chore(deps): bump the npm-dependencies group across 3 directories with 15 updates#2491
Conversation
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.OpenSSF ScorecardScorecard details
Scanned Files
|
Eval Execution✅ Status: Passed
No changed AI artifacts required evaluation. |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #2491 +/- ##
==========================================
- Coverage 82.76% 82.70% -0.06%
==========================================
Files 154 142 -12
Lines 20853 20763 -90
Branches 13 0 -13
==========================================
- Hits 17259 17173 -86
+ Misses 3592 3590 -2
+ Partials 2 0 -2
Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
There was a problem hiding this comment.
Dependency Review — Automated Safety Check
This PR bumps 15 npm dependencies across 3 directories. No GitHub Actions workflow files were modified, so SHA pinning compliance is not in scope.
Summary
| Package | Directory | From | To | Classification |
|---|---|---|---|---|
@microsoft/vally-cli |
/ |
0.6.0 | 0.10.0 | Minor |
markdownlint-cli2 |
/ |
0.22.1 | 0.23.1 | Minor |
@docusaurus/core |
/docs/docusaurus |
3.10.1 | 3.10.2 | Patch |
@docusaurus/faster |
/docs/docusaurus |
3.10.1 | 3.10.2 | Patch |
@docusaurus/preset-classic |
/docs/docusaurus |
3.10.1 | 3.10.2 | Patch |
@docusaurus/module-type-aliases |
/docs/docusaurus |
3.10.1 | 3.10.2 | Patch |
@docusaurus/types |
/docs/docusaurus |
3.10.1 | 3.10.2 | Patch |
react |
/docs/docusaurus |
19.2.7 | 19.2.8 | Patch |
react-dom |
/docs/docusaurus |
19.2.7 | 19.2.8 | Patch |
@happy-dom/jest-environment |
/docs/docusaurus |
20.10.6 | 20.11.0 | Minor |
@testing-library/jest-dom |
/docs/docusaurus |
6.9.1 | 7.0.0 | Major |
@typescript-eslint/parser |
/docs/docusaurus |
8.62.0 | 8.65.0 | Minor |
eslint |
/docs/docusaurus |
9.39.4 | 10.7.0 | Major |
wait-on |
/docs/docusaurus |
9.0.10 | 9.1.0 | Minor |
@github/copilot |
/evals/beval |
1.0.63 | 1.0.73 | Minor |
Safety Check Results
| Check | Result |
|---|---|
| License compatibility (MIT) | ✅ All packages use permissive licenses (MIT/Apache-2.0) |
| SHA pinning (GitHub Actions) | ✅ Not applicable — no workflow files changed |
| New dependencies introduced | ✅ None — all bumps to existing dependencies |
| Environment sync (devcontainer) | ✅ Not applicable — no devcontainer changes |
| Known vulnerabilities (Dependabot assessment) | ✅ No vulnerabilities reported |
⚠️ Items Requiring Human Attention
eslint 9.39.4 → 10.7.0 (Major) — ESLint major versions historically include breaking rule changes, flat config API changes, and dropped Node.js version support. The docusaurus directory's ESLint config and custom rules should be verified against the [ESLint v10 migration guide]((eslint.org/redacted)
@testing-library/jest-dom 6.9.1 → 7.0.0 (Major) — v7 drops support for older matchers and tightens TypeScript types. Any test files in docs/docusaurus using deprecated matchers from v6 may fail. Review the jest-dom v7 changelog before merging.
These are docusaurus-directory dev dependencies used for the documentation site's test suite, so the blast radius is limited. CI results for this PR are the primary signal for whether the bumps are safe.
Generated by Dependabot PR Review for #2491 · 34 AIC · ⌖ 6.32 AIC · ⊞ 8.5K
…h 15 updates Bumps the npm-dependencies group with 2 updates in the / directory: @microsoft/vally-cli and [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2). Bumps the npm-dependencies group with 12 updates in the /docs/docusaurus directory: | Package | From | To | | --- | --- | --- | | [@docusaurus/core](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus) | `3.10.1` | `3.10.2` | | [@docusaurus/faster](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-faster) | `3.10.1` | `3.10.2` | | [@docusaurus/preset-classic](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic) | `3.10.1` | `3.10.2` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [@docusaurus/module-type-aliases](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases) | `3.10.1` | `3.10.2` | | [@docusaurus/types](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-types) | `3.10.1` | `3.10.2` | | [@happy-dom/jest-environment](https://github.com/capricorn86/happy-dom) | `20.10.6` | `20.11.0` | | [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.9.1` | `7.0.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.62.0` | `8.65.0` | | [eslint](https://github.com/eslint/eslint) | `9.39.4` | `10.7.0` | | [wait-on](https://github.com/jeffbski/wait-on) | `9.0.10` | `9.1.0` | Bumps the npm-dependencies group with 1 update in the /evals/beval directory: [@github/copilot](https://github.com/github/copilot-cli). Updates `@microsoft/vally-cli` from 0.6.0 to 0.10.0 Updates `markdownlint-cli2` from 0.22.1 to 0.23.1 - [Changelog](https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md) - [Commits](DavidAnson/markdownlint-cli2@v0.22.1...v0.23.1) Updates `@docusaurus/core` from 3.10.1 to 3.10.2 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus) Updates `@docusaurus/faster` from 3.10.1 to 3.10.2 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-faster) Updates `@docusaurus/preset-classic` from 3.10.1 to 3.10.2 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-preset-classic) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `@docusaurus/module-type-aliases` from 3.10.1 to 3.10.2 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-module-type-aliases) Updates `@docusaurus/types` from 3.10.1 to 3.10.2 - [Release notes](https://github.com/facebook/docusaurus/releases) - [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-types) Updates `@happy-dom/jest-environment` from 20.10.6 to 20.11.0 - [Release notes](https://github.com/capricorn86/happy-dom/releases) - [Commits](capricorn86/happy-dom@v20.10.6...v20.11.0) Updates `@testing-library/jest-dom` from 6.9.1 to 7.0.0 - [Release notes](https://github.com/testing-library/jest-dom/releases) - [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md) - [Commits](testing-library/jest-dom@v6.9.1...v7.0.0) Updates `@typescript-eslint/parser` from 8.62.0 to 8.65.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/parser) Updates `eslint` from 9.39.4 to 10.7.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.4...v10.7.0) Updates `wait-on` from 9.0.10 to 9.1.0 - [Release notes](https://github.com/jeffbski/wait-on/releases) - [Commits](jeffbski/wait-on@v9.0.10...v9.1.0) Updates `@github/copilot` from 1.0.63 to 1.0.73 - [Release notes](https://github.com/github/copilot-cli/releases) - [Changelog](https://github.com/github/copilot-cli/blob/main/changelog.md) - [Commits](github/copilot-cli@v1.0.63...v1.0.73) --- updated-dependencies: - dependency-name: "@docusaurus/core" dependency-version: 3.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@docusaurus/faster" dependency-version: 3.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@docusaurus/module-type-aliases" dependency-version: 3.10.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@docusaurus/preset-classic" dependency-version: 3.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@docusaurus/types" dependency-version: 3.10.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@github/copilot" dependency-version: 1.0.73 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@happy-dom/jest-environment" dependency-version: 20.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@microsoft/vally-cli" dependency-version: 0.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@testing-library/jest-dom" dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.65.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: eslint dependency-version: 10.7.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: markdownlint-cli2 dependency-version: 0.23.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: wait-on dependency-version: 9.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
311d1af to
d9b7331
Compare
Bumps the npm-dependencies group with 2 updates in the / directory: @microsoft/vally-cli and markdownlint-cli2.
Bumps the npm-dependencies group with 12 updates in the /docs/docusaurus directory:
3.10.13.10.23.10.13.10.23.10.13.10.219.2.719.2.819.2.719.2.83.10.13.10.23.10.13.10.220.10.620.11.06.9.17.0.08.62.08.65.09.39.410.7.09.0.109.1.0Bumps the npm-dependencies group with 1 update in the /evals/beval directory: @github/copilot.
Updates
@microsoft/vally-clifrom 0.6.0 to 0.10.0Updates
markdownlint-cli2from 0.22.1 to 0.23.1Changelog
Sourced from markdownlint-cli2's changelog.
Commits
06f92c9Update to version 0.23.1.a773526Freshen list of external custom rules included with the markdownlint-cli2-rul...437b0caBump eslint-plugin-jsdoc from 63.0.11 to 63.0.125463e0fBump eslint-plugin-unicorn from 70.0.0 to 71.0.0b04ac13Bump globby from 16.2.0 to 16.2.11e63f97Revert commit afb7d9898724f0d96279116bbb6f0d1026fff8df "Pin CI workflow's pnp...040594bUpdate dependency: markdownlint to 0.41.1.4d97fa8Address new ESLint warnings from previous commit.50cb033Bump eslint-node-test from 0.1.0 to 0.2.0a53bf04Bump eslint-plugin-jsdoc from 63.0.10 to 63.0.11Updates
@docusaurus/corefrom 3.10.1 to 3.10.2Release notes
Sourced from @docusaurus/core's releases.
Changelog
Sourced from @docusaurus/core's changelog.
Commits
f37f903v3.10.22f5389dchore: cherry-pick commits for v3.10.2 patch release (#12265)Updates
@docusaurus/fasterfrom 3.10.1 to 3.10.2Release notes
Sourced from @docusaurus/faster's releases.
Changelog
Sourced from @docusaurus/faster's changelog.
Commits
f37f903v3.10.22f5389dchore: cherry-pick commits for v3.10.2 patch release (#12265)Updates
@docusaurus/preset-classicfrom 3.10.1 to 3.10.2Release notes
Sourced from @docusaurus/preset-classic's releases.
Changelog
Sourced from @docusaurus/preset-classic's changelog.
Commits
f37f903v3.10.2Updates
reactfrom 19.2.7 to 19.2.8Release notes
Sourced from react's releases.
Commits
1dd4ecb[FlightReply] Performance improvements when decoding (#37087)b0d2fdb[19.2.x] Update required references to GitHub repo (#36753)Updates
react-domfrom 19.2.7 to 19.2.8Release notes
Sourced from react-dom's releases.
Commits
1dd4ecb[FlightReply] Performance improvements when decoding (#37087)b0d2fdb[19.2.x] Update required references to GitHub repo (#36753)Updates
@docusaurus/module-type-aliasesfrom 3.10.1 to 3.10.2Release notes
Sourced from @docusaurus/module-type-aliases's releases.
Changelog
Sourced from @docusaurus/module-type-aliases's changelog.
Commits
f37f903v3.10.2Updates
@docusaurus/typesfrom 3.10.1 to 3.10.2Release notes
Sourced from @docusaurus/types's releases.
Changelog
Sourced from @docusaurus/types's changelog.
Commits
f37f903v3.10.2Updates
@happy-dom/jest-environmentfrom 20.10.6 to 20.11.0Release notes
Sourced from @happy-dom/jest-environment's releases.
Commits
bffe73achore: #2243 Fixes problem with canvas in release build (#2245)9b46f5echore: #2243 Fixes problem with canvas in release build (#2244)f9c57a5feat: #1864 Adds support for CookieStore API (#2040)a4c4faffeat: #1506 Adds support for Element checkVisibility (#2223)Updates
@testing-library/jest-domfrom 6.9.1 to 7.0.0Release notes
Sourced from @testing-library/jest-dom's releases.
Commits
1e39089feat: add toContainAnyBy* and toContainOneBy* query matcherscae44dffeat: add toContainAnyBy* and toContainOneBy* query matchers (#731)55c07ceci: switch release to npm trusted publishing (#726)213256fdocs: move toHaveSelection from the deprecated section (#717)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@testing-library/jest-domsince your current version.Updates
@typescript-eslint/parserfrom 8.62.0 to 8.65.0Release notes
Sourced from @typescript-eslint/parser's releases.