Bump webpack-bundle-analyzer from 5.3.0 to 5.4.0

[dependabot]

Bumps webpack-bundle-analyzer from 5.3.0 to 5.4.0.

Release notes

Sourced from webpack-bundle-analyzer's releases.

v5.4.0

Minor Changes

• Use Webpack's infrastructure logger when available (compiler.getInfrastructureLogger('webpack-bundle-analyzer')) and deprecate the plugin's logLevel option in favor of Webpack's native infrastructureLogging configuration. (by @​ronakmaheshwari in #738)

v5.3.3

Patch Changes

• Scope parsed module sources to the asset they were parsed from, so assets that reuse the same module IDs, or that share a module, no longer report each other's parsed and compressed sizes. (by @​Menny1337 in #734)

v5.3.2

Patch Changes

• Parse Webpack 5 module maps nested in UMD wrappers, using bundle module IDs and Webpack runtime structure to choose among IIFE candidates. (by @​Menny1337 in #733)

• Improve report generation performance for compilations with many assets. (by @​christiango in #723)

• Resolve bundle assets and report files against the correct compiler output path when a plugin instance is shared by multiple compilers. (by @​utkarshalpha in #725)

v5.3.1

Patch Changes

• Explicitly define stats.toJson() options for bundle analysis to support Rspack 2.0 with minimal code changes needed. (by @​SyMind in #718)

• Fix the treemap not reflecting chunk checkbox selections. (by @​christiango in #722)

Changelog

Sourced from webpack-bundle-analyzer's changelog.

5.4.0

Minor Changes

• Use Webpack's infrastructure logger when available (compiler.getInfrastructureLogger('webpack-bundle-analyzer')) and deprecate the plugin's logLevel option in favor of Webpack's native infrastructureLogging configuration. (by @​ronakmaheshwari in #738)

5.3.3

Patch Changes

• Scope parsed module sources to the asset they were parsed from, so assets that reuse the same module IDs, or that share a module, no longer report each other's parsed and compressed sizes. (by @​Menny1337 in #734)

5.3.2

Patch Changes

• Parse Webpack 5 module maps nested in UMD wrappers, using bundle module IDs and Webpack runtime structure to choose among IIFE candidates. (by @​Menny1337 in #733)

• Improve report generation performance for compilations with many assets. (by @​christiango in #723)

• Resolve bundle assets and report files against the correct compiler output path when a plugin instance is shared by multiple compilers. (by @​utkarshalpha in #725)

5.3.1

Patch Changes

• Explicitly define stats.toJson() options for bundle analysis to support Rspack 2.0 with minimal code changes needed. (by @​SyMind in #718)

• Fix the treemap not reflecting chunk checkbox selections. (by @​christiango in #722)

Commits

• 6d1ae28 chore(release): new release (#739)
• 7470242 feat: Migrate to Webpack Built-in Infrastructure Logger with Backwards Compat...
• 21ab1c1 chore(release): new release (#736)
• eab49ca fix: scope parsed module sources by asset (#734)
• a4d4123 chore(release): new release (#726)
• a5b70c3 fix: parse Webpack 5 module maps nested in UMD wrappers (#733)
• 24e3f77 Improve analyzer performance for bundles with many assets (#723)
• 23adc7a docs: troubleshoot stats error-only (#730)
• 34eec1b docs: add Jenkins CSP troubleshooting for blank static reports (#724)
• 83a8ee5 fix: preserve compiler paths for shared plugin instances (#725)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
universalviewer	Ready	Preview	Oct 5, 2026 12:54am UTC
universalviewer.dev	Ready	Preview	Oct 5, 2026 12:54am UTC

[demiankatz]

Minor version of indirect dependency; build still passing.