Home » Oreps » React Native Windows » All Pull Requests » #16424
microsoft/react-native-windows
A framework for building native Windows apps with React.
Watch
0
Commit Activity
Pull Requests
Directory Browser
Velocity History
Releases

📦 [0.85]: Bump the all-dependencies group across 1 directory with 19 updates #16424

Compare code on GitHub
Open
dependabot[bot] opened 5:21am on September 2, 2026 wants to merge 1 commit into microsoft/react-native-windows 0.85-stable from
dependabot/npm_and_yarn/0.85-stable/all-dependencies-fe7b7f9305
dependabot[bot]
microsoft/react-native-windows
dependabot/npm_and_yarn/0.85-stable/all-dependencies-fe7b7f9305
Diff Delta:
0
Classified as:  General

dependabot-bot's Description of Work

Bumps the all-dependencies group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| beachball | 2.65.5 | 2.65.6 |
| lage | 2.15.12 | 2.17.0 |
| ts-jest | 29.4.11 | 29.4.12 |
| @types/react | 19.2.16 | 19.2.18 |
| @rnx-kit/jest-preset | 0.3.2 | 0.3.3 |
| semver | 7.8.2 | 7.8.5 |
| @types/lodash | 4.17.24 | 4.17.25 |
| metro-runtime | 0.84.4 | 0.84.5 |
| metro-source-map | 0.84.4 | 0.84.5 |
| @xmldom/xmldom | 0.8.13 | 0.8.15 |
| @microsoft/1ds-core-js | 4.4.1 | 4.4.3 |
| @microsoft/1ds-post-js | 4.4.1 | 4.4.3 |
| @microsoft/api-extractor | 7.58.7 | 7.59.0 |
| eslint-plugin-jest | 29.15.2 | 29.16.1 |
| memfs | 4.57.6 | 4.68.1 |
| metro-babel-register | 0.84.4 | 0.84.5 |
| metro-transform-plugins | 0.84.4 | 0.84.5 |
| shell-quote | 1.8.4 | 1.10.0 |
| screenshot-desktop | 1.15.4 | 1.15.6 |

Updates beachball from 2.65.5 to 2.65.6

Changelog

Sourced from beachball's changelog.



2.65.6


Tue, 25 Aug 2026 01:40:36 GMT


Patches



Commits

Attestation changes

This version has no provenance attestation, while the previous version (2.65.5) was attested. Review the package versions before updating.


Updates lage from 2.15.12 to 2.17.0

Commits


Updates ts-jest from 29.4.11 to 29.4.12

Release notes

Sourced from ts-jest's releases.



v29.4.12


Please refer to CHANGELOG.md for details.


Changelog

Sourced from ts-jest's changelog.




29.4.12 (2026-07-22)


Features




  • compiler: support TypeScript 7 projects through compatibility aliases (#5386)


Commits



  • 3f05625 chore(release): 29.4.12


  • df28b27 docs: clarify TypeScript version prerequisites


  • c8a614a docs: mention TypeScript 7 setup in README


  • 06c79d4 fix: address TypeScript 7 review feedback


  • f107460 docs: explain TypeScript 7 compatibility setup


  • 3388227 test(e2e): add TypeScript compatibility matrix


  • 891dc73 fix(compiler): support TypeScript 7 compatibility aliases


  • eb135eb build(deps-dev): bump shell-quote from 1.8.4 to 1.10.0 in /examples


  • d5d80a3 ci: pin google osv scan action at v2.3.5


  • 6bf293f build(deps): bump shell-quote from 1.8.4 to 1.10.0 in /website

  • Additional commits viewable in compare view


Updates @types/react from 19.2.16 to 19.2.18

Commits


Updates @rnx-kit/jest-preset from 0.3.2 to 0.3.3

Release notes

Sourced from @​rnx-kit/jest-preset's releases.




@​rnx-kit/jest-preset@​0.3.3


Patch Changes



  • 57d86ad: Replaced find-up with the implementation in a transitive dependency


Changelog

Sourced from @​rnx-kit/jest-preset's changelog.



0.3.3


Patch Changes



  • 57d86ad: Replaced find-up with the implementation in a transitive dependency


Commits

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​rnx-kit/jest-preset since your current version.


Updates semver from 7.8.2 to 7.8.5

Release notes

Sourced from semver's releases.



v7.8.5



7.8.5 (2026-06-19)


Bug Fixes



v7.8.4



7.8.4 (2026-06-09)


Bug Fixes



v7.8.3



7.8.3 (2026-06-08)


Bug Fixes



Chores



Changelog

Sourced from semver's changelog.




7.8.5 (2026-06-19)


Bug Fixes




7.8.4 (2026-06-09)


Bug Fixes




7.8.3 (2026-06-08)


Bug Fixes



Chores



Commits



  • 6e05b76 chore: release 7.8.5 (#879)


  • 9c8692a fix: include prereleases in tilde range lower bound with includePrerelease (#...


  • 8640bd6 chore: release 7.8.4 (#875)


  • e583226 fix: reject numeric segments after x-ranges


  • 6b77aa8 chore: release 7.8.3 (#873)


  • 3485dda chore: bump @​npmcli/eslint-config from 6.0.1 to 7.0.0 (#866)


  • 046da7f fix: align caret includePrerelease lower bounds (#872)

  • See full diff in compare view


Updates @types/lodash from 4.17.24 to 4.17.25

Commits


Updates metro-runtime from 0.84.4 to 0.84.5

Release notes

Sourced from metro-runtime's releases.



v0.84.5


This release is on the 0.84.x branch



Full Changelog: https://github.com/facebook/metro/compare/v0.84.4...v0.84.5


Commits


Updates metro-source-map from 0.84.4 to 0.84.5

Release notes

Sourced from metro-source-map's releases.



v0.84.5


This release is on the 0.84.x branch



Full Changelog: https://github.com/facebook/metro/compare/v0.84.4...v0.84.5


Commits


Updates @xmldom/xmldom from 0.8.13 to 0.8.15

Release notes

Sourced from @​xmldom/xmldom's releases.



0.8.15


Commits


Fixed



  • Security: parsing a deeply or repeatedly namespaced document no longer consumes quadratic memory; the in-scope namespace map is inherited through the prototype chain instead of being copied for every prefix-declaring element (O(N) instead of O(N²)), preventing a denial-of-service reachable from DOMParser.parseFromString with default options. Serialized output is byte-identical. GHSA-965w-775f-mr7g

  • Security: attribute de-duplication during parsing is now O(M) instead of O(M²); the NamedNodeMap parse-time dedup path uses a null-prototype membership index, so a well-formed document with a hostile number of duplicate attributes can no longer wedge the parse. Attribute order and duplicate resolution (last value wins, first position kept) are byte-identical, preserving the XML no-duplicate-attributes well-formedness constraint. GHSA-8344-3jmq-59r6

  • Security: trimming trailing whitespace from an XML end tag (ETag) is now anchored so it runs in linear time instead of backtracking quadratically on a long whitespace run, preventing a ReDoS reachable from DOMParser.parseFromString. Trimmed output is byte-identical. GHSA-x4fp-j954-r2f4

  • Security: malformed-input recovery is now linear instead of quadratic — the malformed tag-name scan terminates at an embedded <, and Node.prototype.normalize() merges adjacent text nodes in O(K) instead of O(K²) (also reachable programmatically), per normalize() in the WHATWG DOM spec. DOM output is unchanged; only the reported error text differs. GHSA-93r5-fhx6-vmg9

  • Security: XMLSerializer.serializeToString() under { requireWellFormed: true } now rejects a DocType name that is not a valid XML Name, throwing InvalidStateError — matching the sibling publicId/systemId/internalSubset checks and preventing XML injection via DocumentType.name. GHSA-27p8-2357-5qqv

  • Security: XMLSerializer.serializeToString() under { requireWellFormed: true } now validates a processing-instruction target as an XML NCName and rejects a case-insensitive xml, throwing InvalidStateError — a check 0.8.x did not previously perform, preventing PI-target injection via >, ?, or whitespace. GHSA-c7q8-3ch8-vqpv

  • Security: Document.createEntityReference() now rejects an invalid XML Name at creation, and XMLSerializer.serializeToString() under { requireWellFormed: true } validates an EntityReference nodeName as an XML Name, throwing InvalidStateError — preventing XML injection via an entity-reference name. GHSA-6gmq-8vp8-gcm6

  • Security: the parser now reports a not-well-formed end tag whose valid name is followed by trailing content as a recoverable error instead of accepting it silently, per the XML ETag production; parsing recovers to the byte-identical DOM. Consumers that want strict rejection can escalate the reported error to fatal via the parser's errorHandler. GHSA-6h8r-xr42-gp59


Thank you,
@​ericchiang,
@​bhaswanthc,
@​arpitjain099,
@​Paranoidgrinch,
for your contributions


0.8.14


Commits


Fixed



  • Security: XMLSerializer.serializeToString() now also rejects invalid element and attribute names when { requireWellFormed: true } is passed, throwing InvalidStateError for a name that is not a valid XML QName (this covers the namespace prefix, which surfaces in the element qualified name or in a synthesized xmlns: declaration). This prevents XML injection via createElement() / setAttribute(), extending the existing requireWellFormed checks to the serialized name set. GHSA-w2rr-34g9-rvrj GHSA-4w3w-2rp5-g8jm


Thank you,
@​bhaswanthc,
@​jmestwa-coder,
for your contributions


Changelog

Sourced from @​xmldom/xmldom's changelog.



0.8.15


Fixed



  • Security: parsing a deeply or repeatedly namespaced document no longer consumes quadratic memory; the in-scope namespace map is inherited through the prototype chain instead of being copied for every prefix-declaring element (O(N) instead of O(N²)), preventing a denial-of-service reachable from DOMParser.parseFromString with default options. Serialized output is byte-identical. GHSA-965w-775f-mr7g

  • Security: attribute de-duplication during parsing is now O(M) instead of O(M²); the NamedNodeMap parse-time dedup path uses a null-prototype membership index, so a well-formed document with a hostile number of duplicate attributes can no longer wedge the parse. Attribute order and duplicate resolution (last value wins, first position kept) are byte-identical, preserving the XML no-duplicate-attributes well-formedness constraint. GHSA-8344-3jmq-59r6

  • Security: trimming trailing whitespace from an XML end tag (ETag) is now anchored so it runs in linear time instead of backtracking quadratically on a long whitespace run, preventing a ReDoS reachable from DOMParser.parseFromString. Trimmed output is byte-identical. GHSA-x4fp-j954-r2f4

  • Security: malformed-input recovery is now linear instead of quadratic — the malformed tag-name scan terminates at an embedded <, and Node.prototype.normalize() merges adjacent text nodes in O(K) instead of O(K²) (also reachable programmatically), per normalize() in the WHATWG DOM spec. DOM output is unchanged; only the reported error text differs. GHSA-93r5-fhx6-vmg9

  • Security: XMLSerializer.serializeToString() under { requireWellFormed: true } now rejects a DocType name that is not a valid XML Name, throwing InvalidStateError — matching the sibling publicId/systemId/internalSubset checks and preventing XML injection via DocumentType.name. GHSA-27p8-2357-5qqv

  • Security: XMLSerializer.serializeToString() under { requireWellFormed: true } now validates a processing-instruction target as an XML NCName and rejects a case-insensitive xml, throwing InvalidStateError — a check 0.8.x did not previously perform, preventing PI-target injection via >, ?, or whitespace. GHSA-c7q8-3ch8-vqpv

  • Security: Document.createEntityReference() now rejects an invalid XML Name at creation, and XMLSerializer.serializeToString() under { requireWellFormed: true } validates an EntityReference nodeName as an XML Name, throwing InvalidStateError — preventing XML injection via an entity-reference name. GHSA-6gmq-8vp8-gcm6

  • Security: the parser now reports a not-well-formed end tag whose valid name is followed by trailing content as a recoverable error instead of accepting it silently, per the XML ETag production; parsing recovers to the byte-identical DOM. Consumers that want strict rejection can escalate the reported error to fatal via the parser's errorHandler. GHSA-6h8r-xr42-gp59


Thank you,
@​ericchiang,
@​bhaswanthc,
@​arpitjain099,
@​Paranoidgrinch,
for your contributions


0.9.11


Fixed



  • Security: XMLSerializer.serializeToString() now also rejects invalid element and attribute names when { requireWellFormed: true } is passed, throwing InvalidStateError for a name that is not a valid XML QName (this covers the namespace prefix, which surfaces in the element qualified name or in a synthesized xmlns: declaration). This prevents XML injection via createElement() / setAttribute(), extending the existing requireWellFormed checks to the serialized name set. GHSA-w2rr-34g9-rvrj GHSA-4w3w-2rp5-g8jm

  • Security: the processing-instruction grammar regex no longer backtracks quadratically on an unterminated processing instruction (<?… with no closing ?>), preventing a denial-of-service (ReDoS) reachable from DOMParser.parseFromString with default options. GHSA-g53g-w8rj-fmg7


  • CharacterData nodeValue and data are now kept in sync #990


Chore



  • updated dependencies


Thank you,
@​bhaswanthc,
@​jmestwa-coder,
@​stevenobiajulu,
for your contributions


0.8.14


Fixed



  • Security: XMLSerializer.serializeToString() now also rejects invalid element and attribute names when { requireWellFormed: true } is passed, throwing InvalidStateError for a name that is not a valid XML QName (this covers the namespace prefix, which surfaces in the element qualified name or in a synthesized xmlns: declaration). This prevents XML injection via createElement() / setAttribute(), extending the existing requireWellFormed checks to the serialized name set. GHSA-w2rr-34g9-rvrj GHSA-4w3w-2rp5-g8jm


Thank you,
@​bhaswanthc,
@​jmestwa-coder,
for your contributions


0.9.10


<!-- raw HTML omitted -->

... (truncated)

Commits



  • b5b8fb5 0.8.15


  • 327508e docs: add 0.8.15 CHANGELOG entry


  • f40ccb8 fix: prevent quadratic malformed-tag recovery and normalize() adjacent-text m...


  • 3abb093 fix: prevent end-tag whitespace-trim ReDoS via anchored trim (GHSA-x4fp-j954-...


  • 2c548f2 fix: prevent quadratic attribute de-duplication via null-prototype membership...


  • 08a74b4 test: characterize NamedNodeMap attribute de-duplication before the index ref...


  • 954370f fix: prevent quadratic namespace-map memory consumption via prototype-chain i...


  • 4430189 fix: report not-well-formed end-tag trailing content (GHSA-6h8r-xr42-gp59)


  • 6c3fb5f fix: prevent XML injection via unsafe EntityReference name (GHSA-6gmq-8vp8-gcm6)


  • 3b69487 fix: prevent XML injection via unsafe processing instruction target serializa...

  • Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by karfau, a new releaser for @​xmldom/xmldom since your current version.


Updates @microsoft/1ds-core-js from 4.4.1 to 4.4.3

Changelog

Sourced from @​microsoft/1ds-core-js's changelog.



Releases



Note: ES3/IE8 compatibility will be removed in the future v3.x.x releases (scheduled for mid-late 2022), so if you need to retain ES3 compatibility you will need to remain on the 2.x.x versions of the SDK or your runtime will need install polyfill's to your ES3 environment before loading / initializing the SDK.



<!-- raw HTML omitted -->

3.4.3 (July 2nd, 2026)


This is a maintenance release for the 3.4.x version line adding a new SDK statistics feature, a PostChannel reliability fix, and dependency security hardening. The @microsoft/1ds-post-js channel is numbered 4.4.3 and requires v3.4.3.


Significant Changes (since 3.4.2)




  • Customer SDK Stats: Added a new SdkStats feature that periodically collects internal SDK usage/health statistics. It is enabled by default and can be disabled (or explicitly configured) via the featureOptIn configuration (e.g. featureOptIn: { SdkStats: { mode: FeatureOptInMode.disable } }); the collection interval defaults to 15 minutes (sdkStats.int).




  • PostChannel Auto-Flush Stall Fix: Fixed a permanent stall in @microsoft/1ds-post-js where, under sustained intermittent send failures (e.g. a load balancer returning occasional 503s), auto flush could wedge behind the flush() wait-for-idle timer and permanently stop draining the in-memory queue — causing telemetry to be silently dropped as QueueFull until the process was restarted. Auto flush is now fire-and-forget and no longer parks the scheduler waiting for the manager to become completely idle.




  • Dependency Security Hardening: Pinned tar to >=7.5.16 to remediate CVE-2026-53655 and resolved the remaining npm audit findings in build tooling via dependency overrides (js-yaml, yaml, markdown-it, linkify-it). These are build/tooling changes and do not affect the published runtime packages.




Changelog




  • #2746 Fix PostChannel auto-flush permanent stall under sustained intermittent send failures


  • #2745 fix(security): pin tar >=7.5.16 to remediate CVE-2026-53655


  • #2707 Enable Customer SDK Stats

  • Resolve remaining npm audit findings via dependency overrides (js-yaml, yaml, markdown-it, linkify-it)


Full Changelog: https://github.com/microsoft/ApplicationInsights-JS/compare/3.4.2...3.4.3


3.4.2 (June 18th, 2026)


This is a maintenance release for the 3.4.x version line containing security hardening, bug fixes, build tooling improvements, and CI updates. The @microsoft/1ds-post-js channel is numbered 4.4.2 and requires v3.4.2.


Significant Changes (since 3.4.1)




  • Prototype Pollution Hardening: The extend() and objExtend() helpers now filter unsafe keys (proto, constructor, prototype) to prevent prototype pollution when merging untrusted objects.




  • Dependency Vulnerability Resolution: Migrated the repository from npm to pnpm for dependency management and resolved all known dependency vulnerabilities. This is a build/tooling change and does not affect the published runtime packages.




  • OsPlugin Field Name Correction: The OsPlugin now emits the correct Common Schema 4.0 field names (ext.os.name and ext.os.ver). Telemetry consumers relying on the previously emitted (incorrect) field names should update to the corrected names.




  • RequestEnvelopeCreator Envelope Name Fix: Fixed RequestEnvelopeCreator so request telemetry is sent with the correct envelope name (Microsoft.ApplicationInsights.{ikey}.Request) instead of RequestData.




  • Offline Channel Reliability: Fixed a missing return after reject() in the offline channel that could lead to a null provider dereference.




  • Fixed [INVALID_ANNOTATION] warnings in Rolldown / Vite 8 consumers (#2736): The per-module dist-es5 output (the package module entry that modern bundlers import) emitted parenthesized PURE tree-shaking annotations with whitespace after the opening parenthesis (e.g. ( /#PURE/"http.")), which stricter bundlers such as Rolldown (Vite 8) rejected. The build now canonicalizes these annotations to the flush form ((/#PURE/"http.")) in the dist-es5 output, accepted by all bundlers while preserving the wrapping parentheses required for older Rollup / Webpack / Terser to tree-shake the constants. This complements #2737, which only normalized the rollup-bundled dist/es5 (main) output.




CI / Tooling




  • Dropped Node.js 16 from CI matrix: Node.js 16 is End-of-Life and several dependencies (e.g. puppeteer, @pnpm/error) now require Node.js 18 or later. The CI pipeline no longer runs against Node.js 16.


  • Added Node.js 22 and 24 to CI matrix: The CI pipeline now tests against Node.js 18, 20, 22, and 24.


  • Migrated from npm to pnpm: Dependency management now uses pnpm.


<!-- raw HTML omitted -->

... (truncated)

Commits


Updates @microsoft/1ds-post-js from 4.4.1 to 4.4.3

Changelog

Sourced from @​microsoft/1ds-post-js's changelog.



Releases



Note: ES3/IE8 compatibility will be removed in the future v3.x.x releases (scheduled for mid-late 2022), so if you need to retain ES3 compatibility you will need to remain on the 2.x.x versions of the SDK or your runtime will need install polyfill's to your ES3 environment before loading / initializing the SDK.



<!-- raw HTML omitted -->

3.4.3 (July 2nd, 2026)


This is a maintenance release for the 3.4.x version line adding a new SDK statistics feature, a PostChannel reliability fix, and dependency security hardening. The @microsoft/1ds-post-js channel is numbered 4.4.3 and requires v3.4.3.


Significant Changes (since 3.4.2)




  • Customer SDK Stats: Added a new SdkStats feature that periodically collects internal SDK usage/health statistics. It is enabled by default and can be disabled (or explicitly configured) via the featureOptIn configuration (e.g. featureOptIn: { SdkStats: { mode: FeatureOptInMode.disable } }); the collection interval defaults to 15 minutes (sdkStats.int).




  • PostChannel Auto-Flush Stall Fix: Fixed a permanent stall in @microsoft/1ds-post-js where, under sustained intermittent send failures (e.g. a load balancer returning occasional 503s), auto flush could wedge behind the flush() wait-for-idle timer and permanently stop draining the in-memory queue — causing telemetry to be silently dropped as QueueFull until the process was restarted. Auto flush is now fire-and-forget and no longer parks the scheduler waiting for the manager to become completely idle.




  • Dependency Security Hardening: Pinned tar to >=7.5.16 to remediate CVE-2026-53655 and resolved the remaining npm audit findings in build tooling via dependency overrides (js-yaml, yaml, markdown-it, linkify-it). These are build/tooling changes and do not affect the published runtime packages.




Changelog




  • #2746 Fix PostChannel auto-flush permanent stall under sustained intermittent send failures


  • #2745 fix(security): pin tar >=7.5.16 to remediate CVE-2026-53655


  • #2707 Enable Customer SDK Stats

  • Resolve remaining npm audit findings via dependency overrides (js-yaml, yaml, markdown-it, linkify-it)


Full Changelog: https://github.com/microsoft/ApplicationInsights-JS/compare/3.4.2...3.4.3


3.4.2 (June 18th, 2026)


This is a maintenance release for the 3.4.x version line containing security hardening, bug fixes, build tooling improvements, and CI updates. The @microsoft/1ds-post-js channel is numbered 4.4.2 and requires v3.4.2.


Significant Changes (since 3.4.1)




  • Prototype Pollution Hardening: The extend() and objExtend() helpers now filter unsafe keys (proto, constructor, prototype) to prevent prototype pollution when merging untrusted objects.




  • Dependency Vulnerability Resolution: Migrated the repository from npm to pnpm for dependency management and resolved all known dependency vulnerabilities. This is a build/tooling change and does not affect the published runtime packages.




  • OsPlugin Field Name Correction: The OsPlugin now emits the correct Common Schema 4.0 field names (ext.os.name and ext.os.ver). Telemetry consumers relying on the previously emitted (incorrect) field names should update to the corrected names.




  • RequestEnvelopeCreator Envelope Name Fix: Fixed RequestEnvelopeCreator so request telemetry is sent with the correct envelope name (Microsoft.ApplicationInsights.{ikey}.Request) instead of RequestData.




  • Offline Channel Reliability: Fixed a missing return after reject() in the offline channel that could lead to a null provider dereference.




  • Fixed [INVALID_ANNOTATION] warnings in Rolldown / Vite 8 consumers (#2736): The per-module dist-es5 output (the package module entry that modern bundlers import) emitted parenthesized PURE tree-shaking annotations with whitespace after the opening parenthesis (e.g. ( /#PURE/"http.")), which stricter bundlers such as Rolldown (Vite 8) rejected. The build now canonicalizes these annotations to the flush form ((/#PURE/"http.")) in the dist-es5 output, accepted by all bundlers while preserving the wrapping parentheses required for older Rollup / Webpack / Terser to tree-shake the constants. This complements #2737, which only normalized the rollup-bundled dist/es5 (main) output.




CI / Tooling




  • Dropped Node.js 16 from CI matrix: Node.js 16 is End-of-Life and several dependencies (e.g. puppeteer, @pnpm/error) now require Node.js 18 or later. The CI pipeline no longer runs against Node.js 16.


  • Added Node.js 22 and 24 to CI matrix: The CI pipeline now tests against Node.js 18, 20, 22, and 24.


  • Migrated from npm to pnpm: Dependency management now uses pnpm.


<!-- raw HTML omitted -->

... (truncated)

Commits


Updates @microsoft/api-extractor from 7.58.7 to 7.59.0

Changelog

Sourced from @​microsoft/api-extractor's changelog.



7.59.0


Fri, 21 Aug 2026 15:16:34 GMT


Minor changes



  • Report a new ae-unresolved-import-path message when an inline import() type with a relative path cannot be resolved, instead of silently emitting the unusable path into the .d.ts rollup.


7.58.13


Thu, 20 Aug 2026 00:16:38 GMT


Version update only


7.58.12


Tue, 21 Jul 2026 02:53:22 GMT


Patches



  • Improve the performance of the internal excerpt token condensing algorithm from O(n^2) to O(n) by eliminating repeated array splicing and per-merge bookkeeping.


7.58.11


Fri, 17 Jul 2026 00:15:59 GMT


Version update only


7.58.10


Thu, 16 Jul 2026 00:16:13 GMT


Version update only


7.58.9


Sat, 13 Jun 2026 00:16:18 GMT


Version update only


7.58.8


Mon, 08 Jun 2026 15:15:49 GMT


Patches



  • Add support for new d.ts extension format when using TS moduleResolution 'bundler' or 'nodenext'.


Commits


Updates eslint-plugin-jest from 29.15.2 to 29.16.1

Release notes

Sourced from eslint-plugin-jest's releases.



v29.16.1



29.16.1 (2026-08-12)


Bug Fixes




  • prefer-comparison-matcher: don't crash on expect chain without a value (#2001) (a4d20e0)


  • prefer-expect-resolves: don't crash on expect chain without a value (#2002) (0cf65de)


v29.16.0



29.16.0 (2026-07-24)


Features




  • valid-expect-with-promise: add checkThenables option for custom promises (#1996) (692c748)


v29.15.5



29.15.5 (2026-07-20)


Bug Fixes



  • allow TypeScript v7 as a peer dependency (#1992) (155ba2e)


v29.15.4



29.15.4 (2026-06-30)


Bug Fixes




  • no-export: don't report on assignment to locals named module (#1976) (da02c0c)


v29.15.3



29.15.3 (2026-06-26)


Bug Fixes




  • no-export: treat describe blocks as test files (#1978) (70568b0)


Changelog

Sourced from eslint-plugin-jest's changelog.




29.16.1 (2026-08-12)


Bug Fixes




  • prefer-comparison-matcher: don't crash on expect chain without a value (#2001) (a4d20e0)


  • prefer-expect-resolves: don't crash on expect chain without a value (#2002) (0cf65de)



29.16.0 (2026-07-24)


Features




  • valid-expect-with-promise: add checkThenables option for custom promises (#1996) (692c748)



29.15.5 (2026-07-20)


Bug Fixes



  • allow TypeScript v7 as a peer dependency (#1992) (155ba2e)



29.15.4 (2026-06-30)


Bug Fixes




  • no-export: don't report on assignment to locals named module (#1976) (da02c0c)



29.15.3 (2026-06-26)


Bug Fixes




  • no-export: treat describe blocks as test files (#1978) (70568b0)


Commits



  • 6ee8626 chore(release): 29.16.1 [skip ci]


  • 0cf65de fix(prefer-expect-resolves): don't crash on expect chain without a value (#...


  • a4d20e0 fix(prefer-comparison-matcher): don't crash on expect chain without a value...


  • 5a6fb45 chore(deps): lock file maintenance (#1999)


  • 91a5417 chore(deps): update actions/checkout action to v7.0.1 (#1991)


  • 82a7ff7 chore(deps): update yarn to v4.18.0 (#1998)


  • 45e3b60 chore(deps): update semantic-release monorepo (#1995)


  • d009793 chore(deps): lock file maintenance (#1985)


  • fea9636 ci: pull Danger from pre-built docker images in GHCR (#1852)


  • 98206fb chore(release): 29.16.0 [skip ci]

  • Additional commits viewable in compare view


Updates memfs from 4.57.6 to 4.68.1

Release notes

Sourced from memfs's releases.



Release v4.68.1


What's Changed



Full Changelog: <a ...

Description has been truncated
###### Microsoft Reviewers: Open in CodeFlow


1 total changed file
(1 file ignored)
Congrats, you've cleared the final file
Consider your review checksum validated.
GitClear uses cookies to ensure you get the best experience on our website. Learn more about our cookie policy