[dependabot]

Bumps the npm-minor-patch group with 3 updates in the / directory: @vscode/vsce, ts-loader and webpack.

Updates @vscode/vsce from 3.9.1 to 3.9.2

Release notes

Sourced from @​vscode/vsce's releases.

v3.9.2

Changes:

• #1283: fix: skip APIScan
• #1282: chore: bump CI to Node 22 and fix build
• #1279: Bump the uuid test fixture version to 100.0.0
• #1278: Bump tmp from 0.2.4 to 0.2.6
• #1277: Bump qs from 6.14.2 to 6.15.2
• #1276: Bump uuid and @​azure/msal-node
• #1274: Run npm audit fix
• #1272: Bump fast-uri from 3.0.6 to 3.1.2
• #1267: Bump minimatch from 10.2.2 to 10.2.3
• #1247: Update minimatch dependency to v10

This list of changes was auto generated.

v3.9.2-4

Changes:

• #1283: fix: skip APIScan
• #1282: chore: bump CI to Node 22 and fix build
• #1279: Bump the uuid test fixture version to 100.0.0
• #1278: Bump tmp from 0.2.4 to 0.2.6
• #1277: Bump qs from 6.14.2 to 6.15.2
• #1276: Bump uuid and @​azure/msal-node

This list of changes was auto generated.

v3.9.2-3

Changes:

• #1274: Run npm audit fix

This list of changes was auto generated.

v3.9.2-2

Changes:

• #1272: Bump fast-uri from 3.0.6 to 3.1.2

This list of changes was auto generated.

... (truncated)

Commits

• f7501f2 fix: skip APIScan (#1283)
• 7cd3244 chore: bump CI to Node 22 and fix build (#1282)
• df1a68e Bump the uuid test fixture version to 100.0.0 (#1279)
• 3a5786e Merge pull request #1278 from microsoft/dependabot/npm_and_yarn/tmp-0.2.6
• 4954e08 Bump tmp from 0.2.4 to 0.2.6
• 54dce87 Bump qs from 6.14.2 to 6.15.2 (#1277)
• 86fc2d6 Bump uuid and @​azure/msal-node (#1276)
• 4699582 Run npm audit fix and update lockfile (#1274)
• e003a0a Merge pull request #1272 from microsoft/dependabot/npm_and_yarn/fast-uri-3.1.2
• 74ab7a9 Bump fast-uri from 3.0.6 to 3.1.2
• Additional commits viewable in compare view

Updates ts-loader from 9.5.7 to 9.6.2

Release notes

Sourced from ts-loader's releases.

v9.6.2

• chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micromatch → picomatch - thanks @​johnnyreilly

Officially ts-loader has supported 3.6.3+ versions of TypeScript. This change means that certain scenarios with older versions of TS will now certainly fail. If anyone is actually using these versions it would be surprising.

v9.6.1

• fix: rspack support - thanks @​johnnyreilly and @​bhollis

v9.6.0

• feat: add webpack 4 support back - thanks @​johnnyreilly and @​tweet

Changelog

Sourced from ts-loader's changelog.

9.6.2

• chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micromatch → picomatch - thanks @​johnnyreilly

Officially ts-loader has supported 3.6.3+ versions of TypeScript. This change means that certain scenarios with older versions of TS will now certainly fail. If anyone is actually using these versions it would be surprising.

9.6.1

• fix: rspack support - thanks @​johnnyreilly and @​bhollis

9.6.0

• feat: add webpack 4 support back - thanks @​johnnyreilly and @​tweet

Commits

• b347bb7 chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micro...
• 32d82e6 fix: rspack support (#1699)
• 6bd992e chore: Update GitHub Actions workflow for release
• eee9e02 chore: version 9.6.0
• d088b15 feat: add webpack 4 support to ts-loader v9 (#1697)
• e714be1 ci: run tests on Node 26 (#1693)
• 972a428 feat: remove TS version from comparison tests (#1692)
• 586e3b8 feat: upgrade comparison / execution test packs to TS 6 (#1685)
• See full diff in compare view

Updates webpack from 5.106.2 to 5.110.1

Release notes

Sourced from webpack's releases.

v5.110.1

Patch Changes

• Fix a capture-group-less snapshot.managedPaths RegExp; speed up cache writes. (by @​alexander-akait in #21843)

• Throw SyntaxError, or WebAssembly.CompileError, from an unparsable module. (by @​alexander-akait in #21847)

• Accept the optimization.minimize: true shorthand set by a plugin in apply(). (by @​AgentEnder in #21845)

v5.110.0

Minor Changes

• Wrap concatenated modules in lazy __webpack_require__.cw accessors and inline require(), keeping a wrapped body's names and side effects intact. (by @​hai-x in #21519)

• Add performance hints reporting what a build costs: duplicate packages and modules, circular dependencies, broad contexts, large modules and chunks, hotspots, eval, missing PURE annotations, polyfills, redundant dynamic imports, OS-dependent rules, cache effectiveness, how chunks load, what splitting refused, why an optimization was skipped, and rules, defines, externals, aliases and barrel reexports nothing uses. An oversized asset names its largest modules, and an entrypoint carrying the runtime recommends optimization.runtimeChunk. Enable every check not set individually with performance.all, report hints in stats only with performance.hints: "stats", and get them in a stable order that leaves the build hashes unchanged. (by @​alexander-akait in #21841)

• Add the descriptionRelativePath module rule condition. (by @​alexander-akait in #21705)

• Add OS-independent glob matching to module rules. (by @​alexander-akait in #21771)

• Report inner-graph, AMD and bare module bailouts in optimizationBailout. (by @​alexander-akait in #21740)

• Allow marking externals as side-effect-free with a sideEffects flag. (by @​alexander-akait in #21712)

• Give externals the original request of a context module element. (by @​alexander-akait in #21780)

• Add the externalsPresets.nodeModules preset with an allowlist option to externalize installed packages, replacing the webpack-node-externals plugin. (by @​alexander-akait in #21569)

• Add output.library.umdAmdContainer for an AMD-style loader branch in UMD. (by @​hai-x in #21770)

• Resolve @custom-media values that are true / false or name another custom media. (by @​alexander-akait in #21624)

• Add the __webpack_css_server_styles__ module variable to read the CSS collected while rendering without a DOM, and keep that CSS in the order the styles were applied. (by @​alexander-akait in #21576)

• Patch the HTML <head> in place on hot update instead of forcing a full reload, including when a <script> that never executed is removed. (by @​alexander-akait in #21624)

• Scope counter names in CSS modules; fix the counter() counter-style and animation timeline keywords. (by @​alexander-akait in #21600)

• Derive import defer / import source from the target and fix the source phase. (by @​alexander-akait in #21810)

• Emit analyzable ESM urls for chunks, assets, styles, workers and wasm. (by @​alexander-akait in #21788)

• Tree shake CommonJS: module.exports object literals, exports destructured from a require() binding, unused method requires, and unused side-effect-free require() calls and reexports. (by @​alexander-akait in #21841)

• Resolve relative entry baseUri values and bake one side of a hash cycle. (by @​alexander-akait in #21750)

• Minify CSS further, only where the document is unchanged: shorthands and box longhands, font-weight, <position> and font-stretch keywords, colors (polar, Lab and hsl() converted to hex), numbers, times, zero units, calc() and every math function the spec names folded over constants, selector lists, An+B, keyframe selectors, media-feature ranges, unicode-range, transition layers, display, transforms, gradients, font families, identical repeated declarations, and rules an identical later one makes dead. Abilities are read off the target browsers, vendorPrefixes adds and drops vendor prefixes for them, and rewriteCustomProperties shortens custom property values. Minification never changes whether a declaration parses, and beautifying keeps every rule. (by @​alexander-akait in #21841)

• Safely minify CSS (with source maps) and HTML assets when optimization.minimize is enabled, unless a minimizer is already configured for them, making only transformations an engine cannot tell apart. Every rewrite is named as an option, so it can be switched off. (by @​alexander-akait in #21841)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.110.1

Patch Changes

• Fix a capture-group-less snapshot.managedPaths RegExp; speed up cache writes. (by @​alexander-akait in #21843)

• Throw SyntaxError, or WebAssembly.CompileError, from an unparsable module. (by @​alexander-akait in #21847)

• Accept the optimization.minimize: true shorthand set by a plugin in apply(). (by @​AgentEnder in #21845)

5.110.0

Minor Changes

• Wrap concatenated modules in lazy __webpack_require__.cw accessors and inline require(), keeping a wrapped body's names and side effects intact. (by @​hai-x in #21519)

• Add performance hints reporting what a build costs: duplicate packages and modules, circular dependencies, broad contexts, large modules and chunks, hotspots, eval, missing PURE annotations, polyfills, redundant dynamic imports, OS-dependent rules, cache effectiveness, how chunks load, what splitting refused, why an optimization was skipped, and rules, defines, externals, aliases and barrel reexports nothing uses. An oversized asset names its largest modules, and an entrypoint carrying the runtime recommends optimization.runtimeChunk. Enable every check not set individually with performance.all, report hints in stats only with performance.hints: "stats", and get them in a stable order that leaves the build hashes unchanged. (by @​alexander-akait in #21841)

• Add the descriptionRelativePath module rule condition. (by @​alexander-akait in #21705)

• Add OS-independent glob matching to module rules. (by @​alexander-akait in #21771)

• Report inner-graph, AMD and bare module bailouts in optimizationBailout. (by @​alexander-akait in #21740)

• Allow marking externals as side-effect-free with a sideEffects flag. (by @​alexander-akait in #21712)

• Give externals the original request of a context module element. (by @​alexander-akait in #21780)

• Add the externalsPresets.nodeModules preset with an allowlist option to externalize installed packages, replacing the webpack-node-externals plugin. (by @​alexander-akait in #21569)

• Add output.library.umdAmdContainer for an AMD-style loader branch in UMD. (by @​hai-x in #21770)

• Resolve @custom-media values that are true / false or name another custom media. (by @​alexander-akait in #21624)

• Add the __webpack_css_server_styles__ module variable to read the CSS collected while rendering without a DOM, and keep that CSS in the order the styles were applied. (by @​alexander-akait in #21576)

• Patch the HTML <head> in place on hot update instead of forcing a full reload, including when a <script> that never executed is removed. (by @​alexander-akait in #21624)

• Scope counter names in CSS modules; fix the counter() counter-style and animation timeline keywords. (by @​alexander-akait in #21600)

• Derive import defer / import source from the target and fix the source phase. (by @​alexander-akait in #21810)

• Emit analyzable ESM urls for chunks, assets, styles, workers and wasm. (by @​alexander-akait in #21788)

• Tree shake CommonJS: module.exports object literals, exports destructured from a require() binding, unused method requires, and unused side-effect-free require() calls and reexports. (by @​alexander-akait in #21841)

• Resolve relative entry baseUri values and bake one side of a hash cycle. (by @​alexander-akait in #21750)

• Minify CSS further, only where the document is unchanged: shorthands and box longhands, font-weight, <position> and font-stretch keywords, colors (polar, Lab and hsl() converted to hex), numbers, times, zero units, calc() and every math function the spec names folded over constants, selector lists, An+B, keyframe selectors, media-feature ranges, unicode-range, transition layers, display, transforms, gradients, font families, identical repeated declarations, and rules an identical later one makes dead. Abilities are read off the target browsers, vendorPrefixes adds and drops vendor prefixes for them, and rewriteCustomProperties shortens custom property values. Minification never changes whether a declaration parses, and beautifying keeps every rule. (by @​alexander-akait in #21841)

... (truncated)

Commits

• 0b2952e chore(release): new release (#21846)
• 2a1fda4 fix: throw a SyntaxError from a module that failed to parse (#21847)
• 281efa6 test(css): cover a loader-added BOM in the css pipeline (#21848)
• 36ded2c fix: accept the optimization.minimize true shorthand after normalization (#21...
• c150225 fix(cache): accept a managedPaths RegExp without a capture group, and speed u...
• 3a7c0e6 chore(release): new release (#21545)
• 75891c8 chore(changesets): union same-subject entries (#21841)
• 6b96de7 feat(config): emit no development source map for library builds (#21839)
• ff0c832 feat(css,html): reach embedded source from cssMinify and htmlMinify (#21838)
• 06bedfb chore(deps): bump test/wpt in the dependencies group (#21836)
• Additional commits viewable in compare view

[Bill Schnurr (bschnurr)]

Superseded by the aggregate dependency update PR: #573. This Dependabot PR is intentionally being left open until the aggregate PR merges.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.