chore(deps): bump postcss, @symfony/webpack-encore and vue-loader

[dependabot]

Bumps postcss to 8.5.25 and updates ancestor dependencies postcss, @symfony/webpack-encore and vue-loader. These dependencies need to be updated together.

Updates postcss from 7.0.36 to 8.5.25

Release notes

Sourced from postcss's releases.

8.5.25

• Fixed 8.5.17 visitor regression.
• Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

• Preserve the BOM after the processing (by @​hdimer).

8.5.23

• Do not load source map without opts.from for security reasons.

8.5.22

• Fixed custom property losing semicolon before a comment (by @​sarathfrancis90).

8.5.21

• Fixed childless at-rule losing semicolon before comment (by @​sarathfrancis90).
• Fixed docs (by @​isker).

8.5.20

• Fixed missing space if AtRule#params is set after (by @​sarathfrancis90).
• Fixed mixing AST error on warnings (by @​MahinAnowar).

8.5.19

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

8.5.15

• Fixed declaration parsing performance (by @​homanp).

8.5.14

• Fixed custom syntax regression (by @​43081j).

8.5.13

• Fixed postcss-scss commend regression.

8.5.12

• Fixed reading any file via user-generated CSS.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.25

• Fixed 8.5.17 visitor regression.
• Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

• Preserve the BOM after the processing (by @​hdimer).

8.5.23

• Do not load source map without opts.from for security reasons.

8.5.22

• Fixed custom property losing semicolon before a comment (by @​sarathfrancis90).

8.5.21

• Fixed childless at-rule losing semicolon before comment (by @​sarathfrancis90).
• Fixed docs (by @​isker).

8.5.20

• Fixed missing space if AtRule#params is set after (by @​sarathfrancis90).
• Fixed mixing AST error on warnings (by @​MahinAnowar).

8.5.19

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

8.5.15

... (truncated)

Commits

• 08c989c Release 8.5.25 version
• 24f6814 Fix 8.5.17 visitor regression
• f2fa53f Add supply chain security requirement to PostCSS plugin guide
• 10edf0b fix: return empty array for empty string in list.split (#2121)
• 0ebe8ad Release 8.5.24 version
• 73218c6 Update dependencies
• 9a114f6 Preserve the BOM when stringifying (#2119)
• 9069261 Fix types check
• eb9e1fe Release 8.5.23 version
• 9d19c78 Update dependencies
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Updates @symfony/webpack-encore from 1.8.2 to 7.2.0

Release notes

Sourced from @​symfony/webpack-encore's releases.

7.2.0 - The Now-With-Types Release

[!NOTE] The entire codebase is now TypeScript, and the package ships type definitions out of the box, so methods like enableSassLoader() and configureDevServerOptions() give you real autocompletion and validation for every option you pass in webpack.config.js.

[!IMPORTANT] Reprise v0.6.0 reaches near feature-parity with Encore on both Vite and Rsbuild, including a migration guide that maps every Encore.* call to its equivalent. Active maintenance on Webpack Encore slows from here (mostly dependency updates and bug fixes), but Encore stays supported, and Reprise is the recommended path if you want to move to a modern setup.

What's Changed

• Introduce UPGRADE.md file and reduce latest CHANGELOG.md entries by @​Kocal in symfony/webpack-encore#1501
• [CI] Pin actions to latest releases with version comments by @​Kocal in symfony/webpack-encore#1518
• Bump the github-actions group across 1 directory with 2 updates by @​dependabot[bot] in symfony/webpack-encore#1516
• Migrate project to TypeScript ✨ by @​Kocal in symfony/webpack-encore#1503
• Add support for webpack-dev-server ^6.0.0 by @​Kocal in symfony/webpack-encore#1523
• Recommend the project's package manager for missing dependency errors by @​Amoifr in symfony/webpack-encore#1520

New Contributors

• @​Amoifr made their first contribution in symfony/webpack-encore#1520

Full Changelog: symfony/webpack-encore@v7.1.0...v7.2.0

---

Thanks to everyone who contributed to this release! 🙌

Update Encore in your project:

npm install @symfony/webpack-encore@latest --save-dev
pnpm add --save-dev @symfony/webpack-encore@latest
yarn add --dev @symfony/webpack-encore@latest

7.1.0 - The "Wait, We Forgot Some Things" Release

[!NOTE] A small follow-up to 7.0.0: a few dependency updates didn't make it into that release, so 7.1.0 ships them now. You get support for sass-loader v17 (v16 still works), @vue/babel-plugin-jsx bumped to v3, webpack-manifest-plugin requiring at least v6.0.1, and JS/CSS minifier peer dependencies relaxed to optional with no version constraint. No upgrade steps needed for most projects, just bump and go.

What's Changed

• Update @vue/babel-plugin-jsx from ^1.0.0 to ^3.0.0 by @​Kocal in symfony/webpack-encore#1497
• Update webpack-manifest-plugin to 6.0.1 by @​Kocal in symfony/webpack-encore#1495
• Relax the peerDependencies of the JS/CSS minifiers by @​Kocal in symfony/webpack-encore#1498
• Add support for sass-loader ^17.0.0 by @​Kocal in symfony/webpack-encore#1499
• Tweak CHANGELOG.md for StimulusBundle & ESM by @​Kocal in symfony/webpack-encore#1500

Full Changelog: symfony/webpack-encore@v7.0.0...v7.1.0

---

Thanks to everyone who contributed to this release! 🙌

Update Encore in your project:

... (truncated)

Changelog

Sourced from @​symfony/webpack-encore's changelog.

7.2.0

• Migrate internal code to TypeScript, ship package with type definitions (better DX and IDE support!)
• Improve the typing of the configuration methods (enableSassLoader(), configureDevServerOptions(), enableVueLoader(), configureBabelPresetEnv(), etc.): options now resolve to the real loader/plugin types, giving full autocompletion and validation in your webpack.config
• Add support for webpack-dev-server ^6.0.0 (requires webpack ^5.102.0 and webpack-cli ^7.0.2)

7.1.0

• Add support for sass-loader ^17.0.0
• Add support for @vue/babel-plugin-jsx to ^3.0.0, remove support for @vue/babel-plugin-jsx to ^1.0.0
• Update the minimum version of webpack-manifest-plugin to ^6.0.1
• Declare the JS/CSS minifiers as optional peer dependencies without a version constraint, matching minimizer-webpack-plugin behavior

7.0.0

This is a new major version that contains several backwards-compatibility breaks.

BC Breaks

• Migrate from CJS (CommonJS) to ESM (ES Modules)
• Migrate synchronous API to asynchronous API
• Drop support of Babel 7 in favor of Babel 8
• Remove Encore.configureTerserPlugin() in favor of Encore.configureJsMinimizerPlugin()

Features

• Add support for webpack-cli ^7.0.0
• Add support for typescript ^6.0.0
• Add support for Node.js` ^26.0.0
• Add support of Babel 8
• Use ESM exports in Encore.copyFiles() for better webpack optimizations
• Use peerDependencies instead of devDependencies for optional dependencies checking
• Replace css-minimizer-webpack-plugin and terser-webpack-plugin by minimizer-webpack-plugin to unify the minification process

See the upgrade guide for the full list of breaking changes and upgrade steps.

6.0.0

This is a new major version that contains several backwards-compatibility breaks, but for the best!

BC Breaks

• Remove support of Node.js <22.13.0
• Remove support of babel-loader@^9.1.3, see possible BC breaks in 10.0.0 release notes
• Remove support of style-loader@^3.3.0, see possible BC breaks in 4.0.0 release notes
• Remove support of less-loader@^11.0.0, see possible BC breaks in 12.0.0 release notes
• Remove support of postcss-loader@^7.0.0, see possible BC breaks in 8.0.0 release notes
• Remove support of stylus-loader@^7.0.0, see possible BC breaks in 8.0.0 release notes
• Remove support of webpack-cli@^5.0.0, see possible BC breaks in 6.0.0 release notes
• Remove unmaintained file-loader dependency

... (truncated)

Upgrade guide

Sourced from @​symfony/webpack-encore's upgrade guide.

Upgrading

7.0.0

[!IMPORTANT] v7.0.0 is ESM-only, Encore.getWebpackConfig() is now async, Babel 8 is required, and CSS minification is no longer enabled by default. These are real breaking changes, so please follow the steps below.

The Node.js ecosystem has largely moved to ESM as the standard module format. Most actively maintained packages now ship ESM-only, and since Encore already requires Node.js ^22.13.0 || >=24.0 (which has full ESM support), continuing to publish as CJS would mean fighting the ecosystem: pinning to older dependencies, adding workarounds, and missing out on tree-shaking and static analysis.

Moving to ESM also unlocks async/await in Encore's internals. Now that getWebpackConfig() is natively async, Encore can adopt modern async APIs from the ecosystem without hacks.

• Migrate from CommonJS to ESM: the package now requires "type": "module" in your project or the use of .mjs file extensions. Update your webpack.config.js:

  // Before (CJS)
  const Encore = require('@symfony/webpack-encore');
  // ...
  module.exports = Encore.getWebpackConfig();
  // After (ESM)
  import Encore from '@​symfony/webpack-encore';
  // ...
  export default await Encore.getWebpackConfig();

  Note: Encore.getWebpackConfig() is now async and returns a Promise. Use await at the top level of your webpack config (webpack supports async config files natively).

• If you prefer not to add "type": "module", rename your webpack config to webpack.config.mjs instead; webpack detects the .mjs extension and treats it as ESM automatically.

• Replace __dirname and __filename with their ESM equivalents in your webpack config:

  // Before (CJS)
  path.resolve(__dirname, 'src/utilities/');
  config: [__filename];
  // After (ESM)
  path.resolve(import.meta.dirname, 'src/utilities/');
  config: [import.meta.filename];

... (truncated)

Commits

• a995eff Tagging 7.2.0
• da6a33b bug #1520 Recommend the project's package manager for missing dependency erro...
• 0f0389e Recommend the project's package manager for missing dependency errors
• 09800d2 feature #1523 Add support for webpack-dev-server ^6.0.0 (Kocal)
• eb48ad3 Add support for webpack-dev-server ^6.0.0
• 5198083 feature #1503 Migrate project to TypeScript ✨ (Kocal)
• 53a691a [TypeScript] Improve public API configuration option types (#1521)
• bbebcee Minor improvements
• c1e0ecc [TypeScript] Use .js import specifiers and drop TS-extension tsconfig options...
• 283f574 [TypeScript] Migrate index.js (#1511)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by kocal, a new releaser for @​symfony/webpack-encore since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates vue-loader from 15.11.1 to 17.4.2

Release notes

Sourced from vue-loader's releases.

v17.3.1

Bug Fixes

• do not skip style post loader for v-bind() in non-scoped CSS (d7071bb), closes #2061

v17.3.0

Bug Fixes

• re-use ident of vue rule for template compiler, fixes #2029 (#2030) (b50fa56)

Features

• skip normal css files without scoped flag in stylePostLoader (#2053) (98782e7)

v17.2.2

Bug Fixes

• fix: windows path for experiments.css by @​h-a-n-a in vuejs/vue-loader#2049

v17.2.1

Features

• A new experimentalInlineMatchResource option (webpack 5 only), which leverages webpack 5's inline matchResource feature in the underlying implementation, and works well with the experiments.css feature This also makes vue-loader compatible with Rspack (#2046) (3149f6d).

Note: v17.2.0 was released by accident; it has the same content as v17.1.2, therefore not included in the Releases page.

v17.1.2

Bug Fixes

• keep build stable when run in a different path (#2040) (a81dc0f)
• properly close the watcher after webpack 4 tests (40b93b9)

v17.1.1

Bug Fixes

• support experimental propsDestructure and defineModel options (6269698)

v17.1.0

Bug Fixes

• fix: reference project compiler, fixes #2031 by @​heywhy in vuejs/vue-loader#2038
• fix: do not throw when Rule.layer is used by @​nolimitdev in vuejs/vue-loader#2000

Features

• support 3.3 imported types hmr (bbd98fc)

Full Changelog: vuejs/vue-loader@v17.0.1...v17.1.0

... (truncated)

Changelog

Sourced from vue-loader's changelog.

17.4.2 (2023-12-30)

Bug Fixes

• pass compilerOptions to sfc parse & re-enable AST reuse (d2a2e05)

17.4.1 (2023-12-30)

Bug Fixes

• (temporarily) disable template ast reuse (31b03af)

17.4.0 (2023-12-25)

Features

• leverage ast reuse in 3.4 (479835f)

17.3.1 (2023-10-31)

Bug Fixes

• do not skip style post loader for v-bind() in CSS (d7071bb), closes #2061

17.3.0 (2023-10-07)

Bug Fixes

• re-use ident of vue rule for template compiler, fixes #2029 (#2030) (b50fa56)

Features

• skip normal css files without scoped flag in stylePostLoader (#2053) (98782e7)

17.2.2 (2023-06-02)

... (truncated)

Commits

• 1c0324f v17.4.2
• d2a2e05 fix: pass compilerOptions to sfc parse & re-enable AST reuse
• 071f30d chore: bump to vue 3.4.3
• 94e778e chore: 17.4.1 changelog
• 284a333 17.4.1
• 31b03af fix: (temporarily) disable template ast reuse
• 50699e6 chore: set compilerOptions in example
• 59a0570 chore: changelog for 17.4.0
• 1bce3f8 v17.4.0
• f71cb1d chore: update caniuse db
• Additional commits viewable in compare view

[bobvandevijver]

I'd actually lite to migrate to Symfony reprise with Vite, which can be done with the Vue 3 migration.