Skip to content

deps(node): bump the js-dev-dependencies group across 1 directory with 6 updates - #44

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/bindings/nodejs/js-dev-dependencies-18ab9bca39
Open

deps(node): bump the js-dev-dependencies group across 1 directory with 6 updates#44
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/bindings/nodejs/js-dev-dependencies-18ab9bca39

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the js-dev-dependencies group with 6 updates in the /src/bindings/nodejs directory:

Package From To
@rspack/core 2.2.8 2.2.9
@types/node 26.6.4 26.6.5
astro 7.3.8 7.4.0
prettier 3.9.9 3.9.10
rollup 4.64.3 4.64.7
webpack 5.111.1 5.112.0

Updates @rspack/core from 2.2.8 to 2.2.9

Release notes

Sourced from @​rspack/core's releases.

v2.2.9

Highlights

Less duplicate code. Smaller bundles. 📦

Rspack's chunking algorithm has been improved to reduce duplicate modules across chunks. (#15885)

rspack-chunking.mp4

Smaller package size

Rspack upgrades browserslist-rs and enables deflate compression for its browser data, reducing native binary by 2.13 MB (3.08%). (#16009)

What's Changed

New Features 🎉

Performance 🚀

Bug Fixes 🐞

... (truncated)

Commits
  • 428b706 chore(release): release 2.2.9
  • 4fefd36 chore: disable resolve cache by default for new cache (#16055)
  • 3561500 fix(resolver): keep RegExp restrictions in ResolverFactory cache key (#16054)
  • 0fabdb1 perf: share compilation log entry accessors (#16052)
  • 7c50a40 perf(binding): materialize module source maps lazily (#15882)
  • 523e67c perf(core): cache assetEmitted source and content per info object (#15963)
  • 7681061 fix(lazy-compilation): keep activated modules across rebuilds (#15134)
  • 8864c43 fix(css-extract): preserve relative paths from publicPath callbacks (#15923)
  • 3139f6b fix: support deferred imports introduced by hot updates (#16015)
  • a3f10cc fix: only source map JS and CSS assets from devtool, matching webpack (#16018)
  • Additional commits viewable in compare view

Updates @types/node from 26.6.4 to 26.6.5

Commits

Updates astro from 7.3.8 to 7.4.0

Release notes

Sourced from astro's releases.

astro@7.4.0

Minor Changes

  • #17894 b7a1bd9 Thanks @​Princesseuh! - Adds a new --timings flag to astro build to help you find what slows down your builds

    When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the --timings flag to your build command to print a summary once the build finishes:

    astro build --timings

    This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

  • #17830 a937b0d Thanks @​florian-lefebvre! - Adds a new optional getFontProperties() callback to font providers

    Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

    All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

    import type { FontProvider } from 'astro';
const provider: FontProvider = {
name: 'my-provider',
resolveFont: ({ familyName }) => {
// ...
},
getFontProperties: ({ familyName }) => ({
weights: ['400', '700'],
styles: ['normal', 'italic'],
subsets: ['latin'],
formats: ['woff2'],
}),
};

  • #17830 a937b0d Thanks @​florian-lefebvre! - Adds a fetch() function to the font provider init() context

    This function requests a provider API, retrying transient failures and more. It lets providers that wrap a 3rd-party unifont provider pass the context to it directly:

    import type { FontProvider } from 'astro';
import type { InitializedProvider } from 'unifont';
import { acmeProvider } from '@acme/unifont-provider';
export function acmeFontProvider(): FontProvider {
const provider = acmeProvider();
let initializedProvider: InitializedProvider | undefined;
return {
name: provider._name,

... (truncated)

Changelog

Sourced from astro's changelog.

7.4.0

Minor Changes

  • #17894 b7a1bd9 Thanks @​Princesseuh! - Adds a new --timings flag to astro build to help you find what slows down your builds

    When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the --timings flag to your build command to print a summary once the build finishes:

    astro build --timings

    This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

  • #17830 a937b0d Thanks @​florian-lefebvre! - Adds a new optional getFontProperties() callback to font providers

    Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

    All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

    import type { FontProvider } from 'astro';
const provider: FontProvider = {
name: 'my-provider',
resolveFont: ({ familyName }) => {
// ...
},
getFontProperties: ({ familyName }) => ({
weights: ['400', '700'],
styles: ['normal', 'italic'],
subsets: ['latin'],
formats: ['woff2'],
}),
};

  • #17830 a937b0d Thanks @​florian-lefebvre! - Adds a fetch() function to the font provider init() context

    This function requests a provider API, retrying transient failures and more. It lets providers that wrap a 3rd-party unifont provider pass the context to it directly:

    import type { FontProvider } from 'astro';
import type { InitializedProvider } from 'unifont';
import { acmeProvider } from '@acme/unifont-provider';
export function acmeFontProvider(): FontProvider {
const provider = acmeProvider();
let initializedProvider: InitializedProvider | undefined;
return {

... (truncated)

Commits

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

  • Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits
  • 1172b82 Release 3.9.10
  • d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
  • 953b908 Bump Prettier dependency to 3.9.9
  • ad8a6bf Clean changelog_unreleased
  • See full diff in compare view

Updates rollup from 4.64.3 to 4.64.7

Release notes

Sourced from rollup's releases.

v4.64.7

4.64.7

2026-10-15

Bug Fixes

  • Fix an issue where watching not-yet-created files from plugins did not work if several shared a directory (#6575)

Pull Requests

v4.64.6

4.64.6

2026-10-13

Bug Fixes

  • Do not tree-shake side effects in class instance fields (#6551)
  • Extend top-level-await detection to handle asynchronous for...of loops and async disposal (#6563)

Pull Requests

v4.64.5

4.64.5

2026-10-10

Bug Fixes

  • Prevent cycles when using indirect top-level await for dynamic imports (#6516)

Pull Requests

v4.64.4

4.64.4

2026-10-10

Bug Fixes

... (truncated)

Changelog

Sourced from rollup's changelog.

4.64.7

2026-10-15

Bug Fixes

  • Fix an issue where watching not-yet-created files from plugins did not work if several shared a directory (#6575)

Pull Requests

4.64.6

2026-10-13

Bug Fixes

  • Do not tree-shake side effects in class instance fields (#6551)
  • Extend top-level-await detection to handle asynchronous for...of loops and async disposal (#6563)

Pull Requests

4.64.5

2026-10-10

Bug Fixes

  • Prevent cycles when using indirect top-level await for dynamic imports (#6516)

Pull Requests

4.64.4

2026-10-10

Bug Fixes

  • Support the Rollup WASM build on big-endian hosts (#6559)

Pull Requests

... (truncated)

Commits
  • 5f65860 4.64.7
  • 9761109 Report creation of missing watch files sharing a directory on Linux (#6575)
  • 3ba5190 4.64.6
  • c3fd7be Retain instance field initializers with side effects when instantiating a cla...
  • 74517e6 Align lock file maintenance with other updates (#6571)
  • c60b554 Make addWatchFile watch test robust against watcher start-up timing (#6573)
  • d9095cf Lock file maintenance (#6570)
  • 4a6f9c3 Recognize top-level asynchronous loops and disposal (#6563)
  • 05a2938 4.64.5
  • d45f8e8 fix: prevent cycles for indirectly awaited dynamic imports (#6516)
  • Additional commits viewable in compare view

Updates webpack from 5.111.1 to 5.112.0

Release notes

Sourced from webpack's releases.

v5.112.0

Minor Changes

... (truncated)

Changelog

Sourced from webpack's changelog.

5.112.0

Minor Changes

... (truncated)

Commits
  • 755c49e chore(release): new release (#22170)
  • 35b066f feat(javascript): fold switches, PURE IIFEs, null tests, Babel helpers and pr...
  • edea0f5 refactor(css,html): give the ASCII helpers one Infra name in both parsers (#2...
  • 916cf37 fix(css): keep a rule nested under a selector opening on a combinator when lo...
  • 2ebe482 ci: pin Chrome and Firefox to the builds puppeteer-core names (#22703)
  • ed18fa1 fix(css): reach for no newer spelling where a target browser is one the data ...
  • 26d315a refactor: ask the dependency and module kind instead of flags and type string...
  • 3020447 refactor(cache): normalize build dependencies once (#22704)
  • 9b5fab7 fix(deps): bump the dependencies group with 4 updates (#22683)
  • b46763e feat: apply top-level plugins of a multi-configuration to the MultiCompiler (...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps(node): bump the js-dev-dependencies group across 1 directory wit…
5d61ee7 
…h 6 updates

Bumps the js-dev-dependencies group with 6 updates in the /src/bindings/nodejs directory:

| Package | From | To |
| --- | --- | --- |
| [@rspack/core](https://github.com/web-infra-dev/rspack/tree/HEAD/packages/rspack) | `2.2.8` | `2.2.9` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.4` | `26.6.5` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.3.8` | `7.4.0` |
| [prettier](https://github.com/prettier/prettier) | `3.9.9` | `3.9.10` |
| [rollup](https://github.com/rollup/rollup) | `4.64.3` | `4.64.7` |
| [webpack](https://github.com/webpack/webpack) | `5.111.1` | `5.112.0` |



Updates `@rspack/core` from 2.2.8 to 2.2.9
- [Release notes](https://github.com/web-infra-dev/rspack/releases)
- [Commits](https://github.com/web-infra-dev/rspack/commits/v2.2.9/packages/rspack)

Updates `@types/node` from 26.6.4 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `astro` from 7.3.8 to 7.4.0
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.4.0/packages/astro)

Updates `prettier` from 3.9.9 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.9...3.9.10)

Updates `rollup` from 4.64.3 to 4.64.7
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.64.3...v4.64.7)

Updates `webpack` from 5.111.1 to 5.112.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.111.1...v5.112.0)

---
updated-dependencies:
- dependency-name: "@rspack/core"
  dependency-version: 2.2.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: js-dev-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: js-dev-dependencies
- dependency-name: astro
  dependency-version: 7.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: js-dev-dependencies
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: js-dev-dependencies
- dependency-name: rollup
  dependency-version: 4.64.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: js-dev-dependencies
- dependency-name: webpack
  dependency-version: 5.112.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: js-dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from GriffinCanCode as a code owner October 19, 2026 13:37
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@GriffinCanCode GriffinCanCode Awaiting requested review from GriffinCanCode GriffinCanCode is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants