chore(deps-dev): bump the dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the dependencies group with 4 updates in the / directory: @changesets/cli, prettier, source-map and webpack.

Updates @changesets/cli from 2.31.0 to 2.31.1

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.1

Patch Changes

• #2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.

Commits

• a897bb8 Use a different publish tag for maintenance/v2 branch (#2162)
• e8650b9 Version Packages (#2161)
• 15cf592 Fixed handling of the npm 12 info output (#2159)
• 9f2cb2a Configure Changesets for maintenance/v2 line (#2076)
• 97247cb Change allowed publish pattern to maintenance/v* given rulesets behavior (#...
• 13286a8 Build(deps): Bump the github-actions group across 1 directory with 3 updates ...
• 8f6acd6 Update dependabot group to exclude major (#2067)
• c70c675 Setup backport workflow and sync next setup (#2057)
• 9672019 Remove SECURITY.md to defer to .github (#2055)
• 18e1661 Use internal bot for versioning (#2039)
• Additional commits viewable in compare view

Updates prettier from 3.9.4 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

• Preserve quotes for methods named new (prettier/prettier#19621 by @​kovsu)
• Support import defer in typescript parser (prettier/prettier#19624, prettier/prettier#19675 by @​fisker)
• Added a new official plugin @prettier/plugin-yuku 🚀 (prettier/prettier#19628, prettier/prettier#19629 by @​fisker)

🔗 Changelog

3.9.5

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

1. Install the plugin:

   yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

• 8f0c950 Release 3.9.6
• e910764 Update changelog
• ec3f1c7 Update typescript-eslint to v8.65.0 (#19675)
• 73d2efc Update Yuku parser to v0.7.0 (#19664)
• dd5e24e Preserve quotes for TSMethodSignature nodes named new (#19621)
• c03ab4e Update dependency eslint-plugin-unicorn to v72 (#19633)
• b74dd53 Update Yuku parser to v0.6.5 (#19654)
• f1b594e Update dependency eslint-plugin-simple-import-sort to v14 (#19655)
• 0d9dfb6 Update Yuku parser to v0.6.4 (#19650)
• 3bbb815 Remove typescript-only directory (#19636)
• Additional commits viewable in compare view

Updates source-map from 0.7.6 to 0.8.0

Changelog

Sourced from source-map's changelog.

0.8.0

• #528 mozilla/source-map#528 Adding security policy
• #525 mozilla/source-map#525 Use Object.create for sourceContents
• #520 mozilla/source-map#520 Fixes types for SourceMapConsumer.initialize

Commits

• ac0a1a6 0.8.0
• aa7ae07 Adding security policy (#528)
• a75f52b Use Object.create for sourceContents (#525)
• 6bf82ff Added missing periods for consistency and correctness (#514)
• f4f1a90 Merge pull request #519 from mozilla/nchevobbe-patch-1
• a36f46f Merge pull request #520 from arcanis/patch-1
• 25ff939 Update source-map.d.ts
• 0ccf5ec prettier
• f9aa371 Update CHANGELOG.md
• See full diff in compare view

Maintainer changes

This version was pushed to npm by hmanilla, a new releaser for source-map since your current version.

Updates webpack from 5.108.3 to 5.108.4

Release notes

Sourced from webpack's releases.

v5.108.4

Patch Changes

• Speed up non-CSS-Modules parsing by not building unused selector AST nodes. (by @​alexander-akait in #21324)

• Speed up non-CSS-Modules CSS parsing by dropping value tokens nothing reads. (by @​alexander-akait in #21324)

• Resolve HTML asset URLs against the document <base href>. (by @​alexander-akait in #21329)

• Add HTML integration tests: generateError output, ignored src, null-char parse. (by @​aryanraj45 in #21328)

• Reduce CPU and memory overhead of HTML and CSS parsing and code generation. (by @​alexander-akait in #21332)

• Reduce HTML parser memory and CPU by skipping unused AST nodes. (by @​alexander-akait in #21323)

• Reduce HTML parser memory by storing the AST in struct-of-arrays form. (by @​alexander-akait in #21331)

• Key the provided-exports cache on a lazy barrel's still-lazy re-export targets. (by @​hai-x in #21326)

• Default output.globalObject to globalThis for universal targets. (by @​alexander-akait in #21314)

• Pass through new URL(...) directory references instead of resolving them. (by @​alexander-akait in #21312)

Changelog

Sourced from webpack's changelog.

5.108.4

Patch Changes

• Speed up non-CSS-Modules parsing by not building unused selector AST nodes. (by @​alexander-akait in #21324)

• Speed up non-CSS-Modules CSS parsing by dropping value tokens nothing reads. (by @​alexander-akait in #21324)

• Resolve HTML asset URLs against the document <base href>. (by @​alexander-akait in #21329)

• Add HTML integration tests: generateError output, ignored src, null-char parse. (by @​aryanraj45 in #21328)

• Reduce CPU and memory overhead of HTML and CSS parsing and code generation. (by @​alexander-akait in #21332)

• Reduce HTML parser memory and CPU by skipping unused AST nodes. (by @​alexander-akait in #21323)

• Reduce HTML parser memory by storing the AST in struct-of-arrays form. (by @​alexander-akait in #21331)

• Key the provided-exports cache on a lazy barrel's still-lazy re-export targets. (by @​hai-x in #21326)

• Default output.globalObject to globalThis for universal targets. (by @​alexander-akait in #21314)

• Pass through new URL(...) directory references instead of resolving them. (by @​alexander-akait in #21312)

Commits

• bb9ccfd chore(release): new release (#21319)
• 7639066 fix: invalidate provided-exports cache with lazy barrel (#21326)
• ae28c54 perf: reduce CPU and memory overhead of the HTML and CSS pipelines (#21332)
• e6fb547 perf: re-encode the HTML AST as struct-of-arrays behind a path-based visitor ...
• 5ce1c22 fix(html): resolve asset URLs against <base href> (#21329)
• 0e43c4a test(html): cover generateError, ignored-source, and null-character parse pat...
• cebd793 refactor: build export-presence guards from a lazy boolean formula (#21320)
• c2628cf fix: don't resolve new URL() directory references as modules (#21312)
• 00d8b2f perf: speed up non-CSS-Modules CSS parsing by skipping unused AST work (#21324)
• f7a3f6d perf: reduce HTML parser memory and CPU with parser-level skip options (#21323)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[changeset-bot]

⚠️ No Changeset found

Latest commit: bf32cbf

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[codspeed-hq]

Merging this PR will degrade performance by 12.38%

⚡ 10 improved benchmarks
❌ 25 regressed benchmarks
✅ 177 untouched benchmarks

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

	Mode	Benchmark	BASE	HEAD	Efficiency
❌	Memory	raw-source memory: new RawSource(string)	1.1 KB	13.6 KB	-92.1%
❌	Memory	replace-source memory: source() concatenates result	3.7 KB	45.1 KB	-91.79%
❌	Memory	source-map-source memory: new SourceMapSource(simple)	784 B	1,888 B	-58.47%
❌	Memory	original-source memory: map({ columns: false }) line-only mappings	117.2 KB	205.8 KB	-43.05%
❌	Memory	concat-source memory: map({ columns: true }) composes child maps	2.5 MB	4 MB	-37.86%
❌	Simulation	cached-source: source() (cold)	207 µs	280.6 µs	-26.25%
❌	Memory	compat-source memory: new CompatSource(sourceLike)	784 B	1,008 B	-22.22%
❌	Memory	source-map-source memory: sourceAndMap({ columns: true }) (combined inner)	2 MB	2.6 MB	-22.21%
❌	Memory	original-source memory: new OriginalSource()	1.2 KB	1.6 KB	-22%
❌	Simulation	size-only-source: new SizeOnlySource()	160.5 µs	195.8 µs	-18.02%
❌	Simulation	source-map-source: new (buffer map)	206.5 µs	245.5 µs	-15.89%
❌	Simulation	source-map-source: new (string map)	206.7 µs	245.6 µs	-15.86%
❌	Simulation	source-map-source: new (object map)	207 µs	245.8 µs	-15.78%
❌	Simulation	source-map-source: new (buffer value)	207.3 µs	246.1 µs	-15.76%
❌	Simulation	source-map-source: buffers() (from buffer)	222.3 µs	262.1 µs	-15.2%
❌	Simulation	replace-source: new ReplaceSource()	178.1 µs	209.9 µs	-15.14%
❌	Simulation	size-only-source: size()	200.3 µs	235.7 µs	-15.01%
❌	Simulation	source-map-source: sourceAndMap({columns:false})	240.3 µs	280.2 µs	-14.24%
❌	Memory	source-map-source memory: map({ columns: true })	784 B	912 B	-14.04%
❌	Simulation	source-map-source: sourceAndMap()	240.6 µs	276.1 µs	-12.83%
...	...	...	...	...	...

ℹ️ Only the first 20 benchmarks are displayed. Go to the app to view all benchmarks.

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.

---

_{Comparing dependabot/npm_and_yarn/dependencies-6b270be3fc (bf32cbf) with main (1aa76ca)}