Skip to content

chore(deps): bump the dependencies group across 1 directory with 8 updates - #2490

Merged
webpack[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-e1166050d9
Oct 21, 2026
Merged

webpack[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-e1166050d9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 8 updates in the / directory:

Package From To
schema-utils 4.5.0 4.6.0
@hono/node-server 2.1.4 2.1.5
cspell 10.3.6 10.4.0
fastify 5.12.5 5.12.7
puppeteer 25.13.0 25.14.0
react 19.3.0 19.3.1
react-dom 19.3.0 19.3.1
webpack 5.111.1 5.112.0

Updates schema-utils from 4.5.0 to 4.6.0

Release notes

Sourced from schema-utils's releases.

v4.6.0

Minor Changes

  • perf: add schema-utils precompile to compile a schema ahead of time into a check that validate takes as its fourth argument, so valid options are validated without loading ajv (by @​alexander-akait in #231)
Changelog

Sourced from schema-utils's changelog.

4.6.0

Minor Changes

  • perf: add schema-utils precompile to compile a schema ahead of time into a check that validate takes as its fourth argument, so valid options are validated without loading ajv (by @​alexander-akait in #231)
Commits

Updates @hono/node-server from 2.1.4 to 2.1.5

Release notes

Sourced from @​hono/node-server's releases.

v2.1.5

What's Changed

New Contributors

Full Changelog: honojs/node-server@v2.1.4...v2.1.5

Commits
  • 4b47a0d 2.1.5
  • e77824a fix(serve-static): only serve GET and HEAD requests (#405)
  • 1b6e6bf fix(listener): abort the request signal when an HTTP/2 client resets the stre...
  • See full diff in compare view

Updates cspell from 10.3.6 to 10.4.0

Release notes

Sourced from cspell's releases.

v10.4.0

Features

feat: Add --glob-symlinks to follow symbolic links when matching globs (#9342)

Summary

cspell lint can now follow symbolic links in glob searches, with --glob-symlinks. Glob searches skip linked files and linked directories by default, so a tree made of links, such as Bazel runfiles, found nothing to check.

Closes #7700.

Feature

cspell lint --glob-symlinks "**"
  • --glob-symlinks follows symbolic links, and searches linked directories, when matching globs. Links are followed wherever they point.
  • CSPELL_GLOB_SYMLINKS=true does the same for a whole job. --no-glob-symlinks overrides it.
  • API: globSymlinks in the lint options.
  • It can't be set in a configuration file.
  • Files are reported by the path through the link. A file reached by two paths is checked under both.
  • It applies only to glob searches. For --file, --files, and --file-list documents, use --follow-symlinks.
  • The design decisions are recorded in docs/ADRs/glob-symlinks/.
  • Link loops, such as a link to a parent directory, are stopped by the glob search after one level.

feat: Respect COLUMNS for help and table width (#9358)

Summary

Help, and the tables from cspell trace and cspell dictionaries, now follow the COLUMNS environment variable. That lets you choose a narrower width, which helps with large fonts and screen magnifiers. The help in the cspell README now fits on npmjs.com without scrolling sideways.

Feature

Set COLUMNS to pick the output width:

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.4.0 (2026-10-14)

Features

feat: Add --glob-symlinks to follow symbolic links when matching globs (#9342)

Summary

cspell lint can now follow symbolic links in glob searches, with --glob-symlinks. Glob searches skip linked files and linked directories by default, so a tree made of links, such as Bazel runfiles, found nothing to check.

Closes #7700.

Feature

cspell lint --glob-symlinks "**"
  • --glob-symlinks follows symbolic links, and searches linked directories, when matching globs. Links are followed wherever they point.
  • CSPELL_GLOB_SYMLINKS=true does the same for a whole job. --no-glob-symlinks overrides it.
  • API: globSymlinks in the lint options.
  • It can't be set in a configuration file.
  • Files are reported by the path through the link. A file reached by two paths is checked under both.
  • It applies only to glob searches. For --file, --files, and --file-list documents, use --follow-symlinks.
  • The design decisions are recorded in docs/ADRs/glob-symlinks/.
  • Link loops, such as a link to a parent directory, are stopped by the glob search after one level.

feat: Respect COLUMNS for help and table width (#9358)

Summary

Help, and the tables from cspell trace and cspell dictionaries, now follow the COLUMNS environment variable. That lets you choose a narrower width, which helps with large fonts and screen magnifiers. The help in the cspell README now fits on npmjs.com without scrolling sideways.

Feature

... (truncated)

Commits
  • 7e2bbb5 v10.4.0
  • d2dce3f chore: Prepare Release v10.4.0 (auto-deploy) (#9380)
  • a1509fe chore: Fix the README build after the inject-markdown 6 upgrade (#9429)
  • ab3ae04 fix: Workflow Bot -- Update Dictionaries (main) (#9405)
  • 55c0fbd fix: Show hidden lint options and issue template help in cspell --help (#9387)
  • 628768a v10.4.0-alpha.1
  • 998957b chore: Prepare Release v10.4.0-alpha.1 (auto-deploy) (#9378)
  • 4c287f5 fix: Deprecate cspell-lib/rpc; import from @cspell/rpc (#9376)
  • 7be53ce chore: Prepare Release v10.4.0-alpha.0 (auto-deploy) (#9332)
  • e3b5887 chore: Update README.md (#9368)
  • Additional commits viewable in compare view

Updates fastify from 5.12.5 to 5.12.7

Release notes

Sourced from fastify's releases.

v5.12.7

Full Changelog: fastify/fastify@v5.12.6...v5.12.7

v5.12.6

⚠️ Security Release

What's Changed

Full Changelog: fastify/fastify@v5.12.5...v5.12.6

Commits
  • 9f40003 Bumped v5.12.7
  • 16469b9 Bumped v5.12.6
  • 63496de [Backport 5.x] docs: document fastify.query() shorthand for RFC 10008 (#7094)
  • 20b55d4 [Backport 5.x] fix: remove error when HTTP QUERY request has empty body (#7060)
  • 38d2b63 [Backport 5.x] fix: copy a set-cookie array passed to reply.header instead of...
  • 3241fbd [Backport 5.x] fix(validation): lowercase header names in propertyNames enum/...
  • 1a46b1b [Backport 5.x] perf: use a FIFO cache for parsed content-types (#7072)
  • 7e06676 [Backport 5.x] fix: resolve reply.mediaType from raw response headers (#7067)
  • 1b0eb32 [Backport 5.x] perf: avoid resetting the level of request child loggers (#7058)
  • a636a10 [Backport 5.x] perf: decode string bodies once instead of per chunk (#7053)
  • Additional commits viewable in compare view

Updates puppeteer from 25.13.0 to 25.14.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v25.14.0

25.14.0 (2026-10-14)

🎉 Features

  • migrate network emulation to Network.emulateNetworkConditionsByRule (#15508) (2952199)
  • network: accept Headers instances for request interception and extra headers (#15530) (b20d03b)
  • roll to Firefox 158.0 (#15582) (3902129)

🛠️ Fixes

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.2.4 to 3.2.5

puppeteer: v25.14.0

25.14.0 (2026-10-14)

♻️ Chores

  • puppeteer: Synchronize puppeteer versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​puppeteer/browsers bumped from 3.2.4 to 3.2.5
      • puppeteer-core bumped from 25.13.0 to 25.14.0
Commits
  • d1b9a21 chore: release main (#15577)
  • 414231a fix: enforce blocklist/allowlist for service worker requests (#15586)
  • 2952199 feat: migrate network emulation to Network.emulateNetworkConditionsByRule (#1...
  • 9478d60 chore(deps-dev): bump the dev-dependencies group with 5 updates (#15571)
  • b20d03b feat(network): accept Headers instances for request interception and extra he...
  • 9ea69c1 fix: roll to Chrome 155.0.8059.79 (#15584)
  • 198c333 fix(browsers): persist alias removal when uninstalling a browser (#15463)
  • 3902129 feat: roll to Firefox 158.0 (#15582)
  • d8e4e36 fix(browsers): prevent symlink chain escapes during zip extraction (#15578)
  • 04dee98 fix: don't allow path traversal from buildId (#15565)
  • Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates webpack from 5.111.1 to 5.112.0

Release notes

Sourced from webpack's releases.

v5.112.0

Minor Changes

... (truncated)

Changelog

Sourced from webpack's changelog.

5.112.0

Minor Changes

... (truncated)

Commits
  • 755c49e chore(release): new release (#22170)
  • 35b066f feat(javascript): fold switches, PURE IIFEs, null tests, Babel helpers and pr...
  • edea0f5 refactor(css,html): give the ASCII helpers one Infra name in both parsers (#2...
  • 916cf37 fix(css): keep a rule nested under a selector opening on a combinator when lo...
  • 2ebe482 ci: pin Chrome and Firefox to the builds puppeteer-core names (#22703)
  • ed18fa1 fix(css): reach for no newer spelling where a target browser is one the data ...
  • 26d315a refactor: ask the dependency and module kind instead of flags and type string...
  • 3020447 refactor(cache): normalize build dependencies once (#22704)
  • 9b5fab7 fix(deps): bump the dependencies group with 4 updates (#22683)
  • b46763e feat: apply top-level plugins of a multi-configuration to the MultiCompiler (...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 21, 2026
@changeset-bot

changeset-bot Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 05a4fde

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@webpack
webpack Bot enabled auto-merge (squash) October 21, 2026 10:34
@socket-security

socket-security Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedfastify@​5.12.5 ⏵ 5.12.766 -3210010099 +2100
Updatedwebpack@​5.111.1 ⏵ 5.112.081 -121009399100
Updatedreact@​19.3.0 ⏵ 19.3.11001008497100
Updatedpuppeteer@​25.13.0 ⏵ 25.14.0921009397100
Updatedreact-dom@​19.3.0 ⏵ 19.3.110010092 +198100
Updatedschema-utils@​4.5.0 ⏵ 4.6.09910010093 -2100
Updated@​hono/​node-server@​2.1.4 ⏵ 2.1.5100 +110010094100
Updatedcspell@​10.3.6 ⏵ 10.4.098 +110010096 +1100

View full report

…dates

Bumps the dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [schema-utils](https://github.com/webpack/schema-utils) | `4.5.0` | `4.6.0` |
| [@hono/node-server](https://github.com/honojs/node-server) | `2.1.4` | `2.1.5` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.3.6` | `10.4.0` |
| [fastify](https://github.com/fastify/fastify) | `5.12.5` | `5.12.7` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `25.13.0` | `25.14.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` |
| [webpack](https://github.com/webpack/webpack) | `5.111.1` | `5.112.0` |



Updates `schema-utils` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/webpack/schema-utils/releases)
- [Changelog](https://github.com/webpack/schema-utils/blob/main/CHANGELOG.md)
- [Commits](webpack/schema-utils@v4.5.0...v4.6.0)

Updates `@hono/node-server` from 2.1.4 to 2.1.5
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.1.4...v2.1.5)

Updates `cspell` from 10.3.6 to 10.4.0
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.4.0/packages/cspell)

Updates `fastify` from 5.12.5 to 5.12.7
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.12.5...v5.12.7)

Updates `puppeteer` from 25.13.0 to 25.14.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v25.13.0...puppeteer-v25.14.0)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `webpack` from 5.111.1 to 5.112.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.111.1...v5.112.0)

---
updated-dependencies:
- dependency-name: "@hono/node-server"
  dependency-version: 2.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: cspell
  dependency-version: 10.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: fastify
  dependency-version: 5.12.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: puppeteer
  dependency-version: 25.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: schema-utils
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: webpack
  dependency-version: 5.112.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the dependencies group with 8 updates chore(deps): bump the dependencies group across 1 directory with 8 updates Oct 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dependencies-e1166050d9 branch from 0344375 to 05a4fde Compare October 21, 2026 11:17
@webpack
webpack Bot merged commit 0527989 into main Oct 21, 2026
22 checks passed
@webpack
webpack Bot deleted the dependabot/npm_and_yarn/dependencies-e1166050d9 branch October 21, 2026 11:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants