deps(deps-dev): bump the webpack-encore group in /Tests/app with 2 updates

[dependabot]

Bumps the webpack-encore group in /Tests/app with 2 updates: webpack and webpack-cli.

Updates webpack from 5.110.2 to 5.110.1

Changelog

Sourced from webpack's changelog.

5.110.2

Patch Changes

• Fix analyzable ESM baking around cycles, mixed-served wasm and style url maps. (by @​alexander-akait in #21851)

• Minify more HTML and CSS shorthands, and cut two costs off printing. (by @​alexander-akait in #21842)

• Report a named import that is never read when it names a missing export. (by @​alexander-akait in #21856)

• Fix ESM circular reexports, cyclic const TDZ, and defer evaluation order. (by @​alexander-akait in #21852)

• Stop output.html emitting an unused JS chunk for each generated page. (by @​alexander-akait in #21859)

• Stop emitting the CSS chunk loading runtime when every CSS chunk is initial. (by @​alexander-akait in #21862)

• Strip a BOM a loader put on a string, and shift a source map that counted it. (by @​alexander-akait in #21857)

5.110.1

Patch Changes

• Fix a capture-group-less snapshot.managedPaths RegExp; speed up cache writes. (by @​alexander-akait in #21843)

• Throw SyntaxError, or WebAssembly.CompileError, from an unparsable module. (by @​alexander-akait in #21847)

• Accept the optimization.minimize: true shorthand set by a plugin in apply(). (by @​AgentEnder in #21845)

5.110.0

Minor Changes

• Wrap concatenated modules in lazy __webpack_require__.cw accessors and inline require(), keeping a wrapped body's names and side effects intact. (by @​hai-x in #21519)

• Add performance hints reporting what a build costs: duplicate packages and modules, circular dependencies, broad contexts, large modules and chunks, hotspots, eval, missing PURE annotations, polyfills, redundant dynamic imports, OS-dependent rules, cache effectiveness, how chunks load, what splitting refused, why an optimization was skipped, and rules, defines, externals, aliases and barrel reexports nothing uses. An oversized asset names its largest modules, and an entrypoint carrying the runtime recommends optimization.runtimeChunk. Enable every check not set individually with performance.all, report hints in stats only with performance.hints: "stats", and get them in a stable order that leaves the build hashes unchanged. (by @​alexander-akait in #21841)

• Add the descriptionRelativePath module rule condition. (by @​alexander-akait in #21705)

• Add OS-independent glob matching to module rules. (by @​alexander-akait in #21771)

• Report inner-graph, AMD and bare module bailouts in optimizationBailout. (by @​alexander-akait in #21740)

• Allow marking externals as side-effect-free with a sideEffects flag. (by @​alexander-akait in #21712)

• Give externals the original request of a context module element. (by @​alexander-akait in #21780)

• Add the externalsPresets.nodeModules preset with an allowlist option to externalize installed packages, replacing the webpack-node-externals plugin. (by @​alexander-akait in #21569)

• Add output.library.umdAmdContainer for an AMD-style loader branch in UMD. (by @​hai-x in #21770)

... (truncated)

Commits

• 18f7ee7 fix: short-circuit an optional call on an undefined DefinePlugin member (#21823)
• 038c301 feat(performance): add five hints for problems bundling itself creates (#21821)
• 7b7f6dd fix: inherit sideEffects past type-only nested package.json (#21686)
• ae3dcea test(scope-analyzer): check the built-in analyser against eslint-scope (#21820)
• 3b81288 fix(html): print a document back to the tree it was parsed from (#21819)
• be3e5c4 test: hold generated runtime code to output.environment (#21818)
• a6441c8 fix(css): cut a dead rule where it stands after an earlier cut (#21817)
• 715bcba refactor(esm): fold the analyzable naming pass into RuntimeTemplate (#21816)
• 6289160 perf(concatenation): index the double-bound names once instead of per binding...
• 2a28d74 feat(performance): add five hints closing gaps against other bundlers (#21811)
• Additional commits viewable in compare view

Updates webpack-cli from 7.2.3 to 7.2.2

Changelog

Sourced from webpack-cli's changelog.

7.2.3

Patch Changes

• fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @​bjohansebas in #4834)

• feat: allow toml@5 as a peer dependency for TOML configuration files (by @​alexander-akait in #4837)

7.2.2

Patch Changes

• perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @​bjohansebas in #4818)

7.2.1

Patch Changes

• fix: CLIPlugin dynamic import interop under Bun (by @​alexander-akait in #4799)

7.2.0

Minor Changes

• feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @​bjohansebas in #4793)

• Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @​alexander-akait in #4796)

7.1.0

Minor Changes

• feat(cli): refresh the --help output using commander's configureHelp API — branded headers, section dividers, colorized terms and a clearer footer. Colors and chrome collapse to plain text when output is piped or --no-color is used, so scripts keep working. (by @​alexander-akait in #4779)

• feat: support .json5, .yaml/.yml and .toml configuration files by parsing them directly, with the parser package (json5, js-yaml, toml) installed on demand by the user and declared as optional peerDependencies so the parsers resolve correctly under Yarn PnP (by @​alexander-akait in #4777)

7.0.3

Patch Changes

• Improved CLI startup performance and reduced memory usage. (by @​alexander-akait in #4765)

• Reduced CLI startup CPU and memory usage by caching schema-derived argument metadata, registering only the options present in the arguments, and reading config directories once during default-config discovery. (by @​alexander-akait in #4760)

• Replace the fastest-levenshtein dependency with a small in-tree implementation used for command/option "did you mean" suggestions. (by @​alexander-akait in #4762)

7.0.2

Patch Changes

... (truncated)

Commits

• 71e34db chore(release): new release (#4800)
• 97c5541 fix: CLIPlugin dynamic import interop under Bun (#4799)
• 40b631f chore(release): new release (#4794)
• f896a9c chore(deps-dev): bump the dependencies group across 1 directory with 4 update...
• b4ea5a7 test: update target flag tests for webpack 5.108 (#4797)
• 9a5fef9 feat: support tsx as a fallback loader for TypeScript and JSX configs (#4796)
• 6cafa00 chore(deps): bump http-proxy-middleware from 2.0.9 to 2.0.10 (#4795)
• 3bfa81c docs: update (#4789)
• d122911 chore: update webpack-dev-server peer dependency version (#4793)
• 3cd7423 chore(release): new release (#4778)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, javascript, test-app. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-code-quality]

Code Coverage Overview

Languages: PHP, JavaScript

PHP / code-coverage/phpunit

The overall line coverage in commit 5b006c1 in the dependabot/npm_and_y... branch remains at 99%, unchanged from commit 642e8bb in the master branch.

JavaScript / code-coverage/jest

The overall line coverage in commit 5b006c1 in the dependabot/npm_and_y... branch remains at 87%, unchanged from commit 642e8bb in the master branch.

---

_{Updated August 31, 2026 05:33 UTC}

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml