Skip to content

Update jsdom 29.0.2 β†’ 29.1.0 (minor)#662

Merged
guibranco merged 1 commit intomainfrom
depfu/update/npm/jsdom-29.1.0
Apr 28, 2026
Merged

Update jsdom 29.0.2 β†’ 29.1.0 (minor)#662
guibranco merged 1 commit intomainfrom
depfu/update/npm/jsdom-29.1.0

Conversation

@depfu
Copy link
Copy Markdown
Contributor

@depfu depfu Bot commented Apr 28, 2026

Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ jsdom (29.0.2 β†’ 29.1.0) Β· Repo Β· Changelog

Release Notes

29.1.0

  • Added basic support for the ratio CSS type. (@asamuzaK)
  • Fixed getComputedStyle() sometimes returning outdated results after CSS was modified. (@asamuzaK)

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 4 commits:

↗️ entities (indirect, 6.0.1 β†’ 8.0.0) Β· Repo

Release Notes

8.0.0

What's Changed

  • BREAKING CHANGE: entities is now ESM-only #2183
    • BREAKING: Update engines to node >= 20.19.0
      • Update tsconfig: target es2022
    • BREAKING: Remove deprecated functions & polyfills
  • Use shared eslint config #2157

Full Changelog: v7.0.1...v8.0.0

7.0.1

What's Changed

  • Addresses an issue that broke streaming for htmlparser2 by @fb55 in #2117
  • Exclude test files from published package by @fb55 in 2651348

Full Changelog: v7.0.0...v7.0.1

7.0.0

No changes in public API; a lot of internals changed though, for faster encoding & decoding and reduced memory usage.

Improvements

Reduced length of the encoded trie by 21% for HTML (from 15,242 words (uint16) to 12075), by:

  • Adding a semicolon flag on value nodes, which means semicolons don't have to be encoded anymore.
  • Compacting dict keys: two keys are now stored in each word, instead of one
  • Compacting runs of 3 or more characters: successive characters are now also stored as two characters per word

Also reduces the size of the encoded table by 32% (after the previous change) by encoding it as base64.

Encodes the encode trie as a string, with a simple parser turning it into the previous structure on load. This leads to a 44% decrease in file size (from 24,034 to 13,392 bytes).

  • Speed up encodes using bitsets by @fb55 in #1952

Uses bitmaps to replace regex when looking for ASCII code points that should be replaced with entities. Leads to a ~1.6x speed up for encodeHTML.

Miscellaneous

New Contributors

Full Changelog: v6.0.1...v7.0.0

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by more commits than we can show here.

↗️ lru-cache (indirect, 11.2.7 β†’ 11.3.5) Β· Repo Β· Changelog

Commits

See the full diff on Github. The new version differs by 26 commits:

↗️ parse5 (indirect, 8.0.0 β†’ 8.0.1) Β· Repo

Release Notes

8.0.1

What's Changed

  • chore(deps-dev): bump @eslint/js from 9.30.1 to 9.31.0 by @dependabot[bot] in #1546
  • chore(deps-dev): bump eslint from 9.30.1 to 9.31.0 by @dependabot[bot] in #1547
  • chore(deps-dev): bump typescript-eslint from 8.36.0 to 8.37.0 by @dependabot[bot] in #1548
  • chore(deps-dev): bump eslint-config-prettier from 10.1.5 to 10.1.8 by @dependabot[bot] in #1549
  • chore(deps): bump github/codeql-action from 3.29.2 to 3.29.3 by @dependabot[bot] in #1550
  • chore(deps-dev): bump typescript-eslint from 8.37.0 to 8.38.0 by @dependabot[bot] in #1552
  • chore: use unicorn-x lint rules by @43081j in #1553
  • chore(deps): bump github/codeql-action from 3.29.3 to 3.29.4 by @dependabot[bot] in #1554
  • chore(deps-dev): bump typedoc from 0.28.7 to 0.28.8 by @dependabot[bot] in #1556
  • chore(deps-dev): bump @eslint/js from 9.31.0 to 9.32.0 by @dependabot[bot] in #1557
  • chore(deps-dev): bump eslint from 9.31.0 to 9.32.0 by @dependabot[bot] in #1558
  • chore(deps): bump github/codeql-action from 3.29.4 to 3.29.5 by @dependabot[bot] in #1559
  • chore(deps-dev): bump typedoc from 0.28.8 to 0.28.9 by @dependabot[bot] in #1560
  • chore(deps-dev): bump typescript-eslint from 8.38.0 to 8.39.0 by @dependabot[bot] in #1561
  • chore(deps-dev): bump typescript from 5.8.3 to 5.9.2 by @dependabot[bot] in #1562
  • chore(deps): bump github/codeql-action from 3.29.5 to 3.29.7 by @dependabot[bot] in #1563
  • chore(deps): bump github/codeql-action from 3.29.7 to 3.29.8 by @dependabot[bot] in #1564
  • chore(deps-dev): bump @eslint/js from 9.32.0 to 9.33.0 by @dependabot[bot] in #1565
  • chore(deps-dev): bump eslint from 9.32.0 to 9.33.0 by @dependabot[bot] in #1566
  • chore(deps-dev): bump typedoc from 0.28.9 to 0.28.10 by @dependabot[bot] in #1567
  • chore(deps-dev): bump typescript-eslint from 8.39.0 to 8.39.1 by @dependabot[bot] in #1568
  • chore(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #1569
  • chore(deps): bump github/codeql-action from 3.29.8 to 3.29.9 by @dependabot[bot] in #1570
  • chore(deps-dev): bump typescript-eslint from 8.39.1 to 8.40.0 by @dependabot[bot] in #1571
  • chore(deps): bump github/codeql-action from 3.29.9 to 3.29.10 by @dependabot[bot] in #1572
  • chore(deps): bump github/codeql-action from 3.29.10 to 3.29.11 by @dependabot[bot] in #1573
  • chore(deps-dev): bump @eslint/js from 9.33.0 to 9.34.0 by @dependabot[bot] in #1574
  • chore(deps-dev): bump eslint from 9.33.0 to 9.34.0 by @dependabot[bot] in #1575
  • chore(deps-dev): bump typedoc from 0.28.10 to 0.28.11 by @dependabot[bot] in #1576
  • chore(deps-dev): bump typescript-eslint from 8.40.0 to 8.41.0 by @dependabot[bot] in #1577
  • chore(deps-dev): bump typedoc from 0.28.11 to 0.28.12 by @dependabot[bot] in #1578
  • chore(deps): bump github/codeql-action from 3.29.11 to 3.30.0 by @dependabot[bot] in #1579
  • chore(deps-dev): bump typescript-eslint from 8.41.0 to 8.42.0 by @dependabot[bot] in #1580
  • chore(deps): bump actions/setup-node from 4.4.0 to 5.0.0 by @dependabot[bot] in #1581
  • chore(deps-dev): bump @eslint/js from 9.34.0 to 9.35.0 by @dependabot[bot] in #1582
  • chore(deps-dev): bump eslint from 9.34.0 to 9.35.0 by @dependabot[bot] in #1583
  • chore(deps): bump github/codeql-action from 3.30.0 to 3.30.1 by @dependabot[bot] in #1584
  • chore(deps-dev): bump typescript-eslint from 8.42.0 to 8.43.0 by @dependabot[bot] in #1585
  • chore(deps-dev): bump globals from 16.3.0 to 16.4.0 by @dependabot[bot] in #1587
  • chore(deps): bump github/codeql-action from 3.30.1 to 3.30.2 by @dependabot[bot] in #1588
  • chore(deps): bump vite from 6.3.5 to 7.1.5 by @dependabot[bot] in #1586
  • chore(deps): bump github/codeql-action from 3.30.2 to 3.30.3 by @dependabot[bot] in #1590
  • chore(deps-dev): bump typedoc from 0.28.12 to 0.28.13 by @dependabot[bot] in #1591
  • chore(deps-dev): bump typescript-eslint from 8.43.0 to 8.44.0 by @dependabot[bot] in #1592
  • chore(deps-dev): bump @eslint/js from 9.35.0 to 9.36.0 by @dependabot[bot] in #1594
  • chore(deps-dev): bump eslint from 9.35.0 to 9.36.0 by @dependabot[bot] in #1593
  • chore(deps-dev): bump typescript-eslint from 8.44.0 to 8.44.1 by @dependabot[bot] in #1595
  • chore(deps): bump github/codeql-action from 3.30.3 to 3.30.4 by @dependabot[bot] in #1596
  • chore(deps): bump github/codeql-action from 3.30.4 to 3.30.5 by @dependabot[bot] in #1597
  • chore(deps-dev): bump typescript-eslint from 8.44.1 to 8.45.0 by @dependabot[bot] in #1598
  • chore(deps-dev): bump typescript from 5.9.2 to 5.9.3 by @dependabot[bot] in #1599
  • chore(deps): bump github/codeql-action from 3.30.5 to 3.30.6 by @dependabot[bot] in #1600
  • chore(deps-dev): bump @eslint/js from 9.36.0 to 9.37.0 by @dependabot[bot] in #1601
  • chore(deps-dev): bump eslint from 9.36.0 to 9.37.0 by @dependabot[bot] in #1602
  • chore(deps-dev): bump typescript-eslint from 8.45.0 to 8.46.0 by @dependabot[bot] in #1603
  • chore(deps): bump github/codeql-action from 3.30.6 to 4.30.7 by @dependabot[bot] in #1604
  • chore(deps-dev): bump typedoc from 0.28.13 to 0.28.14 by @dependabot[bot] in #1605
  • chore(deps): bump github/codeql-action from 4.30.7 to 4.30.8 by @dependabot[bot] in #1607
  • chore(deps-dev): bump typescript-eslint from 8.46.0 to 8.46.1 by @dependabot[bot] in #1608
  • chore(deps): bump actions/setup-node from 5.0.0 to 6.0.0 by @dependabot[bot] in #1609
  • chore(deps-dev): bump eslint from 9.37.0 to 9.38.0 by @dependabot[bot] in #1611
  • chore(deps-dev): bump @eslint/js from 9.37.0 to 9.38.0 by @dependabot[bot] in #1612
  • chore(deps): bump github/codeql-action from 4.30.8 to 4.30.9 by @dependabot[bot] in #1613
  • chore(deps): bump vite from 7.1.5 to 7.1.11 by @dependabot[bot] in #1614
  • chore(deps-dev): bump typescript-eslint from 8.46.1 to 8.46.2 by @dependabot[bot] in #1615
  • chore(deps): bump github/codeql-action from 4.30.9 to 4.31.0 by @dependabot[bot] in #1616
  • chore: drop memwatch by @43081j in #1621
  • chore(deps-dev): bump eslint from 9.38.0 to 9.39.0 by @dependabot[bot] in #1618
  • chore(deps-dev): bump globals from 16.4.0 to 16.5.0 by @dependabot[bot] in #1619
  • chore(deps): bump github/codeql-action from 4.31.0 to 4.31.2 by @dependabot[bot] in #1617
  • chore(deps-dev): bump @eslint/js from 9.39.0 to 9.39.1 by @dependabot[bot] in #1622
  • chore(deps-dev): bump typescript-eslint from 8.46.2 to 8.46.3 by @dependabot[bot] in #1624
  • chore(deps-dev): bump eslint from 9.39.0 to 9.39.1 by @dependabot[bot] in #1623
  • chore(deps-dev): bump typescript-eslint from 8.46.3 to 8.46.4 by @dependabot[bot] in #1625
  • chore(deps): bump github/codeql-action from 4.31.2 to 4.31.3 by @dependabot[bot] in #1626
  • chore(deps-dev): bump typescript-eslint from 8.46.4 to 8.47.0 by @dependabot[bot] in #1629
  • chore(deps-dev): bump nano-staged from 0.8.0 to 0.9.0 by @dependabot[bot] in #1628
  • chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 by @dependabot[bot] in #1631
  • chore(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 by @dependabot[bot] in #1632
  • chore(deps): bump github/codeql-action from 4.31.3 to 4.31.4 by @dependabot[bot] in #1633
  • chore(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 by @dependabot[bot] in #1630
  • chore(deps): bump actions/checkout from 5.0.1 to 6.0.0 by @dependabot[bot] in #1634
  • chore(deps): bump glob and @vitest/coverage-v8 by @dependabot[bot] in #1627
  • chore(deps-dev): bump @vitest/coverage-v8 from 4.0.10 to 4.0.13 by @dependabot[bot] in #1635
  • chore(deps-dev): bump typescript-eslint from 8.47.0 to 8.48.0 by @dependabot[bot] in #1636
  • chore(deps): bump github/codeql-action from 4.31.4 to 4.31.5 by @dependabot[bot] in #1637
  • chore(deps-dev): bump @vitest/coverage-v8 from 4.0.13 to 4.0.14 by @dependabot[bot] in #1640
  • chore(deps-dev): bump prettier from 3.6.2 to 3.7.1 by @dependabot[bot] in #1641
  • chore(deps-dev): bump typedoc from 0.28.14 to 0.28.15 by @dependabot[bot] in #1642
  • chore(deps-dev): bump prettier from 3.7.1 to 3.7.3 by @dependabot[bot] in #1643
  • chore(deps): bump github/codeql-action from 4.31.5 to 4.31.6 by @dependabot[bot] in #1644
  • chore(deps-dev): bump @vitest/coverage-v8 from 4.0.14 to 4.0.15 by @dependabot[bot] in #1645
  • chore(deps-dev): bump typescript-eslint from 8.48.0 to 8.48.1 by @dependabot[bot] in #1646
  • chore(deps): bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #1647
  • chore(deps-dev): bump prettier from 3.7.3 to 3.7.4 by @dependabot[bot] in #1650
  • chore(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by @dependabot[bot] in #1651
  • chore: specify correct contributors list by @43081j in #1649
  • chore(deps): bump github/codeql-action from 4.31.6 to 4.31.7 by @dependabot[bot] in #1652
  • chore(deps-dev): bump typescript-eslint from 8.48.1 to 8.49.0 by @dependabot[bot] in #1653
  • chore(deps-dev): bump eslint from 9.39.1 to 9.39.2 by @dependabot[bot] in #1654
  • chore(deps-dev): bump @eslint/js from 9.39.1 to 9.39.2 by @dependabot[bot] in #1655
  • chore(deps): bump github/codeql-action from 4.31.7 to 4.31.8 by @dependabot[bot] in #1656
  • chore(deps-dev): bump typescript-eslint from 8.49.0 to 8.50.0 by @dependabot[bot] in #1658
  • chore(deps-dev): bump @vitest/coverage-v8 from 4.0.15 to 4.0.16 by @dependabot[bot] in #1659
  • chore(deps): bump github/codeql-action from 4.31.8 to 4.31.9 by @dependabot[bot] in #1660
  • chore(deps-dev): bump typescript-eslint from 8.50.0 to 8.50.1 by @dependabot[bot] in #1661
  • chore(deps-dev): bump typescript-eslint from 8.50.1 to 8.51.0 by @dependabot[bot] in #1663
  • chore(deps-dev): bump globals from 16.5.0 to 17.0.0 by @dependabot[bot] in #1664
  • chore(deps-dev): bump typescript-eslint from 8.51.0 to 8.52.0 by @dependabot[bot] in #1665
  • chore(deps): bump dependabot/fetch-metadata from 2.4.0 to 2.5.0 by @dependabot[bot] in #1666
  • chore(deps-dev): bump typedoc from 0.28.15 to 0.28.16 by @dependabot[bot] in #1667
  • chore(deps): bump github/codeql-action from 4.31.9 to 4.31.10 by @dependabot[bot] in #1668
  • chore(deps-dev): bump @vitest/coverage-v8 from 4.0.16 to 4.0.17 by @dependabot[bot] in #1669
  • chore(deps-dev): bump typescript-eslint from 8.52.0 to 8.53.0 by @dependabot[bot] in #1670
  • chore(deps): bump actions/setup-node from 6.1.0 to 6.2.0 by @dependabot[bot] in #1671
  • chore(deps-dev): bump prettier from 3.7.4 to 3.8.0 by @dependabot[bot] in #1672
  • chore(deps-dev): bump typescript-eslint from 8.53.0 to 8.53.1 by @dependabot[bot] in #1674
  • chore(deps): bump entities from 4.5.0 to 5.0.0 by @dependabot[bot] in #1202
  • chore(deps-dev): bump prettier from 3.8.0 to 3.8.1 by @dependabot[bot] in #1675
  • chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1676
  • chore(deps-dev): bump @vitest/coverage-v8 from 4.0.17 to 4.0.18 by @dependabot[bot] in #1677
  • chore(deps-dev): bump globals from 17.0.0 to 17.1.0 by @dependabot[bot] in #1678
  • chore(deps): bump github/codeql-action from 4.31.10 to 4.31.11 by @dependabot[bot] in #1681
  • chore(deps): bump github/codeql-action from 4.31.11 to 4.32.0 by @dependabot[bot] in #1682
  • chore(deps-dev): bump typescript-eslint from 8.53.1 to 8.54.0 by @dependabot[bot] in #1683
  • chore(deps-dev): bump globals from 17.1.0 to 17.2.0 by @dependabot[bot] in #1684
  • chore(deps-dev): bump globals from 17.2.0 to 17.3.0 by @dependabot[bot] in #1685
  • chore(deps): bump github/codeql-action from 4.32.0 to 4.32.1 by @dependabot[bot] in #1686
  • chore(deps): bump github/codeql-action from 4.32.1 to 4.32.2 by @dependabot[bot] in #1687
  • chore(deps-dev): bump typescript-eslint from 8.54.0 to 8.55.0 by @dependabot[bot] in #1690
  • chore(deps-dev): bump typedoc from 0.28.16 to 0.28.17 by @dependabot[bot] in #1691
  • chore(deps): bump github/codeql-action from 4.32.2 to 4.32.3 by @dependabot[bot] in #1692
  • chore(deps-dev): bump typescript-eslint from 8.55.0 to 8.56.0 by @dependabot[bot] in #1693
  • chore(deps-dev): bump eslint from 9.39.2 to 10.0.0 by @dependabot[bot] in #1689
  • chore(deps-dev): bump @eslint/js from 9.39.2 to 10.0.1 by @dependabot[bot] in #1688
  • chore(deps-dev): bump eslint from 10.0.0 to 10.0.1 by @dependabot[bot] in #1695
  • chore(deps): bump github/codeql-action from 4.32.3 to 4.32.4 by @dependabot[bot] in #1694
  • chore(deps-dev): bump typescript-eslint from 8.56.0 to 8.56.1 by @dependabot[bot] in #1697
  • chore(deps-dev): bump eslint from 10.0.1 to 10.0.2 by @dependabot[bot] in #1696
  • chore(deps): bump rollup from 4.56.0 to 4.59.0 by @dependabot[bot] in #1699
  • chore(deps-dev): bump globals from 17.3.0 to 17.4.0 by @dependabot[bot] in #1700
  • chore(deps): bump github/codeql-action from 4.32.4 to 4.32.5 by @dependabot[bot] in #1701
  • chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in #1702
  • chore(deps): bump github/codeql-action from 4.32.5 to 4.32.6 by @dependabot[bot] in #1703
  • perf(tokenizer): use String.fromCharCode for BMP characters by @TrevorBurnham in #1680
  • chore(deps-dev): bump eslint from 10.0.2 to 10.0.3 by @dependabot[bot] in #1706
  • chore(deps-dev): bump minimatch from 9.0.5 to 9.0.9 by @dependabot[bot] in #1707
  • chore(deps-dev): bump typescript-eslint from 8.56.1 to 8.57.0 by @dependabot[bot] in #1708
  • chore(deps-dev): bump @vitest/coverage-v8 from 4.0.18 to 4.1.0 by @dependabot[bot] in #1709
  • chore: Remove Tidelift funding information by @fb55 in #1710
  • chore(deps): bump github/codeql-action from 4.32.6 to 4.33.0 by @dependabot[bot] in #1711
  • chore(deps-dev): bump typescript-eslint from 8.57.0 to 8.57.1 by @dependabot[bot] in #1712
  • chore(deps): bump domhandler from 5.0.3 to 6.0.1 by @dependabot[bot] in #1714
  • chore(deps): bump entities from 7.0.1 to 8.0.0 by @dependabot[bot] in #1713
  • chore(deps-dev): bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #1715
  • chore(deps): bump github/codeql-action from 4.33.0 to 4.34.1 by @dependabot[bot] in #1716
  • chore(deps-dev): bump eslint from 10.0.3 to 10.1.0 by @dependabot[bot] in #1717
  • chore(deps-dev): bump @vitest/coverage-v8 from 4.1.0 to 4.1.1 by @dependabot[bot] in #1718
  • chore(deps-dev): bump typescript-eslint from 8.57.1 to 8.57.2 by @dependabot[bot] in #1719
  • chore(deps-dev): bump typedoc from 0.28.17 to 0.28.18 by @dependabot[bot] in #1720
  • chore(deps): bump picomatch from 4.0.3 to 4.0.4 by @dependabot[bot] in #1721
  • chore(deps-dev): bump @vitest/coverage-v8 from 4.1.1 to 4.1.2 by @dependabot[bot] in #1723
  • chore(deps): bump dependabot/fetch-metadata from 2.5.0 to 3.0.0 by @dependabot[bot] in #1722
  • perf: use Uint8Array bitmaps for faster tag ID lookups by @TrevorBurnham in #1679
  • Revert "perf: use Uint8Array bitmaps for faster tag ID lookups" by @fb55 in #1724
  • chore(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot[bot] in #1727
  • chore(deps-dev): bump typescript-eslint from 8.57.2 to 8.58.0 by @dependabot[bot] in #1728
  • chore(deps-dev): bump typescript from 5.9.3 to 6.0.2 by @dependabot[bot] in #1729
  • chore(deps-dev): bump eslint from 10.1.0 to 10.2.0 by @dependabot[bot] in #1730
  • chore(deps): bump vite from 8.0.3 to 8.0.5 by @dependabot[bot] in #1731
  • chore(deps-dev): bump @vitest/coverage-v8 from 4.1.2 to 4.1.3 by @dependabot[bot] in #1732
  • chore(deps-dev): bump typescript-eslint from 8.58.0 to 8.58.1 by @dependabot[bot] in #1733
  • chore(deps-dev): bump nano-staged from 0.9.0 to 1.0.2 by @dependabot[bot] in #1734
  • chore(deps-dev): bump prettier from 3.8.1 to 3.8.2 by @dependabot[bot] in #1735
  • chore(deps-dev): bump @vitest/coverage-v8 from 4.1.3 to 4.1.4 by @dependabot[bot] in #1736
  • chore(deps-dev): bump typedoc from 0.28.18 to 0.28.19 by @dependabot[bot] in #1737
  • chore(deps-dev): bump globals from 17.4.0 to 17.5.0 by @dependabot[bot] in #1738
  • chore(deps-dev): bump typescript-eslint from 8.58.1 to 8.58.2 by @dependabot[bot] in #1739
  • chore(deps-dev): bump prettier from 3.8.2 to 3.8.3 by @dependabot[bot] in #1740
  • chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #1741
  • chore(deps-dev): bump typescript from 6.0.2 to 6.0.3 by @dependabot[bot] in #1742
  • chore: v8.0.1 by @43081j in #1743

New Contributors

Full Changelog: v8.0.0...v8.0.1

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by more commits than we can show here.

↗️ undici (indirect, 7.24.5 β†’ 7.25.0) Β· Repo

Commits

See the full diff on Github. The new version differs by 26 commits:

πŸ†• @​asamuzakjp/generational-cache (added, 1.0.1)


Depfu Status

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands
@​depfu rebase
Rebases against your default branch and redoes this update
@​depfu recreate
Recreates this PR, overwriting any edits that you've made to it
@​depfu merge
Merges this PR once your tests are passing and conflicts are resolved
@​depfu cancel merge
Cancels automatic merging of this PR
@​depfu close
Closes this PR and deletes the branch
@​depfu reopen
Restores the branch and reopens this PR (if it's closed)
@​depfu pause
Ignores all future updates for this dependency and closes this PR
@​depfu pause [minor|major]
Ignores all future minor/major updates for this dependency and closes this PR
@​depfu resume
Future versions of this dependency will create PRs again (leaves this PR as is)
Go to the Depfu Dashboard to see the state of your dependencies and to customize how Depfu works.

@depfu depfu Bot added the depfu label Apr 28, 2026
@github-actions github-actions Bot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Apr 28, 2026
@github-actions
Copy link
Copy Markdown

Infisical secrets check: βœ… No secrets leaked!

πŸ’» Scan logs
2026-04-28T03:25:44Z INF scanning for exposed secrets...
3:25AM INF 576 commits scanned.
2026-04-28T03:25:45Z INF scan completed in 734ms
2026-04-28T03:25:45Z INF no leaks found

@sonarqubecloud
Copy link
Copy Markdown

@guibranco guibranco enabled auto-merge (squash) April 28, 2026 03:25
@gstraccini gstraccini Bot added the β˜‘οΈ auto-merge Automatic merging of pull requests (gstraccini-bot) label Apr 28, 2026
@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedjsdom@​29.0.2 ⏡ 29.1.075 +1100100 +197 +3100

View full report

Copy link
Copy Markdown
Owner

@guibranco guibranco left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved by gstraccini[bot]

@socket-security
Copy link
Copy Markdown

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Action Severity Alert  (click "β–Ά" to expand/collapse)
Block Low
Embedded URLs or IPs: npm @asamuzakjp/dom-selector

URLs: https://datatracker.ietf.org/doc/html/rfc4647#section-3.3.1, http://www.w3.org/2000/svg

Location: Package overview

From: package-lock.json β†’ npm/jsdom@29.1.0 β†’ npm/@asamuzakjp/dom-selector@7.1.1

β„Ή Read more on: This package | This alert | What are URL strings?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Review all remote URLs to ensure they are intentional, pointing to trusted sources, and not being used for data exfiltration or loading untrusted code at runtime.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@asamuzakjp/dom-selector@7.1.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Block Low
Embedded URLs or IPs: npm entities

URLs: https://html.spec.whatwg.org/multipage/parsing.html#escapingString, https://html.spec.whatwg.org/multipage/parsing.html#named-character-reference-state

Location: Package overview

From: package-lock.json β†’ npm/jsdom@29.1.0 β†’ npm/entities@8.0.0

β„Ή Read more on: This package | This alert | What are URL strings?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Review all remote URLs to ensure they are intentional, pointing to trusted sources, and not being used for data exfiltration or loading untrusted code at runtime.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/entities@8.0.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

See 4 more rows in the dashboard

View full report

@gstraccini gstraccini Bot added the πŸ€– bot Automated processes or integrations label Apr 28, 2026
@guibranco
Copy link
Copy Markdown
Owner

@depfu merge

@guibranco guibranco merged commit d6e0404 into main Apr 28, 2026
13 of 15 checks passed
@guibranco guibranco deleted the depfu/update/npm/jsdom-29.1.0 branch April 28, 2026 03:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

β˜‘οΈ auto-merge Automatic merging of pull requests (gstraccini-bot) πŸ€– bot Automated processes or integrations depfu size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant