Home » Oreps » React Native Windows » All Pull Requests » #16495
microsoft/react-native-windows
A framework for building native Windows apps with React.
Watch
0
Commit Activity
Pull Requests
Directory Browser
Velocity History
Releases

📦 [0.84]: Bump the all-dependencies group across 1 directory with 24 updates #16495

Compare code on GitHub
Open
dependabot[bot] opened 4:20am on October 21, 2026 wants to merge 1 commit into microsoft/react-native-windows 0.84-stable from
dependabot/npm_and_yarn/0.84-stable/all-dependencies-b00f376284

Pull Request Overview

  • Opened on October 21, 2026
  • Status Open
  • Commit count 1 with first commit October 23, 2026

Total Delta

0 Total Diff Delta

Open Days

Open 13 weekdays

Test Delta

0 Diff Delta in Test Files
Breakdown by Phase

How long has this pull request spent in each phase of its lifecycle?

Fraction of total time Business days Phase
 
 0.0 days Authoring 0 commits before pull request opened for review
 
 0.0 days Awaiting first review
 
 13.0 days Revising work with 1 commit in response to 3 reviews that left 8 comments

Total time for pull request still awaiting merge (longer than repo's target): 13.0 business days

Author avatar

📦 [0.84]: Bump the all-dependencies group across 1 directory with 24 updates

Bumps the all-dependencies group with 24 updates in the / directory:

Package
From
To

beachball
2.65.5
2.66.0

lage
2.15.12
2.17.0

ts-jest
29.4.11
29.4.15

@types/react
19.2.15
19.2.18

@rnx-kit/jest-preset
0.3.2
0.3.3

semver
7.8.1
7.8.5

@types/async
3.2.25
3.2.26

@types/lodash
4.17.24
4.17.26

@types/react-test-renderer
19.1.0
19.3.0

metro-runtime
0.83.7
0.83.8

metro-source-map
0.83.7
0.83.8

tinyglobby
0.2.16
0.2.17

@microsoft/1ds-core-js
4.4.1
4.4.5

@microsoft/1ds-post-js
4.4.1
4.4.5

@expo/spawn-async
1.7.2
1.8.0

@microsoft/api-extractor
7.55.1
7.59.4

eslint-plugin-jest
29.10.1
29.17.0

memfs
4.56.10
4.80.0

metro-babel-register
0.83.3
0.83.8

metro-transform-plugins
0.83.4
0.83.8

shell-quote
1.8.4
1.12.0

resolve
1.22.12
1.22.13

@rnx-kit/metro-config
2.2.4
2.2.6

screenshot-desktop
1.15.4
1.15.7

Updates beachball from 2.65.5 to 2.66.0

Changelog

Sourced from beachball's changelog.



2.66.0


Wed, 09 Sep 2026 03:05:57 GMT


Minor changes



2.65.6


Tue, 25 Aug 2026 01:40:36 GMT


Patches



Commits

Attestation changes

This version has no provenance attestation, while the previous version (2.65.5) was attested. Review the package versions before updating.


Updates lage from 2.15.12 to 2.17.0

Commits


Updates ts-jest from 29.4.11 to 29.4.15

Release notes

Sourced from ts-jest's releases.



v29.4.15


Please refer to CHANGELOG.md for details.


v29.4.14


Please refer to CHANGELOG.md for details.


v29.4.13


Please refer to CHANGELOG.md for details.


v29.4.12


Please refer to CHANGELOG.md for details.


Changelog

Sourced from ts-jest's changelog.




29.4.15 (2026-10-15)


Bug Fixes




  • compiler: resolve modules with tsconfig options regardless of cache state (268746c), closes #5216

  • support .cjs config files in config:migrate (4001b4e), closes #4485



29.4.14 (2026-09-25)


Reverts




29.4.13 (2026-09-22)


Features



Performance Improvements




29.4.12 (2026-07-22)


Features




  • compiler: support TypeScript 7 projects through compatibility aliases (#5386)


Commits



  • 197d4de chore(release): 29.4.15


  • ebad800 build(deps): update dependency node to v24.22.0


  • e5f6e98 test(compiler): clean up temp dirs from module resolution tests


  • 77dbb18 test(compiler): make module resolution tests path-independent on Windows


  • 268746c fix(compiler): resolve modules with tsconfig options regardless of cache state


  • 1536201 build(deps): update dependency vite to ^8.3.4


  • 141e39c build(deps): update dependency @​babel/core to ^8.0.7


  • 6a6686e build(deps-dev): bump shell-quote from 1.10.0 to 1.12.0 in /examples


  • 98e6e50 build(deps): bump proxy-addr from 2.0.7 to 2.0.8 in /website


  • d2439ff build(deps): bump compression from 1.8.1 to 1.8.2 in /website

  • Additional commits viewable in compare view


Updates @types/react from 19.2.15 to 19.2.18

Commits


Updates @rnx-kit/jest-preset from 0.3.2 to 0.3.3

Release notes

Sourced from @​rnx-kit/jest-preset's releases.




@​rnx-kit/jest-preset@​0.3.3


Patch Changes



  • 57d86ad: Replaced find-up with the implementation in a transitive dependency


Changelog

Sourced from @​rnx-kit/jest-preset's changelog.



0.3.3


Patch Changes



  • 57d86ad: Replaced find-up with the implementation in a transitive dependency


Commits

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​rnx-kit/jest-preset since your current version.


Updates semver from 7.8.1 to 7.8.5

Release notes

Sourced from semver's releases.



v7.8.5



7.8.5 (2026-06-19)


Bug Fixes



v7.8.4



7.8.4 (2026-06-09)


Bug Fixes



v7.8.3



7.8.3 (2026-06-08)


Bug Fixes



Chores



v7.8.2



7.8.2 (2026-06-04)


Bug Fixes



Changelog

Sourced from semver's changelog.




7.8.5 (2026-06-19)


Bug Fixes




7.8.4 (2026-06-09)


Bug Fixes




7.8.3 (2026-06-08)


Bug Fixes



Chores




7.8.2 (2026-06-04)


Bug Fixes



Commits


Updates @types/async from 3.2.25 to 3.2.26

Commits


Updates @types/lodash from 4.17.24 to 4.17.26

Commits


Updates @types/react-test-renderer from 19.1.0 to 19.3.0

Commits


Updates metro-runtime from 0.83.7 to 0.83.8

Release notes

Sourced from metro-runtime's releases.



v0.83.8


This release is on the 0.83.x branch



Full Changelog: https://github.com/facebook/metro/compare/v0.83.7...v0.83.8


Commits


Updates metro-source-map from 0.83.7 to 0.83.8

Release notes

Sourced from metro-source-map's releases.



v0.83.8


This release is on the 0.83.x branch



Full Changelog: https://github.com/facebook/metro/compare/v0.83.7...v0.83.8


Commits


Updates tinyglobby from 0.2.16 to 0.2.17

Release notes

Sourced from tinyglobby's releases.



0.2.17


Changed



  • Enabled staged publishing for stronger supply-chain security


Fixed



  • Defaults when undefined is passed to any of the options by @​chloeelim

  • Drive-relative paths on Windows by @​Andrej730


  • FileSystemAdapter is now exported again


Consider sponsoring if you'd like to support the development of this project and the goal of reaching a lighter and faster ecosystem


Changelog

Sourced from tinyglobby's changelog.



0.2.17


Changed



  • Enabled staged publishing for stronger supply-chain security


Fixed



  • Defaults when undefined is passed to any of the options by chloeelim

  • Drive-relative paths on Windows by Andrej730


  • FileSystemAdapter is now exported again


Commits


Updates @microsoft/1ds-core-js from 4.4.1 to 4.4.5

Changelog

Sourced from @​microsoft/1ds-core-js's changelog.



Releases



Note: ES3/IE8 compatibility will be removed in the future v3.x.x releases (scheduled for mid-late 2022), so if you need to retain ES3 compatibility you will need to remain on the 2.x.x versions of the SDK or your runtime will need install polyfill's to your ES3 environment before loading / initializing the SDK.



Unreleased Changes


Bug Fixes



  • Automatic payload compression is now limited to recognized Microsoft Application Insights ingestion endpoints. Custom endpoints and
    ingestion proxies continue to receive JSON request bodies unless enableCompressionForCustomEndpoint is explicitly enabled for a
    gzip-capable endpoint.

  • Added the versioned zipPayloadV2 feature flag for safe CDN rollout. Older SDKs ignore this key. Rollout must ship and gain adoption
    for the patched SDK first, then publish a new CDN configuration using zipPayloadV2 while leaving legacy zipPayload absent. The
    legacy key remains supported for customer compatibility and uses the same endpoint safety checks.

  • Payload headers are isolated per request so a compressed asynchronous send cannot leak Content-Encoding: gzip into a later
    uncompressed synchronous, unload, beacon, or fallback request.


3.4.5 (October 5th, 2026)


This release enables internal SDK network statistics and routes them to a dedicated SDK Stats ingestion endpoint. The @microsoft/1ds-post-js channel is numbered 4.4.5 and requires v3.4.5.


Significant Changes (since 3.4.4)




  • Internal SDK Stats: The full SDK now records request successes, failures, retries, throttling, and request duration. Counters are persisted in session storage by customer instrumentation key and endpoint, with a default collection interval of one hour (stats.shrtInt, in seconds).


  • Dedicated Ingestion and Dynamic Configuration: Internal SDK Stats use a separate core and sender, rather than the customer's telemetry pipeline. Sending requires stats.cfgUrl, stats.iKey, and an enabled remote configuration that supplies the destination host. EU customer endpoints use the EU-prefixed configuration host. Configuration and sampling can be updated at runtime, and counters are retained while remote configuration is unavailable.


  • Feature Throttling: Added ThrottleMgr.useFeature() and string-keyed throttleMgrCfg entries for feature operations. Internal SDK Stats have a dedicated daily throttle, separate from internal diagnostic messages. Throttle sampling now honors a zero rate, interval rules are evaluated per configuration, and long-lived instances can send again on the next eligible UTC day.


  • Sender Unload Reliability: Late network responses no longer access the cleared core configuration when looking up internal SDK Stats after unload.


Potential behavioral changes


The internal SDK Stats manager is enabled by default, but it does not send statistics until the required local or CDN-delivered configuration is available and the remote configuration enables sending. Disable this feature with featureOptIn: { sdkStats: { mode: FeatureOptInMode.disable } }. The lowercase sdkStats feature is separate from the existing customer-facing SdkStats feature and its sdkStats.int collection interval.


Internal SDK Stats bypass customer telemetry initializers and plugins. Applications that use those hooks to inspect, modify, or filter customer telemetry should use the internal SDK Stats feature flag to opt out instead.


Changelog




  • #2741 Enable SDK Stats and route to the SDK Stats ingestion endpoint


Full Changelog: https://github.com/microsoft/ApplicationInsights-JS/compare/3.4.4...3.4.5


3.4.4 (September 8th, 2026)


This is a maintenance release for the 3.4.x version line containing runtime reliability and bundler compatibility fixes, build tooling and dependency security hardening, documentation corrections, and a test reliability fix. There are no SDK API changes. The @microsoft/1ds-post-js channel is numbered 4.4.4 and requires v3.4.4.


Significant Changes (since 3.4.3)




  • ESM XHR Instrumentation: Fixed tree shaking of the XHR capability check so automatic XHR instrumentation is preserved in ESM bundles.


  • Vite 8 and Rolldown Compatibility: Normalized generated PURE annotations by expression so invalid annotations on primitive literals no longer produce warnings, while valid call and new expression annotations remain tree-shakable.


  • OpenTelemetry Async Error Propagation: Fixed startActiveSpan() so promise rejections from asynchronous callbacks propagate to callers instead of being swallowed.


  • Dependency Security Hardening: Resolved the repository's npm audit and Component Governance findings by updating vulnerable transitive build dependencies and replacing Puppeteer's vulnerable extract-zip dependency with a maintained compatible package. Rush was upgraded to 5.178.1 and pnpm to 10.34.5, while API Extractor remains on the latest Node.js 18-compatible release. These are build/tooling changes and do not affect the published runtime code.


<!-- raw HTML omitted -->

... (truncated)

Commits


Updates @microsoft/1ds-post-js from 4.4.1 to 4.4.5

Changelog

Sourced from @​microsoft/1ds-post-js's changelog.



Releases



Note: ES3/IE8 compatibility will be removed in the future v3.x.x releases (scheduled for mid-late 2022), so if you need to retain ES3 compatibility you will need to remain on the 2.x.x versions of the SDK or your runtime will need install polyfill's to your ES3 environment before loading / initializing the SDK.



Unreleased Changes


Bug Fixes



  • Automatic payload compression is now limited to recognized Microsoft Application Insights ingestion endpoints. Custom endpoints and
    ingestion proxies continue to receive JSON request bodies unless enableCompressionForCustomEndpoint is explicitly enabled for a
    gzip-capable endpoint.

  • Added the versioned zipPayloadV2 feature flag for safe CDN rollout. Older SDKs ignore this key. Rollout must ship and gain adoption
    for the patched SDK first, then publish a new CDN configuration using zipPayloadV2 while leaving legacy zipPayload absent. The
    legacy key remains supported for customer compatibility and uses the same endpoint safety checks.

  • Payload headers are isolated per request so a compressed asynchronous send cannot leak Content-Encoding: gzip into a later
    uncompressed synchronous, unload, beacon, or fallback request.


3.4.5 (October 5th, 2026)


This release enables internal SDK network statistics and routes them to a dedicated SDK Stats ingestion endpoint. The @microsoft/1ds-post-js channel is numbered 4.4.5 and requires v3.4.5.


Significant Changes (since 3.4.4)




  • Internal SDK Stats: The full SDK now records request successes, failures, retries, throttling, and request duration. Counters are persisted in session storage by customer instrumentation key and endpoint, with a default collection interval of one hour (stats.shrtInt, in seconds).


  • Dedicated Ingestion and Dynamic Configuration: Internal SDK Stats use a separate core and sender, rather than the customer's telemetry pipeline. Sending requires stats.cfgUrl, stats.iKey, and an enabled remote configuration that supplies the destination host. EU customer endpoints use the EU-prefixed configuration host. Configuration and sampling can be updated at runtime, and counters are retained while remote configuration is unavailable.


  • Feature Throttling: Added ThrottleMgr.useFeature() and string-keyed throttleMgrCfg entries for feature operations. Internal SDK Stats have a dedicated daily throttle, separate from internal diagnostic messages. Throttle sampling now honors a zero rate, interval rules are evaluated per configuration, and long-lived instances can send again on the next eligible UTC day.


  • Sender Unload Reliability: Late network responses no longer access the cleared core configuration when looking up internal SDK Stats after unload.


Potential behavioral changes


The internal SDK Stats manager is enabled by default, but it does not send statistics until the required local or CDN-delivered configuration is available and the remote configuration enables sending. Disable this feature with featureOptIn: { sdkStats: { mode: FeatureOptInMode.disable } }. The lowercase sdkStats feature is separate from the existing customer-facing SdkStats feature and its sdkStats.int collection interval.


Internal SDK Stats bypass customer telemetry initializers and plugins. Applications that use those hooks to inspect, modify, or filter customer telemetry should use the internal SDK Stats feature flag to opt out instead.


Changelog




  • #2741 Enable SDK Stats and route to the SDK Stats ingestion endpoint


Full Changelog: https://github.com/microsoft/ApplicationInsights-JS/compare/3.4.4...3.4.5


3.4.4 (September 8th, 2026)


This is a maintenance release for the 3.4.x version line containing runtime reliability and bundler compatibility fixes, build tooling and dependency security hardening, documentation corrections, and a test reliability fix. There are no SDK API changes. The @microsoft/1ds-post-js channel is numbered 4.4.4 and requires v3.4.4.


Significant Changes (since 3.4.3)




  • ESM XHR Instrumentation: Fixed tree shaking of the XHR capability check so automatic XHR instrumentation is preserved in ESM bundles.


  • Vite 8 and Rolldown Compatibility: Normalized generated PURE annotations by expression so invalid annotations on primitive literals no longer produce warnings, while valid call and new expression annotations remain tree-shakable.


  • OpenTelemetry Async Error Propagation: Fixed startActiveSpan() so promise rejections from asynchronous callbacks propagate to callers instead of being swallowed.


  • Dependency Security Hardening: Resolved the repository's npm audit and Component Governance findings by updating vulnerable transitive build dependencies and replacing Puppeteer's vulnerable extract-zip dependency with a maintained compatible package. Rush was upgraded to 5.178.1 and pnpm to 10.34.5, while API Extractor remains on the latest Node.js 18-compatible release. These are build/tooling changes and do not affect the published runtime code.


<!-- raw HTML omitted -->

... (truncated)

Commits


Updates @expo/spawn-async from 1.7.2 to 1.8.0

Release notes

Sourced from @​expo/spawn-async's releases.



v1.8.0


Changes




  • stdout and stderr are now getters that will concatenate strings on demand from collected stdout/stderr chunks (#55)


  • maxBuffer may now be passed to set a limit for how many characters/bytes are accepted on stdout/stderr. The command aborts and an error is thrown when this limit is exceeded (#55)


Fixes




  • spawnAsync prevents exceeding maximum V8 string length and exposes a cut-off stdout and stderr on the corresponding error when the maximum string length is exceeded (#55)


Dependencies



Commits



  • 5a3013e v1.8.0


  • 1b05ba2 chore: Bump to cross-spawn@^7.0.6


  • 350383c hotfix: Post-review cleanups for #55


  • 0a6de17 fix: Add maxBuffer option and enforce MAX_STRING_LENGTH on stdout and `...


  • 77e5ef5 Bump micromatch from 4.0.5 to 4.0.8


  • 8c1c4e1 Bump picomatch from 2.3.1 to 2.3.2


  • c7fd23c Bump minimatch from 3.1.2 to 3.1.5


  • 18ac30a Bump js-yaml from 3.14.1 to 3.14.2


  • 02ae7e6 Bump cross-spawn from 7.0.3 to 7.0.5


  • 2482482 Bump braces from 3.0.2 to 3.0.3

  • Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by philpl, a new releaser for @​expo/spawn-async since your current version.


Updates @microsoft/api-extractor from 7.55.1 to 7.59.4

Changelog

Sourced from @​microsoft/api-extractor's changelog.



7.59.4


Tue, 06 Oct 2026 00:04:37 GMT


Version update only


7.59.3


Mon, 28 Sep 2026 20:08:26 GMT


Version update only


7.59.2


Tue, 22 Sep 2026 17:35:41 GMT


Patches



  • Update the @microsoft/tsdoc dependency to ~0.17.0 and the @microsoft/tsdoc-config dependency to ~0.18.2.


7.59.1


Sat, 05 Sep 2026 00:15:08 GMT


Version update only


7.59.0


Fri, 21 Aug 2026 15:16:34 GMT


Minor changes



  • Report a new ae-unresolved-import-path message when an inline import() type with a relative path cannot be resolved, instead of silently emitting the unusable path into the .d.ts rollup.


7.58.13


Thu, 20 Aug 2026 00:16:38 GMT


Version update only


7.58.12


Tue, 21 Jul 2026 02:53:22 GMT


Patches



  • Improve the performance of the internal excerpt token condensing algorithm from O(n^2) to O(n) by eliminating repeated array splicing and per-merge bookkeeping.


7.58.11


Fri, 17 Jul 2026 00:15:59 GMT


Version update only


7.58.10


Thu, 16 Jul 2026 00:16:13 GMT


Version update only


<!-- raw HTML omitted -->

... (truncated)

Commits

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @​microsoft/api-extractor since your current version.


Updates eslint-plugin-jest from 29.10.1 to 29.17.0

Release notes

Sourced from eslint-plugin-jest's releases.



v29.17.0



29.17.0 (2026-10-12)


Features




  • no-standalone-expect: allow expect assertions in beforeEach hooks (#2031) (ddcab00)


v29.16.11



29.16.11 (2026-10-10)


Bug Fixes



v29.16.10



29.16.10 (2026-10-10)


Bug Fixes



  • make sure most rules account for optional chaining (#2038) (2d68f61)


v29.16.9



29.16.9 (2026-10-10)


Bug Fixes




  • consistent-test-it: don't drop only and skip from each chains (#2037) (3f6b5aa)


Performance Improvements



  • cache parsing of nodes that turn out not to be jest function calls (#2035) (7b11cbd)


v29.16.8



29.16.8 (2026-10-10)


Bug Fixes




  • prefer-to-have-been-called-times: don't crash if there is no argument passed to expect (#2036) (4dc58f0)


v29.16.7



29.16.7 (2026-10-10)


<!-- raw HTML omitted -->

... (truncated)

Changelog

Sourced from eslint-plugin-jest's changelog.




29.17.0 (2026-10-12)


Features




  • no-standalone-expect: allow expect assertions in beforeEach hooks (#2031) (ddcab00)



29.16.11 (2026-10-10)


Bug Fixes




29.16.10 (2026-10-10)


Bug Fixes



  • make sure most rules account for optional chaining (#2038) (2d68f61)



29.16.9 (2026-10-10)


Bug Fixes




  • consistent-test-it: don't drop only and skip from each chains (#2037) (3f6b5aa)


Performance Improvements



  • cache parsing of nodes that turn out not to be jest function calls (#2035) (7b11cbd)



29.16.8 (2026-10-10)


Bug Fixes




  • prefer-to-have-been-called-times: don't crash if there is no argument passed to expect (#2036) (4dc58f0)



29.16.7 (2026-10-10)


Bug Fixes




  • unbound-method: account for optional chaining (#2034) (b918d73)



29.16.6 (2026-08-30)


<!-- raw HTML omitted -->

... (truncated)

Commits



  • 0d0c459 chore(release): 29.17.0 [skip ci]


  • ddcab00 feat(no-standalone-expect): allow expect assertions in beforeEach hooks (#2031)


  • 69dd5bd chore(deps): lock file maintenance (#2042)


  • 5878acf test: make test.each and it.each cases semantically valid (#2041)


  • 1a7fc77 chore(release): 29.16.11 [skip ci]


  • 3e363d1 fix(no-mocks-import): check dynamic imports (#2039)


  • 3ca13a7 fix(no-export): report export all declarations (#2040)


  • 169fda0 chore(release): 29.16.10 [skip ci]


  • 2d68f61 fix: make sure most rules account for optional chaining (#2038)


  • 68a144d chore(release): 29.16.9 [skip ci]

  • Additional commits viewable in compare view


Updates memfs from 4.56.10 to 4.80.0

Release notes

Sourced from memfs's releases.



Release v4.80.0


What's Changed



New Contributors



Full Changelog: https://github.com/streamich/memfs/compare/v4.79.0...v4.80.0


Release v4.79.0


What's Changed



Full Changelog: https://github.com/streamich/memfs/compare/v4.78.1...v4.79.0


Release v4.78.1


What's Changed



Full Changelog: https://github.com/streamich/memfs/compare/v4.78.0...v4.78.1


Release v4.78.0


What's Changed



Full Changelog: https://github.com/streamich/memfs/compare/v4.77.0...v4.78.0


Release v4.77.0


What's Changed



Full Changelog: https://github.com/streamich/memfs/compare/v4.76.0...v4.77.0


Release v4.76.0


What's Changed



Full Changelog: https://github.com/streamich/memfs/compare/v4.75.0...v4.76.0


Release v4.75.0


What's Changed



Full Changelog: https://github.com/streamich/memfs/compare/v4.74.0...v4.75.0


<!-- raw HTML omitted -->

... (truncated)

Commits

Description has been truncated

Comments Threads Pending Resolution

ljharb reviewed on October 23, 2026
ljharb left a comment

Copilot wasn't able to review any files in this pull request. Check if the **Files changed** in this pull request are included in [default exclusions](https://docs.github.com/en/copilot/reference/review-excluded-files).

ljharb reviewed on October 21, 2026
ljharb left a comment

Copilot wasn't able to review any files in this pull request. Check if the **Files changed** in this pull request are included in [default exclusions](https://docs.github.com/en/copilot/reference/review-excluded-files).

Resolved Comment Threads

No resolved comments have been left on this PR.

GitClear uses cookies to ensure you get the best experience on our website. Learn more about our cookie policy