chore(deps-dev): bump jsdom from 25.0.1 to 29.1.1#238
Conversation
Bumps [jsdom](https://github.com/jsdom/jsdom) from 25.0.1 to 29.1.1. - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v25.0.1...v29.1.1) --- updated-dependencies: - dependency-name: jsdom dependency-version: 29.1.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Greptile SummaryDependabot bump of
Confidence Score: 4/5Safe to merge — jsdom is a dev-only testing dependency and is not used in the production bundle; the CI workflow resolves node-version: 20 to the latest 20.x, which satisfies the raised engine floor. The bump is straightforward and limited to the test toolchain. The only non-trivial change is that several transitive CSS packages now declare a Node 20.19+ engine minimum, where the repo previously had no stated lower bound. The CI setup should be unaffected at runtime, but the lack of a pinned Node version file means a contributor on an older 20.x patch release could hit unexpected engine warnings locally. package-lock.json — worth a quick scan for the new transitive @asamuzakjp/* and @bramus/specificity packages if supply-chain policy requires it. Important Files Changed
Flowchart%%{init: {'theme': 'neutral'}}%%
flowchart TD
A[vitest.config.js\nenvironment: node] --> B{test file pragma?}
B -->|yes: @vitest-environment jsdom| C[jsdom 29.1.1\nbrowser-like DOM env]
B -->|no pragma| D[Node.js env\nmanual shims in _vitest-setup.js]
C --> E[New CSSOM stack\ncss-tree plus @asamuzakjp/*]
E --> F[Engine req: Node 20.19+ or 22.12+ or 24+]
D --> G[fake-indexeddb\npuppeteer suite]
Reviews (1): Last reviewed commit: "chore(deps-dev): bump jsdom from 25.0.1 ..." | Re-trigger Greptile |
| @@ -78,13 +121,13 @@ | |||
| ], | |||
There was a problem hiding this comment.
Transitive dep engine floor raised to Node ≥20.19.0
Several new jsdom 29 transitive packages (@asamuzakjp/css-color, @asamuzakjp/dom-selector, @asamuzakjp/generational-cache, @csstools/color-helpers, @csstools/css-calc, @csstools/css-color-parser, @csstools/css-parser-algorithms) all declare "node": "^20.19.0 || ^22.12.0 || >=24.0.0", up from the previous "node": ">=18". The CI workflow pins node-version: 20, which resolves to the latest 20.x at run time and should satisfy this, but there's no .nvmrc or .node-version file in the repo. Any contributor on Node 20.x < 20.19.0 will hit engine-requirement warnings (or failures if --engine-strict is set) when running npm ci locally. Adding a .nvmrc with 20.19 or higher would surface the requirement early.
Bumps jsdom from 25.0.1 to 29.1.1.
Release notes
Sourced from jsdom's releases.
... (truncated)
Commits
9b9ea7e29.1.107efb78Optimize computed style comparison5f66329Fix background-origin/background-clip in background shorthandad8af77Fix border shorthand handling5a3e88e29.1.073db204Update dependencies and dev dependenciesa7168a5Support ratio CSS unit type15346e0Fix style cache invalidation2a1e2cd29.0.24097d66Resolve computed CSS values lazily in CSSStyleDeclarationMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for jsdom since your current version.
Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)