chore(deps): bump the dependencies group across 1 directory with 5 updates by dependabot[bot] · Pull Request #4892 · webpack/webpack-cli

dependabot · 2026-10-30T17:28:40Z

Bumps the dependencies group with 5 updates in the / directory:

Package	From	To
coffeescript	`2.7.0`	`2.7.1`
pkg-pr-new	`0.0.91`	`0.0.92`
sass-loader	`17.0.1`	`17.1.0`
@inquirer/expand	`5.1.7`	`5.1.8`
@inquirer/select	`5.2.7`	`5.2.8`

Updates coffeescript from 2.7.0 to 2.7.1

Release notes

Sourced from coffeescript's releases.

2.7.1

Compatibility with Node 22 and later: stack trace patching and source maps now work correctly, and the new with { type: 'json' } import attributes syntax is supported alongside assert.

Numeric literals now support a capital E in scientific notation, and method calls on numbers with underscores such as 1_000.toString() now compile correctly.

Performance improvements to the flatten helper (no longer recursive), checkShebangLine and the number-matching regular expressions.

Documentation fixes: code snippets now run correctly again, and a hover line-height shift was fixed.

Continuous integration now tests Node 16 through 26.

New Contributors

@cclauss made their first contribution in #5450

@Connormiha made their first contribution in #5452

@abhayagarwal-dev made their first contribution in #5503

Full Changelog: https://github.com/jashkenas/coffeescript/compare/2.7.0…2.7.1

Commits

a90ae3d Use staged publishing and unprefixed release tags (#5507)
c893ba7 2.7.1 (#5505)
4aaa755 fix: Node 22 compatibility for source maps and import assertions (#5503)
817c39a Update flatten helper without recursion (#5454)
0f02c50 Optimize split in checkShebangLine (#5452)
6a64bff continuous-integration.yml: Add Node.js 20 to the testing (#5450)
8984dd3 Fix line-height change from hover (#5449)
98a2331 Simplified number regexes (#5430)
5748210 Support 1_000.toString(); fixes #5427 (#5429)
1dfa23b Fix #5421, docs code snippets not running (#5422)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for coffeescript since your current version.

Updates pkg-pr-new from 0.0.91 to 0.0.92

Commits

abfb98a release: v0.0.92
5e3a62c feat: support upm and nub in --packageManager flag (#562)
See full diff in compare view

Updates sass-loader from 17.0.1 to 17.1.0

Release notes

Sourced from sass-loader's releases.

v17.1.0

Minor Changes

Resolve a data: resource from the loader's context, reading text/x-sass as the indented syntax. (by @alexander-akait in #1352)

Changelog

Sourced from sass-loader's changelog.

17.1.0

Minor Changes

Resolve a data: resource from the loader's context, reading text/x-sass as the indented syntax. (by @alexander-akait in #1352)

Commits

35cf965 chore(release): new release (#1353)
8ecb2f0 fix: resolve a data: resource from the loader's context (#1352)
6670e5a chore(deps-dev): bump baseline-browser-mapping from 2.9.19 to 2.11.21 (#1344)
a46f8dc chore(deps-dev): bump smol-toml from 1.6.1 to 1.8.0 (#1345)
See full diff in compare view

Updates @inquirer/expand from 5.1.7 to 5.1.8

Commits

672b77f chore: Publish new release
8e66d58 fix(@inquirer/password): keep trailing space after message in empty state
98f5ad3 fix(turbo): hash nested source files in tsc task cache inputs
5239f87 fix(core): don't drop piped stdin answers in first-render deferral
69b4eec ci: run windows unit tests on node 26 only (#2358)
483e52a test(demo): replace 3s real-time wait with fake timers in slow-validation tes...
071edfc ci: overwrite the runner's stale yarn shims instead of reinstalling corepack ...
e38e706 ci: cancel superseded CI runs with a concurrency group (#2354)
629a91d ci: drop 'needs: Compile' from Linting/e2e/deno-pack (#2353)
5e9227c ci: run coverage and codecov on the ubuntu node-26 unit cell only (#2351)
Additional commits viewable in compare view

Updates @inquirer/select from 5.2.7 to 5.2.8

Commits

672b77f chore: Publish new release
8e66d58 fix(@inquirer/password): keep trailing space after message in empty state
98f5ad3 fix(turbo): hash nested source files in tsc task cache inputs
5239f87 fix(core): don't drop piped stdin answers in first-render deferral
69b4eec ci: run windows unit tests on node 26 only (#2358)
483e52a test(demo): replace 3s real-time wait with fake timers in slow-validation tes...
071edfc ci: overwrite the runner's stale yarn shims instead of reinstalling corepack ...
e38e706 ci: cancel superseded CI runs with a concurrency group (#2354)
629a91d ci: drop 'needs: Compile' from Linting/e2e/deno-pack (#2353)
5e9227c ci: run coverage and codecov on the ubuntu node-26 unit cell only (#2351)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [coffeescript](https://github.com/jashkenas/coffeescript) | `2.7.0` | `2.7.1` | | [pkg-pr-new](https://github.com/stackblitz-labs/pkg.pr.new/tree/HEAD/packages/cli) | `0.0.91` | `0.0.92` | | [sass-loader](https://github.com/webpack/sass-loader) | `17.0.1` | `17.1.0` | | [@inquirer/expand](https://github.com/SBoudrias/Inquirer.js) | `5.1.7` | `5.1.8` | | [@inquirer/select](https://github.com/SBoudrias/Inquirer.js) | `5.2.7` | `5.2.8` | Updates `coffeescript` from 2.7.0 to 2.7.1 - [Release notes](https://github.com/jashkenas/coffeescript/releases) - [Commits](jashkenas/coffeescript@2.7.0...2.7.1) Updates `pkg-pr-new` from 0.0.91 to 0.0.92 - [Commits](https://github.com/stackblitz-labs/pkg.pr.new/commits/v0.0.92/packages/cli) Updates `sass-loader` from 17.0.1 to 17.1.0 - [Release notes](https://github.com/webpack/sass-loader/releases) - [Changelog](https://github.com/webpack/sass-loader/blob/main/CHANGELOG.md) - [Commits](webpack/sass-loader@v17.0.1...v17.1.0) Updates `@inquirer/expand` from 5.1.7 to 5.1.8 - [Release notes](https://github.com/SBoudrias/Inquirer.js/releases) - [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/expand@5.1.7...@inquirer/expand@5.1.8) Updates `@inquirer/select` from 5.2.7 to 5.2.8 - [Release notes](https://github.com/SBoudrias/Inquirer.js/releases) - [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/select@5.2.7...@inquirer/select@5.2.8) --- updated-dependencies: - dependency-name: coffeescript dependency-version: 2.7.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: pkg-pr-new dependency-version: 0.0.92 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: sass-loader dependency-version: 17.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@inquirer/expand" dependency-version: 5.1.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@inquirer/select" dependency-version: 5.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2026-10-30T17:28:47Z

⚠️ No Changeset found

Latest commit: 7763529

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

socket-security · 2026-10-30T17:29:04Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
pkg-pr-new@0.0.91 ⏵ 0.0.92	⁺¹	⁺¹	⁺¹
coffeescript@2.7.0 ⏵ 2.7.1	⁺³		⁺⁶
sass-loader@17.0.1 ⏵ 17.1.0			^-4
@inquirer/select@5.2.7 ⏵ 5.2.8			^-1
@inquirer/expand@5.1.7 ⏵ 5.1.8			^-1

View full report

github-actions · 2026-10-30T17:31:18Z

This PR is packaged and the instant preview is available (02a85ac).

Install it locally:

npm

npm i -D webpack-cli@https://pkg.pr.new/webpack-cli@02a85ac

yarn

yarn add -D webpack-cli@https://pkg.pr.new/webpack-cli@02a85ac

pnpm

pnpm add -D webpack-cli@https://pkg.pr.new/webpack-cli@02a85ac

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 30, 2026

webpack Bot approved these changes Oct 30, 2026

View reviewed changes

webpack Bot enabled auto-merge (squash) October 30, 2026 17:31

webpack Bot merged commit 02a85ac into main Oct 30, 2026
33 checks passed

webpack Bot deleted the dependabot/npm_and_yarn/dependencies-fff0c21ae3 branch October 30, 2026 18:13

Navigation Menu

Repository navigation

chore(deps): bump the dependencies group across 1 directory with 5 updates - #4892

chore(deps): bump the dependencies group across 1 directory with 5 updates#4892
webpack[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-fff0c21ae3

dependabot Bot commented on behalf of github Oct 30, 2026

Uh oh!

changeset-bot Bot commented Oct 30, 2026

Uh oh!

socket-security Bot commented Oct 30, 2026

Uh oh!

github-actions Bot commented Oct 30, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 30, 2026

2.7.1

New Contributors

v17.1.0

Minor Changes

17.1.0

Minor Changes

Uh oh!

changeset-bot Bot commented Oct 30, 2026

⚠️ No Changeset found

Uh oh!

socket-security Bot commented Oct 30, 2026

Uh oh!

github-actions Bot commented Oct 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

github-actions Bot commented Oct 30, 2026 •

edited

Loading