[dependabot]

Bumps the dev-webpack group with 4 updates in the / directory: @pmmmwh/react-refresh-webpack-plugin, minimizer-webpack-plugin, react-refresh and webpack.

Updates @pmmmwh/react-refresh-webpack-plugin from 0.6.2 to 0.6.3

Release notes

Sourced from @​pmmmwh/react-refresh-webpack-plugin's releases.

v0.6.3

0.6.3 (27 Aug 2026)

Features

• Use __webpack_global__ if available, to prevent issues with multi-pass bundling (#940)

• Added support for webpack-dev-server 6.x (#1046)

Internal

• Bumped all development dependencies (#995, #1045)

Changelog

Sourced from @​pmmmwh/react-refresh-webpack-plugin's changelog.

0.6.3 (27 Aug 2026)

Features

• Use __webpack_global__ if available, to prevent issues with multi-pass bundling (#940)

• Added support for webpack-dev-server 6.x (#1046)

Internal

• Bumped all development dependencies (#995, #1045)

Commits

• 5732b5a chore: release v0.6.3 (#1053)
• 2015a55 fix: support webpack-dev-server 6.x (drop SockJS instanceof checks) (#1046)
• 92477c1 chore(deps): bump fast-uri in /examples/flow-with-babel (#1052)
• 20c4945 chore(deps): bump fast-uri in /examples/typescript-with-swc (#1051)
• 5b55c13 chore(deps): bump fast-uri in /examples/typescript-with-babel (#1050)
• c23d0d8 chore(deps): bump js-yaml in /examples/typescript-with-tsc (#1049)
• 27723c3 chore(deps): bump fast-uri from 3.1.4 to 3.1.5 (#1048)
• b0cb8d0 chore(deps): bump ip-address from 10.2.0 to 10.4.0 (#1047)
• 257c43a chore: bump deps (#1045)
• 8a8cdeb chore(deps-dev): bump webpack in /examples/typescript-with-tsc (#1044)
• Additional commits viewable in compare view

Updates minimizer-webpack-plugin from 5.6.1 to 5.14.0

Changelog

Sourced from minimizer-webpack-plugin's changelog.

5.14.0

Minor Changes

• Record the extractComments banner and the URL it names the license file by as licenseBanner in the asset info, and build that URL without the path module. (by @​alexander-akait in #764)

Patch Changes

• Compose source maps and locate minifier errors with webpack's own webpack-sources (compiler.webpack.sources) instead of @jridgewell/trace-mapping, which now map each token to its exact original column. The plugin no longer has a source map dependency of its own; with a webpack whose webpack-sources predates 3.7.0, minifier errors are reported at their minified position. (by @​alexander-akait in #767)

5.13.1

Patch Changes

• perf: validate options with a check precompiled by schema-utils precompile, so valid options no longer load ajv and compile the schema, about 200ms off every production webpack start (by @​alexander-akait in #756)

5.13.0

Minor Changes

• Add formatBanner and getBannerPosition helpers to a minify function, so an HTML minimizer can write the extractComments banner as <!-- … --> at the end. (by @​alexander-akait in #752)

Patch Changes

• Fallback to the serialized worker path when regular expression options are used with process workers that cannot preserve them. (by @​xiaoxiaojx in #749)

5.12.0

Minor Changes

• Take a minimizer as a module path or { path, export }, which a worker requires rather than rebuilding it from its source. (by @​alexander-akait in #744)

Patch Changes

• Minify a style="" body as a rule's contents with every CSS minimizer, rather than dropping or rejecting it. (by @​alexander-akait in #748)

• Minify assets whose names carry a #fragment, such as [name].js#[contenthash] or an asset module named [hash][ext][query][fragment]. (by @​alexander-akait in #747)

5.11.0

Minor Changes

• let a minimizer or generator say which processAssets stage it runs in and what name its work goes under in an asset's info, through a getStage and a getAssetFlag on the function — the way it declares everything else — and ship MinimizerPlugin.compress, which takes the algorithm to run and the compressionOptions to run it with, works under compressed rather than minimized or generated, and goes to minify to compress an asset in place or to generate to write the compressed file beside it (by @​alexander-akait in #737)

• Add threshold, minRatio and relatedName to an asset generator, let deleteOriginalAssets be a function and take the original file alone, take a filename function, read minify: [] as nothing to minify rather than false, and type what minify has long accepted. (by @​alexander-akait in #742)

• Rename the exported class to MinimizerPlugin and say so in diagnostics. (by @​alexander-akait in #739)

Patch Changes

... (truncated)

Commits

• See full diff in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates react-refresh from 0.14.0 to 0.19.0

Release notes

Sourced from react-refresh's releases.

0.14.10 (October 14, 2020)

React

• Backport support for the new JSX transform to 0.14.x. (@​lunaruan in #18299 and @​gaearon in #20024)

Changelog

Sourced from react-refresh's changelog.

19.3.0 (September 9, 2026)

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)
• Fix hang when updating a dehydrated boundary inside a hidden tree (@​gaearon #37135)
• Don't reacquire Host Singletons during dev effect validation (@​gnoff #37113)
• Only remove properties from Host Singletons on release (@​gnoff #37112)

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-refresh since your current version.

Updates webpack from 5.108.4 to 5.112.2

Release notes

Sourced from webpack's releases.

v5.112.2

Patch Changes

• Reduce repeated scans when concatenating imported modules. (by @​xiaoxiaojx in #22865)

• Avoid allocating CSS module sets for single-group chunks. (by @​xiaoxiaojx in #22866)

• Return the value of every module type loaded with importModule(). (by @​alexander-akait in #22869)

v5.112.1

Patch Changes

• Rebuild a lazy barrel in watch when what it defers changes, and keep the imports and re-exports it still runs. (by @​aryanraj45 in #22699)

• Rebuild under cacheUnaffected a module whose re-export target goes or returns. (by @​aryanraj45 in #22749)

• Fix "Self-reference dependency has unused export name" for CommonJS namespace re-exports. (by @​alexander-akait in #22791)

• Fix exportType: "style" CSS modules throwing outside the runtime chunk. (by @​lazerg in #22833)

• Fix crash when a CSS module with exportType: "style" imports an ignored stylesheet. (by @​codeXsidd in #22846)

• Keep empty process environment variables that .env files don't define in DotenvPlugin. (by @​alexander-akait in #22794)

• Rehash an ESM entry chunk when a chunk it imports by file name changes. (by @​alexander-akait in #22804)

• Handle a NUL inside an HTML CDATA section the way the parsing spec does. (by @​dependabot in #22811)

• Keep module exports live across chunks, runtimes, HMR and eval, sparing globals. (by @​alexander-akait in #22733)

• Await asynchronous modules that ProvidePlugin injects into ES modules. (by @​alexander-akait in #22728)

• Keep a resolve that ends after the compiler closed from throwing. (by @​alexander-akait in #22795)

• Preserve string names passed to SharedWorker constructors. (by @​bjohansebas in #22770)

• Preserve string contents when extracting source map comments. (by @​bjohansebas in #22768)

• Scope strict-mode, async and generator block function declarations to their block. (by @​alexander-akait in #22800)

• Preserve raw dotenv values when reusing cached environment files. (by @​Eshiv-Pandey in #22787)

• Preserve assigned or patched built-ins, conversions and pattern targets. (by @​aryanraj45 in #22761)

• Keep globals a globalThis write replaces, and slice on a patched array. (by @​alexander-akait in #22862)

• Skip HTML script tags for shared chunks that emit no JavaScript. (by @​bjohansebas in #22779)

• Keep the digits Firefox lays out a minified CSS percentage with. (by @​alexander-akait in #22718)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.112.2

Patch Changes

• Reduce repeated scans when concatenating imported modules. (by @​xiaoxiaojx in #22865)

• Avoid allocating CSS module sets for single-group chunks. (by @​xiaoxiaojx in #22866)

• Return the value of every module type loaded with importModule(). (by @​alexander-akait in #22869)

5.112.1

Patch Changes

• Rebuild a lazy barrel in watch when what it defers changes, and keep the imports and re-exports it still runs. (by @​aryanraj45 in #22699)

• Rebuild under cacheUnaffected a module whose re-export target goes or returns. (by @​aryanraj45 in #22749)

• Fix "Self-reference dependency has unused export name" for CommonJS namespace re-exports. (by @​alexander-akait in #22791)

• Fix exportType: "style" CSS modules throwing outside the runtime chunk. (by @​lazerg in #22833)

• Fix crash when a CSS module with exportType: "style" imports an ignored stylesheet. (by @​codeXsidd in #22846)

• Keep empty process environment variables that .env files don't define in DotenvPlugin. (by @​alexander-akait in #22794)

• Rehash an ESM entry chunk when a chunk it imports by file name changes. (by @​alexander-akait in #22804)

• Handle a NUL inside an HTML CDATA section the way the parsing spec does. (by @​dependabot in #22811)

• Keep module exports live across chunks, runtimes, HMR and eval, sparing globals. (by @​alexander-akait in #22733)

• Await asynchronous modules that ProvidePlugin injects into ES modules. (by @​alexander-akait in #22728)

• Keep a resolve that ends after the compiler closed from throwing. (by @​alexander-akait in #22795)

• Preserve string names passed to SharedWorker constructors. (by @​bjohansebas in #22770)

• Preserve string contents when extracting source map comments. (by @​bjohansebas in #22768)

• Scope strict-mode, async and generator block function declarations to their block. (by @​alexander-akait in #22800)

• Preserve raw dotenv values when reusing cached environment files. (by @​Eshiv-Pandey in #22787)

• Preserve assigned or patched built-ins, conversions and pattern targets. (by @​aryanraj45 in #22761)

• Keep globals a globalThis write replaces, and slice on a patched array. (by @​alexander-akait in #22862)

• Skip HTML script tags for shared chunks that emit no JavaScript. (by @​bjohansebas in #22779)

... (truncated)

Commits

• e95a7f2 chore(release): new release (#22867)
• 6e43fc2 fix: return the value of every module type from importModule() (#22869)
• 4ffac8d ci: rename the parser job to spec and run CSS, HTML and XML in one leg (#22870)
• 0c02242 test: split the syntax unit tests into tokenizer, parser and printer (#22825)
• 660608c perf(css): cut CPU and allocation in the CSS minifier (#22868)
• 8c3cbd3 perf: avoid allocating unused CSS module sets (#22866)
• a1e5f6a perf: avoid duplicate scans in module concatenation (#22865)
• 759b539 chore(release): new release (#22720)
• 539f8de fix(minify): keep globals a globalThis write replaces, and slice on a pat...
• 9668155 ci: run the deep-imports check in the lint job (#22859)
• Additional commits viewable in compare view