Skip to content

Bump the all group with 4 updates - #9

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/all-d6d76a0c51
Closed

Bump the all group with 4 updates#9
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/all-d6d76a0c51

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 4 updates: npm, watchpack, webpack and webpack-cli.

Updates npm from 10.8.2 to 12.2.0

Release notes

Sourced from npm's releases.

v12.2.0

12.2.0 (2026-09-30)

Features

Documentation

Dependencies

v12.1.0

12.1.0 (2026-09-21)

Features

Bug Fixes

Documentation

Dependencies

Chores

v12.0.2

12.0.2 (2026-07-27)

Bug Fixes

... (truncated)

Changelog

Sourced from npm's changelog.

12.2.0 (2026-09-30)

Features

Documentation

Dependencies

12.1.0 (2026-09-21)

Features

Bug Fixes

Documentation

Dependencies

Chores

12.0.2 (2026-07-27)

Bug Fixes

Documentation

Chores

... (truncated)

Commits
  • c276cad chore: release 12.2.0
  • 9741b64 feat(dist-tag): support OIDC authentication (#10038)
  • 0c3b82a docs: update npm stage docs to reflect that it can create new packages (#10017)
  • e1581be chore(config): isolate tests from host npmrc files (#10015)
  • c039090 chore: release 12.1.0
  • 7b50811 chore(pack): select workspace through config (#9961)
  • 6400533 feat(token): support read-write-stage-only granular access tokens (#9948)
  • c9876d7 fix: provenance-file takes precedence over OIDC auto-generated provenance (#9...
  • b016aa2 fix(config): avoid exporting persistent allow-scripts (#9913)
  • 81a901c chore: recognize prefixed Node.js PR titles (#9915)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by reggi, a new releaser for npm since your current version.


Updates watchpack from 2.4.0 to 2.6.1

Release notes

Sourced from watchpack's releases.

v2.6.1

Patch Changes

  • fix: stop a tight fs.watch retry loop behind a dangling directory symlink, and retry once a second until its target appears. (by @​alexander-akait in #346)

v2.6.0

Minor Changes

feat: allow the ignored option to be a mixed array of glob strings and (by @​stormslowly in webpack/watchpack#336) RegExp instances, e.g. ignored: ["**/.cache", /generated/].

Previously an array was assumed to contain only glob strings, so passing a RegExp inside it threw TypeError: Expected a string. This made it awkward for frameworks to append their own glob ignores to a user-supplied RegExp ignore, since the two could not be combined in one value.

Glob strings in the array are still merged into a single RegExp; RegExp items are tested as-is. Behaviour for string-only arrays, single strings, single RegExps and functions is unchanged.

Patch Changes

fix: report a file removed after startTime to a watcher attached later, as a change after startTime already is. (by @​alexander-akait in webpack/watchpack#345)

Previously a watcher attached with a startTime learned of files changed since then ("outdated on attach") but not of files removed since then, so webpack missed a dependency deleted while a build ran.

Suppress Watchpack Error (stats) logging for EACCES, ENODEV, and Windows EINVAL lstat errors in the watch-event path, matching the handling in the scan paths (e.g. pagefile.sys on a watched drive root with Node >= 22.17) (by @​danielroe in webpack/watchpack#326)

v2.5.2

Patch Changes

  • fix: retry fs.lstat on transient EBUSY errors instead of emitting a spurious remove event (fixes #223, #44). The retry count is controlled by the WATCHPACK_RETRIES environment variable (default: 3; set to 0 or "false" to disable retrying). (by @​alexander-akait in #293)

  • Improve perfomance for ignored and improve perfomance for reduce plan. (by @​alexander-akait in #289)

  • perf: speed up ignored matchers (~35–45% faster on POSIX paths) and reducePlan (~20–40% faster on medium and large plans). Also adds a tinybench suite under bench/ and a CodSpeed GitHub Actions workflow to catch future regressions. (by @​alexander-akait in #287)

  • fix: don't log "Watchpack Error (initial scan)" for unreadable entries inside a watched parent directory, e.g. pagefile.sys on WSL or /efi on Linux (fixes #187). EACCES / ENODEV (and EINVAL on Windows) errors are now handled like EPERM / ENOENT / EBUSY: the entry is recorded as missing and the scan continues silently. (by @​alexander-akait in #298)

  • fix: prevent unbounded watcher growth when a symlinked directory points back to one of its own ancestors (e.g. a/b/loop -> ..) with followSymlinks: true. Such symlinks are now recorded as plain entries instead of being descended into; symlinks pointing outside the watched tree (#231) behave as before. (by @​alexander-akait in #297)

v2.5.1

Fixes

  • typo in typescript types

v2.5.0

Features

  • Added types

v2.4.4

Fixes

  • Node.js v24+ changed permission access error codes

... (truncated)

Changelog

Sourced from watchpack's changelog.

2.6.1

Patch Changes

  • fix: stop a tight fs.watch retry loop behind a dangling directory symlink, and retry once a second until its target appears. (by @​alexander-akait in #346)

2.6.0

Minor Changes

  • feat: allow the ignored option to be a mixed array of glob strings and (by @​stormslowly in #336) RegExp instances, e.g. ignored: ["**/.cache", /generated/].

    Previously an array was assumed to contain only glob strings, so passing a RegExp inside it threw TypeError: Expected a string. This made it awkward for frameworks to append their own glob ignores to a user-supplied RegExp ignore, since the two could not be combined in one value.

    Glob strings in the array are still merged into a single RegExp; RegExp items are tested as-is. Behaviour for string-only arrays, single strings, single RegExps and functions is unchanged.

Patch Changes

  • fix: report a file removed after startTime to a watcher attached later, as a change after startTime already is. (by @​alexander-akait in #345)

    Previously a watcher attached with a startTime learned of files changed since then ("outdated on attach") but not of files removed since then, so webpack missed a dependency deleted while a build ran.

  • Suppress Watchpack Error (stats) logging for EACCES, ENODEV, and Windows EINVAL lstat errors in the watch-event path, matching the handling in the scan paths (e.g. pagefile.sys on a watched drive root with Node >= 22.17) (by @​danielroe in #326)

2.5.2

Patch Changes

  • fix: retry fs.lstat on transient EBUSY errors instead of emitting a spurious remove event (fixes #223, #44). The retry count is controlled by the WATCHPACK_RETRIES environment variable (default: 3; set to 0 or "false" to disable retrying). (by @​alexander-akait in #293)

  • Improve perfomance for ignored and improve perfomance for reduce plan. (by @​alexander-akait in #289)

  • perf: speed up ignored matchers (~35–45% faster on POSIX paths) and reducePlan (~20–40% faster on medium and large plans). Also adds a tinybench suite under bench/ and a CodSpeed GitHub Actions workflow to catch future regressions. (by @​alexander-akait in #287)

  • fix: don't log "Watchpack Error (initial scan)" for unreadable entries inside a watched parent directory, e.g. pagefile.sys on WSL or /efi on Linux (fixes #187). EACCES / ENODEV (and EINVAL on Windows) errors are now handled like EPERM / ENOENT / EBUSY: the entry is recorded as missing and the scan continues silently. (by @​alexander-akait in #298)

  • fix: prevent unbounded watcher growth when a symlinked directory points back to one of its own ancestors (e.g. a/b/loop -> ..) with followSymlinks: true. Such symlinks are now recorded as plain entries instead of being descended into; symlinks pointing outside the watched tree (#231) behave as before. (by @​alexander-akait in #297)

Commits
  • d5ab9bf Merge pull request #351 from webpack/changeset-release/main
  • 4a084f4 chore(release): new release
  • cead0fc Merge pull request #353 from webpack/ci/publish-ref-resolve-short-sha
  • efee92f ci: resolve the publish ref with git so a short SHA works
  • e902570 Merge pull request #352 from webpack/ci/publish-ref-on-demand
  • 6289926 ci: let a stable version replace its own prerelease as latest
  • 6d23c67 ci: only publish reviewed commits, never move latest to a prerelease
  • 6a945fa ci: let the release workflow publish a given ref on demand
  • e0036c9 Merge pull request #348 from webpack/test/file-read-after-write
  • 998e2c4 Merge pull request #349 from webpack/chore/update-dependencies
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for watchpack since your current version.


Updates webpack from 5.89.0 to 5.111.1

Release notes

Sourced from webpack's releases.

v5.111.1

Patch Changes

... (truncated)

Changelog

Sourced from webpack's changelog.

5.111.1

Patch Changes

... (truncated)

Commits
  • 5a10675 chore(release): new release (#22105)
  • 9c448c4 test: consolidate loose harness files under test/harness (#22163)
  • a947604 fix(html): unquote an attribute value carrying a vertical tab (#22162)
  • db556f3 test: run the printer equivalence suite against Gecko in CI (#22155)
  • d174cdf perf(css): drop a fallback every browserslist target reads past (#22158)
  • 39f14f2 refactor(javascript): declare block bindings from the parse (#22161)
  • 0835411 test: move suite drivers into test/templates (#22159)
  • b48cd77 fix(html): minify by what a value says rather than how it was spelled (#22154)
  • a774f10 test: define the webpack major instead of bundling package.json (#22160)
  • 4b2eed0 docs: report only what needs a decision while watching a PR (#22156)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates webpack-cli from 5.1.4 to 7.2.3

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.2.3

Patch Changes

  • fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @​bjohansebas in #4834)

  • feat: allow toml@5 as a peer dependency for TOML configuration files (by @​alexander-akait in #4837)

webpack-cli@7.2.2

Patch Changes

  • perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @​bjohansebas in #4818)

webpack-cli@7.2.1

Patch Changes

webpack-cli@7.2.0

Minor Changes

  • feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @​bjohansebas in #4793)

  • Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @​alexander-akait in #4796)

webpack-cli@7.1.0

Minor Changes

  • feat(cli): refresh the --help output using commander's configureHelp API — branded headers, section dividers, colorized terms and a clearer footer. Colors and chrome collapse to plain text when output is piped or --no-color is used, so scripts keep working. (by @​alexander-akait in #4779)

  • feat: support .json5, .yaml/.yml and .toml configuration files by parsing them directly, with the parser package (json5, js-yaml, toml) installed on demand by the user and declared as optional peerDependencies so the parsers resolve correctly under Yarn PnP (by @​alexander-akait in #4777)

webpack-cli@7.0.3

Patch Changes

  • Improved CLI startup performance and reduced memory usage. (by @​alexander-akait in #4765)

  • Reduced CLI startup CPU and memory usage by caching schema-derived argument metadata, registering only the options present in the arguments, and reading config directories once during default-config discovery. (by @​alexander-akait in #4760)

  • Replace the fastest-levenshtein dependency with a small in-tree implementation used for command/option "did you mean" suggestions. (by @​alexander-akait in #4762)

webpack-cli@7.0.2

Patch Changes

webpack-cli@7.0.1

Patch Changes

... (truncated)

Changelog

Sourced from webpack-cli's changelog.

7.2.3

Patch Changes

  • fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @​bjohansebas in #4834)

  • feat: allow toml@5 as a peer dependency for TOML configuration files (by @​alexander-akait in #4837)

7.2.2

Patch Changes

  • perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @​bjohansebas in #4818)

7.2.1

Patch Changes

7.2.0

Minor Changes

  • feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @​bjohansebas in #4793)

  • Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @​alexander-akait in #4796)

7.1.0

Minor Changes

  • feat(cli): refresh the --help output using commander's configureHelp API — branded headers, section dividers, colorized terms and a clearer footer. Colors and chrome collapse to plain text when output is piped or --no-color is used, so scripts keep working. (by @​alexander-akait in #4779)

  • feat: support .json5, .yaml/.yml and .toml configuration files by parsing them directly, with the parser package (json5, js-yaml, toml) installed on demand by the user and declared as optional peerDependencies so the parsers resolve correctly under Yarn PnP (by @​alexander-akait in #4777)

7.0.3

Patch Changes

  • Improved CLI startup performance and reduced memory usage. (by @​alexander-akait in #4765)

  • Reduced CLI startup CPU and memory usage by caching schema-derived argument metadata, registering only the options present in the arguments, and reading config directories once during default-config discovery. (by @​alexander-akait in #4760)

  • Replace the fastest-levenshtein dependency with a small in-tree implementation used for command/option "did you mean" suggestions. (by @​alexander-akait in #4762)

7.0.2

Patch Changes

... (truncated)

Commits
  • 7d40e4e chore(release): new release (#4839)
  • 1f6593a ci: use the input names changesets/action v2 expects (#4838)
  • 99cfc4f build(deps): update dependencies (#4837)
  • 11be634 feat(create-webpack-app): stop asking about HTML and CSS (#4836)
  • a2418aa feat(create-webpack-app): use webpack's native CSS and HTML support in init t...
  • 3664b9d chore: update webpack-dev-server to v6 and test against v5 and v6 (#4834)
  • ce1a219 ci: node 26 (#4763)
  • 0cfc077 chore(deps): bump changesets/action in the dependencies group (#4831)
  • ef262eb chore(deps): bump changesets/action in the dependencies group (#4830)
  • d90f5ab chore: add gitignore to i...

    Description has been truncated

@dependabot
Bump the all group with 4 updates
c948dbe 
Bumps the all group with 4 updates: [npm](https://github.com/npm/cli), [watchpack](https://github.com/webpack/watchpack), [webpack](https://github.com/webpack/webpack) and [webpack-cli](https://github.com/webpack/webpack-cli).


Updates `npm` from 10.8.2 to 12.2.0
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/latest/CHANGELOG.md)
- [Commits](npm/cli@v10.8.2...v12.2.0)

Updates `watchpack` from 2.4.0 to 2.6.1
- [Release notes](https://github.com/webpack/watchpack/releases)
- [Changelog](https://github.com/webpack/watchpack/blob/main/CHANGELOG.md)
- [Commits](webpack/watchpack@v2.4.0...v2.6.1)

Updates `webpack` from 5.89.0 to 5.111.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.89.0...v5.111.1)

Updates `webpack-cli` from 5.1.4 to 7.2.3
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@5.1.4...webpack-cli@7.2.3)

---
updated-dependencies:
- dependency-name: npm
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: watchpack
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: webpack
  dependency-version: 5.111.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: webpack-cli
  dependency-version: 7.2.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 17, 2026
@github-actions

github-actions Bot commented Oct 17, 2026

Copy link
Copy Markdown

This project accepts LLM-assisted contributions and asks you to say so. Either add a trailer to a commit:

Assisted-by: <tool name>

or one line in the description saying what helped (or that nothing did). It costs nothing and tells a reviewer where to look harder.

The part that is not optional: you own the result, and if a reviewer asks a question you answer it yourself rather than feeding the comment back to a model. See AGENTS.md.

@theomgdev

theomgdev commented Oct 17, 2026

Copy link
Copy Markdown
Owner

Closing: dependency churn is not what this repo needs attention on right now. Updates will be done deliberately when something actually calls for them.

@theomgdev theomgdev closed this Oct 17, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 17, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@theomgdev
theomgdev deleted the dependabot/npm_and_yarn/all-d6d76a0c51 branch October 17, 2026 12:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@theomgdev