Summary

relate to #4381

• Add native subresource integrity plugin in crates/rspack_plugin_sri, which implements most logic of webpack-subresource-integrity. If HtmlRspackPlugin is used, the native plugin will interact with it directly.
• Add javascript subresource integrity plugin in packages/rspack/src/builtin-plugin/SubresourceIntegrityPlugin.ts, which will interact with html-webpack-plugin if it is used.
• Port test cases of webpack-subresource-integrity into tests/plugin-test/sri-plugin. If the test case uses html-webpack-plugin, then it will also be runned with HtmlRspackPlugin instead.
• Export the plugin in rspack.experiments.SubresourceIntegrityPlugin.

The hashLoading option is not supported yet, and the hashFuncNames only support sha-256, sha-384 and sha-512.

This PR does not contain any document change, I will add documents in another PR.

This pull request introduces the Subresource Integrity (SRI) plugin to the rspack project, which ensures that resources loaded by a web application have not been manipulated. The most important changes include the addition of the SRI plugin and its integration into various parts of the codebase.

Introduction of SRI Plugin:

• New SRI Plugin Module:
  • Added a new module rspack_plugin_sri with its own Cargo.toml and implementation files. This module includes the main logic for the SRI plugin, which computes integrity hashes for assets and integrates with the existing compilation process. [1] [2] [3]

Integration with Existing Codebase:

• Cargo.toml Updates:

  • Updated Cargo.toml files in various crates to include the new rspack_plugin_sri as a dependency. This ensures that the SRI plugin is available throughout the project. [1] [2]

• Modifications in raw_builtins:

  • Added raw_sri module and integrated RawSRIPluginOptions into the existing structure. This includes updates to the BuiltinPluginName enum and the BuiltinPlugin implementation to support the new SRI plugin. [1] [2] [3] [4] [5]

Configuration Changes:

• Workflow Adjustment:
  • Commented out the PUPPETEER_SKIP_DOWNLOAD environment variable in the .github/workflows/reusable-build.yml file, likely to avoid conflicts or unnecessary downloads during the build process.

Checklist

• Tests updated (or not required).
• Documentation updated (or not required).