Skip to content

npm(dev)(deps-dev): bump the webpack group across 1 directory with 2 updates - #449

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webpack-2fe7f30990
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webpack-2fe7f30990

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the webpack group with 2 updates in the / directory: webpack and webpack-bundle-analyzer.

Updates webpack from 5.108.4 to 5.111.1

Release notes

Sourced from webpack's releases.

v5.111.1

Patch Changes

... (truncated)

Changelog

Sourced from webpack's changelog.

5.111.1

Patch Changes

... (truncated)

Commits
  • 5a10675 chore(release): new release (#22105)
  • 9c448c4 test: consolidate loose harness files under test/harness (#22163)
  • a947604 fix(html): unquote an attribute value carrying a vertical tab (#22162)
  • db556f3 test: run the printer equivalence suite against Gecko in CI (#22155)
  • d174cdf perf(css): drop a fallback every browserslist target reads past (#22158)
  • 39f14f2 refactor(javascript): declare block bindings from the parse (#22161)
  • 0835411 test: move suite drivers into test/templates (#22159)
  • b48cd77 fix(html): minify by what a value says rather than how it was spelled (#22154)
  • a774f10 test: define the webpack major instead of bundling package.json (#22160)
  • 4b2eed0 docs: report only what needs a decision while watching a PR (#22156)
  • Additional commits viewable in compare view

Updates webpack-bundle-analyzer from 5.3.1 to 5.4.0

Release notes

Sourced from webpack-bundle-analyzer's releases.

v5.4.0

Minor Changes

  • Use Webpack's infrastructure logger when available (compiler.getInfrastructureLogger('webpack-bundle-analyzer')) and deprecate the plugin's logLevel option in favor of Webpack's native infrastructureLogging configuration. (by @​ronakmaheshwari in #738)

v5.3.3

Patch Changes

  • Scope parsed module sources to the asset they were parsed from, so assets that reuse the same module IDs, or that share a module, no longer report each other's parsed and compressed sizes. (by @​Menny1337 in #734)

v5.3.2

Patch Changes

  • Parse Webpack 5 module maps nested in UMD wrappers, using bundle module IDs and Webpack runtime structure to choose among IIFE candidates. (by @​Menny1337 in #733)

  • Improve report generation performance for compilations with many assets. (by @​christiango in #723)

  • Resolve bundle assets and report files against the correct compiler output path when a plugin instance is shared by multiple compilers. (by @​utkarshalpha in #725)

Changelog

Sourced from webpack-bundle-analyzer's changelog.

5.4.0

Minor Changes

  • Use Webpack's infrastructure logger when available (compiler.getInfrastructureLogger('webpack-bundle-analyzer')) and deprecate the plugin's logLevel option in favor of Webpack's native infrastructureLogging configuration. (by @​ronakmaheshwari in #738)

5.3.3

Patch Changes

  • Scope parsed module sources to the asset they were parsed from, so assets that reuse the same module IDs, or that share a module, no longer report each other's parsed and compressed sizes. (by @​Menny1337 in #734)

5.3.2

Patch Changes

  • Parse Webpack 5 module maps nested in UMD wrappers, using bundle module IDs and Webpack runtime structure to choose among IIFE candidates. (by @​Menny1337 in #733)

  • Improve report generation performance for compilations with many assets. (by @​christiango in #723)

  • Resolve bundle assets and report files against the correct compiler output path when a plugin instance is shared by multiple compilers. (by @​utkarshalpha in #725)

Commits
  • 6d1ae28 chore(release): new release (#739)
  • 7470242 feat: Migrate to Webpack Built-in Infrastructure Logger with Backwards Compat...
  • 21ab1c1 chore(release): new release (#736)
  • eab49ca fix: scope parsed module sources by asset (#734)
  • a4d4123 chore(release): new release (#726)
  • a5b70c3 fix: parse Webpack 5 module maps nested in UMD wrappers (#733)
  • 24e3f77 Improve analyzer performance for bundles with many assets (#723)
  • 23adc7a docs: troubleshoot stats error-only (#730)
  • 34eec1b docs: add Jenkins CSP troubleshooting for blank static reports (#724)
  • 83a8ee5 fix: preserve compiler paths for shared plugin instances (#725)
  • See full diff in compare view

@dependabot @github

dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

…updates

Bumps the webpack group with 2 updates in the / directory: [webpack](https://github.com/webpack/webpack) and [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer).


Updates `webpack` from 5.108.4 to 5.111.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.108.4...v5.111.1)

Updates `webpack-bundle-analyzer` from 5.3.1 to 5.4.0
- [Release notes](https://github.com/webpack/webpack-bundle-analyzer/releases)
- [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-bundle-analyzer@v5.3.1...v5.4.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-version: 5.111.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: webpack
- dependency-name: webpack-bundle-analyzer
  dependency-version: 5.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: webpack
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title npm(dev)(deps-dev): bump the webpack group with 2 updates npm(dev)(deps-dev): bump the webpack group across 1 directory with 2 updates Oct 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webpack-2fe7f30990 branch from 6b3f047 to 9d29243 Compare October 12, 2026 19:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant