Skip to content

chore(deps-dev): bump the development-minor-and-patch group with 4 updates - #3992

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/development-minor-and-patch-10f13e008a
Closed

chore(deps-dev): bump the development-minor-and-patch group with 4 updates#3992
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/development-minor-and-patch-10f13e008a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the development-minor-and-patch group with 4 updates: @vitest/coverage-v8, jsdom, react-email and vitest.

Updates @vitest/coverage-v8 from 5.0.4 to 5.0.5

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates jsdom from 30.1.2 to 30.1.3

Release notes

Sourced from jsdom's releases.

v30.1.3

  • Improved performance of getComputedStyle() and computed CSS property reads, including with stylesheets containing attribute selectors. (@​scttcper, @​asamuzaK)
  • Fixed slowdowns when focusing elements and running interaction tests, which regressed in v30.1.2. (@​scttcper)
  • Fixed XMLHttpRequest reusing credentials supplied to xhr.open() after cross-origin redirects, including in response to authentication challenges from the destination.
  • Fixed XMLHttpRequest incorrectly sending and accepting cookies after cross-origin redirects back to the document's origin when xhr.withCredentials is false.
  • Fixed exceptions from malformed CSS math functions, such as calc(0px - @submenu_space), while parsing documents, stylesheets, and style declarations. (@​rnavarro)
  • Fixed getComputedStyle() ignoring style rules nested inside multiple @media rules.
  • Fixed CSS shorthands overwriting longhands with higher priority or specificity during style computation, including declarations containing CSS variables.
  • Fixed getComputedStyle() returning unresolved or inconsistent shorthand values, including for 'background', 'border', 'flex', 'font', 'margin', and 'padding', and incorrect shorthand defaults and inheritance.
  • Fixed computed background positions to resolve font-relative lengths using the final font size and handle multiple image layers correctly.
  • Fixed computed 'color' values depending on property read order, including unresolved color-mix() results, which regressed in v29.0.2.
  • Fixed currentcolor border colors incorrectly becoming transparent when 'color' uses light-dark() or relative color syntax.
  • Fixed CSS calculations that reduce to a percentage incorrectly producing pixel values, which regressed in v30.0.0.
  • Fixed numeric font weights in the 'font' shorthand incorrectly setting 'line-height'.
  • Fixed selector matching involving XML namespaces, and selectors such as [data-a|=""] failing to match empty values and values beginning with -. (@​asamuzaK)
Commits
  • 058c0f5 30.1.3
  • fcd1fd1 Cascade parsed longhands independently
  • a3ee786 Cascade computed style properties on demand
  • f42dc15 Resolve colors before caching or using currentcolor
  • 074b1fb Compute background-position lengths against the final font size
  • d19598c Apply style rules nested in multiple @​media rules
  • 45d626c Rule out attribute selector subjects before matching
  • 3ff0a5b Upgrade Undici and remove abort workarounds
  • 8813bb1 Ignore CSS declarations with unparseable math functions
  • 63712d8 Fix XHR credentials across redirects
  • Additional commits viewable in compare view

Updates react-email from 6.11.2 to 6.11.3

Release notes

Sourced from react-email's releases.

react-email@6.11.3

Patch Changes

  • Updated dependencies [f356e81]
    • @​react-email/render@​2.1.1
Changelog

Sourced from react-email's changelog.

6.11.3

Patch Changes

  • Updated dependencies [f356e81]
    • @​react-email/render@​2.1.1
Commits

Updates vitest from 5.0.4 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the development-minor-and-patch group with 4 up…
826f769 
…dates

Bumps the development-minor-and-patch group with 4 updates: [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8), [jsdom](https://github.com/jsdom/jsdom), [react-email](https://github.com/resend/react-email/tree/HEAD/packages/react-email) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `@vitest/coverage-v8` from 5.0.4 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8)

Updates `jsdom` from 30.1.2 to 30.1.3
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.1.2...v30.1.3)

Updates `react-email` from 6.11.2 to 6.11.3
- [Release notes](https://github.com/resend/react-email/releases)
- [Changelog](https://github.com/resend/react-email/blob/canary/packages/react-email/CHANGELOG.md)
- [Commits](https://github.com/resend/react-email/commits/react-email@6.11.3/packages/react-email)

Updates `vitest` from 5.0.4 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-minor-and-patch
- dependency-name: jsdom
  dependency-version: 30.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-minor-and-patch
- dependency-name: react-email
  dependency-version: 6.11.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-minor-and-patch
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 19, 2026
@clawsweeper

clawsweeper Bot commented Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

🦞👀
ClawSweeper picked this up.

Pull request received. I will update this pull request when review starts.

ClawSweeper review complete

ClawSweeper finished reviewing this revision. The review result is being finalized.

View the workflow run.

@vercel

vercel Bot commented Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
clawhub Ready Ready Preview Oct 19, 2026 4:09pm UTC

Request Review

@clawsweeper clawsweeper Bot added P3 Low-priority cleanup, docs, polish, ergonomics, or speculative work. rating: 🐚 platinum hermit Good normal PR readiness with ordinary maintainer review expected. status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR. labels Oct 19, 2026
@clawsweeper

clawsweeper Bot commented Oct 19, 2026

Copy link
Copy Markdown
Contributor

Codex review: needs maintainer review before merge.

What this changes

This PR updates Vitest and its coverage provider to 5.0.5, jsdom to 30.1.3, and React Email to 6.11.3.

Example: A developer installs dependencies for the ClawHub coverage suite.

  • Before: The lockfile selects Vitest 5.0.4 and jsdom 30.1.2.
  • After: The lockfile selects Vitest 5.0.5 and jsdom 30.1.3.

Review scores

Measure Result What it means
Overall readiness 🐚 platinum hermit (4/6) Focused, internally consistent dependency maintenance with no identified defect; this is not a merge-ready verdict while validation remains queued.
Proof confidence 🌊 off-meta tidepool Not applicable: This Dependabot development-dependency update is outside the ordinary contributor proof gate; the ready preview establishes deployment status, and queued CI does not yet establish tooling validation.
Patch quality 🐚 platinum hermit (4/6) No actionable review findings were identified.

Product

Kind: Maintenance · Worth it: Yes · Fix scope: Complete
User problem: Development tools remain on patch versions with upstream test-runner, DOM simulation, and email-preview fixes available.
Reason: The repository already groups development patch updates through Dependabot, and this PR preserves established tooling choices.

Merge readiness

✅ Ready for maintainer review

Keep this PR open: its dependency updates are absent from current main, and no blocking code findings were identified; validation checks remain queued.

Priority: P3
Reviewed head: 826f7694a94b6a08772bec756876c0703be89ba5

Before merge

None.

Findings

None.

Agent review details

How this fits together

The root manifest and Bun lockfile select tools used by the test suite, coverage reporting, and local email preview.

flowchart TD
  A[Root package manifest] --> B[Bun lockfile]
  B --> C[Vitest and coverage]
  B --> D[jsdom environment]
  B --> E[React Email preview]
  D --> C
  C --> F[CI results]
Loading

Technical review

Best possible solution:

Retain the focused manifest-and-lockfile update and assess the existing CI results before landing.

Do we have a high-confidence way to reproduce the issue?

This is dependency maintenance rather than a reported ClawHub bug; no target code was executed during this read-only review.

Is this the best way to solve the issue?

The direct manifest-and-lockfile update is the smallest appropriate approach; application workarounds or new overrides are unsupported by any observed failure.

AGENTS.md: found and applied where relevant.

Codex review notes: model internal, reasoning medium; reviewed against 433251e124a6.

Provenance checked

Testing

Proof path: none.

Security

None.

Evidence

What I checked:

  • Introduced changes: The pinned diff changes only four development dependency declarations and their corresponding lockfile resolutions; Vitest and coverage remain aligned. (package.json:178, 826f7694a94b)
  • Current main still uses older versions: Main declares coverage and Vitest 5.0.4, jsdom 30.1.2, and React Email ^6.11.2, so the update is not implemented there. (package.json:178, 433251e124a6)
  • Prior dependency decision preserved: chore(deps): refresh compatible packages and patch advisories #3953 explicitly retained CLI Undici 7; this PR retains root Undici 7.30.0 while updating only jsdom's nested Undici resolution. (bun.lock:2179, cf3788c9f718)
  • Discussion and validation state: Full PR body and all three comments were inspected; comments contain status notices and a ready Vercel deployment, while unit, static, packages, and types-build checks remain queued on the reviewed head. (826f7694a94b)
  • Upstream transport and selector requirements: The updated package is directly selected by this PR; its v30.1.3 manifest requires dom-selector ^10.0.3 and Undici ^8.12.1, matching the new lockfile resolutions. (package.json, 058c0f55f369)
  • Upstream renderer requirement: The updated development preview tool requires render >=2.1.1; the lockfile supplies a nested 2.1.1 renderer without replacing the application's existing renderer resolution. (packages/react-email/package.json, e0561e164e9c)

Likely related people:

  • Patrick Erichsen: Raw commit e319df0 adds package.json:43 relative to its recorded parents. This identifies author metadata, not feature responsibility or a PR merger. (role: source-line author; confidence: high; commits: e319df076006; files: package.json)
  • Vincent Koc: Raw commit 7c61d55 adds package.json:17 relative to its recorded parents. This identifies author metadata, not feature responsibility or a PR merger. (role: source-line author; confidence: medium; commits: 7c61d5583381; files: package.json)

Review metrics

Metric Value Why it matters
Patch size +20/-16 across 2 files All changes are dependency declarations or lockfile metadata; no application code or test scaffolding is added.

Labels

Label changes:

  • add P3: Routine development-tool patch maintenance without an established urgent ClawHub failure.
  • add rating: 🐚 platinum hermit: Overall readiness is 🐚 platinum hermit; proof is 🌊 off-meta tidepool and patch quality is 🐚 platinum hermit.
  • add status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR.

Label justifications:

  • P3: Routine development-tool patch maintenance without an established urgent ClawHub failure.
  • rating: 🐚 platinum hermit: Overall readiness is 🐚 platinum hermit; proof is 🌊 off-meta tidepool and patch quality is 🐚 platinum hermit.
  • status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR.

Rating scale

6/6 🦀 challenger crab · 5/6 🦞 diamond lobster · 4/6 🐚 platinum hermit · 3/6 🦐 gold shrimp · 2/6 🦪 silver shellfish · 1/6 🧂 unranked krab. Overall follows the weaker of proof and patch quality; ✨ marks media proof (a screenshot, video, or linked artifact) that directly shows the changed behavior.

Workflow

ClawSweeper edits this one comment on every review. Comment @clawsweeper re-review for a fresh review only. Repair and merge execution lanes are retired.

Reviewed October 19, 2026, 12:20 PM ET / 16:20 UTC.

@dependabot @github

dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 20, 2026
@dependabot
dependabot Bot deleted the dependabot/bun/development-minor-and-patch-10f13e008a branch October 20, 2026 16:04
@clawsweeper clawsweeper Bot mentioned this pull request Oct 23, 2026
Open

This branch was successfully deployed

1 active deployment
Preview – clawhub — 826f7694 Deployed Oct 19, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code P3 Low-priority cleanup, docs, polish, ergonomics, or speculative work. rating: 🐚 platinum hermit Good normal PR readiness with ordinary maintainer review expected. status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants