Skip to content

build(deps-dev): bump the deps-dev group with 2 updates#286

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/deps-dev-93be7de59d
Closed

build(deps-dev): bump the deps-dev group with 2 updates#286
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/deps-dev-93be7de59d

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Feb 14, 2026

Bumps the deps-dev group with 2 updates: @cypress/code-coverage and webpack.

Updates @cypress/code-coverage from 3.14.7 to 4.0.0

Release notes

Sourced from @​cypress/code-coverage's releases.

v4.0.0

4.0.0 (2026-02-10)

chore

BREAKING CHANGES

  • Configure with expose rather than env. Minimum Cypress version is now v15.10.0. Minimum node version is now 20.x.
Commits
  • 29455d8 chore: release next major version (#979)
  • 2a5e70d chore: release next major version (#978)
  • 8ec0991 feat!: read code coverage config from Cypress.expose instead of Cypress.env (...
  • 4e130c7 chore: use npm credentials context (#968)
  • See full diff in compare view

Updates webpack from 5.105.0 to 5.105.2

Release notes

Sourced from webpack's releases.

v5.105.2

Patch Changes

v5.105.1

Patch Changes

  • Fix VirtualUrlPlugin Windows compatibility by sanitizing cache keys and filenames. Cache keys now use toSafePath to replace colons (:) with double underscores (__) and sanitize other invalid characters, ensuring compatibility with Windows filesystem restrictions. (by @​xiaoxiaojx in #20424)

  • Revert part of the createRequire generation behavior for require("node:...") to keep compatibility with those modules exports, e.g. const EventEmitter = require("node:events");. (by @​hai-x in #20433)

  • Skip guard collection when exports-presence mode is disabled to improve parsing performance. (by @​hai-x in #20433)

Changelog

Sourced from webpack's changelog.

5.105.2

Patch Changes

5.105.1

Patch Changes

  • Fix VirtualUrlPlugin Windows compatibility by sanitizing cache keys and filenames. Cache keys now use toSafePath to replace colons (:) with double underscores (__) and sanitize other invalid characters, ensuring compatibility with Windows filesystem restrictions. (by @​xiaoxiaojx in #20424)

  • Revert part of the createRequire generation behavior for require("node:...") to keep compatibility with those modules exports, e.g. const EventEmitter = require("node:events");. (by @​hai-x in #20433)

  • Skip guard collection when exports-presence mode is disabled to improve parsing performance. (by @​hai-x in #20433)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 14, 2026
@github-actions github-actions bot enabled auto-merge February 14, 2026 23:02
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/deps-dev-93be7de59d branch from f56a0fa to 2386ca2 Compare February 28, 2026 23:02
Bumps the deps-dev group with 2 updates: [@cypress/code-coverage](https://github.com/cypress-io/code-coverage) and [webpack](https://github.com/webpack/webpack).


Updates `@cypress/code-coverage` from 3.14.7 to 4.0.0
- [Release notes](https://github.com/cypress-io/code-coverage/releases)
- [Commits](cypress-io/code-coverage@v3.14.7...v4.0.0)

Updates `webpack` from 5.105.0 to 5.105.2
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.105.0...v5.105.2)

---
updated-dependencies:
- dependency-name: "@cypress/code-coverage"
  dependency-version: 4.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: deps-dev
- dependency-name: webpack
  dependency-version: 5.105.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: deps-dev
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/deps-dev-93be7de59d branch from 2386ca2 to d7f3da8 Compare March 7, 2026 23:02
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 14, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Mar 14, 2026
auto-merge was automatically disabled March 14, 2026 23:02

Pull request was closed

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/deps-dev-93be7de59d branch March 14, 2026 23:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants