chore(deps): bump the minor-and-patch group across 2 directories with 12 updates by dependabot[bot] · Pull Request #32 · oc-tmueller/owncloud-server

dependabot · 2026-09-06T22:10:22Z

Bumps the minor-and-patch group with 6 updates in the /apps/files_mediaviewer directory:

Package	From	To
svelte	`5.56.6`	`5.57.0`
css-loader	`7.1.4`	`7.1.5`
sass	`1.101.0`	`1.103.1`
sass-loader	`17.0.0`	`17.0.1`
webpack	`5.108.4`	`5.110.3`
webpack-cli	`7.2.1`	`7.2.3`

Bumps the minor-and-patch group with 9 updates in the /apps/market directory:

Package	From	To
sass	`1.101.0`	`1.103.1`
webpack	`5.108.4`	`5.110.3`
webpack-cli	`7.2.1`	`7.2.3`
axios	`1.18.1`	`1.20.0`
core-js	`3.49.0`	`3.50.0`
less	`4.7.0`	`4.9.1`
uikit	`3.25.20`	`3.25.21`
acorn	`8.17.0`	`8.18.0`
ansi-regex	`6.2.2`	`6.3.0`

Updates svelte from 5.56.6 to 5.57.0

Release notes

Sourced from svelte's releases.

svelte@5.57.0

Minor Changes

feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)

feat: add has function to createContext (#18472)

feat: support defaultValue on <select> (#18591)

feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)

Patch Changes

fix: block template store subscriptions on the promise that assigns the store (#18582)

fix: route $derived teardown errors through invoke_error_boundary (#18486)

fix: track SvelteDate snapshots in reactions (#18700)

fix: remove <svelte:head> anchors on unmount (#18697)

fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#18480)

perf: reuse the cached value in the <option>/<select> value guard (#18713)

fix: prevent malformed AST output for <select> with static value attribute (#18449)

fix: apply ownership mutation ignores to binding assignments (#18718)

fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)

fix: preserve whitespace after inline elements when printing (#18685)

perf: fold SSR block-open markers into the branch's first push (#18712)

fix: run onDestroy callbacks when a server render throws (#18585)

fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#18692)

fix: never apply class hash to elements inside <svelte:head> (#18160)

fix: keep defaultChecked on hydrated radio inputs with spread attributes (#18701)

fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#18689)

perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#18602)

fix: distinct memoizer on style/class directives (#18466)

fix: measure nested transitions before applying their starting styles (#18647)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.57.0

Minor Changes

feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)

feat: add has function to createContext (#18472)

feat: support defaultValue on <select> (#18591)

feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)

Patch Changes

fix: block template store subscriptions on the promise that assigns the store (#18582)

fix: route $derived teardown errors through invoke_error_boundary (#18486)

fix: track SvelteDate snapshots in reactions (#18700)

fix: remove <svelte:head> anchors on unmount (#18697)

fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#18480)

perf: reuse the cached value in the <option>/<select> value guard (#18713)

fix: prevent malformed AST output for <select> with static value attribute (#18449)

fix: apply ownership mutation ignores to binding assignments (#18718)

fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)

fix: preserve whitespace after inline elements when printing (#18685)

perf: fold SSR block-open markers into the branch's first push (#18712)

fix: run onDestroy callbacks when a server render throws (#18585)

fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#18692)

fix: never apply class hash to elements inside <svelte:head> (#18160)

fix: keep defaultChecked on hydrated radio inputs with spread attributes (#18701)

fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#18689)

perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#18602)

fix: distinct memoizer on style/class directives (#18466)

... (truncated)

Commits

7bc0a70 Version Packages (#18682)
6374a2a chore: move @types/trusted-types to devDependencies (#18730)
4ae5eb3 feat: add has function to createContext (#18472)
5034b59 chore: bump playwright (#18729)
74197cc feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)
edbe11e fix: properly apply static textarea value attribute during CSR (#18727)
05b6916 fix: omit bind:focused from SSR output (#18724)
7c6f36a fix: keep boolean attributes with an empty string value when rendering attrib...
2e8b57b fix: render selected options for \<select multiple> with an array value ...
864de81 fix: keep the current selection of a \<select> when its defaultValue is ap...
Additional commits viewable in compare view

Updates css-loader from 7.1.4 to 7.1.5

Release notes

Sourced from css-loader's releases.

v7.1.5

7.1.5 (2026-08-28)

Bug Fixes

strip BOM before processing with postcss (#1684) (bd20834)

Changelog

Sourced from css-loader's changelog.

7.1.5 (2026-08-28)

Bug Fixes

strip BOM before processing with postcss (#1684) (bd20834)

Commits

be04ec2 chore(release): 7.1.5
405bdde docs: deprecate css-loader in favor of webpack's built-in CSS support (#1683)
bd20834 fix: strip BOM before processing with postcss (#1684)
488cdb1 chore(deps-dev): bump lodash from 4.17.23 to 4.18.1 (#1663)
fd4cb47 chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 (#1659)
4bf84fa docs: clarify style-loader usage in Getting Started (#1656)
d7441e5 chore(deps): bump immutable from 5.1.3 to 5.1.5 (#1654)
ca53a77 chore(deps): bump minimatch (#1653)
See full diff in compare view

Updates sass from 1.101.0 to 1.103.1

Release notes

Sourced from sass's releases.

Dart Sass 1.103.1

To install Sass 1.103.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.103.0

To install Sass 1.103.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Potentially breaking compatibility fix: Colors now preserve "analogous sets" of missing channels during conversions, per the CSS spec. For example, color.to-space(lch(50% none none), lab) now returns lab(50% none none) instead of lab(50% 0 0).

See the full changelog for changes in earlier releases.

Dart Sass 1.102.0

To install Sass 1.102.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Use the 2.4 gamma transfer function for rec2020, as specified by the latest draft of CSS Color 4.

See the full changelog for changes in earlier releases.

Dart Sass 1.101.7

To install Sass 1.101.7, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.101.6

To install Sass 1.101.6, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

... (truncated)

Changelog

Sourced from sass's changelog.

1.103.1

No user-visible changes.

1.103.0

Potentially breaking compatibility fix: Colors now preserve "analogous sets" of missing channels during conversions, per the CSS spec. For example, color.to-space(lch(50% none none), lab) now returns lab(50% none none) instead of lab(50% 0 0).

1.102.0

Use the 2.4 gamma transfer function for rec2020, as specified by the latest draft of CSS Color 4.

1.101.7

No user-visible changes.

1.101.6

No user-visible changes.

1.101.5

No user-visible changes.

1.101.4

Avoid emitting rgb() or rgba() functions with non-percent decimal channels. Older browsers only support integer values or (potentially decimal) percentages for these functions, so in order to preserve backwards-compatibility while retaining full precision for modern browsers, legacy colors that contain at least one non-integer channel will now use percentages for their channels (for example, rgb(0%, 100%, 50%) rather than rgb(0, 255, 127.5)).

Fix a bug where the values of plain-CSS if() expressions were emitted using their meta.inspect() format rather than their CSS serialization format.

1.101.3

No user-visible changes.

1.101.2

Fix a bug where the deprecation warning for vendor-prefixed expression() functions would incorrectly indicate whether or not the function would be invalid Sass in Dart Sass 2.0.0.

... (truncated)

Commits

62243d4 Set committer metadata when creating a tag (#2838)
ed4dcc7 Use more dot shorthands (#2837)
ac3d928 Support analogous sets of missing channels (#2810)
1e0cf28 Merge pull request #2834 from ntkme/fix-release
f3bd86a Merge pull request #2835 from sass/dart-sdk-version
287f9ba Code review
91831b8 Fix dartdoc error
0971ea9 Bump bufbuild/buf-action from 1.4.0 to 1.5.0 in /.github/util/initialize (#2826)
c45223b Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.2 (#2828)
cbb1db1 Bump dart-lang/setup-dart from 1.7.2 to 1.8.0 (#2829)
Additional commits viewable in compare view

Updates sass-loader from 17.0.0 to 17.0.1

Release notes

Sourced from sass-loader's releases.

v17.0.1

Patch Changes

Remove the byte order mark (BOM) from the compiled CSS. dart-sass prepends it when the compiled CSS contains non ASCII characters and the style option is compressed (the default for the production mode), but a BOM is only valid at the very beginning of a file - tools like css-loader move @import at-rules above it, so it ended up in the middle of the generated CSS and broke the rule after it. Source maps are shifted accordingly. (by @alexander-akait in #1337)

Changelog

Sourced from sass-loader's changelog.

17.0.1

Patch Changes

Remove the byte order mark (BOM) from the compiled CSS. dart-sass prepends it when the compiled CSS contains non ASCII characters and the style option is compressed (the default for the production mode), but a BOM is only valid at the very beginning of a file - tools like css-loader move @import at-rules above it, so it ended up in the middle of the generated CSS and broke the rule after it. Source maps are shifted accordingly. (by @alexander-akait in #1337)

Commits

f38ee40 chore(release): new release (#1338)
d33042b docs: explain how @use/@import requests are resolved (#1339)
72640db fix: remove the BOM from the compiled CSS (#1337)
a28ab73 docs: use the built-in CSS support of webpack in examples (#1336)
7b81867 chore(deps): apply socket fixes (#1333)
b17bc02 chore(deps-dev): bump postcss from 8.5.14 to 8.5.26 (#1332)
c7a83fe chore(deps-dev): bump fast-uri from 3.1.2 to 3.1.5 (#1331)
14a29c0 chore(deps-dev): bump shell-quote from 1.8.2 to 1.10.0 (#1328)
e2a48b8 chore(deps): bump immutable from 5.1.5 to 5.1.9 (#1327)
87864a5 chore(deps-dev): bump @babel/core from 7.29.0 to 7.29.6 (#1326)
Additional commits viewable in compare view

Updates webpack from 5.108.4 to 5.110.3

Release notes

Sourced from webpack's releases.

v5.110.3

Patch Changes

Fix import() options, circular reexport severity and namespace writes. (by @alexander-akait in #21867)

Skip ESM interop when require() targets a module outside the concatenation. (by @hai-x in #21884)

Fix concatenated require() in a require.ensure callback or a computed request. (by @hai-x in #21907)

Keep optimization.minimize a boolean; its options move to minimizeOptions. (by @alexander-akait in #21886)

Fix mangled exports read through require() and a leaked internal reference. (by @alexander-akait in #21905)

Fix new on a default import of a wrapped CommonJS module. (by @alexander-akait in #21876)

Throw when a deferred namespace of an async module is forced while it evaluates. (by @alexander-akait in #21871)

Do not report a missing export for a name a side-effect-free barrel defers. (by @alexander-akait in #21874)

Fix queue, URL scheme, dotenv, HTTP module and persistent cache edge cases. (by @alexander-akait in #21901)

Evaluate a deferred import's async dependencies where the import sits. (by @alexander-akait in #21902)

Omit ambiguous export * names from the module namespace. (by @alexander-akait in #21878)

v5.110.2

Patch Changes

Fix analyzable ESM baking around cycles, mixed-served wasm and style url maps. (by @alexander-akait in #21851)

Minify more HTML and CSS shorthands, and cut two costs off printing. (by @alexander-akait in #21842)

Report a named import that is never read when it names a missing export. (by @alexander-akait in #21856)

Fix ESM circular reexports, cyclic const TDZ, and defer evaluation order. (by @alexander-akait in #21852)

Stop output.html emitting an unused JS chunk for each generated page. (by @alexander-akait in #21859)

Stop emitting the CSS chunk loading runtime when every CSS chunk is initial. (by @alexander-akait in #21862)

Strip a BOM a loader put on a string, and shift a source map that counted it. (by @alexander-akait in #21857)

v5.110.1

Patch Changes

Fix a capture-group-less snapshot.managedPaths RegExp; speed up cache writes. (by @alexander-akait in #21843)

Throw SyntaxError, or WebAssembly.CompileError, from an unparsable module. (by @alexander-akait in #21847)

Accept the optimization.minimize: true shorthand set by a plugin in apply(). (by @AgentEnder in #21845)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.110.3

Patch Changes

Fix import() options, circular reexport severity and namespace writes. (by @alexander-akait in #21867)

Skip ESM interop when require() targets a module outside the concatenation. (by @hai-x in #21884)

Fix concatenated require() in a require.ensure callback or a computed request. (by @hai-x in #21907)

Keep optimization.minimize a boolean; its options move to minimizeOptions. (by @alexander-akait in #21886)

Fix mangled exports read through require() and a leaked internal reference. (by @alexander-akait in #21905)

Fix new on a default import of a wrapped CommonJS module. (by @alexander-akait in #21876)

Throw when a deferred namespace of an async module is forced while it evaluates. (by @alexander-akait in #21871)

Do not report a missing export for a name a side-effect-free barrel defers. (by @alexander-akait in #21874)

Fix queue, URL scheme, dotenv, HTTP module and persistent cache edge cases. (by @alexander-akait in #21901)

Evaluate a deferred import's async dependencies where the import sits. (by @alexander-akait in #21902)

Omit ambiguous export * names from the module namespace. (by @alexander-akait in #21878)

5.110.2

Patch Changes

Fix analyzable ESM baking around cycles, mixed-served wasm and style url maps. (by @alexander-akait in #21851)

Minify more HTML and CSS shorthands, and cut two costs off printing. (by @alexander-akait in #21842)

Report a named import that is never read when it names a missing export. (by @alexander-akait in #21856)

Fix ESM circular reexports, cyclic const TDZ, and defer evaluation order. (by @alexander-akait in #21852)

Stop output.html emitting an unused JS chunk for each generated page. (by @alexander-akait in #21859)

Stop emitting the CSS chunk loading runtime when every CSS chunk is initial. (by @alexander-akait in #21862)

Strip a BOM a loader put on a string, and shift a source map that counted it. (by @alexander-akait in #21857)

5.110.1

Patch Changes

Fix a capture-group-less snapshot.managedPaths RegExp; speed up cache writes. (by @alexander-akait in #21843)

... (truncated)

Commits

a2d7b9c chore(release): new release (#21868)
d6e86c0 test(test262): assert two more errors webpack reports at build time (#21906)
6a963fe fix: keep require() into a concatenation substituted and unmangled (#21905)
e1eb099 fix: concatenated require() in require.ensure callback or computed reques...
8d1ab53 chore: escape literal NUL bytes in Compilation.js (#21904)
5e6c4d7 fix(defer): evaluate async dependencies where the deferred import sits (#21902)
7ea4fa3 fix: handle audited correctness edge cases (#21901)
c50713c fix: keep code generation data per result instead of per NormalModule (#21900)
ebd3be4 docs: document the post-minor stabilization week and out-of-band releases (#2...
80be700 fix(config): keep the resolved optimization.minimize a boolean (#21886)
Additional commits viewable in compare view

Updates webpack-cli from 7.2.1 to 7.2.3

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.2.3

Patch Changes

fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @bjohansebas in #4834)

feat: allow toml@5 as a peer dependency for TOML configuration files (by @alexander-akait in #4837)

webpack-cli@7.2.2

Patch Changes

perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @bjohansebas in #4818)

Changelog

Sourced from webpack-cli's changelog.

7.2.3

Patch Changes

fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @bjohansebas in #4834)

feat: allow toml@5 as a peer dependency for TOML configuration files (by @alexander-akait in #4837)

7.2.2

Patch Changes

perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @bjohansebas in #4818)

Commits

7d40e4e chore(release): new release (#4839)
1f6593a ci: use the input names changesets/action v2 expects (#4838)
99cfc4f build(deps): update dependencies (#4837)
11be634 feat(create-webpack-app): stop asking about HTML and CSS (#4836)
a2418aa feat(create-webpack-app): use webpack's native CSS and HTML support in init t...
3664b9d chore: update webpack-dev-server to v6 and test against v5 and v6 (#4834)
ce1a219 ci: node 26 (#4763)
0cfc077 chore(deps): bump changesets/action in the dependencies group (#4831)
ef262eb chore(deps): bump changesets/action in the dependencies group (#4830)
d90f5ab chore: add gitignore to ignore autogenerated build & fix codecov option (#4828)
Additional commits viewable in compare view

Updates css-loader from 7.1.4 to 7.1.5

Release notes

Sourced from css-loader's releases.

v7.1.5

7.1.5 (2026-08-28)

Bug Fixes

strip BOM before processing with postcss (#1684) (bd20834)

Changelog

Sourced from css-loader's changelog.

7.1.5 (2026-08-28)

Bug Fixes

strip BOM before processing with postcss (#1684) (bd20834)

Commits

be04ec2 chore(release): 7.1.5
405bdde docs: deprecate css-loader in favor of webpack's built-in CSS support (#1683)
bd20834 fix: strip BOM before processing with postcss (#1684)
488cdb1 chore(deps-dev): bump lodash from 4.17.23 to 4.18.1 (#1663)
fd4cb47 chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 (#1659)
4bf84fa docs: clarify style-loader usage in Getting Started (#1656)
d7441e5 chore(deps): bump immutable from 5.1.3 to 5.1.5 (#1654)
ca53a77 chore(deps): bump minimatch (#1653)
See full diff in compare view

Updates sass from 1.101.0 to 1.103.1

Release notes

Sourced from sass's releases.

Dart Sass 1.103.1

To install Sass 1.103.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.103.0

To install Sass 1.103.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Potentially breaking compatibility fix: Colors now preserve "analogous sets" of missing channels during conversions, per the CSS spec. For example, color.to-space(lch(50% none none), lab) now returns lab(50% none none) instead of lab(50% 0 0).

See the full changelog for changes in earlier releases.

Dart Sass 1.102.0

To install Sass 1.102.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Use the 2.4 gamma transfer function for rec2020, as specified by the latest draft of CSS Color 4.

See the full changelog for changes in earlier releases.

Dart Sass 1.101.7

To install Sass 1.101.7, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.101.6

To install Sass 1.101.6, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

... (truncated)

Changelog

Sourced from sass's changelog.

1.103.1

No user-visible changes.

1.103.0

Potentially breaking compatibility fix: Colors now preserve "analogous sets" of missing channels during conversions, per the CSS spec. For example, color.to-space(lch(50% none none), lab) now returns lab(50% none none) instead of lab(50% 0 0).

1.102.0

Use the 2.4 gamma transfer function for rec2020, as specified by the latest draft of CSS Color 4.

1.101.7

No user-visible changes.

1.101.6

No user-visible changes.

1.101.5

No user-visible changes.

1.101.4

Avoid emitting rgb() or rgba() functions with non-percent decimal channels. Older browsers only support integer values or (potentially decimal) percentages for these functions, so in order to preserve backwards-compatibility while retaining full precision for modern browsers, legacy colors that contain at least one non-integer channel will now use percentages for their channels (for example, rgb(0%, 100%, 50%) rather than rgb(0, 255, 127.5)).

Fix a bug where the values of plain-CSS if() expressions were emitted using their meta.inspect() format rather than their CSS serialization format.

1.101.3

No user-visible changes.

1.101.2

Fix a bug where the deprecation warning for vendor-prefixed expression() functions would incorrectly indicate whether or not the function would be invalid Sass in Dart Sass 2.0.0.

... (truncated)

Commits

62243d4 Set committer metadata when creating a tag (#2838)
ed4dcc7 Use more dot shorthands (#2837)
ac3d928 Support analogous sets of missing channels (#2810)
1e0cf28 Merge pull request #2834 from ntkme/fix-release
f3bd86a Merge pull request #2835 from sass/dart-sdk-version
287f9ba Code review
91831b8 Fix dartdoc error
0971ea9 Bump bufbuild/buf-action from 1.4.0 to 1.5.0 in /.github/util/initialize (#2826)
c45223b Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.2 (#2828)
cbb1db1 Bump dart-lang/setup-dart from 1.7.2 to 1.8.0 (#2829)
Additional commits viewable in compare view

Updates sass-loader from 17.0.0 to 17.0.1

Release notes

Sourced from sass-loader's releases.

v17.0.1

Patch Changes

Remove the byte order mark (BOM) from the compiled CSS. dart-sass prepends it when the compiled CSS contains non ASCII characters and the style option is compressed (the default for the production mode), but a BOM is only valid at the very beginning of a file - tools like css-loader move @import at-rules above it, so it ended up in the middle of the generated CSS and broke the rule after it. Source maps are shifted accordingly. (by @alexander-akait in #1337)

Changelog

Sourced from sass-loader's changelog.

17.0.1

Patch Changes

Remove the byte order mark (BOM) from the compiled CSS. dart-sass prepends it when the compiled CSS contains non ASCII characters and the style option is compressed (the default for the production mode), but a BOM is only valid at the very beginning of a file - tools like css-loader move @import at-rules above it, so it ended up in the middle of the generated CSS and broke the rule after it. Source maps are shifted accordingly. (by @alexander-akait in #1337)

Commits

f38ee40 chore(release): new release (#1338)
d33042b docs: explain how @use/@import requests are resolved (#1339)
72640db fix: remove the BOM from the compiled CSS (#1337)
a28ab73 docs: use the built-in CSS support of webpack in examples (#1336)
7b81867 chore(deps): apply socket fixes (#1333)
b17bc02 chore(deps-dev): bump postcss from 8.5.14 to 8.5.26 (#1332)
c7a83fe chore(deps-dev): bump fast-uri from 3.1.2 to 3.1.5 (#1331)
14a29c0 chore(deps-dev): bump shell-quote from 1.8.2 to 1.10.0 (#1328)
e2a48b8 chore(deps): bump immutable from 5.1.5 to 5.1.9 (#1327)
87864a5 chore(deps-dev): bump @babel/core from 7.29.0 to 7.29.6 (#1326)
Additional commits viewable in compare view

Updates webpack from 5.108.4 to 5.110.3

Release notes

Sourced from webpack's releases.

v5.110.3

Patch Changes

Fix import() options, circular reexport severity and namespace writes. (by @alexander-akait in #21867)

Skip ESM interop when require() targets a module outside the concatenation. (by @hai-x in #21884)

Fix concatenated require() in a require.ensure callback or a computed request. (by @hai-x in #21907)

Keep optimization.minimize a boolean; its options move to minimizeOptions. (by @alexander-akait in #21886)

Fix mangled exports read through require() and a leaked internal reference. (by @alexander-akait in #21905)

Fix new on a default import of a wrapped CommonJS module. (by @alexander-akait in #21876)

Throw when a deferred namespace of an async module is forced while it evaluates. (by @alexander-akait in #21871)

Do not report a missing export for a name a side-effect-free barrel defers. (by @alexander-akait in #21874)

Fix queue, URL scheme, dotenv, HTTP module and persistent cache edge cases. (by @alexander-akait in

… 12 updates Bumps the minor-and-patch group with 6 updates in the /apps/files_mediaviewer directory: | Package | From | To | | --- | --- | --- | | [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.6` | `5.57.0` | | [css-loader](https://github.com/webpack/css-loader) | `7.1.4` | `7.1.5` | | [sass](https://github.com/sass/dart-sass) | `1.101.0` | `1.103.1` | | [sass-loader](https://github.com/webpack/sass-loader) | `17.0.0` | `17.0.1` | | [webpack](https://github.com/webpack/webpack) | `5.108.4` | `5.110.3` | | [webpack-cli](https://github.com/webpack/webpack-cli) | `7.2.1` | `7.2.3` | Bumps the minor-and-patch group with 9 updates in the /apps/market directory: | Package | From | To | | --- | --- | --- | | [sass](https://github.com/sass/dart-sass) | `1.101.0` | `1.103.1` | | [webpack](https://github.com/webpack/webpack) | `5.108.4` | `5.110.3` | | [webpack-cli](https://github.com/webpack/webpack-cli) | `7.2.1` | `7.2.3` | | [axios](https://github.com/axios/axios) | `1.18.1` | `1.20.0` | | [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) | `3.49.0` | `3.50.0` | | [less](https://github.com/less/less.js) | `4.7.0` | `4.9.1` | | [uikit](https://github.com/uikit/uikit) | `3.25.20` | `3.25.21` | | [acorn](https://github.com/acornjs/acorn) | `8.17.0` | `8.18.0` | | [ansi-regex](https://github.com/chalk/ansi-regex) | `6.2.2` | `6.3.0` | Updates `svelte` from 5.56.6 to 5.57.0 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.0/packages/svelte) Updates `css-loader` from 7.1.4 to 7.1.5 - [Release notes](https://github.com/webpack/css-loader/releases) - [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md) - [Commits](webpack/css-loader@v7.1.4...v7.1.5) Updates `sass` from 1.101.0 to 1.103.1 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.101.0...1.103.1) Updates `sass-loader` from 17.0.0 to 17.0.1 - [Release notes](https://github.com/webpack/sass-loader/releases) - [Changelog](https://github.com/webpack/sass-loader/blob/main/CHANGELOG.md) - [Commits](webpack/sass-loader@v17.0.0...v17.0.1) Updates `webpack` from 5.108.4 to 5.110.3 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.108.4...v5.110.3) Updates `webpack-cli` from 7.2.1 to 7.2.3 - [Release notes](https://github.com/webpack/webpack-cli/releases) - [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.2.1...webpack-cli@7.2.3) Updates `css-loader` from 7.1.4 to 7.1.5 - [Release notes](https://github.com/webpack/css-loader/releases) - [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md) - [Commits](webpack/css-loader@v7.1.4...v7.1.5) Updates `sass` from 1.101.0 to 1.103.1 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.101.0...1.103.1) Updates `sass-loader` from 17.0.0 to 17.0.1 - [Release notes](https://github.com/webpack/sass-loader/releases) - [Changelog](https://github.com/webpack/sass-loader/blob/main/CHANGELOG.md) - [Commits](webpack/sass-loader@v17.0.0...v17.0.1) Updates `webpack` from 5.108.4 to 5.110.3 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.108.4...v5.110.3) Updates `webpack-cli` from 7.2.1 to 7.2.3 - [Release notes](https://github.com/webpack/webpack-cli/releases) - [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.2.1...webpack-cli@7.2.3) Updates `sass` from 1.101.0 to 1.103.1 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.101.0...1.103.1) Updates `webpack` from 5.108.4 to 5.110.3 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.108.4...v5.110.3) Updates `webpack-cli` from 7.2.1 to 7.2.3 - [Release notes](https://github.com/webpack/webpack-cli/releases) - [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.2.1...webpack-cli@7.2.3) Updates `axios` from 1.18.1 to 1.20.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.18.1...v1.20.0) Updates `core-js` from 3.49.0 to 3.50.0 - [Release notes](https://github.com/zloirock/core-js/releases) - [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md) - [Commits](https://github.com/zloirock/core-js/commits/v3.50.0/packages/core-js) Updates `less` from 4.7.0 to 4.9.1 - [Release notes](https://github.com/less/less.js/releases) - [Changelog](https://github.com/less/less.js/blob/master/CHANGELOG.md) - [Commits](less/less.js@v4.7.0...v4.9.1) Updates `sass` from 1.101.0 to 1.103.1 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.101.0...1.103.1) Updates `uikit` from 3.25.20 to 3.25.21 - [Release notes](https://github.com/uikit/uikit/releases) - [Changelog](https://github.com/uikit/uikit/blob/develop/CHANGELOG.md) - [Commits](uikit/uikit@v3.25.20...v3.25.21) Updates `webpack` from 5.108.4 to 5.110.3 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.108.4...v5.110.3) Updates `acorn` from 8.17.0 to 8.18.0 - [Commits](acornjs/acorn@8.17.0...8.18.0) Updates `ansi-regex` from 6.2.2 to 6.3.0 - [Release notes](https://github.com/chalk/ansi-regex/releases) - [Commits](chalk/ansi-regex@v6.2.2...v6.3.0) Updates `webpack-cli` from 7.2.1 to 7.2.3 - [Release notes](https://github.com/webpack/webpack-cli/releases) - [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.2.1...webpack-cli@7.2.3) --- updated-dependencies: - dependency-name: svelte dependency-version: 5.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: css-loader dependency-version: 7.1.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: sass dependency-version: 1.103.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: sass-loader dependency-version: 17.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: webpack dependency-version: 5.110.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: webpack-cli dependency-version: 7.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: css-loader dependency-version: 7.1.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: sass dependency-version: 1.103.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: sass-loader dependency-version: 17.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: webpack dependency-version: 5.110.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: webpack-cli dependency-version: 7.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: sass dependency-version: 1.103.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: webpack dependency-version: 5.110.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: webpack-cli dependency-version: 7.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: axios dependency-version: 1.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: core-js dependency-version: 3.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: less dependency-version: 4.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: sass dependency-version: 1.103.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: uikit dependency-version: 3.25.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: webpack dependency-version: 5.110.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: acorn dependency-version: 8.18.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ansi-regex dependency-version: 6.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: webpack-cli dependency-version: 7.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 6, 2026

dependabot Bot mentioned this pull request Sep 6, 2026

chore(deps): bump the minor-and-patch group across 2 directories with 12 updates #15

Closed

Navigation Menu

chore(deps): bump the minor-and-patch group across 2 directories with 12 updates - #32

chore(deps): bump the minor-and-patch group across 2 directories with 12 updates#32
dependabot[bot] wants to merge 1 commit into
monorepofrom
dependabot/npm_and_yarn/apps/customgroups/minor-and-patch-15c6afe65a

dependabot Bot commented on behalf of github Sep 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 6, 2026

svelte@5.57.0

Minor Changes

Patch Changes

5.57.0

Minor Changes

Patch Changes

v7.1.5

7.1.5 (2026-08-28)

Bug Fixes

7.1.5 (2026-08-28)

Bug Fixes

Dart Sass 1.103.1

Changes

Dart Sass 1.103.0

Changes

Dart Sass 1.102.0

Changes

Dart Sass 1.101.7

Changes

Dart Sass 1.101.6

1.103.1

1.103.0

1.102.0

1.101.7

1.101.6

1.101.5

1.101.4

1.101.3

1.101.2

v17.0.1

Patch Changes

17.0.1

Patch Changes

v5.110.3

Patch Changes

v5.110.2

Patch Changes

v5.110.1

Patch Changes

5.110.3

Patch Changes

5.110.2

Patch Changes

5.110.1

Patch Changes

webpack-cli@7.2.3

Patch Changes

webpack-cli@7.2.2

Patch Changes

7.2.3

Patch Changes

7.2.2

Patch Changes

v7.1.5

7.1.5 (2026-08-28)

Bug Fixes

7.1.5 (2026-08-28)

Bug Fixes

Dart Sass 1.103.1

Changes

Dart Sass 1.103.0

Changes

Dart Sass 1.102.0

Changes

Dart Sass 1.101.7

Changes

Dart Sass 1.101.6

1.103.1

1.103.0

1.102.0

1.101.7

1.101.6

1.101.5

1.101.4

1.101.3

1.101.2

v17.0.1

Patch Changes