Skip to content

Bump the npm group across 1 directory with 5 updates - #550

Merged
jonathansick merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-a6ed9c5378
Nov 2, 2026
Merged

Bump the npm group across 1 directory with 5 updates#550
jonathansick merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-a6ed9c5378

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm group with 5 updates in the / directory:

Package From To
autoprefixer 10.6.1 10.6.2
sass 1.105.1 1.107.0
sass-loader 17.0.1 17.1.0
webpack 5.111.1 5.112.2
webpack-cli 7.2.3 7.3.1

Updates autoprefixer from 10.6.1 to 10.6.2

Release notes

Sourced from autoprefixer's releases.

10.6.2

  • Added /* autoprefixer: ignore next warning */ (by @​dualfroz).
  • Fixed losing unprefixed selectors in old browsers in grouping (by @​ybai08).
  • Fixed selector duplicates on multiple Autoprefixer runs.
  • Fixed case-insensitive pseudo-selector prefixing (by @​jakezwang).
  • Fixed -webkit-cross-fade() for images with numbers (by @​mkantautas).
  • Fixed source maps for Grid prefixes (by @​dualfroz).
Changelog

Sourced from autoprefixer's changelog.

10.6.2

  • Added /* autoprefixer: ignore next warning */ (by @​dualfroz).
  • Fixed losing unprefixed selectors in old browsers in grouping (by @​ybai08).
  • Fixed selector duplicates on multiple Autoprefixer runs.
  • Fixed case-insensitive pseudo-selector prefixing (by @​jakezwang).
  • Fixed -webkit-cross-fade() for images with numbers (by @​mkantautas).
  • Fixed source maps for Grid prefixes (by @​dualfroz).
Commits
  • a7dbf4d Release 10.6.2 version
  • c3cd98d Fix selector duplicates on multiple Autoprefixer runs
  • 5ae399e Keep unprefixed selectors in prefixed grouping rules (#1561)
  • 50ca3e2 Fix -webkit-cross-fade() for images with numbers (#1562)
  • 0efb61b Add /* autoprefixer: ignore next warning */ control comment (#1560)
  • 7ca1fad Set source for Grid prefixes in source maps (#1559)
  • c6d89bc Fix case-insensitive pseudo-selector prefixing (#1558)
  • See full diff in compare view

Updates sass from 1.105.1 to 1.107.0

Release notes

Sourced from sass's releases.

Dart Sass 1.107.0

To install Sass 1.107.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Command-Line Interface

  • The --fatal-deprecation flag can now exclude deprecations that would otherwise be included by passing a version number. To exclude a deprecation, add - before its name. For example, --fatal-deprecation=1.107.0,-import includes all deprecations that were present in Dart Sass 1.107.0 except for the @import deprecation.

  • The --fatal-deprecation flag now takes the special value dart-sass-2, which treats as fatal all deprecations that will become fatal in Dart Sass 2.0.0.

JavaScript API

  • Options.fatalDeprecations can now take a DeprecationSelectorDifference object of the form {include: ..., except: ...}, where the include field lists deprecations to mark fatal (which can be version numbers) and the except field lists deprecations not to mark fatal. The except field takes precedence over include.

  • Add a (non-enumerable) sass.deprecations.dartSass2 property which can be passed to Options.fatalDeprecations to mark as fatal exactly the deprecations that will become fatal in Dart Sass 2.0.0. This can be combined with other deprecations or used in a DeprecationSelectorDifference to modify exactly which deprecations it covers.

  • Passing a version number beyond the current Dart Sass version to Options.fatalDeprecations is now deprecated. See the Sass website for details.

Dart API

  • Add a Deprecation.dartSass2 property which returns exactly the set of deprecations that will become fatal in Dart Sass 2.0.0.

  • Passing a version number beyond the current Dart Sass version to Deprecation.forVersion is now deprecated.

Embedded Protocol

  • Add a CompileRequest.fatal_deprecation_except field which excludes deprecations from being considered fatal if they would have been enabled by CompileRequest.fatal_deprecation.

See the full changelog for changes in earlier releases.

Dart Sass 1.106.1

To install Sass 1.106.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Fix a bug where an attribute selector with an empty value (such as [class=""]) would crash when serializing.

  • Don't crash when serializing a number with an empty unit. This is only possible through the JavaScript and Dart APIs or the embedded protocol.

Embedded Dart Sass

  • More robustly convert invalid value errors into PARAMS errors.

... (truncated)

Changelog

Sourced from sass's changelog.

1.107.0

Command-Line Interface

  • The --fatal-deprecation flag can now exclude deprecations that would otherwise be included by passing a version number. To exclude a deprecation, add - before its name. For example, --fatal-deprecation=1.107.0,-import includes all deprecations that were present in Dart Sass 1.107.0 except for the @import deprecation.

  • The --fatal-deprecation flag now takes the special value dart-sass-2, which treats as fatal all deprecations that will become fatal in Dart Sass 2.0.0.

JavaScript API

  • Options.fatalDeprecations can now take a DeprecationSelectorDifference object of the form {include: ..., except: ...}, where the include field lists deprecations to mark fatal (which can be version numbers) and the except field lists deprecations not to mark fatal. The except field takes precedence over include.

  • Add a (non-enumerable) sass.deprecations.dartSass2 property which can be passed to Options.fatalDeprecations to mark as fatal exactly the deprecations that will become fatal in Dart Sass 2.0.0. This can be combined with other deprecations or used in a DeprecationSelectorDifference to modify exactly which deprecations it covers.

  • Passing a version number beyond the current Dart Sass version to Options.fatalDeprecations is now deprecated. See the Sass website for details.

Dart API

  • Add a Deprecation.dartSass2 property which returns exactly the set of deprecations that will become fatal in Dart Sass 2.0.0.

  • Passing a version number beyond the current Dart Sass version to Deprecation.forVersion is now deprecated.

Embedded Protocol

  • Add a CompileRequest.fatal_deprecation_except field which excludes deprecations from being considered fatal if they would have been enabled by CompileRequest.fatal_deprecation.

1.106.1

  • Fix a bug where an attribute selector with an empty value (such as [class=""]) would crash when serializing.

... (truncated)

Commits
  • 455cbc0 [Deprecations Except] Implement the change (#2895)
  • 0cc2fa2 Bump postcss from 8.5.30 to 8.5.31 in /pkg/sass-parser (#2899)
  • 811ecc6 Pull the version back to 1.106.1 (#2893)
  • b10205e Fix serializing a number with an empty-string unit (#2892)
  • e79f8a7 Fix serializing an attribute selector with an empty value (#2891)
  • 2ea4fc0 Merge pull request #2883 from sass/fuzz
  • a113995 Bump postcss from 8.5.28 to 8.5.30 in /pkg/sass-parser (#2886)
  • 2d2e76c Try using the SassBot GitHub token when auto-merging dependabot PRs (#2885)
  • 5660824 Improve the accuracy of FileSpan.trimLeft() and .trimRight()
  • 09e4024 Throw an error for duplicate rest and non-rest parameter names
  • Additional commits viewable in compare view

Updates sass-loader from 17.0.1 to 17.1.0

Release notes

Sourced from sass-loader's releases.

v17.1.0

Minor Changes

  • Resolve a data: resource from the loader's context, reading text/x-sass as the indented syntax. (by @​alexander-akait in #1352)
Changelog

Sourced from sass-loader's changelog.

17.1.0

Minor Changes

  • Resolve a data: resource from the loader's context, reading text/x-sass as the indented syntax. (by @​alexander-akait in #1352)
Commits
  • 35cf965 chore(release): new release (#1353)
  • 8ecb2f0 fix: resolve a data: resource from the loader's context (#1352)
  • 6670e5a chore(deps-dev): bump baseline-browser-mapping from 2.9.19 to 2.11.21 (#1344)
  • a46f8dc chore(deps-dev): bump smol-toml from 1.6.1 to 1.8.0 (#1345)
  • See full diff in compare view

Updates webpack from 5.111.1 to 5.112.2

Release notes

Sourced from webpack's releases.

v5.112.2

Patch Changes

v5.112.1

Patch Changes

... (truncated)

Changelog

Sourced from webpack's changelog.

5.112.2

Patch Changes

5.112.1

Patch Changes

... (truncated)

Commits
  • e95a7f2 chore(release): new release (#22867)
  • 6e43fc2 fix: return the value of every module type from importModule() (#22869)
  • 4ffac8d ci: rename the parser job to spec and run CSS, HTML and XML in one leg (#22870)
  • 0c02242 test: split the syntax unit tests into tokenizer, parser and printer (#22825)
  • 660608c perf(css): cut CPU and allocation in the CSS minifier (#22868)
  • 8c3cbd3 perf: avoid allocating unused CSS module sets (#22866)
  • a1e5f6a perf: avoid duplicate scans in module concatenation (#22865)
  • 759b539 chore(release): new release (#22720)
  • 539f8de fix(minify): keep globals a globalThis write replaces, and slice on a pat...
  • 9668155 ci: run the deep-imports check in the lint job (#22859)
  • Additional commits viewable in compare view

Updates webpack-cli from 7.2.3 to 7.3.1

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.3.1

Patch Changes

  • fix: detect missing package managers and failed installations, without a lock file the CLI chose npm even when it wasn't installed instead of yarn or pnpm, and it continued after a package failed to install (by @​alexander-akait in #4889)

  • chore: replace the import-local and cross-spawn dependencies with Node.js built-ins (by @​alexander-akait in #4889)

  • chore: load configuration files with import() instead of eval (by @​alexander-akait in #4893)

webpack-cli@7.3.0

Minor Changes

  • feat: run webpack-dev-server@6 as a compiler plugin. The CLI drives watch compilation, prints build stats and closes the compiler on shutdown. Older dev servers continue to manage their own compilation. (by @​bjohansebas in #4847)

    In multi-compiler mode, every dev server serves all compilers by default. Use the new --dev-server-per-compiler option of webpack serve to serve each compiler only by the dev server from its own configuration.

  • feat: add shell completions for zsh, bash, fish and powershell through the complete command (by @​alexander-akait in #4840)

Patch Changes

  • fix: keep multi-compiler options such as parallelism and plugins set on a configuration array when --config-name or extends rebuild it (by @​alexander-akait in #4871)

  • perf: share the compile cache with child processes and worker threads, such as minimizer workers, so they start warm too (by @​alexander-akait in #4872)

  • fix: assign distinct ports to dev servers of configurations that share the same devServer object. (by @​alexander-akait in #4886)

Changelog

Sourced from webpack-cli's changelog.

7.3.1

Patch Changes

  • fix: detect missing package managers and failed installations, without a lock file the CLI chose npm even when it wasn't installed instead of yarn or pnpm, and it continued after a package failed to install (by @​alexander-akait in #4889)

  • chore: replace the import-local and cross-spawn dependencies with Node.js built-ins (by @​alexander-akait in #4889)

  • chore: load configuration files with import() instead of eval (by @​alexander-akait in #4893)

7.3.0

Minor Changes

  • feat: run webpack-dev-server@6 as a compiler plugin. The CLI drives watch compilation, prints build stats and closes the compiler on shutdown. Older dev servers continue to manage their own compilation. (by @​bjohansebas in #4847)

    In multi-compiler mode, every dev server serves all compilers by default. Use the new --dev-server-per-compiler option of webpack serve to serve each compiler only by the dev server from its own configuration.

  • feat: add shell completions for zsh, bash, fish and powershell through the complete command (by @​alexander-akait in #4840)

Patch Changes

  • fix: keep multi-compiler options such as parallelism and plugins set on a configuration array when --config-name or extends rebuild it (by @​alexander-akait in #4871)

  • perf: share the compile cache with child processes and worker threads, such as minimizer workers, so they start warm too (by @​alexander-akait in #4872)

  • fix: assign distinct ports to dev servers of configurations that share the same devServer object. (by @​alexander-akait in #4886)

Commits
  • 3a695da chore(release): new release (#4891)
  • 4a88999 chore: load configuration files without eval (#4893)
  • 02a85ac chore(deps): bump the dependencies group across 1 directory with 5 updates (#...
  • 3942417 chore: replace import-local and cross-spawn with Node.js built-ins (#4889)
  • 349b660 chore(release): new release (#4841)
  • d4ee8bd fix: assign distinct ports to dev servers sharing devServer options (#4886)
  • 9bcb6d5 feat: run webpack-dev-server as a compiler plugin (#4847)
  • b32b0c9 test: make the generator and dev server tests stable (#4885)
  • 351f1c9 chore(deps): bump the dependencies group across 1 directory with 9 updates (#...
  • 701e74b chore(deps-dev): bump del-cli from 7.0.0 to 8.0.1 (#4880)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-a6ed9c5378 branch from f62758b to 7a0cfb1 Compare November 2, 2026 20:53
@jonathansick

jonathansick commented Nov 2, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @jonathansick
Bump the npm group across 1 directory with 5 updates
0595b49 
Bumps the npm group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.6.1` | `10.6.2` |
| [sass](https://github.com/sass/dart-sass) | `1.105.1` | `1.107.0` |
| [sass-loader](https://github.com/webpack/sass-loader) | `17.0.1` | `17.1.0` |
| [webpack](https://github.com/webpack/webpack) | `5.111.1` | `5.112.2` |
| [webpack-cli](https://github.com/webpack/webpack-cli) | `7.2.3` | `7.3.1` |



Updates `autoprefixer` from 10.6.1 to 10.6.2
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.6.1...10.6.2)

Updates `sass` from 1.105.1 to 1.107.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.105.1...1.107.0)

Updates `sass-loader` from 17.0.1 to 17.1.0
- [Release notes](https://github.com/webpack/sass-loader/releases)
- [Changelog](https://github.com/webpack/sass-loader/blob/main/CHANGELOG.md)
- [Commits](webpack/sass-loader@v17.0.1...v17.1.0)

Updates `webpack` from 5.111.1 to 5.112.2
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.111.1...v5.112.2)

Updates `webpack-cli` from 7.2.3 to 7.3.1
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.2.3...webpack-cli@7.3.1)

---
updated-dependencies:
- dependency-name: autoprefixer
  dependency-version: 10.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: sass
  dependency-version: 1.107.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: sass-loader
  dependency-version: 17.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: webpack
  dependency-version: 5.112.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: webpack-cli
  dependency-version: 7.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@jonathansick
jonathansick force-pushed the dependabot/npm_and_yarn/npm-a6ed9c5378 branch from 7a0cfb1 to 0595b49 Compare November 2, 2026 21:10
@jonathansick
jonathansick merged commit e2acbc2 into main Nov 2, 2026
15 checks passed
@jonathansick
jonathansick deleted the dependabot/npm_and_yarn/npm-a6ed9c5378 branch November 2, 2026 21:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jonathansick