[dependabot]

Bumps webpack-cli from 5.1.4 to 7.2.3.

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.2.3

Patch Changes

• fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @​bjohansebas in #4834)

• feat: allow toml@5 as a peer dependency for TOML configuration files (by @​alexander-akait in #4837)

webpack-cli@7.2.2

Patch Changes

• perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @​bjohansebas in #4818)

webpack-cli@7.2.1

Patch Changes

• fix: CLIPlugin dynamic import interop under Bun (by @​alexander-akait in #4799)

webpack-cli@7.2.0

Minor Changes

• feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @​bjohansebas in #4793)

• Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @​alexander-akait in #4796)

webpack-cli@7.1.0

Minor Changes

• feat(cli): refresh the --help output using commander's configureHelp API — branded headers, section dividers, colorized terms and a clearer footer. Colors and chrome collapse to plain text when output is piped or --no-color is used, so scripts keep working. (by @​alexander-akait in #4779)

• feat: support .json5, .yaml/.yml and .toml configuration files by parsing them directly, with the parser package (json5, js-yaml, toml) installed on demand by the user and declared as optional peerDependencies so the parsers resolve correctly under Yarn PnP (by @​alexander-akait in #4777)

webpack-cli@7.0.3

Patch Changes

• Improved CLI startup performance and reduced memory usage. (by @​alexander-akait in #4765)

• Reduced CLI startup CPU and memory usage by caching schema-derived argument metadata, registering only the options present in the arguments, and reading config directories once during default-config discovery. (by @​alexander-akait in #4760)

• Replace the fastest-levenshtein dependency with a small in-tree implementation used for command/option "did you mean" suggestions. (by @​alexander-akait in #4762)

webpack-cli@7.0.2

Patch Changes

• Resolve configuration path for cache build dependencies. (by @​alexander-akait in #4707)

webpack-cli@7.0.1

Patch Changes

• The file protocol for configuration options (--config/--extends) is supported. (by @​alexander-akait in #4702)

... (truncated)

Changelog

Sourced from webpack-cli's changelog.

7.2.3

Patch Changes

• fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @​bjohansebas in #4834)

• feat: allow toml@5 as a peer dependency for TOML configuration files (by @​alexander-akait in #4837)

7.2.2

Patch Changes

• perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @​bjohansebas in #4818)

7.2.1

Patch Changes

• fix: CLIPlugin dynamic import interop under Bun (by @​alexander-akait in #4799)

7.2.0

Minor Changes

• feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @​bjohansebas in #4793)

• Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @​alexander-akait in #4796)

7.1.0

Minor Changes

• feat(cli): refresh the --help output using commander's configureHelp API — branded headers, section dividers, colorized terms and a clearer footer. Colors and chrome collapse to plain text when output is piped or --no-color is used, so scripts keep working. (by @​alexander-akait in #4779)

• feat: support .json5, .yaml/.yml and .toml configuration files by parsing them directly, with the parser package (json5, js-yaml, toml) installed on demand by the user and declared as optional peerDependencies so the parsers resolve correctly under Yarn PnP (by @​alexander-akait in #4777)

7.0.3

Patch Changes

• Improved CLI startup performance and reduced memory usage. (by @​alexander-akait in #4765)

• Reduced CLI startup CPU and memory usage by caching schema-derived argument metadata, registering only the options present in the arguments, and reading config directories once during default-config discovery. (by @​alexander-akait in #4760)

• Replace the fastest-levenshtein dependency with a small in-tree implementation used for command/option "did you mean" suggestions. (by @​alexander-akait in #4762)

7.0.2

Patch Changes

... (truncated)

Commits

• 7d40e4e chore(release): new release (#4839)
• 1f6593a ci: use the input names changesets/action v2 expects (#4838)
• 99cfc4f build(deps): update dependencies (#4837)
• 11be634 feat(create-webpack-app): stop asking about HTML and CSS (#4836)
• a2418aa feat(create-webpack-app): use webpack's native CSS and HTML support in init t...
• 3664b9d chore: update webpack-dev-server to v6 and test against v5 and v6 (#4834)
• ce1a219 ci: node 26 (#4763)
• 0cfc077 chore(deps): bump changesets/action in the dependencies group (#4831)
• ef262eb chore(deps): bump changesets/action in the dependencies group (#4830)
• d90f5ab chore: add gitignore to ignore autogenerated build & fix codecov option (#4828)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for webpack-cli since your current version.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: LeanerCloud/cloud-commitments-platform
• Branch: main
• File: .coderabbit.yaml
• Commit: 67701b3
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 6560fbdd-1183-47cb-a316-557534e9312b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[cristim]

@dependabot rebase

[cristim]

Merge gate record (burndown orchestrator)

Independent adversarial review (claude-opus-5-5)
#1637 @ 33f1587: NO CONFIRMED FINDINGS

• Merges cleanly (also with chore(deps): Bump babel-loader from 9.2.1 to 10.1.1 in /frontend #1638 on top). webpack-cli 6/7 breaking changes (Node >= 20.9, webpack >= 5.101 peer, removed init/loader/plugin commands, removed --node-env, config via dynamic import) do not hit us: scripts use only --mode and --watch, no dev server; Node 24 in CI and node:25 in the Dockerfile; webpack 5.112.
• (env, argv) => argv.mode still reads production; hashed output and index.html references unchanged; dist file set and bundle hashes identical to the same base on webpack-cli 5.
• npm ci/npm ls exit 0 (removed packages belonged only to webpack-cli 5); typecheck exit 0; lint 0 errors; jest 175/175 suites.

Local verification
Local verification on macOS @ 33f1587: PASS

• webpack-cli 7.2.3 installed; npm ci, npm test (175 suites, 4595 passed), lint and npm run build exit 0.
• dist identical to the merge-base build (same 656-file list and size; same 3 size warnings as baseline).
• npm run build:dev exit 0; npm run watch compiled and kept running until stopped. Home, Opportunities and Plans render with only the known 401.

CodeRabbit not run: the exact-SHA local verification and the Opus review above cover this SHA (repo CLAUDE.md review gate).

[cristim]

@dependabot rebase

[cristim]

Merge gate record (burndown orchestrator)

Independent adversarial review (claude-opus-5-5)
#1637 @ 33f1587: NO CONFIRMED FINDINGS

• Merges cleanly (also with chore(deps): Bump babel-loader from 9.2.1 to 10.1.1 in /frontend #1638 on top). webpack-cli 6/7 breaking changes (Node >= 20.9, webpack >= 5.101 peer, removed init/loader/plugin commands, removed --node-env, config via dynamic import) do not hit us: scripts use only --mode and --watch, no dev server; Node 24 in CI and node:25 in the Dockerfile; webpack 5.112.
• (env, argv) => argv.mode still reads production; hashed output and index.html references unchanged; dist file set and bundle hashes identical to the same base on webpack-cli 5.
• npm ci/npm ls exit 0 (removed packages belonged only to webpack-cli 5); typecheck exit 0; lint 0 errors; jest 175/175 suites.

After #1657 merged, Dependabot rebased this PR. Re-check @ 367c437, same reviewer: NO CONFIRMED FINDINGS. The only package.json change is still webpack-cli 5.1.4 -> 7.2.3; the lockfile changes only the webpack-cli subtree (same package-level diff as at 33f1587); main's recent bumps (chart.js 4.6.1, webpack 5.112.2, @typescript-eslint 8.72.1) are kept; merges cleanly into main and together with #1638.

Local verification
Local verification on macOS @ 33f1587: PASS

• webpack-cli 7.2.3 installed; npm ci, npm test (175 suites, 4595 passed), lint and npm run build exit 0.
• dist identical to the merge-base build (same 656-file list and size; same 3 size warnings as baseline).
• npm run build:dev exit 0; npm run watch compiled and kept running until stopped. Home, Opportunities and Plans render with only the known 401.

Re-verification @ 367c437 (after the Dependabot rebase onto main 67701b3): PASS. npm ci, npm test (179 suites, 4644 passed, 1 skipped), lint, npm run build and npm run build:dev exit 0; prod dist file list identical to main's build; login, Home, Opportunities and Plans render with only the known harness 401.

CodeRabbit not run: the exact-SHA local verification and the Opus review above cover this SHA (repo CLAUDE.md review gate).