Update npm packages (73 packages including @jqhtml 2.3.36)

Update npm registry domain from privatenpm.hanson.xyz to npm.internal.hanson.xyz

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

node_modules/webpack/lib/schemes/HttpUriPlugin.js

@@ -36,12 +36,20 @@ const getHttps = memoize(() => require("https"));
 
 const MAX_REDIRECTS = 5;
 
+/** @typedef {(url: URL, requestOptions: RequestOptions, callback: (incomingMessage: IncomingMessage) => void) => EventEmitter} Fetch */
+
+/**
+ * @typedef {object} EventsMap
+ * @property {[Error]} error
+ */
+
 /**
  * @param {typeof import("http") | typeof import("https")} request request
  * @param {string | URL | undefined} proxy proxy
- * @returns {(url: URL, requestOptions: RequestOptions, callback: (incomingMessage: IncomingMessage) => void) => EventEmitter} fn
+ * @returns {Fetch} fn
  */
 const proxyFetch = (request, proxy) => (url, options, callback) => {
+	/** @type {EventEmitter<EventsMap>} */
 	const eventEmitter = new EventEmitter();
 
 	/**
@@ -104,9 +112,7 @@ const validate = createSchemaValidation(
  * @returns {string} safe path
  */
 const toSafePath = (str) =>
-	str
-		.replace(/^[^a-zA-Z0-9]+|[^a-zA-Z0-9]+$/g, "")
-		.replace(/[^a-zA-Z0-9._-]+/g, "_");
+	str.replace(/^[^a-z0-9]+|[^a-z0-9]+$/gi, "").replace(/[^a-z0-9._-]+/gi, "_");
 
 /**
  * @param {Buffer} content content
@@ -220,6 +226,7 @@ const sanitizeUrlForError = (href) => {
 
 class Lockfile {
 	constructor() {
+		/** @type {number} */
 		this.version = 1;
 		/** @type {Map<string, LockfileEntry | "ignore" | "no-cache">} */
 		this.entries = new Map();
@@ -430,6 +437,8 @@ const cachedWithKey = (fn, forceFn = fn) => {
 /** @typedef {FetchResultMeta & { entry: LockfileEntry, content: Buffer }} ContentFetchResult */
 /** @typedef {RedirectFetchResult | ContentFetchResult} FetchResult */
 
+/** @typedef {(uri: string) => boolean} AllowedUriFn */
+
 const PLUGIN_NAME = "HttpUriPlugin";
 
 class HttpUriPlugin {
@@ -438,12 +447,8 @@ class HttpUriPlugin {
 	 */
 	constructor(options) {
 		validate(options);
-		this._lockfileLocation = options.lockfileLocation;
-		this._cacheLocation = options.cacheLocation;
-		this._upgrade = options.upgrade;
-		this._frozen = options.frozen;
-		this._allowedUris = options.allowedUris;
-		this._proxy = options.proxy;
+		/** @type {HttpUriPluginOptions} */
+		this.options = options;
 	}
 
 	/**
@@ -453,7 +458,10 @@ class HttpUriPlugin {
 	 */
 	apply(compiler) {
 		const proxy =
-			this._proxy || process.env.http_proxy || process.env.HTTP_PROXY;
+			this.options.proxy || process.env.http_proxy || process.env.HTTP_PROXY;
+		/**
+		 * @type {{ scheme: "http" | "https", fetch: Fetch }[]}
+		 */
 		const schemes = [
 			{
 				scheme: "http",
@@ -477,7 +485,7 @@ class HttpUriPlugin {
 				const logger = compilation.getLogger(`webpack.${PLUGIN_NAME}`);
 				/** @type {string} */
 				const lockfileLocation =
-					this._lockfileLocation ||
+					this.options.lockfileLocation ||
 					join(
 						intermediateFs,
 						compiler.context,
@@ -487,15 +495,15 @@ class HttpUriPlugin {
 					);
 				/** @type {string | false} */
 				const cacheLocation =
-					this._cacheLocation !== undefined
-						? this._cacheLocation
+					this.options.cacheLocation !== undefined
+						? this.options.cacheLocation
 						: `${lockfileLocation}.data`;
-				const upgrade = this._upgrade || false;
-				const frozen = this._frozen || false;
+				const upgrade = this.options.upgrade || false;
+				const frozen = this.options.frozen || false;
 				const hashFunction = "sha512";
 				const hashDigest = "hex";
 				const hashDigestLength = 20;
-				const allowedUris = this._allowedUris;
+				const allowedUris = this.options.allowedUris;
 
 				let warnedAboutEol = false;
 
@@ -660,6 +668,7 @@ class HttpUriPlugin {
 					 * @returns {string} absolute, validated redirect target
 					 */
 					const validateRedirectLocation = (location, base) => {
+						/** @type {URL} */
 						let nextUrl;
 						try {
 							nextUrl = new URL(location, base);
@@ -707,6 +716,7 @@ class HttpUriPlugin {
 
 							if ("location" in result) {
 								// Validate redirect target before following
+								/** @type {string} */
 								let absolute;
 								try {
 									absolute = validateRedirectLocation(result.location, url);
@@ -845,6 +855,7 @@ class HttpUriPlugin {
 								res.statusCode >= 301 &&
 								res.statusCode <= 308
 							) {
+								/** @type {string} */
 								let absolute;
 								try {
 									absolute = validateRedirectLocation(location, url);
@@ -891,9 +902,15 @@ class HttpUriPlugin {
 								stream = stream.pipe(createInflate());
 							}
 
-							stream.on("data", (chunk) => {
-								bufferArr.push(chunk);
-							});
+							stream.on(
+								"data",
+								/**
+								 * @param {Buffer} chunk chunk
+								 */
+								(chunk) => {
+									bufferArr.push(chunk);
+								}
+							);
 
 							stream.on("end", () => {
 								if (!res.complete) {
@@ -953,6 +970,7 @@ class HttpUriPlugin {
 					 * @returns {boolean} true when allowed, otherwise false
 					 */
 					const isAllowed = (uri) => {
+						/** @type {URL} */
 						let parsedUri;
 						try {
 							// Parse the URI to prevent userinfo bypass attacks
@@ -963,6 +981,7 @@ class HttpUriPlugin {
 						}
 						for (const allowed of allowedUris) {
 							if (typeof allowed === "string") {
+								/** @type {URL} */
 								let parsedAllowed;
 								try {
 									parsedAllowed = new URL(allowed);

node_modules/webpack/lib/schemes/VirtualUrlPlugin.js

@@ -58,17 +58,19 @@ function normalizeModule(virtualConfig) {
 	return virtualConfig;
 }
 
+/** @typedef {{ [key: string]: VirtualModuleConfig }} NormalizedModules */
+
 /**
  * Normalizes all virtual modules with the given scheme
  * @param {VirtualModules} virtualConfigs The virtual modules to normalize
  * @param {string} scheme The URL scheme to use
- * @returns {{ [key: string]: VirtualModuleConfig }} The normalized virtual modules
+ * @returns {NormalizedModules} The normalized virtual modules
  */
 function normalizeModules(virtualConfigs, scheme) {
 	return Object.keys(virtualConfigs).reduce((pre, id) => {
 		pre[toVid(id, scheme)] = normalizeModule(virtualConfigs[id]);
 		return pre;
-	}, /** @type {{ [key: string]: VirtualModuleConfig }} */ ({}));
+	}, /** @type {NormalizedModules} */ ({}));
 }
 
 /**
@@ -105,7 +107,9 @@ class VirtualUrlPlugin {
 	 * @param {string=} scheme The URL scheme to use
 	 */
 	constructor(modules, scheme) {
+		/** @type {string} */
 		this.scheme = scheme || DEFAULT_SCHEME;
+		/** @type {NormalizedModules} */
 		this.modules = normalizeModules(modules, this.scheme);
 	}
 
@@ -122,6 +126,27 @@ class VirtualUrlPlugin {
 		compiler.hooks.compilation.tap(
 			PLUGIN_NAME,
 			(compilation, { normalModuleFactory }) => {
+				compilation.hooks.assetPath.tap(
+					{ name: PLUGIN_NAME, before: "TemplatedPathPlugin" },
+					(path, data) => {
+						if (data.filename && this.modules[data.filename]) {
+							/**
+							 * @param {string} str path
+							 * @returns {string} safe path
+							 */
+							const toSafePath = (str) =>
+								`__${str
+									.replace(/:/g, "__")
+									.replace(/^[^a-z0-9]+|[^a-z0-9]+$/gi, "")
+									.replace(/[^a-z0-9._-]+/gi, "_")}`;
+
+							// filename: virtual:logo.svg -> __virtual__logo.svg
+							data.filename = toSafePath(data.filename);
+						}
+						return path;
+					}
+				);
+
 				normalModuleFactory.hooks.resolveForScheme
 					.for(scheme)
 					.tap(PLUGIN_NAME, (resourceData) => {
@@ -135,6 +160,7 @@ class VirtualUrlPlugin {
 						const type = virtualConfig.type;
 						resourceData.path = path + type;
 						resourceData.resource = path;
+						resourceData.context = compiler.context;
 
 						if (virtualConfig.version) {
 							const cacheKey = toCacheKey(resourceData.resource, scheme);