (`webassembly/async`, `webassembly/sync`) generator hooks now use `EmptyGeneratorOptions` instead of `EmptyParserOptions`.
    -   `NormalModuleFactory#getParser` / `createParser` / `getGenerator` / `createGenerator` are now generic over the module-type string, returning the specific parser/generator class for known types (e.g. `JavascriptParser` for `"javascript/auto"`, `CssGenerator` for `"css"`, etc.) instead of always returning the base `Parser` / `Generator`.
    -   `NormalModuleCreateData` is now generic over the module type so `parser`, `parserOptions`, `generator`, and `generatorOptions` are narrowed to the specific class / options for the given `type`.

-   Link import bindings used inside `define(...)` callbacks in ES modules. Previously, `HarmonyDetectionParserPlugin` skipped walking the arguments of `define` calls in harmony modules, so references to imported bindings inside an inline AMD `define` factory (e.g. `define(function () { console.log(foo); })`) were not rewritten to their imported references and could cause `ReferenceError` at runtime. Inner graph usage analysis is also fixed for the related pattern `const fn = function () { foo; }; define(fn);`. (by [@alexander-akait](https://github.com/alexander-akait) in [#20990](https://github.com/webpack/webpack/pull/20990))

-   HTML-entry pipeline (`experime

_[Truncated at 4000 characters — full notes: https://github.com/webpack/webpack/releases/tag/v5.107.1]_