This pull request's diff hasn't been prepared yet. Log in with GitHub to have us prepare it for review.

Home » Oreps » React Native Windows » All Pull Requests » #16474
microsoft/react-native-windows
A framework for building native Windows apps with React.
Watch
0
Commit Activity
Pull Requests
Directory Browser
Velocity History
Releases

📦 [0.84]: Bump the all-dependencies group across 1 directory with 23 updates #16474

Compare code on GitHub
Open
dependabot[bot] opened 4:16pm on October 7, 2026 wants to merge 2 commits into microsoft/react-native-windows 0.84-stable from
dependabot/npm_and_yarn/0.84-stable/all-dependencies-a82b92e059

Pull Request Overview

  • Opened on October 8, 2026
  • Status Open
  • Commit count 2 with first commit October 8, 2026

Total Delta

0 Total Diff Delta

Open Days

Open 22 weekdays

Test Delta

0 Diff Delta in Test Files
Breakdown by Phase

How long has this pull request spent in each phase of its lifecycle?

Fraction of total time Business days Phase
 
 0.0 days Authoring 1 commit before pull request opened for review
 
 0.0 days Awaiting first review
 
 22.0 days Revising work with 1 commit in response to 2 reviews that left 3 comments

Total time for pull request still awaiting merge (longer than repo's target): 22.0 business days

Author avatar

📦 [0.84]: Bump the all-dependencies group across 1 directory with 23 updates

Bumps the all-dependencies group with 23 updates in the / directory:

Package
From
To

beachball
2.65.5
2.66.0

lage
2.15.12
2.17.0

ts-jest
29.4.11
29.4.14

@types/react
19.2.15
19.2.18

@rnx-kit/jest-preset
0.3.2
0.3.3

semver
7.8.1
7.8.5

@types/async
3.2.25
3.2.26

@types/lodash
4.17.24
4.17.25

@types/react-test-renderer
19.1.0
19.3.0

metro-runtime
0.83.7
0.83.8

metro-source-map
0.83.7
0.83.8

tinyglobby
0.2.16
0.2.17

@microsoft/1ds-core-js
4.4.1
4.4.4

@microsoft/1ds-post-js
4.4.1
4.4.4

@expo/spawn-async
1.7.2
1.8.0

@microsoft/api-extractor
7.55.1
7.59.3

eslint-plugin-jest
29.10.1
29.16.6

memfs
4.56.10
4.80.0

metro-babel-register
0.83.3
0.83.8

metro-transform-plugins
0.83.4
0.83.8

shell-quote
1.8.4
1.11.0

@rnx-kit/metro-config
2.2.4
2.2.6

screenshot-desktop
1.15.4
1.15.6

Updates beachball from 2.65.5 to 2.66.0

Changelog

Sourced from beachball's changelog.



2.66.0


Wed, 09 Sep 2026 03:05:57 GMT


Minor changes



2.65.6


Tue, 25 Aug 2026 01:40:36 GMT


Patches



Commits

Attestation changes

This version has no provenance attestation, while the previous version (2.65.5) was attested. Review the package versions before updating.


Updates lage from 2.15.12 to 2.17.0

Commits


Updates ts-jest from 29.4.11 to 29.4.14

Release notes

Sourced from ts-jest's releases.



v29.4.14


Please refer to CHANGELOG.md for details.


v29.4.13


Please refer to CHANGELOG.md for details.


v29.4.12


Please refer to CHANGELOG.md for details.


Changelog

Sourced from ts-jest's changelog.




29.4.14 (2026-09-25)


Reverts




29.4.13 (2026-09-22)


Features



Performance Improvements




29.4.12 (2026-07-22)


Features




  • compiler: support TypeScript 7 projects through compatibility aliases (#5386)


Commits



  • 2d152f6 chore(release): 29.4.14


  • 01e5a2e revert: bring back prior changes of compiler util (#5471)


  • 8e35da6 build(deps): update dependency typescript-eslint to ^8.70.1


  • 76ec454 build(deps): bump image-size from 2.0.2 to 2.0.4 in /website


  • a0c364f chore(release): 29.4.13


  • 697d337 perf(compiler): cache module resolution modes (#5419)


  • c3a0b57 feat: support Babel 8 (#5466)


  • 5fb44c4 build(deps): update dependency jest-environment-jsdom to ^30.5.2


  • 257a524 build(deps): update dependency jest to v30.5.2


  • 89ba4d9 build(deps): update dependency babel-jest to ^30.5.2

  • Additional commits viewable in compare view


Updates @types/react from 19.2.15 to 19.2.18

Commits


Updates @rnx-kit/jest-preset from 0.3.2 to 0.3.3

Release notes

Sourced from @​rnx-kit/jest-preset's releases.




@​rnx-kit/jest-preset@​0.3.3


Patch Changes



  • 57d86ad: Replaced find-up with the implementation in a transitive dependency


Changelog

Sourced from @​rnx-kit/jest-preset's changelog.



0.3.3


Patch Changes



  • 57d86ad: Replaced find-up with the implementation in a transitive dependency


Commits

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​rnx-kit/jest-preset since your current version.


Updates semver from 7.8.1 to 7.8.5

Release notes

Sourced from semver's releases.



v7.8.5



7.8.5 (2026-06-19)


Bug Fixes



v7.8.4



7.8.4 (2026-06-09)


Bug Fixes



v7.8.3



7.8.3 (2026-06-08)


Bug Fixes



Chores



v7.8.2



7.8.2 (2026-06-04)


Bug Fixes



Changelog

Sourced from semver's changelog.




7.8.5 (2026-06-19)


Bug Fixes




7.8.4 (2026-06-09)


Bug Fixes




7.8.3 (2026-06-08)


Bug Fixes



Chores




7.8.2 (2026-06-04)


Bug Fixes



Commits


Updates @types/async from 3.2.25 to 3.2.26

Commits


Updates @types/lodash from 4.17.24 to 4.17.25

Commits


Updates @types/react-test-renderer from 19.1.0 to 19.3.0

Commits


Updates metro-runtime from 0.83.7 to 0.83.8

Release notes

Sourced from metro-runtime's releases.



v0.83.8


This release is on the 0.83.x branch



Full Changelog: https://github.com/facebook/metro/compare/v0.83.7...v0.83.8


Commits


Updates metro-source-map from 0.83.7 to 0.83.8

Release notes

Sourced from metro-source-map's releases.



v0.83.8


This release is on the 0.83.x branch



Full Changelog: https://github.com/facebook/metro/compare/v0.83.7...v0.83.8


Commits


Updates tinyglobby from 0.2.16 to 0.2.17

Release notes

Sourced from tinyglobby's releases.



0.2.17


Changed



  • Enabled staged publishing for stronger supply-chain security


Fixed



  • Defaults when undefined is passed to any of the options by @​chloeelim

  • Drive-relative paths on Windows by @​Andrej730


  • FileSystemAdapter is now exported again


Consider sponsoring if you'd like to support the development of this project and the goal of reaching a lighter and faster ecosystem


Changelog

Sourced from tinyglobby's changelog.



0.2.17


Changed



  • Enabled staged publishing for stronger supply-chain security


Fixed



  • Defaults when undefined is passed to any of the options by chloeelim

  • Drive-relative paths on Windows by Andrej730


  • FileSystemAdapter is now exported again


Commits


Updates @microsoft/1ds-core-js from 4.4.1 to 4.4.4

Changelog

Sourced from @​microsoft/1ds-core-js's changelog.



Releases



Note: ES3/IE8 compatibility will be removed in the future v3.x.x releases (scheduled for mid-late 2022), so if you need to retain ES3 compatibility you will need to remain on the 2.x.x versions of the SDK or your runtime will need install polyfill's to your ES3 environment before loading / initializing the SDK.



<!-- raw HTML omitted -->

3.4.5 (October 5th, 2026)


This release enables internal SDK network statistics and routes them to a dedicated SDK Stats ingestion endpoint. The @microsoft/1ds-post-js channel is numbered 4.4.5 and requires v3.4.5.


Significant Changes (since 3.4.4)




  • Internal SDK Stats: The full SDK now records request successes, failures, retries, throttling, and request duration. Counters are persisted in session storage by customer instrumentation key and endpoint, with a default collection interval of one hour (stats.shrtInt, in seconds).


  • Dedicated Ingestion and Dynamic Configuration: Internal SDK Stats use a separate core and sender, rather than the customer's telemetry pipeline. Sending requires stats.cfgUrl, stats.iKey, and an enabled remote configuration that supplies the destination host. EU customer endpoints use the EU-prefixed configuration host. Configuration and sampling can be updated at runtime, and counters are retained while remote configuration is unavailable.


  • Feature Throttling: Added ThrottleMgr.useFeature() and string-keyed throttleMgrCfg entries for feature operations. Internal SDK Stats have a dedicated daily throttle, separate from internal diagnostic messages. Throttle sampling now honors a zero rate, interval rules are evaluated per configuration, and long-lived instances can send again on the next eligible UTC day.


  • Sender Unload Reliability: Late network responses no longer access the cleared core configuration when looking up internal SDK Stats after unload.


Potential behavioral changes


The internal SDK Stats manager is enabled by default, but it does not send statistics until the required local or CDN-delivered configuration is available and the remote configuration enables sending. Disable this feature with featureOptIn: { sdkStats: { mode: FeatureOptInMode.disable } }. The lowercase sdkStats feature is separate from the existing customer-facing SdkStats feature and its sdkStats.int collection interval.


Internal SDK Stats bypass customer telemetry initializers and plugins. Applications that use those hooks to inspect, modify, or filter customer telemetry should use the internal SDK Stats feature flag to opt out instead.


Changelog




  • #2741 Enable SDK Stats and route to the SDK Stats ingestion endpoint


Full Changelog: https://github.com/microsoft/ApplicationInsights-JS/compare/3.4.4...3.4.5


3.4.4 (September 8th, 2026)


This is a maintenance release for the 3.4.x version line containing runtime reliability and bundler compatibility fixes, build tooling and dependency security hardening, documentation corrections, and a test reliability fix. There are no SDK API changes. The @microsoft/1ds-post-js channel is numbered 4.4.4 and requires v3.4.4.


Significant Changes (since 3.4.3)




  • ESM XHR Instrumentation: Fixed tree shaking of the XHR capability check so automatic XHR instrumentation is preserved in ESM bundles.


  • Vite 8 and Rolldown Compatibility: Normalized generated PURE annotations by expression so invalid annotations on primitive literals no longer produce warnings, while valid call and new expression annotations remain tree-shakable.


  • OpenTelemetry Async Error Propagation: Fixed startActiveSpan() so promise rejections from asynchronous callbacks propagate to callers instead of being swallowed.


  • Dependency Security Hardening: Resolved the repository's npm audit and Component Governance findings by updating vulnerable transitive build dependencies and replacing Puppeteer's vulnerable extract-zip dependency with a maintained compatible package. Rush was upgraded to 5.178.1 and pnpm to 10.34.5, while API Extractor remains on the latest Node.js 18-compatible release. These are build/tooling changes and do not affect the published runtime code.


  • GitHub Actions Supply-Chain Hardening: Pinned third-party GitHub Actions to full-length commit SHAs and added grouped weekly Dependabot updates with a seven-day cooldown.


Changelog




  • #2768 Fix ESM XHR instrumentation tree shaking


  • #2767 docs: fix Offline Channel setup example


  • #2766 fix: normalize PURE annotations for Vite 8 and Rolldown


  • #2761 fix(deps): remediate Component Governance vulnerabilities


  • #2758 Pin GitHub Actions to full-length commit SHAs


  • #2757 fix(otel): propagate promise rejection from startActiveSpan async callback


  • #2754 fix(test): stabilize flaky SpanLifeCycle custom endTime test


<!-- raw HTML omitted -->

... (truncated)

Commits


Updates @microsoft/1ds-post-js from 4.4.1 to 4.4.4

Changelog

Sourced from @​microsoft/1ds-post-js's changelog.



Releases



Note: ES3/IE8 compatibility will be removed in the future v3.x.x releases (scheduled for mid-late 2022), so if you need to retain ES3 compatibility you will need to remain on the 2.x.x versions of the SDK or your runtime will need install polyfill's to your ES3 environment before loading / initializing the SDK.



<!-- raw HTML omitted -->

3.4.5 (October 5th, 2026)


This release enables internal SDK network statistics and routes them to a dedicated SDK Stats ingestion endpoint. The @microsoft/1ds-post-js channel is numbered 4.4.5 and requires v3.4.5.


Significant Changes (since 3.4.4)




  • Internal SDK Stats: The full SDK now records request successes, failures, retries, throttling, and request duration. Counters are persisted in session storage by customer instrumentation key and endpoint, with a default collection interval of one hour (stats.shrtInt, in seconds).


  • Dedicated Ingestion and Dynamic Configuration: Internal SDK Stats use a separate core and sender, rather than the customer's telemetry pipeline. Sending requires stats.cfgUrl, stats.iKey, and an enabled remote configuration that supplies the destination host. EU customer endpoints use the EU-prefixed configuration host. Configuration and sampling can be updated at runtime, and counters are retained while remote configuration is unavailable.


  • Feature Throttling: Added ThrottleMgr.useFeature() and string-keyed throttleMgrCfg entries for feature operations. Internal SDK Stats have a dedicated daily throttle, separate from internal diagnostic messages. Throttle sampling now honors a zero rate, interval rules are evaluated per configuration, and long-lived instances can send again on the next eligible UTC day.


  • Sender Unload Reliability: Late network responses no longer access the cleared core configuration when looking up internal SDK Stats after unload.


Potential behavioral changes


The internal SDK Stats manager is enabled by default, but it does not send statistics until the required local or CDN-delivered configuration is available and the remote configuration enables sending. Disable this feature with featureOptIn: { sdkStats: { mode: FeatureOptInMode.disable } }. The lowercase sdkStats feature is separate from the existing customer-facing SdkStats feature and its sdkStats.int collection interval.


Internal SDK Stats bypass customer telemetry initializers and plugins. Applications that use those hooks to inspect, modify, or filter customer telemetry should use the internal SDK Stats feature flag to opt out instead.


Changelog




  • #2741 Enable SDK Stats and route to the SDK Stats ingestion endpoint


Full Changelog: https://github.com/microsoft/ApplicationInsights-JS/compare/3.4.4...3.4.5


3.4.4 (September 8th, 2026)


This is a maintenance release for the 3.4.x version line containing runtime reliability and bundler compatibility fixes, build tooling and dependency security hardening, documentation corrections, and a test reliability fix. There are no SDK API changes. The @microsoft/1ds-post-js channel is numbered 4.4.4 and requires v3.4.4.


Significant Changes (since 3.4.3)




  • ESM XHR Instrumentation: Fixed tree shaking of the XHR capability check so automatic XHR instrumentation is preserved in ESM bundles.


  • Vite 8 and Rolldown Compatibility: Normalized generated PURE annotations by expression so invalid annotations on primitive literals no longer produce warnings, while valid call and new expression annotations remain tree-shakable.


  • OpenTelemetry Async Error Propagation: Fixed startActiveSpan() so promise rejections from asynchronous callbacks propagate to callers instead of being swallowed.


  • Dependency Security Hardening: Resolved the repository's npm audit and Component Governance findings by updating vulnerable transitive build dependencies and replacing Puppeteer's vulnerable extract-zip dependency with a maintained compatible package. Rush was upgraded to 5.178.1 and pnpm to 10.34.5, while API Extractor remains on the latest Node.js 18-compatible release. These are build/tooling changes and do not affect the published runtime code.


  • GitHub Actions Supply-Chain Hardening: Pinned third-party GitHub Actions to full-length commit SHAs and added grouped weekly Dependabot updates with a seven-day cooldown.


Changelog




  • #2768 Fix ESM XHR instrumentation tree shaking


  • #2767 docs: fix Offline Channel setup example


  • #2766 fix: normalize PURE annotations for Vite 8 and Rolldown


  • #2761 fix(deps): remediate Component Governance vulnerabilities


  • #2758 Pin GitHub Actions to full-length commit SHAs


  • #2757 fix(otel): propagate promise rejection from startActiveSpan async callback


  • #2754 fix(test): stabilize flaky SpanLifeCycle custom endTime test


<!-- raw HTML omitted -->

... (truncated)

Commits


Updates @expo/spawn-async from 1.7.2 to 1.8.0

Release notes

Sourced from @​expo/spawn-async's releases.



v1.8.0


Changes




  • stdout and stderr are now getters that will concatenate strings on demand from collected stdout/stderr chunks (#55)


  • maxBuffer may now be passed to set a limit for how many characters/bytes are accepted on stdout/stderr. The command aborts and an error is thrown when this limit is exceeded (#55)


Fixes




  • spawnAsync prevents exceeding maximum V8 string length and exposes a cut-off stdout and stderr on the corresponding error when the maximum string length is exceeded (#55)


Dependencies



Commits



  • 5a3013e v1.8.0


  • 1b05ba2 chore: Bump to cross-spawn@^7.0.6


  • 350383c hotfix: Post-review cleanups for #55


  • 0a6de17 fix: Add maxBuffer option and enforce MAX_STRING_LENGTH on stdout and `...


  • 77e5ef5 Bump micromatch from 4.0.5 to 4.0.8


  • 8c1c4e1 Bump picomatch from 2.3.1 to 2.3.2


  • c7fd23c Bump minimatch from 3.1.2 to 3.1.5


  • 18ac30a Bump js-yaml from 3.14.1 to 3.14.2


  • 02ae7e6 Bump cross-spawn from 7.0.3 to 7.0.5


  • 2482482 Bump braces from 3.0.2 to 3.0.3

  • Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by philpl, a new releaser for @​expo/spawn-async since your current version.


Updates @microsoft/api-extractor from 7.55.1 to 7.59.3

Changelog

Sourced from @​microsoft/api-extractor's changelog.



7.59.3


Mon, 28 Sep 2026 20:08:26 GMT


Version update only


7.59.2


Tue, 22 Sep 2026 17:35:41 GMT


Patches



  • Update the @microsoft/tsdoc dependency to ~0.17.0 and the @microsoft/tsdoc-config dependency to ~0.18.2.


7.59.1


Sat, 05 Sep 2026 00:15:08 GMT


Version update only


7.59.0


Fri, 21 Aug 2026 15:16:34 GMT


Minor changes



  • Report a new ae-unresolved-import-path message when an inline import() type with a relative path cannot be resolved, instead of silently emitting the unusable path into the .d.ts rollup.


7.58.13


Thu, 20 Aug 2026 00:16:38 GMT


Version update only


7.58.12


Tue, 21 Jul 2026 02:53:22 GMT


Patches



  • Improve the performance of the internal excerpt token condensing algorithm from O(n^2) to O(n) by eliminating repeated array splicing and per-merge bookkeeping.


7.58.11


Fri, 17 Jul 2026 00:15:59 GMT


Version update only


7.58.10


Thu, 16 Jul 2026 00:16:13 GMT


Version update only


7.58.9


Sat, 13 Jun 2026 00:16:18 GMT


Version update only


<!-- raw HTML omitted -->

... (truncated)

Commits

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @​microsoft/api-extractor since your current version.


Updates eslint-plugin-jest from 29.10.1 to 29.16.6

Release notes

Sourced from eslint-plugin-jest's releases.



v29.16.6



29.16.6 (2026-08-30)


Bug Fixes




  • prefer-to-have-been-called: don't crash on matcher without an argument (#2016) (58e487f)


  • prefer-to-have-length: don't crash on expect chain without a value (#2014) (3629019)


v29.16.5



29.16.5 (2026-08-27)


Bug Fixes




  • no-export: handle literal property accessors (#2011) (d848f70)


v29.16.4



29.16.4 (2026-08-27)


Bug Fixes




  • no-export: handle nested assignment chains (#2009) (14b559a)


v29.16.3



29.16.3 (2026-08-27)


Bug Fixes



v29.16.2



29.16.2 (2026-08-25)


Bug Fixes




  • prefer-equality-matcher: don't crash on expect chain without a value (#2006) (27665cd)


v29.16.1



29.16.1 (2026-08-12)


Bug Fixes




  • prefer-comparison-matcher: don't crash on expect chain without a value (#2001) (a4d20e0)


  • prefer-expect-resolves: don't crash on expect chain without a value (#2002) (0cf65de)


<!-- raw HTML omitted -->

... (truncated)

Changelog

Sourced from eslint-plugin-jest's changelog.




29.16.6 (2026-08-30)


Bug Fixes




  • prefer-to-have-been-called: don't crash on matcher without an argument (#2016) (58e487f)


  • prefer-to-have-length: don't crash on expect chain without a value (#2014) (3629019)



29.16.5 (2026-08-27)


Bug Fixes




  • no-export: handle literal property accessors (#2011) (d848f70)



29.16.4 (2026-08-27)


Bug Fixes




  • no-export: handle nested assignment chains (#2009) (14b559a)



29.16.3 (2026-08-27)


Bug Fixes




29.16.2 (2026-08-25)


Bug Fixes




  • prefer-equality-matcher: don't crash on expect chain without a value (#2006) (27665cd)



29.16.1 (2026-08-12)


Bug Fixes




  • prefer-comparison-matcher: don't crash on expect chain without a value (#2001) (a4d20e0)


  • prefer-expect-resolves: don't crash on expect chain without a value (#2002) (0cf65de)



29.16.0 (2026-07-24)


Features




  • valid-expect-with-promise: add checkThenables option for custom promises (#1996) (692c748)


<!-- raw HTML omitted -->

... (truncated)

Commits



  • 94076f0 chore(release): 29.16.6 [skip ci]


  • 58e487f fix(prefer-to-have-been-called): don't crash on matcher without an argument (...


  • 3629019 fix(prefer-to-have-length): don't crash on expect chain without a value (#2...


  • 197f341 refactor(valid-expect): use optional chaining (#2015)


  • 6e6e9a2 chore(deps): update ghcr.io/danger/danger-js docker digest to 6b75ca3 (#2005)


  • b1c0328 chore(release): 29.16.5 [skip ci]


  • d848f70 fix(no-export): handle literal property accessors (#2011)


  • fc5657c refactor: use replaceText in fixers when possible (#2012)


  • 6156650 chore(release): 29.16.4 [skip ci]


  • 14b559a fix(no-export): handle nested assignment chains (#2009)

  • Additional commits viewable in compare view


Updates memfs from 4.56.10 to 4.80.0

Release notes

Sourced from memfs's releases.



Release v4.80.0


What's Changed



New Contributors



Full Changelog: https://github.com/streamich/memfs/compare/v4.79.0...v4.80.0


Release v4.79.0


What's Changed



Full Changelog: https://github.com/streamich/memfs/compare/v4.78.1...v4.79.0


Release v4.78.1


What's Changed



Full Changelog: https://github.com/streamich/memfs/compare/v4.78.0...v4.78.1


Release v4.78.0


What's Changed



Full Changelog: https://github.com/streamich/memfs/compare/v4.77.0...v4.78.0


Release v4.77.0


What's Changed



Full Changelog: https://github.com/streamich/memfs/compare/v4.76.0...v4.77.0


Release v4.76.0


What's Changed



Full Changelog: https://github.com/streamich/memfs/compare/v4.75.0...v4.76.0


Release v4.75.0


What's Changed



Full Changelog: https://github.com/streamich/memfs/compare/v4.74.0...v4.75.0


<!-- raw HTML omitted -->

... (truncated)

Commits



  • adae41a chore: release v4.80.0


  • d9cfa18 Merge pull request #1298 from Firatakti/codex/fsa-sync-timeout


  • fe75fbc feat: allow configuring the synchronous FSA worker timeout


  • 02dc814 chore: release v4.79.0


  • bfebfdd Merge pull request #1297 from streamich/fix-improve-fsa-error-handling


  • 55bc790 fix: 🐛 harden stream close beha...

Description has been truncated
###### Microsoft Reviewers: Open in CodeFlow

Comments Threads Pending Resolution

ljharb reviewed on October 8, 2026
ljharb left a comment

Copilot wasn't able to review any files in this pull request. Check if the **Files changed** in this pull request are included in [default exclusions](https://docs.github.com/en/copilot/reference/review-excluded-files).

Resolved Comment Threads

No resolved comments have been left on this PR.

GitClear uses cookies to ensure you get the best experience on our website. Learn more about our cookie policy