Bump the npm_and_yarn group across 1 directory with 16 updates #3

dependabot · 2025-08-08T08:44:34Z

Bumps the npm_and_yarn group with 13 updates in the / directory:

Package	From	To
axios	`0.16.2`	`0.30.0`
vue	`2.7.16`	`3.0.0`
autoprefixer	`6.7.7`	`10.4.21`
babel-loader	`7.1.2`	`10.0.0`
css-loader	`0.28.11`	`7.1.2`
html-webpack-plugin	`2.30.1`	`5.6.3`
optimize-css-assets-webpack-plugin	`1.3.2`	`6.0.1`
shelljs	`0.7.8`	`0.8.5`
vue-loader	`12.2.2`	`17.4.2`
webpack	`3.0.0`	`5.101.0`
webpack-bundle-analyzer	`2.13.1`	`3.3.2`
webpack-dev-middleware	`1.12.2`	`5.3.4`
ejs	`2.7.4`	`removed`
webpack-bundle-analyzer	`3.3.2`	`4.10.2`

Updates axios from 0.16.2 to 0.30.0

Release notes

Sourced from axios's releases.

Release v0.30.0

Release notes:

Bug Fixes

fix: modify log while request is aborted by @mori5321 in axios/axios#4917

fix: update CHANGELOG.md for v0.x by @TehZarathustra in axios/axios#6271

fix: modify upgrade guide for 0.28.1's breaking change by @nafeger in axios/axios#6787

fix: backport allowAbsoluteUrls vulnerability fix to v0.x by @thatguyinabeanie in axios/axios#6829

fix: add allowAbsoluteUrls type by @thatguyinabeanie in axios/axios#6849

Contributors to this release

@mori5321 made their first contribution in axios/axios#4917

@TehZarathustra made their first contribution in axios/axios#6271

@nafeger made their first contribution in axios/axios#6787

@thatguyinabeanie made their first contribution in axios/axios#6829

Full Changelog: axios/axios@v0.29.0...v0.30.0

v0.29.0

Release notes:

Bug Fixes

fix(backport): backport security fixes in commits #6167 and #6163 to v0.x by @Sean-Powell in axios/axios#6402

fix: omit nulls in params by @Willshaw in axios/axios#6394

fix(backport): fix paramsSerializer function validation by @solonzhu in axios/axios#6361

fix: Regular Expression Denial of Service (ReDoS) by @qiongshusheng in axios/axios#6708

Contributors to this release

@Sean-Powell made their first contribution in axios/axios#6402

@Willshaw made their first contribution in axios/axios#6394

@solonzhu made their first contribution in axios/axios#6361

@qiongshusheng made their first contribution in axios/axios#6708

Release v0.28.1

Release notes:

Release notes:

Bug Fixes

fix(backport): custom params serializer support (#6263)

fix(backport): uncaught ReferenceError req is not defined (#6307)

Release v0.28.0

Release notes:

Bug Fixes

fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#6091)

Backports from v1.x:

Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)

Fixing content-type header repeated #4745

... (truncated)

Changelog

Sourced from axios's changelog.

0.30.0 (2025-03-26)

Release notes:

Bug Fixes

fix: modify log while request is aborted (#4917)

fix: update CHANGELOG.md for v0.x (#6271)

fix: modify upgrade guide for 0.28.1's breaking change (#6787)

fix: backport allowAbsoluteUrls vulnerability fix to v0.x (#6829)

fix: add allowAbsoluteUrls type (#6849)

0.29.0 (2024-11-21)

Release notes:

Bug Fixes

fix(backport): backport security fixes in commits #6167 and #6163 (#6402)

fix: omit nulls in params (#6394)

fix(backport): fix paramsSerializer function validation (#6361)

fix: regular expression denial of service (ReDoS) (#6708)

0.28.1 (2024-03-24)

Release notes:

Bug Fixes

fix(backport): custom params serializer support (#6263)

fix(backport): uncaught ReferenceError req is not defined (#6307)

0.28.0 (2024-02-12)

Release notes:

Bug Fixes

fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#6091)

Backports from v1.x:

Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)

Fixing content-type header repeated (#4745)

Fixed timeout error message for HTTP (#4738)

Added axios.formToJSON method (#4735)

URL params serializer (#4734)

Fixed toFormData Blob issue on node>v17 (#4728)

Adding types for progress event callbacks (#4675)

Fixed max body length defaults (#4731)

... (truncated)

Commits

6e922e4 chore: added build artifacts
a06ed1e chore: added pre-release artifacts
c010622 feat: add type for allowAbsoluteUrls (#6849)
02c3c69 fix: backport allowAbsoluteUrls vuln fix to v0.x (#6829)
8603e67 docs: modify upgrade guide for 0.28.1's breaking change (#6787)
f0642ee fix(docs): update CHANGELOG.md for v0.x (#6271)
0630c32 fix: modify log while request is aborted (#4917)
7750b8c chore(release): prep release v0.29.0
4840cb2 fix: regular expression denial of service issues (#6708)
2e36cdb fix(backport): fix paramsSerializer function validation (#6361)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jasonsaayman, a new releaser for axios since your current version.

Updates vue from 2.7.16 to 3.0.0

Changelog

Sourced from vue's changelog.

3.0.0 (2020-09-18)

3.0.0-rc.13 (2020-09-18)

Bug Fixes

hmr: make hmr working with class components (#2144) (422f05e)

reactivity: avoid length mutating array methods causing infinite updates (#2138) (f316a33), closes #2137

suspense: should discard unmount effects of invalidated pending branch (5bfcad1)

types: component instance inference without props (#2145) (57bdaa2)

Code Refactoring

watch APIs default to trigger pre-flush (49bb447), closes vuejs/vue-next#1706

Features

runtime-core: support using inject() inside props default functions (58c31e3)

watch: support dot-delimited path in watch option (1c9a0b3)

BREAKING CHANGES

watch APIs now default to use flush: 'pre' instead of flush: 'post'. This change affects watch, watchEffect, the watch component option, and this.$watch. See (49bb447) for more details.

3.0.0-rc.12 (2020-09-16)

Bug Fixes

reactivity: effect should only recursively self trigger with explicit options (3810de7), closes #2125

runtime-core: ensure root stable fragments inherit elements for moving (bebd44f), closes #2134

runtime-core: should still do full traverse of stable fragment children in dev + hmr (dd40ad8)

runtime-core/async-component: fix error component when there are no error handlers (c7b4a37), closes #2129

types/tsx: optional props from Mixin/Extends are treated as required (#2048) (89e9ab8)

Features

compiler-sfc: additionalData support for css preprocessors (#2126) (066d514)

3.0.0-rc.11 (2020-09-15)

... (truncated)

Commits

See full diff in compare view

Updates autoprefixer from 6.7.7 to 10.4.21

Release notes

Sourced from autoprefixer's releases.

10.4.21

Fixed old -moz- prefix for :placeholder-shown (by @Marukome0743).

10.4.20

Fixed fit-content prefix for Firefox.

10.4.19

Removed end value has mixed support, consider using flex-end warning since end/start now have good support.

10.4.18

Fixed removing -webkit-box-orient on -webkit-line-clamp (@Goodwine).

10.4.17

Fixed user-select: contain prefixes.

10.4.16

Improved performance (by @romainmenke).

Fixed docs (by @coliff).

10.4.15

Fixed ::backdrop prefixes (by @yisibl).

Fixed docs (by @coliff).

10.4.14

Improved startup time and reduced JS bundle size (by @Knagis).

10.4.13

Fixed missed prefixes on vendor prefixes in name of CSS Custom Property.

10.4.12

Fixed support of unit-less zero angle in backgrounds (by @yisibl).

10.4.11

Fixed text-decoration prefixes by moving to MDN data (by @romainmenke).

10.4.10

Fixed unicode-bidi prefixes by moving to MDN data.

10.4.9

Fixed css-unicode-bidi issue from latest Can I Use.

10.4.8

Do not print color-adjust warning if print-color-adjust also is in rule.

10.4.7

Fixed print-color-adjust support in Firefox.

10.4.6

Fixed print-color-adjust support.

... (truncated)

Changelog

Sourced from autoprefixer's changelog.

10.4.21

Fixed old -moz- prefix for :placeholder-shown (by @Marukome0743).

10.4.20

Fixed fit-content prefix for Firefox.

10.4.19

Removed end value has mixed support, consider using flex-end warning since end/start now have good support.

10.4.18

Fixed removing -webkit-box-orient on -webkit-line-clamp (@Goodwine).

10.4.17

Fixed user-select: contain prefixes.

10.4.16

Improved performance (by Romain Menke).

Fixed docs (by Christian Oliff).

10.4.15

Fixed ::backdrop prefixes (by 一丝).

Fixed docs (by Christian Oliff).

10.4.14

Improved startup time and reduced JS bundle size (by Kārlis Gaņģis).

10.4.13

Fixed missed prefixes on vendor prefixes in name of CSS Custom Property.

10.4.12

Fixed support of unit-less zero angle in backgrounds (by 一丝).

10.4.11

Fixed text-decoration prefixes by moving to MDN data (by Romain Menke).

10.4.10

Fixed unicode-bidi prefixes by moving to MDN data.

10.4.9

Fixed css-unicode-bidi issue from latest Can I Use.

10.4.8

Do not print color-adjust warning if print-color-adjust also is in rule.

10.4.7

Fixed print-color-adjust support in Firefox.

10.4.6

Fixed print-color-adjust support.

... (truncated)

Commits

541295c Release 10.4.21 version
8d555f7 Update dependencies and sort imports
5c2421e Update Node.js and pnpm on CI
af9cb5f fix: replace :-moz-placeholder-shown with :-moz-placeholder (#1532)
dae6eb4 Release 10.4.20 version
ee43652 Fix fit-content for Firefox
cf80824 Update dependencies
49d5ec6 Move to pnpm 9
8060e33 Release 10.4.19 version
fe7bae4 Remove end→flex-end warning
Additional commits viewable in compare view

Updates babel-loader from 7.1.2 to 10.0.0

Release notes

Sourced from babel-loader's releases.

v10.0.0

What's Changed

Breaking Changes

bump node requirement to ^18.20.0 || ^20.10.0 || >=22.0.0 and webpack requirement to >= 5.61.0 by @JLHwung in babel/babel-loader#1026

breaking: use output.hashFunction as loader cache hasher by @JLHwung in babel/babel-loader#1027

New Features

Add babel-loader logger by @JLHwung in babel/babel-loader#1034

Support cache with external dependencies by @JLHwung in babel/babel-loader#1033

Bug Fixes

[Bugfix] Ensure stability of filename cache-keys by @stefanpenner in babel/babel-loader#909

Docs

docs: clarify that cacheIdentifier is computed from the merged options by @JLHwung in babel/babel-loader#1000

Create SECURITY.md by @JLHwung in babel/babel-loader#1032

Add babel-loader v10 readme by @JLHwung in babel/babel-loader#1046

add readme section for loggingDebug support by @JLHwung in babel/babel-loader#1038

Update readme and repo templates by @JLHwung in babel/babel-loader#1041

Dependencies

migrate to c8 by @JLHwung in babel/babel-loader#996

Bump word-wrap from 1.2.3 to 1.2.4 by @dependabot in babel/babel-loader#998

Bump dev dependencies by @JLHwung in babel/babel-loader#1001

Bump braces from 3.0.2 to 3.0.3 by @dependabot in babel/babel-loader#1020

Update deps by @JLHwung in babel/babel-loader#1025

refactor: replace find-cache-dir by find-up by @JLHwung in babel/babel-loader#1031

Bump webpack from 5.93.0 to 5.94.0 by @dependabot in babel/babel-loader#1035

chore: update dev deps by @JLHwung in babel/babel-loader#1036

Bump cross-spawn from 7.0.3 to 7.0.6 by @dependabot in babel/babel-loader#1049

Internal

Remove caller option check by @JLHwung in babel/babel-loader#1007

Update tests by @JLHwung in babel/babel-loader#1003

Update metadata test by @JLHwung in babel/babel-loader#1024

Migrate to node test runner by @JLHwung in babel/babel-loader#1028

chore: use default eslint rules by @JLHwung in babel/babel-loader#1029

refactor: use webpack builtin schema util by @JLHwung in babel/babel-loader#1030

New Contributors

@stefanpenner made their first contribution in babel/babel-loader#909

Full Changelog: babel/babel-loader@v9.1.3...v10.0.0

v9.2.1

What's Changed

Avoid error on missing getLogger by @nicolo-ribaudo in babel/babel-loader#1045

... (truncated)

Commits

10456d3 10.0.0
5a223cf Add babel-loader v10 readme (#1046)
8f88667 Bump cross-spawn from 7.0.3 to 7.0.6 (#1049)
f765949 Update readme and repo templates (#1041)
b582028 add readme section for loggingDebug support (#1038)
a0c450d feat: add babel-loader debug logger (#1034)
d4181b8 Support cache with external dependencies (#1033)
7fcb533 chore: update dev deps (#1036)
c2a90e5 Bump webpack from 5.93.0 to 5.94.0 (#1035)
70a3710 refactor: replace find-cache-dir by find-up (#1031)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by nicolo-ribaudo, a new releaser for babel-loader since your current version.

Updates css-loader from 0.28.11 to 7.1.2

Release notes

Sourced from css-loader's releases.

v7.1.2

7.1.2 (2024-05-22)

Bug Fixes

keep order of @imports with the webpackIgnore comment (#1600) (76757ef)

v7.1.1

7.1.1 (2024-04-10)

Bug Fixes

automatically rename class default to _default when named export is enabled (#1590) (d6c31a1)

v7.1.0

7.1.0 (2024-04-08)

Features

added the getJSON option to output CSS modules mapping (#1577) (af834b4)

v7.0.0

7.0.0 (2024-04-04)

⚠ BREAKING CHANGES

The modules.namedExport option is true by default if you enable the esModule option

Migration guide:

Before:
import style from "./style.css";
console.log(style.myClass);
After:
import * as style from "./style.css";
console.log(style.myClass);

... (truncated)

Changelog

Sourced from css-loader's changelog.

7.1.2 (2024-05-22)

Bug Fixes

keep order of @imports with the webpackIgnore comment (#1600) (76757ef)

7.1.1 (2024-04-10)

Bug Fixes

automatically rename class default to _default when named export is enabled (#1590) (d6c31a1)

7.1.0 (2024-04-08)

Features

added the getJSON option to output CSS modules mapping (#1577) (af834b4)

7.0.0 (2024-04-04)

⚠ BREAKING CHANGES

The modules.namedExport option is true by default if you enable the esModule option

Migration guide:

Before:
import style from "./style.css";
console.log(style.myClass);
After:
import * as style from "./style.css";
console.log(style.myClass);
To restore 6.x behavior, please use:
module.exports = {
</tr></table> 

... (truncated)

Commits

d5ba44a chore(release): 7.1.2
76757ef fix: keep order of @imports with the webpackIgnore comment (#1600)
4b41689 ci: use node v22 (#1596)
2068222 chore: update dependencies to latest version (#1595)
e006f66 refactor: use environment to get templateLiteral value (#1591)
5c717c9 chore(release): 7.1.1
d6c31a1 fix: automatically rename class default to _default when named export is ...
b162e25 chore(release): 7.1.0
15f793d docs: update logic (#1587)
9c165a4 docs: update migration guide (#1586)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for css-loader since your current version.

Updates html-webpack-plugin from 2.30.1 to 5.6.3

Changelog

Sourced from html-webpack-plugin's changelog.

5.6.3 (2024-10-23)

Bug Fixes

hooks file for old plugins (#1867) (0585a36)

5.6.2 (2024-10-17)

Bug Fixes

allow bundle empty html (#1865) (f5b9140)

5.6.1 (2024-10-17)

Bug Fixes

avoid importing all of lodash (#1864) (2caf5db)

don't use initialize hooks to allow dynamic plugin injection (ae85878)

handle childCompilation.errors being an iterator rather than array (#1863) (4c0c894)

5.6.0 (2023-12-19)

Features

add @rspack/core as an optional peer dependency (#1829) (56ff3ae)

Added support type=systemjs-module via the scriptLoading option (#1822) (7effc30)

Bug Fixes

memory leak (#1836) (c79f2cf)

5.5.4 (2023-12-06)

Bug Fixes

avoid have undefined type for script tags (#1809) (9959484)

reemit assets from loaders (#1811) (a214736)

reemit favicon in serve/watch mode (#1804) (57c5a4e)

5.5.3 (2023-06-10)

Bug Fixes

... (truncated)

Commits

7299866 chore(release): 5.6.3
0585a36 fix: hooks file for old plugins (#1867)
11a248e chore(release): 5.6.2
f5b9140 fix: allow bundle empty html (#1865)
832e0f9 chore(release): 5.6.1
2caf5db fix: avoid importing all of lodash (#1864)
4c0c894 fix: handle childCompilation.errors being an iterator rather than array (#1...
ae85878 fix: don't use initialize hooks to allow dynamic plugin injection
41f4a7b chore: update tooling
7d5b559 docs: update (#1841)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for html-webpack-plugin since your current version.

Updates optimize-css-assets-webpack-plugin from 1.3.2 to 6.0.1

Commits

e896b97 6.0.1
24ed912 fix: cve in dependencies
29c44fb 6.0.0
51313e4 feat(deps): upgrade cssnano and postcss major version
3e6a04c 5.0.6
9567391 fix: previous version breaking changes (#156)
09d29b3 5.0.5
d0a7da7 feat(deps): update dependencies (#154)
41d1e23 Redirect to css-minimizer-webpack-plugin for webpack 5 or above
e9b84f1 5.0.4
Additional commits viewable in compare view

Updates shelljs from 0.7.8 to 0.8.5

Release notes

Sourced from shelljs's releases.

v0.8.5

This was a small security fix for #1058.

v0.8.4

Small patch release to fix a circular dependency warning in node v14. See #973.

v0.8.3

Closed issues:

Shelljs print stderr to console even if exec-only "silent" is true #905

refactor: remove common.state.tempDir #902

Can't suppress stdout for echo #899

exec() doesn't apply the arguments correctly #895

shell.exec('npm pack') painfully slow #885

shelljs.exec cannot find app.asar/node_modules/shelljs/src/exec-child.js #881

test infra: mocks and skipOnWin conflict #862

Support for shell function completion on IDE #859

echo command shows options in stdout #855

silent does not always work #851

Appveyor installs the latest npm, instead of the latest compatible npm #844

Force symbolic link (ln -sf) does not overwrite/recreate existing destination #830

inconsistent result when trying to echo to a file #798

Prevent require()ing executable-only files #789

Cannot set property to of [object String] which has only a getter #752

which() should check executability before returning a value #657

Bad encoding experience #456

phpcs very slow #440

Error shown when triggering a sigint during shelljs.exec if process.on sigint is defined #254

.to$file$ does not mute STDIO output #146

Escaping shell arguments to exec() #143

Allow multiple string arguments for exec() #103

cp does not recursively copy from readonly location #98

Handling permissions errors on file I/O #64

Merged pull requests:

Add test case for sed on empty file #904 (wyardley)

refactor: don't expose tempdir in common.state #903 (nfischer)

chore(ci): fix codecov on travis #897 (nfischer)

chore(npm): add ci-or-install script #896 (nfischer)

Fix silent exec #892 (nfischer)

chore(appveyor): run entire test matrix #886 (nfischer)

docs: remove gitter badge #880 (nfischer)

grep includes the i flag #876 (ppsleep)

Fix(which): match only executable files (#657) #874 (termosa)

chore: rename some tests #871 (nfischer)

Fix cp from readonly source #870 (nfischer)

chore: bump dev dependencies and add package-lock #864 (nfischer)

fix(mocks): fix conflict between mocks and skip #863 (nfischer)

chore: output npm version in travis #850 (nfischer)

... (truncated)

Changelog

Sourced from shelljs's changelog.

v0.8.5 (2022-01-13)

Full Changelog

This was a small security fix for #1058.

v0.8.4 (2020-04-24)

Full Changelog

Small patch release to fix a circular dependency warning in node v14. See #973.

v0.8.3 (2018-11-13)

Full Changelog

Closed issues:

Shelljs print stderr to console even if exec-only "silent" is true #905

refactor: remove common.state.tempDir #902

Can't suppress stdout for echo #899

exec() doesn't apply the arguments correctly #895

shell.exec('npm pack') painfully slow #885

shelljs.exec cannot find app.asar/node_modules/shelljs/src/exec-child.js #881

test infra: mocks and skipOnWin conflict #862

Support for shell function completion on IDE #859

echo command shows options in stdout #855

silent does not always work #851

Appveyor installs the latest npm, instead of the latest compatible npm #844

Force symbolic link (ln -sf) does not overwrite/recreate existing destination #830

inconsistent result when trying to echo to a file #798

Prevent require()ing executable-only files #789

Cannot set property to of [object String] which has only a getter #752

which() should check executability before returning a value #657

Bad encoding experience #456

phpcs very slow #440

Error shown when triggering a sigint during shelljs.exec if process.on sigint is defined #254

.to$file$ does not mute STDIO output #146

Escaping shell arguments to exec() #143

Allow multiple string arguments for exec() #103

cp does not recursively copy from readonly location #98

Handling permissions errors on file I/O #64

Merged pull requests:

Add test case for sed on empty file #904 (wyardley)

refactor: don't expose tempdir in common.state #903 (nfischer)

chore(ci): fix codecov on travis #897 (nfischer)

chore(npm): add ci-or-install script #896 (nfischer)

Fix silent exec #892 (nfischer)

chore(appveyor): run entire test matrix #886 (nfischer)

docs: remove gitter badge #880 (nfischer)

grep includes the i flag #876 (ppsleep)

... (truncated)

Commits

70668a4 0.8.5
d919d22 fix(exec): lockdown file permissions (#1060)
fcf1651 0.8.4
a1111ee Silence potentially upcoming circular dependency warning (#973)
d4d1317 0.8.3
db317bf Add test case for sed on empty file (#904)
0d5ecb6 docs(changelog): updated by Nate Fischer [ci skip]
6b3c7b1 refactor: don't expose tempdir in common.state (#903)
4bd22e7 chore(ci): fix codecov on travis (#897)
2b3b781 fix: silent exec (#892)
Additional commits viewable in compare view

Updates vue-loader from 12.2.2 to 17.4.2

Release notes

Sourced from vue-loader's releases.

v17.3.1

Bug Fixes

do not skip style post loader for v-bind() in non-scoped CSS (d7071bb), closes #2061

v17.3.0

Bug Fixes

re-use ident of vue rule for template compiler, fixes #2029 (#2030) (b50fa56)

Features

skip normal css files without scoped flag in stylePostLoader (#2053) (98782e7)

v17.2.2

Bug Fixes

fix: windows path for experiments.css by @h-a-n-a in

Bumps the npm_and_yarn group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `0.16.2` | `0.30.0` | | [vue](https://github.com/vuejs/core) | `2.7.16` | `3.0.0` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `6.7.7` | `10.4.21` | | [babel-loader](https://github.com/babel/babel-loader) | `7.1.2` | `10.0.0` | | [css-loader](https://github.com/webpack-contrib/css-loader) | `0.28.11` | `7.1.2` | | [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) | `2.30.1` | `5.6.3` | | [optimize-css-assets-webpack-plugin](https://github.com/NMFR/optimize-css-assets-webpack-plugin) | `1.3.2` | `6.0.1` | | [shelljs](https://github.com/shelljs/shelljs) | `0.7.8` | `0.8.5` | | [vue-loader](https://github.com/vuejs/vue-loader) | `12.2.2` | `17.4.2` | | [webpack](https://github.com/webpack/webpack) | `3.0.0` | `5.101.0` | | [webpack-bundle-analyzer](https://github.com/webpack-contrib/webpack-bundle-analyzer) | `2.13.1` | `3.3.2` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `1.12.2` | `5.3.4` | | [ejs](https://github.com/mde/ejs) | `2.7.4` | `removed` | | [webpack-bundle-analyzer](https://github.com/webpack-contrib/webpack-bundle-analyzer) | `3.3.2` | `4.10.2` | Updates `axios` from 0.16.2 to 0.30.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v0.30.0/CHANGELOG.md) - [Commits](axios/axios@v0.16.2...v0.30.0) Updates `vue` from 2.7.16 to 3.0.0 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/v3.0.0/CHANGELOG.md) - [Commits](https://github.com/vuejs/core/commits/v3.0.0) Updates `autoprefixer` from 6.7.7 to 10.4.21 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@6.7.7...10.4.21) Updates `babel-loader` from 7.1.2 to 10.0.0 - [Release notes](https://github.com/babel/babel-loader/releases) - [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md) - [Commits](babel/babel-loader@v7.1.2...v10.0.0) Updates `css-loader` from 0.28.11 to 7.1.2 - [Release notes](https://github.com/webpack-contrib/css-loader/releases) - [Changelog](https://github.com/webpack-contrib/css-loader/blob/master/CHANGELOG.md) - [Commits](webpack/css-loader@v0.28.11...v7.1.2) Updates `html-webpack-plugin` from 2.30.1 to 5.6.3 - [Release notes](https://github.com/jantimon/html-webpack-plugin/releases) - [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](jantimon/html-webpack-plugin@v2.30.1...v5.6.3) Updates `optimize-css-assets-webpack-plugin` from 1.3.2 to 6.0.1 - [Commits](NMFR/optimize-css-assets-webpack-plugin@v1.3.2...v6.0.1) Updates `shelljs` from 0.7.8 to 0.8.5 - [Release notes](https://github.com/shelljs/shelljs/releases) - [Changelog](https://github.com/shelljs/shelljs/blob/main/CHANGELOG.md) - [Commits](shelljs/shelljs@v0.7.8...v0.8.5) Updates `vue-loader` from 12.2.2 to 17.4.2 - [Release notes](https://github.com/vuejs/vue-loader/releases) - [Changelog](https://github.com/vuejs/vue-loader/blob/main/CHANGELOG.md) - [Commits](vuejs/vue-loader@v12.2.2...v17.4.2) Updates `webpack` from 3.0.0 to 5.101.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v3.0.0...v5.101.0) Updates `webpack-bundle-analyzer` from 2.13.1 to 3.3.2 - [Changelog](https://github.com/webpack-contrib/webpack-bundle-analyzer/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-bundle-analyzer@v2.13.1...v3.3.2) Updates `webpack-dev-middleware` from 1.12.2 to 5.3.4 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v1.12.2...v5.3.4) Updates `postcss` from 5.2.18 to 8.5.6 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/postcss/postcss/commits/8.5.6) Updates `loader-utils` from 0.2.17 to 1.4.2 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md) - [Commits](webpack/loader-utils@v0.2.17...v1.4.2) Removes `ejs` Updates `webpack-bundle-analyzer` from 3.3.2 to 4.10.2 - [Changelog](https://github.com/webpack-contrib/webpack-bundle-analyzer/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-bundle-analyzer@v2.13.1...v3.3.2) Updates `ws` from 4.1.0 to 7.5.10 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@4.1.0...7.5.10) --- updated-dependencies: - dependency-name: axios dependency-version: 0.30.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vue dependency-version: 3.0.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: autoprefixer dependency-version: 10.4.21 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: babel-loader dependency-version: 10.0.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: css-loader dependency-version: 7.1.2 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: html-webpack-plugin dependency-version: 5.6.3 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: optimize-css-assets-webpack-plugin dependency-version: 6.0.1 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: shelljs dependency-version: 0.8.5 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vue-loader dependency-version: 17.4.2 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack dependency-version: 5.101.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack-bundle-analyzer dependency-version: 3.3.2 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-version: 5.3.4 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-version: 1.4.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ejs dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-bundle-analyzer dependency-version: 4.10.2 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 7.5.10 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 8, 2025

dependabot bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-911dfec103 branch from 7d4bba9 to 15a51d5 Compare August 8, 2025 10:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Bump the npm_and_yarn group across 1 directory with 16 updates #3

Bump the npm_and_yarn group across 1 directory with 16 updates #3

Uh oh!

dependabot bot commented on behalf of github Aug 8, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Bump the npm_and_yarn group across 1 directory with 16 updates #3

Are you sure you want to change the base?

Bump the npm_and_yarn group across 1 directory with 16 updates #3

Uh oh!

Conversation

dependabot bot commented on behalf of github Aug 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release v0.30.0

Release notes:

Bug Fixes

Contributors to this release

v0.29.0

Release notes:

Bug Fixes

Contributors to this release

Release v0.28.1

Release notes:

Release notes:

Bug Fixes

Release v0.28.0

Release notes:

Bug Fixes

Backports from v1.x:

0.30.0 (2025-03-26)

Release notes:

Bug Fixes

0.29.0 (2024-11-21)

Release notes:

Bug Fixes

0.28.1 (2024-03-24)

Release notes:

Bug Fixes

0.28.0 (2024-02-12)

Release notes:

Bug Fixes

Backports from v1.x:

3.0.0 (2020-09-18)

3.0.0-rc.13 (2020-09-18)

Bug Fixes

Code Refactoring

Features

BREAKING CHANGES

3.0.0-rc.12 (2020-09-16)

Bug Fixes

Features

3.0.0-rc.11 (2020-09-15)

10.4.21

10.4.20

10.4.19

10.4.18

10.4.17

10.4.16

10.4.15

10.4.14

10.4.13

10.4.12

10.4.11

10.4.10

10.4.9

10.4.8

10.4.7

10.4.6

10.4.21

10.4.20

10.4.19

10.4.18

10.4.17

10.4.16

10.4.15

10.4.14

10.4.13

10.4.12

10.4.11

10.4.10

10.4.9

10.4.8

10.4.7

10.4.6

v10.0.0

dependabot bot commented on behalf of github Aug 8, 2025 •

edited

Loading