Bump the npm-non-major group with 3 updates

[dependabot]

Bumps the npm-non-major group with 3 updates: electron, html-webpack-plugin and webpack.

Updates electron from 43.1.1 to 43.2.0

Release notes

Sourced from electron's releases.

electron v43.2.0

Release Notes for v43.2.0

Features

• Added net.WebSocket, a WHATWG-compatible WebSocket client for the main process that routes through Chromium's network stack. #52344 (Also in 42)

Fixes

• Fixed app.disableHardwareAcceleration() not fully disabling GPU hardware usage on Windows starting from Electron 38. #52369 (Also in 41, 42, 44)
• Fixed globalShortcut not working on GNOME Wayland by enabling Chromium's GlobalShortcutsPortalPreferredTrigger feature by default on Linux. #52228
• Fixed a crash when showing Linux message boxes while another Linux UI implementation was active. #52410 (Also in 42, 44)
• Fixed a window being marked hidden and background-throttled on macOS when covered by a transparent or click-through window. #52389 (Also in 44)
• Fixed unnecessary autofill popup creation for fields without datalist suggestions, which could cause input latency on macOS. #52321 (Also in 41, 42, 44)
• Fixed webContents.print() returning "Invalid printer settings" when print options are provided. #52381 (Also in 44)

Other Changes

• Updated Chromium to 150.0.7871.129. #52355

Commits

• 9b58e96 fix: use GTK UI theme for Linux message boxes (#52410)
• 281d885 fix: invalid printer settings when settings passed (#52381)
• eddd87c fix: don't treat transparent overlays as occluders on macOS (#52389)
• 2a35b07 test: make webContents.clone() process-id test offline (#52377)
• 4675b83 chore: bump chromium to 150.0.7871.129 (43-x-y) (#52355)
• 8d1cc07 feat: add net.WebSocket (#52344)
• f7b6b2c fix: append --disable-gpu switch in app.disableHardwareAcceleration() (#52369)
• 6a44af0 refactor: migrate electron::api::DesktopCapturer to cppgc (#52372)
• edf129f fix: enable GlobalShortcutsPortalPreferredTrigger by default on Linux (#52228)
• e04df3b build: add missing pdf resources dep in chromium_src (#52340)
• Additional commits viewable in compare view

Updates html-webpack-plugin from 5.6.7 to 5.6.8

Changelog

Sourced from html-webpack-plugin's changelog.

5.6.8 (2026-07-25)

Bug Fixes

• extend @​rspack/core peer dependency range (#1893) (8057b14)

Commits

• cf9c701 chore(release): 5.6.8
• 8057b14 fix: extend @​rspack/core peer dependency range (#1893)
• See full diff in compare view

Updates webpack from 5.108.4 to 5.109.0

Release notes

Sourced from webpack's releases.

v5.109.0

Minor Changes

• Default experiments.typescript to "auto", enabling built-in TypeScript support on Node.js >= 22.6 when no TypeScript loader is registered. (by @​alexander-akait in #21477)

• Default experiments.css, experiments.html and experiments.asyncWebAssembly to "auto", enabling built-in support unless a loader is registered for those files; modules with inline or hook-injected loaders (e.g. html-webpack-plugin templates) keep being parsed as JavaScript. (by @​alexander-akait in #21477)

• Add output.resourceHints to emit resource hints (preload/prefetch/modulepreload/preconnect), on by default for ESM output, plus module.parser.<type>.urlHints, css.fontPreload and javascript.dynamicImportCssPreload. (by @​alexander-akait in #21477)

• Add built-in build progress via infrastructureLogging.progress, plus estimatedTime, phaseTimings, progress bar width and progressBar: "auto" on ProgressPlugin. (by @​alexander-akait in #21477)

• Concatenate CommonJS modules with statically analyzable exports; opt out via optimization.concatenateModules: { commonjs: false }. (by @​alexander-akait in #21477)

• Wrap "weird" CommonJS modules into module concatenation instead of bailing out. (by @​alexander-akait in #21477)

• Add output.html.inline (true | "script" | "style") and the webpackInline magic comment to inline chunk content into HTML. (by @​alexander-akait in #21477)

• Add output.html.inject to control where chunk tags are injected. (by @​alexander-akait in #21477)

• Add output.html.title, output.html.meta and output.html.base options for head generation. (by @​alexander-akait in #21477)

• Support per-icon link attributes (sizes, media, color, type, crossorigin) and arrays in output.html.favicon. (by @​alexander-akait in #21487)

• Add output.html.manifest to generate and link a web app manifest with hashed icons. (by @​alexander-akait in #21487)

• Add output.html.csp to inject a Content-Security-Policy meta with inline-content hashes and an optional nonce. (by @​alexander-akait in #21487)

• Add the output.html injectTags compilation hook to inject tags (script/link/meta/…) with injectTo placement. (by @​alexander-akait in #21487)

• Add the output.html transformTags compilation hook to mutate, remove, or move (between <head> and <body>) a page's existing <script>/<link>/<style>/<meta> tags. (by @​alexander-akait in #21487)

• Extend the HTML pipeline with html link sources (bundled as their own emitted page) and rel="preload"/"prefetch" links bundled as chunks. (by @​alexander-akait in #21477)

• Recognize more asset-bearing HTML sources: the twitter:player:stream meta, legacy SVG references, and Web App Manifest icons/screenshots/shortcuts URLs. (by @​alexander-akait in #21477)

• Add module.parser.html.as to parse HTML as a document or an element fragment. (by @​alexander-akait in #21477)

• Allow disabling a built-in HTML parser source via type: false in sources. (by @​alexander-akait in #21477)

• Export webpack.html.HtmlModulesPlugin with transformHtml/htmlEmitted compilation hooks. (by @​alexander-akait in #21477)

• Resolve @custom-media (including media-type values) and @custom-selector in native CSS. (by @​alexander-akait in #21477)

• Scope view-transition-name/-group/-class names and ::view-transition-*() pseudo references in CSS modules under customIdents. (by @​alexander-akait in #21486)

• Add import.meta.glob support, with a caseSensitive option and consistent hidden/node_modules matching. (by @​alexander-akait in #21477)

• Resolve import.meta.resolve("./asset") to the emitted asset URL via the importMeta.resolve parser option. (by @​alexander-akait in #21477)

• Add import.meta.env defaults: MODE, DEV, PROD, SSR and BASE_URL. (by @​alexander-akait in #21477)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.109.0

Minor Changes

• Default experiments.typescript to "auto", enabling built-in TypeScript support on Node.js >= 22.6 when no TypeScript loader is registered. (by @​alexander-akait in #21477)

• Default experiments.css, experiments.html and experiments.asyncWebAssembly to "auto", enabling built-in support unless a loader is registered for those files; modules with inline or hook-injected loaders (e.g. html-webpack-plugin templates) keep being parsed as JavaScript. (by @​alexander-akait in #21477)

• Add output.resourceHints to emit resource hints (preload/prefetch/modulepreload/preconnect), on by default for ESM output, plus module.parser.<type>.urlHints, css.fontPreload and javascript.dynamicImportCssPreload. (by @​alexander-akait in #21477)

• Add built-in build progress via infrastructureLogging.progress, plus estimatedTime, phaseTimings, progress bar width and progressBar: "auto" on ProgressPlugin. (by @​alexander-akait in #21477)

• Concatenate CommonJS modules with statically analyzable exports; opt out via optimization.concatenateModules: { commonjs: false }. (by @​alexander-akait in #21477)

• Wrap "weird" CommonJS modules into module concatenation instead of bailing out. (by @​alexander-akait in #21477)

• Add output.html.inline (true | "script" | "style") and the webpackInline magic comment to inline chunk content into HTML. (by @​alexander-akait in #21477)

• Add output.html.inject to control where chunk tags are injected. (by @​alexander-akait in #21477)

• Add output.html.title, output.html.meta and output.html.base options for head generation. (by @​alexander-akait in #21477)

• Support per-icon link attributes (sizes, media, color, type, crossorigin) and arrays in output.html.favicon. (by @​alexander-akait in #21487)

• Add output.html.manifest to generate and link a web app manifest with hashed icons. (by @​alexander-akait in #21487)

• Add output.html.csp to inject a Content-Security-Policy meta with inline-content hashes and an optional nonce. (by @​alexander-akait in #21487)

• Add the output.html injectTags compilation hook to inject tags (script/link/meta/…) with injectTo placement. (by @​alexander-akait in #21487)

• Add the output.html transformTags compilation hook to mutate, remove, or move (between <head> and <body>) a page's existing <script>/<link>/<style>/<meta> tags. (by @​alexander-akait in #21487)

• Extend the HTML pipeline with html link sources (bundled as their own emitted page) and rel="preload"/"prefetch" links bundled as chunks. (by @​alexander-akait in #21477)

• Recognize more asset-bearing HTML sources: the twitter:player:stream meta, legacy SVG references, and Web App Manifest icons/screenshots/shortcuts URLs. (by @​alexander-akait in #21477)

• Add module.parser.html.as to parse HTML as a document or an element fragment. (by @​alexander-akait in #21477)

• Allow disabling a built-in HTML parser source via type: false in sources. (by @​alexander-akait in #21477)

• Export webpack.html.HtmlModulesPlugin with transformHtml/htmlEmitted compilation hooks. (by @​alexander-akait in #21477)

• Resolve @custom-media (including media-type values) and @custom-selector in native CSS. (by @​alexander-akait in #21477)

• Scope view-transition-name/-group/-class names and ::view-transition-*() pseudo references in CSS modules under customIdents. (by @​alexander-akait in #21486)

• Add import.meta.glob support, with a caseSensitive option and consistent hidden/node_modules matching. (by @​alexander-akait in #21477)

• Resolve import.meta.resolve("./asset") to the emitted asset URL via the importMeta.resolve parser option. (by @​alexander-akait in #21477)

... (truncated)

Commits

• 21cd11a chore(release): new release (#21337)
• 7121604 feat: native HTML output features (favicon attributes, manifest, CSP, tag inj...
• 828a65c feat: scope view-transition names in CSS modules (#21486)
• 27dfadb fix: keep loader results as JavaScript when css/html support is implicitly en...
• 8565f1a fix: context hash crash on unsupported directory entries (#21484)
• d933655 chore(deps): bump test/test262-cases in the dependencies group (#21479)
• 5df3269 chore(deps): bump the dependencies group with 11 updates (#21480)
• 06e8dbf chore(deps): bump actions/checkout in the dependencies group (#21478)
• c07ba06 docs: simplify, union and importance-order pending changelog entries (#21477)
• 6fcbd52 build: verify internalSerializables in lint:special (#21476)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions