build(deps): update dependencies (except commander)

[alexander-akait]

Summary

Updates all root and workspace dependencies to their latest available versions, excluding commander (kept at ^14.0.3 as requested).

Root (devDependencies)

• @babel/core, @babel/preset-env, @babel/register 7.x → 8.x (major)
• @types/node 22 → 26 (major)
• js-yaml 4 → 5 (major)
• @changesets/cli, @types/rechoir, colorette, cspell, css-loader, eslint, eslint-config-webpack, get-port, husky, jest, lint-staged, mini-css-extract-plugin, prettier, readable-stream, sass, ts-jest, ts-loader, ts-node, typescript, webpack, webpack-bundle-analyzer, webpack-dev-server (minor/patch)

packages/webpack-cli

• envinfo 7.14.0 → 7.21.0
• import-local 3.0.2 → 3.2.0
• @types/envinfo 7.8.1 → 7.8.4

packages/create-webpack-app

• node-plop 0.32.0 → 0.32.3

commander was intentionally left untouched in both packages.

Verification

• ✅ npm run build (tsc)
• ✅ npm run lint:code (eslint)
• ✅ test/build, test/api, test/build/config-format/yaml (150 tests) — confirms js-yaml 5 compatibility
• ✅ test/create-webpack-app — 38/39 pass

One create-webpack-app test (should throw if the current path is not writable) fails only because the CI/sandbox runs as root, which bypasses the 0o500 permission the test relies on to provoke a write failure. This is an environmental artifact unrelated to the dependency bumps, not a regression.

🤖 Generated with Claude Code

https://claude.ai/code/session_0185NgHf2L2nuvCZa4X2ZhHU

---

Generated by Claude Code

[changeset-bot]

⚠️ No Changeset found

Latest commit: 5c4bbd9

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[linux-foundation-easycla]

• ✅ Unknown (5c4bbd9, 96400ba, b73d207)
• ❌ - login: @claude / name: Claude. The commit (5c4bbd9, 96400ba, b73d207) is not authorized under a signed CLA. Please click here to be authorized. For further assistance with EasyCLA, please visit our EasyCLA portal and chat with our support bot.

One or more co-authors of this pull request were not found. You must specify co-authors in commit message trailer via:

Co-authored-by: name <email>

Supported Co-authored-by: formats include:

1. Anything <id+login@users.noreply.github.com> - it will locate your GitHub user by id part.
2. Anything <login@users.noreply.github.com> - it will locate your GitHub user by login part.
3. Anything <public-email> - it will locate your GitHub user by public-email part. Note that this email must be made public on Github.
4. Anything <other-email> - it will locate your GitHub user by other-email part but only if that email was used before for any other CLA as a main commit author.
5. login <any-valid-email> - it will locate your GitHub user by login part, note that login part must be at least 3 characters long.

Alternatively, if the co-author should not be included, remove the Co-authored-by: line from the commit message.

Please update your commit message(s) by doing git commit --amend and then git push [--force] and then request re-running CLA check via commenting on this pull request:

/easycla

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.43%. Comparing base (a7380e1) to head (5c4bbd9).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #4785   +/-   ##
=======================================
  Coverage   93.43%   93.43%           
=======================================
  Files          14       14           
  Lines        5419     5419           
  Branches      788      788           
=======================================
  Hits         5063     5063           
  Misses        354      354           
  Partials        2        2           

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update a7380e1...5c4bbd9. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.