Bump webpack-cli from 5.1.4 to 7.0.2

[dependabot]

Bumps webpack-cli from 5.1.4 to 7.0.2.

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.0.2

Patch Changes

• Resolve configuration path for cache build dependencies. (by @​alexander-akait in #4707)

webpack-cli@7.0.1

Patch Changes

• The file protocol for configuration options (--config/--extends) is supported. (by @​alexander-akait in #4702)

webpack-cli@7.0.0

Major Changes

• The minimum supported version of Node.js is 20.9.0. (by @​alexander-akait in #4677)

• Use dynamic import to load webpack.config.js, fallback to interpret only when configuration can't be load by dynamic import. Using dynamic imports allows you to take advantage of Node.js's built-in TypeScript support. (by @​alexander-akait in #4677)

• Removed the --node-env argument in favor of the --config-node-env argument. (by @​alexander-akait in #4677)

• The version command only output versions right now. (by @​alexander-akait in #4677)

• Removed deprecated API, no action required unless you use import cli from "webpack-cli";/const cli = require("webpack-cli");. (by @​alexander-akait in #4677)

Patch Changes

• Allow configuration freezing. (by @​alexander-akait in #4677)

• Use graceful shutdown when file system cache is enabled. (by @​alexander-akait in #4677)

• Performance improved. (by @​alexander-akait in #4677)

v6.0.1

6.0.1 (2024-12-20)

Bug Fixes

• update peer dependencies (#4356) (7a7e5d9)

v6.0.0

6.0.0 (2024-12-19)

BREAKING CHANGES

• the minimum required Node.js version is 18.12.0
• removed init, loader and plugin commands in favor create-webpack-app
• dropped support for webpack-dev-server@v4
• minimum supported webpack version is 5.82.0
• The --define-process-env-node-env option was renamed to --config-node-env

Bug Fixes

... (truncated)

Changelog

Sourced from webpack-cli's changelog.

7.0.2

Patch Changes

• Resolve configuration path for cache build dependencies. (by @​alexander-akait in #4707)

7.0.1

Patch Changes

• The file protocol for configuration options (--config/--extends) is supported. (by @​alexander-akait in #4702)

7.0.0

Major Changes

• The minimum supported version of Node.js is 20.9.0. (by @​alexander-akait in #4677)

• Use dynamic import to load webpack.config.js, fallback to interpret only when configuration can't be load by dynamic import. Using dynamic imports allows you to take advantage of Node.js's built-in TypeScript support. (by @​alexander-akait in #4677)

• Removed the --node-env argument in favor of the --config-node-env argument. (by @​alexander-akait in #4677)

• The version command only output versions right now. (by @​alexander-akait in #4677)

• Removed deprecated API, no action required unless you use import cli from "webpack-cli";/const cli = require("webpack-cli");. (by @​alexander-akait in #4677)

Patch Changes

• Allow configuration freezing. (by @​alexander-akait in #4677)

• Use graceful shutdown when file system cache is enabled. (by @​alexander-akait in #4677)

• Performance improved. (by @​alexander-akait in #4677)

6.0.1 (2024-12-20)

Bug Fixes

• update peer dependencies (#4356) (7a7e5d9)

6.0.0 (2024-12-19)

BREAKING CHANGES

• the minimum required Node.js version is 18.12.0
• removed init, loader and plugin commands in favor create-webpack-app
• dropped support for webpack-dev-server@v4
• minimum supported webpack version is 5.82.0
• the --define-process-env-node-env option was renamed to --config-node-env

... (truncated)

Commits

• 49efdc0 chore(release): new release (#4708)
• 1fc1b9d fix: resolve configuration path for build dependencies (#4707)
• fd02100 chore(release): new release (#4705)
• a653b02 fix: use a new create-webpack-app package name (#4704)
• 173e4bf chore(release): new release (#4703)
• c033657 ci: avoid extra step
• fd28679 fix: support file protocol in configuration options (#4702)
• 37e4270 chore: normalize package.json (#4700)
• d5290e3 ci: fix
• 0b116f7 chore(release): new release (#4679)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-cli since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 76.52%. Comparing base (3042f10) to head (77dd952).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #7336   +/-   ##
=======================================
  Coverage   76.52%   76.52%           
=======================================
  Files         405      405           
  Lines       20631    20631           
  Branches     4991     4991           
=======================================
  Hits        15788    15788           
  Misses       4843     4843           

Flag	Coverage Δ
backend	76.52% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[n-lark]

webpack-cli 5.1.4 → 7.0.2 — packages/flowfuse

TL;DR: major bump (v5 → v7), but none of the removed/renamed APIs are used here and our peer versions already meet the new minimums — safe to merge.

Breaking changes vs our usage

• Node ≥20.9 (7.0) — engines: >=20.x; CI on Node 24.
• --node-env removed — not used
• init/loader/plugin subcommands removed (6.0) — not used; only webpack -c ./config/webpack.config.js
• Programmatic API removed — no require('webpack-cli') anywhere
• webpack-dev-server v4 dropped — already on ^5.2.1
• webpack ≥5.82.0 — on ^5.88.2

Standard gates

• Published >12h ago (2026-03-17, ~70 days); latest tag
• 0 GHSA advisories against webpack-cli
• npm audit: adds 1 chain (22 → 23) but it's the pre-existing sockjs → webpack-dev-server issue now re-attributed through webpack-cli. No new CVE.
• Local production build passes on Node 22 (pre-existing bundle-size warnings only)
• build-watch passes: initial compile 11.7s, incremental rebuild 862ms (dynamic-import config loading works)
• dist/ byte-equivalent vs main: built both lockfiles fresh, diffed frontend/dist/. Every JS/CSS/HTML/image/asset file is identical; content hashes match exactly. Only 4 sourcemaps differ in serialization (same content, different metadata layout) — no impact on runtime.
• Manual smoke test in browser — key flows work
• New releaser = GH Actions automated release workflow
• CI green on PR
• No conflicting Dependabot PR on same lockfile