chore(deps): update all dependencies (major)

[renovate]

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
MarkupSafe (changelog)	==2.0.1 → ==3.0.3						major
actions/checkout	v2 → v6					action	major
babel-loader	8.2.3 → 10.0.0					devDependencies	major
codecov/codecov-action	v2 → v5					action	major
gitdb2	==3.0.3.post1 → ==4.0.2						major
node	16 → 25					stage	major
postcss-cli	8.3.1 → 11.0.1					dependencies	major
ubuntu	22.04 → 24.04					github-runner	major
ubuntu	focal → noble					final	major
ubuntu	focal → noble					stage	major
webpack-cli (source)	4.9.1 → 6.0.1					dependencies	major
whitenoise (changelog)	==5.3.0 → ==6.11.0						major

---

Release Notes

pallets/markupsafe (MarkupSafe)

v3.0.3

Compare Source

Released 2025-09-27

• __version__ raises DeprecationWarning instead of UserWarning.
  :issue:487
• Adopt multi-phase initialisation (:pep:489) for the C extension.
  :issue:494
• Build Windows ARM64 wheels. :issue:485
• Build Python 3.14 wheels. :issue:503
• Build riscv64 wheels. :issue:505

v3.0.2

Compare Source

Released 2024-10-18

• Fix compatibility when __str__ returns a str subclass. :issue:472
• Build requires setuptools >= 70.1. :issue:475

v3.0.1

Compare Source

Released 2024-10-08

• Address compiler warnings that became errors in GCC 14. :issue:466
• Fix compatibility with proxy objects. :issue:467

v3.0.0

Compare Source

Released 2024-10-07

• Support Python 3.13 and its experimental free-threaded build. :pr:461
• Drop support for Python 3.7 and 3.8.
• Use modern packaging metadata with pyproject.toml instead of setup.cfg.
  :pr:348
• Change distutils imports to setuptools. :pr:399
• Use deferred evaluation of annotations. :pr:400
• Update signatures for Markup methods to match str signatures. Use
  positional-only arguments. :pr:400
• Some str methods on Markup no longer escape their argument:
  strip, lstrip, rstrip, removeprefix, removesuffix,
  partition, and rpartition; replace only escapes its new
  argument. These methods are conceptually linked to search methods such as
  in, find, and index, which already do not escape their argument.
  :issue:401
• The __version__ attribute is deprecated. Use feature detection, or
  importlib.metadata.version("markupsafe"), instead. :pr:402
• Speed up escaping plain strings by 40%. :pr:434
• Simplify speedups implementation. :pr:437

v2.1.5

Compare Source

Released 2024-02-02

• Fix striptags not collapsing spaces. :issue:417

v2.1.4

Compare Source

Released 2024-01-19

• Don't use regular expressions for striptags, avoiding a performance
  issue. :pr:413

v2.1.3

Compare Source

Released 2023-06-02

• Implement format_map, casefold, removeprefix, and removesuffix
  methods. :issue:370
• Fix static typing for basic str methods on Markup. :issue:358
• Use Self for annotating return types. :pr:379

v2.1.2

Compare Source

Released 2023-01-17

• Fix striptags not stripping tags containing newlines.
  :issue:310

v2.1.1

Compare Source

Released 2022-03-14

• Avoid ambiguous regex matches in striptags. :pr:293

v2.1.0

Compare Source

Released 2022-02-17

• Drop support for Python 3.6. :pr:262
• Remove soft_unicode, which was previously deprecated. Use
  soft_str instead. :pr:261
• Raise error on missing single placeholder during string
  interpolation. :issue:225
• Disable speedups module for GraalPython. :issue:277

actions/checkout (actions/checkout)

v6

Compare Source

v5

Compare Source

v4

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in #​1941
• Expand unit test coverage for isGhes by @​jww3 in #​1946

v3

Compare Source

• Fix: Mark test scripts with Bash'isms to be run via Bash
• Add option to fetch tags even if fetch-depth > 0

babel/babel-loader (babel-loader)

v10.0.0

Compare Source

What's Changed

Breaking Changes

• bump node requirement to ^18.20.0 || ^20.10.0 || >=22.0.0 and webpack requirement to >= 5.61.0 by @​JLHwung in #​1026
• breaking: use output.hashFunction as loader cache hasher by @​JLHwung in #​1027

New Features

• Add babel-loader logger by @​JLHwung in #​1034
• Support cache with external dependencies by @​JLHwung in #​1033

Bug Fixes

• [Bugfix] Ensure stability of filename cache-keys by @​stefanpenner in #​909

Docs

• docs: clarify that cacheIdentifier is computed from the merged options by @​JLHwung in #​1000
• Create SECURITY.md by @​JLHwung in #​1032
• Add babel-loader v10 readme by @​JLHwung in #​1046
• add readme section for loggingDebug support by @​JLHwung in #​1038
• Update readme and repo templates by @​JLHwung in #​1041

Dependencies

• migrate to c8 by @​JLHwung in #​996
• Bump word-wrap from 1.2.3 to 1.2.4 by @​dependabot in #​998
• Bump dev dependencies by @​JLHwung in #​1001
• Bump braces from 3.0.2 to 3.0.3 by @​dependabot in #​1020
• Update deps by @​JLHwung in #​1025
• refactor: replace find-cache-dir by find-up by @​JLHwung in #​1031
• Bump webpack from 5.93.0 to 5.94.0 by @​dependabot in #​1035
• chore: update dev deps by @​JLHwung in #​1036
• Bump cross-spawn from 7.0.3 to 7.0.6 by @​dependabot in #​1049

Internal

• Remove caller option check by @​JLHwung in #​1007
• Update tests by @​JLHwung in #​1003
• Update metadata test by @​JLHwung in #​1024
• Migrate to node test runner by @​JLHwung in #​1028
• chore: use default eslint rules by @​JLHwung in #​1029
• refactor: use webpack builtin schema util by @​JLHwung in #​1030

New Contributors

• @​stefanpenner made their first contribution in #​909

Full Changelog: babel/babel-loader@v9.1.3...v10.0.0

v9.2.1

Compare Source

What's Changed

• Avoid error on missing getLogger by @​nicolo-ribaudo in #​1045

Full Changelog: babel/babel-loader@v9.2.0...v9.2.1

v9.2.0

Compare Source

What's Changed

• Remove caller option check by @​JLHwung in #​1007
• Update deps by @​JLHwung in #​1025
• docs: clarify that cacheIdentifier is computed from the merged options by @​JLHwung in #​1000
• Add babel-loader logger by @​JLHwung in #​1037

Full Changelog: babel/babel-loader@v9.1.3...v9.2.0

v9.1.3

Compare Source

Security dependency updates

• Bump http-cache-semantics from 4.1.0 to 4.1.1 by @​dependabot in #​982
• Bump semver from 7.3.2 to 7.5.2 by @​dependabot in #​993
• bump find-cache-dir to v4 by @​JLHwung in #​995

New Contributors

• @​piwysocki made their first contribution in #​981
• @​comoser made their first contribution in #​897

Full Changelog: babel/babel-loader@v9.1.2...v9.1.3

v9.1.2

Compare Source

9.1.1 was a broken release, it didn't include all the commits.

Dependencies updates

• Bump qs from 6.5.2 to 6.5.3 by @​dependabot in #​977
• Bump json5 from 2.2.1 to 2.2.3 by @​dependabot in #​980

Misc

• GitHub Workflows security hardening by @​sashashura in #​976

New Contributors

• @​sashashura made their first contribution in #​976

Full Changelog: babel/babel-loader@v9.1.0...v9.1.2

v9.1.1

Compare Source

v9.1.0

Compare Source

New features

• Pass external dependencies from Babel to Webpack by @​nicolo-ribaudo in #​971

Full Changelog: babel/babel-loader@v9.0.1...v9.1.0

v9.0.1

Compare Source

Bug Fixes

• remove "node:" builtin prefix by @​JLHwung in #​970

Full Changelog: babel/babel-loader@v9.0.0...v9.0.1

v9.0.0

Compare Source

What's Changed

• update hash method mechanism so it doesn't fail on a fips enabled machine by @​darmbrust in #​939
• Require babel ^7.12.0 and Node.js >= 14.15.0 versions by @​JLHwung in #​956
• Remove dependency on loader-utils and drop webpack 4 support by @​nied in #​942

New Contributors

• @​darmbrust made their first contribution in #​939
• @​nied made their first contribution in #​942

Full Changelog: babel/babel-loader@v8.2.5...v9.0.0

v8.4.1

Compare Source

What's Changed

• Avoid error on missing getLogger by @​nicolo-ribaudo in #​1044

Full Changelog: babel/babel-loader@v8.4.0...v8.4.1

v8.4.0

Compare Source

What's Changed

• Fix loader-utils vulnerability by @​LuckyLuky in #​979
• Add babel-loader logger by @​JLHwung in #​1039

New Contributors

• @​LuckyLuky made their first contribution in #​979

Full Changelog: babel/babel-loader@v8.3.0...v8.4.0

v8.3.0

Compare Source

New features

• Pass external dependencies from Babel to Webpack by @​nicolo-ribaudo in #​971

Full Changelog: babel/babel-loader@v8.2.5...v8.3.0

v8.2.5

Compare Source

What's Changed

• fix: respect inputSourceMap loader option by @​alan-agius4 in #​896

New Contributors

• @​alan-agius4 made their first contribution in #​896

Full Changelog: babel/babel-loader@v8.2.4...v8.2.5

v8.2.4

Compare Source

What's Changed

• doc(README.md): fix a broken markdown link by @​loveDstyle in #​919
• Bump loader-utils to 2.x by @​stianjensen in #​931
• Use md5 hashing for OpenSSL 3 by @​pathmapper in #​924

Thanks @​loveDstyle, @​stianjensen and @​pathmapper for your first PRs!

codecov/codecov-action (codecov/codecov-action)

v5

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v4

Compare Source

What's Changed

• build(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by @​dependabot in #​1481
• build(deps): bump actions/checkout from 4.1.6 to 4.1.7 by @​dependabot in #​1480
• build(deps-dev): bump ts-jest from 29.1.4 to 29.1.5 by @​dependabot in #​1479
• build(deps-dev): bump @​typescript-eslint/parser from 7.13.0 to 7.13.1 by @​dependabot in #​1485
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.13.0 to 7.13.1 by @​dependabot in #​1484
• build(deps-dev): bump typescript from 5.4.5 to 5.5.2 by @​dependabot in #​1490
• build(deps-dev): bump @​typescript-eslint/parser from 7.13.1 to 7.14.1 by @​dependabot in #​1493
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.13.1 to 7.14.1 by @​dependabot in #​1492
• build(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by @​dependabot in #​1496
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.14.1 to 7.15.0 by @​dependabot in #​1501
• build(deps-dev): bump typescript from 5.5.2 to 5.5.3 by @​dependabot in #​1500
• build(deps-dev): bump @​typescript-eslint/parser from 7.14.1 to 7.15.0 by @​dependabot in #​1499
• build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4 by @​dependabot in #​1502
• build(deps-dev): bump ts-jest from 29.1.5 to 29.2.0 by @​dependabot in #​1504
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.15.0 to 7.16.0 by @​dependabot in #​1503
• build(deps-dev): bump ts-jest from 29.2.0 to 29.2.2 by @​dependabot in #​1507
• build(deps-dev): bump @​typescript-eslint/parser from 7.15.0 to 7.16.0 by @​dependabot in #​1505
• build(deps): bump github/codeql-action from 3.25.11 to 3.25.12 by @​dependabot in #​1509
• chore(ci): restrict scorecards to codecov/codecov-action by @​thomasrockhu-codecov in #​1512
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.16.0 to 7.16.1 by @​dependabot in #​1514
• build(deps-dev): bump @​typescript-eslint/parser from 7.16.0 to 7.16.1 by @​dependabot in #​1513
• test: versionInfo by @​marcobiedermann in #​1407
• build(deps-dev): bump ts-jest from 29.2.2 to 29.2.3 by @​dependabot in #​1515
• build(deps): bump github/codeql-action from 3.25.12 to 3.25.13 by @​dependabot in #​1516
• build(deps-dev): bump typescript from 5.5.3 to 5.5.4 by @​dependabot in #​1521
• build(deps-dev): bump @​typescript-eslint/parser from 7.16.1 to 7.17.0 by @​dependabot in #​1520
• build(deps-dev): bump @​typescript-eslint/parser from 7.17.0 to 7.18.0 by @​dependabot in #​1528
• build(deps): bump github/codeql-action from 3.25.13 to 3.25.15 by @​dependabot in #​1526
• build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @​dependabot in #​1525
• build(deps-dev): bump ts-jest from 29.2.3 to 29.2.4 by @​dependabot in #​1532
• build(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5 by @​dependabot in #​1534
• build(deps): bump github/codeql-action from 3.25.15 to 3.26.0 by @​dependabot in #​1542
• build(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6 by @​dependabot in #​1541
• ref: Tidy up types and remove string coercion by @​nicholas-codecov in #​1536
• build(deps-dev): bump @​octokit/webhooks-types from 3.77.1 to 7.5.1 by @​dependabot in #​1545
• build(deps): bump github/codeql-action from 3.26.0 to 3.26.2 by @​dependabot in #​1551
• feat: pass tokenless value as branch override by @​joseph-sentry in #​1511
• build(deps): bump actions/upload-artifact from 4.3.6 to 4.4.0 by @​dependabot in #​1563
• Create makefile.yml by @​Hawthorne001 in #​1555
• build(deps): bump github/codeql-action from 3.26.2 to 3.26.6 by @​dependabot in #​1562
• build(deps-dev): bump ts-jest from 29.2.4 to 29.2.5 by @​dependabot in #​1557
• Spell evenName in the logs correctly by @​webknjaz in #​1560
• build(deps-dev): bump typescript from 5.5.4 to 5.6.2 by @​dependabot in #​1566
• build(deps-dev): bump @​types/jest from 29.5.12 to 29.5.13 by @​dependabot in #​1567
• build(deps): bump github/codeql-action from 3.26.6 to 3.26.7 by @​dependabot in #​1569
• build(deps-dev): bump eslint from 8.57.0 to 8.57.1 by @​dependabot in #​1571
• build(deps): bump github/codeql-action from 3.26.7 to 3.26.8 by @​dependabot in #​1575
• build(deps-dev): bump @​vercel/ncc from 0.38.1 to 0.38.2 by @​dependabot in #​1577
• chore: fix typo of OSS by @​shoothzj in #​1578
• build(deps): bump github/codeql-action from 3.26.8 to 3.26.9 by @​dependabot in #​1584
• build(deps): bump actions/checkout from 4.1.7 to 4.2.0 by @​dependabot in #​1583
• fix: bump eslint parser deps by @​thomasrockhu-codecov in #​1586
• chore(release):4.6.0 by @​thomasrockhu-codecov in #​1587

v3

Compare Source

#Full Changelog: codecov/codecov-action@v3.1.5...v3.1.6

gitpython-developers/gitdb (gitdb2)

v4.0.2

Compare Source

nodejs/node (node)

v25

Moved to doc/changelogs/CHANGELOG_V012.md#0.12.8.

v24

Moved to doc/changelogs/CHANGELOG_IOJS.md#2.1.0.

v23

Moved to doc/changelogs/CHANGELOG_V6.md#6.1.0.

v22

Moved to doc/changelogs/CHANGELOG_V4.md#4.4.1.

v21

Moved to doc/changelogs/CHANGELOG_V4.md#4.2.6.

v20

Moved to doc/changelogs/CHANGELOG_V012.md#0.12.14.

v18

Moved to doc/changelogs/CHANGELOG_IOJS.md#3.1.0.

postcss/postcss-cli (postcss-cli)

v11.0.1

Compare Source

• Update and minimize dependencies

v11.0.0

Compare Source

• BREAKING: Require Node.js v18+ (#​464)
• Upgrade to postcss-load-config@5 for improved ESM & TS config support (#​461, #​462)

v10.1.0

Compare Source

• Allow running --watch mode in non-TTY contexts, like Docker (#​448)
• Update dependencies

v10.0.0

Compare Source

• BREAKING: Drop Node 12 support (#​438)
• Add support for ESM config files (#​437)

v9.1.0

Compare Source

• Don't write to files if they're unchanged (#​320, #​417)

v9.0.2

Compare Source

• Switch to picocolors (#​409)
• Remove test files from npm package

v9.0.1

Compare Source

• Actually exit with error when attempting to stdout in watch mode
• Remove bin/ from files in package.json

v9.0.0

Compare Source

• BREAKING: Require Node.js v12+
• BREAKING: Must specify full file path, including .js extension, when loading local plugins with --use (#​401)
• BREAKING: Officially remove support for watching postcss config (was already broken in previous releases)
• Add support for dir-dependency messages (#​383, #​391)
• Update deps

webpack/webpack-cli (webpack-cli)

v6.0.1

Compare Source

Bug Fixes

• update peer dependencies (#​4356) (7a7e5d9)

v6.0.0

Compare Source

BREAKING CHANGES

• the minimum required Node.js version is 18.12.0
• removed init, loader and plugin commands in favor create-webpack-app
• dropped support for webpack-dev-server@v4
• minimum supported webpack version is 5.82.0
• The --define-process-env-node-env option was renamed to --config-node-env

Bug Fixes

• allow to require webpack.config.js in ESM format (#​4346) (5106684)
• correct the minimum help output (#​4057) (c727c4f)
• gracefully shutting down (#​4145) (90720e2)
• improve help output for possible values (#​4316) (4cd5aef)
• no serve when dev-server is false (#​2947) (a93e860)

Features

• output pnpm version with info/version command (#​3906) (38f3c6f)

5.1.4 (2023-06-07)

Bug Fixes

• multi compiler progress output (f659624)

5.1.3 (2023-06-04)

Bug Fixes

• regression for custom configurations (#​3834) (bb4f8eb)

5.1.2 (2023-06-04)

Bug Fixes

• improve check for custom webpack and webpack-dev-server package existance (0931ab6)
• improve help for some flags (f468614)
• improved support for .cts and .mts extensions (a77daf2)

5.1.1 (2023-05-09)

Bug Fixes

• false positive warning when --watch used (#​3783) (c0436ba)

v5.1.4

Compare Source

BREAKING CHANGES

• the minimum required Node.js version is 18.12.0
• removed init, loader and plugin commands in favor create-webpack-app
• dropped support for webpack-dev-server@v4
• minimum supported webpack version is 5.82.0
• The --define-process-env-node-env option was renamed to --config-node-env

Bug Fixes

• allow to require webpack.config.js in ESM format (#​4346) (5106684)
• correct the minimum help output (#​4057) (c727c4f)
• gracefully shutting down (#​4145) (90720e2)
• improve help output for possible values (#​4316) (4cd5aef)
• no serve when dev-server is false (#​2947) (a93e860)

Features

• output pnpm version with info/version command (#​3906) (38f3c6f)

5.1.4 (2023-06-07)

Bug Fixes

• multi compiler progress output (f659624)

5.1.3 (2023-06-04)

Bug Fixes

• regression for custom configurations (#​3834) (bb4f8eb)

5.1.2 (2023-06-04)

Bug Fixes

• improve check for custom webpack and webpack-dev-server package existance (0931ab6)
• improve help for some flags (f468614)
• improved support for .cts and .mts extensions (a77daf2)

5.1.1 (2023-05-09)

Bug Fixes

• false positive warning when --watch used (#​3783) (c0436ba)

v5.1.3

Compare Source

BREAKING CHANGES

• the minimum required Node.js version is 18.12.0
• removed init, loader and plugin commands in favor create-webpack-app
• dropped support for webpack-dev-server@v4
• minimum supported webpack version is 5.82.0
• The --define-process-env-node-env option was renamed to --config-node-env

Bug Fixes

• allow to require webpack.config.js in ESM format (#​4346) (5106684)
• correct the minimum help output (#​4057) (c727c4f)
• gracefully shutting down (#​4145) (90720e2)
• improve help output for possible values (#​4316) (4cd5aef)
• no serve when dev-server is false (#​2947) (a93e860)

Features

• output pnpm version with info/version command (#​3906) (38f3c6f)

5.1.4 (2023-06-07)

Bug Fixes

• multi compiler progress output (f659624)

5.1.3 (2023-06-04)

Bug Fixes

• regression for custom configurations (#​3834) (bb4f8eb)

5.1.2 (2023-06-04)

Bug Fixes

• improve check for custom webpack and webpack-dev-server package existance (0931ab6)
• improve help for some flags (f468614)
• improved support for .cts and .mts extensions (a77daf2)

5.1.1 (2023-05-09)

Bug Fixes

• false positive warning when --watch used (#​3783) (c0436ba)

v5.1.2

Compare Source

BREAKING CHANGES

• the minimum required Node.js version is 18.12.0
• removed init, loader and plugin commands in favor create-webpack-app
• dropped support for webpack-dev-server@v4
• minimum supported webpack version is 5.82.0
• The --define-process-env-node-env option was renamed to --config-node-env

Bug Fixes

• allow to require `webp

---

Configuration

📅 Schedule: Branch creation - "on the first day of january" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[webteam-app]

Demo starting at https://docs-ubuntu-com-364.demos.haus

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 87.27%. Comparing base (ac63dfd) to head (d3a2885).
Report is 3 commits behind head on main.

❗ Current head d3a2885 differs from pull request most recent head cf915f3

Please upload reports for the commit cf915f3 to get more accurate results.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #364   +/-   ##
=======================================
  Coverage   87.27%   87.27%           
=======================================
  Files           5        5           
  Lines          55       55           
=======================================
  Hits           48       48           
  Misses          7        7           

Flag	Coverage Δ
python	87.27% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.