diff --git a/javascript/change-notes/2021-06-02-webpack-merge.md b/javascript/change-notes/2021-06-02-webpack-merge.md
new file mode 100644
index 00000000000..87ab83fffa6
--- /dev/null
+++ b/javascript/change-notes/2021-06-02-webpack-merge.md
@@ -0,0 +1,4 @@
+lgtm,codescanning
+* The security queries recognize the merge call from [webpack-merge](https://npmjs.com/package/webpack-merge). 
+  Affected packages are
+    [webpack-merge](https://npmjs.com/package/webpack-merge)