Skip to content

chore(deps-dev): bump the dependencies group with 2 updates - #280

Merged
webpack[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-667e479795
Sep 16, 2026
Merged

webpack[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-667e479795

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 2 updates: eslint-config-webpack and tinybench.

Updates eslint-config-webpack from 4.9.6 to 4.12.0

Release notes

Sourced from eslint-config-webpack's releases.

v4.12.0

Minor Changes

  • Add the webpack/inherit-jsdoc rule and the webpack/types config. (by @​alexander-akait in #198)

  • Add webpack/prefer-import-tag, webpack/no-duplicate-import-tag and webpack/no-unused-import-tag, which hold JSDoc type imports to a single @import per module with no unused bindings. (by @​avivkeller in #187)

v4.11.0

Minor Changes

  • Add the webpack/format-schema rule, porting webpack/tooling's format-schemas with an ESLint auto-fix, and share one keyword table with webpack/valid-schema so allOf is no longer reported as unknown. (by @​alexander-akait in #195)

Patch Changes

  • Upgrade @changesets/cli to v3 so the release workflow works with changesets/action v2. (by @​alexander-akait in #196)

v4.10.0

Minor Changes

  • Add the webpack/valid-schema rule and the webpack/schemas config, porting the checks from webpack/tooling's schemas-lint and making the allowed keywords configurable. (by @​alexander-akait in #192)
Changelog

Sourced from eslint-config-webpack's changelog.

4.12.0

Minor Changes

  • Add the webpack/inherit-jsdoc rule and the webpack/types config. (by @​alexander-akait in #198)

  • Add webpack/prefer-import-tag, webpack/no-duplicate-import-tag and webpack/no-unused-import-tag, which hold JSDoc type imports to a single @import per module with no unused bindings. (by @​avivkeller in #187)

4.11.0

Minor Changes

  • Add the webpack/format-schema rule, porting webpack/tooling's format-schemas with an ESLint auto-fix, and share one keyword table with webpack/valid-schema so allOf is no longer reported as unknown. (by @​alexander-akait in #195)

Patch Changes

  • Upgrade @changesets/cli to v3 so the release workflow works with changesets/action v2. (by @​alexander-akait in #196)

4.10.0

Minor Changes

  • Add the webpack/valid-schema rule and the webpack/schemas config, porting the checks from webpack/tooling's schemas-lint and making the allowed keywords configurable. (by @​alexander-akait in #192)
Commits
  • ca0f2f0 chore(release): new release (#199)
  • 39ed6b3 feat(webpack): add inherit-jsdoc rule with auto-fix (#198)
  • a213c2c chore: support JSDoc imports (#187)
  • bf26286 chore(release): new release (#197)
  • 00bec6e fix(ci): upgrade changesets to v3 for the v2 action (#196)
  • 67a4786 feat(webpack): add format-schema rule with auto-fix (#195)
  • 8d8ba61 chore(deps-dev): bump js-yaml from 3.15.1 to 3.15.2 (#194)
  • ca44e9c chore(deps): bump browserslist from 4.28.1 to 4.28.9 (#190)
  • cd9b1c3 chore(deps): bump @​humanfs/node from 0.16.7 to 0.16.8 (#188)
  • c2c2582 chore(deps): bump the dependencies group across 1 directory with 2 updates (#...
  • Additional commits viewable in compare view

Updates tinybench from 6.1.6 to 6.2.0

Release notes

Sourced from tinybench's releases.

v6.2.0

   🚀 Features

    View changes on GitHub
Commits
  • f947421 chore: release v6.2.0
  • a00341e feat: add overriddenIterationCost to decouple the time budget from the samp...
  • 4b83628 chore(deps): update vitest monorepo to v5 (#664)
  • a6f7acf refactor: split src/utils.ts by concern (#667)
  • 295e3a4 chore(deps): update all non-major dependencies (#668)
  • 147c2ac chore(deps): update all non-major dependencies (#663)
  • aefabd5 chore(deps): update pnpm to v12 (#662)
  • d26f131 chore(deps): update all non-major dependencies (#661)
  • b3be297 docs: publish documentation
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 2 updates: [eslint-config-webpack](https://github.com/webpack/eslint-config-webpack) and [tinybench](https://github.com/tinylibs/tinybench).


Updates `eslint-config-webpack` from 4.9.6 to 4.12.0
- [Release notes](https://github.com/webpack/eslint-config-webpack/releases)
- [Changelog](https://github.com/webpack/eslint-config-webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/eslint-config-webpack@v4.9.6...v4.12.0)

Updates `tinybench` from 6.1.6 to 6.2.0
- [Release notes](https://github.com/tinylibs/tinybench/releases)
- [Commits](tinylibs/tinybench@v6.1.6...v6.2.0)

---
updated-dependencies:
- dependency-name: eslint-config-webpack
  dependency-version: 4.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: tinybench
  dependency-version: 6.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 16, 2026
@changeset-bot

changeset-bot Bot commented Sep 16, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 0d18d75

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@webpack
webpack Bot enabled auto-merge (squash) September 16, 2026 10:43
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedeslint-config-webpack@​4.9.6 ⏵ 4.12.091 +3100100 +1598 +3100
Updatedtinybench@​6.1.6 ⏵ 6.2.0100 +1100100 +197 +1100

View full report

@codspeed

codspeed Bot commented Sep 16, 2026

Copy link
Copy Markdown

Merging this PR will degrade performance by 0.87%

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

⚡ 15 improved benchmarks
❌ 8 regressed benchmarks
✅ 189 untouched benchmarks

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

Mode Benchmark BASE HEAD Efficiency
Memory replace-source memory: source() concatenates result 3.9 KB 43.9 KB -91.13%
Memory clear-cache memory: shared modules (no visited set — allocates per chunk) 5.3 KB 19.5 KB -73.01%
Memory compat-source memory: delegated source() + map() through wrapper 9.4 KB 30.1 KB -68.57%
Memory concat-source memory: source() concatenates children 198.6 KB 413.4 KB -51.97%
Memory size-only-source memory: new SizeOnlySource() 59.2 KB 91.6 KB -35.39%
Memory clear-cache memory: shared modules (visited set — single allocation) 392 B 584 B -32.88%
Memory concat-source memory: map({ columns: true }) composes child maps 2.6 MB 3.2 MB -18.87%
Memory clear-cache memory: unique tasks (clearCache maps + parsedMap, keep source) 3.6 MB 4.3 MB -15.34%
Memory source-map-source memory: new SourceMapSource(simple) 1,648 B 712 B ×2.3
Memory raw-source memory: new RawSource(buffer) 1,168 B 520 B ×2.2
Memory cached-source memory: warm sourceAndMap() returns cached references 465 B 209 B ×2.2
Memory raw-source memory: new RawSource(string) 1,040 B 520 B ×2
Memory source-map-source memory: new SourceMapSource(with inner map) 984 B 520 B +89.23%
Memory prefix-source memory: new PrefixSource() 1,440 B 920 B +56.52%
Memory source-map-source memory: map({ columns: true }) 1,200 B 776 B +54.64%
Memory cached-source memory: construct from cachedData (no warm-up) 584 B 392 B +48.98%
Memory compat-source memory: new CompatSource(sourceLike) 784 B 552 B +42.03%
Memory cached-source memory: cold sourceAndMap() populates all caches 201.4 KB 149.3 KB +34.92%
Memory replace-source memory: construct + 100 insertions 88.5 KB 66.6 KB +32.9%
Memory prefix-source memory: source() allocates rewritten string 1,184 B 920 B +28.7%
... ... ... ... ... ...

ℹ️ Only the first 20 benchmarks are displayed. Go to the app to view all benchmarks.

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.


Comparing dependabot/npm_and_yarn/dependencies-667e479795 (0d18d75) with main (9a6442a)

Open in CodSpeed

@webpack
webpack Bot merged commit 5905f85 into main Sep 16, 2026
34 of 35 checks passed
@webpack
webpack Bot deleted the dependabot/npm_and_yarn/dependencies-667e479795 branch September 16, 2026 11:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants