Skip to content

Bump the webpack group across 1 directory with 8 updates#15966

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webpack-cf54c3664a
Open

Bump the webpack group across 1 directory with 8 updates#15966
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webpack-cf54c3664a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 26, 2026 •
edited
Loading

Bumps the webpack group with 8 updates in the / directory:

Package From To
css-loader 7.1.2 7.1.4
swc-loader 0.2.6 0.2.7
webpack-assets-manifest 6.3.0 6.5.2
webpack-bundle-analyzer 4.10.2 5.3.0
webpack-cli 6.0.1 7.0.2
webpack-dev-middleware 7.4.5 8.0.3
webpack-dev-server 5.2.2 5.2.4
webpack-sources 3.3.3 3.5.0

Updates css-loader from 7.1.2 to 7.1.4

Release notes

Sourced from css-loader's releases.

v7.1.4

7.1.4 (2026-02-16)

Bug Fixes

  • update peer dependency for @​rspack/core v2 (#1652) (aeddefe)

v7.1.3

7.1.3 (2026-01-27)

Bug Fixes

Changelog

Sourced from css-loader's changelog.

7.1.4 (2026-02-16)

Bug Fixes

  • update peer dependency for @​rspack/core v2 (#1652) (aeddefe)

7.1.3 (2026-01-27)

Bug Fixes

Commits

Updates swc-loader from 0.2.6 to 0.2.7

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for swc-loader since your current version.


Updates webpack-assets-manifest from 6.3.0 to 6.5.2

Release notes

Sourced from webpack-assets-manifest's releases.

v6.5.2

6.5.2 (2026-05-22)

Dependencies

  • deps: updated dependencies (1a00eac)

v6.5.1

6.5.1 (2026-03-09)

v6.5.0

6.5.0 (2025-12-07)

v6.4.0

6.4.0 (2025-11-09)

Bug Fixes

  • compilation.codeGenerationResults can be undefined (f054f6b)
Commits
  • 5f84cdc Merge pull request #376 from webdeveric/chore/deps
  • df452e5 chore(deps-dev): bumped pnpm version
  • cf7c01d chore(release): updated settings for @semantic-release/release-notes-generator
  • 1a00eac chore(deps): updated dependencies
  • a9b67f1 chore(deps-dev): updated dev dependencies
  • e28f586 chore: updated Node version
  • a11d772 Merge pull request #375 from webdeveric/chore/deps
  • b08d58a chore: bumped pnpm version
  • e548502 chore(deps-dev): updated dev dependencies
  • 48429c7 Merge pull request #374 from webdeveric/ci/perms
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-assets-manifest since your current version.


Updates webpack-bundle-analyzer from 4.10.2 to 5.3.0

Release notes

Sourced from webpack-bundle-analyzer's releases.

v5.3.0

Minor Changes

Patch Changes

Changelog

Sourced from webpack-bundle-analyzer's changelog.

5.3.0

Minor Changes

Patch Changes

5.2.0

5.1.1

5.1.0

5.0.1

  • Bug Fix
    • Restore @babel/plugin-transform-class-properties to fix HTML report (#682 by @​valscion)

5.0.0

  • Breaking Change

  • Improvement

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-bundle-analyzer since your current version.


Updates webpack-cli from 6.0.1 to 7.0.2

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.0.2

Patch Changes

webpack-cli@7.0.1

Patch Changes

webpack-cli@7.0.0

Major Changes

  • The minimum supported version of Node.js is 20.9.0. (by @​alexander-akait in #4677)

  • Use dynamic import to load webpack.config.js, fallback to interpret only when configuration can't be load by dynamic import. Using dynamic imports allows you to take advantage of Node.js's built-in TypeScript support. (by @​alexander-akait in #4677)

  • Removed the --node-env argument in favor of the --config-node-env argument. (by @​alexander-akait in #4677)

  • The version command only output versions right now. (by @​alexander-akait in #4677)

  • Removed deprecated API, no action required unless you use import cli from "webpack-cli";/const cli = require("webpack-cli");. (by @​alexander-akait in #4677)

Patch Changes

Changelog

Sourced from webpack-cli's changelog.

7.0.2

Patch Changes

7.0.1

Patch Changes

7.0.0

Major Changes

  • The minimum supported version of Node.js is 20.9.0. (by @​alexander-akait in #4677)

  • Use dynamic import to load webpack.config.js, fallback to interpret only when configuration can't be load by dynamic import. Using dynamic imports allows you to take advantage of Node.js's built-in TypeScript support. (by @​alexander-akait in #4677)

  • Removed the --node-env argument in favor of the --config-node-env argument. (by @​alexander-akait in #4677)

  • The version command only output versions right now. (by @​alexander-akait in #4677)

  • Removed deprecated API, no action required unless you use import cli from "webpack-cli";/const cli = require("webpack-cli");. (by @​alexander-akait in #4677)

Patch Changes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-cli since your current version.


Updates webpack-dev-middleware from 7.4.5 to 8.0.3

Release notes

Sourced from webpack-dev-middleware's releases.

v8.0.3

Patch Changes

  • Respect req.url when modified by middleware such as connect-history-api-fallback. (by @​bjohansebas in #2304)

v8.0.2

Patch Changes

v8.0.1

Patch Changes

v8.0.0

Major Changes

  • The getFilenameFromUrl function is now asynchronous, returning a Promise that resolves to the object with the found filename (or undefined if the file was not found) or throws an error if the URL cannot be processed. Additionally, the object contains the extra property with stats (file system stats) and outputFileSystem (output file system where file was found) properties. (by @​alexander-akait in #2284)

  • Minimum supported Node.js version is 20.9.0. (by @​alexander-akait in #2284)

  • Minimum supported webpack version is 5.101.0. (by @​alexander-akait in #2284)

Minor Changes

  • Added support for plugin usage, useful when the middleware will be used as a webpack plugin (no stats output, no extra actions). (by @​alexander-akait in #2284)

  • Added the forwardError option to enable error forwarding to next middleware. (by @​alexander-akait in #2284)

  • Enable cacheImmutable by default for immutable assets. (by @​alexander-akait in #2284)

Patch Changes

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

7.4.5 (2025-09-24)

Bug Fixes

7.4.4 (2025-09-23)

Bug Fixes

... (truncated)

Changelog

Sourced from webpack-dev-middleware's changelog.

8.0.3

Patch Changes

  • Respect req.url when modified by middleware such as connect-history-api-fallback. (by @​bjohansebas in #2304)

8.0.2

Patch Changes

8.0.1

Patch Changes

8.0.0

Major Changes

  • The getFilenameFromUrl function is now asynchronous, returning a Promise that resolves to the object with the found filename (or undefined if the file was not found) or throws an error if the URL cannot be processed. Additionally, the object contains the extra property with stats (file system stats) and outputFileSystem (output file system where file was found) properties. (by @​alexander-akait in #2284)

  • Minimum supported Node.js version is 20.9.0. (by @​alexander-akait in #2284)

  • Minimum supported webpack version is 5.101.0. (by @​alexander-akait in #2284)

Minor Changes

  • Added support for plugin usage, useful when the middleware will be used as a webpack plugin (no stats output, no extra actions). (by @​alexander-akait in #2284)

  • Added the forwardError option to enable error forwarding to next middleware. (by @​alexander-akait in #2284)

  • Enable cacheImmutable by default for immutable assets. (by @​alexander-akait in #2284)

Patch Changes

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

Commits
  • 6fcaa48 chore(release): new release (#2305)
  • 21cd376 chore(deps): update typescript (#2306)
  • 8493c45 fix: respect req.url when modified
  • 7c658fe chore(deps-dev): bump the dependencies group with 2 updates (#2302)
  • dedf0a4 chore(deps): bump the dependencies group across 1 directory with 2 updates
  • 381828e chore(deps): bump picomatch (#2300)
  • 6eee395 chore(deps): bump the dependencies group with 4 updates (#2297)
  • f79af6a chore(release): new release
  • ebe8b57 chore: adding changelog
  • dfebd57 fix: rspack compatibility more.
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-dev-middleware since your current version.


Updates webpack-dev-server from 5.2.2 to 5.2.4

Release notes

Sourced from webpack-dev-server's releases.

v5.2.4

5.2.4 (2026-05-11)

Bug Fixes

  • set Cross-Origin-Resource-Policy header to prevent source code theft over HTTP

v5.2.3

5.2.3 (2026-01-12)

Bug Fixes

  • add cause for errorObject (#5518) (37b033d)
  • compatibility with event target and universal target and lazy compilation (574026c)
  • overlay: add ESC key to dismiss overlay (#5598) (f91baa8)
  • progress indicator styles (#5557) (41a53a1)
  • upgrade selfsigned to v5
Changelog

Sourced from webpack-dev-server's changelog.

5.2.4 (2026-05-11)

Bug Fixes

  • set Cross-Origin-Resource-Policy header to prevent source code theft over HTTP

5.2.3 (2026-01-12)

Bug Fixes

  • add cause for errorObject (#5518) (37b033d)
  • compatibility with event target and universal target and lazy compilation (574026c)
  • overlay: add ESC key to dismiss overlay (#5598) (f91baa8)
  • progress indicator styles (#5557) (41a53a1)
  • upgrade selfsigned to v5
Commits

Updates webpack-sources from 3.3.3 to 3.5.0

Release notes

Sourced from webpack-sources's releases.

v3.5.0

Minor Changes

  • Add clearCache(options?, visited?) method to Source that recursively releases cached data (CachedSource cached maps/buffers/strings, SourceMapSource parsed/serialized map caches, and dual-buffer caches in leaf sources). Lets consumers like webpack's SourceMapDevToolPlugin reclaim memory between chunks rather than accumulating per-task source map data across an entire build. Options: maps (default true) drops cached source maps; source (default true) drops cached source/buffer copies — pass false to keep source available for downstream plugins; parsedMap (default false) additionally drops the parsed object form on SourceMapSource instances when a buffer or string form survives (the combination { maps: true, source: false, parsedMap: true } matches the SourceMapDevToolPlugin call shape in webpack/webpack#20963). The optional visited WeakSet deduplicates the walk when the same child is reachable through multiple parents (e.g. modules shared across chunks). (by @​alexander-akait in #221)

v3.4.1

Patch Changes

  • Implements more effective buffers and buffer for ReplaceSource and improve performance in other places. (by @​alexander-akait in #211)

v3.4.0

Minor Changes

  • Add Source.prototype.buffers() that returns the source as Buffer[]. ConcatSource, CachedSource, and CompatSource implement it without allocating an intermediate concatenated buffer, allowing consumers that can write multiple buffers at once (e.g. via writev) to avoid the overhead of Buffer.concat in deeply nested sources. (by @​alexander-akait in #204)

Patch Changes

  • fix: use Int32Array for signed VLQ delta accumulation in readMappings so cumulative values that go negative are preserved instead of wrapping to a large unsigned integer (by @​alexander-akait in #206)

  • Improved performance in many places. (by @​alexander-akait in #209)

v3.3.4

Fixes

  • sync SourceMapSource constructor types with sourceAndMap method (#176)
Changelog

Sourced from webpack-sources's changelog.

3.5.0

Minor Changes

  • Add clearCache(options?, visited?) method to Source that recursively releases cached data (CachedSource cached maps/buffers/strings, SourceMapSource parsed/serialized map caches, and dual-buffer caches in leaf sources). Lets consumers like webpack's SourceMapDevToolPlugin reclaim memory between chunks rather than accumulating per-task source map data across an entire build. Options: maps (default true) drops cached source maps; source (default true) drops cached source/buffer copies — pass false to keep source available for downstream plugins; parsedMap (default false) additionally drops the parsed object form on SourceMapSource instances when a buffer or string form survives (the combination { maps: true, source: false, parsedMap: true } matches the SourceMapDevToolPlugin call shape in webpack/webpack#20963). The optional visited WeakSet deduplicates the walk when the same child is reachable through multiple parents (e.g. modules shared across chunks). (by @​alexander-akait in #221)

3.4.1

Patch Changes

  • Implements more effective buffers and buffer for ReplaceSource and improve performance in other places. (by @​alexander-akait in #211)

3.4.0

Minor Changes

  • Add Source.prototype.buffers() that returns the source as Buffer[]. ConcatSource, CachedSource, and CompatSource implement it without allocating an intermediate concatenated buffer, allowing consumers that can write multiple buffers at once (e.g. via writev) to avoid the overhead of Buffer.concat in deeply nested sources. (by @​alexander-akait in #204)

Patch Changes

  • fix: use Int32Array for signed VLQ delta accumulation in readMappings so cumulative values that go negative are preserved instead of wrapping to a large unsigned integer (by @​alexander-akait in #206)

  • Improved performance in many places. (by @​alexander-akait in #209)

Commits
  • 7ad6559 chore(release): new release (#225)
  • a402b24 feat: add Source.prototype.clearCache() to release per-instance caches (#221)
  • 68d9c8e chore(deps-dev): bump the dependencies group with 3 updates (#222)
  • ca270da chore(deps-dev): bump tooling from v1.26.1 to v1.26.2 (#223)
  • 5da0885 chore(deps): bump codecov/codecov-action in the dependencies group (#224)
  • db3f9df chore(deps): bump the dependencies group with 2 updates (#220)
  • 06acc92 chore(deps-dev): bump fast-uri from 3.1.0 to 3.1.2 (#219)
  • b6d2fee chore(deps-dev): bump axios from 1.15.0 to 1.16.0 (#217)
  • 652ff13 chore: fix lint (#218)
  • 6c0206d chore(deps): bump CodSpeedHQ/action in the dependencies group (#216)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-sources since your current version.

@dependabot dependabot Bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 26, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 26, 2026 00:20
@dependabot dependabot Bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 26, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 26, 2026

Hello 👋! When you're ready to run Chromatic, please apply the run_chromatic label to this PR.

You will need to reapply the label each time you want to run Chromatic.

Click here to see the Chromatic project.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/webpack-cf54c3664a branch from 2bb90b8 to a968d2f Compare May 26, 2026 23:54
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 26, 2026 •
edited
Loading

Deploy build 1563 of dotcom:ab-testing to CODE

All deployment options

From guardian/actions-riff-raff.

@dependabot
Bump the webpack group across 1 directory with 8 updates
73f6e6e 
Bumps the webpack group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [css-loader](https://github.com/webpack/css-loader) | `7.1.2` | `7.1.4` |
| [swc-loader](https://github.com/swc-project/pkgs) | `0.2.6` | `0.2.7` |
| [webpack-assets-manifest](https://github.com/webdeveric/webpack-assets-manifest) | `6.3.0` | `6.5.2` |
| [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer) | `4.10.2` | `5.3.0` |
| [webpack-cli](https://github.com/webpack/webpack-cli) | `6.0.1` | `7.0.2` |
| [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `7.4.5` | `8.0.3` |
| [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `5.2.2` | `5.2.4` |
| [webpack-sources](https://github.com/webpack/webpack-sources) | `3.3.3` | `3.5.0` |



Updates `css-loader` from 7.1.2 to 7.1.4
- [Release notes](https://github.com/webpack/css-loader/releases)
- [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md)
- [Commits](webpack/css-loader@v7.1.2...v7.1.4)

Updates `swc-loader` from 0.2.6 to 0.2.7
- [Commits](https://github.com/swc-project/pkgs/commits)

Updates `webpack-assets-manifest` from 6.3.0 to 6.5.2
- [Release notes](https://github.com/webdeveric/webpack-assets-manifest/releases)
- [Changelog](https://github.com/webdeveric/webpack-assets-manifest/blob/master/release.config.mjs)
- [Commits](webdeveric/webpack-assets-manifest@v6.3.0...v6.5.2)

Updates `webpack-bundle-analyzer` from 4.10.2 to 5.3.0
- [Release notes](https://github.com/webpack/webpack-bundle-analyzer/releases)
- [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-bundle-analyzer@v4.10.2...v5.3.0)

Updates `webpack-cli` from 6.0.1 to 7.0.2
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@6.0.1...webpack-cli@7.0.2)

Updates `webpack-dev-middleware` from 7.4.5 to 8.0.3
- [Release notes](https://github.com/webpack/webpack-dev-middleware/releases)
- [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-dev-middleware@v7.4.5...v8.0.3)

Updates `webpack-dev-server` from 5.2.2 to 5.2.4
- [Release notes](https://github.com/webpack/webpack-dev-server/releases)
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-dev-server@v5.2.2...v5.2.4)

Updates `webpack-sources` from 3.3.3 to 3.5.0
- [Release notes](https://github.com/webpack/webpack-sources/releases)
- [Changelog](https://github.com/webpack/webpack-sources/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-sources@v3.3.3...v3.5.0)

---
updated-dependencies:
- dependency-name: css-loader
  dependency-version: 7.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webpack
- dependency-name: swc-loader
  dependency-version: 0.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webpack
- dependency-name: webpack-assets-manifest
  dependency-version: 6.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: webpack
- dependency-name: webpack-bundle-analyzer
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: webpack
- dependency-name: webpack-cli
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: webpack
- dependency-name: webpack-dev-middleware
  dependency-version: 8.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: webpack
- dependency-name: webpack-dev-server
  dependency-version: 5.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webpack
- dependency-name: webpack-sources
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: webpack
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/webpack-cf54c3664a branch from a968d2f to 73f6e6e Compare May 27, 2026 07:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants