chore(deps): bump the dependencies group with 5 updates by dependabot[bot] · Pull Request #2415 · webpack/webpack-dev-middleware

dependabot · 2026-09-23T10:33:41Z

Bumps the dependencies group with 5 updates:

Package	From	To
memfs	`4.78.0`	`4.78.1`
babel-jest	`30.5.1`	`30.5.2`
jest	`30.5.1`	`30.5.2`
prettier	`3.9.7`	`3.9.8`
webpack	`5.111.0`	`5.111.1`

Updates memfs from 4.78.0 to 4.78.1

Release notes

Sourced from memfs's releases.

Release v4.78.1

What's Changed

fix: 🐛 return correct shape from .queryPermission() by @streamich in streamich/memfs#1295

Full Changelog: streamich/memfs@v4.78.0...v4.78.1

Commits

bbcea18 chore: release v4.78.1
8eb7822 Merge pull request #1295 from streamich/fix-fsa-permission-return
0f9bbae fix: 🐛 return correct shape from .queryPermission()
See full diff in compare view

Updates babel-jest from 30.5.1 to 30.5.2

Release notes

Sourced from babel-jest's releases.

v30.5.2

Features

[@jest/transform] Strip TypeScript types with Node when no transformer claims a .ts, .mts or .cts file (#16421)

Fixes

[jest-core, jest-haste-map, jest-transform] Keep require('../package.json') external when bundling, so jest --version and the transform and haste-map cache keys report the released version instead of the previous one (#16422)

[jest-each] Escape a table row's keys before building the $variable interpolation RegExp, so a column name such as count(*) no longer fails the whole table with Invalid regular expression, and a . or | in a column name is matched literally (#16345)

[@jest/source-map] Resolve absolute Windows paths in a source map's sources and sourceRoot again, instead of appending them to the transformed file's directory (#16439)

New Contributors

@winklemad made their first contribution in jestjs/jest#16345

Full Changelog: jestjs/jest@v30.5.1...v30.5.2

Changelog

Sourced from babel-jest's changelog.

30.5.2

Features

[@jest/transform] Strip TypeScript types with Node when no transformer claims a .ts, .mts or .cts file (#16421)

Fixes

[jest-core, jest-haste-map, jest-transform] Keep require('../package.json') external when bundling, so jest --version and the transform and haste-map cache keys report the released version instead of the previous one (#16422)

[jest-each] Escape a table row's keys before building the $variable interpolation RegExp, so a column name such as count(*) no longer fails the whole table with Invalid regular expression, and a . or | in a column name is matched literally (#16345)

[@jest/source-map] Resolve absolute Windows paths in a source map's sources and sourceRoot again, instead of appending them to the transformed file's directory (#16439)

Commits

202dd8a v30.5.2
See full diff in compare view

Updates jest from 30.5.1 to 30.5.2

Release notes

Sourced from jest's releases.

v30.5.2

Features

[@jest/transform] Strip TypeScript types with Node when no transformer claims a .ts, .mts or .cts file (#16421)

Fixes

[jest-core, jest-haste-map, jest-transform] Keep require('../package.json') external when bundling, so jest --version and the transform and haste-map cache keys report the released version instead of the previous one (#16422)

[jest-each] Escape a table row's keys before building the $variable interpolation RegExp, so a column name such as count(*) no longer fails the whole table with Invalid regular expression, and a . or | in a column name is matched literally (#16345)

[@jest/source-map] Resolve absolute Windows paths in a source map's sources and sourceRoot again, instead of appending them to the transformed file's directory (#16439)

New Contributors

@winklemad made their first contribution in jestjs/jest#16345

Full Changelog: jestjs/jest@v30.5.1...v30.5.2

Changelog

Sourced from jest's changelog.

30.5.2

Features

[@jest/transform] Strip TypeScript types with Node when no transformer claims a .ts, .mts or .cts file (#16421)

Fixes

[jest-core, jest-haste-map, jest-transform] Keep require('../package.json') external when bundling, so jest --version and the transform and haste-map cache keys report the released version instead of the previous one (#16422)

[jest-each] Escape a table row's keys before building the $variable interpolation RegExp, so a column name such as count(*) no longer fails the whole table with Invalid regular expression, and a . or | in a column name is matched literally (#16345)

[@jest/source-map] Resolve absolute Windows paths in a source map's sources and sourceRoot again, instead of appending them to the transformed file's directory (#16439)

Commits

202dd8a v30.5.2
See full diff in compare view

Updates prettier from 3.9.7 to 3.9.8

Release notes

Sourced from prettier's releases.

3.9.8

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @seiyab)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by `@seiyab`)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

Commits

4f2ab67 Release 3.9.8
3d82af8 Update Regex related dependencies (#20082)
5ec8db1 [3.9.x] Markdown: Don't let Liquid objects interrupt paragraphs (#20087)
5b142ed Release Release @prettier/plugin-hermes@0.2.3, @prettier/plugin-oxc@0.2.3, an...
0df8eb8 Bump Prettier dependency to 3.9.7
3cf6c8c Clean changelog_unreleased
See full diff in compare view

Updates webpack from 5.111.0 to 5.111.1

Release notes

Sourced from webpack's releases.

v5.111.1

Patch Changes

Throw on a write to an imported binding without losing concatenation. (by @alexander-akait in #22141)

Keep the </html> a page was written with, whatever opened the element. (by @aryanraj45 in #22103)

Look an attribute up by what its value decodes to, not how it was spelled. (by @aryanraj45 in #22107)

Minify HTML by what a value says rather than how it was spelled. (by @alexander-akait in #22154)

Follow HTML template form and frameset rules during tree construction. (by @dependabot in #22129)

Keep the whitespace calc() needs around + and - in a custom property. (by @alexander-akait in #22150)

Keep an attribute's delimiter and spell its value back where quoting is frozen. (by @alexander-akait in #22119)

Rewrite an attribute value the source spelled with character references. (by @aryanraj45 in #22110)

Unquote an HTML attribute value carrying a vertical tab. (by @alexander-akait in #22162)

Keep a shadow's spread and canonicalize a merged selector list. (by @alexander-akait in #22101)

Leave out an implied tag and merge adjacent runs on the first pass. (by @aryanraj45 in #22121)

Minify in one pass what a second pass of the CSS minifier used to find. (by @alexander-akait in #22106)

Cover the CSS lookup tables no stylesheet in the corpus reaches. (by @aryanraj45 in #22126)

Keep initial where an engine reads the property's initial keyword apart. (by @aryanraj45 in #22128)

Join the CSS rules a cut leaves adjacent, and keep a value an escape ate. (by @alexander-akait in #22108)

Drop the dead CSS a cut leaves, and join more of the blocks that print alike. (by @alexander-akait in #22111)

Run the printer equivalence suite against Firefox as well as Chrome. (by @aryanraj45 in #22151)

Finish in one CSS pass the joins, drops and collapses left to a second. (by @alexander-akait in #22117)

Move the context module sources into lib/context/. (by @alexander-akait in #22115)

Declare loader context types in JSDoc instead of hand-written .d.ts files. (by @alexander-akait in #22116)

Emit a failing module's stack relative, and name what a tap failed with. (by @alexander-akait in #22122)

Finish in one CSS pass the drops, layer gathers and joins left to a second. (by @alexander-akait in #22120)

Speed up CSS parsing by stepping over dropped selector preludes in bytes. (by @alexander-akait in #22142)

Record hoisted, module and block declarations while parsing, not by re-walking. (by @alexander-akait in #22147)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.111.1

Patch Changes

Throw on a write to an imported binding without losing concatenation. (by @alexander-akait in #22141)

Keep the </html> a page was written with, whatever opened the element. (by @aryanraj45 in #22103)

Look an attribute up by what its value decodes to, not how it was spelled. (by @aryanraj45 in #22107)

Minify HTML by what a value says rather than how it was spelled. (by @alexander-akait in #22154)

Follow HTML template form and frameset rules during tree construction. (by @dependabot in #22129)

Keep the whitespace calc() needs around + and - in a custom property. (by @alexander-akait in #22150)

Keep an attribute's delimiter and spell its value back where quoting is frozen. (by @alexander-akait in #22119)

Rewrite an attribute value the source spelled with character references. (by @aryanraj45 in #22110)

Unquote an HTML attribute value carrying a vertical tab. (by @alexander-akait in #22162)

Keep a shadow's spread and canonicalize a merged selector list. (by @alexander-akait in #22101)

Leave out an implied tag and merge adjacent runs on the first pass. (by @aryanraj45 in #22121)

Minify in one pass what a second pass of the CSS minifier used to find. (by @alexander-akait in #22106)

Cover the CSS lookup tables no stylesheet in the corpus reaches. (by @aryanraj45 in #22126)

Keep initial where an engine reads the property's initial keyword apart. (by @aryanraj45 in #22128)

Join the CSS rules a cut leaves adjacent, and keep a value an escape ate. (by @alexander-akait in #22108)

Drop the dead CSS a cut leaves, and join more of the blocks that print alike. (by @alexander-akait in #22111)

Run the printer equivalence suite against Firefox as well as Chrome. (by @aryanraj45 in #22151)

Finish in one CSS pass the joins, drops and collapses left to a second. (by @alexander-akait in #22117)

Move the context module sources into lib/context/. (by @alexander-akait in #22115)

Declare loader context types in JSDoc instead of hand-written .d.ts files. (by @alexander-akait in #22116)

Emit a failing module's stack relative, and name what a tap failed with. (by @alexander-akait in #22122)

Finish in one CSS pass the drops, layer gathers and joins left to a second. (by @alexander-akait in #22120)

Speed up CSS parsing by stepping over dropped selector preludes in bytes. (by @alexander-akait in #22142)

... (truncated)

Commits

5a10675 chore(release): new release (#22105)
9c448c4 test: consolidate loose harness files under test/harness (#22163)
a947604 fix(html): unquote an attribute value carrying a vertical tab (#22162)
db556f3 test: run the printer equivalence suite against Gecko in CI (#22155)
d174cdf perf(css): drop a fallback every browserslist target reads past (#22158)
39f14f2 refactor(javascript): declare block bindings from the parse (#22161)
0835411 test: move suite drivers into test/templates (#22159)
b48cd77 fix(html): minify by what a value says rather than how it was spelled (#22154)
a774f10 test: define the webpack major instead of bundling package.json (#22160)
4b2eed0 docs: report only what needs a decision while watching a PR (#22156)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [memfs](https://github.com/streamich/memfs) | `4.78.0` | `4.78.1` | | [babel-jest](https://github.com/jestjs/jest/tree/HEAD/packages/babel-jest) | `30.5.1` | `30.5.2` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.5.1` | `30.5.2` | | [prettier](https://github.com/prettier/prettier) | `3.9.7` | `3.9.8` | | [webpack](https://github.com/webpack/webpack) | `5.111.0` | `5.111.1` | Updates `memfs` from 4.78.0 to 4.78.1 - [Release notes](https://github.com/streamich/memfs/releases) - [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md) - [Commits](streamich/memfs@v4.78.0...v4.78.1) Updates `babel-jest` from 30.5.1 to 30.5.2 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.5.2/packages/babel-jest) Updates `jest` from 30.5.1 to 30.5.2 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.5.2/packages/jest) Updates `prettier` from 3.9.7 to 3.9.8 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.7...3.9.8) Updates `webpack` from 5.111.0 to 5.111.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.111.0...v5.111.1) --- updated-dependencies: - dependency-name: memfs dependency-version: 4.78.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: babel-jest dependency-version: 30.5.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: jest dependency-version: 30.5.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: prettier dependency-version: 3.9.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: webpack dependency-version: 5.111.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2026-09-23T10:33:47Z

⚠️ No Changeset found

Latest commit: 0705038

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

socket-security · 2026-09-23T10:34:13Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
jest@30.5.1 ⏵ 30.5.2	⁺¹		⁺³
babel-jest@30.5.1 ⏵ 30.5.2	⁺¹		⁺³
memfs@4.78.0 ⏵ 4.78.1
webpack@5.111.0 ⏵ 5.111.1		⁺¹	⁺¹
prettier@3.9.7 ⏵ 3.9.8

View full report

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 23, 2026

webpack Bot approved these changes Sep 23, 2026

View reviewed changes

webpack Bot enabled auto-merge (squash) September 23, 2026 10:33

webpack Bot merged commit 88f2352 into main Sep 23, 2026
20 checks passed

webpack Bot deleted the dependabot/npm_and_yarn/dependencies-bde5238574 branch September 23, 2026 10:38

Navigation Menu

Uh oh!

chore(deps): bump the dependencies group with 5 updates - #2415

chore(deps): bump the dependencies group with 5 updates#2415
webpack[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-bde5238574

dependabot Bot commented on behalf of github Sep 23, 2026

Uh oh!

changeset-bot Bot commented Sep 23, 2026

Uh oh!

socket-security Bot commented Sep 23, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 23, 2026

Release v4.78.1

What's Changed

v30.5.2

Features

Fixes

New Contributors

30.5.2

Features

Fixes

v30.5.2

Features

Fixes

New Contributors

30.5.2

Features

Fixes

3.9.8

3.9.8

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

v5.111.1

Patch Changes

5.111.1

Patch Changes

Uh oh!

changeset-bot Bot commented Sep 23, 2026

⚠️ No Changeset found

Uh oh!

socket-security Bot commented Sep 23, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by `@seiyab`)