chore(deps): update all (major)

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@svgr/webpack (source)	5.5.0 -> 8.1.0			devDependencies	major
actions/checkout	v2 -> v5			action	major
actions/setup-node	v2 -> v5			action	major
babel-loader	8.2.2 -> 10.0.0			devDependencies	major
clean-webpack-plugin	3.0.0 -> 4.0.0			devDependencies	major
css-loader	5.2.7 -> 7.1.2			devDependencies	major
husky	7.0.1 -> 9.1.7			devDependencies	major
node	12 -> 22			uses-with	major
prettier (source)	2.3.2 -> 3.6.2			devDependencies	major
react-dev-utils (source)	11.0.4 -> 12.0.1			devDependencies	major
style-loader	3.1.0 -> 4.0.0			devDependencies	major
typescript (source)	4.3.5 -> 5.9.2			devDependencies	major
ubuntu	18.04 -> 24.04			github-runner	major
webpack-cli (source)	4.7.2 -> 6.0.1			devDependencies	major
webpack-dev-server	3.11.2 -> 5.2.2			devDependencies	major
webpack-merge	5.8.0 -> 6.0.1			devDependencies	major

---

Release Notes

gregberge/svgr (@​svgr/webpack)

v8.1.0

Compare Source

Bug Fixes

• cli: fix default dimensions, prettier & svgo (571d5c8)
• config: prefer cli config over rc config (#​845) (8b97248)
• react-native: fix duplicate import (#​894) (e612b6a)

Features

• esm: add support for svgo.config.cjs (#​879) (ae91e2e)

8.0.1 (2023-05-09)

Bug Fixes

• fix peer dependencies (2e05255)

v8.0.1

Compare Source

Bug Fixes

• fix peer dependencies (2e05255)

v8.0.0

Compare Source

Bug Fixes

• parseObject error causes website broken (05f2946)

Features

• add snake_case filename option (#​857) (428b0c7)
• make index template more flexible (#​861) (003009c)
• types: change SVGProps from import to import type (#​853) (095f021)

BREAKING CHANGES

• index template now receives an array of objects containing both the created
  component path (path) and the original SVG path (originalPath)

v7.0.0

Compare Source

Features

• allow specifying jsxRuntimeImport in config (86bb86f), closes #​801 #​801
• remove @​svgr/plugin-jsx from core (a0f078d)
• upgrade to svgo v3 (#​798) (21b6209)

BREAKING CHANGES

• plugin-jsx is no longer included by default in core
• svgr now requires Node.js v14+

6.5.1 (2022-10-27)

Reverts

• Revert "feat(a11y): add attribute role="img" to the svg element (#​750)" (1382232), closes #​750

v6.5.1

Compare Source

Reverts

• Revert "feat(a11y): add attribute role="img" to the svg element (#​750)" (1382232), closes #​750

v6.5.0

Compare Source

Bug Fixes

• fix Yarn peer dependency warning from @​babel/core (#​786) (db35837), closes #​785

Features

• babel-preset: fix 'role' attribute on svg element for react native (#​787) (35d85e0)

v6.4.0

Compare Source

Bug Fixes

• deps: add babel-preset to core dependencies (#​782) (464ec5f)

Features

• a11y: add attribute role="img" to the svg element (#​750) (8b9edc4)
• support spaces in file names (#​779) (6ee639a)

6.3.1 (2022-07-22)

Bug Fixes

• fix duplicate plugin/preset detected error (#​747) (3c6a54c), closes #​746
• fix exports compat with ESM (#​749) (f3e304c)

v6.3.1

Compare Source

Bug Fixes

• fix duplicate plugin/preset detected error (#​747) (3c6a54c), closes #​746
• fix exports compat with ESM (#​749) (f3e304c)

v6.3.0

Compare Source

Bug Fixes

• core: types field in package.json (#​693) (a491ace)
• package.json: fix exports (#​745) (2a368d1)

Features

• add descProp option (#​729) (a0637d4)
• cli: output file name when error happen to handling a file (#​702) (0ec1fbd)

6.2.1 (2022-01-30)

Bug Fixes

• do not transform mask-type (#​673) (6e58f2c), closes #​643
• use .ts extension for generated index (#​670) (d19abe2), closes #​462

v6.2.1

Compare Source

Bug Fixes

• do not transform mask-type (#​673) (6e58f2c), closes #​643
• use .ts extension for generated index (#​670) (d19abe2), closes #​462

v6.2.0

Compare Source

Bug Fixes

• cli: pass in parser to prettier format to avoid deprecation warning (#​662) (74fa3ae)
• plugin-svgo: handle potential errors from optimize (#​663) (7582d31)

Features

• support comments in templates (#​661) (9afb590)

6.1.2 (2021-12-12)

Bug Fixes

• rollup: missing dep & missing map return (#​652) (12627fc)
• specify valid peer deps (45a76ed)

6.1.1 (2021-12-04)

Bug Fixes

• webpack: fix double export (#​648) (7595d37), closes #​645

v6.1.2

Compare Source

Bug Fixes

• rollup: missing dep & missing map return (#​652) (12627fc)
• specify valid peer deps (45a76ed)

v6.1.1

Compare Source

Bug Fixes

• webpack: fix double export (#​648) (7595d37), closes #​645

v6.1.0

Compare Source

BREAKING CHANGES

• svgr v6 is now only compatible with Webpack v5 and up. See the migration guide

Bug Fixes

• fix previous export system (1872829), closes #​635

Features

• native: automatically convert inline style in native (138c493), closes #​588

Performance Improvements

• remove useless loader-utils package (387bc72), closes #​631

v6.0.0

Compare Source

SVGR v6 uses SVGO v2 under the hood and includes tons of improvement. It also contains small breaking changes. In most cases you will have nothing to change. But be sure to check the migration guide.

Bug Fixes

• fix XML entities in generated JavaScript (#​553) (b3998eb)
• formatExportName for single names (#​548) (5decc94)
• template: make it possible to use type in template (#​619) (5966714), closes #​556
• webpack: fix webpack 5 behaviour with url-loader (1a8cc98)

Features

• add option to explicitly use named export (#​584) (f18ea80)
• add TypeScript declarations to [@svgr](https://redirect.github.com/svgr)/core (#​555) (681303a)
• add webpack typescript preset configuration (#​573) (16072d4)
• upgrade to svgo v2 (1f107af)
• typescript: types everything (#​611) (1666432)
• add "index" option (#​607) (4978610)
• cli: allow all CLI options in config (#​615) (aa9feb2), closes #​570
• support jsxRuntime (#​613) (3700aba)
• support mask-type property (#​621) (a857bb1), closes #​336
• allow to specify icon size (3c0b779), closes #​571
• support CSS variables (cbdb47f), closes #​582

BREAKING CHANGES

• Config format of SVGO changes & SVGR does not merge SVGO config
• Template has a new format
• core: @​svgr/core now exposes { transform } instead of default export
• using --icon as latest arg now requires "--"

actions/checkout (actions/checkout)

v5

Compare Source

v4

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in https://github.com/actions/checkout/pull/1941
• Expand unit test coverage for isGhes by @​jww3 in https://github.com/actions/checkout/pull/1946

v3

Compare Source

• Fix: Mark test scripts with Bash'isms to be run via Bash
• Add option to fetch tags even if fetch-depth > 0

actions/setup-node (actions/setup-node)

v5

Compare Source

v4

Compare Source

v3

Compare Source

babel/babel-loader (babel-loader)

v10.0.0

Compare Source

What's Changed

Breaking Changes

• bump node requirement to ^18.20.0 || ^20.10.0 || >=22.0.0 and webpack requirement to >= 5.61.0 by @​JLHwung in #​1026
• breaking: use output.hashFunction as loader cache hasher by @​JLHwung in #​1027

New Features

• Add babel-loader logger by @​JLHwung in #​1034
• Support cache with external dependencies by @​JLHwung in #​1033

Bug Fixes

• [Bugfix] Ensure stability of filename cache-keys by @​stefanpenner in #​909

Docs

• docs: clarify that cacheIdentifier is computed from the merged options by @​JLHwung in #​1000
• Create SECURITY.md by @​JLHwung in #​1032
• Add babel-loader v10 readme by @​JLHwung in #​1046
• add readme section for loggingDebug support by @​JLHwung in #​1038
• Update readme and repo templates by @​JLHwung in #​1041

Dependencies

• migrate to c8 by @​JLHwung in #​996
• Bump word-wrap from 1.2.3 to 1.2.4 by @​dependabot in #​998
• Bump dev dependencies by @​JLHwung in #​1001
• Bump braces from 3.0.2 to 3.0.3 by @​dependabot in #​1020
• Update deps by @​JLHwung in #​1025
• refactor: replace find-cache-dir by find-up by @​JLHwung in #​1031
• Bump webpack from 5.93.0 to 5.94.0 by @​dependabot in #​1035
• chore: update dev deps by @​JLHwung in #​1036
• Bump cross-spawn from 7.0.3 to 7.0.6 by @​dependabot in #​1049

Internal

• Remove caller option check by @​JLHwung in #​1007
• Update tests by @​JLHwung in #​1003
• Update metadata test by @​JLHwung in #​1024
• Migrate to node test runner by @​JLHwung in #​1028
• chore: use default eslint rules by @​JLHwung in #​1029
• refactor: use webpack builtin schema util by @​JLHwung in #​1030

New Contributors

• @​stefanpenner made their first contribution in #​909

Full Changelog: babel/babel-loader@v9.1.3...v10.0.0

v9.2.1

Compare Source

What's Changed

• Avoid error on missing getLogger by @​nicolo-ribaudo in #​1045

Full Changelog: babel/babel-loader@v9.2.0...v9.2.1

v9.2.0

Compare Source

What's Changed

• Remove caller option check by @​JLHwung in #​1007
• Update deps by @​JLHwung in #​1025
• docs: clarify that cacheIdentifier is computed from the merged options by @​JLHwung in #​1000
• Add babel-loader logger by @​JLHwung in #​1037

Full Changelog: babel/babel-loader@v9.1.3...v9.2.0

v9.1.3

Compare Source

Security dependency updates

• Bump http-cache-semantics from 4.1.0 to 4.1.1 by @​dependabot in #​982
• Bump semver from 7.3.2 to 7.5.2 by @​dependabot in #​993
• bump find-cache-dir to v4 by @​JLHwung in #​995

New Contributors

• @​piwysocki made their first contribution in #​981
• @​comoser made their first contribution in #​897

Full Changelog: babel/babel-loader@v9.1.2...v9.1.3

v9.1.2

Compare Source

9.1.1 was a broken release, it didn't include all the commits.

Dependencies updates

• Bump qs from 6.5.2 to 6.5.3 by @​dependabot in #​977
• Bump json5 from 2.2.1 to 2.2.3 by @​dependabot in #​980

Misc

• GitHub Workflows security hardening by @​sashashura in #​976

New Contributors

• @​sashashura made their first contribution in #​976

Full Changelog: babel/babel-loader@v9.1.0...v9.1.2

v9.1.1

Compare Source

v9.1.0

Compare Source

New features

• Pass external dependencies from Babel to Webpack by @​nicolo-ribaudo in #​971

Full Changelog: babel/babel-loader@v9.0.1...v9.1.0

v9.0.1

Compare Source

Bug Fixes

• remove "node:" builtin prefix by @​JLHwung in #​970

Full Changelog: babel/babel-loader@v9.0.0...v9.0.1

v9.0.0

Compare Source

What's Changed

• update hash method mechanism so it doesn't fail on a fips enabled machine by @​darmbrust in #​939
• Require babel ^7.12.0 and Node.js >= 14.15.0 versions by @​JLHwung in #​956
• Remove dependency on loader-utils and drop webpack 4 support by @​nied in #​942

New Contributors

• @​darmbrust made their first contribution in #​939
• @​nied made their first contribution in #​942

Full Changelog: babel/babel-loader@v8.2.5...v9.0.0

v8.4.1

Compare Source

What's Changed

• Avoid error on missing getLogger by @​nicolo-ribaudo in #​1044

Full Changelog: babel/babel-loader@v8.4.0...v8.4.1

v8.4.0

Compare Source

What's Changed

• Fix loader-utils vulnerability by @​LuckyLuky in #​979
• Add babel-loader logger by @​JLHwung in #​1039

New Contributors

• @​LuckyLuky made their first contribution in #​979

Full Changelog: babel/babel-loader@v8.3.0...v8.4.0

v8.3.0

Compare Source

New features

• Pass external dependencies from Babel to Webpack by @​nicolo-ribaudo in #​971

Full Changelog: babel/babel-loader@v8.2.5...v8.3.0

v8.2.5

Compare Source

What's Changed

• fix: respect inputSourceMap loader option by @​alan-agius4 in #​896

New Contributors

• @​alan-agius4 made their first contribution in #​896

Full Changelog: babel/babel-loader@v8.2.4...v8.2.5

v8.2.4

Compare Source

What's Changed

• doc(README.md): fix a broken markdown link by @​loveDstyle in #​919
• Bump loader-utils to 2.x by @​stianjensen in #​931
• Use md5 hashing for OpenSSL 3 by @​pathmapper in #​924

Thanks @​loveDstyle, @​stianjensen and @​pathmapper for your first PRs!

v8.2.3: 8.2.3

Compare Source

This release fixes compatibility with Node.js 17

• Use md5 hash for caching on node v17 (#​918)

Thanks @​Reptarsrage!

johnagan/clean-webpack-plugin (clean-webpack-plugin)

v4.0.0

Compare Source

Changes

• Added support for NodeJS 14
• Added support for webpack 5

Breaking changes:

• Dropped support for NodeJS 8
• Dropped support for webpack 3

webpack-contrib/css-loader (css-loader)

v7.1.2

Compare Source

v7.1.1

Compare Source

v7.1.0

Compare Source

Features

• added the getJSON option to output CSS modules mapping (#​1577) (af834b4)

v7.0.0

Compare Source

⚠ BREAKING CHANGES

• The modules.namedExport option is true by default if you enable the esModule option

Migration guide:

Before:

import style from "./style.css";

console.log(style.myClass);

After:

import * as style from "./style.css";

console.log(style.myClass);

To restore 6.x behavior, please use:

module.exports = {
  module: {
    rules: [
      {
        test: /\.css$/i,
        loader: "css-loader",
        options: {
          modules: {
            namedExport: false,
            exportLocalsConvention: 'as-is',
            //
            // or, if you prefer camelcase style
            //
            // exportLocalsConvention: 'camel-case-only'
          },
        },
      },
    ],
  },
};

Typescript migration:

Before:

declare module '*.module.css' {
  const classes: { [key: string]: string };
  export default classes;
}

After:

declare module '*.module.css' {
  const classes: { [key: string]: string };
  export = classes;
}

• The modules.exportLocalsConvention has the value as-is when the modules.namedExport option is true and you don't specify a value
• Minimum supported webpack version is 5.27.0
• Minimum supported Node.js version is 18.12.0

Features

• The modules.namedExports option works fine with any modules.exportLocalsConvention values (f96a110)
• Added dashed variants for the modules.exportLocalsConvention options (40e1668)

v6.11.0

Compare Source

Features

• supports multiple composes (#​1582) (bbca614)

Bug Fixes

• do not break @scope at-rule without params (#​1581) (e022e3b)

v6.10.0

Compare Source

Features

• add @rspack/core as an optional peer dependency (#​1568) (3924679)
• pass the resourceQuery and resourceFragment to the auto and mode callback (#​1569) (d641c4d)
• support named exports with any characters (6f43929)

6.9.1 (2024-01-18)

Bug Fixes

• css nesting support
• @scope at-rule support

v6.9.1

Compare Source

Features

• add @rspack/core as an optional peer dependency (#​1568) (3924679)
• pass the resourceQuery and resourceFragment to the auto and mode callback (#​1569) (d641c4d)
• support named exports with any characters (6f43929)

6.9.1 (2024-01-18)

Bug Fixes

• css nesting support
• @scope at-rule support

v6.9.0

Compare Source

Features

• add @rspack/core as an optional peer dependency (#​1568) (3924679)
• pass the resourceQuery and resourceFragment to the auto and mode callback (#​1569) (d641c4d)
• support named exports with any characters (6f43929)

6.9.1 (2024-01-18)

Bug Fixes

• css nesting support
• @scope at-rule support

v6.8.1

Compare Source

Features

• updated generateExportEntry to expose node details (#​1556) (05002f3)

Bug Fixes

• css experiment detection (#​1559) (f2cfe30)

6.8.1 (2023-05-28)

Bug Fixes

• use cause for original errors and warnings (#​1526) (ae3d8ae)

v6.8.0

Compare Source

Features

• updated generateExportEntry to expose node details (#​1556) (05002f3)

Bug Fixes

• css experiment detection (#​1559) (f2cfe30)

6.8.1 (2023-05-28)

Bug Fixes

• use cause for original errors and warnings (#​1526) (ae3d8ae)

v6.7.4

Compare Source

Features

• use template literal when it possible to prevent Maximum call stack size exceeded (#​1525) (6eb5661)

Bug Fixes

• warning and error serialization (#​1523) (3e52969)

6.7.4 (2023-05-19)

Bug Fixes

• bugs in css modules (c3099fb)
• output warning when built-in CSS support enabled (#​1520) (0700ce8)

6.7.3 (2022-12-14)

Bug Fixes

• remove sourceURL from emitted CSS (#​1487) (962924c)

6.7.2 (2022-11-13)

Bug Fixes

• css modules generation with inline syntax (#​1480) (2f4c273)

6.7.1 (2022-03-08)

Bug Fixes

• defaultGetLocalIdent export (#​1427) (74dac1e)

v6.7.3

Compare Source

Features

• use template literal when it possible to prevent Maximum call stack size exceeded (#​1525) (6eb5661)

Bug Fixes

• warning and error serialization (#​1523) (3e52969)

6.7.4 (2023-05-19)

Bug Fixes

• bugs in css modules (c3099fb)
• output warning when built-in CSS support enabled (#​1520) (0700ce8)

6.7.3 (2022-12-14)

Bug Fixes

• remove sourceURL from emitted CSS (#​1487) (962924c)

6.7.2 (2022-11-13)

Bug Fixes

• css modules generation with inline syntax (#​1480) (2f4c273)

6.7.1 (2022-03-08)

Bug Fixes

• defaultGetLocalIdent export (#​1427) (74dac1e)

v6.7.2

Compare Source

Features

• use template literal when it possible to prevent Maximum call stack size exceeded (#​1525) ([6eb5661](https://redirect.github.co

---

Configuration

📅 Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
react-ts-starter	Error			Sep 25, 2025 9:00pm
react-ts-starter-84da	Error			Sep 25, 2025 9:00pm