chore(deps): update all non-major dependencies by chrisbbreuer · Pull Request #3017 · stacksjs/dtsx

chrisbbreuer · 2026-02-10T12:27:34Z

This PR contains the following updates:

Package Updates Summary

Type	Count
📦 NPM Packages	3
🚀 GitHub Actions	6
Total	9

📦 npm Dependencies

3 packages will be updated

Package	Change	Age	Adoption	Passing	Confidence
typescript (source)	`=5.0.0` -> `5.9.3`
webpack (source)	`5.103.0` -> `5.105.0`
esbuild (source)	`0.27.0` -> `0.27.3`

🚀 GitHub Actions

6 actions will be updated

Action	Change	Type	Files
oven-sh/setup-bun	`v2.0.2` → `v2.1.2`	🟡 minor	`ci.yml`
oven-sh/setup-bun	`v2` → `v2.1.2`	🟢 patch	`release.yml`
shivammathur/setup-php	`2.35.5` → `2.36.0`	🟡 minor	`buddy-bot.yml`
actions/checkout	`v6.0.0` → `v6.0.2`	🟢 patch	`ci.yml`
actions/checkout	`v6` → `v6.0.2`	🟢 patch	`release.yml`
stacksjs/action-releaser	`v1.2.7` → `v1.2.6`	🟢 patch	`release.yml`

Release Notes

microsoft/TypeScript (typescript)

=5.0.0 -> 5.9.3

`v5.9.3`

Compare Source

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

fixed issues query for Typescript 5.9.0 (Beta).
fixed issues query for Typescript 5.9.1 (RC).
No specific changes for TypeScript 5.9.2 (Stable)
fixed issues query for Typescript 5.9.3 (Stable).

Downloads are available on:

npm

Released by jakebailey on 10/1/2025

webpack/webpack (webpack)

5.103.0 -> 5.105.0

`v5.105.0`

Compare Source

Minor Changes

Allow resolving worker module by export condition name when using new Worker() (by [hai-x](https://github.com/hai-x) in #20353)
Detect conditional imports to avoid compile-time linking errors for non-existent exports. (by [hai-x](https://github.com/hai-x) in #20320)
Added the tsconfig option for the resolver options (replacement for tsconfig-paths-webpack-plugin). Can be false (disabled), true (use the default tsconfig.json file to search for it), a string path to tsconfig.json, or an object with configFile and references options. (by [alexander-akait](https://github.com/alexander-akait) in #20400)
Support import.defer() for context modules. (by [ahabhgk](https...

[View full release notes]

Released by github-actions[bot] on 2/3/2026

`v5.104.1`

Compare Source

5.104.1

Patch Changes

2efd21b: Reexports runtime calculation should not accessing WEBPACK_IMPORT_KEY decl with var.
c510070: Fixed a user information bypass vulnerability in the HttpUriPlugin plugin.

Released by alexander-akait on 12/18/2025

`v5.104.0`

Compare Source

5.104.0

Minor Changes

d3dd841: Use method shorthand to render module content in __webpack_modules__ object.
d3dd841: Enhance import.meta.env to support object access.
4baab4e: Optimize dependency sorting in updateParent: sort each module only once by deferring to finishUpdateParent(), and reduce traversal count in sortWithSourceOrder by caching WeakMap values upfront.
04cd530: Handle more at-rules for CSS modules.
cafae23: Added options to control the renaming of at-rules and various identifiers in CSS modules.
d3dd841: Added base64url, base62, base58, base52, base49, base36, base32 and base25 digests.
5983843: Provide a stable runtime function variable __webpack_global__.
d3dd841: Improved localIdentName hashing for CSS.

Patch Changes

22c48fb: Added module existence check for informative error message in development mode.
50689e1: Use the fully qualified class name (or export name) for [fullhash] placeholder in CSS modules.
...

[View full release notes]

Released by alexander-akait on 12/16/2025

evanw/esbuild (esbuild)

0.27.0 -> 0.27.3

`v0.27.3`

Compare Source

Preserve URL fragments in data URLs (#4370)

Consider the following HTML, CSS, and SVG:

index.html:

<!DOCTYPE html>
<html>
  <head><link rel="stylesheet" href="icons.css"></head>
  <body><div class="triangle"></div></body>
</html>

icons.css:

.triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url(./triangle.svg#x);
}

triangle.svg:

<svg xmlns="http://www.w3.org/2000/svg">
  <defs>
    <clipPath id="x">
      <path d="M0 0H10V10Z"/>
    </clipPath>
  </defs>
</svg>

The CSS uses a URL fragment (the #x) to reference the clipPath element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using...

[View full release notes]

Released by github-actions[bot] on 2/5/2026

`v0.27.2`

Compare Source

Allow import path specifiers starting with #/ (#4361)

Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

This change was contributed by [hybrist](https://github.com/hybrist).
Automatically add the -webkit-mask prefix (#4357, #4358)

This release automatically adds the -webkit- vendor prefix for the [mask](https://de...

[View full release notes]

Released by github-actions[bot] on 12/17/2025

`v0.27.1`

Compare Source

Fix bundler bug with var nested inside if (#4348)

This release fixes a bug with the bundler that happens when importing an ES module using require (which causes it to be wrapped) and there's a top-level var inside an if statement without being wrapped in a { ... } block (and a few other conditions). The bundling transform needed to hoist these var declarations outside of the lazy ES module wrapper for correctness. See the issue for details.
Fix minifier bug with for inside try inside label (#4351)

This fixes an old regression from version v0.21.4. Some code was introduced to move the label inside the try statement to address a problem with transforming labeled for await loops to avoid the await (the transformation involves converting the for await loop into a for loop and wrapping it in a try st...

[View full release notes]

Released by github-actions[bot] on 12/3/2025

oven-sh/setup-bun

v2.0.2 → v2.1.2

Visit oven-sh/setup-bun for release notes.

oven-sh/setup-bun

v2 → v2.1.2

Visit oven-sh/setup-bun for release notes.

shivammathur/setup-php

2.35.5 → 2.36.0

Visit shivammathur/setup-php for release notes.

actions/checkout

v6.0.0 → v6.0.2

Visit actions/checkout for release notes.

actions/checkout

v6 → v6.0.2

Visit actions/checkout for release notes.

stacksjs/action-releaser

v1.2.7 → v1.2.6

Visit stacksjs/action-releaser for release notes.

📊 Package Statistics

typescript: 119,978,072 weekly downloads
webpack: 38,826,305 weekly downloads
esbuild: 108,914,188 weekly downloads
oven-sh/setup-bun: GitHub Action for workflow automation
oven-sh/setup-bun: GitHub Action for workflow automation
shivammathur/setup-php: GitHub Action for workflow automation
actions/checkout: GitHub Action for workflow automation
actions/checkout: GitHub Action for workflow automation
stacksjs/action-releaser: GitHub Action for workflow automation

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Buddy 🤖

netlify · 2026-02-10T12:27:40Z

❌ Deploy Preview for dtsx failed. Why did it fail? →

Name	Link
🔨 Latest commit	`8a33d56`
🔍 Latest deploy log	https://app.netlify.com/projects/dtsx/deploys/698b243ad96725000843d8d0

pkg-pr-new · 2026-02-10T12:28:05Z

Open in StackBlitz

npm i https://pkg.pr.new/stacksjs/dtsx/bun-plugin-dtsx@3017

npm i https://pkg.pr.new/stacksjs/dtsx/@stacksjs/dtsx@3017

commit: 8a33d56

chrisbbreuer · 2026-02-10T12:42:33Z

🤖 Auto-closing obsolete PR

This PR was automatically closed because the dependency files it references are no longer present in the project.

Removed files:

[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/typescript/5.9.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
[5.103.0->5.105.0](https://renovatebot.com/diffs/npm/webpack/5.103.0/5.105.0)
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/esbuild/0.27.0/0.27.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)

If this was closed in error, please reopen the PR and update the dependency files accordingly.

chore(deps): update all non-major dependencies

8a33d56

chrisbbreuer added dependencies github-actions minor npm labels Feb 10, 2026

chrisbbreuer closed this Feb 10, 2026

github-actions bot deleted the buddy-bot/update-non-major-updates-1770726449181 branch February 10, 2026 12:42

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies#3017

chore(deps): update all non-major dependencies#3017
chrisbbreuer wants to merge 1 commit intomainfrom
buddy-bot/update-non-major-updates-1770726449181

chrisbbreuer commented Feb 10, 2026

Uh oh!

netlify bot commented Feb 10, 2026 •

edited

Loading

Uh oh!

pkg-pr-new bot commented Feb 10, 2026

Uh oh!

chrisbbreuer commented Feb 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

chrisbbreuer commented Feb 10, 2026

Package Updates Summary

📦 npm Dependencies

🚀 GitHub Actions

Release Notes

v5.9.3

v5.105.0

Minor Changes

v5.104.1

5.104.1

Patch Changes

v5.104.0

5.104.0

Minor Changes

Patch Changes

v0.27.3

v0.27.2

v0.27.1

📊 Package Statistics

Configuration

Uh oh!

netlify bot commented Feb 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌ Deploy Preview for dtsx failed. Why did it fail? →

Uh oh!

pkg-pr-new bot commented Feb 10, 2026

Uh oh!

chrisbbreuer commented Feb 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v5.9.3`

`v5.105.0`

`v5.104.1`

`v5.104.0`

`v0.27.3`

`v0.27.2`

`v0.27.1`

netlify bot commented Feb 10, 2026 •

edited

Loading