Skip to content

Update all non-major dependencies - #37

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

📚 IxDF Renovate configuration • security PRs are labelled security and require manual review.

This PR contains the following updates:

Package Change Age Confidence
@vue/compiler-sfc (source) 3.5.403.5.43 age confidence
webpack 5.104.15.111.1 age confidence

Release Notes

vuejs/core (@​vue/compiler-sfc)

v3.5.43

Compare Source

Bug Fixes

v3.5.42

Compare Source

Bug Fixes

v3.5.41

Compare Source

Bug Fixes
webpack/webpack (webpack)

v5.111.1

Compare Source

Patch Changes

v5.111.0

Compare Source

Minor Changes
Patch Changes

v5.110.3

Compare Source

Patch Changes

v5.110.2

Compare Source

Patch Changes

v5.110.1

Compare Source

Patch Changes

v5.110.0

Compare Source

Minor Changes
  • Wrap concatenated modules in lazy __webpack_require__.cw accessors and inline require(), keeping a wrapped body's names and side effects intact. (by @​hai-x in #​21519)

  • Add performance hints reporting what a build costs: duplicate packages and modules, circular dependencies, broad contexts, large modules and chunks, hotspots, eval, missing PURE annotations, polyfills, redundant dynamic imports, OS-dependent rules, cache effectiveness, how chunks load, what splitting refused, why an optimization was skipped, and rules, defines, externals, aliases and barrel reexports nothing uses. An oversized asset names its largest modules, and an entrypoint carrying the runtime recommends optimization.runtimeChunk. Enable every check not set individually with performance.all, report hints in stats only with performance.hints: "stats", and get them in a stable order that leaves the build hashes unchanged. (by @​alexander-akait in #​21841)

  • Add the descriptionRelativePath module rule condition. (by @​alexander-akait in #​21705)

  • Add OS-independent glob matching to module rules. (by @​alexander-akait in #​21771)

  • Report inner-graph, AMD and bare module bailouts in optimizationBailout. (by @​alexander-akait in #​21740)

  • Allow marking externals as side-effect-free with a sideEffects flag. (by @​alexander-akait in #​21712)

  • Give externals the original request of a context module element. (by @​alexander-akait in #​21780)

  • Add the externalsPresets.nodeModules preset with an allowlist option to externalize installed packages, replacing the webpack-node-externals plugin. (by @​alexander-akait in #​21569)

  • Add output.library.umdAmdContainer for an AMD-style loader branch in UMD. (by @​hai-x in #​21770)

  • Resolve @custom-media values that are true / false or name another custom media. (by @​alexander-akait in #​21624)

  • Add the __webpack_css_server_styles__ module variable to read the CSS collected while rendering without a DOM, and keep that CSS in the order the styles were applied. (by @​alexander-akait in #​21576)

  • Patch the HTML <head> in place on hot update instead of forcing a full reload, including when a <script> that never executed is removed. (by @​alexander-akait in #​21624)

  • Scope counter names in CSS modules; fix the counter() counter-style and animation timeline keywords. (by @​alexander-akait in #​21600)

  • Derive import defer / import source from the target and fix the source phase. (by @​alexander-akait in #​21810)

  • Emit analyzable ESM urls for chunks, assets, styles, workers and wasm. (by @​alexander-akait in #​21788)

  • Tree shake CommonJS: module.exports object literals, exports destructured from a require() binding, unused method requires, and unused side-effect-free require() calls and reexports. (by @​alexander-akait in #​21841)

  • Resolve relative entry baseUri values and bake one side of a hash cycle. (by @​alexander-akait in #​21750)

  • Minify CSS further, only where the document is unchanged: shorthands and box longhands, font-weight, <position> and font-stretch keywords, colors (polar, Lab and hsl() converted to hex), numbers, times, zero units, calc() and every math function the spec names folded over constants, selector lists, An+B, keyframe selectors, media-feature ranges, unicode-range, transition layers, display, transforms, gradients, font families, identical repeated declarations, and rules an identical later one makes dead. Abilities are read off the target browsers, vendorPrefixes adds and drops vendor prefixes for them, and rewriteCustomProperties shortens custom property values. Minification never changes whether a declaration parses, and beautifying keeps every rule. (by @​alexander-akait in #​21841)

  • Safely minify CSS (with source maps) and HTML assets when optimization.minimize is enabled, unless a minimizer is already configured for them, making only transformations an engine cannot tell apart. Every rewrite is named as an option, so it can be switched off. (by @​alexander-akait in #​21841)

  • Minify HTML further where the parsed document is unchanged: drop redundant quotes, whitespace nothing renders, escapes text does not need, implied tags, optional end tags nothing prints behind, empty attributes and nested empty elements; fold enumerated values and casing; normalize each attribute against the element it is on; and rewrite style, token lists, srcset, sizes, URL, integer and boolean attributes, viewport content, inline <style> and a JSON <script> body through their own grammars. Adds the optimization.minimize.html options collapseWhitespace, mergeStyles, minifyConditionalComments, minifySrcdoc, preserveComments, removeEmptyAttributes, removeEmptyElements, removeImpliedTags, removeRedundantAttributes, sortAttributes and sortTokenLists, and keeps an end tag the parent, the next element or the adoption agency would otherwise restructure the tree over. (by @​alexander-akait in #​21841)

  • Suggest the closest name or a casing fix anywhere in a failed request. (by @​alexander-akait in #​21727)

  • Add aggregated shutdown hook to MultiCompiler. (by @​bjohansebas in #​21578)

  • Report which compilers changed on the MultiCompiler done hook. (by @​bjohansebas in #​21580)

  • Add [containedpath]/[containedfile] placeholders, used for [path]/[file] of asset and html modules with experiments.futureDefaults. (by @​alexander-akait in #​21592)

  • Support an object for an entry's html that overrides output.html per option. (by @​alexander-akait in #​21574)

  • Configure or exclude each asset type's minifier via optimization.minimize. (by @​alexander-akait in #​21663)

  • Support printing CSS and HTML beautified as well as minified. (by @​alexander-akait in #​21660)

  • Add renderEmbeddedSource, and minify what it offers out of the box. (by @​alexander-akait in #​21830)

  • Report bindings named eval, arguments or reserved words in ES module output. (by @​alexander-akait in #​21567)

  • Emit no development source map for module libraries, or any with futureDefaults. (by @​alexander-akait in #​21839)

  • Speed up builds and cut memory: faster CSS, HTML and JavaScript parsing and minification, a built-in scope analyzer replacing eslint-scope, faster dependency hot paths, module diagnostics, CommonJS export scanning and concatenated module renaming, runtime modules, parsers, generators and dependencies loaded only when used, one file watcher pool shared between MultiCompiler children, and lower parser, graph and startup memory. (by @​alexander-akait in #​21841)

  • Improve tree-shaking for a namespace reexported as default, and fix import d from "./mod"; d.member reading undefined in that case. (by @​alexander-akait in #​21841)

  • Warn on cross-kind CSS module export conflicts and let the class win. (by @​alexander-akait in #​21538)

  • Add output.resourceHints.dedupe to skip prefetch links for already preloaded/prefetched chunks. (by @​alexander-akait in #​21386)

Patch Changes
  • Let a memory-cache etag mismatch fall through to the file cache instead of reporting a miss. (by @​alexander-akait in #​21624)

  • Determine provided exports in dependency order, so a build's module hashes no longer depend on what the persistent cache held. (by @​alexander-akait in #​21630)

  • Emit no dead module and no failing require for an asset-url external. (by @​alexander-akait in #​21713)

  • Fix names, hidden devtools and cache reuse for CSS maps inlined into JS. (by @​alexander-akait in #​21558)

  • Follow the HTML spec more closely when parsing and printing: frameset content, quirks paragraphs and selects, <![CDATA[ outside foreign content as a bogus comment, <?target data?> as a processing instruction, </> dropped, comment data and DOCTYPE identifiers read from the tokenizer states, attributes merged from a repeated <html>/<body> tag, legacy JavaScript script types, void keygen and font format detection — and hand back the tree a parsed document was built from when printing it. (by @​alexander-akait in #​21841)

  • Clear a Watching's blocked flag when its build starts, so it reports only a child actually waiting for its MultiCompiler parent. (by @​bjohansebas in #​21639)

  • Fix AMD define() output using the wrong module and exports argument names. (by @​hai-x in #​21814)

  • Fix ReferenceError from import.meta.main using the wrong module argument. (by @​hai-x in #​21620)

  • Leave a @namespace URI alone instead of resolving and rewriting it as an asset. (by @​alexander-akait in #​21658)

  • Resolve escaped CSS names, and scope a grid area cell name as one name. (by @​alexander-akait in #​21665)

  • Track exports usage of side-effect-free modules an active import() evaluates. (by @​hai-x in #​21623)

  • Resolve absolute symlink targets and treat an unreadable context as missing. (by @​alexander-akait in #​21647)

  • Fix corrupted icon URLs in a .webmanifest with a BOM or non-ASCII text. (by @​alexander-akait in #​21655)

  • Respect strictThisContextOnImports for require() member calls. (by @​hai-x in #​21601)

  • Fix import.meta, [object Object] asset urls and crashes in build-time executed modules. (by @​alexander-akait in #​21841)

  • Inherit sideEffects past a type-only nested package.json for files under node_modules. (by @​xiaoxiaojx in #​21686)

  • Do not fail directory creation when the file system reports it already exists. (by @​alexander-akait in #​21698)

  • Fix top-level using and await using declarations in modules. (by @​alexander-akait in #​21557)

  • Fix DefinePlugin optional chains reading an undefined object member. (by @​lazerg in [#​21823](https://red

Important

✂ PR body was truncated to here.


Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
    • Only on Sunday and Saturday (* * * * 0,6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from ad1f1ee to 5ec2b18 Compare July 26, 2026 20:45
@renovate renovate Bot changed the title Update dependency webpack to v5.108.4 Update dependency webpack to v5.109.0 Jul 26, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 5ec2b18 to ac2aaa6 Compare July 30, 2026 23:12
@renovate renovate Bot changed the title Update dependency webpack to v5.109.0 Update dependency webpack to v5.109.1 Jul 30, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from ac2aaa6 to 41cf6d8 Compare July 31, 2026 19:40
@renovate renovate Bot changed the title Update dependency webpack to v5.109.1 Update dependency webpack to v5.109.2 Jul 31, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 41cf6d8 to 37a5f43 Compare August 8, 2026 08:53
@renovate renovate Bot changed the title Update dependency webpack to v5.109.2 Update all non-major dependencies Aug 8, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 63e4539 to 7e9558e Compare September 4, 2026 21:25
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 7870963 to 99a01a8 Compare September 20, 2026 10:15
| datasource | package           | from    | to      |
| ---------- | ----------------- | ------- | ------- |
| npm        | @vue/compiler-sfc | 3.5.40  | 3.5.43  |
| npm        | webpack           | 5.104.1 | 5.111.1 |


Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 99a01a8 to f625393 Compare September 21, 2026 12:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants