Skip to content

Bump the webpack group across 1 directory with 8 updates#15935

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webpack-aa4cb29798
Open

Bump the webpack group across 1 directory with 8 updates#15935
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webpack-aa4cb29798

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 20, 2026 •
edited
Loading

Bumps the webpack group with 8 updates in the / directory:

Package From To
css-loader 7.1.2 7.1.4
swc-loader 0.2.6 0.2.7
webpack-assets-manifest 6.3.0 6.5.1
webpack-bundle-analyzer 4.10.2 5.3.0
webpack-cli 6.0.1 7.0.2
webpack-dev-middleware 7.4.5 8.0.3
webpack-dev-server 5.2.2 5.2.4
webpack-sources 3.3.3 3.4.1

Updates css-loader from 7.1.2 to 7.1.4

Release notes

Sourced from css-loader's releases.

v7.1.4

7.1.4 (2026-02-16)

Bug Fixes

  • update peer dependency for @​rspack/core v2 (#1652) (aeddefe)

v7.1.3

7.1.3 (2026-01-27)

Bug Fixes

Changelog

Sourced from css-loader's changelog.

7.1.4 (2026-02-16)

Bug Fixes

  • update peer dependency for @​rspack/core v2 (#1652) (aeddefe)

7.1.3 (2026-01-27)

Bug Fixes

Commits

Updates swc-loader from 0.2.6 to 0.2.7

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for swc-loader since your current version.


Updates webpack-assets-manifest from 6.3.0 to 6.5.1

Release notes

Sourced from webpack-assets-manifest's releases.

v6.5.1

6.5.1 (2026-03-09)

v6.5.0

6.5.0 (2025-12-07)

v6.4.0

6.4.0 (2025-11-09)

Bug Fixes

  • compilation.codeGenerationResults can be undefined (f054f6b)
Commits
  • 303e853 Merge pull request #353 from webdeveric/refactor/ci
  • a29c675 refactor(ci): separated test matrix from other checks
  • 7978df6 Merge pull request #352 from webdeveric/chore/deps
  • 99ce782 chore(deps-dev): updated dev dependencies
  • 65d7110 chore: bumped pnpm version
  • 52edb1b Merge pull request #351 from webdeveric/ci/release
  • 77cfea9 chore(deps-dev): updated dev dependencies
  • 7dff943 ci(release): install latest npm for trusted publishing
  • 52852a5 ci(release): configured @semantic-release/npm options
  • 1a8d374 Merge pull request #350 from webdeveric/ci/trusted-publishing
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-assets-manifest since your current version.


Updates webpack-bundle-analyzer from 4.10.2 to 5.3.0

Release notes

Sourced from webpack-bundle-analyzer's releases.

v5.3.0

Minor Changes

Patch Changes

Changelog

Sourced from webpack-bundle-analyzer's changelog.

5.3.0

Minor Changes

Patch Changes

5.2.0

5.1.1

5.1.0

5.0.1

  • Bug Fix
    • Restore @babel/plugin-transform-class-properties to fix HTML report (#682 by @​valscion)

5.0.0

  • Breaking Change

  • Improvement

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-bundle-analyzer since your current version.


Updates webpack-cli from 6.0.1 to 7.0.2

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.0.2

Patch Changes

webpack-cli@7.0.1

Patch Changes

webpack-cli@7.0.0

Major Changes

  • The minimum supported version of Node.js is 20.9.0. (by @​alexander-akait in #4677)

  • Use dynamic import to load webpack.config.js, fallback to interpret only when configuration can't be load by dynamic import. Using dynamic imports allows you to take advantage of Node.js's built-in TypeScript support. (by @​alexander-akait in #4677)

  • Removed the --node-env argument in favor of the --config-node-env argument. (by @​alexander-akait in #4677)

  • The version command only output versions right now. (by @​alexander-akait in #4677)

  • Removed deprecated API, no action required unless you use import cli from "webpack-cli";/const cli = require("webpack-cli");. (by @​alexander-akait in #4677)

Patch Changes

Changelog

Sourced from webpack-cli's changelog.

7.0.2

Patch Changes

7.0.1

Patch Changes

7.0.0

Major Changes

  • The minimum supported version of Node.js is 20.9.0. (by @​alexander-akait in #4677)

  • Use dynamic import to load webpack.config.js, fallback to interpret only when configuration can't be load by dynamic import. Using dynamic imports allows you to take advantage of Node.js's built-in TypeScript support. (by @​alexander-akait in #4677)

  • Removed the --node-env argument in favor of the --config-node-env argument. (by @​alexander-akait in #4677)

  • The version command only output versions right now. (by @​alexander-akait in #4677)

  • Removed deprecated API, no action required unless you use import cli from "webpack-cli";/const cli = require("webpack-cli");. (by @​alexander-akait in #4677)

Patch Changes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-cli since your current version.


Updates webpack-dev-middleware from 7.4.5 to 8.0.3

Release notes

Sourced from webpack-dev-middleware's releases.

v8.0.3

Patch Changes

  • Respect req.url when modified by middleware such as connect-history-api-fallback. (by @​bjohansebas in #2304)

v8.0.2

Patch Changes

v8.0.1

Patch Changes

v8.0.0

Major Changes

  • The getFilenameFromUrl function is now asynchronous, returning a Promise that resolves to the object with the found filename (or undefined if the file was not found) or throws an error if the URL cannot be processed. Additionally, the object contains the extra property with stats (file system stats) and outputFileSystem (output file system where file was found) properties. (by @​alexander-akait in #2284)

  • Minimum supported Node.js version is 20.9.0. (by @​alexander-akait in #2284)

  • Minimum supported webpack version is 5.101.0. (by @​alexander-akait in #2284)

Minor Changes

  • Added support for plugin usage, useful when the middleware will be used as a webpack plugin (no stats output, no extra actions). (by @​alexander-akait in #2284)

  • Added the forwardError option to enable error forwarding to next middleware. (by @​alexander-akait in #2284)

  • Enable cacheImmutable by default for immutable assets. (by @​alexander-akait in #2284)

Patch Changes

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

7.4.5 (2025-09-24)

Bug Fixes

7.4.4 (2025-09-23)

Bug Fixes

... (truncated)

Changelog

Sourced from webpack-dev-middleware's changelog.

8.0.3

Patch Changes

  • Respect req.url when modified by middleware such as connect-history-api-fallback. (by @​bjohansebas in #2304)

8.0.2

Patch Changes

8.0.1

Patch Changes

8.0.0

Major Changes

  • The getFilenameFromUrl function is now asynchronous, returning a Promise that resolves to the object with the found filename (or undefined if the file was not found) or throws an error if the URL cannot be processed. Additionally, the object contains the extra property with stats (file system stats) and outputFileSystem (output file system where file was found) properties. (by @​alexander-akait in #2284)

  • Minimum supported Node.js version is 20.9.0. (by @​alexander-akait in #2284)

  • Minimum supported webpack version is 5.101.0. (by @​alexander-akait in #2284)

Minor Changes

  • Added support for plugin usage, useful when the middleware will be used as a webpack plugin (no stats output, no extra actions). (by @​alexander-akait in #2284)

  • Added the forwardError option to enable error forwarding to next middleware. (by @​alexander-akait in #2284)

  • Enable cacheImmutable by default for immutable assets. (by @​alexander-akait in #2284)

Patch Changes

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

Commits
  • 6fcaa48 chore(release): new release (#2305)
  • 21cd376 chore(deps): update typescript (#2306)
  • 8493c45 fix: respect req.url when modified
  • 7c658fe chore(deps-dev): bump the dependencies group with 2 updates (#2302)
  • dedf0a4 chore(deps): bump the dependencies group across 1 directory with 2 updates
  • 381828e chore(deps): bump picomatch (#2300)
  • 6eee395 chore(deps): bump the dependencies group with 4 updates (#2297)
  • f79af6a chore(release): new release
  • ebe8b57 chore: adding changelog
  • dfebd57 fix: rspack compatibility more.
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-dev-middleware since your current version.


Updates webpack-dev-server from 5.2.2 to 5.2.4

Release notes

Sourced from webpack-dev-server's releases.

v5.2.4

5.2.4 (2026-05-11)

Bug Fixes

  • set Cross-Origin-Resource-Policy header to prevent source code theft over HTTP

v5.2.3

5.2.3 (2026-01-12)

Bug Fixes

  • add cause for errorObject (#5518) (37b033d)
  • compatibility with event target and universal target and lazy compilation (574026c)
  • overlay: add ESC key to dismiss overlay (#5598) (f91baa8)
  • progress indicator styles (#5557) (41a53a1)
  • upgrade selfsigned to v5
Changelog

Sourced from webpack-dev-server's changelog.

5.2.4 (2026-05-11)

Bug Fixes

  • set Cross-Origin-Resource-Policy header to prevent source code theft over HTTP

5.2.3 (2026-01-12)

Bug Fixes

  • add cause for errorObject (#5518) (37b033d)
  • compatibility with event target and universal target and lazy compilation (574026c)
  • overlay: add ESC key to dismiss overlay (#5598) (f91baa8)
  • progress indicator styles (#5557) (41a53a1)
  • upgrade selfsigned to v5
Commits

Updates webpack-sources from 3.3.3 to 3.4.1

Release notes

Sourced from webpack-sources's releases.

v3.4.1

Patch Changes

  • Implements more effective buffers and buffer for ReplaceSource and improve performance in other places. (by @​alexander-akait in #211)

v3.4.0

Minor Changes

  • Add Source.prototype.buffers() that returns the source as Buffer[]. ConcatSource, CachedSource, and CompatSource implement it without allocating an intermediate concatenated buffer, allowing consumers that can write multiple buffers at once (e.g. via writev) to avoid the overhead of Buffer.concat in deeply nested sources. (by @​alexander-akait in #204)

Patch Changes

  • fix: use Int32Array for signed VLQ delta accumulation in readMappings so cumulative values that go negative are preserved instead of wrapping to a large unsigned integer (by @​alexander-akait in #206)

  • Improved performance in many places. (by @​alexander-akait in #209)

v3.3.4

Fixes

  • sync SourceMapSource constructor types with sourceAndMap method (#176)
Changelog

Sourced from webpack-sources's changelog.

3.4.1

Patch Changes

  • Implements more effective buffers and buffer for ReplaceSource and improve performance in other places. (by @​alexander-akait in #211)

3.4.0

Minor Changes

  • Add Source.prototype.buffers() that returns the source as Buffer[]. ConcatSource, CachedSource, and CompatSource implement it without allocating an intermediate concatenated buffer, allowing consumers that can write multiple buffers at once (e.g. via writev) to avoid the overhead of Buffer.concat in deeply nested sources. (by @​alexander-akait in #204)

Patch Changes

  • fix: use Int32Array for signed VLQ delta accumulation in readMappings so cumulative values that go negative are preserved instead of wrapping to a large unsigned integer (by @​alexander-akait in #206)

  • Improved performance in many places. (by @​alexander-akait in #209)

Commits
  • 5a0b655 chore(release): new release (#214)
  • 8ed6d8a perf: improve
  • 88046d5 chore(deps-dev): bump the dependencies group across 1 directory with 2 update...
  • d506580 perf: improve
  • 72ce205 chore(deps): bump CodSpeedHQ/action in the dependencies group (#213)
  • 7c520c2 chore(release): new release (#205)
  • e130653 fix: improve performance in many places (#209)
  • ccfbc65 fix: improve performance in many places (#203)
  • fdb229e test: stabilize prefix-source getPrefix() and original() cases (#207)
  • c53b3e0 ci: fix (#208)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-sources since your current version.

@dependabot dependabot Bot requested a review from a team as a code owner May 20, 2026 14:58
@dependabot dependabot Bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 20, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 20, 2026

Hello 👋! When you're ready to run Chromatic, please apply the run_chromatic label to this PR.

You will need to reapply the label each time you want to run Chromatic.

Click here to see the Chromatic project.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 20, 2026 •
edited
Loading

Deploy build 27281 of dotcom:rendering-all to CODE

All deployment options

From guardian/actions-riff-raff.

@dependabot dependabot Bot changed the title Bump the webpack group with 8 updates Bump the webpack group across 1 directory with 8 updates May 20, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/webpack-aa4cb29798 branch from 4926203 to 8c4e374 Compare May 20, 2026 22:30
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 20, 2026 •
edited
Loading

Deploy build 1537 of dotcom:ab-testing to CODE

All deployment options

From guardian/actions-riff-raff.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/webpack-aa4cb29798 branch 2 times, most recently from 3da1ef1 to b05c4cc Compare May 21, 2026 12:54
@dependabot
Bump the webpack group across 1 directory with 8 updates
6bb151d 
Bumps the webpack group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [css-loader](https://github.com/webpack/css-loader) | `7.1.2` | `7.1.4` |
| [swc-loader](https://github.com/swc-project/pkgs) | `0.2.6` | `0.2.7` |
| [webpack-assets-manifest](https://github.com/webdeveric/webpack-assets-manifest) | `6.3.0` | `6.5.1` |
| [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer) | `4.10.2` | `5.3.0` |
| [webpack-cli](https://github.com/webpack/webpack-cli) | `6.0.1` | `7.0.2` |
| [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `7.4.5` | `8.0.3` |
| [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `5.2.2` | `5.2.4` |
| [webpack-sources](https://github.com/webpack/webpack-sources) | `3.3.3` | `3.4.1` |



Updates `css-loader` from 7.1.2 to 7.1.4
- [Release notes](https://github.com/webpack/css-loader/releases)
- [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md)
- [Commits](webpack/css-loader@v7.1.2...v7.1.4)

Updates `swc-loader` from 0.2.6 to 0.2.7
- [Commits](https://github.com/swc-project/pkgs/commits)

Updates `webpack-assets-manifest` from 6.3.0 to 6.5.1
- [Release notes](https://github.com/webdeveric/webpack-assets-manifest/releases)
- [Changelog](https://github.com/webdeveric/webpack-assets-manifest/blob/master/release.config.mjs)
- [Commits](webdeveric/webpack-assets-manifest@v6.3.0...v6.5.1)

Updates `webpack-bundle-analyzer` from 4.10.2 to 5.3.0
- [Release notes](https://github.com/webpack/webpack-bundle-analyzer/releases)
- [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-bundle-analyzer@v4.10.2...v5.3.0)

Updates `webpack-cli` from 6.0.1 to 7.0.2
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@6.0.1...webpack-cli@7.0.2)

Updates `webpack-dev-middleware` from 7.4.5 to 8.0.3
- [Release notes](https://github.com/webpack/webpack-dev-middleware/releases)
- [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-dev-middleware@v7.4.5...v8.0.3)

Updates `webpack-dev-server` from 5.2.2 to 5.2.4
- [Release notes](https://github.com/webpack/webpack-dev-server/releases)
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-dev-server@v5.2.2...v5.2.4)

Updates `webpack-sources` from 3.3.3 to 3.4.1
- [Release notes](https://github.com/webpack/webpack-sources/releases)
- [Changelog](https://github.com/webpack/webpack-sources/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-sources@v3.3.3...v3.4.1)

---
updated-dependencies:
- dependency-name: css-loader
  dependency-version: 7.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webpack
- dependency-name: swc-loader
  dependency-version: 0.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webpack
- dependency-name: webpack-assets-manifest
  dependency-version: 6.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: webpack
- dependency-name: webpack-bundle-analyzer
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: webpack
- dependency-name: webpack-cli
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: webpack
- dependency-name: webpack-dev-middleware
  dependency-version: 8.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: webpack
- dependency-name: webpack-dev-server
  dependency-version: 5.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webpack
- dependency-name: webpack-sources
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: webpack
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/webpack-aa4cb29798 branch from b05c4cc to 6bb151d Compare May 21, 2026 19:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants