Bump the all group across 1 directory with 7 updates #349

dependabot · 2026-01-01T22:02:20Z

Bumps the all group with 7 updates in the / directory:

Package	From	To
autoprefixer	`10.4.21`	`10.4.23`
chokidar	`4.0.3`	`5.0.0`
css-minimizer-webpack-plugin	`7.0.2`	`7.0.4`
sass	`1.93.3`	`1.97.1`
sharp	`0.34.4`	`0.34.5`
webpack	`5.102.1`	`5.104.1`
yaml	`2.8.1`	`2.8.2`

Updates autoprefixer from 10.4.21 to 10.4.23

Release notes

Sourced from autoprefixer's releases.

10.4.23

Reduced dependencies (by @hyperz111).

10.4.22

Fixed stretch prefixes on new Can I Use database.

Updated fraction.js.

Changelog

Sourced from autoprefixer's changelog.

10.4.23

Reduced dependencies (by @hyperz111).

10.4.22

Fixed stretch prefixes on new Can I Use database.

Updated fraction.js.

Commits

212ba3c Release 10.4.23 version
7f62fb6 Update dependencies
c455bb1 chore: inline and simplify normalize-range (#1539)
73dc62c Release 10.4.22 version
9973c59 Lock CI action versions
4b4feca Fix Node.js 10 on CI
15c21d3 Fix old Node.js CI
27523c1 Update fraction.js
88a0d3e Update dependencies and fix stretch and update example
See full diff in compare view

Updates chokidar from 4.0.3 to 5.0.0

Release notes

Sourced from chokidar's releases.

5.0.0

Make the package ESM-only. Reduces on-disk package size from ~150kb to ~80kb

Increase minimum node.js version to v20.19. The versions starting from it support loading esm files from cjs

fix: Make types more precise paulmillr/chokidar#1424

perf: re-use double slash regex paulmillr/chokidar#1435

Update readdirp to ESM-only v5

Lots of minor improvements in tests

Increase security of NPM releases. Switch to token-less Trusted Publishing, with help of jsbt

Switch compilation mode to isolatedDeclaration-based typescript for simplified auto-generated docs

New Contributors

@mhkeller made their first contribution in paulmillr/chokidar#1426

@btea made their first contribution in paulmillr/chokidar#1432

Full Changelog: paulmillr/chokidar@4.0.3...5.0.0

Commits

c0c8d20 Release 5.0.0.
b211cec Remove src from npm
8742246 Upgrade dev deps, jsbt, ci files. Upgrade readdirp to v5.
de5a34c Merge pull request #1442 from paulmillr/flaky-buns
c08a6c4 fix: throttle based on dir + target
0c55ab3 test: wait for explicit calls in directory test
ce81be5 perf: re-use double slash regex (#1435)
7d9c1ed Merge pull request #1433 from paulmillr/super-matrices
3915541 Merge pull request #1430 from paulmillr/esm-only
9308bed chore: use Nodejs 24 in CI (#1432)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for chokidar since your current version.

Updates css-minimizer-webpack-plugin from 7.0.2 to 7.0.4

Release notes

Sourced from css-minimizer-webpack-plugin's releases.

v7.0.4

7.0.4 (2025-12-11)

Bug Fixes

handle empty files (#295) (8b273d1)

v7.0.3

7.0.3 (2025-12-05)

Bug Fixes

respect errors and warnings from minimizer without code (933fb49)

Changelog

Sourced from css-minimizer-webpack-plugin's changelog.

7.0.4 (2025-12-11)

Bug Fixes

handle empty files (#295) (8b273d1)

7.0.3 (2025-12-05)

Bug Fixes

respect errors and warnings from minimizer without code (933fb49)

Commits

86ee07d chore(release): 7.0.4
8b273d1 fix: handle empty files (#295)
e1cdad5 chore(release): 7.0.3
933fb49 fix: respect errors and warnings from minimizer without code
95e5fa1 chore(deps): bump js-yaml (#292)
8fbaaad docs: update contributing
5e22fce chore: revist docs (#291)
7c28a6e chore: migrate from contrib (#290)
219ce78 chore: update github actions/checkout from v4 to v5 (#289)
cc2bcdd chore: update ESlint from v8 to v9
Additional commits viewable in compare view

Updates sass from 1.93.3 to 1.97.1

Release notes

Sourced from sass's releases.

Dart Sass 1.97.1

To install Sass 1.97.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Fix a bug with the new CSS-style if() syntax where values would be evaluated even if their conditions didn't match.

See the full changelog for changes in earlier releases.

Dart Sass 1.97.0

To install Sass 1.97.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Add support for the display-p3-linear color space.

See the full changelog for changes in earlier releases.

Dart Sass 1.96.0

To install Sass 1.96.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Allow numbers with complex units (more than one numerator unit or more than zero denominator units) to be emitted to CSS. These are now emitted as calc() expressions, which now support complex units in plain CSS.

See the full changelog for changes in earlier releases.

Dart Sass 1.95.1

To install Sass 1.95.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.95.0

To install Sass 1.95.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

... (truncated)

Changelog

Sourced from sass's changelog.

1.97.1

Fix a bug with the new CSS-style if() syntax where values would be evaluated even if their conditions didn't match.

1.97.0

Add support for the display-p3-linear color space.

1.96.0

Allow numbers with complex units (more than one numerator unit or more than zero denominator units) to be emitted to CSS. These are now emitted as calc() expressions, which now support complex units in plain CSS.

1.95.1

No user-visible changes.

1.95.0

Add support for the CSS-style if() function. In addition to supporting the plain CSS syntax, this also supports a sass() query that takes a Sass expression that evaluates to true or false at preprocessing time depending on whether the Sass value is truthy. If there are no plain-CSS queries, the function will return the first value whose query returns true during preprocessing. For example, if(sass(false): 1; sass(true): 2; else: 3) returns 2.

The old Sass if() syntax is now deprecated. Users are encouraged to migrate to the new CSS syntax. if($condition, $if-true, $if-false) can be changed to if(sass($condition): $if-true; else: $if-false).

See the Sass website for details.

Plain-CSS if() functions are now considered "special numbers", meaning that they can be used in place of arguments to CSS color functions.

Plain-CSS if() functions and attr() functions are now considered "special variable strings" (like var()), meaning they can now be used in place of multiple arguments or syntax fragments in various CSS functions.

1.94.3

Fix the span reported for standalone % expressions followed by whitespace.

1.94.2

... (truncated)

Commits

62ec662 Use pwsh instead of powershell (#2710)
b2f2532 Don't evaluate if() values if the condition doesn't match (#2707)
0c7083a Add support for the display-p3-linear color space (#2703)
f6bdc02 Add support for complex units in CSS (#2699)
4aa6d5f Support parseSelectors in ImportCache (#2701)
eae38c5 Fix an incorrect link in the changelog (#2700)
4747063 Bump the sass-parser version (#2697)
2abc89e Merge pull request #2693 from sass/css-if
2f7a16c Revert "Bump chokidar from 4.0.3 to 5.0.0 in /package (#2690)" (#2691)
38d4ac8 Add ArgumentList.namedSpans
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for sass since your current version.

Updates sharp from 0.34.4 to 0.34.5

Release notes

Sourced from sharp's releases.

v0.34.5

Upgrade to libvips v8.17.3 for upstream bug fixes.

Add experimental support for prebuilt Linux RISC-V 64-bit binaries.

Support building from source with npm v12+, deprecate --build-from-source flag. #4458

Add support for BigTIFF output. #4459 @throwbi

Improve error messaging when only warnings issued. #4465

Simplify ICC processing when retaining input profiles. #4468

v0.34.5-rc.1

Upgrade to libvips v8.17.3 for upstream bug fixes.

Add experimental support for prebuilt Linux RISC-V 64-bit binaries.

Support building from source with npm v12+, deprecate --build-from-source flag. #4458

Add support for BigTIFF output. #4459 @throwbi

Improve error messaging when only warnings issued. #4465

Simplify ICC processing when retaining input profiles. #4468

v0.34.5-rc.0

Upgrade to libvips v8.17.3 for upstream bug fixes.

Add experimental support for prebuilt Linux RISC-V 64-bit binaries.

Support building from source with npm v12+, deprecate --build-from-source flag. #4458

Add support for BigTIFF output. #4459 @throwbi

Improve error messaging when only warnings issued. #4465

... (truncated)

Commits

e062456 Release v0.34.5
6450c70 Prerelease v0.34.5-rc.1
f7c95d1 TypeScript: consolidate a few enum-like properties
ef86a75 Prerelease v0.34.5-rc.0
6c1e840 Use structured binding for tuples where possible
e1628d8 Simplify ICC processing when retaining input profiles #4468
4f9f817 Linter: apply all recommended biome settings
09d5aa8 Docs: update internal and libvips doc links
040b73c Upgrade to libvips v8.17.3
1f2f33d Ensure licensing headers are retained by code bundlers
Additional commits viewable in compare view

Updates webpack from 5.102.1 to 5.104.1

Release notes

Sourced from webpack's releases.

v5.104.1

5.104.1

Patch Changes

2efd21b: Reexports runtime calculation should not accessing WEBPACK_IMPORT_KEY decl with var.

c510070: Fixed a user information bypass vulnerability in the HttpUriPlugin plugin.

v5.104.0

5.104.0

Minor Changes

d3dd841: Use method shorthand to render module content in __webpack_modules__ object.

d3dd841: Enhance import.meta.env to support object access.

4baab4e: Optimize dependency sorting in updateParent: sort each module only once by deferring to finishUpdateParent(), and reduce traversal count in sortWithSourceOrder by caching WeakMap values upfront.

04cd530: Handle more at-rules for CSS modules.

cafae23: Added options to control the renaming of at-rules and various identifiers in CSS modules.

d3dd841: Added base64url, base62, base58, base52, base49, base36, base32 and base25 digests.

5983843: Provide a stable runtime function variable __webpack_global__.

d3dd841: Improved localIdentName hashing for CSS.

Patch Changes

22c48fb: Added module existence check for informative error message in development mode.

50689e1: Use the fully qualified class name (or export name) for [fullhash] placeholder in CSS modules.

d3dd841: Support universal lazy compilation.

d3dd841: Fixed module library export definitions when multiple runtimes.

d3dd841: Fixed CSS nesting and CSS custom properties parsing.

d3dd841: Don't write fragment from URL to filename and apply fragment to module URL.

aab1da9: Fixed bugs for css/global type.

d3dd841: Compatibility import.meta.filename and import.meta.dirname with eval devtools.

d3dd841: Handle nested __webpack_require__.

728ddb7: The speed of identifier parsing has been improved.

0f8b31b: Improve types.

d3dd841: Don't corrupt debugId injection when hidden-source-map is used.

2179fdb: Re-validate HttpUriPlugin redirects against allowedUris, restrict to http(s) and add a conservative redirect limit to prevent SSRF and untrusted content inclusion. Redirects failing policy are rejected before caching/lockfile writes.

d3dd841: Serialize HookWebpackError.

d3dd841: Added ability to use built-in properties in dotenv and define plugin.

3c4319f: Optimizing the regular expression character class by specifying ranges for runtime code.

d3dd841: Reduce collision for local indent name in CSS.

d3dd841: Remove CSS link tags when CSS imports are removed.

v5.103.0

Features

Added DotenvPlugin and top level dotenv option to enable this plugin

Added WebpackManifestPlugin

Added support the ignoreList option in devtool plugins

Allow to use custom javascript parse function

... (truncated)

Changelog

Sourced from webpack's changelog.

5.104.1

Patch Changes

2efd21b: Reexports runtime calculation should not accessing WEBPACK_IMPORT_KEY decl with var.

c510070: Fixed a user information bypass vulnerability in the HttpUriPlugin plugin.

5.104.0

Minor Changes

d3dd841: Use method shorthand to render module content in __webpack_modules__ object.

d3dd841: Enhance import.meta.env to support object access.

4baab4e: Optimize dependency sorting in updateParent: sort each module only once by deferring to finishUpdateParent(), and reduce traversal count in sortWithSourceOrder by caching WeakMap values upfront.

04cd530: Handle more at-rules for CSS modules.

cafae23: Added options to control the renaming of at-rules and various identifiers in CSS modules.

d3dd841: Added base64url, base62, base58, base52, base49, base36, base32 and base25 digests.

5983843: Provide a stable runtime function variable __webpack_global__.

d3dd841: Improved localIdentName hashing for CSS.

Patch Changes

22c48fb: Added module existence check for informative error message in development mode.

50689e1: Use the fully qualified class name (or export name) for [fullhash] placeholder in CSS modules.

d3dd841: Support universal lazy compilation.

d3dd841: Fixed module library export definitions when multiple runtimes.

d3dd841: Fixed CSS nesting and CSS custom properties parsing.

d3dd841: Don't write fragment from URL to filename and apply fragment to module URL.

aab1da9: Fixed bugs for css/global type.

d3dd841: Compatibility import.meta.filename and import.meta.dirname with eval devtools.

d3dd841: Handle nested __webpack_require__.

728ddb7: The speed of identifier parsing has been improved.

0f8b31b: Improve types.

d3dd841: Don't corrupt debugId injection when hidden-source-map is used.

2179fdb: Re-validate HttpUriPlugin redirects against allowedUris, restrict to http(s) and add a conservative redirect limit to prevent SSRF and untrusted content inclusion. Redirects failing policy are rejected before caching/lockfile writes.

d3dd841: Serialize HookWebpackError.

d3dd841: Added ability to use built-in properties in dotenv and define plugin.

3c4319f: Optimizing the regular expression character class by specifying ranges for runtime code.

d3dd841: Reduce collision for local indent name in CSS.

d3dd841: Remove CSS link tags when CSS imports are removed.

Commits

24e3c2d chore(release): new release (#20253)
2efd21b fix(re-exports): reexports runtime calculation should not accessing `__WEBPAC...
c510070 fix(security): userinfo bypass vulnerability in HttpUriPlugin allowedUris
4b0501c ci: fix release (#20252)
0c213ce ci: use \<@&1450591255485743204> over @here for discord notificationw
5bf8bc5 refactor: types for benchmarks and tests
505a5e7 chore(release): new release (#20188)
0c06680 refactor: update eslint configuration
2eb0d6a ci: release announcement (#20238)
b2b2459 ci: cancel in progress (#20239)
Additional commits viewable in compare view

Updates yaml from 2.8.1 to 2.8.2

Release notes

Sourced from yaml's releases.

v2.8.2

Serialize -0 as -0 (#638)

Do not double newlines for empty map values (#642)

Commits

086fa6b 2.8.2
95f01e9 chore: Add funding to package.json
152e204 style: Apply updated Prettier rules & satisfy updated ESLint
3f3378c chore: Drop unused dependency cross-env
f0b9af7 chore: Update to @rollup/plugin-replace v6
e3cafc7 chore: Update to eslint-config-prettier v10
553c1b5 chore: Refresh lockfile
70a8db3 fix: Do not double newlines for empty map values (#642)
92821f2 ci: Limit action permissions to minimum required
95285f8 fix: Serialize -0 as -0 (fixes #638)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.21` | `10.4.23` | | [chokidar](https://github.com/paulmillr/chokidar) | `4.0.3` | `5.0.0` | | [css-minimizer-webpack-plugin](https://github.com/webpack/css-minimizer-webpack-plugin) | `7.0.2` | `7.0.4` | | [sass](https://github.com/sass/dart-sass) | `1.93.3` | `1.97.1` | | [sharp](https://github.com/lovell/sharp) | `0.34.4` | `0.34.5` | | [webpack](https://github.com/webpack/webpack) | `5.102.1` | `5.104.1` | | [yaml](https://github.com/eemeli/yaml) | `2.8.1` | `2.8.2` | Updates `autoprefixer` from 10.4.21 to 10.4.23 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.4.21...10.4.23) Updates `chokidar` from 4.0.3 to 5.0.0 - [Release notes](https://github.com/paulmillr/chokidar/releases) - [Commits](paulmillr/chokidar@4.0.3...5.0.0) Updates `css-minimizer-webpack-plugin` from 7.0.2 to 7.0.4 - [Release notes](https://github.com/webpack/css-minimizer-webpack-plugin/releases) - [Changelog](https://github.com/webpack/css-minimizer-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](webpack/css-minimizer-webpack-plugin@v7.0.2...v7.0.4) Updates `sass` from 1.93.3 to 1.97.1 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.93.3...1.97.1) Updates `sharp` from 0.34.4 to 0.34.5 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.4...v0.34.5) Updates `webpack` from 5.102.1 to 5.104.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.102.1...v5.104.1) Updates `yaml` from 2.8.1 to 2.8.2 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.8.1...v2.8.2) --- updated-dependencies: - dependency-name: autoprefixer dependency-version: 10.4.23 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: chokidar dependency-version: 5.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all - dependency-name: css-minimizer-webpack-plugin dependency-version: 7.0.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: sass dependency-version: 1.97.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: sharp dependency-version: 0.34.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: webpack dependency-version: 5.104.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: yaml dependency-version: 2.8.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

for more information, see https://pre-commit.ci

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 1, 2026

[pre-commit.ci] auto fixes from pre-commit.com hooks

92e423d

for more information, see https://pre-commit.ci

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the all group across 1 directory with 7 updates #349

Bump the all group across 1 directory with 7 updates #349

Uh oh!

dependabot bot commented on behalf of github Jan 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the all group across 1 directory with 7 updates #349

Are you sure you want to change the base?

Bump the all group across 1 directory with 7 updates #349

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 1, 2026

10.4.23

10.4.22

10.4.23

10.4.22

5.0.0

New Contributors

v7.0.4

7.0.4 (2025-12-11)

Bug Fixes

v7.0.3

7.0.3 (2025-12-05)

Bug Fixes

7.0.4 (2025-12-11)

Bug Fixes

7.0.3 (2025-12-05)

Bug Fixes

Dart Sass 1.97.1

Changes

Dart Sass 1.97.0

Changes

Dart Sass 1.96.0

Changes

Dart Sass 1.95.1

Changes

Dart Sass 1.95.0

1.97.1

1.97.0

1.96.0

1.95.1

1.95.0

1.94.3

1.94.2

v0.34.5

v0.34.5-rc.1

v0.34.5-rc.0

v5.104.1

5.104.1

Patch Changes

v5.104.0

5.104.0

Minor Changes

Patch Changes

v5.103.0

Features

5.104.1

Patch Changes

5.104.0

Minor Changes

Patch Changes

v2.8.2

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant