Skip to content

fix(javascript): keep what the minifier's fuzzing found it changed - #22570

Merged
alexander-akait merged 3 commits into
mainfrom
fix/minifier-fuzz-findings
Oct 10, 2026
Merged

alexander-akait merged 3 commits into
mainfrom
fix/minifier-fuzz-findings

Conversation

@alexander-akait

@alexander-akait alexander-akait commented Oct 9, 2026 •

Copy link
Copy Markdown
Member

Summary

A seeded fuzzer (separate PR) found programs whose minified output prints something else or does not parse. terser writes the same output in every case, so each fix is a correction: with corrections.enabled off, the output is terser's bytes again.

Input Before After
!/a/ instanceof y !/a/instanceof y (SyntaxError) !/a/ instanceof y
!function(){ try { throw 0; { function g() {} } } catch (e) { console.log(typeof g) } }() prints function prints undefined
function f(c) { if (c) { function g() {} } return typeof g }, f(0) "function" undefined
function f(p) { [p] = [2]; return arguments[0] } with compress.arguments, f() 2 undefined
function f(...r) { r *= 1n } f(0, 0) no throw TypeError
f((a += 1), ([b] = c)) f(a+=1,[b]=c) (V8 refuses it) f(a+=1,([b]=c))
  • In sloppy code, a function declared in a block reads as undefined outside the block until its statement runs (Annex B). reduce_vars, sequences and dead-code extraction no longer assume it is set from the start of the scope. Strict code and modules keep terser's output.
  • compress.arguments no longer rewrites arguments[i] to a parameter that a destructuring assignment writes.
  • An unused compound write stays when a BigInt meets another value, or when its target is a parameter.
  • With pure_conversions: false, a computed read whose key may be an object now stays, matching what the option already does for writes. The default is unchanged.
  • A destructuring assignment that is not the first argument is parenthesized. V8 refuses it bare after an argument such as a += 1, although the spec allows it.

One entry in the "mangle exactly as terser does" list now runs with reduce_vars: false. terser folds typeof of a block's function there, which the Annex B fix keeps.

What kind of change does this PR introduce?

fix

Did you add tests for your changes?

Yes, in test/unitCases/syntax-printer.unittest.js: five CORRECTED_CASES entries, the pure_conversions input, and a test that strict and module code still fold a block's function as terser does. Every changed line in lib/javascript/syntax-printer.js is covered.

Does this PR introduce a breaking change?

No

If relevant, what needs to be documented once your changes are merged or what have you already documented?

n/a. The pending changeset 025-javascript-minifier-corrections.md already covers these fixes.

Use of AI

Written with Claude Code: it reduced each fuzzer finding to a repro, compared it with terser, wrote the failing tests, then the corrections, and checked coverage. The requester reviewed the results.

🤖 Generated with Claude Code

https://claude.ai/code/session_011CuRTB8fAv8PE7di49qDL4


Generated by Claude Code

Summary by CodeRabbit

  • Bug Fixes
    • Improved compression accuracy for assignments that may throw, destructuring writes to function parameters, and function declarations inside blocks.
    • Preserved computed property reads when converting a property key could trigger side effects.
    • Fixed output formatting for destructuring assignments in call arguments and regular expressions used before in or instanceof.
    • Improved handling of unreachable code containing function declarations, helping ensure compressed output preserves runtime behavior and avoids syntax errors.

- Space a regular expression ending an operand of `in` or `instanceof`.
- Keep a sloppy block's function unset outside its block until its
  statement runs (Annex B), in reduce_vars, sequences and dead code.
- Back `compress.arguments` off a parameter a destructuring assigns.
- Keep an unused compound write that throws on a BigInt or a parameter.
- Keep a computed read converting its key where `pure_conversions` is off.
- Parenthesize a destructuring assignment after the first argument, which
  V8 refuses bare.
@changeset-bot

changeset-bot Bot commented Oct 9, 2026 •

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: c5bc638

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions

github-actions Bot commented Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

This PR is packaged and the instant preview is available (36df072).

Install it locally:

  • npm
npm i -D webpack@https://pkg.pr.new/webpack@36df072
  • yarn
yarn add -D webpack@https://pkg.pr.new/webpack@36df072
  • pnpm
pnpm add -D webpack@https://pkg.pr.new/webpack@36df072

@github-actions github-actions Bot added the area: parser JavaScript parsing and dependency analysis (lib/javascript, lib/dependencies) label Oct 9, 2026
@github-actions

github-actions Bot commented Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Types Coverage

Coverage after merging fix/minifier-fuzz-findings into main will be
97.28%
Coverage Report
FileStmtsBranchesFuncsLinesUncovered Lines
bin
   webpack.js98.82%100%100%98.82%103
declarations
   WebpackOptions.ts99.94%100%100%99.94%4183
examples
   build-common.js100%100%100%100%
   buildAll.js100%100%100%100%
   examples.js100%100%100%100%
   template-common.js98.21%100%100%98.21%72
examples/custom-javascript-parser
   test.filter.js100%100%100%100%
examples/custom-javascript-parser/internals
   acorn-parse.js100%100%100%100%
   meriyah-parse.js100%100%100%100%
   oxc-parse.js100%100%100%100%
examples/markdown
   webpack.config.mjs100%100%100%100%
examples/module-federation
   test.filter.js100%100%100%100%
examples/reexport-components
   test.filter.js100%100%100%100%
examples/ssr
   test.filter.js100%100%100%100%
examples/typescript
   test.filter.js100%100%100%100%
examples/typescript-non-erasable
   test.filter.js50%100%100%50%5
examples/virtual-modules
   test.filter.js100%100%100%100%
examples/wasm-bindgen-esm
   test.filter.js100%100%100%100%
examples/wasm-complex
   test.filter.js100%100%100%100%
examples/wasm-emscripten
   test.filter.js100%100%100%100%
examples/wasm-simple
   test.filter.js100%100%100%100%
examples/wasm-simple-source-phase
   test.filter.js100%100%100%100%
lib
   Chunk.js100%100%100%100%
   Compilation.js98.60%100%100%98.60%1757, 2078, 2085, 2093, 2115, 2118, 23, 3075, 3578–3579, 3611, 4200, 4204, 4331, 4352, 4477, 4514, 4521, 4574–4575, 4579, 4584, 4600–4601, 4615–4616, 4621–4622, 5145, 5171, 6001, 6018, 6036, 6052, 6067, 6092, 6095, 6463, 6466–6467, 6472, 6487, 6570, 6594, 6708, 837–838
   Compiler.js98.81%100%100%98.81%1116, 1153, 1156, 1336–1337, 1345, 848, 934, 975
   Dependency.js100%100%100%100%
   DependencyTemplate.js100%100%100%100%
   EntryPlugin.js100%100%100%100%
   Entrypoint.js100%100%100%100%
   ExternalsPlugin.js100%100%100%100%
   FileSystemInfo.js100%100%100%100%
   InitFragment.js100%100%100%100%
   LibraryTemplatePlugin.js100%100%100%100%
   ModuleFilenameHelpers.js100%100%100%100%
   ModuleNotFoundError.js100%100%100%100%
   MultiCompiler.js98.88%100%100%98.88%460, 532, 719, 784
   NormalModule.js100%100%100%100%
   NullFactory.js100%100%100%100%
   ProgressPlugin.js100%100%100%100%
   RawModule.js100%100%100%100%
   RequestShortener.js100%100%100%100%
   SingleEntryPlugin.js100%100%100%100%
   WebpackError.js100%100%100%100%
   index.js99.78%100%100%99.78%206
   webpack.js97.84%100%100%97.84%278, 300, 302
lib/asset
   AssetBytesGenerator.js100%100%100%100%
   AssetBytesParser.js100%100%100%100%
   AssetGenerator.js100%100%100%100%
   AssetModule.js100%100%100%100%
   AssetModulesPlugin.js98.15%100%100%98.15%338, 362, 365, 495, 57, 62
   AssetParser.js100%100%100%100%
   AssetSourceGenerator.js100%100%100%100%
   AssetSourceParser.js100%100%100%100%
   RawDataUrlModule.js100%100%100%100%
   WebManifestGenerator.js100%100%100%100%
   WebManifestParser.js100%100%100%100%
lib/async-modules
   AsyncModuleHelpers.js100%100%100%100%
   AwaitDependenciesInitFragment.js100%100%100%100%
   InferAsyncModulesPlugin.js100%100%100%100%
   isGeneratorLowered.js100%100%100%100%
lib/bun
   BunTargetPlugin.js100%100%100%100%
lib/cache
   AddBuildDependenciesPlugin.js100%100%100%100%
   AddManagedPathsPlugin.js100%100%100%100%
   Cache.js96.49%100%100%96.49%10, 104
   CacheFacade.js100%100%100%100%
   IdleFileCachePlugin.js97.92%100%100%97.92%75, 87, 95
   MemoryCachePlugin.js92%100%100%92%33, 42
   MemoryWithGcCachePlugin.js93.42%100%100%93.42%106, 120–121, 130, 88
   PackFileCacheStrategy.js96.54%100%100%96.54%1304, 1404, 1408, 1470, 1716, 1800, 1823, 1853, 682, 701, 711–713, 715, 731–732, 737, 740, 742, 747, 752, 777, 783, 817, 823, 829, 834, 845, 854, 859–860, 862, 879, 885–886, 888
   ResolverCachePlugin.js100%100%100%100%
   getLazyHashedEtag.js100%100%100%100%
   mergeEtags.js100%100%100%100%
lib/config
   OptionsApply.js100%100%100%100%
   PlatformPlugin.js100%100%100%100%
   WebpackOptionsApply.js100%100%100%100%
   WebpackOptionsDefaulter.js100%100%100%100%
   browserslistTargetHandler.js100%100%100%100%
   cli.js98.61%100%100%98.61%116, 546, 578, 628, 9
   defaults.js99.44%100%100%99.44%1624–1626, 1634, 283, 286, 291, 295
   defineConfig.js100%100%100%100%
   getClaimedAssetTypes.js100%100%100%100%
   normalization.js99.12%100%100%99.12%279–280, 346, 361
   target.js100%100%100%100%
   validateSchema.js94.67%100%100%94.67%100, 87, 89, 98
lib/container
   ContainerEntryDependency.js100%100%100%100%
   ContainerEntryModule.js100%100%100%100%
   ContainerEntryModuleFactory.js100%100%100%100%
   ContainerExposedDependency.js100%100%100%100%
   ContainerPlugin.js100%100%100%100%
   ContainerReferencePlugin.js100%100%100%100%
   FallbackDependency.js100%100%100%100%
   FallbackItemDependency.js100%100%100%100%
   FallbackModule.js100%100%100%100%
   FallbackModuleFactory.js100%100%100%100%
   HoistContainerReferencesPlugin.js100%100%100%100%
   ModuleFederationPlugin.js100%100%100%100%
   RemoteModule.js100%100%100%100%
   RemoteRuntimeModule.js100%100%100%100%
   RemoteToExternalDependency.js100%100%100%100%
   declaredRemotes.js100%100%100%100%
   moduleFederationHooks.js100%100%100%100%
   options.js100%100%100%100%
lib/context
   ContextExclusionPlugin.js100%100%100%100%
   ContextModule.js99.88%100%100%99.88%1494
   ContextModuleFactory.js95.66%100%100%95.66%230, 257, 276, 280–281, 289, 465, 486, 491, 532, 541, 543, 547, 550, 556–557
   ContextReplacementPlugin.js100%100%100%100%
lib/css
   CssGenerator.js99.47%100%100%99.47%1085, 136, 842
   CssInjectStyleRuntimeModule.js100%100%100%100%
   CssLoadingRuntimeModule.js100%100%100%100%
   CssModule.js83.16%100%100%83.16%197, 202–210, 212–217
   CssModulesPlugin.js99.86%100%100%99.86%886
   CssParser.js99.48%100%100%99.48%1034, 1065, 2396, 24, 3043, 3046, 3052, 3093, 3096, 3135, 3138, 3475, 5041, 5044, 918
   CssServerStylesRuntimeModule.js100%100%100%100%
   conventions.js98.65%100%100%98.65%93
   cssMinify.js97.50%100%100%97.50%162, 171
   data.js99.84%100%100%99.84%229, 5545
   syntax-parser.js99.64%100%100%99.64%10060–10061, 10595–10596, 10633, 10828, 10874, 13094–13097, 13197–13198, 13295–13296, 13940, 14237, 14239, 14729, 15095, 17105, 2444, 3143, 3145, 3150, 3169, 3914, 3920, 7356, 7394, 7401
   syntax-printer.js99.31%100%100%99.31%2530–2531, 2533–2534, 2536–2537, 2542, 2809–2812, 2905, 3578, 360, 3998, 4107, 4793, 5094, 5884, 730
   syntax.js100%100%100%100%
   topologicalSort.js100%100%100%100%
lib/debug
   ProfilingPlugin.js96.22%100%100%96.22%169, 425, 554, 561, 570, 574, 583, 588, 594, 599, 92
lib/define
   DefinePlugin.js98.85%100%100%98.85%1495, 268–269, 285, 304, 378, 936, 938, 943, 967
   DotenvPlugin.js98.07%100%100%98.07%391, 439, 452–453
   EnvironmentPlugin.js97.14%100%100%97.14%49
lib/deno
   DenoTargetPlugin.js100%100%100%100%
lib/dependencies
   ConstDependency.js100%100%100%100%
   ContextElementDependency.js100%100%100%100%
   NullDependency.js100%100%100%100%
lib/dependencies/amd
   AMDDefineDependency.js100%100%100%100%
   AMDDefineDependencyParserPlugin.js100%100%100%100%
   AMDPlugin.js99.31%100%100%99.31%54
   AMDRequireArrayDependency.js100%100%100%100%
   AMDRequireContextDependency.js100%100%100%100%
   AMDRequireDependenciesBlock.js100%100%100%100%
   AMDRequireDepend

…truncated

@coderabbitai

coderabbitai Bot commented Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Repository: webpack/webpack/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: a1686f0a-f99f-47bb-aba1-f03f2ab065de

📥 Commits

Reviewing files that changed from the base of the PR and between dc535ec and c5bc638.


📒 Files selected for processing (1)
  • test/helpers/oxcSmaller.js

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 6 remain after this review.



📝 Walkthrough

Walkthrough

The compressor preserves selected writes and reads, accounts for Annex B block functions, and avoids rewriting parameters assigned through destructuring. The printer adjusts parentheses and spacing for specific expression forms.

Changes

JavaScript syntax and compression

Layer / File(s) Summary
Preserve observable writes and reads
lib/javascript/syntax-printer.js, test/unitCases/syntax-printer.unittest.js
The compressor retains selected compound writes and computed property reads, and avoids parameter rewrites when destructuring assigns to the parameter. Regression cases cover these behaviors.
Handle Annex B block functions
lib/javascript/syntax-printer.js, test/unitCases/syntax-printer.unittest.js, test/helpers/oxcSmaller.js
The compressor tracks eligible block-function bindings, adjusts fixed-value substitution and statement joining, and distinguishes statement-list entries during unreachable-code extraction. Tests and comparison data cover block-function behavior in several contexts.
Correct printed expression syntax
lib/javascript/syntax-printer.js, test/unitCases/syntax-printer.unittest.js
The printer adds parentheses for destructuring assignments in later call arguments and adds spacing when a regular-expression operand precedes in or instanceof. Tests cover the printed output.

Suggested reviewers: aryanraj45


Priority: ⬇️ Low

Change: Bug fix

Merge Risk: ⚪ Minimal · up to c5bc6

The changes address targeted JavaScript compression and printing cases, with no actionable merge-blocking issue established. The PR appears ready for normal checks.

🚥 Pre-merge checks | ✅ 3 | ❓ 1

❌ Failed checks (1 inconclusive)

Check name Status Explanation Resolution
Title check Inconclusive The title uses valid Conventional Commit syntax with the allowed type fix and the optional scope javascript. The subject describes the minifier corrections. The branch prefix is not provided, so t… Provide the branch name or confirm that its prefix is fix. If the prefix differs, update the title or branch to match.
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.

Full details: Title check

Explanation

The title uses valid Conventional Commit syntax with the allowed type fix and the optional scope javascript. The subject describes the minifier corrections. The branch prefix is not provided, so the required type-prefix match cannot be verified.



  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@codecov

codecov Bot commented Oct 9, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.18%. Comparing base (e47db8c) to head (c5bc638).
⚠️ Report is 8 commits behind head on main.

Additional details and impacted files
@@             Coverage Diff             @@
##             main   #22570       +/-   ##
===========================================
+ Coverage   75.17%   96.18%   +21.00%     
===========================================
  Files         594      773      +179     
  Lines      119952   128159     +8207     
  Branches    40216    42524     +2308     
===========================================
+ Hits        90179   123269    +33090     
+ Misses      29773     4890    -24883     
Flag Coverage Δ
css-parsing 25.10% <ø> (?)
html5lib 26.96% <ø> (?)
integration 82.52% <ø> (?)
minify-corpora 79.49% <93.10%> (?)
syntax-equivalence 79.63% <ø> (?)
test262 56.83% <87.93%> (?)
test262-parser 84.55% <ø> (?)
unit 75.18% <100.00%> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions

github-actions Bot commented Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Generated code size

Comparing base (d763ce0) to head (c5bc638). Merging this pull request changes the size of 560 asset(s) whose tests it leaves untouched, moves 14 asset(s) whose tests it edits too and adds 109 new asset(s).

What moved Tests Assets Gzip Raw Test edit
Changed, test untouched 330 560 🔴 ↑ +5.70 KiB 🔴 ↑ +13.71 KiB —
Changed, test edited 4 14 🔴 ↑ +458 B 🔴 ↑ +2.00 KiB 🔴 ↑ +3.35 KiB
New 6 109 ⚪ added +92.76 KiB ⚪ added +319.69 KiB —
Deleted 0 0 — — —
Unchanged — 7767 — — —

Read Changed, test untouched first: the test is byte-identical on both sides, so webpack generated the difference. Changed, test edited moved partly because the test did — Test edit is how many bytes the test gained, and a bundle that grew by less is not a regression. New and Deleted are whole files, not deltas — a new asset was created, not grown, so it reads gray (⚪ added) — and adding tests cannot bury a real change. Gzip decides, because that is what users download; raw is the tiebreak, and brotli and zstd are per asset below.

560 asset(s) changed size, test untouched, biggest 20 by raw or gzip change
Asset Before After Change Gzip (9) Brotli (11) Zstd (19)
🔴 ↑ asset-modules/url-module-analyzable bundle0.mjs 3.82 KiB 3.92 KiB +99 B (+2.53%) +36 B (+2.81%) +15 B (+1.35%) +37 B (+2.87%)
🔴 ↑ asset-modules/query-suffixes-user-override bundle0.js 5.77 KiB 5.87 KiB +99 B (+1.68%) +36 B (+1.90%) +31 B (+1.95%) +38 B (+2.02%)
🔴 ↑ asset-modules/query-suffixes bundle0.js 27.16 KiB 27.25 KiB +99 B (+0.36%) +31 B (+0.18%) +31 B (+0.19%) +33 B (+0.19%)
🔴 ↑ analyzable/library-module-shipping 1/bundle1.mjs 7.86 KiB 7.96 KiB +94 B (+1.17%) +26 B (+1.06%) +20 B (+0.93%) +25 B (+1.02%)
🔴 ↑ analyzable/library-module-shipping 0/bundle0.mjs 7.86 KiB 7.96 KiB +94 B (+1.17%) +26 B (+1.06%) +20 B (+0.93%) +25 B (+1.02%)
🔴 ↑ analyzable/circular-chunkhash-names bundle0.mjs 7.54 KiB 7.62 KiB +80 B (+1.04%) +24 B (+1.04%) +16 B (+0.80%) +24 B (+1.05%)
🔴 ↑ analyzable/content-named-single-runtime main.[hash].mjs 1.67 KiB 1.74 KiB +66 B (+3.85%) +25 B (+3.76%) +30 B (+5.32%) +27 B (+4.04%)
🔴 ↑ analyzable/chunk-import-shared-initial-chunk bundle0.mjs 1.87 KiB 1.93 KiB +66 B (+3.45%) +28 B (+3.88%) +28 B (+4.59%) +29 B (+3.96%)
🔴 ↑ analyzable/shared-runtime-base-uri bundle0.mjs 2.30 KiB 2.37 KiB +66 B (+2.80%) +26 B (+3.06%) +31 B (+4.35%) +25 B (+2.88%)
🔴 ↑ analyzable/shared-chunk-import main.mjs 2.50 KiB 2.56 KiB +66 B (+2.58%) +28 B (+3.07%) +33 B (+4.24%) +27 B (+2.95%)
🔴 ↑ analyzable/public-path-override-scope bundle0.mjs 3.12 KiB 3.18 KiB +66 B (+2.07%) +29 B (+2.69%) +34 B (+3.73%) +28 B (+2.57%)
🔴 ↑ analyzable/asset-import-baked-absolute bundle0.mjs 3.25 KiB 3.32 KiB +66 B (+1.98%) +23 B (+2.17%) +32 B (+3.55%) +26 B (+2.45%)
🔴 ↑ analyzable/asset-import-baked bundle0.mjs 3.32 KiB 3.39 KiB +66 B (+1.94%) +26 B (+2.41%) +29 B (+3.13%) +28 B (+2.59%)
🔴 ↑ analyzable/protocol-relative-base-uri bundle0.mjs 3.44 KiB 3.51 KiB +66 B (+1.87%) +28 B (+2.28%) +34 B (+3.25%) +28 B (+2.27%)
🔴 ↑ asset-modules/url-module-public-path bundle0.mjs 3.69 KiB 3.75 KiB +66 B (+1.75%) +27 B (+2.08%) +37 B (+3.40%) +27 B (+2.06%)
🔴 ↑ wasm/analyzable-served-both-ways main.mjs 3.73 KiB 3.80 KiB +66 B (+1.73%) +29 B (+2.37%) +27 B (+2.57%) +28 B (+2.28%)
🔴 ↑ output/public-path-assign-only 0/assign-only/main.mjs 3.90 KiB 3.96 KiB +66 B (+1.65%) +28 B (+2.16%) +20 B (+1.81%) +31 B (+2.39%)
🔴 ↑ html/path-outside-context-future-defaults bundle0.js 4.21 KiB 4.27 KiB +66 B (+1.53%) +29 B (+2.03%) -9 B (-0.75%) +29 B (+2.03%)
🔴 ↑ analyzable/asset-url-function-public-path 0/bundle0.mjs 4.26 KiB 4.32 KiB +66 B (+1.51%) +29 B (+1.97%) +21 B (+1.67%) +31 B (+2.09%)
🔴 ↑ analyzable/asset-url-function-public-path 1/bundle1.mjs 4.26 KiB 4.32 KiB +66 B (+1.51%) +29 B (+1.97%) +23 B (+1.83%) +29 B (+1.96%)
… 540 more, see the uploaded report
14 asset(s) changed size, test edited
Asset Before After Change Gzip (9) Brotli (11) Zstd (19) Test edit (per test)
🔴 ↑ chunk-graph/rewalk-chunk main.js 1.45 KiB 2.16 KiB +728 B (+49.02%) +241 B (+31.34%) +208 B (+29.97%) +238 B (+30.75%) +1.28 KiB
🔴 ↑ node/output-module-external import.mjs 8.68 KiB 8.95 KiB +275 B (+3.09%) +16 B (+0.62%) +4 B (+0.18%) +14 B (+0.55%) +5 B
🔴 ↑ node/output-module-external require.mjs 7.81 KiB 8.07 KiB +270 B (+3.38%) +3 B (+0.12%) -13 B (-0.59%) -1 B (-0.04%) +5 B
🔴 ↑ chunk-graph/rewalk-chunk module.js 144 B 410 B +266 B (+184.72%) +124 B (+105.08%) +122 B (+129.79%) +122 B (+114.02%) +1.28 KiB
🔴 ↑ externals/node-prefix-user-externals strip/bundle0.js 1000 B 1.19 KiB +221 B (+22.10%) +31 B (+6.28%) +38 B (+9.18%) +30 B (+6.09%) +2.02 KiB
🔴 ↑ externals/node-prefix-user-externals keep/bundle1.js 1010 B 1.20 KiB +221 B (+21.88%) +31 B (+6.24%) +36 B (+8.53%) +29 B (+5.82%) +2.02 KiB
🔴 ↑ node/prefix-in-runtime 2/bundle2.mjs 368 B 378 B +10 B (+2.72%) +1 B (+0.40%) — — +40 B
🔴 ↑ node/prefix-in-runtime 0/bundle0.mjs 368 B 378 B +10 B (+2.72%) +1 B (+0.40%) — — +40 B
🔴 ↑ node/prefix-in-runtime 4/bundle4.mjs 368 B 378 B +10 B (+2.72%) +1 B (+0.40%) — — +40 B
🔴 ↑ node/prefix-in-runtime 5/bundle5.mjs 368 B 378 B +10 B (+2.72%) +1 B (+0.40%) — — +40 B
🔴 ↑ node/prefix-in-runtime 7/bundle7.js 596 B 606 B +10 B (+1.68%) +2 B (+0.53%) +1 B (+0.32%) +3 B (+0.81%) +40 B
🔴 ↑ node/prefix-in-runtime 1/bundle1.mjs 363 B 368 B +5 B (+1.38%) +2 B (+0.80%) +2 B (+0.96%) +3 B (+1.28%) +40 B
🔴 ↑ node/prefix-in-runtime 3/bundle3.mjs 363 B 368 B +5 B (+1.38%) +2 B (+0.80%) +2 B (+0.96%) +3 B (+1.28%) +40 B
🔴 ↑ node/prefix-in-runtime 6/bundle6.mjs 363 B 368 B +5 B (+1.38%) +2 B (+0.80%) +2 B (+0.96%) +3 B (+1.28%) +40 B
109 asset(s) this pull request adds, biggest 20 by raw size
Asset Raw Gzip (9) Brotli (11) Zstd (19)
⚪ added chunk-index/available-modules-late-css 1/main-1.js 15.99 KiB 3.56 KiB 3.08 KiB 3.46 KiB
⚪ added chunk-index/available-modules-late-css 0/main-0.js 15.99 KiB 3.56 KiB 3.08 KiB 3.46 KiB
⚪ added chunk-graph/available-modules 12/main-12.js 12.08 KiB 3.25 KiB 2.83 KiB 3.20 KiB
⚪ added chunk-graph/available-modules 8/main-8.js 12.07 KiB 3.25 KiB 2.82 KiB 3.20 KiB
⚪ added chunk-graph/available-modules 9/main-9.js 12.06 KiB 3.21 KiB 2.78 KiB 3.15 KiB
⚪ added chunk-graph/available-modules 2/main-2.js 11.94 KiB 3.18 KiB 2.76 KiB 3.13 KiB
⚪ added chunk-graph/available-modules 5/main-5.js 11.94 KiB 3.19 KiB 2.77 KiB 3.14 KiB
⚪ added chunk-graph/available-modules 4/main-4.js 11.83 KiB 3.18 KiB 2.77 KiB 3.12 KiB
⚪ added chunk-graph/available-modules 11/main-11.js 11.79 KiB 3.18 KiB 2.77 KiB 3.13 KiB
⚪ added chunk-graph/available-modules 10/main-10.js 11.78 KiB 3.17 KiB 2.75 KiB 3.12 KiB
⚪ added chunk-graph/available-modules 13/main-13.js 11.77 KiB 3.17 KiB 2.75 KiB 3.12 KiB
⚪ added chunk-graph/available-modules 14/main-14.js 11.77 KiB 3.17 KiB 2.76 KiB 3.12 KiB
⚪ added chunk-graph/available-modules 1/main-1.js 11.76 KiB 3.17 KiB 2.76 KiB 3.11 KiB
⚪ added chunk-graph/available-modules 7/main-7.js 11.76 KiB 3.17 KiB 2.75 KiB 3.11 KiB
⚪ added chunk-graph/available-modules 0/main-0.js 11.76 KiB 3.16 KiB 2.74 KiB 3.11 KiB
⚪ added chunk-graph/available-modules 3/main-3.js 11.76 KiB 3.17 KiB 2.76 KiB 3.11 KiB
⚪ added chunk-graph/available-modules 6/main-6.js 11.75 KiB 3.16 KiB 2.75 KiB 3.11 KiB
⚪ added chunk-graph/available-modules-cycle main.js 11.61 KiB 3.13 KiB 2.71 KiB 3.08 KiB
⚪ added chunk-graph/available-modules 7/extra-7.js 11.22 KiB 3.01 KiB 2.60 KiB 2.96 KiB
⚪ added chunk-graph/available-modules 12/worker-12.js 7.84 KiB 2.09 KiB 1.80 KiB 2.07 KiB
… 89 more, see the uploaded report
1 runtime(s) changed which runtime modules they carry
Runtime Modules Added Removed
🔴 ↑ chunk-graph/rewalk-chunk main 6 → 7 set anonymous default export name —
21 runtime(s) this pull request adds or no longer builds
Runtime Modules
➕ chunk-index/available-modules-late-css 0/main 11
➕ chunk-index/available-modules-late-css 1/main 11
➕ chunk-graph/available-modules 0/main 9
➕ chunk-graph/available-modules 1/main 9
➕ chunk-graph/available-modules 10/main 9
➕ chunk-graph/available-modules 11/main 9
➕ chunk-graph/available-modules 12/main 9
➕ chunk-graph/available-modules 13/main 9
➕ chunk-graph/available-modules 14/main 9
➕ chunk-graph/available-modules 2/main 9
➕ chunk-graph/available-modules 3/main 9
➕ chunk-graph/available-modules 4/main 9
➕ chunk-graph/available-modules 5/main 9
➕ chunk-graph/available-modules 6/main 9
➕ chunk-graph/available-modules 7/extra 9
➕ chunk-graph/available-modules 7/main 9
➕ chunk-graph/available-modules 8/main 9
➕ chunk-graph/available-modules 9/main 9
➕ chunk-graph/available-modules-cycle main 9
➕ chunk-graph/available-modules 12/[hash] 8
… 1 more, see the uploaded report

Built test/configCases with the defaults a user gets: 2207 test(s), 8450 asset(s), 99 emitted nothing.

…n engine

Bun reads terser's bare `f(a+=1,[b]=c)`, so the case cannot require the
reference output to fail where it runs.
@codspeed

codspeed Bot commented Oct 9, 2026 •

Copy link
Copy Markdown

Merging this PR will degrade performance by 51.71%

⚠️ 108 benchmarks spent significant time in system calls

System calls cannot be consistently instrumented, so they are not included in the measure, which understates the real cost. Please switch to the Walltime instrument to accurately measure system calls.

Measurement and system calls

ℹ️ 39 benchmarks have no flame graph

The flamegraph could not be generated because too much time was spent in runtime internals, making the visualization not useful for performance analysis.

❌ 1 regressed benchmark
✅ 405 untouched benchmarks
⏩ 6 skipped benchmarks1

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

Mode Benchmark BASE HEAD Efficiency
❌ Memory benchmark "devtool-source-map", scenario '{"name":"mode-development-rebuild","mode":"development","watch":true}' 784.3 KB 1,624.2 KB -51.71%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.


Comparing fix/minifier-fuzz-findings (c5bc638) with main (f9a1b1a)

Open in CodSpeed

Footnotes

  1. 6 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

…es smaller

The Annex B correction keeps the call of a block's empty function whose
name is also read outside the block.
@alexander-akait
alexander-akait merged commit 36df072 into main Oct 10, 2026
68 of 69 checks passed
@alexander-akait
alexander-akait deleted the fix/minifier-fuzz-findings branch October 10, 2026 09:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: parser JavaScript parsing and dependency analysis (lib/javascript, lib/dependencies)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant