Skip to content

chore(deps): bump the npm-dependencies group across 3 directories with 15 updates#2491

Merged
WilliamBerryiii merged 5 commits into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-666379202a
Jul 24, 2026
Merged

chore(deps): bump the npm-dependencies group across 3 directories with 15 updates#2491
WilliamBerryiii merged 5 commits into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-666379202a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 2 updates in the / directory: @microsoft/vally-cli and markdownlint-cli2.
Bumps the npm-dependencies group with 12 updates in the /docs/docusaurus directory:

Package From To
@docusaurus/core 3.10.1 3.10.2
@docusaurus/faster 3.10.1 3.10.2
@docusaurus/preset-classic 3.10.1 3.10.2
react 19.2.7 19.2.8
react-dom 19.2.7 19.2.8
@docusaurus/module-type-aliases 3.10.1 3.10.2
@docusaurus/types 3.10.1 3.10.2
@happy-dom/jest-environment 20.10.6 20.11.0
@testing-library/jest-dom 6.9.1 7.0.0
@typescript-eslint/parser 8.62.0 8.65.0
eslint 9.39.4 10.7.0
wait-on 9.0.10 9.1.0

Bumps the npm-dependencies group with 1 update in the /evals/beval directory: @github/copilot.

Updates @microsoft/vally-cli from 0.6.0 to 0.10.0

Updates markdownlint-cli2 from 0.22.1 to 0.23.1

Changelog

Sourced from markdownlint-cli2's changelog.

0.23.1

  • Show attempted fix counts after fixing
  • Update dependencies (including markdownlint)

0.23.0

  • Add overrides configuration option
  • Improve options/configuration file handling
  • Update dependencies (including markdownlint)
  • Remove support for end-of-life Node 20
Commits
  • 06f92c9 Update to version 0.23.1.
  • a773526 Freshen list of external custom rules included with the markdownlint-cli2-rul...
  • 437b0ca Bump eslint-plugin-jsdoc from 63.0.11 to 63.0.12
  • 5463e0f Bump eslint-plugin-unicorn from 70.0.0 to 71.0.0
  • b04ac13 Bump globby from 16.2.0 to 16.2.1
  • 1e63f97 Revert commit afb7d9898724f0d96279116bbb6f0d1026fff8df "Pin CI workflow's pnp...
  • 040594b Update dependency: markdownlint to 0.41.1.
  • 4d97fa8 Address new ESLint warnings from previous commit.
  • 50cb033 Bump eslint-node-test from 0.1.0 to 0.2.0
  • a53bf04 Bump eslint-plugin-jsdoc from 63.0.10 to 63.0.11
  • Additional commits viewable in compare view

Updates @docusaurus/core from 3.10.1 to 3.10.2

Release notes

Sourced from @​docusaurus/core's releases.

3.10.2 (2026-07-10)

Backport and cherry-pick commits from main for v3.10.2 patch release:

Changelog

Sourced from @​docusaurus/core's changelog.

3.10.2 (2026-07-10)

Backport and cherry-pick commits from main for v3.10.2 patch release:

Commits

Updates @docusaurus/faster from 3.10.1 to 3.10.2

Release notes

Sourced from @​docusaurus/faster's releases.

3.10.2 (2026-07-10)

Backport and cherry-pick commits from main for v3.10.2 patch release:

Changelog

Sourced from @​docusaurus/faster's changelog.

3.10.2 (2026-07-10)

Backport and cherry-pick commits from main for v3.10.2 patch release:

Commits

Updates @docusaurus/preset-classic from 3.10.1 to 3.10.2

Release notes

Sourced from @​docusaurus/preset-classic's releases.

3.10.2 (2026-07-10)

Backport and cherry-pick commits from main for v3.10.2 patch release:

Changelog

Sourced from @​docusaurus/preset-classic's changelog.

3.10.2 (2026-07-10)

Backport and cherry-pick commits from main for v3.10.2 patch release:

Commits

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates @docusaurus/module-type-aliases from 3.10.1 to 3.10.2

Release notes

Sourced from @​docusaurus/module-type-aliases's releases.

3.10.2 (2026-07-10)

Backport and cherry-pick commits from main for v3.10.2 patch release:

Changelog

Sourced from @​docusaurus/module-type-aliases's changelog.

3.10.2 (2026-07-10)

Backport and cherry-pick commits from main for v3.10.2 patch release:

Commits

Updates @docusaurus/types from 3.10.1 to 3.10.2

Release notes

Sourced from @​docusaurus/types's releases.

3.10.2 (2026-07-10)

Backport and cherry-pick commits from main for v3.10.2 patch release:

Changelog

Sourced from @​docusaurus/types's changelog.

3.10.2 (2026-07-10)

Backport and cherry-pick commits from main for v3.10.2 patch release:

Commits

Updates @happy-dom/jest-environment from 20.10.6 to 20.11.0

Release notes

Sourced from @​happy-dom/jest-environment's releases.

v20.11.0

🎨 Features

Commits

Updates @testing-library/jest-dom from 6.9.1 to 7.0.0

Release notes

Sourced from @​testing-library/jest-dom's releases.

v7.0.0

7.0.0 (2026-07-20)

Features

  • add toContainAnyBy* and toContainOneBy* query matchers (1e39089)

BREAKING CHANGES

  • @​testing-library/dom is now a required peer dependency. The minimum supported Node.js version is now 22.

Repaired release for testing-library/jest-dom#731

v6.10.0

6.10.0 (2026-07-20)

Features

  • add toContainAnyBy* and toContainOneBy* query matchers (#731) (cae44df)
Commits
  • 1e39089 feat: add toContainAnyBy* and toContainOneBy* query matchers
  • cae44df feat: add toContainAnyBy* and toContainOneBy* query matchers (#731)
  • 55c07ce ci: switch release to npm trusted publishing (#726)
  • 213256f docs: move toHaveSelection from the deprecated section (#717)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/jest-dom since your current version.


Updates @typescript-eslint/parser from 8.62.0 to 8.65.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.65.0

8.65.0 (2026-07-20)Description has been truncated

@dependabot dependabot Bot added dependencies Dependency updates npm NPM package configuration labels Jul 21, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 21, 2026 22:06
@dependabot dependabot Bot added dependencies Dependency updates npm NPM package configuration labels Jul 21, 2026
@github-actions

github-actions Bot commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@github/copilot 1.0.71 UnknownUnknown
pip/atheris 3.0.0 🟢 6.1
Details
CheckScoreReason
Code-Review🟢 7Found 23/30 approved changesets -- score normalized to 7
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained⚠️ 23 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
SAST⚠️ 0no SAST tool detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing🟢 10project is fuzzed
Signed-Releases⚠️ -1no releases found
License🟢 10license file detected
Security-Policy🟢 10security policy file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
pip/colorama 0.4.6 UnknownUnknown
pip/coverage 7.14.1 UnknownUnknown
pip/iniconfig 2.3.0 UnknownUnknown
pip/packaging 26.2 UnknownUnknown
pip/pluggy 1.6.0 UnknownUnknown
pip/pygments 2.20.0 UnknownUnknown
pip/pytest 9.0.3 UnknownUnknown
pip/pytest-cov 7.1.0 UnknownUnknown
pip/ruff 0.15.16 UnknownUnknown
pip/tomli 2.4.1 UnknownUnknown

Scanned Files

  • evals/beval/package-lock.json
  • plugins/hve-core-all/hooks/shared/telemetry/uv.lock
  • plugins/hve-core/hooks/shared/telemetry/uv.lock

@github-actions

github-actions Bot commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

Eval Execution

Status: Passed

  • Artifacts evaluated: 0
  • Specs run: 0
  • Assertions passed: 0
  • Assertions failed (blocking): 0
  • Assertions failed (advisory): 0
  • Failed specs (merge-blocking): 0

No changed AI artifacts required evaluation.

@codecov-commenter

codecov-commenter commented Jul 21, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.70%. Comparing base (8ae6195) to head (1446cd3).

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##             main    #2491      +/-   ##
==========================================
- Coverage   82.76%   82.70%   -0.06%     
==========================================
  Files         154      142      -12     
  Lines       20853    20763      -90     
  Branches       13        0      -13     
==========================================
- Hits        17259    17173      -86     
+ Misses       3592     3590       -2     
+ Partials        2        0       -2     
Flag Coverage Δ
docusaurus ?
pester 86.26% <ø> (-0.02%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 13 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency Review — Automated Safety Check

This PR bumps 15 npm dependencies across 3 directories. No GitHub Actions workflow files were modified, so SHA pinning compliance is not in scope.

Summary

Package Directory From To Classification
@microsoft/vally-cli / 0.6.0 0.10.0 Minor
markdownlint-cli2 / 0.22.1 0.23.1 Minor
@docusaurus/core /docs/docusaurus 3.10.1 3.10.2 Patch
@docusaurus/faster /docs/docusaurus 3.10.1 3.10.2 Patch
@docusaurus/preset-classic /docs/docusaurus 3.10.1 3.10.2 Patch
@docusaurus/module-type-aliases /docs/docusaurus 3.10.1 3.10.2 Patch
@docusaurus/types /docs/docusaurus 3.10.1 3.10.2 Patch
react /docs/docusaurus 19.2.7 19.2.8 Patch
react-dom /docs/docusaurus 19.2.7 19.2.8 Patch
@happy-dom/jest-environment /docs/docusaurus 20.10.6 20.11.0 Minor
@testing-library/jest-dom /docs/docusaurus 6.9.1 7.0.0 Major ⚠️
@typescript-eslint/parser /docs/docusaurus 8.62.0 8.65.0 Minor
eslint /docs/docusaurus 9.39.4 10.7.0 Major ⚠️
wait-on /docs/docusaurus 9.0.10 9.1.0 Minor
@github/copilot /evals/beval 1.0.63 1.0.73 Minor

Safety Check Results

Check Result
License compatibility (MIT) ✅ All packages use permissive licenses (MIT/Apache-2.0)
SHA pinning (GitHub Actions) ✅ Not applicable — no workflow files changed
New dependencies introduced ✅ None — all bumps to existing dependencies
Environment sync (devcontainer) ✅ Not applicable — no devcontainer changes
Known vulnerabilities (Dependabot assessment) ✅ No vulnerabilities reported

⚠️ Items Requiring Human Attention

eslint 9.39.4 → 10.7.0 (Major) — ESLint major versions historically include breaking rule changes, flat config API changes, and dropped Node.js version support. The docusaurus directory's ESLint config and custom rules should be verified against the [ESLint v10 migration guide]((eslint.org/redacted)

@testing-library/jest-dom 6.9.1 → 7.0.0 (Major) — v7 drops support for older matchers and tightens TypeScript types. Any test files in docs/docusaurus using deprecated matchers from v6 may fail. Review the jest-dom v7 changelog before merging.

These are docusaurus-directory dev dependencies used for the documentation site's test suite, so the blast radius is limited. CI results for this PR are the primary signal for whether the bumps are safe.

Generated by Dependabot PR Review for #2491 · 34 AIC · ⌖ 6.32 AIC · ⊞ 8.5K

…h 15 updates

Bumps the npm-dependencies group with 2 updates in the / directory: @microsoft/vally-cli and [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2).
Bumps the npm-dependencies group with 12 updates in the /docs/docusaurus directory:

| Package | From | To |
| --- | --- | --- |
| [@docusaurus/core](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus) | `3.10.1` | `3.10.2` |
| [@docusaurus/faster](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-faster) | `3.10.1` | `3.10.2` |
| [@docusaurus/preset-classic](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic) | `3.10.1` | `3.10.2` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [@docusaurus/module-type-aliases](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases) | `3.10.1` | `3.10.2` |
| [@docusaurus/types](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-types) | `3.10.1` | `3.10.2` |
| [@happy-dom/jest-environment](https://github.com/capricorn86/happy-dom) | `20.10.6` | `20.11.0` |
| [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.9.1` | `7.0.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.62.0` | `8.65.0` |
| [eslint](https://github.com/eslint/eslint) | `9.39.4` | `10.7.0` |
| [wait-on](https://github.com/jeffbski/wait-on) | `9.0.10` | `9.1.0` |

Bumps the npm-dependencies group with 1 update in the /evals/beval directory: [@github/copilot](https://github.com/github/copilot-cli).


Updates `@microsoft/vally-cli` from 0.6.0 to 0.10.0

Updates `markdownlint-cli2` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md)
- [Commits](DavidAnson/markdownlint-cli2@v0.22.1...v0.23.1)

Updates `@docusaurus/core` from 3.10.1 to 3.10.2
- [Release notes](https://github.com/facebook/docusaurus/releases)
- [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus)

Updates `@docusaurus/faster` from 3.10.1 to 3.10.2
- [Release notes](https://github.com/facebook/docusaurus/releases)
- [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-faster)

Updates `@docusaurus/preset-classic` from 3.10.1 to 3.10.2
- [Release notes](https://github.com/facebook/docusaurus/releases)
- [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-preset-classic)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `@docusaurus/module-type-aliases` from 3.10.1 to 3.10.2
- [Release notes](https://github.com/facebook/docusaurus/releases)
- [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-module-type-aliases)

Updates `@docusaurus/types` from 3.10.1 to 3.10.2
- [Release notes](https://github.com/facebook/docusaurus/releases)
- [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/docusaurus/commits/v3.10.2/packages/docusaurus-types)

Updates `@happy-dom/jest-environment` from 20.10.6 to 20.11.0
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.10.6...v20.11.0)

Updates `@testing-library/jest-dom` from 6.9.1 to 7.0.0
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](testing-library/jest-dom@v6.9.1...v7.0.0)

Updates `@typescript-eslint/parser` from 8.62.0 to 8.65.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/parser)

Updates `eslint` from 9.39.4 to 10.7.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.4...v10.7.0)

Updates `wait-on` from 9.0.10 to 9.1.0
- [Release notes](https://github.com/jeffbski/wait-on/releases)
- [Commits](jeffbski/wait-on@v9.0.10...v9.1.0)

Updates `@github/copilot` from 1.0.63 to 1.0.73
- [Release notes](https://github.com/github/copilot-cli/releases)
- [Changelog](https://github.com/github/copilot-cli/blob/main/changelog.md)
- [Commits](github/copilot-cli@v1.0.63...v1.0.73)

---
updated-dependencies:
- dependency-name: "@docusaurus/core"
  dependency-version: 3.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@docusaurus/faster"
  dependency-version: 3.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@docusaurus/module-type-aliases"
  dependency-version: 3.10.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@docusaurus/preset-classic"
  dependency-version: 3.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@docusaurus/types"
  dependency-version: 3.10.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@github/copilot"
  dependency-version: 1.0.73
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@happy-dom/jest-environment"
  dependency-version: 20.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@microsoft/vally-cli"
  dependency-version: 0.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@testing-library/jest-dom"
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.65.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: eslint
  dependency-version: 10.7.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: markdownlint-cli2
  dependency-version: 0.23.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: wait-on
  dependency-version: 9.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-dependencies-666379202a branch from 311d1af to d9b7331 Compare July 22, 2026 02:26
@WilliamBerryiii
WilliamBerryiii merged commit 53ddf1a into main Jul 24, 2026
98 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-dependencies-666379202a branch July 24, 2026 01:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates npm NPM package configuration

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants