chore(deps-dev): bump the webpack group across 1 directory with 3 updates by dependabot[bot] · Pull Request #1489 · CycloneDX/cyclonedx-javascript-library

dependabot · 2026-07-08T09:27:17Z

Bumps the webpack group with 3 updates in the / directory: ts-loader, webpack and webpack-cli.

Updates ts-loader from 9.6.0 to 9.6.2

Release notes

v9.6.2

chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micromatch → picomatch - thanks @johnnyreilly

Officially ts-loader has supported 3.6.3+ versions of TypeScript. This change means that certain scenarios with older versions of TS will now certainly fail. If anyone is actually using these versions it would be surprising.

v9.6.1

fix: rspack support - thanks @johnnyreilly and @bhollis

Changelog

Sourced from ts-loader's changelog.

9.6.2

chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micromatch → picomatch - thanks @johnnyreilly

Officially ts-loader has supported 3.6.3+ versions of TypeScript. This change means that certain scenarios with older versions of TS will now certainly fail. If anyone is actually using these versions it would be surprising.

9.6.1

fix: rspack support - thanks @johnnyreilly and @bhollis

Commits

b347bb7 chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micro...
32d82e6 fix: rspack support (#1699)
6bd992e chore: Update GitHub Actions workflow for release
See full diff in compare view

Updates webpack from 5.107.2 to 5.110.3

Release notes

Sourced from webpack's releases.

v5.110.3

Patch Changes

Fix import() options, circular reexport severity and namespace writes. (by @alexander-akait in #21867)

Skip ESM interop when require() targets a module outside the concatenation. (by @hai-x in #21884)

Fix concatenated require() in a require.ensure callback or a computed request. (by @hai-x in #21907)

Keep optimization.minimize a boolean; its options move to minimizeOptions. (by @alexander-akait in #21886)

Fix mangled exports read through require() and a leaked internal reference. (by @alexander-akait in #21905)

Fix new on a default import of a wrapped CommonJS module. (by @alexander-akait in #21876)

Throw when a deferred namespace of an async module is forced while it evaluates. (by @alexander-akait in #21871)

Do not report a missing export for a name a side-effect-free barrel defers. (by @alexander-akait in #21874)

Fix queue, URL scheme, dotenv, HTTP module and persistent cache edge cases. (by @alexander-akait in #21901)

Evaluate a deferred import's async dependencies where the import sits. (by @alexander-akait in #21902)

Omit ambiguous export * names from the module namespace. (by @alexander-akait in #21878)

v5.110.2

Patch Changes

Fix analyzable ESM baking around cycles, mixed-served wasm and style url maps. (by @alexander-akait in #21851)

Minify more HTML and CSS shorthands, and cut two costs off printing. (by @alexander-akait in #21842)

Report a named import that is never read when it names a missing export. (by @alexander-akait in #21856)

Fix ESM circular reexports, cyclic const TDZ, and defer evaluation order. (by @alexander-akait in #21852)

Stop output.html emitting an unused JS chunk for each generated page. (by @alexander-akait in #21859)

Stop emitting the CSS chunk loading runtime when every CSS chunk is initial. (by @alexander-akait in #21862)

Strip a BOM a loader put on a string, and shift a source map that counted it. (by @alexander-akait in #21857)

v5.110.1

Patch Changes

Fix a capture-group-less snapshot.managedPaths RegExp; speed up cache writes. (by @alexander-akait in #21843)

Throw SyntaxError, or WebAssembly.CompileError, from an unparsable module. (by @alexander-akait in #21847)

Accept the optimization.minimize: true shorthand set by a plugin in apply(). (by @AgentEnder in #21845)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.110.3

Patch Changes

Fix import() options, circular reexport severity and namespace writes. (by @alexander-akait in #21867)

Skip ESM interop when require() targets a module outside the concatenation. (by @hai-x in #21884)

Fix concatenated require() in a require.ensure callback or a computed request. (by @hai-x in #21907)

Keep optimization.minimize a boolean; its options move to minimizeOptions. (by @alexander-akait in #21886)

Fix mangled exports read through require() and a leaked internal reference. (by @alexander-akait in #21905)

Fix new on a default import of a wrapped CommonJS module. (by @alexander-akait in #21876)

Throw when a deferred namespace of an async module is forced while it evaluates. (by @alexander-akait in #21871)

Do not report a missing export for a name a side-effect-free barrel defers. (by @alexander-akait in #21874)

Fix queue, URL scheme, dotenv, HTTP module and persistent cache edge cases. (by @alexander-akait in #21901)

Evaluate a deferred import's async dependencies where the import sits. (by @alexander-akait in #21902)

Omit ambiguous export * names from the module namespace. (by @alexander-akait in #21878)

5.110.2

Patch Changes

Fix analyzable ESM baking around cycles, mixed-served wasm and style url maps. (by @alexander-akait in #21851)

Minify more HTML and CSS shorthands, and cut two costs off printing. (by @alexander-akait in #21842)

Report a named import that is never read when it names a missing export. (by @alexander-akait in #21856)

Fix ESM circular reexports, cyclic const TDZ, and defer evaluation order. (by @alexander-akait in #21852)

Stop output.html emitting an unused JS chunk for each generated page. (by @alexander-akait in #21859)

Stop emitting the CSS chunk loading runtime when every CSS chunk is initial. (by @alexander-akait in #21862)

Strip a BOM a loader put on a string, and shift a source map that counted it. (by @alexander-akait in #21857)

5.110.1

Patch Changes

Fix a capture-group-less snapshot.managedPaths RegExp; speed up cache writes. (by @alexander-akait in #21843)

... (truncated)

Commits

a2d7b9c chore(release): new release (#21868)
d6e86c0 test(test262): assert two more errors webpack reports at build time (#21906)
6a963fe fix: keep require() into a concatenation substituted and unmangled (#21905)
e1eb099 fix: concatenated require() in require.ensure callback or computed reques...
8d1ab53 chore: escape literal NUL bytes in Compilation.js (#21904)
5e6c4d7 fix(defer): evaluate async dependencies where the deferred import sits (#21902)
7ea4fa3 fix: handle audited correctness edge cases (#21901)
c50713c fix: keep code generation data per result instead of per NormalModule (#21900)
ebd3be4 docs: document the post-minor stabilization week and out-of-band releases (#2...
80be700 fix(config): keep the resolved optimization.minimize a boolean (#21886)
Additional commits viewable in compare view

Updates webpack-cli from 7.0.3 to 7.2.3

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.2.3

Patch Changes

fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @bjohansebas in #4834)

feat: allow toml@5 as a peer dependency for TOML configuration files (by @alexander-akait in #4837)

webpack-cli@7.2.2

Patch Changes

perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @bjohansebas in #4818)

webpack-cli@7.2.1

Patch Changes

fix: CLIPlugin dynamic import interop under Bun (by @alexander-akait in #4799)

webpack-cli@7.2.0

Minor Changes

feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @bjohansebas in #4793)

Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @alexander-akait in #4796)

webpack-cli@7.1.0

Minor Changes

feat(cli): refresh the --help output using commander's configureHelp API — branded headers, section dividers, colorized terms and a clearer footer. Colors and chrome collapse to plain text when output is piped or --no-color is used, so scripts keep working. (by @alexander-akait in #4779)

feat: support .json5, .yaml/.yml and .toml configuration files by parsing them directly, with the parser package (json5, js-yaml, toml) installed on demand by the user and declared as optional peerDependencies so the parsers resolve correctly under Yarn PnP (by @alexander-akait in #4777)

Changelog

Sourced from webpack-cli's changelog.

7.2.3

Patch Changes

fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @bjohansebas in #4834)

feat: allow toml@5 as a peer dependency for TOML configuration files (by @alexander-akait in #4837)

7.2.2

Patch Changes

perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @bjohansebas in #4818)

7.2.1

Patch Changes

fix: CLIPlugin dynamic import interop under Bun (by @alexander-akait in #4799)

7.2.0

Minor Changes

feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @bjohansebas in #4793)

Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @alexander-akait in #4796)

7.1.0

Minor Changes

feat(cli): refresh the --help output using commander's configureHelp API — branded headers, section dividers, colorized terms and a clearer footer. Colors and chrome collapse to plain text when output is piped or --no-color is used, so scripts keep working. (by @alexander-akait in #4779)

feat: support .json5, .yaml/.yml and .toml configuration files by parsing them directly, with the parser package (json5, js-yaml, toml) installed on demand by the user and declared as optional peerDependencies so the parsers resolve correctly under Yarn PnP (by @alexander-akait in #4777)

Commits

7d40e4e chore(release): new release (#4839)
1f6593a ci: use the input names changesets/action v2 expects (#4838)
99cfc4f build(deps): update dependencies (#4837)
11be634 feat(create-webpack-app): stop asking about HTML and CSS (#4836)
a2418aa feat(create-webpack-app): use webpack's native CSS and HTML support in init t...
3664b9d chore: update webpack-dev-server to v6 and test against v5 and v6 (#4834)
ce1a219 ci: node 26 (#4763)
0cfc077 chore(deps): bump changesets/action in the dependencies group (#4831)
ef262eb chore(deps): bump changesets/action in the dependencies group (#4830)
d90f5ab chore: add gitignore to ignore autogenerated build & fix codecov option (#4828)
Additional commits viewable in compare view

codacy-production · 2026-07-08T09:28:11Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results

Complexity 0

Duplication 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

read-the-docs-community · 2026-08-10T11:04:08Z

Documentation build overview

📚 CycloneDX JavaScript Library | 🛠️ Build #34649907 | 📁 Comparing 639178c against latest (6a1b76a)

🔍 Preview build

6 files changed · ± 6 modified

± Modified

jkowalleck · 2026-08-17T10:40:40Z

@dependabot rebase

…ates Bumps the webpack group with 3 updates in the / directory: [ts-loader](https://github.com/TypeStrong/ts-loader), [webpack](https://github.com/webpack/webpack) and [webpack-cli](https://github.com/webpack/webpack-cli). Updates `ts-loader` from 9.6.0 to 9.6.2 - [Release notes](https://github.com/TypeStrong/ts-loader/releases) - [Changelog](https://github.com/TypeStrong/ts-loader/blob/main/CHANGELOG.md) - [Commits](TypeStrong/ts-loader@v9.6.0...v9.6.2) Updates `webpack` from 5.107.2 to 5.110.3 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.107.2...v5.110.3) Updates `webpack-cli` from 7.0.3 to 7.2.3 - [Release notes](https://github.com/webpack/webpack-cli/releases) - [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.0.3...webpack-cli@7.2.3) --- updated-dependencies: - dependency-name: ts-loader dependency-version: 9.6.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: webpack - dependency-name: webpack dependency-version: 5.108.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: webpack - dependency-name: webpack-cli dependency-version: 7.2.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: webpack ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 8, 2026

dependabot Bot requested a review from a team as a code owner July 8, 2026 09:27

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 8, 2026

dependabot Bot mentioned this pull request Jul 8, 2026

chore(deps-dev): bump the webpack group across 1 directory with 3 updates #1483

Closed

dependabot Bot force-pushed the dependabot/npm_and_yarn/webpack-1b8ded6555 branch from ae6784e to b833f33 Compare July 11, 2026 11:32

dependabot Bot force-pushed the dependabot/npm_and_yarn/webpack-1b8ded6555 branch from b833f33 to 88a3bac Compare August 10, 2026 10:52

dependabot Bot force-pushed the dependabot/npm_and_yarn/webpack-1b8ded6555 branch from 88a3bac to 7b6d6e5 Compare August 15, 2026 11:32

dependabot Bot force-pushed the dependabot/npm_and_yarn/webpack-1b8ded6555 branch 2 times, most recently from a12b8d4 to 41716e9 Compare August 22, 2026 11:32

dependabot Bot force-pushed the dependabot/npm_and_yarn/webpack-1b8ded6555 branch from 41716e9 to 57a9aff Compare August 29, 2026 11:32

dependabot Bot force-pushed the dependabot/npm_and_yarn/webpack-1b8ded6555 branch from 57a9aff to 639178c Compare September 19, 2026 11:33

Navigation Menu

Uh oh!

chore(deps-dev): bump the webpack group across 1 directory with 3 updates - #1489

chore(deps-dev): bump the webpack group across 1 directory with 3 updates#1489
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webpack-1b8ded6555

dependabot Bot commented on behalf of github Jul 8, 2026 •

edited

Loading

Uh oh!

codacy-production Bot commented Jul 8, 2026

Uh oh!

read-the-docs-community Bot commented Aug 10, 2026 •

edited

Loading

Uh oh!

jkowalleck commented Aug 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v9.6.2

v9.6.1

9.6.2

9.6.1

v5.110.3

Patch Changes

v5.110.2

Patch Changes

v5.110.1

Patch Changes

5.110.3

Patch Changes

5.110.2

Patch Changes

5.110.1

Patch Changes

webpack-cli@7.2.3

Patch Changes

webpack-cli@7.2.2

Patch Changes

webpack-cli@7.2.1

Patch Changes

webpack-cli@7.2.0

Minor Changes

webpack-cli@7.1.0

Minor Changes

7.2.3

Patch Changes

7.2.2

Patch Changes

7.2.1

Patch Changes

7.2.0

Minor Changes

7.1.0

Minor Changes

Uh oh!

codacy-production Bot commented Jul 8, 2026

Up to standards ✅

Uh oh!

read-the-docs-community Bot commented Aug 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Documentation build overview

Uh oh!

jkowalleck commented Aug 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 8, 2026 •

edited

Loading

read-the-docs-community Bot commented Aug 10, 2026 •

edited

Loading