Skip to content

chore(deps-dev): bump the dependencies group with 6 updates - #677

Merged
webpack[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-e560816716
Sep 21, 2026
Merged

chore(deps-dev): bump the dependencies group with 6 updates#677
webpack[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-e560816716

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 6 updates:

Package From To
@changesets/cli 3.0.2 3.0.3
cspell 10.3.0 10.3.3
eslint-config-webpack 4.9.6 4.14.0
memfs 4.75.0 4.78.1
prettier 3.9.6 3.9.8
webpack 5.110.3 5.111.0

Updates @changesets/cli from 3.0.2 to 3.0.3

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​3.0.3

Patch Changes

  • #2297 3f163da Thanks @​Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

  • #2276 ca9d110 Thanks @​Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

  • Updated dependencies [3f163da, bfe9050, e522996]:

    • @​changesets/apply-release-plan@​8.1.1
    • @​changesets/config@​4.0.1
Changelog

Sourced from @​changesets/cli's changelog.

3.0.3

Patch Changes

  • #2297 3f163da Thanks @​Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

  • #2276 ca9d110 Thanks @​Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

  • Updated dependencies [3f163da, bfe9050, e522996]:

    • @​changesets/apply-release-plan@​8.1.1
    • @​changesets/config@​4.0.1
Commits

Updates cspell from 10.3.0 to 10.3.3

Release notes

Sourced from cspell's releases.

v10.3.3

Fixes

fix: Add --json option to check text for use with AI (#9254)

This pull request adds support for a --json output mode to the check CLI command, enabling results to be emitted as structured JSON per file. It also introduces comprehensive test coverage for the new JSON output behavior, including error handling and exit code logic.

CLI Enhancements:

  • Added a --json flag to the check command, allowing users to receive results in JSON format. This includes proper handling of multiple files and error cases, such as missing files. [1] [2]
  • Updated the exit code logic to work with both standard and JSON output, respecting the --no-exit-code flag. [1] [2]

Implementation Details:

  • Introduced separate processing functions: processRequestAnsi for standard output and processRequestJSON for JSON output, with the latter aggregating results and errors per file. [1] [2]
  • Added a helper function to detect missing files and report them as JSON errors.

Testing Improvements:

  • Expanded CLI test coverage to include various --json scenarios, such as files with spelling errors, missing files, and the interaction with --no-exit-code. [1] [2]
  • Added utility functions and interfaces in tests to parse and validate the JSON output.

fix: Mark ParsedTags as read only. (#9253)

This pull request makes a small but important change to the ParsedText interface in several files, improving type safety by marking the tags property as a read-only type. This ensures that the tags associated with a parsed text segment cannot be modified after creation.

  • Updated the tags property in the ParsedText interface to use Readonly<ParsedTags> instead of ParsedTags, making the tags immutable in the following files:
    • packages/cspell-types/api/Parser/index.d.mts
    • packages/cspell-types/api/index.d.mts
    • packages/cspell-types/src/Parser/parser.ts

fix: Make sure Parser and DocumentParser can be used together. (#9252)

This pull request enhances the parser interface definitions in the cspell-types package to provide better flexibility and clarity for parser implementations. The main changes introduce optional parseDocument and parse methods to both the Parser and DocumentParser interfaces, across both type declaration and source files.

Parser interface enhancements:

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.3.3 (2026-09-16)

Fixes

fix: Add --json option to check text for use with AI (#9254)

This pull request adds support for a --json output mode to the check CLI command, enabling results to be emitted as structured JSON per file. It also introduces comprehensive test coverage for the new JSON output behavior, including error handling and exit code logic.

CLI Enhancements:

  • Added a --json flag to the check command, allowing users to receive results in JSON format. This includes proper handling of multiple files and error cases, such as missing files. [1] [2]
  • Updated the exit code logic to work with both standard and JSON output, respecting the --no-exit-code flag. [1] [2]

Implementation Details:

  • Introduced separate processing functions: processRequestAnsi for standard output and processRequestJSON for JSON output, with the latter aggregating results and errors per file. [1] [2]
  • Added a helper function to detect missing files and report them as JSON errors.

Testing Improvements:

  • Expanded CLI test coverage to include various --json scenarios, such as files with spelling errors, missing files, and the interaction with --no-exit-code. [1] [2]
  • Added utility functions and interfaces in tests to parse and validate the JSON output.

fix: Mark ParsedTags as read only. (#9253)

This pull request makes a small but important change to the ParsedText interface in several files, improving type safety by marking the tags property as a read-only type. This ensures that the tags associated with a parsed text segment cannot be modified after creation.

  • Updated the tags property in the ParsedText interface to use Readonly<ParsedTags> instead of ParsedTags, making the tags immutable in the following files:
    • packages/cspell-types/api/Parser/index.d.mts
    • packages/cspell-types/api/index.d.mts
    • packages/cspell-types/src/Parser/parser.ts

fix: Make sure Parser and DocumentParser can be used together. (#9252)

... (truncated)

Commits

Updates eslint-config-webpack from 4.9.6 to 4.14.0

Release notes

Sourced from eslint-config-webpack's releases.

v4.14.0

Minor Changes

v4.13.0

Minor Changes

  • Report a minLength other than 1 and a non-primitive enum value in webpack/valid-schema. (by @​alexander-akait in #201)

v4.12.0

Minor Changes

  • Add the webpack/inherit-jsdoc rule and the webpack/types config. (by @​alexander-akait in #198)

  • Add webpack/prefer-import-tag, webpack/no-duplicate-import-tag and webpack/no-unused-import-tag, which hold JSDoc type imports to a single @import per module with no unused bindings. (by @​avivkeller in #187)

v4.11.0

Minor Changes

  • Add the webpack/format-schema rule, porting webpack/tooling's format-schemas with an ESLint auto-fix, and share one keyword table with webpack/valid-schema so allOf is no longer reported as unknown. (by @​alexander-akait in #195)

Patch Changes

  • Upgrade @changesets/cli to v3 so the release workflow works with changesets/action v2. (by @​alexander-akait in #196)

v4.10.0

Minor Changes

  • Add the webpack/valid-schema rule and the webpack/schemas config, porting the checks from webpack/tooling's schemas-lint and making the allowed keywords configurable. (by @​alexander-akait in #192)
Changelog

Sourced from eslint-config-webpack's changelog.

4.14.0

Minor Changes

4.13.0

Minor Changes

  • Report a minLength other than 1 and a non-primitive enum value in webpack/valid-schema. (by @​alexander-akait in #201)

4.12.0

Minor Changes

  • Add the webpack/inherit-jsdoc rule and the webpack/types config. (by @​alexander-akait in #198)

  • Add webpack/prefer-import-tag, webpack/no-duplicate-import-tag and webpack/no-unused-import-tag, which hold JSDoc type imports to a single @import per module with no unused bindings. (by @​avivkeller in #187)

4.11.0

Minor Changes

  • Add the webpack/format-schema rule, porting webpack/tooling's format-schemas with an ESLint auto-fix, and share one keyword table with webpack/valid-schema so allOf is no longer reported as unknown. (by @​alexander-akait in #195)

Patch Changes

  • Upgrade @changesets/cli to v3 so the release workflow works with changesets/action v2. (by @​alexander-akait in #196)

4.10.0

Minor Changes

  • Add the webpack/valid-schema rule and the webpack/schemas config, porting the checks from webpack/tooling's schemas-lint and making the allowed keywords configurable. (by @​alexander-akait in #192)
Commits

Updates memfs from 4.75.0 to 4.78.1

Release notes

Sourced from memfs's releases.

Release v4.78.1

What's Changed

Full Changelog: streamich/memfs@v4.78.0...v4.78.1

Release v4.78.0

What's Changed

Full Changelog: streamich/memfs@v4.77.0...v4.78.0

Release v4.77.0

What's Changed

Full Changelog: streamich/memfs@v4.76.0...v4.77.0

Release v4.76.0

What's Changed

Full Changelog: streamich/memfs@v4.75.0...v4.76.0

Commits
  • bbcea18 chore: release v4.78.1
  • 8eb7822 Merge pull request #1295 from streamich/fix-fsa-permission-return
  • 0f9bbae fix: 🐛 return correct shape from .queryPermission()
  • 3f944e5 chore: release v4.78.0
  • 7d0b4b1 Merge pull request #1294 from streamich/improve-cp
  • be8ae19 test: 💍 handle Windows case
  • 2836970 feat: 🎸 improve cp edge cases
  • 27828a3 fix: 🐛 extend cp guard to all parents
  • 300c8da fix: 🐛 correctly concatenate path
  • 1f54d7b fix: 🐛 make trailing args optional
  • Additional commits viewable in compare view

Updates prettier from 3.9.6 to 3.9.8

Release notes

Sourced from prettier's releases.

3.9.8

  • Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

  • Support Angular 22.2
  • Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

<!-- Input -->
- [x] short first line.
  second paragraph at six spaces that wraps
  onto another line here.

<!-- Prettier 3.9.6 -->

 
short first line.
second paragraph at six spaces that wraps
    onto another line here.



<!-- Prettier 3.9.7 -->

 
short first line.
second paragraph at six spaces that wraps
onto another line here.

JavaScript: Fix embedded template literal idempotency (#19725 by @​fisker)

... (truncated)

Commits

Updates webpack from 5.110.3 to 5.111.0

Release notes

Sourced from webpack's releases.

v5.111.0

Minor Changes

Patch Changes

... (truncated)

Changelog

Sourced from webpack's changelog.

5.111.0

Minor Changes

Patch Changes

... (truncated)

Commits
  • 9256118 chore(release): new release (#21914)
  • 3ef9663 refactor: consolidate getter and value format of export fragment (#22100)
  • aff7c4c perf: emit less chunk-loading runtime (#22094)
  • e954b81 build(html): sweep the HTML printer for spelling-dependent output (#22097)
  • da4ad13 fix(css): replace a @​value named in an at-rule prelude only once (#22036)
  • df72840 perf(runtime): test the spec namespace cache slot for truthiness (#22098)
  • 4c80c99 fix(html): minify an attribute by what it says, not how it was spelled (#22095)
  • f6fd097 fix: release stale compilation data from nested children and idle watches (#2...
  • 55c9808 refactor(js): own the ECMAScript parser and drop the acorn dependency (#22042)
  • e1ab6f2 fix(html): escape a text run the tag after it would fuse with (#22086)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the dependencies group with 6 updates
1047d03 
Bumps the dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `3.0.2` | `3.0.3` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.3.0` | `10.3.3` |
| [eslint-config-webpack](https://github.com/webpack/eslint-config-webpack) | `4.9.6` | `4.14.0` |
| [memfs](https://github.com/streamich/memfs) | `4.75.0` | `4.78.1` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.8` |
| [webpack](https://github.com/webpack/webpack) | `5.110.3` | `5.111.0` |


Updates `@changesets/cli` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@3.0.3/packages/cli)

Updates `cspell` from 10.3.0 to 10.3.3
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.3.3/packages/cspell)

Updates `eslint-config-webpack` from 4.9.6 to 4.14.0
- [Release notes](https://github.com/webpack/eslint-config-webpack/releases)
- [Changelog](https://github.com/webpack/eslint-config-webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/eslint-config-webpack@v4.9.6...v4.14.0)

Updates `memfs` from 4.75.0 to 4.78.1
- [Release notes](https://github.com/streamich/memfs/releases)
- [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md)
- [Commits](streamich/memfs@v4.75.0...v4.78.1)

Updates `prettier` from 3.9.6 to 3.9.8
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.8)

Updates `webpack` from 5.110.3 to 5.111.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.110.3...v5.111.0)

---
updated-dependencies:
- dependency-name: "@changesets/cli"
  dependency-version: 3.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: cspell
  dependency-version: 10.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: eslint-config-webpack
  dependency-version: 4.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: memfs
  dependency-version: 4.78.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: prettier
  dependency-version: 3.9.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: webpack
  dependency-version: 5.111.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 21, 2026
@changeset-bot

changeset-bot Bot commented Sep 21, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 1047d03

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@webpack
webpack Bot enabled auto-merge (squash) September 21, 2026 06:53
@socket-security

socket-security Bot commented Sep 21, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​changesets/​cli@​3.0.2 ⏵ 3.0.399 +110074 +195 -1100
Updatedeslint-config-webpack@​4.9.6 ⏵ 4.14.091 +3100100 +1599 +4100
Updatedmemfs@​4.75.0 ⏵ 4.78.198 +110093 +196 +1100
Updatedwebpack@​5.110.3 ⏵ 5.111.093 +110093 +199 +2100
Updatedcspell@​10.3.0 ⏵ 10.3.398 +110010096 +1100
Updatedprettier@​3.9.6 ⏵ 3.9.89810097 +198100

View full report

@webpack
webpack Bot merged commit f8d395e into main Sep 21, 2026
37 checks passed
@webpack
webpack Bot deleted the dependabot/npm_and_yarn/dependencies-e560816716 branch September 21, 2026 06:56
@codspeed

codspeed Bot commented Sep 21, 2026

Copy link
Copy Markdown

Merging this PR will degrade performance by 97.23%

❌ 1 regressed benchmark
✅ 141 untouched benchmarks

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

Mode Benchmark BASE HEAD Efficiency
❌ Memory extensions-many: 6-extension list (warm) 2.8 KB 100.4 KB -97.23%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.

Comparing dependabot/npm_and_yarn/dependencies-e560816716 (1047d03) with main (e1bdb75)

Open in CodSpeed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@webpack webpack[bot] webpack[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants