Bump the minor-versions group across 1 directory with 6 updates by dependabot[bot] · Pull Request #169 · nienow/cosmos

dependabot · 2026-07-06T20:59:56Z

Bumps the minor-versions group with 6 updates in the / directory:

Package	From	To
preact	`10.29.2`	`10.29.4`
@types/react	`19.2.15`	`19.2.17`
sass	`1.100.0`	`1.101.0`
ts-loader	`9.6.0`	`9.6.2`
webpack	`5.107.2`	`5.108.4`
webpack-cli	`7.0.3`	`7.2.1`

Updates preact from 10.29.2 to 10.29.4

Release notes

Sourced from preact's releases.

10.29.4

Fixes

Fix hydration-suspense crashing due to sCU bail (#5134, thanks @JoviDeCroock)

Revert "Fix useId stability across async Suspense (#5108)" (#5135, thanks @JoviDeCroock)

10.29.3

Fixes

Fix error recovery for partially rendered subtrees (#5120, thanks @JoviDeCroock)

Fix useId stability across async Suspense (#5108, thanks @JoviDeCroock)

Flush subtree effects when rendering a pending node (#5055, thanks @JoviDeCroock)

Fix hydrate recovery with null excess DOM children (#5112, thanks @JoviDeCroock)

Performance

Address and guard memory leak hotspots (#5116, thanks @JoviDeCroock)

Avoid redundant allocations and writes (#5115, thanks @JoviDeCroock)

Types

Accept Signalish for input DOM-type (#5096, thanks @JoviDeCroock)

Maintenance

Use npm staged publishing (#5101, thanks @JoviDeCroock)

Add tier 3 sponsor logos (#5098, thanks @JoviDeCroock)

Commits

707884c Merge pull request #5136 from preactjs/10.29.4
0e6a253 10.29.4
174d345 Merge pull request #5135 from preactjs/fix-preact-suspense
8d20635 Revert "Fix useId stability across async Suspense (#5108)"
893845a Merge pull request #5134 from preactjs/patch-crashing-at-suspense-bail
c3b4f0f Fix hydration-suspense crash due to sCU bailout
65b32cb 10.29.3 (#5121)
1a3b8b5 Fix error recovery for partially rendered subtrees (#5120)
67f0290 Fix useId stability across async Suspense (#5108)
d9e8984 Flush subtree effects (#5055)
Additional commits viewable in compare view

Updates @types/react from 19.2.15 to 19.2.17

Commits

See full diff in compare view

Updates sass from 1.100.0 to 1.101.0

Release notes

Sourced from sass's releases.

Dart Sass 1.101.0

To install Sass 1.101.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Potentially breaking bug fix: The Node package importer now properly supports resolving import-only variants of Sass files declared in the exports, sass, and style fields of package.json. Previously, these files were ignored even when loaded via @import, so any code relying on loading module-system-only files this way may break.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.101.0

Potentially breaking bug fix: The Node package importer now properly supports resolving import-only variants of Sass files declared in the exports, sass, and style fields of package.json. Previously, these files were ignored even when loaded via @import, so any code relying on loading module-system-only files this way may break.

Commits

63b9922 Load import-only files through package.json exports (#2772)
c7e9947 Migrate from bufbuild/buf-setup-action to bufbuild/buf-action (#2773)
7674a4c Bump postcss from 8.5.13 to 8.5.15 in /pkg/sass-parser (#2774)
See full diff in compare view

Updates ts-loader from 9.6.0 to 9.6.2

Release notes

Sourced from ts-loader's releases.

v9.6.2

chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micromatch → picomatch - thanks @johnnyreilly

Officially ts-loader has supported 3.6.3+ versions of TypeScript. This change means that certain scenarios with older versions of TS will now certainly fail. If anyone is actually using these versions it would be surprising.

v9.6.1

fix: rspack support - thanks @johnnyreilly and @bhollis

Changelog

Sourced from ts-loader's changelog.

9.6.2

chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micromatch → picomatch - thanks @johnnyreilly

Officially ts-loader has supported 3.6.3+ versions of TypeScript. This change means that certain scenarios with older versions of TS will now certainly fail. If anyone is actually using these versions it would be surprising.

9.6.1

fix: rspack support - thanks @johnnyreilly and @bhollis

Commits

b347bb7 chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micro...
32d82e6 fix: rspack support (#1699)
6bd992e chore: Update GitHub Actions workflow for release
See full diff in compare view

Updates webpack from 5.107.2 to 5.108.4

Release notes

Sourced from webpack's releases.

v5.108.4

Patch Changes

Speed up non-CSS-Modules parsing by not building unused selector AST nodes. (by @alexander-akait in #21324)

Speed up non-CSS-Modules CSS parsing by dropping value tokens nothing reads. (by @alexander-akait in #21324)

Resolve HTML asset URLs against the document <base href>. (by @alexander-akait in #21329)

Add HTML integration tests: generateError output, ignored src, null-char parse. (by @aryanraj45 in #21328)

Reduce CPU and memory overhead of HTML and CSS parsing and code generation. (by @alexander-akait in #21332)

Reduce HTML parser memory and CPU by skipping unused AST nodes. (by @alexander-akait in #21323)

Reduce HTML parser memory by storing the AST in struct-of-arrays form. (by @alexander-akait in #21331)

Key the provided-exports cache on a lazy barrel's still-lazy re-export targets. (by @hai-x in #21326)

Default output.globalObject to globalThis for universal targets. (by @alexander-akait in #21314)

Pass through new URL(...) directory references instead of resolving them. (by @alexander-akait in #21312)

v5.108.3

Patch Changes

Speed up CSS parsing and reduce CSS AST node memory. (by @alexander-akait in #21285)

Fix HMR codegen crash for harmony accept with unresolved imports. (by @xiaoxiaojx in #21302)

Match harmony accept dependencies by module reference so HMR codegen handles imports without a module or chunk id. (by @alexander-akait in #21303)

v5.108.2

Patch Changes

Fix lazy barrel deferral of ungrouped side-effect imports. (by @hai-x in #21291)

Respect the node: prefix for node.js core modules used as externals. (by @alexander-akait in #21286)

v5.108.1

Patch Changes

Fix invalid property access for escaped namespace imports with multi-character mangled export names. (by @xiaoxiaojx in #21280)

Add frames to ProfilingPlugin TracingStartedInBrowser event so the trace loads in Chrome DevTools. (by @alexander-akait in #21269)

v5.108.0

Minor Changes

Treat top-level await and import.meta as ES module markers, matching Node.js syntax detection so no explicit module type is needed. (by @alexander-akait in #21218)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.108.4

Patch Changes

Speed up non-CSS-Modules parsing by not building unused selector AST nodes. (by @alexander-akait in #21324)

Speed up non-CSS-Modules CSS parsing by dropping value tokens nothing reads. (by @alexander-akait in #21324)

Resolve HTML asset URLs against the document <base href>. (by @alexander-akait in #21329)

Add HTML integration tests: generateError output, ignored src, null-char parse. (by @aryanraj45 in #21328)

Reduce CPU and memory overhead of HTML and CSS parsing and code generation. (by @alexander-akait in #21332)

Reduce HTML parser memory and CPU by skipping unused AST nodes. (by @alexander-akait in #21323)

Reduce HTML parser memory by storing the AST in struct-of-arrays form. (by @alexander-akait in #21331)

Key the provided-exports cache on a lazy barrel's still-lazy re-export targets. (by @hai-x in #21326)

Default output.globalObject to globalThis for universal targets. (by @alexander-akait in #21314)

Pass through new URL(...) directory references instead of resolving them. (by @alexander-akait in #21312)

5.108.3

Patch Changes

Speed up CSS parsing and reduce CSS AST node memory. (by @alexander-akait in #21285)

Fix HMR codegen crash for harmony accept with unresolved imports. (by @xiaoxiaojx in #21302)

Match harmony accept dependencies by module reference so HMR codegen handles imports without a module or chunk id. (by @alexander-akait in #21303)

5.108.2

Patch Changes

Fix lazy barrel deferral of ungrouped side-effect imports. (by @hai-x in #21291)

Respect the node: prefix for node.js core modules used as externals. (by @alexander-akait in #21286)

5.108.1

Patch Changes

Fix invalid property access for escaped namespace imports with multi-character mangled export names. (by @xiaoxiaojx in #21280)

Add frames to ProfilingPlugin TracingStartedInBrowser event so the trace loads in Chrome DevTools. (by @alexander-akait in #21269)

... (truncated)

Commits

bb9ccfd chore(release): new release (#21319)
7639066 fix: invalidate provided-exports cache with lazy barrel (#21326)
ae28c54 perf: reduce CPU and memory overhead of the HTML and CSS pipelines (#21332)
e6fb547 perf: re-encode the HTML AST as struct-of-arrays behind a path-based visitor ...
5ce1c22 fix(html): resolve asset URLs against <base href> (#21329)
0e43c4a test(html): cover generateError, ignored-source, and null-character parse pat...
cebd793 refactor: build export-presence guards from a lazy boolean formula (#21320)
c2628cf fix: don't resolve new URL() directory references as modules (#21312)
00d8b2f perf: speed up non-CSS-Modules CSS parsing by skipping unused AST work (#21324)
f7a3f6d perf: reduce HTML parser memory and CPU with parser-level skip options (#21323)
Additional commits viewable in compare view

Updates webpack-cli from 7.0.3 to 7.2.1

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.2.1

Patch Changes

fix: CLIPlugin dynamic import interop under Bun (by @alexander-akait in #4799)

webpack-cli@7.2.0

Minor Changes

feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @bjohansebas in #4793)

Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @alexander-akait in #4796)

webpack-cli@7.1.0

Minor Changes

feat(cli): refresh the --help output using commander's configureHelp API — branded headers, section dividers, colorized terms and a clearer footer. Colors and chrome collapse to plain text when output is piped or --no-color is used, so scripts keep working. (by @alexander-akait in #4779)

feat: support .json5, .yaml/.yml and .toml configuration files by parsing them directly, with the parser package (json5, js-yaml, toml) installed on demand by the user and declared as optional peerDependencies so the parsers resolve correctly under Yarn PnP (by @alexander-akait in #4777)

Changelog

Sourced from webpack-cli's changelog.

7.2.1

Patch Changes

fix: CLIPlugin dynamic import interop under Bun (by @alexander-akait in #4799)

7.2.0

Minor Changes

feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @bjohansebas in #4793)

Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @alexander-akait in #4796)

7.1.0

Minor Changes

feat(cli): refresh the --help output using commander's configureHelp API — branded headers, section dividers, colorized terms and a clearer footer. Colors and chrome collapse to plain text when output is piped or --no-color is used, so scripts keep working. (by @alexander-akait in #4779)

feat: support .json5, .yaml/.yml and .toml configuration files by parsing them directly, with the parser package (json5, js-yaml, toml) installed on demand by the user and declared as optional peerDependencies so the parsers resolve correctly under Yarn PnP (by @alexander-akait in #4777)

Commits

71e34db chore(release): new release (#4800)
97c5541 fix: CLIPlugin dynamic import interop under Bun (#4799)
40b631f chore(release): new release (#4794)
f896a9c chore(deps-dev): bump the dependencies group across 1 directory with 4 update...
b4ea5a7 test: update target flag tests for webpack 5.108 (#4797)
9a5fef9 feat: support tsx as a fallback loader for TypeScript and JSX configs (#4796)
6cafa00 chore(deps): bump http-proxy-middleware from 2.0.9 to 2.0.10 (#4795)
3bfa81c docs: update (#4789)
d122911 chore: update webpack-dev-server peer dependency version (#4793)
3cd7423 chore(release): new release (#4778)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-versions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [preact](https://github.com/preactjs/preact) | `10.29.2` | `10.29.4` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.15` | `19.2.17` | | [sass](https://github.com/sass/dart-sass) | `1.100.0` | `1.101.0` | | [ts-loader](https://github.com/TypeStrong/ts-loader) | `9.6.0` | `9.6.2` | | [webpack](https://github.com/webpack/webpack) | `5.107.2` | `5.108.4` | | [webpack-cli](https://github.com/webpack/webpack-cli) | `7.0.3` | `7.2.1` | Updates `preact` from 10.29.2 to 10.29.4 - [Release notes](https://github.com/preactjs/preact/releases) - [Commits](preactjs/preact@10.29.2...10.29.4) Updates `@types/react` from 19.2.15 to 19.2.17 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `sass` from 1.100.0 to 1.101.0 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.100.0...1.101.0) Updates `ts-loader` from 9.6.0 to 9.6.2 - [Release notes](https://github.com/TypeStrong/ts-loader/releases) - [Changelog](https://github.com/TypeStrong/ts-loader/blob/main/CHANGELOG.md) - [Commits](TypeStrong/ts-loader@v9.6.0...v9.6.2) Updates `webpack` from 5.107.2 to 5.108.4 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.107.2...v5.108.4) Updates `webpack-cli` from 7.0.3 to 7.2.1 - [Release notes](https://github.com/webpack/webpack-cli/releases) - [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.0.3...webpack-cli@7.2.1) --- updated-dependencies: - dependency-name: preact dependency-version: 10.29.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-versions - dependency-name: "@types/react" dependency-version: 19.2.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-versions - dependency-name: sass dependency-version: 1.101.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-versions - dependency-name: ts-loader dependency-version: 9.6.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-versions - dependency-name: webpack dependency-version: 5.108.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-versions - dependency-name: webpack-cli dependency-version: 7.2.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-versions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 6, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the minor-versions group across 1 directory with 6 updates#169

Bump the minor-versions group across 1 directory with 6 updates#169
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-versions-35d4b230ad

dependabot Bot commented on behalf of github Jul 6, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

10.29.4

Fixes

10.29.3

Fixes

Performance

Types

Maintenance

Dart Sass 1.101.0

Changes

1.101.0

v9.6.2

v9.6.1

9.6.2

9.6.1

v5.108.4

Patch Changes

v5.108.3

Patch Changes

v5.108.2

Patch Changes

v5.108.1

Patch Changes

v5.108.0

Minor Changes

5.108.4

Patch Changes

5.108.3

Patch Changes

5.108.2

Patch Changes

5.108.1

Patch Changes

webpack-cli@7.2.1

Patch Changes

webpack-cli@7.2.0

Minor Changes

webpack-cli@7.1.0

Minor Changes

7.2.1

Patch Changes

7.2.0

Minor Changes

7.1.0

Minor Changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 6, 2026 •

edited

Loading