Skip to content

chore(deps-dev): bump the dependencies group with 6 updates - #4846

Merged
webpack[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-72d01e30f0
Sep 4, 2026
Merged

chore(deps-dev): bump the dependencies group with 6 updates#4846
webpack[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-72d01e30f0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 6 updates:

Package From To
cspell 10.1.1 10.2.0
css-loader 7.1.4 7.1.5
jest 30.4.2 30.5.1
sass-loader 17.0.0 17.0.1
tsx 4.23.12 4.23.13
webpack 5.110.1 5.110.2

Updates cspell from 10.1.1 to 10.2.0

Release notes

Sourced from cspell's releases.

v10.2.0

Features

feat: Support languages without word breaks (Part 2) (#9133)

This pull request introduces support for locale-sensitive word segmentation, enabling better spell checking for languages such as Japanese, Chinese, Thai, Lao, Khmer, and Myanmar. The main changes add a new configuration option, useIntlWordSegmentation, to the schema and internal types, implement the corresponding text transformation logic, and update the document validation pipeline to use this feature. Additional test fixtures and tests are included to ensure correct behavior.

Support for locale-sensitive word segmentation:

  • Added a new boolean configuration option, useIntlWordSegmentation, to the JSON schema (cspell.schema.json) and internal TypeScript types (BaseSetting), allowing users to enable locale-aware text segmentation for supported languages. [1] [2] [3] [4]
  • Implemented the IntlSegmentTextTransformer and a factory function, createIntlSegmentTextTransformer, to perform locale-sensitive segmentation using the specified language.
  • Introduced a new utility, chainTransformers, and an IdentityTextTransformer to allow chaining multiple text transformers in the validation pipeline.
  • Updated the document validation logic (docValidator.ts and related files) to use the new transformer when useIntlWordSegmentation is enabled, ensuring correct segmentation for complex scripts. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14]

Testing and fixtures:

  • Added new test fixtures and a test document containing Thai text, as well as a corresponding dictionary file and configuration to verify correct segmentation and spell checking. [1] [2] [3]
  • Extended the document validator tests to cover the new segmentation feature.

These changes collectively improve support for non-space-delimited languages and provide a more robust spell-checking experience for a wider range of languages.

feat: Support languages without word breaks (Part 1) (#9131)

This pull request introduces a new IntlSegmentTextTransformer for locale-aware text segmentation, refactors text transformation infrastructure for better composability, and improves locale normalization to BCP 47 standards. It also adds comprehensive tests for these new features and refactors existing transformers for consistency.

Locale normalization improvements

  • Improved the normalizeLocaleIntl function in LanguageSettings.ts to support BCP 47 language tag normalization, including script and region subtags, and added tests for these cases. [1] [2]

New locale-aware text transformer

  • Added the IntlSegmentTextTransformer class for locale-aware word segmentation using Intl.Segmenter, along with tests covering multiple locales (including Thai). [1] [2]

Transformer infrastructure and API improvements

  • Introduced a generic TextTransformer interface and the Edit type in Transformer.ts to standardize text transformation operations.
  • Added utility functions applyEditsToMappedText and applyEditsToText in TextMapEdit.ts for applying edits and maintaining source maps, used by all transformers.

Refactoring and consistency

  • Refactored SubstitutionTransformer to implement the new TextTransformer interface and use the new edit application utilities, simplifying and unifying its implementation. [1] [2] [3]

These changes collectively improve the flexibility, correctness, and internationalization support of the text transformation pipeline.

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.2.0 (2026-08-31)

Features

feat: Support languages without word breaks (Part 2) (#9133)

This pull request introduces support for locale-sensitive word segmentation, enabling better spell checking for languages such as Japanese, Chinese, Thai, Lao, Khmer, and Myanmar. The main changes add a new configuration option, useIntlWordSegmentation, to the schema and internal types, implement the corresponding text transformation logic, and update the document validation pipeline to use this feature. Additional test fixtures and tests are included to ensure correct behavior.

Support for locale-sensitive word segmentation:

  • Added a new boolean configuration option, useIntlWordSegmentation, to the JSON schema (cspell.schema.json) and internal TypeScript types (BaseSetting), allowing users to enable locale-aware text segmentation for supported languages. [1] [2] [3] [4]
  • Implemented the IntlSegmentTextTransformer and a factory function, createIntlSegmentTextTransformer, to perform locale-sensitive segmentation using the specified language.
  • Introduced a new utility, chainTransformers, and an IdentityTextTransformer to allow chaining multiple text transformers in the validation pipeline.
  • Updated the document validation logic (docValidator.ts and related files) to use the new transformer when useIntlWordSegmentation is enabled, ensuring correct segmentation for complex scripts. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14]

Testing and fixtures:

  • Added new test fixtures and a test document containing Thai text, as well as a corresponding dictionary file and configuration to verify correct segmentation and spell checking. [1] [2] [3]
  • Extended the document validator tests to cover the new segmentation feature.

These changes collectively improve support for non-space-delimited languages and provide a more robust spell-checking experience for a wider range of languages.

feat: Support languages without word breaks (Part 1) (#9131)

This pull request introduces a new IntlSegmentTextTransformer for locale-aware text segmentation, refactors text transformation infrastructure for better composability, and improves locale normalization to BCP 47 standards. It also adds comprehensive tests for these new features and refactors existing transformers for consistency.

Locale normalization improvements

  • Improved the normalizeLocaleIntl function in LanguageSettings.ts to support BCP 47 language tag normalization, including script and region subtags, and added tests for these cases. [1] [2]

New locale-aware text transformer

  • Added the IntlSegmentTextTransformer class for locale-aware word segmentation using Intl.Segmenter, along with tests covering multiple locales (including Thai). [1] [2]

Transformer infrastructure and API improvements

  • Introduced a generic TextTransformer interface and the Edit type in Transformer.ts to standardize text transformation operations.
  • Added utility functions applyEditsToMappedText and applyEditsToText in TextMapEdit.ts for applying edits and maintaining source maps, used by all transformers.

Refactoring and consistency

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for cspell since your current version.


Updates css-loader from 7.1.4 to 7.1.5

Release notes

Sourced from css-loader's releases.

v7.1.5

7.1.5 (2026-08-28)

Bug Fixes

  • strip BOM before processing with postcss (#1684) (bd20834)
Changelog

Sourced from css-loader's changelog.

7.1.5 (2026-08-28)

Bug Fixes

  • strip BOM before processing with postcss (#1684) (bd20834)
Commits
  • be04ec2 chore(release): 7.1.5
  • 405bdde docs: deprecate css-loader in favor of webpack's built-in CSS support (#1683)
  • bd20834 fix: strip BOM before processing with postcss (#1684)
  • 488cdb1 chore(deps-dev): bump lodash from 4.17.23 to 4.18.1 (#1663)
  • fd4cb47 chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 (#1659)
  • 4bf84fa docs: clarify style-loader usage in Getting Started (#1656)
  • d7441e5 chore(deps): bump immutable from 5.1.3 to 5.1.5 (#1654)
  • ca53a77 chore(deps): bump minimatch (#1653)
  • See full diff in compare view

Updates jest from 30.4.2 to 30.5.1

Release notes

Sourced from jest's releases.

v30.5.1

Fixes

  • [jest-config] Don't warn about global-only options in the config that supplies the global config - the root config a project resolves to, or the first entry of --projects when no root config is passed (#16411)
  • [jest-config, jest-types] Stop accepting reporters, coverageReporters, workerIdleMemoryLimit, cwd and runnerOptions in a project config - they were silently ignored, and now warn like the other global-only options (#16411)
  • [jest-config, jest-validate] Warn about maxWorkers and coverageThreshold in a project config instead of dropping them without a word (#16411)
  • [jest-resolve] Match moduleNameMapper patterns against the specifier as written again (reverting #16390) (#16417)
  • [jest-runtime] Resolve package imports specifiers like #dep under ESM again (#16413)

Chore & Maintenance

  • [jest-util] Name the testEnvironmentOptions.globalsCleanup option and link the docs from the JEST-01 deprecation warning, and document the option's modes (#16404)

New Contributors

Full Changelog: jestjs/jest@v30.5.0...v30.5.1

v30.5.0

On a personal note: King Harald V of Norway passed away this morning. He ascended the throne 35 years ago, two months before I was born. This release is dedicated to his memory. Hvil i fred 🇳🇴

This is a big release. It touches jest-runtime, jest-resolve and jest-haste-map in many places, and with this many changes there might be regressions 😬. If your suite behaves differently after upgrading, please open an issue.

Highlights

whenCalledWith

Mock functions can now configure return values per argument list, contributed by @​timkindberg (#16053):

const fn = jest.fn();
fn.whenCalledWith('apple').mockReturnValue('red');
fn.whenCalledWith('banana').mockReturnValue('yellow');
fn.whenCalledWith(expect.any(Number)).mockReturnValue('numeric');
fn('apple'); // 'red'
fn('banana'); // 'yellow'
fn(42); // 'numeric'
fn('grape'); // undefined

The returned object is a real Mock, so mockReturnValueOnce, mockResolvedValue, mockImplementation etc. all chain here too. Argument slots accept literals or any asymmetric matcher, with the same equality semantics as toHaveBeenCalledWith(). Calls that match nothing fall through to the base mock. See the Mock Functions docs for matching and precedence details.

Describe-level retries

jest.retryTimes() can now retry a whole describe block instead of a single test, contributed by @​soltonigiri (#16322). Each attempt reruns the block's beforeAll/afterAll hooks, child tests and nested describes, which helps when tests in a block depend on shared state:

</tr></table>

... (truncated)

Changelog

Sourced from jest's changelog.

30.5.1

Fixes

  • [jest-config] Don't warn about global-only options in the config that supplies the global config - the root config a project resolves to, or the first entry of --projects when no root config is passed (#16411)
  • [jest-config, jest-types] Stop accepting reporters, coverageReporters, workerIdleMemoryLimit, cwd and runnerOptions in a project config - they were silently ignored, and now warn like the other global-only options (#16411)
  • [jest-config, jest-validate] Warn about maxWorkers and coverageThreshold in a project config instead of dropping them without a word (#16411)
  • [jest-resolve] Match moduleNameMapper patterns against the specifier as written again (reverting #16390) (#16417)
  • [jest-runtime] Resolve package imports specifiers like #dep under ESM again (#16413)

Chore & Maintenance

  • [jest-util] Name the testEnvironmentOptions.globalsCleanup option and link the docs from the JEST-01 deprecation warning, and document the option's modes (#16404)

30.5.0

Features

  • [@jest/expect-utils, jest-mock] Add mockFn.whenCalledWith(...args) for configuring return values per argument list, with first-class asymmetric-matcher support (#16053)
  • [@jest/expect-utils] Export AsymmetricMatcher and FunctionParameters types (previously private to expect) (#16053)
  • [jest-circus, jest-core, jest-jasmine2, jest-test-result, jest-types] --collectTests now expands test.each/describe.each cases and reports per-status counts (skipped/todo via the new wouldRun flag for selected tests) plus a summary line that match a real run, including under --testNamePattern and .only/fdescribe focus on both the circus and jasmine2 runners (#16259)
  • [jest-circus, jest-environment, jest-runtime, jest-types] Add describe-level retries via jest.retryTimes(..., {entireDescribe: true}) (#16322)
  • [jest-circus, jest-message-util, jest-reporters, jest-types] Add retryMessages to AssertionResult and export formatErrorStack, so the retry log renders nested cause and AggregateError sections with code frames instead of serialized [cause]:/[errors]: markers (#16316)
  • [jest-circus, jest-types] Add unhandledErrorsDetailed to Circus.RunResult, so an unhandled rejection reports its cause chain and AggregateError entries with code frames instead of a pre-serialized stack (#16316)
  • [jest-haste-map] Replace NodeWatcher and FSEventsWatcher with @parcel/watcher for the non-watchman watch path (#16188)
  • [jest-resolve] Bump unrs-resolver to 1.12.1, remove jest-pnp-resolver and unnecessary checks (#15721)
  • [jest-resolve] Honor Node's --preserve-symlinks / NODE_PRESERVE_SYMLINKS in the default resolver by passing symlinks: false to unrs-resolver (#16260)
  • [jest-runtime] Apply automocking and manual __mocks__ files to synchronously evaluable ESM graphs on Node 24.9+ - static imports, dynamic import() and require() of an ESM file now generate an automock from the real module's namespace instead of failing with "Attempting to import a mock without a factory". Graphs that need async evaluation (top-level await) or an async-only resolver or transformer still throw (#16391)
  • [jest-runtime] Route process.getBuiltinModule through the sandbox, so it returns the sandbox process and the hooked node:module instead of the host's (#16391)
  • [jest-runtime] Throw an actionable error from module.register() and module.registerHooks() inside a test - the hooks attached to the loader running Jest itself, never saw the sandboxed requires they were meant for, and stayed registered for every later test file in the worker (#16391)
  • [jest-runtime] Surface resolution and import-attribute errors in an ESM graph before executing any of its CJS dependencies on Node 24.9+, matching Node's run-nothing-on-a-broken-graph behavior; the legacy loader on older versions keeps its linking-time execution order (#16391)
  • [jest-runtime] Throw ERR_SOURCE_PHASE_NOT_DEFINED with an actionable message for import source and import.source(), instead of failing at instantiation with V8's bare "Source phase import object is not defined" (#16391)
  • [jest-runtime] Emit the JSON-without-import-attribute deprecation warning once per test file instead of once per worker, so it is no longer silently swallowed for every file after the first (#16391)
  • [jest-runtime] Set import.meta.main to true in the test file and false in every module it loads, matching Node 24+ (#16367)
  • [jest-runtime] Resolve the module-sync export condition, so a package that exposes its ESM entry point for require() loads the same file Node would (#16336)
  • [jest-snapshot] Add external snapshot paths to custom reporter failure details (#16374)

Fixes

  • [jest-console, jest-reporters] CustomConsole now buffers console output so TestResult.console is populated for reporters when verbose is enabled, while GitHubActionsReporter avoids replaying buffered output in verbose mode (#16155)
  • [expect, jest-message-util, jest-pattern, jest-regex-util, jest-util] Revert node: protocol imports to restore webpack/browser-bundle compatibility (#16167)
  • [expect] Widen toMatchObject and objectContaining parameter type from Record<string, unknown> to object so class instances are accepted (#16196)
  • [jest-circus] Call a generator test body with the shared test context, so this matches what a regular test function receives (#16347)
  • [jest-circus] Capture the error listeners of the parent process instead of the in-sandbox process, so listeners registered before the test file survive teardown and sandbox listeners no longer leak onto the parent (#16347)
  • [jest-circus] Clear currentlyRunningTest after skipped and todo tests (#16342)
  • [jest-circus] Prevent late done() callbacks from affecting later test or hook invocations (#16343)
  • [jest-circus, jest-jasmine2] Honor --expand when formatting node:assert failures, instead of always collapsing the diff (#16347)
  • [jest-circus, jest-jasmine2, jest-message-util] Serialize the inner errors of an AggregateError into failureMessages, retryReasons and unhandledErrors, so --json output and reporter annotations include them (#16316)
  • [jest-circus, jest-snapshot] Keep snapshot state and counts correct when a test retries (#16344)
  • [@jest/create-cache-key-function] Include the caller support flags in the generated key, so a transformer that emits ESM or CJS based on them no longer shares one cache entry between the two (#16331)

... (truncated)

Commits

Updates sass-loader from 17.0.0 to 17.0.1

Release notes

Sourced from sass-loader's releases.

v17.0.1

Patch Changes

  • Remove the byte order mark (BOM) from the compiled CSS. dart-sass prepends it when the compiled CSS contains non ASCII characters and the style option is compressed (the default for the production mode), but a BOM is only valid at the very beginning of a file - tools like css-loader move @import at-rules above it, so it ended up in the middle of the generated CSS and broke the rule after it. Source maps are shifted accordingly. (by @​alexander-akait in #1337)
Changelog

Sourced from sass-loader's changelog.

17.0.1

Patch Changes

  • Remove the byte order mark (BOM) from the compiled CSS. dart-sass prepends it when the compiled CSS contains non ASCII characters and the style option is compressed (the default for the production mode), but a BOM is only valid at the very beginning of a file - tools like css-loader move @import at-rules above it, so it ended up in the middle of the generated CSS and broke the rule after it. Source maps are shifted accordingly. (by @​alexander-akait in #1337)
Commits
  • f38ee40 chore(release): new release (#1338)
  • d33042b docs: explain how @use/@import requests are resolved (#1339)
  • 72640db fix: remove the BOM from the compiled CSS (#1337)
  • a28ab73 docs: use the built-in CSS support of webpack in examples (#1336)
  • 7b81867 chore(deps): apply socket fixes (#1333)
  • b17bc02 chore(deps-dev): bump postcss from 8.5.14 to 8.5.26 (#1332)
  • c7a83fe chore(deps-dev): bump fast-uri from 3.1.2 to 3.1.5 (#1331)
  • 14a29c0 chore(deps-dev): bump shell-quote from 1.8.2 to 1.10.0 (#1328)
  • e2a48b8 chore(deps): bump immutable from 5.1.5 to 5.1.9 (#1327)
  • 87864a5 chore(deps-dev): bump @​babel/core from 7.29.0 to 7.29.6 (#1326)
  • Additional commits viewable in compare view

Updates tsx from 4.23.12 to 4.23.13

Release notes

Sourced from tsx's releases.

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

  • cache: bound shared transform cache memory (#835) (28e1f12)

This release is also available on:

Commits

Updates webpack from 5.110.1 to 5.110.2

Release notes

Sourced from webpack's releases.

v5.110.2

Patch Changes

Changelog

Sourced from webpack's changelog.

5.110.2

Patch Changes

Commits
  • 75eec50 chore(release): new release (#21850)
  • 0b28311 fix: move the source map with a removed BOM (#21861)
  • c5fb111 fix(css): skip the loading runtime when every css chunk is initial (#21862)
  • 17fa705 docs: update examples (#21860)
  • e7ad244 fix: do not emit a JS chunk for an output.html generated page (#21859)
  • b74192f fix(loaders): strip a BOM from a string result in the loader chain (#21857)
  • 852e759 fix: report an unused named import that names a missing export (#21856)
  • 2a6a4fa docs: drop the built-in-superseded loaders and plugins from the README (#21855)
  • 1f3264e fix: ESM correctness in circular re-exports, imported bindings and defer orde...
  • e9a34ae fix(analyzable): bake urls past cycles, mixed-served wasm and partial style m...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the dependencies group with 6 updates
3fa933e 
Bumps the dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.1.1` | `10.2.0` |
| [css-loader](https://github.com/webpack/css-loader) | `7.1.4` | `7.1.5` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.4.2` | `30.5.1` |
| [sass-loader](https://github.com/webpack/sass-loader) | `17.0.0` | `17.0.1` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` |
| [webpack](https://github.com/webpack/webpack) | `5.110.1` | `5.110.2` |


Updates `cspell` from 10.1.1 to 10.2.0
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.2.0/packages/cspell)

Updates `css-loader` from 7.1.4 to 7.1.5
- [Release notes](https://github.com/webpack/css-loader/releases)
- [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md)
- [Commits](webpack/css-loader@v7.1.4...v7.1.5)

Updates `jest` from 30.4.2 to 30.5.1
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.5.1/packages/jest)

Updates `sass-loader` from 17.0.0 to 17.0.1
- [Release notes](https://github.com/webpack/sass-loader/releases)
- [Changelog](https://github.com/webpack/sass-loader/blob/main/CHANGELOG.md)
- [Commits](webpack/sass-loader@v17.0.0...v17.0.1)

Updates `tsx` from 4.23.12 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.12...v4.23.13)

Updates `webpack` from 5.110.1 to 5.110.2
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.110.1...v5.110.2)

---
updated-dependencies:
- dependency-name: cspell
  dependency-version: 10.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: css-loader
  dependency-version: 7.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: jest
  dependency-version: 30.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sass-loader
  dependency-version: 17.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: webpack
  dependency-version: 5.110.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 4, 2026
@changeset-bot

changeset-bot Bot commented Sep 4, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 3fa933e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security

socket-security Bot commented Sep 4, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedjest@​30.4.2 ⏵ 30.5.11001006993 +5100
Updatedtsx@​4.23.12 ⏵ 4.23.131001008195100
Updatedcss-loader@​7.1.4 ⏵ 7.1.59910010084 -5100
Updatedsass-loader@​17.0.0 ⏵ 17.0.199 +110010088100
Updatedwebpack@​5.110.1 ⏵ 5.110.29310093 +199100
Updatedcspell@​10.1.1 ⏵ 10.2.098 +110010095 +3100

View full report

@github-actions

github-actions Bot commented Sep 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR is packaged and the instant preview is available (cdb841d).

Install it locally:

  • npm
npm i -D webpack-cli@https://pkg.pr.new/webpack-cli@cdb841d
  • yarn
yarn add -D webpack-cli@https://pkg.pr.new/webpack-cli@cdb841d
  • pnpm
pnpm add -D webpack-cli@https://pkg.pr.new/webpack-cli@cdb841d

@webpack
webpack Bot enabled auto-merge (squash) September 4, 2026 14:45
@webpack
webpack Bot merged commit cdb841d into main Sep 4, 2026
39 checks passed
@webpack
webpack Bot deleted the dependabot/npm_and_yarn/dependencies-72d01e30f0 branch September 4, 2026 16:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@webpack webpack[bot] webpack[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants