Skip to content

chore(deps): bump the bo-default-npm group across 1 directory with 8 updates - #134

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/admin-dev/themes/default/dev/bo-default-npm-61fd8241ed
Open

chore(deps): bump the bo-default-npm group across 1 directory with 8 updates#134
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/admin-dev/themes/default/dev/bo-default-npm-61fd8241ed

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown

Bumps the bo-default-npm group with 8 updates in the /admin-dev/themes/default directory:

Package From To
@fontsource/ibm-plex-sans 5.1.0 5.3.0
material-symbols 0.48.0 0.48.1
@babel/core 8.0.7 8.0.9
postcss 8.5.30 8.5.31
sass-embedded 1.105.2 1.106.1
sass-loader 16.0.8 17.0.1
stylelint 14.16.1 17.16.0
webpack 5.112.0 5.112.2

Updates @fontsource/ibm-plex-sans from 5.1.0 to 5.3.0

Commits

Updates material-symbols from 0.48.0 to 0.48.1

Commits

Updates @babel/core from 8.0.7 to 8.0.9

Release notes

Sourced from @​babel/core's releases.

v8.0.9 (2026-10-23)

This release contains no changes. It is needed only to update the repo (which is based on @babel/core's last release) in Node.js's CITGM.

v8.0.8 (2026-10-23)

Thanks @​bhushan4work and @​webdevelopersrinu for your first PRs!

👓 Spec Compliance

🐛 Bug Fix

  • babel-parser
  • babel-helpers, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3, babel-runtime
  • babel-plugin-transform-typescript, babel-types
  • babel-plugin-transform-block-scoping
    • #18331 fix: wrap enclosing loop when a nested for head closure captures its bindings (@​joellemd)

🏠 Internal

🔬 Output optimization

Committers: 7

Changelog

Sourced from @​babel/core's changelog.

Changelog

Tags:

  • 💥 [Breaking Change]
  • 👓 [Spec Compliance]
  • 🚀 [New Feature]
  • 🐛 [Bug Fix]
  • 📝 [Documentation]
  • 🏠 [Internal]
  • 💅 [Polish]

Note: Gaps between patch versions are faulty, broken or test releases.

This file contains the changelog starting from v8.0.0-alpha.0.

v8.0.8 (2026-10-23)

👓 Spec Compliance

🐛 Bug Fix

  • babel-parser
  • babel-helpers, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3, babel-runtime

... (truncated)

Commits

Updates postcss from 8.5.30 to 8.5.31

Release notes

Sourced from postcss's releases.

8.5.31

Changelog

Sourced from postcss's changelog.

8.5.31

Commits

Updates sass-embedded from 1.105.2 to 1.106.1

Changelog

Sourced from sass-embedded's changelog.

1.106.1

  • Fix a bug where an attribute selector with an empty value (such as [class=""]) would crash when serializing.

  • Don't crash when serializing a number with an empty unit. This is only possible through the JavaScript and Dart APIs or the embedded protocol.

Embedded Dart Sass

  • More robustly convert invalid value errors into PARAMS errors.

1.106.0

  • Don't normalize CSS escapes in statement contexts that can contain interpolation. For example, @f\6Fo is now emitted as written rather than normalized to @foo.

  • Fix a bug where quotes would be removed from attribute selector values that contained backslashes.

  • Fix invalid source spans that could cause crashes when encountering a syntax error in selectors or media queries that also contain escape sequences.

  • Fix a bug where the indented syntax parser would crash when parsing a file where the first statement was indented and appeared after the first line.

  • Fix a bug that could cause crashes when encountering errors or warnings in interpolations that contain patterns like // */.

  • Potentially breaking compatibility fix: CSS escape codes whose values are 0, for Unicode surrogates, or greater than the maximum allowed code point are now consistently normalized to U+FFFD REPLACEMENT CHARACTER in expression contexts. Previously, in some cases these were instead normalized to the normalized form of the original escape sequence, which violates the principle that all escape sequences for identical values should be normalized the same way. In other cases, these would simply throw errors.

    As a special case, \0 on its own will continue to be normalized to \0 to support historical CSS hacks.

  • Potentially breaking bug fix: Throw an error for mixins and functions that have rest parameters which are the same as normal parameters. Previously, the positional parameters wouldn't be accessible and calling such a mixin or function with a named argument would crash the compiler.

  • Potentially breaking bug fix: Fix various cases where using a CSS escape code at the beginning of an identifier would change parsing behavior versus using the character directly.

... (truncated)

Commits

Updates sass-loader from 16.0.8 to 17.0.1

Release notes

Sourced from sass-loader's releases.

v17.0.1

Patch Changes

  • Remove the byte order mark (BOM) from the compiled CSS. dart-sass prepends it when the compiled CSS contains non ASCII characters and the style option is compressed (the default for the production mode), but a BOM is only valid at the very beginning of a file - tools like css-loader move @import at-rules above it, so it ended up in the middle of the generated CSS and broke the rule after it. Source maps are shifted accordingly. (by @​alexander-akait in #1337)

v17.0.0

Major Changes

  • Add "auto" to the api option and make it the default. When the Sass implementation supports the modern compiler, "auto" enables it and reuses a single long-running compiler across files, which significantly improves build performance; otherwise it falls back to the modern API. (by @​alexander-akait in #1319)

  • Remove node-sass support. (by @​alexander-akait in #1316)

  • Minimum supported NodeJS version is 22.11.0. (by @​alexander-akait in #1318)

  • Convert source to native ECMAScript modules. The package now declares "type": "module" and exposes both an ESM and a CommonJS build via the exports field. CommonJS consumers continue to work via require, and ESM consumers can now import the loader directly. (by @​alexander-akait in #1322)

  • Remove legacy Sass JS API support. (by @​alexander-akait in #1316)

Minor Changes

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

Changelog

Sourced from sass-loader's changelog.

17.0.1

Patch Changes

  • Remove the byte order mark (BOM) from the compiled CSS. dart-sass prepends it when the compiled CSS contains non ASCII characters and the style option is compressed (the default for the production mode), but a BOM is only valid at the very beginning of a file - tools like css-loader move @import at-rules above it, so it ended up in the middle of the generated CSS and broke the rule after it. Source maps are shifted accordingly. (by @​alexander-akait in #1337)

17.0.0

Major Changes

  • Add "auto" to the api option and make it the default. When the Sass implementation supports the modern compiler, "auto" enables it and reuses a single long-running compiler across files, which significantly improves build performance; otherwise it falls back to the modern API. (by @​alexander-akait in #1319)

  • Remove node-sass support. (by @​alexander-akait in #1316)

  • Minimum supported NodeJS version is 22.11.0. (by @​alexander-akait in #1318)

  • Convert source to native ECMAScript modules. The package now declares "type": "module" and exposes both an ESM and a CommonJS build via the exports field. CommonJS consumers continue to work via require, and ESM consumers can now import the loader directly. (by @​alexander-akait in #1322)

  • Remove legacy Sass JS API support. (by @​alexander-akait in #1316)

Minor Changes

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

Commits
  • f38ee40 chore(release): new release (#1338)
  • d33042b docs: explain how @use/@import requests are resolved (#1339)
  • 72640db fix: remove the BOM from the compiled CSS (#1337)
  • a28ab73 docs: use the built-in CSS support of webpack in examples (#1336)
  • 7b81867 chore(deps): apply socket fixes (#1333)
  • b17bc02 chore(deps-dev): bump postcss from 8.5.14 to 8.5.26 (#1332)
  • c7a83fe chore(deps-dev): bump fast-uri from 3.1.2 to 3.1.5 (#1331)
  • 14a29c0 chore(deps-dev): bump shell-quote from 1.8.2 to 1.10.0 (#1328)
  • e2a48b8 chore(deps): bump immutable from 5.1.5 to 5.1.9 (#1327)
  • 87864a5 chore(deps-dev): bump @​babel/core from 7.29.0 to 7.29.6 (#1326)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for sass-loader since your current version.


Updates stylelint from 14.16.1 to 17.16.0

Release notes

Sourced from stylelint's releases.

17.16.0

It fixes 2 bugs in the layout-mappings rules. This will likely be the last 17.x release, as we prepare for 18.0.0.

  • Fixed: property-layout-mappings and unit-layout-mappings false negatives for uppercase property names and units (#9485) (@​giaBaoJS).
  • Fixed: value-keyword-layout-mappings false positives for caption-side (#9483) (@​giaBaoJS).

17.15.0

It adds 1 new rule and 2 new rule options, and fixes 4 bugs.

  • Added: selector-no-unmatchable rule (#9451) (@​jeddy3).
  • Added: ignoreFunctions: [] to color-named and color-no-hex (#9463) (@​jsmitty12).
  • Fixed: custom-property-no-missing-var-function false positives for anchor positioning (#9466) (@​giaBaoJS).
  • Fixed: declaration-block-no-redundant-longhand-properties autofix for font shorthand (#9402) (@​sarathfrancis90).
  • Fixed: declaration-property-max-values false positives for interpolated inline expressions (#9437) (@​alexchen-sys).
  • Fixed: selector-no-invalid false negatives for pseudo-elements, combinators and nested :has() (#9452) (@​jeddy3).

17.14.1

It fixes 4 bugs.

  • Fixed: quiet option suppresses report* warning reports (#9387) (@​ychampion).
  • Fixed: reported range of unknown rules (#9385) (@​ybiquitous).
  • Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@​sarathfrancis90).
  • Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@​sarathfrancis90).

17.14.0

It fixes 3 bugs, including a false negative one.

  • Fixed: performance of getting module paths (#9354) (@​jeddy3).
  • Fixed: performance by dynamically importing TIMING only on use (#9356) (@​jeddy3).
  • Fixed: function-calc-no-unspaced-operator false negatives for unspaced + and - operators following a * or / operator (#9357) (@​sarathfrancis90).

17.13.0

It fixes 3 bugs, including a false negative one.

  • Fixed: declaration-block-no-duplicate-properties false negatives for interleaved non-consecutive duplicates with ignore: ["consecutive-duplicates(-*)"] (#9324) (@​sarathfrancis90).
  • Fixed: selector-max-type false positives for nested selectors (#9319) (@​romainmenke).
  • Fixed: selector-type-no-unknown false positives for install (#9308) (@​Mouvedia).

17.12.0

It fixes 3 bugs, including a false negative one.

  • Fixed: block-no-empty reported range when using comments (#9294) (@​romainmenke).
  • Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@​romainmenke).
  • Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@​romainmenke).

17.11.1

It fixes 2 bugs.

  • Fixed: node_modules ignore for codeFilename paths containing a dot-prefixed directory (#9282) (@​tuhtah).
  • Fixed: declaration-block-no-redundant-longhand-properties range for contiguous redundant longhand properties (#9273) (@​pamelalozano16).

... (truncated)

Changelog

Sourced from stylelint's changelog.

17.16.0 - 2026-10-01

It fixes 2 bugs in the layout-mappings rules. This will likely be the last 17.x release, as we prepare for 18.0.0.

  • Fixed: property-layout-mappings and unit-layout-mappings false negatives for uppercase property names and units (#9485) (@​giaBaoJS).
  • Fixed: value-keyword-layout-mappings false positives for caption-side (#9483) (@​giaBaoJS).

17.15.0 - 2026-09-04

It adds 1 new rule and 2 new rule options, and fixes 4 bugs.

  • Added: selector-no-unmatchable rule (#9451) (@​jeddy3).
  • Added: ignoreFunctions: [] to color-named and color-no-hex (#9463) (@​jsmitty12).
  • Fixed: custom-property-no-missing-var-function false positives for anchor positioning (#9466) (@​giaBaoJS).
  • Fixed: declaration-block-no-redundant-longhand-properties autofix for font shorthand (#9402) (@​sarathfrancis90).
  • Fixed: declaration-property-max-values false positives for interpolated inline expressions (#9437) (@​alexchen-sys).
  • Fixed: selector-no-invalid false negatives for pseudo-elements, combinators and nested :has() (#9452) (@​jeddy3).

17.14.1 - 2026-07-20

It fixes 4 bugs.

  • Fixed: quiet option suppresses report* warning reports (#9387) (@​ychampion).
  • Fixed: reported range of unknown rules (#9385) (@​ybiquitous).
  • Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@​sarathfrancis90).
  • Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@​sarathfrancis90).

17.14.0 - 2026-06-25

It fixes 3 bugs, including a false negative one.

  • Fixed: performance of getting module paths (#9354) (@​jeddy3).
  • Fixed: performance by dynamically importing TIMING only on use (#9356) (@​jeddy3).
  • Fixed: function-calc-no-unspaced-operator false negatives for unspaced + and - operators following a * or / operator (#9357) (@​sarathfrancis90).

17.13.0 - 2026-06-06

It fixes 3 bugs, including a false negative one.

  • Fixed: declaration-block-no-duplicate-properties false negatives for interleaved non-consecutive duplicates with ignore: ["consecutive-duplicates(-*)"] (#9324) (@​sarathfrancis90).
  • Fixed: selector-max-type false positives for nested selectors (#9319) (@​romainmenke).
  • Fixed: selector-type-no-unknown false positives for install (#9308) (@​Mouvedia).

17.12.0 - 2026-05-20

It fixes 3 bugs, including a false negative one.

  • Fixed: block-no-empty reported range when using comments (#9294) (@​romainmenke).
  • Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@​romainmenke).
  • Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@​romainmenke).

... (truncated)

Commits
  • bc06c7c Release 17.16.0 (#9551)
  • f4fb76f Set target-branch to v18 in Dependabot config (#9488)
  • 2019478 Fix property-layout-mappings and unit-layout-mappings false negatives for...
  • e875710 Fix value-keyword-layout-mappings false positives for caption-side (#9483)
  • 0547bff Release 17.15.0 (#9484)
  • ac19a3c Fix custom-property-no-missing-var-function false positives for anchor posi...
  • 23947ae Bump @​humanfs/node from 0.16.6 to 0.16.8 (#9480)
  • 53c74f7 Bump fast-uri from 3.1.5 to 3.1.7 (#9481)
  • 26856e6 Bump the jest group across 1 directory with 2 updates (#9476)
  • b90ecd8 Bump browserslist from 4.28.4 to 4.28.8 (#9479)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for stylelint since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates webpack from 5.112.0 to 5.112.2

Release notes

Sourced from webpack's releases.

v5.112.2

Patch Changes

v5.112.1

Patch Changes

... (truncated)

Changelog

Sourced from webpack's changelog.

5.112.2

Patch Changes

5.112.1

Patch Changes

... (truncated)

Commits
  • e95a7f2 chore(release): new release (#22867)
  • 6e43fc2 fix: return the value of every module type from importModule() (#22869)
  • 4ffac8d ci: rename the parser job to spec and run CSS, HTML and XML in one leg (#22870)
  • 0c02242 test: split the syntax unit tests into tokenizer, parser and printer (#22825)
  • 660608c perf(css): cut CPU and allocation in the CSS minifier (#22868)
  • 8c3cbd3 perf: avoid allocating unused CSS module sets (#22866)
  • a1e5f6a perf: avoid duplicate scans in module concatenation (#22865)
  • 759b539 chore(release): new release (#22720)
  • 539f8de fix(minify): keep globals a globalThis write replaces, and slice on a pat...
  • 9668155 ci: run the deep-imports check in the lint job (#22859)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the bo-default-npm group across 1 directory with 8 …
c0b5e11 
…updates

Bumps the bo-default-npm group with 8 updates in the /admin-dev/themes/default directory:

| Package | From | To |
| --- | --- | --- |
| [@fontsource/ibm-plex-sans](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/ibm-plex-sans) | `5.1.0` | `5.3.0` |
| [material-symbols](https://github.com/marella/material-symbols/tree/HEAD/material-symbols) | `0.48.0` | `0.48.1` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `8.0.7` | `8.0.9` |
| [postcss](https://github.com/postcss/postcss) | `8.5.30` | `8.5.31` |
| [sass-embedded](https://github.com/sass/embedded-host-node) | `1.105.2` | `1.106.1` |
| [sass-loader](https://github.com/webpack/sass-loader) | `16.0.8` | `17.0.1` |
| [stylelint](https://github.com/stylelint/stylelint) | `14.16.1` | `17.16.0` |
| [webpack](https://github.com/webpack/webpack) | `5.112.0` | `5.112.2` |



Updates `@fontsource/ibm-plex-sans` from 5.1.0 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/google/ibm-plex-sans)

Updates `material-symbols` from 0.48.0 to 0.48.1
- [Release notes](https://github.com/marella/material-symbols/releases)
- [Commits](https://github.com/marella/material-symbols/commits/v0.48.1/material-symbols)

Updates `@babel/core` from 8.0.7 to 8.0.9
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.9/packages/babel-core)

Updates `postcss` from 8.5.30 to 8.5.31
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.30...8.5.31)

Updates `sass-embedded` from 1.105.2 to 1.106.1
- [Changelog](https://github.com/sass/embedded-host-node/blob/main/CHANGELOG.md)
- [Commits](sass/embedded-host-node@1.105.2...1.106.1)

Updates `sass-loader` from 16.0.8 to 17.0.1
- [Release notes](https://github.com/webpack/sass-loader/releases)
- [Changelog](https://github.com/webpack/sass-loader/blob/main/CHANGELOG.md)
- [Commits](webpack/sass-loader@v16.0.8...v17.0.1)

Updates `stylelint` from 14.16.1 to 17.16.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@14.16.1...17.16.0)

Updates `webpack` from 5.112.0 to 5.112.2
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.112.0...v5.112.2)

---
updated-dependencies:
- dependency-name: "@fontsource/ibm-plex-sans"
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bo-default-npm
- dependency-name: material-symbols
  dependency-version: 0.48.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bo-default-npm
- dependency-name: "@babel/core"
  dependency-version: 8.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bo-default-npm
- dependency-name: postcss
  dependency-version: 8.5.31
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bo-default-npm
- dependency-name: sass-embedded
  dependency-version: 1.106.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bo-default-npm
- dependency-name: sass-loader
  dependency-version: 17.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: bo-default-npm
- dependency-name: stylelint
  dependency-version: 17.16.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: bo-default-npm
- dependency-name: webpack
  dependency-version: 5.112.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bo-default-npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants