chore(deps-dev): bump the build group across 1 directory with 3 updates

[dependabot]

Bumps the build group with 3 updates in the / directory: @rspack/cli, @rspack/core and web-ext.

Updates @rspack/cli from 2.1.2 to 2.1.4

Release notes

Sourced from @​rspack/cli's releases.

v2.1.4

Highlights

Fine-grained import.meta parser options

module.parser.javascript.importMeta now accepts an object so each known import.meta property can be configured independently, on top of the existing true / false / 'preserve-unknown' values. Properties set to false are preserved for runtime evaluation, omitted properties keep their default behavior, and unknown properties are preserved. Both webpack-compatible keys (dirname, filename, main, url, webpack, webpackContext) and Rspack-specific keys (rspackHash, rspackPublicPath, glob, ...) are supported.

export default {
  module: {
    parser: {
      javascript: {
        importMeta: {
          // keep `import.meta.url` for runtime evaluation
          url: false,
          // keep the compile-time replacement of `import.meta.webpack`
          webpack: true,
        },
      },
    },
  },
};

Static worker URL output

module.parser.javascript.worker now accepts an object form with alias and url, alongside the existing boolean and string[] forms. With url: 'new-url-relative' and output.module enabled, Rspack emits a static new URL() expression for new Worker(new URL(..., import.meta.url)) instead of runtime code, honoring output.publicPath and output.workerPublicPath.

export default {
  output: {
    module: true,
    chunkFilename: '[name].bundle.js',
  },
  module: {
    parser: {
      javascript: {
        worker: {
          url: 'new-url-relative',
        },
      },
    },
  },
};

new Worker(new URL('./worker.js', import.meta.url));
// would become 👇
</tr></table>

... (truncated)

Commits

• 98d8591 chore: ⬆️ 2.1.4
• 95c928f refactor(cli): use @​rstackjs/load-config (#14738)
• d637bac chore: release version 2.1.3 (#14712)
• 11c536c chore(deps): update dependency prettier to v3.9.4 (#14680)
• bbaae57 chore(deps): update patch npm dependencies (#14679)
• 2329e38 chore: release version 2.1.2 (#14628)
• See full diff in compare view

Updates @rspack/core from 2.1.2 to 2.1.4

Release notes

Sourced from @​rspack/core's releases.

v2.1.4

Highlights

Fine-grained import.meta parser options

module.parser.javascript.importMeta now accepts an object so each known import.meta property can be configured independently, on top of the existing true / false / 'preserve-unknown' values. Properties set to false are preserved for runtime evaluation, omitted properties keep their default behavior, and unknown properties are preserved. Both webpack-compatible keys (dirname, filename, main, url, webpack, webpackContext) and Rspack-specific keys (rspackHash, rspackPublicPath, glob, ...) are supported.

export default {
  module: {
    parser: {
      javascript: {
        importMeta: {
          // keep `import.meta.url` for runtime evaluation
          url: false,
          // keep the compile-time replacement of `import.meta.webpack`
          webpack: true,
        },
      },
    },
  },
};

Static worker URL output

module.parser.javascript.worker now accepts an object form with alias and url, alongside the existing boolean and string[] forms. With url: 'new-url-relative' and output.module enabled, Rspack emits a static new URL() expression for new Worker(new URL(..., import.meta.url)) instead of runtime code, honoring output.publicPath and output.workerPublicPath.

export default {
  output: {
    module: true,
    chunkFilename: '[name].bundle.js',
  },
  module: {
    parser: {
      javascript: {
        worker: {
          url: 'new-url-relative',
        },
      },
    },
  },
};

new Worker(new URL('./worker.js', import.meta.url));
// would become 👇
</tr></table>

... (truncated)

Commits

• 778c355 Merge branch 'main' into release/2.1.4
• 4078896 fix: invalidate the target compiler for lazy compilation (#14781)
• 98d8591 chore: ⬆️ 2.1.4
• 03465ca fix: respect RSPACK_BINDING in loader workers (#14775)
• 8b76011 fix: revert Module Federation runtime identifiers (#14761)
• 8ab773f feat: support fine-grained import.meta parser options (#14631)
• cd0781d chore(deps): update dependency webpack-sources to v3.5.1 (#14750)
• b55368a chore(deps): update patch npm dependencies (#14751)
• d03274d feat: support static worker new URL output (#14728)
• 1ebf86d refactor: use rspack runtime identifiers (#14739)
• Additional commits viewable in compare view

Updates web-ext from 10.4.0 to 10.5.0

Release notes

Sourced from web-ext's releases.

10.5.0 (2026-07-10)

main changes

• Added: add a --enterprise CLI flag to the lint command (#3770)
• Added: log the response data when a PATCH request fails (#3746)
• Added: new Firefox 153.0b2 schema for web-ext lint

dependencies

• Updated: dependency @babel/runtime to 8.0.0 (#3749)
• Updated: dependency addons-linter to 10.8.0 (#3772)
• Updated: dependency watchpack to 2.5.2 (#3742)
• Updated: dependencies uuid and istanbul-lib-processinfo (#3745)

dev dependencies

• Updated: dependency fs-extra to 11.3.6 (#3768)
• Updated: dependency globals to 17.7.0 (#3761)
• Updated: dependency prettier to 3.9.4 (#3769)
• Updated: dependency undici to 7.28.0 (#3743)

others

• Drop commitlint in this project (#3765)
• Remove outdated entry in .nsprc (#3773)
• Upgrade Babel to v8 (#3762)

Commits

• 181a139 10.5.0
• 303e33f Remove outdated entry in .nsprc (#3773)
• 73603b6 Bump addons-linter to 10.8.0 (#3772)
• 7986ba2 Add a --enterprise CLI flag to the lint command (#3770)
• a71f1c3 chore(deps-dev): bump fs-extra from 11.3.5 to 11.3.6 (#3768)
• 1532c58 chore(deps-dev): bump prettier from 3.9.1 to 3.9.4 (#3769)
• fa92a4f chore(deps-dev): bump prettier from 3.8.3 to 3.9.1 (#3766)
• f8f857c Upgrade Babel to v8 (#3762)
• b18c00b Drop commitlint in this project (#3765)
• a99ed60 Log the response data when a PATCH request fails (#3746)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions