build(deps-dev): bump webpack from 5.108.1 to 5.108.4

[dependabot]

Bumps webpack from 5.108.1 to 5.108.4.

Release notes

Sourced from webpack's releases.

v5.108.4

Patch Changes

• Speed up non-CSS-Modules parsing by not building unused selector AST nodes. (by @​alexander-akait in #21324)

• Speed up non-CSS-Modules CSS parsing by dropping value tokens nothing reads. (by @​alexander-akait in #21324)

• Resolve HTML asset URLs against the document <base href>. (by @​alexander-akait in #21329)

• Add HTML integration tests: generateError output, ignored src, null-char parse. (by @​aryanraj45 in #21328)

• Reduce CPU and memory overhead of HTML and CSS parsing and code generation. (by @​alexander-akait in #21332)

• Reduce HTML parser memory and CPU by skipping unused AST nodes. (by @​alexander-akait in #21323)

• Reduce HTML parser memory by storing the AST in struct-of-arrays form. (by @​alexander-akait in #21331)

• Key the provided-exports cache on a lazy barrel's still-lazy re-export targets. (by @​hai-x in #21326)

• Default output.globalObject to globalThis for universal targets. (by @​alexander-akait in #21314)

• Pass through new URL(...) directory references instead of resolving them. (by @​alexander-akait in #21312)

v5.108.3

Patch Changes

• Speed up CSS parsing and reduce CSS AST node memory. (by @​alexander-akait in #21285)

• Fix HMR codegen crash for harmony accept with unresolved imports. (by @​xiaoxiaojx in #21302)

• Match harmony accept dependencies by module reference so HMR codegen handles imports without a module or chunk id. (by @​alexander-akait in #21303)

v5.108.2

Patch Changes

• Fix lazy barrel deferral of ungrouped side-effect imports. (by @​hai-x in #21291)

• Respect the node: prefix for node.js core modules used as externals. (by @​alexander-akait in #21286)

Changelog

Sourced from webpack's changelog.

5.108.4

Patch Changes

• Speed up non-CSS-Modules parsing by not building unused selector AST nodes. (by @​alexander-akait in #21324)

• Speed up non-CSS-Modules CSS parsing by dropping value tokens nothing reads. (by @​alexander-akait in #21324)

• Resolve HTML asset URLs against the document <base href>. (by @​alexander-akait in #21329)

• Add HTML integration tests: generateError output, ignored src, null-char parse. (by @​aryanraj45 in #21328)

• Reduce CPU and memory overhead of HTML and CSS parsing and code generation. (by @​alexander-akait in #21332)

• Reduce HTML parser memory and CPU by skipping unused AST nodes. (by @​alexander-akait in #21323)

• Reduce HTML parser memory by storing the AST in struct-of-arrays form. (by @​alexander-akait in #21331)

• Key the provided-exports cache on a lazy barrel's still-lazy re-export targets. (by @​hai-x in #21326)

• Default output.globalObject to globalThis for universal targets. (by @​alexander-akait in #21314)

• Pass through new URL(...) directory references instead of resolving them. (by @​alexander-akait in #21312)

5.108.3

Patch Changes

• Speed up CSS parsing and reduce CSS AST node memory. (by @​alexander-akait in #21285)

• Fix HMR codegen crash for harmony accept with unresolved imports. (by @​xiaoxiaojx in #21302)

• Match harmony accept dependencies by module reference so HMR codegen handles imports without a module or chunk id. (by @​alexander-akait in #21303)

5.108.2

Patch Changes

• Fix lazy barrel deferral of ungrouped side-effect imports. (by @​hai-x in #21291)

• Respect the node: prefix for node.js core modules used as externals. (by @​alexander-akait in #21286)

Commits

• bb9ccfd chore(release): new release (#21319)
• 7639066 fix: invalidate provided-exports cache with lazy barrel (#21326)
• ae28c54 perf: reduce CPU and memory overhead of the HTML and CSS pipelines (#21332)
• e6fb547 perf: re-encode the HTML AST as struct-of-arrays behind a path-based visitor ...
• 5ce1c22 fix(html): resolve asset URLs against <base href> (#21329)
• 0e43c4a test(html): cover generateError, ignored-source, and null-character parse pat...
• cebd793 refactor: build export-presence guards from a lazy boolean formula (#21320)
• c2628cf fix: don't resolve new URL() directory references as modules (#21312)
• 00d8b2f perf: speed up non-CSS-Modules CSS parsing by skipping unused AST work (#21324)
• f7a3f6d perf: reduce HTML parser memory and CPU with parser-level skip options (#21323)
• Additional commits viewable in compare view

[n-lark]

Dependabot triage ✅

• Package: webpack 5.108.1 → 5.108.4 (patch)
• Publish window: 5.108.4 published 2026-07-04, ≥12h elapsed ✅
• Advisories: no open npm advisory or GitHub advisory against 5.108.4 ✅
• Release notes: patch-only — parser perf, HMR crash fixes, externals/URL handling; output.globalObject default change does not affect our config — no breaking changes affecting our usage ✅
• CI: green ✅
• Decision: approving for merge — contained lockfile-only bump, integrity matches registry. Closing the superseded #<webpack-5.108.1 PR> as redundant.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 75.13%. Comparing base (ebeec06) to head (b98dd43).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #7756   +/-   ##
=======================================
  Coverage   75.13%   75.13%           
=======================================
  Files         430      430           
  Lines       22863    22863           
  Branches     6063     6063           
=======================================
  Hits        17177    17177           
  Misses       5686     5686           

Flag	Coverage Δ
backend	75.13% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.