fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	25.5.2 → 25.6.0
prettier (source)	3.8.1 → 3.8.2
react (source)	19.2.4 → 19.2.5
react-dom (source)	19.2.4 → 19.2.5
start-server-and-test	3.0.0 → 3.0.2
webpack	5.105.4 → 5.106.1
wrangler (source)	4.81.0 → 4.81.1

---

Release Notes

prettier/prettier (prettier)

v3.8.2

Compare Source

facebook/react (react)

v19.2.5: 19.2.5 (April 8th, 2026)

Compare Source

React Server Components

• Add more cycle protections (#​36236 by @​eps1lon and @​unstubbable)

bahmutov/start-server-and-test (start-server-and-test)

v3.0.2

Compare Source

v3.0.1

Compare Source

Bug Fixes

• deps: pin arg to 5.0.2 (#​461) (799d881)

webpack/webpack (webpack)

v5.106.1

Compare Source

Patch Changes

• Fix two ES5-environment regressions in the anonymous default export .name fix-up: the generated code referenced an undeclared __WEBPACK_DEFAULT_EXPORT__ binding causing ReferenceError, and used Reflect.defineProperty which is not available in pre-ES2015 runtimes. The fix-up now references the real assignment target and uses Object.defineProperty / Object.getOwnPropertyDescriptor. (by @​xiaoxiaojx in #​20796)

• Prevent !important from being renamed as a local identifier in CSS modules. (by @​xiaoxiaojx in #​20798)

• Use compiler context instead of module context for CSS modules local ident hashing to avoid hash collisions when files with the same name exist in different directories. (by @​xiaoxiaojx in #​20799)

v5.106.0

Compare Source

Minor Changes

• Add exportType: "style" for CSS modules to inject styles into DOM via HTMLStyleElement, similar to style-loader functionality. (by @​xiaoxiaojx in #​20579)

• Add context option support for VirtualUrlPlugin (by @​xiaoxiaojx in #​20449)

  • The context for the virtual module. A string path. Defaults to 'auto', which will try to resolve the context from the module id.
  • Support custom context path for resolving relative imports in virtual modules
  • Add examples demonstrating context usage and filename customization

• Generate different CssModule instances for different exportType values. (by @​xiaoxiaojx in #​20590)

• Added the localIdentHashFunction option to configure the hash function to be used for hashing. (by @​alexander-akait in #​20694)
  Additionally, the localIdentName option can now be a function.

• Added support for destructuring assignment require in cjs, allowing for tree shaking. (by @​ahabhgk in #​20548)

• Added the validate option to enable/disable validation in webpack/plugins/loaders, also implemented API to make it inside plugins. (by @​xiaoxiaojx in #​20275)

• Added source support for async WASM modules. (by @​magic-akari in #​20364)

Patch Changes

• Add a static getSourceBasicTypes method to the Module class to prevent errors across multiple versions. (by @​xiaoxiaojx in #​20614)

• Included fragment groups in the conflicting order warning for CSS. (by @​aryanraj45 in #​20660)

• Avoid rendering unused top-level __webpack_exports__ declaration when output ECMA module library. (by @​hai-x in #​20669)

• Fixed resolving in CSS modules. (by @​alexander-akait in #​20771)

• Allow external modules place in async chunks when output ECMA module. (by @​hai-x in #​20662)

• Implement deprecate flag in schema for better TypeScript support to show which options are already deprecated by the configuration (by @​bjohansebas in #​20432)

• Set .name to "default" for anonymous default export functions and classes per ES spec (by @​xiaoxiaojx in #​20773)

• Hash entry chunks after runtime chunks to prevent stale content hash references in watch mode (by @​xiaoxiaojx in #​20724)

• Fix multiple bugs and optimizations in CSS modules: correct third code point position in walkCssTokens number detection, fix multiline CSS comment regex, fix swapped :import/:export error message, fix comma callback incorrectly popping balanced stack, fix cache comparison missing array length check, fix match.index mutation side effect, move publicPathAutoRegex to module scope, precompute merged callbacks in consumeUntil, simplify redundant ternary in CssGenerator, fix typo GRID_TEMPLATE_ARES, remove duplicate grid-column-start, and merge duplicate getCompilationHooks calls. (by @​xiaoxiaojx in #​20648)

• Correct url() path resolution and preserve source maps for non-link CSS export types (style, text, css-style-sheet) (by @​xiaoxiaojx in #​20717)

• Emit error when proxy server returns non-200 status code in HttpUriPlugin instead of silently failing. (by @​xiaoxiaojx in #​20646)

• import.meta as standalone expression now returns a complete object with known properties (url, webpack, main, env) instead of an empty object ({}), and hoists it as a module-level variable to ensure import.meta === import.meta identity. In preserve-unknown mode (ESM output), the hoisted object merges runtime import.meta properties via Object.assign. (by @​xiaoxiaojx in #​20658)

• Fix incorrect condition in FileSystemInfo that always evaluated to false, preventing trailing slash removal from directory paths during build dependency resolution. (by @​xiaoxiaojx in #​20649)

• fix: VirtualUrlPlugin absolute path virtual module IDs getting concatenated with compiler context (by @​xiaoxiaojx in #​20656)

  When a virtual module ID is an absolute path (e.g. virtual:C:/project/user.js), the auto-derived context was incorrectly joined with compiler.context, producing a concatenated path like C:\cwd\C:\project. Now absolute-path contexts are used directly.

• All deprecated methods and options now have @deprecated flag in types. (by @​alexander-akait in #​20707)

• Fix CompatibilityPlugin to correctly rename __webpack_require__ when it appears as an arrow function parameter (e.g. (__webpack_module, __webpack_exports, __webpack_require__) => { ... }). (by @​hai-x in #​20661)

cloudflare/workers-sdk (wrangler)

v4.81.1

Compare Source

Patch Changes

• #​13337 c510494 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  workerd	1.20260405.1	1.20260408.1

• #​13362 8b71eca Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  workerd	1.20260408.1	1.20260409.1

• #​13329 7ca6f6e Thanks @​G4brym! - fix: Treat AI Search bindings as always-remote in local dev

  AI Search namespace (ai_search_namespaces) and instance (ai_search) bindings are always-remote (they have no local simulation), but pickRemoteBindings() did not include them in its always-remote type list. This caused the remote proxy session to exclude these bindings when remote: true was not explicitly set in the config, resulting in broken AI Search bindings during wrangler dev.

  Additionally, removeRemoteConfigFieldFromBindings() in the deploy config-diff logic was not stripping the remote field from AI Search bindings, which could cause false config diffs during deployment.

• Updated dependencies [42c7ef0, c510494, 8b71eca, a42e0e8]:

  • miniflare@​4.20260409.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

✅ Benchmark Results

     ✓ no_errors{server:node-http,mode:no-schema}
     ✓ expected_result{server:node-http,mode:no-schema}
     ✓ no_errors{server:node-http,mode:json-schema}
     ✓ expected_result{server:node-http,mode:json-schema}
     ✓ no_errors{server:uWebSockets,mode:no-schema}
     ✓ expected_result{server:uWebSockets,mode:no-schema}
     ✓ no_errors{server:uWebSockets,mode:json-schema}
     ✓ expected_result{server:uWebSockets,mode:json-schema}

     checks......................................: 100.00% ✓ 887898      ✗ 0     
     data_received...............................: 81 MB   672 kB/s
     data_sent...................................: 56 MB   470 kB/s
     http_req_blocked............................: avg=1.32µs   min=932ns    med=1.13µs   max=338.39µs p(90)=1.4µs    p(95)=1.84µs  
     http_req_connecting.........................: avg=1ns      min=0s       med=0s       max=162.76µs p(90)=0s       p(95)=0s      
     http_req_duration...........................: avg=193.97µs min=132.05µs med=185.39µs max=13.14ms  p(90)=211.06µs p(95)=221.1µs 
       { expected_response:true }................: avg=193.97µs min=132.05µs med=185.39µs max=13.14ms  p(90)=211.06µs p(95)=221.1µs 
     ✓ { server:node-http,mode:json-schema }.....: avg=205.05µs min=153.64µs med=194µs    max=11.54ms  p(90)=220.98µs p(95)=229.35µs
     ✓ { server:node-http,mode:no-schema }.......: avg=199.62µs min=139.28µs med=188.39µs max=13.14ms  p(90)=214.7µs  p(95)=226.26µs
     ✓ { server:uWebSockets,mode:json-schema }...: avg=189.16µs min=140.38µs med=181.52µs max=11.93ms  p(90)=202.66µs p(95)=210.73µs
     ✓ { server:uWebSockets,mode:no-schema }.....: avg=183.11µs min=132.05µs med=176.11µs max=12.73ms  p(90)=196.78µs p(95)=204.64µs
     http_req_failed.............................: 0.00%   ✓ 0           ✗ 443949
     http_req_receiving..........................: avg=24.92µs  min=12.34µs  med=24.86µs  max=4.23ms   p(90)=29.09µs  p(95)=31.56µs 
     http_req_sending............................: avg=7.17µs   min=5.3µs    med=6.38µs   max=431.18µs p(90)=7.76µs   p(95)=10.61µs 
     http_req_tls_handshaking....................: avg=0s       min=0s       med=0s       max=0s       p(90)=0s       p(95)=0s      
     http_req_waiting............................: avg=161.87µs min=105.62µs med=153.15µs max=13.09ms  p(90)=177.37µs p(95)=186.17µs
     http_reqs...................................: 443949  3699.537357/s
     iteration_duration..........................: avg=265.88µs min=190.69µs med=254.81µs max=13.27ms  p(90)=288.18µs p(95)=301.73µs
     iterations..................................: 443949  3699.537357/s
     vus.........................................: 1       min=1         max=1   
     vus_max.....................................: 2       min=2         max=2