[deps] Auth: Update webpack to v5.102.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
webpack	5.101.3 -> 5.102.1

---

Release Notes

webpack/webpack (webpack)

v5.102.1

Compare Source

Fixes

• Supported extends with env for browserslist
• Supported JSONP fragment format for web workers.
• Fixed dynamic import support in workers using browserslist.
• Fixed default defer import mangling.
• Fixed default import of commonjs externals for SystemJS format.
• Fixed context modules to the same file with different import attributes.
• Fixed typescript types.
• Improved import.meta warning messages to be more clear when used directly.
• [CSS] Fixed CC_UPPER_U parsing (E -> U) in tokenizer.

v5.102.0

Compare Source

Features

• Added static analyze for dynamic imports
• Added support for import file from "./file.ext" with { type: "bytes" } to get the content as Uint8Array (look at example)
• Added support for import file from "./file.ext" with { type: "text" } to get the content as text (look at example)
• Added the snapshot.contextModule to configure snapshots options for context modules
• Added the extractSourceMap option to implement the capabilities of loading source maps by comment, you don't need source-map-loader (look at example)
• The topLevelAwait experiment is now stable (you can remove experiments.topLevelAwait from your webpack.config.js)
• The layers experiment is now stable (you can remove experiments.layers from your webpack.config.js)
• Added function matcher support in rule options

Fixes

• Fixed conflicts caused by multiple concatenate modules
• Ignore import failure during HMR update with ES modules output
• Keep render module order consistent
• Prevent inlining modules that have this exports
• Removed unused timeout attribute of script tag
• Supported UMD chunk format to work in web workers
• Improved CommonJs bundle to ES module library
• Use es-lexer for mjs files for build dependencies
• Fixed support __non_webpack_require__ for ES modules
• Properly handle external modules for CSS
• AssetsByChunkName included assets from chunk.auxiliaryFiles
• Use createRequire only when output is ES module and target is node
• Typescript types

Performance Improvements

• Avoid extra calls for snapshot
• A avoid extra jobs for build dependencies
• Move import attributes to own dependencies

---

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bitwarden-bot]

Internal tracking:

• ID: PM-26827
• Link: https://bitwarden.atlassian.net/browse/PM-26827

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 50.99%. Comparing base (629672c) to head (e6ec964).
⚠️ Report is 32 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #6445   +/-   ##
=======================================
  Coverage   50.99%   50.99%           
=======================================
  Files        1885     1885           
  Lines       83248    83248           
  Branches     7359     7359           
=======================================
  Hits        42450    42450           
  Misses      39186    39186           
  Partials     1612     1612           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

Checkmarx One – Scan Summary & Details – de31c762-49d6-4441-ba43-1fdcd2a63349

Great job! No new security vulnerabilities introduced in this pull request

[enmande]

Release Notes Highlights:

v5.102.0 Features:

• Static analysis for dynamic imports
• New import attributes: { type: "bytes" } and { type: "text" }
• topLevelAwait and layers experiments now stable (config options can be removed)
• Built-in source map extraction (replaces source-map-loader)

v5.102.1 Fixes:

• browserslist extends with env support
• JSONP fragment format for web workers
• Dynamic import support in workers
• CommonJS externals for SystemJS format
• CSS tokenizer bug (CC_UPPER_U parsing)
• TypeScript type definitions

---

Review highlights:

✅ All server tests pass
✅ All projects build successfully
✅ Admin app builds/runs successfully; no changes observed on a smoke test, and all static assets display as expected
✅ Sourcemaps properly utilized on inspection locally
✅ browserslist shows unchanged support posture from main:

and_chr 141
and_ff 143
and_qq 14.9
and_uc 15.5
android 141
chrome 141
chrome 140
chrome 139
chrome 138
chrome 134
chrome 126
chrome 112
chrome 109
edge 141
edge 140
edge 139
firefox 144
firefox 143
firefox 142
firefox 140
ios_saf 26.0
ios_saf 18.5-18.6
kaios 3.0-3.1
kaios 2.5
op_mini all
op_mob 80
opera 122
opera 121
safari 26.0
safari 18.5-18.6
samsung 28
samsung 27

⚠️ Some build warnings were observed, all were inspected and confirmed to be related to upcoming sass @import deprecations (date TBD). This should be unrelated to webpack upgrades, and were observed in main.