Bump the all group with 6 updates by dependabot[bot] · Pull Request #379 · spatial-model-editor/spatial-model-editor.github.io

dependabot · 2026-10-01T22:03:10Z

Bumps the all group with 6 updates:

Package	From	To
concurrently	`10.0.3`	`10.0.5`
css-loader	`7.1.4`	`7.1.5`
sharp	`0.35.3`	`0.35.5`
webpack	`5.108.3`	`5.111.1`
webpack-cli	`7.1.0`	`7.2.3`
yaml	`2.9.0`	`2.9.1`

Updates concurrently from 10.0.3 to 10.0.5

Release notes

Sourced from concurrently's releases.

v10.0.5

What's Changed

fix: correctly output non-ASCII text on Windows by @DanielC000 in open-cli-tools/concurrently#604

fix: expand wildcards from package.json5 when package.json is missing by @DSeaStar in open-cli-tools/concurrently#608

New Contributors

@DanielC000 made their first contribution in open-cli-tools/concurrently#604

@DSeaStar made their first contribution in open-cli-tools/concurrently#608

Full Changelog: open-cli-tools/concurrently@v10.0.4...v10.0.5

v10.0.4

What's Changed

deps: upgrade shell-quote to 1.9.0 by @Mayvis in open-cli-tools/concurrently#599

fix: avoid kill timeout exit delays by @rajanpanth in open-cli-tools/concurrently#601

New Contributors

@Mayvis made their first contribution in open-cli-tools/concurrently#599

@rajanpanth made their first contribution in open-cli-tools/concurrently#601

Full Changelog: open-cli-tools/concurrently@v10.0.3...v10.0.4

Commits

1b8cbeb 10.0.5
544dba0 docs: make linter happy
667b701 deps: update several dev deps
f67c57c vscode: use installed TS version
dbb5617 fix: expand wildcards from package.json5 when package.json is missing (#608)
9f90a1a fix: correctly output non-ASCII text on Windows (#604)
94415cc ci: fix publishing to latest/backport
2524b65 10.0.4
1080199 fix: avoid kill timeout exit delays (#601)
e668211 ci: publish to latest only on npm
Additional commits viewable in compare view

Updates css-loader from 7.1.4 to 7.1.5

Release notes

Sourced from css-loader's releases.

v7.1.5

7.1.5 (2026-08-28)

Bug Fixes

strip BOM before processing with postcss (#1684) (bd20834)

Changelog

Sourced from css-loader's changelog.

7.1.5 (2026-08-28)

Bug Fixes

strip BOM before processing with postcss (#1684) (bd20834)

Commits

be04ec2 chore(release): 7.1.5
405bdde docs: deprecate css-loader in favor of webpack's built-in CSS support (#1683)
bd20834 fix: strip BOM before processing with postcss (#1684)
488cdb1 chore(deps-dev): bump lodash from 4.17.23 to 4.18.1 (#1663)
fd4cb47 chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 (#1659)
4bf84fa docs: clarify style-loader usage in Getting Started (#1656)
d7441e5 chore(deps): bump immutable from 5.1.3 to 5.1.5 (#1654)
ca53a77 chore(deps): bump minimatch (#1653)
See full diff in compare view

Updates sharp from 0.35.3 to 0.35.5

Release notes

Sourced from sharp's releases.

v0.35.5

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4

Add upper bounds check on length of linear and GIF delay arrays.

Improve error handing when WebAssembly fallback also fails. #4593 @lazerg

TypeScript: Allow multi-frame options for JXL output. #4602 @ramin-010

TypeScript: Remove non-existent named export. #4604

Increase accepted dimensions when extending an image. #4605

Improve gain map support for extract and rotate operations. #4606

Tests: Ensure composite tests pass on big endian platforms. #4609

v0.35.5-rc.1

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1

Add upper bounds check on length of linear and GIF delay arrays.

Improve error handing when WebAssembly fallback also fails. #4593 @lazerg

TypeScript: Allow multi-frame options for JXL output. #4602 @ramin-010

TypeScript: Remove non-existent named export. #4604

Increase accepted dimensions when extending an image. #4605

Improve gain map support for extract operation. #4606

... (truncated)

Commits

51a990f Release v0.35.5
96de105 Upgrade to sharp-libvips v1.3.4
3a61390 CI: Configure Dependabot with all package.json locations
4940c50 Improve gain map support for rotate/flip/flop ops
20654aa Prerelease v0.35.5-rc.1
ef4f934 CI: Upgrade to Ubuntu 26.04
358df95 Upgrade to libvips v8.18.7
49f4903 Improve gain map support for rotate-then-extract #4606
0e2e55e Silence a couple of compiler/static analysis warnings
cef3b8c Improve gain map support for extract operation #4606
Additional commits viewable in compare view

Updates webpack from 5.108.3 to 5.111.1

Release notes

Sourced from webpack's releases.

v5.111.1

Patch Changes

Throw on a write to an imported binding without losing concatenation. (by @alexander-akait in #22141)

Keep the </html> a page was written with, whatever opened the element. (by @aryanraj45 in #22103)

Look an attribute up by what its value decodes to, not how it was spelled. (by @aryanraj45 in #22107)

Minify HTML by what a value says rather than how it was spelled. (by @alexander-akait in #22154)

Follow HTML template form and frameset rules during tree construction. (by @dependabot in #22129)

Keep the whitespace calc() needs around + and - in a custom property. (by @alexander-akait in #22150)

Keep an attribute's delimiter and spell its value back where quoting is frozen. (by @alexander-akait in #22119)

Rewrite an attribute value the source spelled with character references. (by @aryanraj45 in #22110)

Unquote an HTML attribute value carrying a vertical tab. (by @alexander-akait in #22162)

Keep a shadow's spread and canonicalize a merged selector list. (by @alexander-akait in #22101)

Leave out an implied tag and merge adjacent runs on the first pass. (by @aryanraj45 in #22121)

Minify in one pass what a second pass of the CSS minifier used to find. (by @alexander-akait in #22106)

Cover the CSS lookup tables no stylesheet in the corpus reaches. (by @aryanraj45 in #22126)

Keep initial where an engine reads the property's initial keyword apart. (by @aryanraj45 in #22128)

Join the CSS rules a cut leaves adjacent, and keep a value an escape ate. (by @alexander-akait in #22108)

Drop the dead CSS a cut leaves, and join more of the blocks that print alike. (by @alexander-akait in #22111)

Run the printer equivalence suite against Firefox as well as Chrome. (by @aryanraj45 in #22151)

Finish in one CSS pass the joins, drops and collapses left to a second. (by @alexander-akait in #22117)

Move the context module sources into lib/context/. (by @alexander-akait in #22115)

Declare loader context types in JSDoc instead of hand-written .d.ts files. (by @alexander-akait in #22116)

Emit a failing module's stack relative, and name what a tap failed with. (by @alexander-akait in #22122)

Finish in one CSS pass the drops, layer gathers and joins left to a second. (by @alexander-akait in #22120)

Speed up CSS parsing by stepping over dropped selector preludes in bytes. (by @alexander-akait in #22142)

Record hoisted, module and block declarations while parsing, not by re-walking. (by @alexander-akait in #22147)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.111.1

Patch Changes

Throw on a write to an imported binding without losing concatenation. (by @alexander-akait in #22141)

Keep the </html> a page was written with, whatever opened the element. (by @aryanraj45 in #22103)

Look an attribute up by what its value decodes to, not how it was spelled. (by @aryanraj45 in #22107)

Minify HTML by what a value says rather than how it was spelled. (by @alexander-akait in #22154)

Follow HTML template form and frameset rules during tree construction. (by @dependabot in #22129)

Keep the whitespace calc() needs around + and - in a custom property. (by @alexander-akait in #22150)

Keep an attribute's delimiter and spell its value back where quoting is frozen. (by @alexander-akait in #22119)

Rewrite an attribute value the source spelled with character references. (by @aryanraj45 in #22110)

Unquote an HTML attribute value carrying a vertical tab. (by @alexander-akait in #22162)

Keep a shadow's spread and canonicalize a merged selector list. (by @alexander-akait in #22101)

Leave out an implied tag and merge adjacent runs on the first pass. (by @aryanraj45 in #22121)

Minify in one pass what a second pass of the CSS minifier used to find. (by @alexander-akait in #22106)

Cover the CSS lookup tables no stylesheet in the corpus reaches. (by @aryanraj45 in #22126)

Keep initial where an engine reads the property's initial keyword apart. (by @aryanraj45 in #22128)

Join the CSS rules a cut leaves adjacent, and keep a value an escape ate. (by @alexander-akait in #22108)

Drop the dead CSS a cut leaves, and join more of the blocks that print alike. (by @alexander-akait in #22111)

Run the printer equivalence suite against Firefox as well as Chrome. (by @aryanraj45 in #22151)

Finish in one CSS pass the joins, drops and collapses left to a second. (by @alexander-akait in #22117)

Move the context module sources into lib/context/. (by @alexander-akait in #22115)

Declare loader context types in JSDoc instead of hand-written .d.ts files. (by @alexander-akait in #22116)

Emit a failing module's stack relative, and name what a tap failed with. (by @alexander-akait in #22122)

Finish in one CSS pass the drops, layer gathers and joins left to a second. (by @alexander-akait in #22120)

Speed up CSS parsing by stepping over dropped selector preludes in bytes. (by @alexander-akait in #22142)

... (truncated)

Commits

5a10675 chore(release): new release (#22105)
9c448c4 test: consolidate loose harness files under test/harness (#22163)
a947604 fix(html): unquote an attribute value carrying a vertical tab (#22162)
db556f3 test: run the printer equivalence suite against Gecko in CI (#22155)
d174cdf perf(css): drop a fallback every browserslist target reads past (#22158)
39f14f2 refactor(javascript): declare block bindings from the parse (#22161)
0835411 test: move suite drivers into test/templates (#22159)
b48cd77 fix(html): minify by what a value says rather than how it was spelled (#22154)
a774f10 test: define the webpack major instead of bundling package.json (#22160)
4b2eed0 docs: report only what needs a decision while watching a PR (#22156)
Additional commits viewable in compare view

Updates webpack-cli from 7.1.0 to 7.2.3

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.2.3

Patch Changes

fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @bjohansebas in #4834)

feat: allow toml@5 as a peer dependency for TOML configuration files (by @alexander-akait in #4837)

webpack-cli@7.2.2

Patch Changes

perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @bjohansebas in #4818)

webpack-cli@7.2.1

Patch Changes

fix: CLIPlugin dynamic import interop under Bun (by @alexander-akait in #4799)

webpack-cli@7.2.0

Minor Changes

feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @bjohansebas in #4793)

Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @alexander-akait in #4796)

Changelog

Sourced from webpack-cli's changelog.

7.2.3

Patch Changes

fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @bjohansebas in #4834)

feat: allow toml@5 as a peer dependency for TOML configuration files (by @alexander-akait in #4837)

7.2.2

Patch Changes

perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @bjohansebas in #4818)

7.2.1

Patch Changes

fix: CLIPlugin dynamic import interop under Bun (by @alexander-akait in #4799)

7.2.0

Minor Changes

feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @bjohansebas in #4793)

Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @alexander-akait in #4796)

Commits

7d40e4e chore(release): new release (#4839)
1f6593a ci: use the input names changesets/action v2 expects (#4838)
99cfc4f build(deps): update dependencies (#4837)
11be634 feat(create-webpack-app): stop asking about HTML and CSS (#4836)
a2418aa feat(create-webpack-app): use webpack's native CSS and HTML support in init t...
3664b9d chore: update webpack-dev-server to v6 and test against v5 and v6 (#4834)
ce1a219 ci: node 26 (#4763)
0cfc077 chore(deps): bump changesets/action in the dependencies group (#4831)
ef262eb chore(deps): bump changesets/action in the dependencies group (#4830)
d90f5ab chore: add gitignore to ignore autogenerated build & fix codecov option (#4828)
Additional commits viewable in compare view

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

Limit recursive merge aliases (#685, #713)

Simplify line unfolding during quoted string parsing (#714)

Commits

1440ecd 2.9.1
c699bc5 fix: Simplify line unfolding during quoted string parsing (#714)
d11ce77 fix: Limit recursive merge aliases (#713)
c5f49f4 chore: Update docs-slate
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 6 updates: | Package | From | To | | --- | --- | --- | | [concurrently](https://github.com/open-cli-tools/concurrently) | `10.0.3` | `10.0.5` | | [css-loader](https://github.com/webpack/css-loader) | `7.1.4` | `7.1.5` | | [sharp](https://github.com/lovell/sharp) | `0.35.3` | `0.35.5` | | [webpack](https://github.com/webpack/webpack) | `5.108.3` | `5.111.1` | | [webpack-cli](https://github.com/webpack/webpack-cli) | `7.1.0` | `7.2.3` | | [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` | Updates `concurrently` from 10.0.3 to 10.0.5 - [Release notes](https://github.com/open-cli-tools/concurrently/releases) - [Commits](open-cli-tools/concurrently@v10.0.3...v10.0.5) Updates `css-loader` from 7.1.4 to 7.1.5 - [Release notes](https://github.com/webpack/css-loader/releases) - [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md) - [Commits](webpack/css-loader@v7.1.4...v7.1.5) Updates `sharp` from 0.35.3 to 0.35.5 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.35.3...v0.35.5) Updates `webpack` from 5.108.3 to 5.111.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.108.3...v5.111.1) Updates `webpack-cli` from 7.1.0 to 7.2.3 - [Release notes](https://github.com/webpack/webpack-cli/releases) - [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.1.0...webpack-cli@7.2.3) Updates `yaml` from 2.9.0 to 2.9.1 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.9.0...v2.9.1) --- updated-dependencies: - dependency-name: concurrently dependency-version: 10.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: css-loader dependency-version: 7.1.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: sharp dependency-version: 0.35.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: webpack dependency-version: 5.111.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: webpack-cli dependency-version: 7.2.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: yaml dependency-version: 2.9.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

for more information, see https://pre-commit.ci

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 1, 2026

[pre-commit.ci] auto fixes from pre-commit.com hooks

0c93321

for more information, see https://pre-commit.ci

lkeegan merged commit bc76fe9 into main Oct 2, 2026
3 checks passed

lkeegan deleted the dependabot/npm_and_yarn/all-b7a9caf263 branch October 2, 2026 07:21

Navigation Menu

Repository navigation

Bump the all group with 6 updates - #379

Bump the all group with 6 updates#379
lkeegan merged 2 commits into
mainfrom
dependabot/npm_and_yarn/all-b7a9caf263

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

v10.0.5

What's Changed

New Contributors

v10.0.4

What's Changed

New Contributors

v7.1.5

7.1.5 (2026-08-28)

Bug Fixes

7.1.5 (2026-08-28)

Bug Fixes

v0.35.5

v0.35.5-rc.1

v5.111.1

Patch Changes

5.111.1

Patch Changes

webpack-cli@7.2.3

Patch Changes

webpack-cli@7.2.2

Patch Changes

webpack-cli@7.2.1

Patch Changes

webpack-cli@7.2.0

Minor Changes

7.2.3

Patch Changes

7.2.2

Patch Changes

7.2.1

Patch Changes

7.2.0

Minor Changes

v2.9.1

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant