Bump the javascript-dev group across 1 directory with 2 updates

[dependabot]

Bumps the javascript-dev group with 2 updates in the / directory: less-loader and webpack.

Updates less-loader from 12.3.0 to 12.3.1

Release notes

Sourced from less-loader's releases.

v12.3.1

12.3.1 (2026-02-05)

Bug Fixes

• update peer dependency for @​rspack/core v2 (#575) (6588093)

Changelog

Sourced from less-loader's changelog.

12.3.1 (2026-02-05)

Bug Fixes

• update peer dependency for @​rspack/core v2 (#575) (6588093)

Commits

• ef02ce4 chore(release): 12.3.1
• 03442c9 chore(deps-dev): bump webpack from 5.100.2 to 5.104.1 (#576)
• 6588093 fix: update peer dependency for @​rspack/core v2 (#575)
• 58f8317 chore(deps): bump js-yaml (#574)
• 983d263 chore(deps): bump lodash from 4.17.21 to 4.17.23 (#573)
• 42fc7a4 docs: update contributing
• 26e8179 chore: correct link path (#572)
• bec1977 chore: migrate from contrib to main org (#571)
• f14a99f chore: update github actions/checkout from v4 to v5 (#569)
• 7392971 chore: upgrade eslint from v8 to v9 (#568)
• Additional commits viewable in compare view

Updates webpack from 5.105.0 to 5.105.1

Release notes

Sourced from webpack's releases.

v5.105.1

Patch Changes

• Fix VirtualUrlPlugin Windows compatibility by sanitizing cache keys and filenames. Cache keys now use toSafePath to replace colons (:) with double underscores (__) and sanitize other invalid characters, ensuring compatibility with Windows filesystem restrictions. (by @​xiaoxiaojx in #20424)

• Revert part of the createRequire generation behavior for require("node:...") to keep compatibility with those modules exports, e.g. const EventEmitter = require("node:events");. (by @​hai-x in #20433)

• Skip guard collection when exports-presence mode is disabled to improve parsing performance. (by @​hai-x in #20433)

Changelog

Sourced from webpack's changelog.

5.105.1

Patch Changes

• Fix VirtualUrlPlugin Windows compatibility by sanitizing cache keys and filenames. Cache keys now use toSafePath to replace colons (:) with double underscores (__) and sanitize other invalid characters, ensuring compatibility with Windows filesystem restrictions. (by @​xiaoxiaojx in #20424)

• Revert part of the createRequire generation behavior for require("node:...") to keep compatibility with those modules exports, e.g. const EventEmitter = require("node:events");. (by @​hai-x in #20433)

• Skip guard collection when exports-presence mode is disabled to improve parsing performance. (by @​hai-x in #20433)

Commits

• 8e50ef2 chore(release): new release (#20429)
• 43903e1 perf: skip collecting guard when exports presence mode is none (#20433)
• 5a3e6dc docs: add docs and test for virtual module type inference from id extension (...
• 124ba79 fix: preserve node-commonjs externals for module output (#20431)
• 032856c docs: use https links in README (#20430)
• e06423b fix(virtual-url-plugin): sanitize paths for Windows compatibility (#20424)
• 0e4907e docs: update examples (#20428)
• a089954 test: add asset/resource test case for virtual-url-plugin (#20422)
• 38b823a chore(deps): bump the dependencies group with 2 updates (#20410)
• 5890832 chore(deps-dev): bump the dependencies group across 1 directory with 7 update...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions