Skip to content

Bump the webpack group with 7 updates#14647

Merged
JamieB-gu merged 1 commit intomainfrom
dependabot/npm_and_yarn/webpack-537e923faf
Oct 20, 2025
Merged

Bump the webpack group with 7 updates#14647
JamieB-gu merged 1 commit intomainfrom
dependabot/npm_and_yarn/webpack-537e923faf

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 8, 2025 •
edited
Loading

Bumps the webpack group with 7 updates:

Package From To
html-webpack-plugin 5.6.3 5.6.4
ts-loader 9.5.2 9.5.4
webpack 5.101.0 5.102.1
webpack-dev-server 5.2.1 5.2.2
webpack-assets-manifest 6.0.2 6.3.0
webpack-dev-middleware 7.4.2 7.4.5
webpack-sources 3.2.3 3.3.3

Updates html-webpack-plugin from 5.6.3 to 5.6.4

Changelog

Sourced from html-webpack-plugin's changelog.

5.6.4 (2025-08-14)

Bug Fixes

  • compilation.errors should contain Error objects (#1877) (b733b1a)
Commits

Updates ts-loader from 9.5.2 to 9.5.4

Release notes

Sourced from ts-loader's releases.

v9.5.4

Skipping 9.5.3 due to a publishing issue

v9.5.3

Changelog

Sourced from ts-loader's changelog.

9.5.4

Skipping 9.5.3 due to a publishing issue

Commits

Updates webpack from 5.101.0 to 5.102.1

Release notes

Sourced from webpack's releases.

v5.102.1

Fixes

  • Supported extends with env for browserslist
  • Supported JSONP fragment format for web workers.
  • Fixed dynamic import support in workers using browserslist.
  • Fixed default defer import mangling.
  • Fixed default import of commonjs externals for SystemJS format.
  • Fixed context modules to the same file with different import attributes.
  • Fixed typescript types.
  • Improved import.meta warning messages to be more clear when used directly.
  • [CSS] Fixed CC_UPPER_U parsing (E -> U) in tokenizer.

v5.102.0

Features

  • Added static analyze for dynamic imports
  • Added support for import file from "./file.ext" with { type: "bytes" } to get the content as Uint8Array (look at example)
  • Added support for import file from "./file.ext" with { type: "text" } to get the content as text (look at example)
  • Added the snapshot.contextModule to configure snapshots options for context modules
  • Added the extractSourceMap option to implement the capabilities of loading source maps by comment, you don't need source-map-loader (look at example)
  • The topLevelAwait experiment is now stable (you can remove experiments.topLevelAwait from your webpack.config.js)
  • The layers experiment is now stable (you can remove experiments.layers from your webpack.config.js)
  • Added function matcher support in rule options

Fixes

  • Fixed conflicts caused by multiple concatenate modules
  • Ignore import failure during HMR update with ES modules output
  • Keep render module order consistent
  • Prevent inlining modules that have this exports
  • Removed unused timeout attribute of script tag
  • Supported UMD chunk format to work in web workers
  • Improved CommonJs bundle to ES module library
  • Use es-lexer for mjs files for build dependencies
  • Fixed support __non_webpack_require__ for ES modules
  • Properly handle external modules for CSS
  • AssetsByChunkName included assets from chunk.auxiliaryFiles
  • Use createRequire only when output is ES module and target is node
  • Typescript types

Performance Improvements

  • Avoid extra calls for snapshot
  • A avoid extra jobs for build dependencies
  • Move import attributes to own dependencies

v5.101.3

... (truncated)

Commits

Updates webpack-dev-server from 5.2.1 to 5.2.2

Release notes

Sourced from webpack-dev-server's releases.

v5.2.2

5.2.2 (2025-06-03)

Bug Fixes

  • "Overlay enabled" false positive (18e72ee)
  • do not crush when error is null for runtime errors (#5447) (309991f)
  • remove unnecessary header X_TEST (#5451) (64a6124)
  • respect the allowedHosts option for cross-origin header check (#5510) (03d1214)
Changelog

Sourced from webpack-dev-server's changelog.

5.2.2 (2025-06-03)

Bug Fixes

  • "Overlay enabled" false positive (18e72ee)
  • do not crush when error is null for runtime errors (#5447) (309991f)
  • remove unnecessary header X_TEST (#5451) (64a6124)
  • respect the allowedHosts option for cross-origin header check (#5510) (03d1214)
Commits
  • 195a7e6 chore(release): 5.2.2
  • 620bef1 chore(deps): update (#5511)
  • 03d1214 fix: respect the allowedHosts option for cross-origin header check (#5510)
  • 5ba862e chore(deps-dev): bump the dependencies group across 1 directory with 7 update...
  • f7fec94 chore: fix typo (#5508)
  • 6ee8cd0 ci: add Node.js v24 (#5492)
  • d30f963 chore: update http-proxy-middleware to ^2.0.9 (#5503)
  • 66cf033 chore(deps-dev): bump the dependencies group with 2 updates (#5504)
  • 4367a5c refactor: use 'String#startsWith' & replace if-then-else (#5501)
  • 8e6604f chore(deps): bump the dependencies group across 1 directory with 4 updates (#...
  • Additional commits viewable in compare view

Updates webpack-assets-manifest from 6.0.2 to 6.3.0

Release notes

Sourced from webpack-assets-manifest's releases.

v6.3.0

6.3.0 (2025-09-29)

v6.2.2

6.2.2 (2025-07-28)

v6.2.1

6.2.1 (2025-06-08)

Bug Fixes

  • ignore ENOENT error during merge (8b6247c)

v6.2.0

6.2.0 (2025-06-08)

v6.1.0

6.1.0 (2025-05-06)

Commits
  • 038562c Merge pull request #315 from webdeveric/chore/deps
  • 714a581 chore(deps-dev): updated dev dependencies
  • fabe029 chore(deps): updated dependencies
  • 47699a9 chore: configured minimumReleaseAge
  • d07f530 chore: bumped pnpm version
  • 087b465 Merge pull request #313 from webdeveric/chore/deps
  • ba9cf49 chore(deps-dev): updated dev dependencies
  • c2abe95 chore: bumped pnpm version
  • 00bb8a1 Merge pull request #312 from webdeveric/chore/ci
  • e7d952e ci: updated cron schedule
  • Additional commits viewable in compare view

Updates webpack-dev-middleware from 7.4.2 to 7.4.5

Release notes

Sourced from webpack-dev-middleware's releases.

v7.4.5

7.4.5 (2025-09-24)

Bug Fixes

v7.4.4

7.4.4 (2025-09-23)

Bug Fixes

v7.4.3

7.4.3 (2025-09-05)

Bug Fixes

  • do not call the next middleware for 304 responses (#2155) (c26a326)
  • do not call the next middleware when request is finished or errored (#2156) (116c680)
Changelog

Sourced from webpack-dev-middleware's changelog.

7.4.5 (2025-09-24)

Bug Fixes

7.4.4 (2025-09-23)

Bug Fixes

7.4.3 (2025-09-05)

Bug Fixes

  • do not call the next middleware for 304 responses (#2155) (c26a326)
  • do not call the next middleware when request is finished or errored (#2156) (116c680)
Commits
  • ec97e06 chore(release): 7.4.5
  • c9a0e68 fix: unpin memfs (#2176)
  • 0c87e95 chore(deps-dev): bump the dependencies group across 1 directory with 6 update...
  • 8f40f5f chore(release): 7.4.4
  • 044d691 fix: pin memfs version (#2174)
  • 253c7e1 chore(deps-dev): bump the dependencies group with 3 updates (#2170)
  • 2535262 chore(deps): bump the dependencies group across 1 directory with 5 updates (#...
  • 6b7531e chore: remove CODEOWNERS, too spammy (#2167)
  • be10aa6 chore(deps): remove strip-ansi (#2166)
  • 0c4431b chore(deps): update
  • Additional commits viewable in compare view

Updates webpack-sources from 3.2.3 to 3.3.3

Release notes

Sourced from webpack-sources's releases.

v3.3.3

Fixes

  • generate last column mapping even when source is missing for ConcatSource

v3.3.2

Fixes

  • [Types] Using HashLike name instead Hash

v3.3.1

Fixes

  • Always use a buffer to calculate the hash
  • [Types] Added debugId and ignoreList fields to RawSourceMap type

v3.3.0

Features

  • Added types
  • Added ability to reduce memory consumed

Performance

  • Avoid extra calculation for hash updates
Commits
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for webpack-sources since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 8, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 8, 2025 18:13
@dependabot dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 8, 2025
@github-actions
Copy link

github-actions bot commented Oct 8, 2025

Hello 👋! When you're ready to run Chromatic, please apply the run_chromatic label to this PR.

You will need to reapply the label each time you want to run Chromatic.

Click here to see the Chromatic project.

@github-actions
Copy link

github-actions bot commented Oct 8, 2025 •
edited
Loading

Deploy build 46002 of Mobile::mobile-apps-rendering to CODE

All deployment options

From guardian/actions-riff-raff.

@github-actions
Copy link

github-actions bot commented Oct 8, 2025 •
edited
Loading

Deploy build 21755 of dotcom:rendering-all to CODE

All deployment options

From guardian/actions-riff-raff.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/webpack-537e923faf branch 13 times, most recently from e8acb39 to 6d71df7 Compare October 15, 2025 16:16
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/webpack-537e923faf branch 5 times, most recently from 9a95e12 to 6b4f75c Compare October 17, 2025 18:06
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/webpack-537e923faf branch from 6b4f75c to f1fd6ac Compare October 20, 2025 12:24
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/webpack-537e923faf branch from f1fd6ac to 695845b Compare October 20, 2025 12:35
@dependabot
Bump the webpack group with 7 updates
be3f798 
Bumps the webpack group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `5.6.3` | `5.6.4` |
| [ts-loader](https://github.com/TypeStrong/ts-loader) | `9.5.2` | `9.5.4` |
| [webpack](https://github.com/webpack/webpack) | `5.101.0` | `5.102.1` |
| [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `5.2.1` | `5.2.2` |
| [webpack-assets-manifest](https://github.com/webdeveric/webpack-assets-manifest) | `6.0.2` | `6.3.0` |
| [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `7.4.2` | `7.4.5` |
| [webpack-sources](https://github.com/webpack/webpack-sources) | `3.2.3` | `3.3.3` |


Updates `html-webpack-plugin` from 5.6.3 to 5.6.4
- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)
- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](jantimon/html-webpack-plugin@v5.6.3...v5.6.4)

Updates `ts-loader` from 9.5.2 to 9.5.4
- [Release notes](https://github.com/TypeStrong/ts-loader/releases)
- [Changelog](https://github.com/TypeStrong/ts-loader/blob/main/CHANGELOG.md)
- [Commits](TypeStrong/ts-loader@v9.5.2...v9.5.4)

Updates `webpack` from 5.101.0 to 5.102.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.101.0...v5.102.1)

Updates `webpack-dev-server` from 5.2.1 to 5.2.2
- [Release notes](https://github.com/webpack/webpack-dev-server/releases)
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-dev-server@v5.2.1...v5.2.2)

Updates `webpack-assets-manifest` from 6.0.2 to 6.3.0
- [Release notes](https://github.com/webdeveric/webpack-assets-manifest/releases)
- [Changelog](https://github.com/webdeveric/webpack-assets-manifest/blob/master/release.config.mjs)
- [Commits](webdeveric/webpack-assets-manifest@v6.0.2...v6.3.0)

Updates `webpack-dev-middleware` from 7.4.2 to 7.4.5
- [Release notes](https://github.com/webpack/webpack-dev-middleware/releases)
- [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-dev-middleware@v7.4.2...v7.4.5)

Updates `webpack-sources` from 3.2.3 to 3.3.3
- [Release notes](https://github.com/webpack/webpack-sources/releases)
- [Commits](webpack/webpack-sources@v3.2.3...v3.3.3)

---
updated-dependencies:
- dependency-name: html-webpack-plugin
  dependency-version: 5.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webpack
- dependency-name: ts-loader
  dependency-version: 9.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webpack
- dependency-name: webpack
  dependency-version: 5.102.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: webpack
- dependency-name: webpack-dev-server
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webpack
- dependency-name: webpack-assets-manifest
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: webpack
- dependency-name: webpack-dev-middleware
  dependency-version: 7.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webpack
- dependency-name: webpack-sources
  dependency-version: 3.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: webpack
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/webpack-537e923faf branch from 695845b to be3f798 Compare October 20, 2025 12:45
@JamieB-gu JamieB-gu added the run_chromatic Runs chromatic when label is applied label Oct 20, 2025
@github-actions github-actions bot removed the run_chromatic Runs chromatic when label is applied label Oct 20, 2025
@JamieB-gu JamieB-gu merged commit c282b15 into main Oct 20, 2025
30 checks passed
@JamieB-gu JamieB-gu deleted the dependabot/npm_and_yarn/webpack-537e923faf branch October 20, 2025 12:57
@gu-prout
Copy link

gu-prout bot commented Oct 20, 2025

Seen on PROD (created by @dependabot[bot] and merged by @JamieB-gu 7 minutes and 52 seconds ago) Please check your changes!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@JamieB-gu JamieB-gu JamieB-gu approved these changes

Assignees

No one assigned

Labels

apps-rendering Dependencies Pull requests that update a dependency file dotcom-rendering javascript Pull requests that update Javascript code Seen-on-PROD

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@JamieB-gu