[dependabot]

Bumps the npm group in /js with 2 updates: webpack and webpack-cli.

Updates webpack from 5.110.1 to 5.110.3

Release notes

Sourced from webpack's releases.

v5.110.3

Patch Changes

• Fix import() options, circular reexport severity and namespace writes. (by @​alexander-akait in #21867)

• Skip ESM interop when require() targets a module outside the concatenation. (by @​hai-x in #21884)

• Fix concatenated require() in a require.ensure callback or a computed request. (by @​hai-x in #21907)

• Keep optimization.minimize a boolean; its options move to minimizeOptions. (by @​alexander-akait in #21886)

• Fix mangled exports read through require() and a leaked internal reference. (by @​alexander-akait in #21905)

• Fix new on a default import of a wrapped CommonJS module. (by @​alexander-akait in #21876)

• Throw when a deferred namespace of an async module is forced while it evaluates. (by @​alexander-akait in #21871)

• Do not report a missing export for a name a side-effect-free barrel defers. (by @​alexander-akait in #21874)

• Fix queue, URL scheme, dotenv, HTTP module and persistent cache edge cases. (by @​alexander-akait in #21901)

• Evaluate a deferred import's async dependencies where the import sits. (by @​alexander-akait in #21902)

• Omit ambiguous export * names from the module namespace. (by @​alexander-akait in #21878)

v5.110.2

Patch Changes

• Fix analyzable ESM baking around cycles, mixed-served wasm and style url maps. (by @​alexander-akait in #21851)

• Minify more HTML and CSS shorthands, and cut two costs off printing. (by @​alexander-akait in #21842)

• Report a named import that is never read when it names a missing export. (by @​alexander-akait in #21856)

• Fix ESM circular reexports, cyclic const TDZ, and defer evaluation order. (by @​alexander-akait in #21852)

• Stop output.html emitting an unused JS chunk for each generated page. (by @​alexander-akait in #21859)

• Stop emitting the CSS chunk loading runtime when every CSS chunk is initial. (by @​alexander-akait in #21862)

• Strip a BOM a loader put on a string, and shift a source map that counted it. (by @​alexander-akait in #21857)

Changelog

Sourced from webpack's changelog.

5.110.3

Patch Changes

• Fix import() options, circular reexport severity and namespace writes. (by @​alexander-akait in #21867)

• Skip ESM interop when require() targets a module outside the concatenation. (by @​hai-x in #21884)

• Fix concatenated require() in a require.ensure callback or a computed request. (by @​hai-x in #21907)

• Keep optimization.minimize a boolean; its options move to minimizeOptions. (by @​alexander-akait in #21886)

• Fix mangled exports read through require() and a leaked internal reference. (by @​alexander-akait in #21905)

• Fix new on a default import of a wrapped CommonJS module. (by @​alexander-akait in #21876)

• Throw when a deferred namespace of an async module is forced while it evaluates. (by @​alexander-akait in #21871)

• Do not report a missing export for a name a side-effect-free barrel defers. (by @​alexander-akait in #21874)

• Fix queue, URL scheme, dotenv, HTTP module and persistent cache edge cases. (by @​alexander-akait in #21901)

• Evaluate a deferred import's async dependencies where the import sits. (by @​alexander-akait in #21902)

• Omit ambiguous export * names from the module namespace. (by @​alexander-akait in #21878)

5.110.2

Patch Changes

• Fix analyzable ESM baking around cycles, mixed-served wasm and style url maps. (by @​alexander-akait in #21851)

• Minify more HTML and CSS shorthands, and cut two costs off printing. (by @​alexander-akait in #21842)

• Report a named import that is never read when it names a missing export. (by @​alexander-akait in #21856)

• Fix ESM circular reexports, cyclic const TDZ, and defer evaluation order. (by @​alexander-akait in #21852)

• Stop output.html emitting an unused JS chunk for each generated page. (by @​alexander-akait in #21859)

• Stop emitting the CSS chunk loading runtime when every CSS chunk is initial. (by @​alexander-akait in #21862)

• Strip a BOM a loader put on a string, and shift a source map that counted it. (by @​alexander-akait in #21857)

Commits

• a2d7b9c chore(release): new release (#21868)
• d6e86c0 test(test262): assert two more errors webpack reports at build time (#21906)
• 6a963fe fix: keep require() into a concatenation substituted and unmangled (#21905)
• e1eb099 fix: concatenated require() in require.ensure callback or computed reques...
• 8d1ab53 chore: escape literal NUL bytes in Compilation.js (#21904)
• 5e6c4d7 fix(defer): evaluate async dependencies where the deferred import sits (#21902)
• 7ea4fa3 fix: handle audited correctness edge cases (#21901)
• c50713c fix: keep code generation data per result instead of per NormalModule (#21900)
• ebd3be4 docs: document the post-minor stabilization week and out-of-band releases (#2...
• 80be700 fix(config): keep the resolved optimization.minimize a boolean (#21886)
• Additional commits viewable in compare view

Updates webpack-cli from 7.2.2 to 7.2.3

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.2.3

Patch Changes

• fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @​bjohansebas in #4834)

• feat: allow toml@5 as a peer dependency for TOML configuration files (by @​alexander-akait in #4837)

Changelog

Sourced from webpack-cli's changelog.

7.2.3

Patch Changes

• fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @​bjohansebas in #4834)

• feat: allow toml@5 as a peer dependency for TOML configuration files (by @​alexander-akait in #4837)

Commits

• 7d40e4e chore(release): new release (#4839)
• 1f6593a ci: use the input names changesets/action v2 expects (#4838)
• 99cfc4f build(deps): update dependencies (#4837)
• 11be634 feat(create-webpack-app): stop asking about HTML and CSS (#4836)
• a2418aa feat(create-webpack-app): use webpack's native CSS and HTML support in init t...
• 3664b9d chore: update webpack-dev-server to v6 and test against v5 and v6 (#4834)
• ce1a219 ci: node 26 (#4763)
• 0cfc077 chore(deps): bump changesets/action in the dependencies group (#4831)
• ef262eb chore(deps): bump changesets/action in the dependencies group (#4830)
• d90f5ab chore: add gitignore to ignore autogenerated build & fix codecov option (#4828)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions