chore(deps-dev): bump the dependencies group with 3 updates by dependabot[bot] · Pull Request #616 · webpack/enhanced-resolve

dependabot · 2026-06-22T06:52:46Z

Bumps the dependencies group with 3 updates: @codspeed/core, lint-staged and memfs.

Updates @codspeed/core from 5.5.0 to 5.6.0

Release notes

Sourced from @codspeed/core's releases.

v5.6.0

What's Changed

feat: add MacOS support by @not-matthias in CodSpeedHQ/codspeed-node#81

Full Changelog: CodSpeedHQ/codspeed-node@v5.5.0...v5.6.0

Commits

bcd7e64 v5.6.0
3411926 feat: add macOS-only vitest benchmark and CI job
b7f1be7 feat(vitest,tinybench): emit benchmark markers inside the sample window
079e488 chore: bump instrument-hooks
See full diff in compare view

Updates lint-staged from 17.0.7 to 17.0.8

Release notes

Sourced from lint-staged's releases.

v17.0.8

Patch Changes

#1809 179b437 - Fix lint-staged discarding the ongoing merge conflict status (.git/MERGE_HEAD) when using the --hide-unstaged or --hide-all options.

#1811 3d0b2c0 - Fix issues with Git commands that are successful but also emit warnings to stderr, by ignoring the stderr output completely when the process exits with code 0. This was the behavior when using nano-spawn and execa, but when switching to tinyexec in 16.3.0 both stdout and stderr were used as interleaved output.

Changelog

Sourced from lint-staged's changelog.

17.0.8

Patch Changes

#1809 179b437 - Fix lint-staged discarding the ongoing merge conflict status (.git/MERGE_HEAD) when using the --hide-unstaged or --hide-all options.

#1811 3d0b2c0 - Fix issues with Git commands that are successful but also emit warnings to stderr, by ignoring the stderr output completely when the process exits with code 0. This was the behavior when using nano-spawn and execa, but when switching to tinyexec in 16.3.0 both stdout and stderr were used as interleaved output.

Commits

5f3b8f2 Merge pull request #1812 from lint-staged/changeset-release/main
43a9b8d chore(changeset): release
630e2f6 Merge pull request #1809 from lint-staged/restore-merge-status
179b437 fix: restore Git merge status after creating backup stash
6bae2e2 Merge pull request #1811 from lint-staged/exec-git-ignore-stderr
b82a830 ci: run npm audit omitting dev, including prod dependencies
0b19b80 build(deps): update dependencies
3d0b2c0 fix: ignore stderr when doing Git operations
See full diff in compare view

Updates memfs from 4.57.7 to 4.57.8

Release notes

Sourced from memfs's releases.

Release v4.57.8

What's Changed

fix: clamp negative truncate length to zero (uninitialized-memory leak) by @chatman-media in streamich/memfs#1261

New Contributors

@chatman-media made their first contribution in streamich/memfs#1261

Full Changelog: streamich/memfs@v4.57.7...v4.57.8

Commits

29b912b chore: release v4.57.8
b5c6c62 Merge pull request #1261 from chatman-media/fix/truncate-negative-length-memo...
f2be1ce fix: 🐛 clamp negative truncate length to zero
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 3 updates: [@codspeed/core](https://github.com/CodSpeedHQ/codspeed-node), [lint-staged](https://github.com/lint-staged/lint-staged) and [memfs](https://github.com/streamich/memfs). Updates `@codspeed/core` from 5.5.0 to 5.6.0 - [Release notes](https://github.com/CodSpeedHQ/codspeed-node/releases) - [Commits](CodSpeedHQ/codspeed-node@v5.5.0...v5.6.0) Updates `lint-staged` from 17.0.7 to 17.0.8 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.0.7...v17.0.8) Updates `memfs` from 4.57.7 to 4.57.8 - [Release notes](https://github.com/streamich/memfs/releases) - [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md) - [Commits](streamich/memfs@v4.57.7...v4.57.8) --- updated-dependencies: - dependency-name: "@codspeed/core" dependency-version: 5.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: lint-staged dependency-version: 17.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: memfs dependency-version: 4.57.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2026-06-22T06:52:49Z

⚠️ No Changeset found

Latest commit: ceb2870

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

codspeed-hq · 2026-06-22T06:59:15Z

Merging this PR will improve performance by ×3.7

⚠️

Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

⚡ 2 improved benchmarks
❌ 1 regressed benchmark
✅ 135 untouched benchmarks

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

	Mode	Benchmark	`BASE`	`HEAD`	Efficiency
❌	Simulation	`realistic-midsize: mixed batch (cold cache)`	6.8 ms	8.1 ms	-15.92%
⚡	Memory	`cache-predicate: mixed cached/uncached requests (warm)`	96.7 KB	1.9 KB	×51
⚡	Simulation	`cache-predicate: mixed cached/uncached requests (warm)`	2.3 ms	2 ms	+15.39%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.

_{Comparing dependabot/npm_and_yarn/dependencies-f4e4050489 (ceb2870) with main (a7f4bd1)}

dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 22, 2026

webpack Bot approved these changes Jun 22, 2026

View reviewed changes

webpack Bot enabled auto-merge (squash) June 22, 2026 06:53

alexander-akait disabled auto-merge June 22, 2026 12:12

alexander-akait merged commit 561d5e3 into main Jun 22, 2026
34 of 36 checks passed

alexander-akait deleted the dependabot/npm_and_yarn/dependencies-f4e4050489 branch June 22, 2026 12:12

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps-dev): bump the dependencies group with 3 updates#616

chore(deps-dev): bump the dependencies group with 3 updates#616
alexander-akait merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-f4e4050489

dependabot Bot commented on behalf of github Jun 22, 2026

Uh oh!

changeset-bot Bot commented Jun 22, 2026

Uh oh!

codspeed-hq Bot commented Jun 22, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 22, 2026

v5.6.0

What's Changed

v17.0.8

Patch Changes

17.0.8

Patch Changes

Release v4.57.8

What's Changed

New Contributors

Uh oh!

changeset-bot Bot commented Jun 22, 2026

⚠️ No Changeset found

Uh oh!

codspeed-hq Bot commented Jun 22, 2026

Merging this PR will improve performance by ×3.7

Performance Changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant