Skip to content

chore(deps-dev): bump the dependencies group with 6 updates - #4895

Merged
webpack[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-b2d46cac4e
Nov 6, 2026
Merged

chore(deps-dev): bump the dependencies group with 6 updates#4895
webpack[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-b2d46cac4e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 6 updates:

Package From To
@babel/core 8.0.9 8.1.0
@swc/core 1.16.20 1.16.21
eslint 10.13.0 10.14.0
pkg-pr-new 0.0.92 0.0.93
sass 1.106.1 1.107.1
webpack-bundle-analyzer 5.4.0 5.4.1

Updates @babel/core from 8.0.9 to 8.1.0

Release notes

Sourced from @​babel/core's releases.

v8.1.0 (2026-11-02)

NOTE: @babel/plugin-proposal-bytes-modules, @babel/plugin-proposal-filtered-namespaces, and @babel/plugin-proposal-text-modules were accidentally excluded from this release. We're working on re-publishing the as 8.1.1.

Thanks @​Kjubikstronk for your first PR!

🚀 New Feature

  • babel-helper-module-transforms, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-filtered-namespaces, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-dynamic-import, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime, babel-standalone
  • babel-generator, babel-helper-import-to-platform-api, babel-helper-module-transforms, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-modules, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-traverse, babel-types
  • Other
  • babel-helper-import-to-platform-api, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime
  • babel-generator, babel-parser, babel-traverse, babel-types
    • #17624 Add parse support for the "structs" proposal (only non-shared) (@​JLHwung)
  • babel-generator, babel-parser, babel-types
  • babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-types
  • babel-cli, babel-core, babel-generator, babel-helper-transform-fixture-test-runner
  • babel-core
  • babel-core, babel-plugin-transform-classes

🐛 Bug Fix

  • babel-parser
  • babel-helper-skip-transparent-expression-wrappers, babel-plugin-transform-optional-chaining

🔬 Output optimization

  • babel-helpers, babel-runtime-corejs3

Committers: 4

v8.0.10 (2026-10-29)

Thanks @​dagemawinegash, @​nyan-left, @​saiyam-jain-dev, and @​yulman2207 for your first PRs!

... (truncated)

Changelog

Sourced from @​babel/core's changelog.

v8.1.0 (2026-11-02)

🚀 New Feature

  • babel-helper-module-transforms, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-filtered-namespaces, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-dynamic-import, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime, babel-standalone
  • babel-generator, babel-helper-import-to-platform-api, babel-helper-module-transforms, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-modules, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-traverse, babel-types
  • Other
  • babel-helper-import-to-platform-api, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime
  • babel-generator, babel-parser, babel-traverse, babel-types
    • #17624 Add parse support for the "structs" proposal (only non-shared) (@​JLHwung)
  • babel-generator, babel-parser, babel-types
  • babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-types
  • babel-cli, babel-core, babel-generator, babel-helper-transform-fixture-test-runner
  • babel-core
  • babel-core, babel-plugin-transform-classes

🐛 Bug Fix

  • babel-parser
  • babel-helper-skip-transparent-expression-wrappers, babel-plugin-transform-optional-chaining

🔬 Output optimization

  • babel-helpers, babel-runtime-corejs3

v8.0.10 (2026-10-29)

🐛 Bug Fix

  • babel-parser
  • babel-plugin-transform-block-scoping

... (truncated)

Commits

Updates @swc/core from 1.16.20 to 1.16.21

Changelog

Sourced from @​swc/core's changelog.

[1.16.21] - 2026-10-31

Bug Fixes

  • (ci) Install rustfmt before tagging releases (#12632) (99fe404)

  • (deps) Update cargo (major) (#12460) (78f73b7)

  • (deps) Update npm (#12461) (56f4407)

  • (es/codegen) Escape inline script markers in regex literals (#12614) (9167d30)

  • (es/helpers) Convert Map and Set values to arrays (#12616) (aa3782b)

  • (es/minifier) Mark variables assigned in a member object as accessed and mutated (#12543) (72bd6ce)

  • (es/minifier) Avoid capturing outer references in lexical loops (#12608) (3ba25f0)

  • (es/minifier) Preserve rest arg iterator (#12604) (ea41a23)

  • (es/minifier) Avoid duplicate preserved class bindings (#12607) (aa970df)

  • (es/minifier) Track assignment aliases in member objects (#12621) (f5b0340)

  • (es/minifier) Treat spread arguments of pure calls as side effects (#12585) (ce4860f)

  • (es/minifier) Store IIFE arg inline into Finalizer (#12624) (f8a996a)

  • (node) Allow DELETE grants on native cache volume roots (#12609) (716f129)

  • (node) Restrict cache DELETE exemption to filesystem roots (#12610) (38250cb)

Documentation

... (truncated)

Commits
  • 836adfa chore: Publish 1.16.21 with swc_core v83.0.0
  • 4291d57 chore: Publish 1.16.21-nightly-20261031.1 with swc_core v83.0.0
  • b517954 chore: Publish 1.16.21-nightly-20261030.1 with swc_core v83.0.0
  • 56f4407 fix(deps): update npm (#12461)
  • See full diff in compare view

Updates eslint from 10.13.0 to 10.14.0

Release notes

Sourced from eslint's releases.

v10.14.0

Features

  • d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)

Bug Fixes

  • 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)
  • 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)
  • 161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)
  • 6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)
  • 9155e14 fix: Update @​humanfs/node dependency version (#21434) (Nicholas C. Zakas)
  • cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)
  • 5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)

Documentation

  • 0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)
  • dab466e docs: Update README (GitHub Actions Bot)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)
  • 7697550 docs: Update README (GitHub Actions Bot)
  • 0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)
  • 0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)
  • e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)

Chores

  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])
  • a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)
  • 67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)
  • 276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])
  • 449724e chore: update ecosystem plugins (#21420) (ESLint Bot)
  • 8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])
Commits
  • 12cbff4 10.14.0
  • 6b696e7 Build: changelog update for 10.14.0
  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462)
  • 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460)
  • 0f94f47 docs: remove zh-hans from docs language switcher (#21437)
  • dab466e docs: Update README
  • 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450)
  • 161558a fix: handle LS, PS and empty hashbang comments (#21419)
  • Additional commits viewable in compare view

Updates pkg-pr-new from 0.0.92 to 0.0.93

Commits

Updates sass from 1.106.1 to 1.107.1

Release notes

Sourced from sass's releases.

Dart Sass 1.107.1

To install Sass 1.107.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Properly report the embedded protocol version as 3.4.0.

See the full changelog for changes in earlier releases.

Dart Sass 1.107.0

To install Sass 1.107.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Command-Line Interface

  • The --fatal-deprecation flag can now exclude deprecations that would otherwise be included by passing a version number. To exclude a deprecation, add - before its name. For example, --fatal-deprecation=1.107.0,-import includes all deprecations that were present in Dart Sass 1.107.0 except for the @import deprecation.

  • The --fatal-deprecation flag now takes the special value dart-sass-2, which treats as fatal all deprecations that will become fatal in Dart Sass 2.0.0.

JavaScript API

  • Options.fatalDeprecations can now take a DeprecationSelectorDifference object of the form {include: ..., except: ...}, where the include field lists deprecations to mark fatal (which can be version numbers) and the except field lists deprecations not to mark fatal. The except field takes precedence over include.

  • Add a (non-enumerable) sass.deprecations.dartSass2 property which can be passed to Options.fatalDeprecations to mark as fatal exactly the deprecations that will become fatal in Dart Sass 2.0.0. This can be combined with other deprecations or used in a DeprecationSelectorDifference to modify exactly which deprecations it covers.

  • Passing a version number beyond the current Dart Sass version to Options.fatalDeprecations is now deprecated. See the Sass website for details.

Dart API

  • Add a Deprecation.dartSass2 property which returns exactly the set of deprecations that will become fatal in Dart Sass 2.0.0.

  • Passing a version number beyond the current Dart Sass version to Deprecation.forVersion is now deprecated.

Embedded Protocol

  • Add a CompileRequest.fatal_deprecation_except field which excludes deprecations from being considered fatal if they would have been enabled by CompileRequest.fatal_deprecation.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.107.1

  • Properly report the embedded protocol version as 3.4.0.

1.107.0

Command-Line Interface

  • The --fatal-deprecation flag can now exclude deprecations that would otherwise be included by passing a version number. To exclude a deprecation, add - before its name. For example, --fatal-deprecation=1.107.0,-import includes all deprecations that were present in Dart Sass 1.107.0 except for the @import deprecation.

  • The --fatal-deprecation flag now takes the special value dart-sass-2, which treats as fatal all deprecations that will become fatal in Dart Sass 2.0.0.

JavaScript API

  • Options.fatalDeprecations can now take a DeprecationSelectorDifference object of the form {include: ..., except: ...}, where the include field lists deprecations to mark fatal (which can be version numbers) and the except field lists deprecations not to mark fatal. The except field takes precedence over include.

  • Add a (non-enumerable) sass.deprecations.dartSass2 property which can be passed to Options.fatalDeprecations to mark as fatal exactly the deprecations that will become fatal in Dart Sass 2.0.0. This can be combined with other deprecations or used in a DeprecationSelectorDifference to modify exactly which deprecations it covers.

  • Passing a version number beyond the current Dart Sass version to Options.fatalDeprecations is now deprecated. See the Sass website for details.

Dart API

  • Add a Deprecation.dartSass2 property which returns exactly the set of deprecations that will become fatal in Dart Sass 2.0.0.

  • Passing a version number beyond the current Dart Sass version to Deprecation.forVersion is now deprecated.

Embedded Protocol

  • Add a CompileRequest.fatal_deprecation_except field which excludes deprecations from being considered fatal if they would have been enabled by CompileRequest.fatal_deprecation.
Commits

Updates webpack-bundle-analyzer from 5.4.0 to 5.4.1

Release notes

Sourced from webpack-bundle-analyzer's releases.

v5.4.1

Patch Changes

  • Fix TypeError: Cannot read property 'forEach' of undefined when child compilations or entrypoints have undefined or missing assets. (by @​ronakmaheshwari in #741)

  • Fix context menu background and border colors in dark mode. (by @​ronakmaheshwari in #744)

  • Fix the search results total size counting modules twice when both a directory and modules inside it match the search. (by @​GM-Andy in #743)

  • Keep modules in the report when their names use Windows path separators, which happens when a module is resolved from another drive and Webpack keeps its absolute path as the module name. (by @​PerryLink in #745)

Changelog

Sourced from webpack-bundle-analyzer's changelog.

5.4.1

Patch Changes

  • Fix TypeError: Cannot read property 'forEach' of undefined when child compilations or entrypoints have undefined or missing assets. (by @​ronakmaheshwari in #741)

  • Fix context menu background and border colors in dark mode. (by @​ronakmaheshwari in #744)

  • Fix the search results total size counting modules twice when both a directory and modules inside it match the search. (by @​GM-Andy in #743)

  • Keep modules in the report when their names use Windows path separators, which happens when a module is resolved from another drive and Webpack keeps its absolute path as the module name. (by @​PerryLink in #745)

Commits
  • 9708edb chore(release): new release (#742)
  • 7eca787 fix: split module paths on both separators so Windows modules are not dropped...
  • d5f8eea Fix/context menu theme (#744)
  • 077aa1f fix: don't count modules inside found directories twice in search total (#743)
  • 0ebe1e5 test: add coverage for generateStatsFile and statsFilename (#735)
  • c6f85b2 fix: prevent TypeError when child compilations have missing assets (#741)
  • 6046503 test: add test coverage for analyzerMode (#740)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the dependencies group with 6 updates
cabd7e2 
Bumps the dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `8.0.9` | `8.1.0` |
| [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core) | `1.16.20` | `1.16.21` |
| [eslint](https://github.com/eslint/eslint) | `10.13.0` | `10.14.0` |
| [pkg-pr-new](https://github.com/stackblitz-labs/pkg.pr.new/tree/HEAD/packages/cli) | `0.0.92` | `0.0.93` |
| [sass](https://github.com/sass/dart-sass) | `1.106.1` | `1.107.1` |
| [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer) | `5.4.0` | `5.4.1` |


Updates `@babel/core` from 8.0.9 to 8.1.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.1.0/packages/babel-core)

Updates `@swc/core` from 1.16.20 to 1.16.21
- [Release notes](https://github.com/swc-project/swc/releases)
- [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/swc-project/swc/commits/v1.16.21/packages/core)

Updates `eslint` from 10.13.0 to 10.14.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.13.0...v10.14.0)

Updates `pkg-pr-new` from 0.0.92 to 0.0.93
- [Commits](https://github.com/stackblitz-labs/pkg.pr.new/commits/v0.0.93/packages/cli)

Updates `sass` from 1.106.1 to 1.107.1
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.106.1...1.107.1)

Updates `webpack-bundle-analyzer` from 5.4.0 to 5.4.1
- [Release notes](https://github.com/webpack/webpack-bundle-analyzer/releases)
- [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-bundle-analyzer@v5.4.0...v5.4.1)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-version: 8.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@swc/core"
  dependency-version: 1.16.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: eslint
  dependency-version: 10.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pkg-pr-new
  dependency-version: 0.0.93
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: sass
  dependency-version: 1.107.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: webpack-bundle-analyzer
  dependency-version: 5.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 6, 2026
@changeset-bot

changeset-bot Bot commented Nov 6, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: cabd7e2

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@webpack
webpack Bot enabled auto-merge (squash) November 6, 2026 14:43
@socket-security

socket-security Bot commented Nov 6, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedpkg-pr-new@​0.0.92 ⏵ 0.0.931001007096 +1100
Updated@​babel/​core@​8.0.9 ⏵ 8.1.099 +110079 +198 +4100
Updated@​swc/​core@​1.16.20 ⏵ 1.16.219210010096100
Updatedeslint@​10.13.0 ⏵ 10.14.097 +110010096100
Updatedwebpack-bundle-analyzer@​5.4.0 ⏵ 5.4.198 +110010096 +1100
Updatedsass@​1.106.1 ⏵ 1.107.1100100100 +197100

View full report

@webpack
webpack Bot merged commit efe7313 into main Nov 6, 2026
32 checks passed
@webpack
webpack Bot deleted the dependabot/npm_and_yarn/dependencies-b2d46cac4e branch November 6, 2026 15:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@webpack webpack[bot] webpack[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants