Merge sync 202609 - #1795

Bumps the dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@docsearch/react](https://github.com/algolia/docsearch/tree/HEAD/packages/docsearch-react) | `4.6.0` | `4.6.2` |
| [eslint-config-webpack](https://github.com/webpack/eslint-config-webpack) | `4.9.3` | `4.9.4` |
| [lodash](https://github.com/lodash/lodash) | `4.17.23` | `4.18.0` |
| [mini-css-extract-plugin](https://github.com/webpack/mini-css-extract-plugin) | `2.10.1` | `2.10.2` |
| [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer) | `5.2.0` | `5.3.0` |


Updates `@docsearch/react` from 4.6.0 to 4.6.2
- [Release notes](https://github.com/algolia/docsearch/releases)
- [Changelog](https://github.com/algolia/docsearch/blob/main/CHANGELOG.md)
- [Commits](https://github.com/algolia/docsearch/commits/v4.6.2/packages/docsearch-react)

Updates `eslint-config-webpack` from 4.9.3 to 4.9.4
- [Release notes](https://github.com/webpack/eslint-config-webpack/releases)
- [Changelog](https://github.com/webpack/eslint-config-webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/eslint-config-webpack@v4.9.3...v4.9.4)

Updates `lodash` from 4.17.23 to 4.18.0
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.23...4.18.0)

Updates `mini-css-extract-plugin` from 2.10.1 to 2.10.2
- [Release notes](https://github.com/webpack/mini-css-extract-plugin/releases)
- [Changelog](https://github.com/webpack/mini-css-extract-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/mini-css-extract-plugin@v2.10.1...v2.10.2)

Updates `webpack-bundle-analyzer` from 5.2.0 to 5.3.0
- [Release notes](https://github.com/webpack/webpack-bundle-analyzer/releases)
- [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-bundle-analyzer@v5.2.0...v5.3.0)

---
updated-dependencies:
- dependency-name: "@docsearch/react"
  dependency-version: 4.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: eslint-config-webpack
  dependency-version: 4.9.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: lodash
  dependency-version: 4.18.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: mini-css-extract-plugin
  dependency-version: 2.10.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: webpack-bundle-analyzer
  dependency-version: 5.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps the dependencies group with 2 updates: [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) and [cypress-io/github-action](https://github.com/cypress-io/github-action).


Updates `dependabot/fetch-metadata` from 2.5.0 to 3.0.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@21025c7...ffa630c)

Updates `cypress-io/github-action` from 7.1.8 to 7.1.9
- [Release notes](https://github.com/cypress-io/github-action/releases)
- [Changelog](https://github.com/cypress-io/github-action/blob/master/CHANGELOG.md)
- [Commits](cypress-io/github-action@4c06c48...783cb3f)

---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: cypress-io/github-action
  dependency-version: 7.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…8155)

…159)

…unks section (#8168)

Bumps the dependencies group with 4 updates: [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router), [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom), [eslint-config-webpack](https://github.com/webpack/eslint-config-webpack) and [eslint-plugin-cypress](https://github.com/cypress-io/eslint-plugin-cypress).


Updates `react-router` from 7.13.2 to 7.14.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@7.14.0/packages/react-router)

Updates `react-router-dom` from 7.13.2 to 7.14.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.14.0/packages/react-router-dom)

Updates `eslint-config-webpack` from 4.9.4 to 4.9.5
- [Release notes](https://github.com/webpack/eslint-config-webpack/releases)
- [Changelog](https://github.com/webpack/eslint-config-webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/eslint-config-webpack@v4.9.4...v4.9.5)

Updates `eslint-plugin-cypress` from 6.2.1 to 6.2.3
- [Release notes](https://github.com/cypress-io/eslint-plugin-cypress/releases)
- [Commits](cypress-io/eslint-plugin-cypress@v6.2.1...v6.2.3)

---
updated-dependencies:
- dependency-name: react-router
  dependency-version: 7.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: react-router-dom
  dependency-version: 7.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: eslint-config-webpack
  dependency-version: 4.9.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: eslint-plugin-cypress
  dependency-version: 6.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…s (#8166)

* docs: add blog post for Webpack 5.106 with CSS Modules runtime style injection

* docs: add section on plugin validation with compiler.hooks.validate in Webpack 5.106 blog post

* blog: add section on better tree shaking for CommonJS destructuring in Webpack 5.106 blog post

Signed-off-by: GitHub <noreply@github.com>

* docs: add support for context option in VirtualUrlPlugin for resolving relative imports in virtual modules

* blog: add experimental JavaScript parsing example with oxc-parser in Webpack 5.106 blog post

* blog: add section on other improvements and bug fixes in Webpack 5.106 blog post

* blog: update Webpack 5.106 blog post with new sections on ecosystem updates and other improvements

* docs: improve

* blog: enhance Better Tree Shaking section with examples for CommonJS destructuring

* rename file with new date

* blog: refine introduction and update section titles for Webpack 5.106

* blog: enhance Plugin Validation section with detailed explanation and examples

* docs: improve

* fixup!

* blog: update version reference in Bug Fixes section from 5.104 to 5.105

* blog: add Getting Started section for create-webpack-app to guide new users

* rename date

* rename file

* blog: add Webpack 5.106 release notes with new features and improvements

* blog: update Webpack 5.106 release notes to include source-phase imports for WebAssembly

* fixup!

* docs: more improvents

* update date of the blog

* add link

---------

Signed-off-by: GitHub <noreply@github.com>

webpack 5.111.0 defaults `output.module` to true under
`experiments.futureDefaults` wherever the target reads an ECMAScript module,
so both pages now say what turns it on and what holds it back: a target
without module support, a library type read out of a script, or an explicit
`output.module`. The option's own default line also picks up the `module` and
`modern-module` library types, which turn it on without the experiment.

…8397)

Comparing the hooks Compilation.js defines against the page left four with
no entry: runtimeRequirementInModule, runtimeRequirementInChunk,
runtimeRequirementInTree and addEntry. The three HookMaps are how a plugin
attaches a runtime module, and additionalTreeRuntimeRequirements — the hook
reached for alongside them — was already documented, so the page showed one
half of a pair.

* docs(api): document addRuntimeModule and addLazyRuntimeModule

The runtime requirement hooks documented in #8397 reach for both methods,
but neither had an entry anywhere on the site, so the examples pointed at
API a reader could not look up.

* docs(api): link the runtime requirement hooks to the methods they call

The hooks page named addRuntimeModule and addLazyRuntimeModule as plain
text because neither had an entry to point at; this PR adds them, so the
mentions become links.

…399)

Extending the hooks-versus-source comparison past Compiler and Compilation:
NormalModuleFactory was 12/14 and JavascriptParser 46/59. Adds the two
factory hooks (resolveInScheme, prepareModuleType) and the thirteen parser
hooks that had no entry, so every hook those classes define is documented.

…cy getters (#8400)

The loader context exposes currentRequest, previousRequest, remainingRequest,
resourceFragment, getDependencies, getContextDependencies,
getMissingDependencies and getLogger, none of which had an entry on the
Loader Interface page. Also rename the pitch method's second parameter in the
examples to previousRequest, which is the name webpack passes it under.

…401)

Adds the differential-serving recipe the shimming guide was missing: an entry
per layer so webpack walks the graph twice and issuerLayer picks the babel
targets and polyfills for each copy, plus the array-of-configurations form for
when the modern build has to be emitted as real ECMAScript modules.

Also documents the polyfill entry array on the entry page, with what importing
all of core-js/stable actually costs, and links both to the shimming guide.

webpack/webpack#22091 stopped webpack from assigning the compiler's input
filesystem over a configured resolve.fileSystem, so the page's warning that
setting it has no effect is true only up to 5.110.x. Documents the option as it
now behaves, keeps the older workaround as a version note, and says what still
goes through the compiler's inputFileSystem.

The option schema argument had a one-line mention and no example, so loader
authors reach for schema-utils by hand instead. Adds a worked example with the
error webpack actually prints, says what additionalProperties and title each
contribute to that message, and notes the two things the example alone would
get wrong: the check runs while the module is built, and it does not run at all
when the validate option is off.

The site had no spellchecker: vale runs proselint and Speciesism, neither of
which checks spelling, so a misspelling only ever got caught by a reader. That
is why refrence sat in the TypeScript guide for months while the PR fixing it
waited on a CLA.

Adds cspell with a word list covering the site's vocabulary, wires it into the
lint script and the lint CI job, and fixes what it found: refrence, a
Concatinating heading, nummber, testLolcalStorage and scollbar. The deliberate
misspellings that teach something -- cosnole in the development guide, prefx in
the loader options example, and webpack 1's real OccurenceOrderPlugin -- get a
file-local cspell:ignore instead of a dictionary entry, so the same word
elsewhere is still an error.

The type list named nineteen values and the sections below explained them at
uneven depth: 'self' and 'umd2' had no section at all, 'module' pointed at a
2021 progress thread instead of showing its output, 'modern-module' had one
sentence, and 'global' showed a globalThis assignment that no default target
emits.

Adds a table summarizing every type in one line, the two missing sections, real
input/output for the module types, and the three assignments 'global' actually
emits per target. Every example was read off a build rather than written by
hand.

Three of the ten blog teasers on /blog/ are the post's MDX preamble rather than
its text: the 5.108, 5.109 and 5.110 previews all read 'import banner from
"../../assets/blog/webpack-5-110.png"; <img src={banner} alt=...'. The teaser
kept every line that was not a heading, so imports, exports and JSX all counted
as prose.

Also takes the ellipsis fix from #8201: the '...' was appended whether or not
anything had been cut, which gives blog/index.mdx a four-dot teaser because its
text already ends in a period.

Tests cover both, plus the empty-body case that used to yield a bare '...'.

Issue #1824 asked for two things in 2018: a contributing section in the docs
and a codebase overview. The section has existed for years; the overview was
never written, so nothing on the site tells a would-be contributor how
webpack's own source is laid out, and the site never linked to CONTRIBUTING.md
or TESTING_DOCS.md at all.

Adds a page mapping the five objects a build runs through, the three phases,
what each lib/ directory holds, and how to find the code behind an option, a
hook, a runtime symbol or an error. It links out to CONTRIBUTING.md and
TESTING_DOCS.md for process and tests rather than restating them, which is what
the issue thread asked for.

* blog: webpack 5.110

* blog: cover more merged changes in the 5.111 post

Adds the release items merged after the post was drafted: output.module
under futureDefaults and for module library types, ESM star reexports of
externals, the smaller chunk-loading runtime and released compilation
data, parse-time bailouts surviving the cache, attribute minification by
value, the CSS Modules @value fix, spec namespaces for synthesized
modules, and resolve.fileSystem.

---------

Co-authored-by: alexander-akait <4567934+alexander-akait@users.noreply.github.com>

The blog list is ordered by date, so a roadmap published between two
releases sat among them: roadmap 2026 (2026-02-04) above webpack 5.105
(2026-02-03). Group the roadmaps after every other post, where the date
comparison then orders them from the highest year down.

* docs: match the splash script tag to what webpack emits

The page showed <script type="module" src> going in and a classic <script
src> coming out, captioned as a URL rewrite, so it read as though webpack had
dropped the module type. It had not: without output.module the emitted chunk
is a classic IIFE, and webpack matches the tag to it - with output.module set
it keeps type="module" and emits an ES module chunk.

Showing a classic tag makes the before and after differ only in the URL, which
is what the caption claims. The emitted page is unchanged, same content hash.

* docs: keep the splash page on ES modules end to end

Rather than downgrading the page's script tag to match a classic bundle,
turn the config into one that emits ES modules, so type="module" survives
the build. Restores the module tag on the input and adds output.module with
a line saying why it is there.

Verified: with this config webpack emits [javascript module] chunks and the
page keeps <script type=module src=...>. The [contenthash].js template is
unchanged - output.module does not force an extension.

* docs: drop the removed outputModule experiment from the splash config

experiments.outputModule is gone in 5.111.0 - output.module carries ESM
output on its own now, per #8360. It appears nowhere in webpack's lib/ or
schemas/ any more, and the 'only allowed when experiments.outputModule is
enabled' check is gone with it. 5.111.0 is unreleased, so this is read from
source rather than run; the installed 5.110.3 still enforces the old rule.

* docs(splash): run the build instead of naming the hashes

The front page spent three output options on content hashes and then
showed their digits in the emitted page, which nothing on the page needs
and which no reader can reproduce. Since 5.111 names a page's entries
after the urls its tags carry, the config is down to the one option the
page's `type="module"` tag asks for, and the emitted names are the ones
webpack gives them.

The room that frees goes to the two commands a first build is actually
made of, which the page never showed.

* docs(splash): say what each mode does to the output

* docs(optimization): point the bail link at the option's own page

The link went to /api/cli/#advanced-options, an anchor the CLI page no
longer carries — it documents no bail flag at all — so the link check
failed on the fragment. bail is documented under other-options, which is
where the sentence meant to send the reader.

* docs(splash): give each mode its own command and description

One block with both commands made the reader hold two commands in mind
before either was explained. Each command now stands next to what it
does to the output.

`processReadme` turns a raw readme url into the page it is rendered at so
that relative links resolve, and it did that by inserting `blob/` in front
of the literal `master`:

    .replace(/master/, "blob/master")

A repository on `main` therefore got no `blob/` at all, and every relative
link in its readme resolved to `github.com/<owner>/<repo>/main/<path>`,
which is not a url GitHub serves. Of the loader and plugin repositories
the site generates pages from, the nine sampled are all on `main` —
including `diagnostics-webpack-plugin`, whose readme links `CHANGELOG.md`
and `./LICENSE`.

The branch is read from the raw url now, whatever it is called, so the
rendered url is built rather than patched. A repository or owner whose
name contains `master` is no longer rewritten by accident either.

The suite pinned the old behaviour: "rewrite relative url" asserted the
`main` url without `blob/` as what it should be. It asserts the link that
resolves now, and a new case covers `master`, `main` and `next` together.

…gin (#8415)

Its page redirects to the section showing compression with and without minifying, the way the other folded minimizers already do.

…(#8416)

Bumps the dependencies group with 1 update: [cypress-io/github-action](https://github.com/cypress-io/github-action).


Updates `cypress-io/github-action` from 7.4.3 to 7.4.4
- [Release notes](https://github.com/cypress-io/github-action/releases)
- [Changelog](https://github.com/cypress-io/github-action/blob/master/CHANGELOG.md)
- [Commits](cypress-io/github-action@0909094...01e3b65)

---
updated-dependencies:
- dependency-name: cypress-io/github-action
  dependency-version: 7.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps the dependencies group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [@docsearch/react](https://github.com/algolia/docsearch/tree/HEAD/packages/docsearch-react) | `5.1.0` | `5.1.1` |
| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `8.3.1` | `8.4.0` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `8.0.5` | `8.0.6` |
| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `8.0.5` | `8.0.6` |
| [@testing-library/dom](https://github.com/testing-library/dom-testing-library) | `10.4.1` | `10.4.2` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.3.1` | `10.3.3` |
| [eslint-config-webpack](https://github.com/webpack/eslint-config-webpack) | `4.11.0` | `4.14.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.5.1` | `30.5.2` |
| [jest-environment-jsdom](https://github.com/jestjs/jest/tree/HEAD/packages/jest-environment-jsdom) | `30.5.1` | `30.5.2` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.8` |
| [webpack](https://github.com/webpack/webpack) | `5.110.3` | `5.111.1` |
| [webpack-bundle-analyzer](https://github.com/webpack/webpack-bundle-analyzer) | `5.3.3` | `5.4.0` |


Updates `@docsearch/react` from 5.1.0 to 5.1.1
- [Release notes](https://github.com/algolia/docsearch/releases)
- [Changelog](https://github.com/algolia/docsearch/blob/main/packages/docsearch-react/CHANGELOG.md)
- [Commits](https://github.com/algolia/docsearch/commits/@docsearch/react@5.1.1/packages/docsearch-react)

Updates `react-router` from 8.3.1 to 8.4.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@8.4.0/packages/react-router)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `@babel/core` from 8.0.5 to 8.0.6
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.6/packages/babel-core)

Updates `@babel/preset-env` from 8.0.5 to 8.0.6
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v8.0.6/packages/babel-preset-env)

Updates `@testing-library/dom` from 10.4.1 to 10.4.2
- [Release notes](https://github.com/testing-library/dom-testing-library/releases)
- [Changelog](https://github.com/testing-library/dom-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/dom-testing-library@v10.4.1...v10.4.2)

Updates `cspell` from 10.3.1 to 10.3.3
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.3.3/packages/cspell)

Updates `eslint-config-webpack` from 4.11.0 to 4.14.0
- [Release notes](https://github.com/webpack/eslint-config-webpack/releases)
- [Changelog](https://github.com/webpack/eslint-config-webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/eslint-config-webpack@v4.11.0...v4.14.0)

Updates `jest` from 30.5.1 to 30.5.2
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.5.2/packages/jest)

Updates `jest-environment-jsdom` from 30.5.1 to 30.5.2
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.5.2/packages/jest-environment-jsdom)

Updates `prettier` from 3.9.6 to 3.9.8
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.8)

Updates `webpack` from 5.110.3 to 5.111.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.110.3...v5.111.1)

Updates `webpack-bundle-analyzer` from 5.3.3 to 5.4.0
- [Release notes](https://github.com/webpack/webpack-bundle-analyzer/releases)
- [Changelog](https://github.com/webpack/webpack-bundle-analyzer/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-bundle-analyzer@v5.3.3...v5.4.0)

---
updated-dependencies:
- dependency-name: "@docsearch/react"
  dependency-version: 5.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: react-router
  dependency-version: 8.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@babel/core"
  dependency-version: 8.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@babel/preset-env"
  dependency-version: 8.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@testing-library/dom"
  dependency-version: 10.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: cspell
  dependency-version: 10.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: eslint-config-webpack
  dependency-version: 4.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: jest
  dependency-version: 30.5.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: jest-environment-jsdom
  dependency-version: 30.5.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: prettier
  dependency-version: 3.9.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: webpack
  dependency-version: 5.111.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: webpack-bundle-analyzer
  dependency-version: 5.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.6 to 3.1.8.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.6...v3.1.8)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* docs(css): clarify that [fullhash] in localIdentName is SSR-safe

[fullhash]/[hash] in CSS Modules localIdentName is the local ident hash
(localIdentHashSalt + output.uniqueName + relative resource path + local
name), not the compilation hash. Replace the misleading SSR tip and warn
that output.uniqueName and context must match between web and node builds.

Refs webpack/webpack#22332

* docs(css): note that every localIdentName placeholder must resolve identically across builds