[dependabot]

Bumps webpack-cli from 7.2.1 to 7.3.1.

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.3.1

Patch Changes

• fix: detect missing package managers and failed installations, without a lock file the CLI chose npm even when it wasn't installed instead of yarn or pnpm, and it continued after a package failed to install (by @​alexander-akait in #4889)

• chore: replace the import-local and cross-spawn dependencies with Node.js built-ins (by @​alexander-akait in #4889)

• chore: load configuration files with import() instead of eval (by @​alexander-akait in #4893)

webpack-cli@7.3.0

Minor Changes

• feat: run webpack-dev-server@6 as a compiler plugin. The CLI drives watch compilation, prints build stats and closes the compiler on shutdown. Older dev servers continue to manage their own compilation. (by @​bjohansebas in #4847)

  In multi-compiler mode, every dev server serves all compilers by default. Use the new --dev-server-per-compiler option of webpack serve to serve each compiler only by the dev server from its own configuration.

• feat: add shell completions for zsh, bash, fish and powershell through the complete command (by @​alexander-akait in #4840)

Patch Changes

• fix: keep multi-compiler options such as parallelism and plugins set on a configuration array when --config-name or extends rebuild it (by @​alexander-akait in #4871)

• perf: share the compile cache with child processes and worker threads, such as minimizer workers, so they start warm too (by @​alexander-akait in #4872)

• fix: assign distinct ports to dev servers of configurations that share the same devServer object. (by @​alexander-akait in #4886)

webpack-cli@7.2.3

Patch Changes

• fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @​bjohansebas in #4834)

• feat: allow toml@5 as a peer dependency for TOML configuration files (by @​alexander-akait in #4837)

webpack-cli@7.2.2

Patch Changes

• perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @​bjohansebas in #4818)

Changelog

Sourced from webpack-cli's changelog.

7.3.1

Patch Changes

• fix: detect missing package managers and failed installations, without a lock file the CLI chose npm even when it wasn't installed instead of yarn or pnpm, and it continued after a package failed to install (by @​alexander-akait in #4889)

• chore: replace the import-local and cross-spawn dependencies with Node.js built-ins (by @​alexander-akait in #4889)

• chore: load configuration files with import() instead of eval (by @​alexander-akait in #4893)

7.3.0

Minor Changes

• feat: run webpack-dev-server@6 as a compiler plugin. The CLI drives watch compilation, prints build stats and closes the compiler on shutdown. Older dev servers continue to manage their own compilation. (by @​bjohansebas in #4847)

  In multi-compiler mode, every dev server serves all compilers by default. Use the new --dev-server-per-compiler option of webpack serve to serve each compiler only by the dev server from its own configuration.

• feat: add shell completions for zsh, bash, fish and powershell through the complete command (by @​alexander-akait in #4840)

Patch Changes

• fix: keep multi-compiler options such as parallelism and plugins set on a configuration array when --config-name or extends rebuild it (by @​alexander-akait in #4871)

• perf: share the compile cache with child processes and worker threads, such as minimizer workers, so they start warm too (by @​alexander-akait in #4872)

• fix: assign distinct ports to dev servers of configurations that share the same devServer object. (by @​alexander-akait in #4886)

7.2.3

Patch Changes

• fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @​bjohansebas in #4834)

• feat: allow toml@5 as a peer dependency for TOML configuration files (by @​alexander-akait in #4837)

7.2.2

Patch Changes

• perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @​bjohansebas in #4818)

Commits

• 3a695da chore(release): new release (#4891)
• 4a88999 chore: load configuration files without eval (#4893)
• 02a85ac chore(deps): bump the dependencies group across 1 directory with 5 updates (#...
• 3942417 chore: replace import-local and cross-spawn with Node.js built-ins (#4889)
• 349b660 chore(release): new release (#4841)
• d4ee8bd fix: assign distinct ports to dev servers sharing devServer options (#4886)
• 9bcb6d5 feat: run webpack-dev-server as a compiler plugin (#4847)
• b32b0c9 test: make the generator and dev server tests stable (#4885)
• 351f1c9 chore(deps): bump the dependencies group across 1 directory with 9 updates (#...
• 701e74b chore(deps-dev): bump del-cli from 7.0.0 to 8.0.1 (#4880)
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/rechoir	1.0.0	🟢 4.8	Details Check Score Reason Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 5 4 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 5 Code-Review ⚠️ 1 Found 5/28 approved changesets -- score normalized to 1 Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 10 all dependencies are pinned Packaging ⚠️ -1 packaging workflow not detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Security-Policy 🟢 10 security policy file detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
npm/webpack-cli	7.3.1	🟢 5.8	Details Check Score Reason Code-Review ⚠️ 2 Found 2/10 approved changesets -- score normalized to 2 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 10 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 10 no binaries found in the repo CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Security-Policy 🟢 10 security policy file detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Files

• package-lock.json

[NeiRo21]

@dependabot rebase