Skip to content

Bump the all group across 1 directory with 8 updates #342

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 2 commits into from
Oct 2, 2025
Merged

Bump the all group across 1 directory with 8 updates #342

merged 2 commits into from
Oct 2, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Bumps the all group with 8 updates in the / directory:

Package From To
bootstrap 5.3.7 5.3.8
concurrently 9.2.0 9.2.1
mini-css-extract-plugin 2.9.2 2.9.4
postcss-loader 8.1.1 8.2.0
sass 1.89.2 1.93.2
sharp 0.34.2 0.34.4
webpack 5.99.9 5.102.0
yaml 2.8.0 2.8.1

Updates bootstrap from 5.3.7 to 5.3.8

Release notes

Sourced from bootstrap's releases.

v5.3.8

What's Changed

Dependencies

New Contributors

Full Changelog: twbs/bootstrap@v5.3.7...v5.3.8

Commits

Updates concurrently from 9.2.0 to 9.2.1

Release notes

Sourced from concurrently's releases.

v9.2.1

What's Changed

Full Changelog: open-cli-tools/concurrently@v9.2.0...v9.2.1

Commits

Updates mini-css-extract-plugin from 2.9.2 to 2.9.4

Release notes

Sourced from mini-css-extract-plugin's releases.

v2.9.4

2.9.4 (2025-08-11)

Bug Fixes

v2.9.3

2.9.3 (2025-08-04)

Bug Fixes

  • should update initial chunks correctly with filename (dab023f)
Changelog

Sourced from mini-css-extract-plugin's changelog.

2.9.4 (2025-08-11)

Bug Fixes

2.9.3 (2025-08-04)

Bug Fixes

  • should update initial chunks correctly with filename (dab023f)
Commits

Updates postcss-loader from 8.1.1 to 8.2.0

Release notes

Sourced from postcss-loader's releases.

v8.2.0

8.2.0 (2025-09-01)

Features

  • update jiti from v1 to v2 (9c74974)
Changelog

Sourced from postcss-loader's changelog.

8.2.0 (2025-09-01)

Features

  • update jiti from v1 to v2 (9c74974)
Commits
  • 522a07d chore(release): 8.2.0
  • 9c74974 feat: update jiti from v1 to v2
  • 5a781e5 chore: update github actions/checkout from v4 to v5 (#709)
  • b29fde3 chore: upgrade eslint from v8 to v9 (#707)
  • cff095a chore: update jest from v29 to v30 (#705)
  • 6f470db docs: improving typos in ISSUE_TEMPLATE files (#704)
  • 36749e8 docs: fix typos and improve clarity in README.md (#703)
  • 26de829 docs: fix typos and improve clarity in contribution guidelines (#702)
  • 61e1452 ci: add node v24 (#701)
  • 3bafede chore: update codecov-action from v4 to v5 (#698)
  • Additional commits viewable in compare view

Updates sass from 1.89.2 to 1.93.2

Release notes

Sourced from sass's releases.

Dart Sass 1.93.2

To install Sass 1.93.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

JavaScript API

  • Fix another error in the release process for @sass/types.

See the full changelog for changes in earlier releases.

Dart Sass 1.93.1

To install Sass 1.93.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

JavaScript API

  • Fix an error in the release process for @sass/types.

See the full changelog for changes in earlier releases.

Dart Sass 1.93.0

To install Sass 1.93.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Fix a crash when a style rule contains a nested @import, and the loaded file @uses a user-defined module as well as @includes a top-level mixin which emits top-level declarations.

JavaScript API

  • Release a @sass/types package which contains the type annotations used by both the sass and sass-embedded package without any additional code or dependencies.

See the full changelog for changes in earlier releases.

Dart Sass 1.92.1

To install Sass 1.92.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

... (truncated)

Changelog

Sourced from sass's changelog.

1.93.2

  • No user-visible changes.

JavaScript API

  • Fix another error in the release process for @sass/types.

1.93.1

  • No user-visible changes.

JavaScript API

  • Fix an error in the release process for @sass/types.

1.93.0

  • Fix a crash when a style rule contains a nested @import, and the loaded file @uses a user-defined module as well as @includes a top-level mixin which emits top-level declarations.

JavaScript API

  • Release a @sass/types package which contains the type annotations used by both the sass and sass-embedded package without any additional code or dependencies.

1.92.1

  • Fix a bug where variable definitions from one imported, forwarded module would not be passed as implicit configuration to a later imported, forwarded module.

1.92.0

  • Breaking change: Emit declarations, childless at-rules, and comments in the order they appear in the source even when they're interleaved with nested rules. This obsoletes the mixed-decls deprecation.

  • Breaking change: The function name type() is now fully reserved for the plain CSS function. This means that @function definitions with the name type will produce errors, while function calls will be parsed as special function strings.

  • Configuring private variables using @use ... with, @forward ... with, and meta.load-css(..., $with: ...) is now deprecated. Private variables were always intended to be fully encapsulated within the module that defines them, and this helps enforce that encapsulation.

... (truncated)

Commits

Updates sharp from 0.34.2 to 0.34.4

Release notes

Sourced from sharp's releases.

v0.34.4

  • Upgrade to libvips v8.17.2 for upstream bug fixes.

  • Ensure TIFF subifd and OpenSlide level input options are respected (regression in 0.34.3).

  • Ensure autoOrient occurs before non-90 angle rotation. #4425

  • Ensure autoOrient removes existing metadata after shrink-on-load. #4431

  • TypeScript: Ensure KernelEnum includes linear. #4441 @​BayanBennett

  • Ensure unlimited flag is passed upstream when reading TIFF images. #4446

  • Support Electron memory cage when reading XMP metadata (regression in 0.34.3). #4451

  • Add sharp-libvips rpath for yarn v5 support. #4452 @​arcanis

v0.34.4-rc.4

  • Upgrade to libvips v8.17.2 for upstream bug fixes.

  • Ensure TIFF subifd and OpenSlide level input options are respected (regression in 0.34.3).

  • Ensure autoOrient occurs before non-90 angle rotation. #4425

  • Ensure autoOrient removes existing metadata after shrink-on-load. #4431

  • TypeScript: Ensure KernelEnum includes linear. #4441 @​BayanBennett

  • Ensure unlimited flag is passed upstream when reading TIFF images. #4446

  • Support Electron memory cage when reading XMP metadata (regression in 0.34.3). #4451

  • Add sharp-libvips rpath for yarn v5 support. #4452 @​arcanis

... (truncated)

Commits
  • ee43783 Release v0.34.4
  • 5299011 CI/Docs: Deno v2 support
  • 4710092 Prerelease v0.34.4-rc.4
  • ed1ac43 CI: Upgrade packaging test dependencies
  • dfcbcee Upgrade sharp-libvips to v1.2.3
  • 35d3f56 Ensure TIFF subifd and OpenSlide level are respected
  • 9f4bace Prerelease v0.34.4-rc.3
  • b507831 CI: Remove dry-run flag
  • 905f698 Prerelease v0.34.4-rc.2
  • b0154ed Upgrade sharp-libvips to v1.2.2
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for sharp since your current version.


Updates webpack from 5.99.9 to 5.102.0

Release notes

Sourced from webpack's releases.

v5.102.0

Features

  • Added static analyze for dynamic imports
  • Added support for import file from "./file.ext" with { type: "bytes" } to get the content as Uint8Array (look at example)
  • Added support for import file from "./file.ext" with { type: "text" } to get the content as text (look at example)
  • Added the snapshot.contextModule to configure snapshots options for context modules
  • Added the extractSourceMap option to implement the capabilities of loading source maps by comment, you don't need source-map-loader (look at example)
  • The topLevelAwait experiment is now stable (you can remove experiments.topLevelAwait from your webpack.config.js)
  • The layers experiment is now stable (you can remove experiments.layers from your webpack.config.js)
  • Added function matcher support in rule options

Fixes

  • Fixed conflicts caused by multiple concatenate modules
  • Ignore import failure during HMR update with ES modules output
  • Keep render module order consistent
  • Prevent inlining modules that have this exports
  • Removed unused timeout attribute of script tag
  • Supported UMD chunk format to work in web workers
  • Improved CommonJs bundle to ES module library
  • Use es-lexer for mjs files for build dependencies
  • Fixed support __non_webpack_require__ for ES modules
  • Properly handle external modules for CSS
  • AssetsByChunkName included assets from chunk.auxiliaryFiles
  • Use createRequire only when output is ES module and target is node
  • Typescript types

Performance Improvements

  • Avoid extra calls for snapshot
  • A avoid extra jobs for build dependencies
  • Move import attributes to own dependencies

v5.101.3

Fixes

  • Fixed resolve execution order issue from extra await in async modules
  • Avoid empty block for unused statement
  • Collect only specific expressions for destructuring assignment

v5.101.2

Fixes

  • Fixed syntax error when comment is on the last line
  • Handle var declaration for createRequire
  • Distinguish free variable and tagged variable

v5.101.1

Fixes

... (truncated)

Commits

Updates yaml from 2.8.0 to 2.8.1

Release notes

Sourced from yaml's releases.

v2.8.1

  • Preserve empty block literals (#634)
Commits
  • 1dc3c3b 2.8.1
  • 5bbb1cb chore: Add explicit jest-resolve@29 dev dependency to keep Node.js 15 compati...
  • b3ba632 chore: Refresh lockfile
  • de8a0ab fix: Preserve empty block literals (#634)
  • 81eb3bf docs: Update site intro
  • ef23196 docs: Update README & docs/CONTRIBUTING
  • aa29f42 docs: Note that schema can be a Schema
  • cad823e docs: Update instructions on vulnerability reporting
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all group across 1 directory with 8 updates
eac4531 
Bumps the all group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bootstrap](https://github.com/twbs/bootstrap) | `5.3.7` | `5.3.8` |
| [concurrently](https://github.com/open-cli-tools/concurrently) | `9.2.0` | `9.2.1` |
| [mini-css-extract-plugin](https://github.com/webpack-contrib/mini-css-extract-plugin) | `2.9.2` | `2.9.4` |
| [postcss-loader](https://github.com/webpack-contrib/postcss-loader) | `8.1.1` | `8.2.0` |
| [sass](https://github.com/sass/dart-sass) | `1.89.2` | `1.93.2` |
| [sharp](https://github.com/lovell/sharp) | `0.34.2` | `0.34.4` |
| [webpack](https://github.com/webpack/webpack) | `5.99.9` | `5.102.0` |
| [yaml](https://github.com/eemeli/yaml) | `2.8.0` | `2.8.1` |



Updates `bootstrap` from 5.3.7 to 5.3.8
- [Release notes](https://github.com/twbs/bootstrap/releases)
- [Commits](twbs/bootstrap@v5.3.7...v5.3.8)

Updates `concurrently` from 9.2.0 to 9.2.1
- [Release notes](https://github.com/open-cli-tools/concurrently/releases)
- [Commits](open-cli-tools/concurrently@v9.2.0...v9.2.1)

Updates `mini-css-extract-plugin` from 2.9.2 to 2.9.4
- [Release notes](https://github.com/webpack-contrib/mini-css-extract-plugin/releases)
- [Changelog](https://github.com/webpack-contrib/mini-css-extract-plugin/blob/master/CHANGELOG.md)
- [Commits](webpack/mini-css-extract-plugin@v2.9.2...v2.9.4)

Updates `postcss-loader` from 8.1.1 to 8.2.0
- [Release notes](https://github.com/webpack-contrib/postcss-loader/releases)
- [Changelog](https://github.com/webpack-contrib/postcss-loader/blob/master/CHANGELOG.md)
- [Commits](webpack/postcss-loader@v8.1.1...v8.2.0)

Updates `sass` from 1.89.2 to 1.93.2
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.89.2...1.93.2)

Updates `sharp` from 0.34.2 to 0.34.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.34.2...v0.34.4)

Updates `webpack` from 5.99.9 to 5.102.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.99.9...v5.102.0)

Updates `yaml` from 2.8.0 to 2.8.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.8.0...v2.8.1)

---
updated-dependencies:
- dependency-name: bootstrap
  dependency-version: 5.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: concurrently
  dependency-version: 9.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: mini-css-extract-plugin
  dependency-version: 2.9.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: postcss-loader
  dependency-version: 8.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: sass
  dependency-version: 1.93.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: sharp
  dependency-version: 0.34.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: webpack
  dependency-version: 5.102.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: yaml
  dependency-version: 2.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 1, 2025
@lkeegan lkeegan merged commit f025c10 into main Oct 2, 2025
3 checks passed
@lkeegan lkeegan deleted the dependabot/npm_and_yarn/all-d80ebabbf2 branch October 2, 2025 06:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@lkeegan