chore(deps): bump the dependencies group with 6 updates by dependabot[bot] · Pull Request #4753 · webpack/webpack-cli

dependabot · 2026-05-15T14:50:09Z

Bumps the dependencies group with 6 updates:

Package	From	To
eslint	`10.3.0`	`10.4.0`
jest	`30.4.1`	`30.4.2`
lint-staged	`17.0.3`	`17.0.4`
webpack-dev-server	`5.2.3`	`5.2.4`
@inquirer/expand	`5.0.13`	`5.0.14`
@inquirer/select	`5.1.4`	`5.1.5`

Updates eslint from 10.3.0 to 10.4.0

Release notes

Sourced from eslint's releases.

v10.4.0

Features

1a45ec5 feat: check sequence expressions in for-direction (#20701) (kuldeep kumar)

450040b feat: add includeIgnoreFile() to eslint/config (#20735) (Kirk Waiblinger)

Bug Fixes

544c0c3 fix: escape code path DOT labels in debug output (#20866) (Pixel998)

6799431 fix: update dependency @eslint/config-helpers to ^0.6.0 (#20850) (renovate[bot])

f078fef fix: handle non-array deprecated rule replacements (#20825) (xbinaryx)

Documentation

7e52a71 docs: add mention of @eslint-react/eslint-plugin (#20869) (Pavel)

db3468b docs: tweak wording around ambiguous CJS-vs-ESM config (#20865) (Kirk Waiblinger)

9084664 docs: Update README (GitHub Actions Bot)

9cc7387 docs: Update README (GitHub Actions Bot)

3d7b548 docs: Update README (GitHub Actions Bot)

191ec3c docs: Update README (GitHub Actions Bot)

Chores

6616856 chore: upgrade knip to v6 (#20875) (Pixel998)

d13b084 ci: ensure auto-created PRs run CI (#20860) (lumir)

e71c7af ci: bump pnpm/action-setup from 6.0.5 to 6.0.7 (#20862) (dependabot[bot])

d84393d test: add unit tests for SuppressionsService.applySuppressions() (#20863) (kuldeep kumar)

24db8cb test: add tests for SuppressionsService.save() (#20802) (kuldeep kumar)

2ef0549 chore: update ecosystem plugins (#20857) (github-actions[bot])

a429791 ci: remove eslint-webpack-plugin types integration test (#20668) (Milos Djermanovic)

9e37386 chore: replace recast with range approach in code-sample-minimizer (#20682) (Copilot)

0dd1f9f test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#20845) (Francesco Trotta)

9da3c7b refactor: remove deprecated meta.language and migrate meta.dialects (#20716) (Pixel998)

2099ed1 refactor: add meta.defaultOptions to more rules, enable linting (#20800) (xbinaryx)

f1dfbc9 chore: update ecosystem plugins (#20836) (github-actions[bot])

c759413 ci: bump pnpm/action-setup from 6.0.3 to 6.0.5 (#20843) (dependabot[bot])

5b817d6 test: add unit tests for lib/shared/ast-utils (#20838) (kuldeep kumar)

1c13ae3 test: add unit tests for lib/shared/severity (#20835) (kuldeep kumar)

Commits

452c401 10.4.0
b6417e8 Build: changelog update for 10.4.0
6616856 chore: upgrade knip to v6 (#20875)
d13b084 ci: ensure auto-created PRs run CI (#20860)
7e52a71 docs: add mention of @eslint-react/eslint-plugin (#20869)
e71c7af ci: bump pnpm/action-setup from 6.0.5 to 6.0.7 (#20862)
544c0c3 fix: escape code path DOT labels in debug output (#20866)
db3468b docs: tweak wording around ambiguous CJS-vs-ESM config (#20865)
d84393d test: add unit tests for SuppressionsService.applySuppressions() (#20863)
9084664 docs: Update README
Additional commits viewable in compare view

Updates jest from 30.4.1 to 30.4.2

Release notes

Sourced from jest's releases.

v30.4.2

Fixes

[jest-runtime] Fix named imports from CJS modules whose module.exports is a function with own-property exports (#16150)

Full Changelog: jestjs/jest@v30.4.1...v30.4.2

Changelog

Sourced from jest's changelog.

30.4.2

Fixes

[jest-runtime] Fix named imports from CJS modules whose module.exports is a function with own-property exports (#16150)

Commits

746f2a0 v30.4.2
See full diff in compare view

Updates lint-staged from 17.0.3 to 17.0.4

Release notes

Sourced from lint-staged's releases.

v17.0.4

Patch Changes

#1788 f95c1f8 - Another fix for making sure lint-staged adds task modifications correctly to the commit in the following cases:

after editing <file> it is staged with git add <file>, and then committed with git commit

after editing <file> it is committed with git commit --all without explicit git add

after editing <file> it is committed with git commit <pathspec> without explicit git add

There's new test cases which actually setup the Git pre_commit hook to run lint-staged and verify them. These issues started in v17.0.0 when trying to improve support for committig without having explicitly staged files.

Changelog

Sourced from lint-staged's changelog.

17.0.4

Patch Changes

#1788 f95c1f8 - Another fix for making sure lint-staged adds task modifications correctly to the commit in the following cases:

after editing <file> it is staged with git add <file>, and then committed with git commit

after editing <file> it is committed with git commit --all without explicit git add

after editing <file> it is committed with git commit <pathspec> without explicit git add

There's new test cases which actually setup the Git pre_commit hook to run lint-staged and verify them. These issues started in v17.0.0 when trying to improve support for committig without having explicitly staged files.

Commits

2862964 Merge pull request #1789 from lint-staged/changeset-release/main
c9ecd54 chore(changeset): release
cc6b51a Merge pull request #1788 from lint-staged/fix-update-index-again
f95c1f8 fix: update both default index.lock and non-standard lock when latter exists
f44ee68 Merge pull request #1786 from lint-staged/update-repo-url
a61cf18 build(deps): update dependencies
ea00037 docs: disable Changesets "thanks"
ab7c26c docs: update repo URL to point in lint-staged/lint-staged
See full diff in compare view

Updates webpack-dev-server from 5.2.3 to 5.2.4

Release notes

Sourced from webpack-dev-server's releases.

v5.2.4

5.2.4 (2026-05-11)

Bug Fixes

set Cross-Origin-Resource-Policy header to prevent source code theft over HTTP

Changelog

Sourced from webpack-dev-server's changelog.

5.2.4 (2026-05-11)

Bug Fixes

set Cross-Origin-Resource-Policy header to prevent source code theft over HTTP

Commits

fd40130 chore(release): 5.2.4
ece4f36 chore: update deps (#5661)
a216144 ci: fix test (#5658)
df073c5 Merge commit from fork
See full diff in compare view

Updates @inquirer/expand from 5.0.13 to 5.0.14

Commits

113558c chore: Publish new release
f0ca377 chore: format everything with nano-staged
5341ca1 chore: Bump yarn
cb7ffda ci: add Node.js 26 to test matrix (#2112)
0401a5c fix(@inquirer/input): allow explicit undefined for default option (#2111)
40f87a8 fix: reset cursor to column 0 after prompt completes
b88c9a2 fix: satisfy eslint-plugin-n v18 rules
697684a chore(deps-dev): Bump the linting group across 1 directory with 6 updates
105c439 chore(deps-dev): Bump the build group with 3 updates (#2107)
a020d8a chore(deps-dev): Bump oxfmt in the formatting group (#2106)
Additional commits viewable in compare view

Updates @inquirer/select from 5.1.4 to 5.1.5

Commits

113558c chore: Publish new release
f0ca377 chore: format everything with nano-staged
5341ca1 chore: Bump yarn
cb7ffda ci: add Node.js 26 to test matrix (#2112)
0401a5c fix(@inquirer/input): allow explicit undefined for default option (#2111)
40f87a8 fix: reset cursor to column 0 after prompt completes
b88c9a2 fix: satisfy eslint-plugin-n v18 rules
697684a chore(deps-dev): Bump the linting group across 1 directory with 6 updates
105c439 chore(deps-dev): Bump the build group with 3 updates (#2107)
a020d8a chore(deps-dev): Bump oxfmt in the formatting group (#2106)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [eslint](https://github.com/eslint/eslint) | `10.3.0` | `10.4.0` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.4.1` | `30.4.2` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.3` | `17.0.4` | | [webpack-dev-server](https://github.com/webpack/webpack-dev-server) | `5.2.3` | `5.2.4` | | [@inquirer/expand](https://github.com/SBoudrias/Inquirer.js) | `5.0.13` | `5.0.14` | | [@inquirer/select](https://github.com/SBoudrias/Inquirer.js) | `5.1.4` | `5.1.5` | Updates `eslint` from 10.3.0 to 10.4.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.3.0...v10.4.0) Updates `jest` from 30.4.1 to 30.4.2 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest) Updates `lint-staged` from 17.0.3 to 17.0.4 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.0.3...v17.0.4) Updates `webpack-dev-server` from 5.2.3 to 5.2.4 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.2.3...v5.2.4) Updates `@inquirer/expand` from 5.0.13 to 5.0.14 - [Release notes](https://github.com/SBoudrias/Inquirer.js/releases) - [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/expand@5.0.13...@inquirer/expand@5.0.14) Updates `@inquirer/select` from 5.1.4 to 5.1.5 - [Release notes](https://github.com/SBoudrias/Inquirer.js/releases) - [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/select@5.1.4...@inquirer/select@5.1.5) --- updated-dependencies: - dependency-name: eslint dependency-version: 10.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: jest dependency-version: 30.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: lint-staged dependency-version: 17.0.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: webpack-dev-server dependency-version: 5.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@inquirer/expand" dependency-version: 5.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@inquirer/select" dependency-version: 5.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2026-05-15T14:50:18Z

⚠️ No Changeset found

Latest commit: 12518e4

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

dependabot Bot added the dependencies Pull requests that update a dependency file label May 15, 2026

webpack Bot approved these changes May 15, 2026

View reviewed changes

webpack Bot enabled auto-merge (squash) May 15, 2026 14:50

webpack Bot merged commit 28887bb into main May 15, 2026
17 checks passed

webpack Bot deleted the dependabot/npm_and_yarn/dependencies-b20e626d14 branch May 15, 2026 15:32

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the dependencies group with 6 updates#4753

chore(deps): bump the dependencies group with 6 updates#4753
webpack[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-b20e626d14

dependabot Bot commented on behalf of github May 15, 2026

Uh oh!

changeset-bot Bot commented May 15, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 15, 2026

v10.4.0

Features

Bug Fixes

Documentation

Chores

v30.4.2

Fixes

30.4.2

Fixes

v17.0.4

Patch Changes

17.0.4

Patch Changes

v5.2.4

5.2.4 (2026-05-11)

Bug Fixes

5.2.4 (2026-05-11)

Bug Fixes

Uh oh!

changeset-bot Bot commented May 15, 2026

⚠️ No Changeset found

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants