Skip to content

Bump the webpack group across 1 directory with 7 updates#16325

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webpack-192544f6aa
Open

Bump the webpack group across 1 directory with 7 updates#16325
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webpack-192544f6aa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the webpack group with 7 updates in the / directory:

Package From To
css-loader 7.1.2 7.1.4
swc-loader 0.2.6 0.2.7
webpack 5.104.1 5.108.3
webpack-assets-manifest 6.3.0 6.5.2
webpack-bundle-analyzer 4.10.2 5.3.0
webpack-cli 6.0.1 7.1.0
webpack-sources 3.3.3 3.5.0

Updates css-loader from 7.1.2 to 7.1.4

Release notes

Sourced from css-loader's releases.

v7.1.4

7.1.4 (2026-02-16)

Bug Fixes

  • update peer dependency for @​rspack/core v2 (#1652) (aeddefe)

v7.1.3

7.1.3 (2026-01-27)

Bug Fixes

Changelog

Sourced from css-loader's changelog.

7.1.4 (2026-02-16)

Bug Fixes

  • update peer dependency for @​rspack/core v2 (#1652) (aeddefe)

7.1.3 (2026-01-27)

Bug Fixes

Commits

Updates swc-loader from 0.2.6 to 0.2.7

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for swc-loader since your current version.


Updates webpack from 5.104.1 to 5.108.3

Release notes

Sourced from webpack's releases.

v5.108.3

Patch Changes

v5.108.2

Patch Changes

v5.108.1

Patch Changes

  • Fix invalid property access for escaped namespace imports with multi-character mangled export names. (by @​xiaoxiaojx in #21280)

  • Add frames to ProfilingPlugin TracingStartedInBrowser event so the trace loads in Chrome DevTools. (by @​alexander-akait in #21269)

v5.108.0

Minor Changes

  • Treat top-level await and import.meta as ES module markers, matching Node.js syntax detection so no explicit module type is needed. (by @​alexander-akait in #21218)

  • Add a bun target that emits ESM and externalizes bun:* and node.js built-in modules. (by @​alexander-akait in #21248)

  • Support CommonJS reexports via Object.defineProperty value and getter descriptors. (by @​alexander-akait in #21129)

  • Support JSON Schema const when generating CLI flags from a schema. (by @​alexander-akait in #21087)

  • Support JSON Schema if/then/else when generating CLI flags from a schema. (by @​alexander-akait in #21087)

  • Skip import specifiers, require() and import() calls in dead conditional branches gated by inlined imported constants (isDEV ? A : B), evaluated via getCondition. (by @​hai-x in #21136)

  • CSS localIdentName [hash] now resolves to the local ident hash (matching css-loader); use [modulehash] for the module hash. (by @​alexander-akait in #21259)

  • Add CSS parser as option and resolve url() inside HTML style attributes. (by @​alexander-akait in #21157)

  • Add dedicated module classes for all built-in module types. (by @​alexander-akait in #21164)

  • Support .html/.css for the default ./src entry under the html/css experiments. (by @​alexander-akait in #21039)

  • Add defineConfig helper for typed configuration files. (by @​alexander-akait in #21169)

  • Add a deno target (with versions, e.g. deno, deno2, deno1.40) that emits ESM, resolves node.js built-ins via the required node: specifier, and keeps Deno's own import protocols (npm:, jsr:, node:, http(s)://) external. (by @​alexander-akait in #21247)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.108.3

Patch Changes

5.108.2

Patch Changes

5.108.1

Patch Changes

  • Fix invalid property access for escaped namespace imports with multi-character mangled export names. (by @​xiaoxiaojx in #21280)

  • Add frames to ProfilingPlugin TracingStartedInBrowser event so the trace loads in Chrome DevTools. (by @​alexander-akait in #21269)

5.108.0

Minor Changes

  • Treat top-level await and import.meta as ES module markers, matching Node.js syntax detection so no explicit module type is needed. (by @​alexander-akait in #21218)

  • Add a bun target that emits ESM and externalizes bun:* and node.js built-in modules. (by @​alexander-akait in #21248)

  • Support CommonJS reexports via Object.defineProperty value and getter descriptors. (by @​alexander-akait in #21129)

  • Support JSON Schema const when generating CLI flags from a schema. (by @​alexander-akait in #21087)

  • Support JSON Schema if/then/else when generating CLI flags from a schema. (by @​alexander-akait in #21087)

  • Skip import specifiers, require() and import() calls in dead conditional branches gated by inlined imported constants (isDEV ? A : B), evaluated via getCondition. (by @​hai-x in #21136)

  • CSS localIdentName [hash] now resolves to the local ident hash (matching css-loader); use [modulehash] for the module hash. (by @​alexander-akait in #21259)

  • Add CSS parser as option and resolve url() inside HTML style attributes. (by @​alexander-akait in #21157)

  • Add dedicated module classes for all built-in module types. (by @​alexander-akait in #21164)

  • Support .html/.css for the default ./src entry under the html/css experiments. (by @​alexander-akait in #21039)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack since your current version.


Updates webpack-assets-manifest from 6.3.0 to 6.5.2

Release notes

Sourced from webpack-assets-manifest's releases.

v6.5.2

6.5.2 (2026-05-22)

Dependencies

  • deps: updated dependencies (1a00eac)

v6.5.1

6.5.1 (2026-03-09)

v6.5.0

6.5.0 (2025-12-07)

v6.4.0

6.4.0 (2025-11-09)

Bug Fixes

  • compilation.codeGenerationResults can be undefined (f054f6b)
Commits
  • 5f84cdc Merge pull request #376 from webdeveric/chore/deps
  • df452e5 chore(deps-dev): bumped pnpm version
  • cf7c01d chore(release): updated settings for @semantic-release/release-notes-generator
  • 1a00eac chore(deps): updated dependencies
  • a9b67f1 chore(deps-dev): updated dev dependencies
  • e28f586 chore: updated Node version
  • a11d772 Merge pull request #375 from webdeveric/chore/deps
  • b08d58a chore: bumped pnpm version
  • e548502 chore(deps-dev): updated dev dependencies
  • 48429c7 Merge pull request #374 from webdeveric/ci/perms
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-assets-manifest since your current version.


Updates webpack-bundle-analyzer from 4.10.2 to 5.3.0

Release notes

Sourced from webpack-bundle-analyzer's releases.

v5.3.0

Minor Changes

Patch Changes

Changelog

Sourced from webpack-bundle-analyzer's changelog.

5.3.0

Minor Changes

Patch Changes

5.2.0

5.1.1

5.1.0

5.0.1

  • Bug Fix
    • Restore @babel/plugin-transform-class-properties to fix HTML report (#682 by @​valscion)

5.0.0

  • Breaking Change

  • Improvement

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-bundle-analyzer since your current version.


Updates webpack-cli from 6.0.1 to 7.1.0

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.1.0

Minor Changes

  • feat(cli): refresh the --help output using commander's configureHelp API — branded headers, section dividers, colorized terms and a clearer footer. Colors and chrome collapse to plain text when output is piped or --no-color is used, so scripts keep working. (by @​alexander-akait in #4779)

  • feat: support .json5, .yaml/.yml and .toml configuration files by parsing them directly, with the parser package (json5, js-yaml, toml) installed on demand by the user and declared as optional peerDependencies so the parsers resolve correctly under Yarn PnP (by @​alexander-akait in #4777)

webpack-cli@7.0.3

Patch Changes

  • Improved CLI startup performance and reduced memory usage. (by @​alexander-akait in #4765)

  • Reduced CLI startup CPU and memory usage by caching schema-derived argument metadata, registering only the options present in the arguments, and reading config directories once during default-config discovery. (by @​alexander-akait in #4760)

  • Replace the fastest-levenshtein dependency with a small in-tree implementation used for command/option "did you mean" suggestions. (by @​alexander-akait in #4762)

webpack-cli@7.0.2

Patch Changes

webpack-cli@7.0.1

Patch Changes

webpack-cli@7.0.0

Major Changes

  • The minimum supported version of Node.js is 20.9.0. (by @​alexander-akait in #4677)

  • Use dynamic import to load webpack.config.js, fallback to interpret only when configuration can't be load by dynamic import. Using dynamic imports allows you to take advantage of Node.js's built-in TypeScript support. (by @​alexander-akait in #4677)

  • Removed the --node-env argument in favor of the --config-node-env argument. (by @​alexander-akait in #4677)

  • The version command only output versions right now. (by @​alexander-akait in #4677)

  • Removed deprecated API, no action required unless you use import cli from "webpack-cli";/const cli = require("webpack-cli");. (by @​alexander-akait in #4677)

Patch Changes

Changelog

Sourced from webpack-cli's changelog.

7.1.0

Minor Changes

  • feat(cli): refresh the --help output using commander's configureHelp API — branded headers, section dividers, colorized terms and a clearer footer. Colors and chrome collapse to plain text when output is piped or --no-color is used, so scripts keep working. (by @​alexander-akait in #4779)

  • feat: support .json5, .yaml/.yml and .toml configuration files by parsing them directly, with the parser package (json5, js-yaml, toml) installed on demand by the user and declared as optional peerDependencies so the parsers resolve correctly under Yarn PnP (by @​alexander-akait in #4777)

7.0.3

Patch Changes

  • Improved CLI startup performance and reduced memory usage. (by @​alexander-akait in #4765)

  • Reduced CLI startup CPU and memory usage by caching schema-derived argument metadata, registering only the options present in the arguments, and reading config directories once during default-config discovery. (by @​alexander-akait in #4760)

  • Replace the fastest-levenshtein dependency with a small in-tree implementation used for command/option "did you mean" suggestions. (by @​alexander-akait in #4762)

7.0.2

Patch Changes

7.0.1

Patch Changes

7.0.0

Major Changes

  • The minimum supported version of Node.js is 20.9.0. (by @​alexander-akait in #4677)

  • Use dynamic import to load webpack.config.js, fallback to interpret only when configuration can't be load by dynamic import. Using dynamic imports allows you to take advantage of Node.js's built-in TypeScript support. (by @​alexander-akait in #4677)

  • Removed the --node-env argument in favor of the --config-node-env argument. (by @​alexander-akait in #4677)

  • The version command only output versions right now. (by @​alexander-akait in #4677)

  • Removed deprecated API, no action required unless you use import cli from "webpack-cli";/const cli = require("webpack-cli");. (by @​alexander-akait in #4677)

Patch Changes

... (truncated)

Commits
  • 3cd7423 chore(release): new release (#4778)
  • b42d1f4 fix(webpack-cli): declare json5/js-yaml/toml as optional peerDependencies (#4...
  • 3471103 refactor(cli): hierarchical indentation for styled CLI output (#4786)
  • 772330c build(deps): update dependencies (except commander) (#4785)
  • a7380e1 feat(cli): refresh CLI output via commander's help API + shared status icons ...
  • 721d8fd chore(deps): bump the dependencies group with 2 updates (#4780)
  • 65aa86c chore(deps-dev): bump the dependencies group with 3 updates (#4781)
  • 134e62d feat(webpack-cli): support json5/yaml/toml configs via direct parsing (no int...
  • 0b22f77 fix(cli): make config loading errors more verbose (#4776)
  • a5af401 chore(deps): bump launch-editor from 2.13.1 to 2.14.1 (#4774)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-cli since your current version.


Updates webpack-sources from 3.3.3 to 3.5.0

Release notes

Sourced from webpack-sources's releases.

v3.5.0

Minor Changes

  • Add clearCache(options?, visited?) method to Source that recursively releases cached data (CachedSource cached maps/buffers/strings, SourceMapSource parsed/serialized map caches, and dual-buffer caches in leaf sources). Lets consumers like webpack's SourceMapDevToolPlugin reclaim memory between chunks rather than accumulating per-task source map data across an entire build. Options: maps (default true) drops cached source maps; source (default true) drops cached source/buffer copies — pass false to keep source available for downstream plugins; parsedMap (default false) additionally drops the parsed object form on SourceMapSource instances when a buffer or string form survives (the combination { maps: true, source: false, parsedMap: true } matches the SourceMapDevToolPlugin call shape in webpack/webpack#20963). The optional visited WeakSet deduplicates the walk when the same child is reachable through multiple parents (e.g. modules shared across chunks). (by @​alexander-akait in #221)

v3.4.1

Patch Changes

  • Implements more effective buffers and buffer for ReplaceSource and improve performance in other places. (by @​alexander-akait in #211)

v3.4.0

Minor Changes

  • Add Source.prototype.buffers() that returns the source as Buffer[]. ConcatSource, CachedSource, and CompatSource implement it without allocating an intermediate concatenated buffer, allowing consumers that can write multiple buffers at once (e.g. via writev) to avoid the overhead of Buffer.concat in deeply nested sources. (by @​alexander-akait in #204)

Patch Changes

  • fix: use Int32Array for signed VLQ delta accumulation in readMappings so cumulative values that go negative are preserved instead of wrapping to a large unsigned integer (by @​alexander-akait in #206)

  • Improved performance in many places. (by @​alexander-akait in #209)

v3.3.4

Fixes

  • sync SourceMapSource constructor types with sourceAndMap method (#176)
Changelog

Sourced from webpack-sources's changelog.

3.5.0

Minor Changes

  • Add clearCache(options?, visited?) method to Source that recursively releases cached data (CachedSource cached maps/buffers/strings, SourceMapSource parsed/serialized map caches, and dual-buffer caches in leaf sources). Lets consumers like webpack's SourceMapDevToolPlugin reclaim memory between chunks rather than accumulating per-task source map data across an entire build. Options: maps (default true) drops cached source maps; source (default true) drops cached source/buffer copies — pass false to keep source available for downstream plugins; parsedMap (default false) additionally drops the parsed object form on SourceMapSource instances when a buffer or string form survives (the combination { maps: true, source: false, parsedMap: true } matches the SourceMapDevToolPlugin call shape in webpack/webpack#20963). The optional visited WeakSet deduplicates the walk when the same child is reachable through multiple parents (e.g. modules shared across chunks). (by @​alexander-akait in #221)

3.4.1

Patch Changes

  • Implements more effective buffers and buffer for ReplaceSource and improve performance in other places. (by @​alexander-akait in #211)

3.4.0

Minor Changes

  • Add Source.prototype.buffers() that returns the source as Buffer[]. ConcatSource, CachedSource, and CompatSource implement it without allocating an intermediate concatenated buffer, allowing consumers that can write multiple buffers at once (e.g. via writev) to avoid the overhead of Buffer.concat in deeply nested sources. (by @​alexander-akait in #204)

Patch Changes

  • fix: use Int32Array for signed VLQ delta accumulation in readMappings so cumulative values that go negative are preserved instead of wrapping to a large unsigned integer (by @​alexander-akait in #206)

  • Improved performance in many places. (by @​alexander-akait in #209)

Commits
  • 7ad6559 chore(release): new release (#225)
  • a402b24 feat: add Source.prototype.clearCache() to release per-instance caches (#221)
  • 68d9c8e chore(deps-dev): bump the dependencies group with 3 updates (#222)
  • ca270da chore(deps-dev): bump tooling from v1.26.1 to v1.26.2 (#223)
  • 5da0885 chore(deps): bump codecov/codecov-action in the dependencies group (#224)
  • db3f9df chore(deps): bump the dependencies group with 2 updates (#220)
  • 06acc92 chore(deps-dev): bump fast-uri from 3.1.0 to 3.1.2 (#219)
  • b6d2fee chore(deps-dev): bump axios from 1.15.0 to 1.16.0 (#217)
  • 652ff13 chore: fix lint (#218)
  • 6c0206d chore(deps): bump CodSpeedHQ/action in the dependencies group (#216)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-sources since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the webpack group across 1 directory with 7 updates
cc3767d 
Bumps the webpack group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [css-loader](https://github.com/webpack/css-loader) | `7.1.2` | `7.1.4` |
| [swc-loader](https://github.com/swc-project/pkgs) | `0.2.6` | `0.2.7` |
| [webpack](https://github.com/webpack/webpack) | `5.104.1` | `5.108.3` |
| [webpack-assets-manifest](https://github.com/webdeveric/webpack-assets-manifest) | `6.3.0` | `6.5.2` |
| [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer) | `4.10.2` | `5.3.0` |
| [webpack-cli](https://github.com/webpack/webpack-cli) | `6.0.1` | `7.1.0` |
| [webpack-sources](https://github.com/webpack/webpack-sources) | `3.3.3` | `3.5.0` |



Updates `css-loader` from 7.1.2 to 7.1.4
- [Release notes](https://github.com/webpack/css-loader/releases)
- [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md)
- [Commits](webpack/css-loader@v7.1.2...v7.1.4)

Updates `swc-loader` from 0.2.6 to 0.2.7
- [Commits](https://github.com/swc-project/pkgs/commits)

Updates `webpack` from 5.104.1 to 5.108.3
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.104.1...v5.108.3)

Updates `webpack-assets-manifest` from 6.3.0 to 6.5.2
- [Release notes](https://github.com/webdeveric/webpack-assets-manifest/releases)
- [Changelog](https://github.com/webdeveric/webpack-assets-manifest/blob/master/release.config.mjs)
- [Commits](webdeveric/webpack-assets-manifest@v6.3.0...v6.5.2)

Updates `webpack-bundle-analyzer` from 4.10.2 to 5.3.0
- [Release notes](https://github.com/webpack/webpack-bundle-analyzer/releases)
- [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-bundle-analyzer@v4.10.2...v5.3.0)

Updates `webpack-cli` from 6.0.1 to 7.1.0
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@6.0.1...webpack-cli@7.1.0)

Updates `webpack-sources` from 3.3.3 to 3.5.0
- [Release notes](https://github.com/webpack/webpack-sources/releases)
- [Changelog](https://github.com/webpack/webpack-sources/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-sources@v3.3.3...v3.5.0)

---
updated-dependencies:
- dependency-name: css-loader
  dependency-version: 7.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webpack
- dependency-name: swc-loader
  dependency-version: 0.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webpack
- dependency-name: webpack
  dependency-version: 5.108.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: webpack
- dependency-name: webpack-assets-manifest
  dependency-version: 6.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: webpack
- dependency-name: webpack-bundle-analyzer
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: webpack
- dependency-name: webpack-cli
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: webpack
- dependency-name: webpack-sources
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: webpack
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 3, 2026
@dependabot dependabot Bot requested a review from a team as a code owner July 3, 2026 18:38
@dependabot dependabot Bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 3, 2026
@github-actions

github-actions Bot commented Jul 3, 2026

Copy link
Copy Markdown

Hello 👋! When you're ready to run Chromatic, please apply the run_chromatic label to this PR.

You will need to reapply the label each time you want to run Chromatic.

Click here to see the Chromatic project.

@github-actions

github-actions Bot commented Jul 3, 2026

Copy link
Copy Markdown

Deploy build 28734 of dotcom:rendering-all to CODE

All deployment options

From guardian/actions-riff-raff.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants