chore(deps): bump the prod-npm-minor-dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the prod-npm-minor-dependencies group with 1 update in the / directory: enhanced-resolve.

Updates enhanced-resolve from 5.20.1 to 5.21.3

Release notes

Sourced from enhanced-resolve's releases.

v5.21.3

Patch Changes

• TsconfigPathsPlugin now falls through to normal module resolution when a paths pattern matches but the mapped path does not exist, matching TypeScript's native resolution behavior. Previously, patterns like "@*" would block scoped npm packages (e.g. @sentry/react) from resolving via node_modules. (by @​xiaoxiaojx in #579)

v5.21.2

Patch Changes

• Fix TsconfigPathsPlugin circular project references causing stack overflow, add support for extending from unscoped npm packages, and use stat instead of readFile for existence checks in extends resolution. (by @​xiaoxiaojx in #575)

• perf: dedupe miss paths in DirectoryExistsPlugin/FileExistsPlugin and prune the per-resolve TsconfigPathsPlugin context scan. (by @​alexander-akait in #574)

• perf: drop a dead Map lookup in findMatch and flatten AliasFieldPlugin's cache check. (by @​alexander-akait in #574)

• perf: hot-path tweaks in ImportsFieldPlugin, AliasUtils, and util/entrypoints. (by @​alexander-akait in #574)

• perf: cut per-resolve allocations in Resolver.parse, loadDescriptionFile, and TsconfigPathsPlugin._selectPathsDataForContext. (by @​alexander-akait in #574)

v5.21.1

Patch Changes

• Allocation-free reductions on hot-path code: hoist /#/g, /\$/g and /\\/g to module-level constants and gate the corresponding .replace calls behind includes(…) so paths/queries/requests without the match char skip the regex state machine entirely (the common case); share a single EMPTY_NO_MATCH tuple instead of allocating [[], null] per "no match" / "no condition matched" return; switch directMapping's for...of over mappingTarget and inner results to indexed loops to avoid iterator-object allocation per call; inline isConditionalMapping at its two hot-path call sites and merge the duplicate default / conditionNames.has(condition) branches in computeConditionalMapping; replace invalidSegmentRegEx.exec(…) !== null with .test(…) (no match-array allocation); drop the dead deprecatedInvalidSegmentRegEx.test(…) !== null clause in ImportsFieldPlugin (.test returns boolean; true !== null and false !== null are both true, so it was && true); drop the redundant relativePath.length === 0 guard before !startsWith("./") in ExportsFieldPlugin (the empty-string case is already covered). (by @​alexander-akait in #558)

• restore plugin compatibility for [...resolveContext.stack] iteration (by @​alexander-akait in #569)

• fix TsconfigPathsPlugin to support resolveSync with useSyncFileSystemCalls (by @​alexander-akait in #572)

v5.21.0

Minor Changes

• Added promise API and support to resolve without context and resolveContext. (by @​alexander-akait in #520)

• Add extensionAliasForExports option. When true, extensionAlias also applies to paths resolved through the package.json exports field. Off by default to match Node.js; opt in for full TypeScript-resolver parity with packages that ship .ts sources alongside the compiled .js they declare in exports. (by @​alexander-akait in #554)

Patch Changes

• Properly handle DOS device paths (\\?\… and \\.\…). (by @​alexander-akait in #551)

• Prevent fallback to parent node_modules when the exports field target file is not found. (by @​xiaoxiaojx in #495)

• Imports field spec deviation: non-relative targets (e.g. "#a": "#b") no longer re-enter imports resolution, aligning with the Node.js ESM spec where PACKAGE_IMPORTS_RESOLVE does not recursively resolve # specifiers. (by @​xiaoxiaojx in #503)

  Previously { "#a": "#b", "#b": "./the.js" } would chain-resolve #a to ./the.js; now it correctly fails, matching Node.js behavior.

• Move cachedJoin/cachedDirname/createCachedBasename caches from module-level globals to per-Resolver instances. This prevents unbounded memory growth in long-running processes — when a Resolver is garbage collected, its join/dirname/basename caches are released with it. (by @​xiaoxiaojx in #507)

• Fixed when tsconfig: true is used (default config file) and no tsconfig.json exists. (by @​xiaoxiaojx in #502)

• Apply the extensionAlias option to the imports field to be align with typescript resolution. (by @​alexander-akait in #549)

... (truncated)

Changelog

Sourced from enhanced-resolve's changelog.

5.21.3

Patch Changes

• TsconfigPathsPlugin now falls through to normal module resolution when a paths pattern matches but the mapped path does not exist, matching TypeScript's native resolution behavior. Previously, patterns like "@*" would block scoped npm packages (e.g. @sentry/react) from resolving via node_modules. (by @​xiaoxiaojx in #579)

5.21.2

Patch Changes

• Fix TsconfigPathsPlugin circular project references causing stack overflow, add support for extending from unscoped npm packages, and use stat instead of readFile for existence checks in extends resolution. (by @​xiaoxiaojx in #575)

• perf: dedupe miss paths in DirectoryExistsPlugin/FileExistsPlugin and prune the per-resolve TsconfigPathsPlugin context scan. (by @​alexander-akait in #574)

• perf: drop a dead Map lookup in findMatch and flatten AliasFieldPlugin's cache check. (by @​alexander-akait in #574)

• perf: hot-path tweaks in ImportsFieldPlugin, AliasUtils, and util/entrypoints. (by @​alexander-akait in #574)

• perf: cut per-resolve allocations in Resolver.parse, loadDescriptionFile, and TsconfigPathsPlugin._selectPathsDataForContext. (by @​alexander-akait in #574)

5.21.1

Patch Changes

• Allocation-free reductions on hot-path code: hoist /#/g, /\$/g and /\\/g to module-level constants and gate the corresponding .replace calls behind includes(…) so paths/queries/requests without the match char skip the regex state machine entirely (the common case); share a single EMPTY_NO_MATCH tuple instead of allocating [[], null] per "no match" / "no condition matched" return; switch directMapping's for...of over mappingTarget and inner results to indexed loops to avoid iterator-object allocation per call; inline isConditionalMapping at its two hot-path call sites and merge the duplicate default / conditionNames.has(condition) branches in computeConditionalMapping; replace invalidSegmentRegEx.exec(…) !== null with .test(…) (no match-array allocation); drop the dead deprecatedInvalidSegmentRegEx.test(…) !== null clause in ImportsFieldPlugin (.test returns boolean; true !== null and false !== null are both true, so it was && true); drop the redundant relativePath.length === 0 guard before !startsWith("./") in ExportsFieldPlugin (the empty-string case is already covered). (by @​alexander-akait in #558)

• restore plugin compatibility for [...resolveContext.stack] iteration (by @​alexander-akait in #569)

• fix TsconfigPathsPlugin to support resolveSync with useSyncFileSystemCalls (by @​alexander-akait in #572)

5.21.0

Minor Changes

• Added promise API and support to resolve without context and resolveContext. (by @​alexander-akait in #520)

• Add extensionAliasForExports option. When true, extensionAlias also applies to paths resolved through the package.json exports field. Off by default to match Node.js; opt in for full TypeScript-resolver parity with packages that ship .ts sources alongside the compiled .js they declare in exports. (by @​alexander-akait in #554)

Patch Changes

• Properly handle DOS device paths (\\?\… and \\.\…). (by @​alexander-akait in #551)

• Prevent fallback to parent node_modules when the exports field target file is not found. (by @​xiaoxiaojx in #495)

• Imports field spec deviation: non-relative targets (e.g. "#a": "#b") no longer re-enter imports resolution, aligning with the Node.js ESM spec where PACKAGE_IMPORTS_RESOLVE does not recursively resolve # specifiers. (by @​xiaoxiaojx in #503)

  Previously { "#a": "#b", "#b": "./the.js" } would chain-resolve #a to ./the.js; now it correctly fails, matching Node.js behavior.

• Move cachedJoin/cachedDirname/createCachedBasename caches from module-level globals to per-Resolver instances. This prevents unbounded memory growth in long-running processes — when a Resolver is garbage collected, its join/dirname/basename caches are released with it. (by @​xiaoxiaojx in #507)

... (truncated)

Commits

• d09bdb2 chore(release): new release (#582)
• b9e4103 chore(deps-dev): bump lint-staged from 16.4.0 to 17.0.4 (#580)
• 9023042 fix: TsconfigPathsPlugin should fall through when mapped path does not exist ...
• 744ed6c chore(deps): bump the dependencies group with 2 updates (#581)
• 6eb4c08 chore(deps-dev): bump fast-uri from 3.1.0 to 3.1.2 (#578)
• 605c5ca chore(release): new release (#576)
• 56002a6 perf: skip empty-query concat, bound star scan, flatten alias predicate (#574)
• 32ed958 chore: improve AGENTS.md to enforce upstream workflow and project scripts (#577)
• f28d8b9 fix: TsconfigPathsPlugin circular references, unscoped pkg extends, and perf ...
• 292aee5 chore(deps-dev): bump axios from 1.15.0 to 1.16.0 (#573)
• Additional commits viewable in compare view

Updates loader-runner from 4.3.1 to 4.3.2

Release notes

Sourced from loader-runner's releases.

v4.3.2

Performance

• Improved performance in many places.

Commits

• a1a3888 chore(release): 4.3.2
• 9711d5c chore(deps): update before release (#88)
• 61272a8 docs: clarify that result.result is an array (#87)
• 2776643 refactor: modernize to ES6+ with perf improvements (#86)
• 9fa0836 chore(release): 4.3.1
• 20e9fb8 refactor: fix logic for empty resource (#84)
• See full diff in compare view

Updates terser-webpack-plugin from 5.4.0 to 5.6.0

Release notes

Sourced from terser-webpack-plugin's releases.

v5.6.0

Minor Changes

• support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

• add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

• add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

• add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

• terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

• rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

v5.5.0

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

• support extractComments in swcMinify (#665) (03143d3)

Changelog

Sourced from terser-webpack-plugin's changelog.

5.6.0

Minor Changes

• support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

• add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

• add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

• add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

• terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

• rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

• support extractComments in swcMinify (#665) (03143d3)

Commits

• 57bdcfc chore(release): new release (#675)
• 6feeda0 chore: add changelog entry (#677)
• dd360be chore: rename other things
• d78b6bd ci: dual-publish release as minimizer-webpack-plugin and terser-webpack-plugi...
• e06c526 docs: add changesets for changes since v5.5.0 (#674)
• a875994 chore: update codebase
• 2bfd4f8 ci: add changesets-driven release workflow (#672)
• 9b82a77 test: cover multi-asset minify and js-only minimizer fallback (#671)
• 34610d9 feat: added the filter method to minimizers and allow to handle different a...
• 1a34e62 feat: add built-in CSS minimizers from css-minimizer-webpack-plugin (#669)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for terser-webpack-plugin since your current version.

Updates webpack-sources from 3.3.4 to 3.4.1

Release notes

Sourced from webpack-sources's releases.

v3.4.1

Patch Changes

• Implements more effective buffers and buffer for ReplaceSource and improve performance in other places. (by @​alexander-akait in #211)

v3.4.0

Minor Changes

• Add Source.prototype.buffers() that returns the source as Buffer[]. ConcatSource, CachedSource, and CompatSource implement it without allocating an intermediate concatenated buffer, allowing consumers that can write multiple buffers at once (e.g. via writev) to avoid the overhead of Buffer.concat in deeply nested sources. (by @​alexander-akait in #204)

Patch Changes

• fix: use Int32Array for signed VLQ delta accumulation in readMappings so cumulative values that go negative are preserved instead of wrapping to a large unsigned integer (by @​alexander-akait in #206)

• Improved performance in many places. (by @​alexander-akait in #209)

Changelog

Sourced from webpack-sources's changelog.

3.4.1

Patch Changes

• Implements more effective buffers and buffer for ReplaceSource and improve performance in other places. (by @​alexander-akait in #211)

3.4.0

Minor Changes

• Add Source.prototype.buffers() that returns the source as Buffer[]. ConcatSource, CachedSource, and CompatSource implement it without allocating an intermediate concatenated buffer, allowing consumers that can write multiple buffers at once (e.g. via writev) to avoid the overhead of Buffer.concat in deeply nested sources. (by @​alexander-akait in #204)

Patch Changes

• fix: use Int32Array for signed VLQ delta accumulation in readMappings so cumulative values that go negative are preserved instead of wrapping to a large unsigned integer (by @​alexander-akait in #206)

• Improved performance in many places. (by @​alexander-akait in #209)

Commits

• 5a0b655 chore(release): new release (#214)
• 8ed6d8a perf: improve
• 88046d5 chore(deps-dev): bump the dependencies group across 1 directory with 2 update...
• d506580 perf: improve
• 72ce205 chore(deps): bump CodSpeedHQ/action in the dependencies group (#213)
• 7c520c2 chore(release): new release (#205)
• e130653 fix: improve performance in many places (#209)
• ccfbc65 fix: improve performance in many places (#203)
• fdb229e test: stabilize prefix-source getPrefix() and original() cases (#207)
• c53b3e0 ci: fix (#208)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-sources since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions