Skip to content

Bump the webpack group across 1 directory with 6 updates#15964

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webpack-275d4bdb25
Open

Bump the webpack group across 1 directory with 6 updates#15964
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webpack-275d4bdb25

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 22, 2026

Bumps the webpack group with 6 updates in the / directory:

Package From To
css-loader 7.1.2 7.1.4
swc-loader 0.2.6 0.2.7
webpack-bundle-analyzer 4.10.2 5.3.0
webpack-cli 6.0.1 7.0.2
webpack-dev-middleware 7.4.5 8.0.3
webpack-dev-server 5.2.2 5.2.4

Updates css-loader from 7.1.2 to 7.1.4

Release notes

Sourced from css-loader's releases.

v7.1.4

7.1.4 (2026-02-16)

Bug Fixes

  • update peer dependency for @​rspack/core v2 (#1652) (aeddefe)

v7.1.3

7.1.3 (2026-01-27)

Bug Fixes

Changelog

Sourced from css-loader's changelog.

7.1.4 (2026-02-16)

Bug Fixes

  • update peer dependency for @​rspack/core v2 (#1652) (aeddefe)

7.1.3 (2026-01-27)

Bug Fixes

Commits

Updates swc-loader from 0.2.6 to 0.2.7

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for swc-loader since your current version.


Updates webpack-bundle-analyzer from 4.10.2 to 5.3.0

Release notes

Sourced from webpack-bundle-analyzer's releases.

v5.3.0

Minor Changes

Patch Changes

Changelog

Sourced from webpack-bundle-analyzer's changelog.

5.3.0

Minor Changes

Patch Changes

5.2.0

5.1.1

5.1.0

5.0.1

  • Bug Fix
    • Restore @babel/plugin-transform-class-properties to fix HTML report (#682 by @​valscion)

5.0.0

  • Breaking Change

  • Improvement

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-bundle-analyzer since your current version.


Updates webpack-cli from 6.0.1 to 7.0.2

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.0.2

Patch Changes

webpack-cli@7.0.1

Patch Changes

webpack-cli@7.0.0

Major Changes

  • The minimum supported version of Node.js is 20.9.0. (by @​alexander-akait in #4677)

  • Use dynamic import to load webpack.config.js, fallback to interpret only when configuration can't be load by dynamic import. Using dynamic imports allows you to take advantage of Node.js's built-in TypeScript support. (by @​alexander-akait in #4677)

  • Removed the --node-env argument in favor of the --config-node-env argument. (by @​alexander-akait in #4677)

  • The version command only output versions right now. (by @​alexander-akait in #4677)

  • Removed deprecated API, no action required unless you use import cli from "webpack-cli";/const cli = require("webpack-cli");. (by @​alexander-akait in #4677)

Patch Changes

Changelog

Sourced from webpack-cli's changelog.

7.0.2

Patch Changes

7.0.1

Patch Changes

7.0.0

Major Changes

  • The minimum supported version of Node.js is 20.9.0. (by @​alexander-akait in #4677)

  • Use dynamic import to load webpack.config.js, fallback to interpret only when configuration can't be load by dynamic import. Using dynamic imports allows you to take advantage of Node.js's built-in TypeScript support. (by @​alexander-akait in #4677)

  • Removed the --node-env argument in favor of the --config-node-env argument. (by @​alexander-akait in #4677)

  • The version command only output versions right now. (by @​alexander-akait in #4677)

  • Removed deprecated API, no action required unless you use import cli from "webpack-cli";/const cli = require("webpack-cli");. (by @​alexander-akait in #4677)

Patch Changes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-cli since your current version.


Updates webpack-dev-middleware from 7.4.5 to 8.0.3

Release notes

Sourced from webpack-dev-middleware's releases.

v8.0.3

Patch Changes

  • Respect req.url when modified by middleware such as connect-history-api-fallback. (by @​bjohansebas in #2304)

v8.0.2

Patch Changes

v8.0.1

Patch Changes

v8.0.0

Major Changes

  • The getFilenameFromUrl function is now asynchronous, returning a Promise that resolves to the object with the found filename (or undefined if the file was not found) or throws an error if the URL cannot be processed. Additionally, the object contains the extra property with stats (file system stats) and outputFileSystem (output file system where file was found) properties. (by @​alexander-akait in #2284)

  • Minimum supported Node.js version is 20.9.0. (by @​alexander-akait in #2284)

  • Minimum supported webpack version is 5.101.0. (by @​alexander-akait in #2284)

Minor Changes

  • Added support for plugin usage, useful when the middleware will be used as a webpack plugin (no stats output, no extra actions). (by @​alexander-akait in #2284)

  • Added the forwardError option to enable error forwarding to next middleware. (by @​alexander-akait in #2284)

  • Enable cacheImmutable by default for immutable assets. (by @​alexander-akait in #2284)

Patch Changes

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

7.4.5 (2025-09-24)

Bug Fixes

7.4.4 (2025-09-23)

Bug Fixes

... (truncated)

Changelog

Sourced from webpack-dev-middleware's changelog.

8.0.3

Patch Changes

  • Respect req.url when modified by middleware such as connect-history-api-fallback. (by @​bjohansebas in #2304)

8.0.2

Patch Changes

8.0.1

Patch Changes

8.0.0

Major Changes

  • The getFilenameFromUrl function is now asynchronous, returning a Promise that resolves to the object with the found filename (or undefined if the file was not found) or throws an error if the URL cannot be processed. Additionally, the object contains the extra property with stats (file system stats) and outputFileSystem (output file system where file was found) properties. (by @​alexander-akait in #2284)

  • Minimum supported Node.js version is 20.9.0. (by @​alexander-akait in #2284)

  • Minimum supported webpack version is 5.101.0. (by @​alexander-akait in #2284)

Minor Changes

  • Added support for plugin usage, useful when the middleware will be used as a webpack plugin (no stats output, no extra actions). (by @​alexander-akait in #2284)

  • Added the forwardError option to enable error forwarding to next middleware. (by @​alexander-akait in #2284)

  • Enable cacheImmutable by default for immutable assets. (by @​alexander-akait in #2284)

Patch Changes

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

Commits
  • 6fcaa48 chore(release): new release (#2305)
  • 21cd376 chore(deps): update typescript (#2306)
  • 8493c45 fix: respect req.url when modified
  • 7c658fe chore(deps-dev): bump the dependencies group with 2 updates (#2302)
  • dedf0a4 chore(deps): bump the dependencies group across 1 directory with 2 updates
  • 381828e chore(deps): bump picomatch (#2300)
  • 6eee395 chore(deps): bump the dependencies group with 4 updates (#2297)
  • f79af6a chore(release): new release
  • ebe8b57 chore: adding changelog
  • dfebd57 fix: rspack compatibility more.
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-dev-middleware since your current version.


Updates webpack-dev-server from 5.2.2 to 5.2.4

Release notes

Sourced from webpack-dev-server's releases.

v5.2.4

5.2.4 (2026-05-11)

Bug Fixes

  • set Cross-Origin-Resource-Policy header to prevent source code theft over HTTP

v5.2.3

5.2.3 (2026-01-12)

Bug Fixes

  • add cause for errorObject (#5518) (37b033d)
  • compatibility with event target and universal target and lazy compilation (574026c)
  • overlay: add ESC key to dismiss overlay (#5598) (f91baa8)
  • progress indicator styles (#5557) (41a53a1)
  • upgrade selfsigned to v5
Changelog

Sourced from webpack-dev-server's changelog.

5.2.4 (2026-05-11)

Bug Fixes

  • set Cross-Origin-Resource-Policy header to prevent source code theft over HTTP

5.2.3 (2026-01-12)

Bug Fixes

  • add cause for errorObject (#5518) (37b033d)
  • compatibility with event target and universal target and lazy compilation (574026c)
  • overlay: add ESC key to dismiss overlay (#5598) (f91baa8)
  • progress indicator styles (#5557) (41a53a1)
  • upgrade selfsigned to v5
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the webpack group across 1 directory with 6 updates
82bf33c 
Bumps the webpack group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [css-loader](https://github.com/webpack/css-loader) | `7.1.2` | `7.1.4` |
| [swc-loader](https://github.com/swc-project/pkgs) | `0.2.6` | `0.2.7` |
| [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer) | `4.10.2` | `5.3.0` |
| [webpack-cli](https://github.com/webpack/webpack-cli) | `6.0.1` | `7.0.2` |
| [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `7.4.5` | `8.0.3` |
| [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `5.2.2` | `5.2.4` |



Updates `css-loader` from 7.1.2 to 7.1.4
- [Release notes](https://github.com/webpack/css-loader/releases)
- [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md)
- [Commits](webpack/css-loader@v7.1.2...v7.1.4)

Updates `swc-loader` from 0.2.6 to 0.2.7
- [Commits](https://github.com/swc-project/pkgs/commits)

Updates `webpack-bundle-analyzer` from 4.10.2 to 5.3.0
- [Release notes](https://github.com/webpack/webpack-bundle-analyzer/releases)
- [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-bundle-analyzer@v4.10.2...v5.3.0)

Updates `webpack-cli` from 6.0.1 to 7.0.2
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@6.0.1...webpack-cli@7.0.2)

Updates `webpack-dev-middleware` from 7.4.5 to 8.0.3
- [Release notes](https://github.com/webpack/webpack-dev-middleware/releases)
- [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-dev-middleware@v7.4.5...v8.0.3)

Updates `webpack-dev-server` from 5.2.2 to 5.2.4
- [Release notes](https://github.com/webpack/webpack-dev-server/releases)
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-dev-server@v5.2.2...v5.2.4)

---
updated-dependencies:
- dependency-name: css-loader
  dependency-version: 7.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webpack
- dependency-name: swc-loader
  dependency-version: 0.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webpack
- dependency-name: webpack-bundle-analyzer
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: webpack
- dependency-name: webpack-cli
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: webpack
- dependency-name: webpack-dev-middleware
  dependency-version: 8.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: webpack
- dependency-name: webpack-dev-server
  dependency-version: 5.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webpack
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 22, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 22, 2026 19:16
@dependabot dependabot Bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 22, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 22, 2026

Hello 👋! When you're ready to run Chromatic, please apply the run_chromatic label to this PR.

You will need to reapply the label each time you want to run Chromatic.

Click here to see the Chromatic project.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants