Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 2, 2025

Bumps the all group with 6 updates:

Package From To
autoprefixer 10.4.21 10.4.22
chokidar 4.0.3 5.0.0
sass 1.93.3 1.94.2
sharp 0.34.4 0.34.5
webpack 5.102.1 5.103.0
yaml 2.8.1 2.8.2

Updates autoprefixer from 10.4.21 to 10.4.22

Release notes

Sourced from autoprefixer's releases.

10.4.22

  • Fixed stretch prefixes on new Can I Use database.
  • Updated fraction.js.
Changelog

Sourced from autoprefixer's changelog.

10.4.22

  • Fixed stretch prefixes on new Can I Use database.
  • Updated fraction.js.
Commits

Updates chokidar from 4.0.3 to 5.0.0

Release notes

Sourced from chokidar's releases.

5.0.0

  • Make the package ESM-only. Reduces on-disk package size from ~150kb to ~80kb
  • Increase minimum node.js version to v20.19. The versions starting from it support loading esm files from cjs
  • fix: Make types more precise paulmillr/chokidar#1424
  • perf: re-use double slash regex paulmillr/chokidar#1435
  • Update readdirp to ESM-only v5
  • Lots of minor improvements in tests
  • Increase security of NPM releases. Switch to token-less Trusted Publishing, with help of jsbt
  • Switch compilation mode to isolatedDeclaration-based typescript for simplified auto-generated docs

New Contributors

Full Changelog: paulmillr/chokidar@4.0.3...5.0.0

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for chokidar since your current version.


Updates sass from 1.93.3 to 1.94.2

Release notes

Sourced from sass's releases.

Dart Sass 1.94.2

To install Sass 1.94.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Command-Line Interface

  • Using --fatal-deprecation <version> no longer emits warnings about deprecations that are obsolete.

Dart API

  • Deprecation.forVersion now excludes obsolete deprecations from the set it returns.

JS API

  • Excludes obsolete deprecations from fatalDeprecations when a Version is passed.

Node.js Embedded Host

  • Fix a bug where a variable could be used before it was initialized during async compilation.

See the full changelog for changes in earlier releases.

Dart Sass 1.94.1

To install Sass 1.94.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.94.0

To install Sass 1.94.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Potentially breaking compatibility fix: @function rules whose names begin with -- are now parsed as unknown at-rules to support the plain CSS @function rule. Within this rule, the result property is parsed as raw CSS just like custom properties.

  • Potentially breaking compatibility fix: @mixin rules whose names begin with -- are now errors. These are not yet parsed as unknown at-rules because no browser currently supports CSS mixins.

... (truncated)

Changelog

Sourced from sass's changelog.

1.94.2

Command-Line Interface

  • Using --fatal-deprecation <version> no longer emits warnings about deprecations that are obsolete.

Dart API

  • Deprecation.forVersion now excludes obsolete deprecations from the set it returns.

JS API

  • Excludes obsolete deprecations from fatalDeprecations when a Version is passed.

Node.js Embedded Host

  • Fix a bug where a variable could be used before it was initialized during async compilation.

1.94.1

  • No user-visible changes.

1.94.0

  • Potentially breaking compatibility fix: @function rules whose names begin with -- are now parsed as unknown at-rules to support the plain CSS @function rule. Within this rule, the result property is parsed as raw CSS just like custom properties.

  • Potentially breaking compatibility fix: @mixin rules whose names begin with -- are now errors. These are not yet parsed as unknown at-rules because no browser currently supports CSS mixins.

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for sass since your current version.


Updates sharp from 0.34.4 to 0.34.5

Release notes

Sourced from sharp's releases.

v0.34.5

  • Upgrade to libvips v8.17.3 for upstream bug fixes.

  • Add experimental support for prebuilt Linux RISC-V 64-bit binaries.

  • Support building from source with npm v12+, deprecate --build-from-source flag. #4458

  • Add support for BigTIFF output. #4459 @​throwbi

  • Improve error messaging when only warnings issued. #4465

  • Simplify ICC processing when retaining input profiles. #4468

v0.34.5-rc.1

  • Upgrade to libvips v8.17.3 for upstream bug fixes.

  • Add experimental support for prebuilt Linux RISC-V 64-bit binaries.

  • Support building from source with npm v12+, deprecate --build-from-source flag. #4458

  • Add support for BigTIFF output. #4459 @​throwbi

  • Improve error messaging when only warnings issued. #4465

  • Simplify ICC processing when retaining input profiles. #4468

v0.34.5-rc.0

  • Upgrade to libvips v8.17.3 for upstream bug fixes.

  • Add experimental support for prebuilt Linux RISC-V 64-bit binaries.

  • Support building from source with npm v12+, deprecate --build-from-source flag. #4458

  • Add support for BigTIFF output. #4459 @​throwbi

  • Improve error messaging when only warnings issued. #4465

... (truncated)

Commits
  • e062456 Release v0.34.5
  • 6450c70 Prerelease v0.34.5-rc.1
  • f7c95d1 TypeScript: consolidate a few enum-like properties
  • ef86a75 Prerelease v0.34.5-rc.0
  • 6c1e840 Use structured binding for tuples where possible
  • e1628d8 Simplify ICC processing when retaining input profiles #4468
  • 4f9f817 Linter: apply all recommended biome settings
  • 09d5aa8 Docs: update internal and libvips doc links
  • 040b73c Upgrade to libvips v8.17.3
  • 1f2f33d Ensure licensing headers are retained by code bundlers
  • Additional commits viewable in compare view

Updates webpack from 5.102.1 to 5.103.0

Release notes

Sourced from webpack's releases.

v5.103.0

Features

  • Added DotenvPlugin and top level dotenv option to enable this plugin
  • Added WebpackManifestPlugin
  • Added support the ignoreList option in devtool plugins
  • Allow to use custom javascript parse function
  • Added import.meta.env support for environment variables
  • Added support for import.meta.dirname and import.meta.filename
  • Added support import.defer() for statistical path
  • Handle import.meta.main
  • Added suport to setup named exports for JSON modules and disable usage named export for import file from "./file.json" with { type: "json" }
  • Added support __dirname/__filename/import.meta.dirname/import.meta.filename for universal target
  • [CSS] Added the exportType option with link (by default), "text" and css-style-sheet values
  • [CSS] Added support for composes properties

Fixes

  • The dependOn chunk must be loaded before the common chunk
  • Return to namespace import when the external request includes a specific export
  • No runtime extra runtime code for module libraries
  • Delay HMR accept dependencies to preserve import attributes
  • Properly handle external presets for universal target
  • Fixed incorrect identifier of import binding for module externals
  • Fixed when defer import and dynamic default export mixed
  • Reduce generated output when globalThis supported
  • Fixed loading async modules in defer import
  • Reexport module for default import when no used exports for systemjs library
  • Rename HarmonyExportDependencyParserPlugin exported id to CompatibilityPlugin tagged id
  • Handle __dirname and __filename for ES modules
  • Rename single nested __webpack_export__ and __webpack_require__ in already bundled code
  • [Types] webpack function type
  • [Types] NormalModule type
  • [Types] Multi compiler configuration type
  • [Types] Fixed regression in custom hashDigest type
  • [CSS] No extra runtime for initial chunk
  • [CSS] Fixed a lot of CSS modules bugs
Commits
  • e021948 chore(release): 5.103.0
  • 1dc6967 chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#20130)
  • 077417f fix(css): many css modules bugs (#20129)
  • 7722518 chore: fix script (#20128)
  • 688a7f9 test: no runtime requirements for module library (#20127)
  • 04fe5a1 refactor: pkg.pr.new publish (#20093)
  • 27c05c7 fix: return to namespace import when the external request includes a specific...
  • 067cc60 refactor: no runtime requirements for module library (#20096)
  • d4208ba fix: delay HMR accept dependencies to preserve import attributes (#20124)
  • 102e1a4 feat(css): added css-style-sheet to exportType for CSSStyleSheet return (#20104)
  • Additional commits viewable in compare view

Updates yaml from 2.8.1 to 2.8.2

Release notes

Sourced from yaml's releases.

v2.8.2

  • Serialize -0 as -0 (#638)
  • Do not double newlines for empty map values (#642)
Commits
  • 086fa6b 2.8.2
  • 95f01e9 chore: Add funding to package.json
  • 152e204 style: Apply updated Prettier rules & satisfy updated ESLint
  • 3f3378c chore: Drop unused dependency cross-env
  • f0b9af7 chore: Update to @​rollup/plugin-replace v6
  • e3cafc7 chore: Update to eslint-config-prettier v10
  • 553c1b5 chore: Refresh lockfile
  • 70a8db3 fix: Do not double newlines for empty map values (#642)
  • 92821f2 ci: Limit action permissions to minimum required
  • 95285f8 fix: Serialize -0 as -0 (fixes #638)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.21` | `10.4.22` |
| [chokidar](https://github.com/paulmillr/chokidar) | `4.0.3` | `5.0.0` |
| [sass](https://github.com/sass/dart-sass) | `1.93.3` | `1.94.2` |
| [sharp](https://github.com/lovell/sharp) | `0.34.4` | `0.34.5` |
| [webpack](https://github.com/webpack/webpack) | `5.102.1` | `5.103.0` |
| [yaml](https://github.com/eemeli/yaml) | `2.8.1` | `2.8.2` |


Updates `autoprefixer` from 10.4.21 to 10.4.22
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.21...10.4.22)

Updates `chokidar` from 4.0.3 to 5.0.0
- [Release notes](https://github.com/paulmillr/chokidar/releases)
- [Commits](paulmillr/chokidar@4.0.3...5.0.0)

Updates `sass` from 1.93.3 to 1.94.2
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.93.3...1.94.2)

Updates `sharp` from 0.34.4 to 0.34.5
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.34.4...v0.34.5)

Updates `webpack` from 5.102.1 to 5.103.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.102.1...v5.103.0)

Updates `yaml` from 2.8.1 to 2.8.2
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.8.1...v2.8.2)

---
updated-dependencies:
- dependency-name: autoprefixer
  dependency-version: 10.4.22
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: chokidar
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: sass
  dependency-version: 1.94.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: sharp
  dependency-version: 0.34.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: webpack
  dependency-version: 5.103.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: yaml
  dependency-version: 2.8.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant