Bump the test group across 1 directory with 8 updates

[dependabot]

Bumps the test group with 7 updates in the / directory:

Package	From	To
jsdom	24.0.0	26.0.0
vitest	1.4.0	3.0.6
@testing-library/jest-dom	6.4.2	6.6.3
@testing-library/react	14.2.2	16.2.0
cheerio	1.0.0-rc.12	1.0.0
puppeteer	22.11.2	24.2.1
supertest	6.3.4	7.0.0

Updates jsdom from 24.0.0 to 26.0.0

Release notes

Sourced from jsdom's releases.

Version 26.0.0

Breaking change: canvas peer dependency requirement has been upgraded from v2 to v3. (sebastianwachter)

Other changes:

• Added AbortSignal.any(). (jdbevan)
• Added initial support for form-associated custom elements, in particular making them labelable and supporting the ElementInternals labels property. The form-associated callbacks are not yet supported. (hesxenon)
• Updated whatwg-url, adding support for URL.parse().
• Updated cssstyle and rrweb-cssom, to improve CSS parsing capabilities.
• Updated nwsapi, improving CSS selector matching.
• Updated parse5, fixing a bug around <noframes> elements and HTML entity decoding.
• Fixed JSDOM.fromURL() to properly reject the returned promise if the server redirects to an invalid URL, instead of causing an uncaught exception.

Version 25.0.1

• Updated dependencies, notably tough-cookie, which no longer prints a deprecation warning.

Version 25.0.0

This major release changes the prototype of a jsdom's EventTarget.prototype to point to the Object.prototype inside the jsdom, instead of pointing to the Node.js Object.prototype. Thus, the prototype chain of Window stays entirely within the jsdom, never crossing over into the Node.js realm.

This only occurs when runScripts is set to non-default values of "dangerously" or "outside-only", as with the default value, there is no separate Object.prototype inside the jsdom.

This will likely not impact many programs, but could cause some changes in instanceof behavior, and so out of an abundance of caution, we're releasing it as a new major version.

Version 24.1.3

• Fixed calls to postMessage() that were done as a bare property (i.e., postMessage() instead of window.postMessage()).

Version 24.1.2

• Fixed an issue with the in operator applied to EventTarget methods, e.g. 'addEventListener' in window, which only appeared in Node.js ≥22.5.0. (legendecas)
• Fixed the events fired by blur(): it no longer fires focus and focusin on the Document, and blur and focusout no longer have their relatedTarget property set. (asamuzaK)

Version 24.1.1

• Fixed selection methods to trigger the selectionchange event on the Document object. (piotr-oles)

Version 24.1.0

• Added the getSetCookie() method to the Headers class. (ushiboy)
• Fixed the creation and parsing of elements with names from Object.prototype, like "constructor" or "toString".
• Updated rweb-cssom, which can now parse additional CSS constructs.

Changelog

Sourced from jsdom's changelog.

26.0.0

Breaking change: canvas peer dependency requirement has been upgraded from v2 to v3. (sebastianwachter)

Other changes:

• Added AbortSignal.any(). (jdbevan)
• Added initial support for form-associated custom elements, in particular making them labelable and supporting the ElementInternals labels property. The form-associated callbacks are not yet supported. (hesxenon)
• Updated whatwg-url, adding support for URL.parse().
• Updated cssstyle and rrweb-cssom, to improve CSS parsing capabilities.
• Updated nwsapi, improving CSS selector matching.
• Updated parse5, fixing a bug around <noframes> elements and HTML entity decoding.
• Fixed JSDOM.fromURL() to properly reject the returned promise if the server redirects to an invalid URL, instead of causing an uncaught exception.

25.0.1

• Updated dependencies, notably tough-cookie, which no longer prints a deprecation warning.

25.0.0

This major release changes the prototype of a jsdom's EventTarget.prototype to point to the Object.prototype inside the jsdom, instead of pointing to the Node.js Object.prototype. Thus, the prototype chain of Window stays entirely within the jsdom, never crossing over into the Node.js realm.

This only occurs when runScripts is set to non-default values of "dangerously" or "outside-only", as with the default value, there is no separate Object.prototype inside the jsdom.

This will likely not impact many programs, but could cause some changes in instanceof behavior, and so out of an abundance of caution, we're releasing it as a new major version.

24.1.3

• Fixed calls to postMessage() that were done as a bare property (i.e., postMessage() instead of window.postMessage()).

24.1.2

• Fixed an issue with the in operator applied to EventTarget methods, e.g. 'addEventListener' in window, which only appeared in Node.js ≥22.5.0. (legendecas)
• Fixed the events fired by blur(): it no longer fires focus and focusin on the Document, and blur and focusout no longer have their relatedTarget property set. (asamuzaK)

24.1.1

• Fixed selection methods to trigger the selectionchange event on the Document object. (piotr-oles)

24.1.0

• Added the getSetCookie() method to the Headers class. (ushiboy)
• Fixed the creation and parsing of elements with names from Object.prototype, like "constructor" or "toString".
• Updated rweb-cssom, which can now parse additional CSS constructs.

Commits

• 3644055 Version 26.0.0
• 8ebaee9 Update dependencies and dev dependencies
• 5984ace Catch invalid redirect URLs
• d5abcd1 Make querySelectorAll follow the always-impl rule
• 56f27c2 Add support for ElementInternals's labels property
• 854ae1b Implement AbortSignal.any()
• 7cc3500 Update optional peer dependency canvas to v3
• 8955c99 Add support for canvas v3
• 8dfe288 Add Node 22 to CI test matrix
• 04541b3 Version 25.0.1
• Additional commits viewable in compare view

Updates vitest from 1.4.0 to 3.0.6

Release notes

Sourced from vitest's releases.

v3.0.6

   🐞 Bug Fixes

• Fix getMockedSystemTime for useFakeTimer  -  by @​hi-ogawa in vitest-dev/vitest#7405 (03912)
• Compat for jest-image-snapshot  -  by @​hi-ogawa in vitest-dev/vitest#7390 (9542b)
• Ensure project names are readable in dark terminals  -  by @​rgrove in vitest-dev/vitest#7371 (bb94c)
• Exclude queueMicrotask from default fake timers to not break node fetch  -  by @​hi-ogawa in vitest-dev/vitest#7505 (167a9)
• browser:
  • Fix mocking modules out of root  -  by @​hi-ogawa in vitest-dev/vitest#7415 (d3acb)
  • Fix toHaveClass typing  -  by @​hi-ogawa in vitest-dev/vitest#7383 (7ef23)
  • Relax locator selectors methods  -  by @​sheremet-va in vitest-dev/vitest#7422 (1b8c5)
  • Resolve thread count from maxWorkers  -  by @​AriPerkkio in vitest-dev/vitest#7483 (adbb2)
  • Cleanup timeout on resolve and give more information in the error  -  by @​sheremet-va in vitest-dev/vitest#7487 (5a45a)
• coverage:
  • vite-node to pass correct execution wrapper offset  -  by @​AriPerkkio in vitest-dev/vitest#7417 (1f2e5)
  • Preserve moduleExecutionInfo in non-isolated runs  -  by @​AriPerkkio in vitest-dev/vitest#7486 (f31a0)
• deps:
  • Update all non-major dependencies  -  by @​hi-ogawa in vitest-dev/vitest#7363 (e348b)
  • Update all non-major dependencies  -  by @​hi-ogawa in vitest-dev/vitest#7507 (6cc40)
• init:
  • Invalid browser config  -  by @​AriPerkkio in vitest-dev/vitest#7475 (8fe64)
• reporters:
  • Render tasks in tree when in TTY  -  by @​AriPerkkio in vitest-dev/vitest#7503 (027ce)
• vite-node:
  • Remove fake first line mapping on Vite 6  -  by @​hi-ogawa in vitest-dev/vitest#7124 (b9973)
• watch:
  • Properly remove cache after removing existing test files  -  by @​soc221b in vitest-dev/vitest#7399 (01a59)
• workspace:
  • Forward inspect related cli options  -  by @​AriPerkkio in vitest-dev/vitest#7373 (ed15b)

    View changes on GitHub

v3.0.5

This release includes security patches for:

• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

🚀 Features

• ui: Insert message "no tests found" in ui - by @​DevJoaoLopes in vitest-dev/vitest#7366 (92da4)

🐞 Bug Fixes

• Validate websocket request - by @​hi-ogawa and @​AriPerkkio in vitest-dev/vitest#7317 (191ef)
• Don't toggle cli cursor on non-TTY - by @​AriPerkkio in vitest-dev/vitest#7336 (3c805)
• vite-node: Differentiate file url with hash and query - by @​hi-ogawa in vitest-dev/vitest#7365 (926ca)

View changes on GitHub

v3.0.4

... (truncated)

Commits

• 9584be3 chore: release v3.0.6
• 027ce9b fix(reporters): render tasks in tree when in TTY (#7503)
• b62ac22 chore: use tinyglobby instead of fast-glob in Vitest (#7504)
• 167a98d fix: exclude queueMicrotask from default fake timers to not break node fetc...
• 6cc408d fix(deps): update all non-major dependencies (#7507)
• 8f13825 docs: fix sequence.hooks: 'stack' as default (#7492)
• f31a07b fix(coverage): preserve moduleExecutionInfo in non-isolated runs (#7486)
• 5a45a7c fix(browser): cleanup timeout on resolve and give more information in the err...
• accd2ed refactor: enable isolatedDeclarations (#7473)
• 1f2e555 fix(coverage): vite-node to pass correct execution wrapper offset (#7417)
• Additional commits viewable in compare view

Updates @testing-library/jest-dom from 6.4.2 to 6.6.3

Release notes

Sourced from @​testing-library/jest-dom's releases.

v6.6.3

6.6.3 (2024-10-31)

Bug Fixes

• add vitest import when extending vitest matchers (#646) (5ba0156)

v6.6.2

6.6.2 (2024-10-17)

Bug Fixes

• remove recursive type reference in vitest types (#636) (4468378)

v6.6.1

6.6.1 (2024-10-16)

Bug Fixes

• fix lodash import in to-have-selection.js (#642) (ced792e)

v6.6.0

6.6.0 (2024-10-16)

Features

• implement toHaveSelection (#637) (9b14804)

v6.5.0

6.5.0 (2024-08-23)

Features

• toHaveValue: Asserting aria-valuenow (#479) (acbf416)

v6.4.8

6.4.8 (2024-07-23)

Bug Fixes

• Drop peerDependencies from package.json (#610) (faf534b)

v6.4.7

6.4.7 (2024-07-22)

... (truncated)

Commits

• 5ba0156 fix: add vitest import when extending vitest matchers (#646)
• 4468378 fix: remove recursive type reference in vitest types (#636)
• abba961 docs: add billyjanitsch as a contributor for bug (#644)
• 9490615 docs: add G-Rath as a contributor for code (#643)
• ced792e fix: fix lodash import in to-have-selection.js (#642)
• 9b14804 feat: implement toHaveSelection (#637)
• f5b0e94 docs: add diegohaz as a contributor for ideas (#640)
• 68e927e docs: add pwolaq as a contributor for code, and test (#639)
• 04005db docs: add silviuaavram as a contributor for code, and test (#638)
• 4723de3 docs: add mibcadet as a contributor for doc (#628)
• Additional commits viewable in compare view

Updates @testing-library/react from 14.2.2 to 16.2.0

Release notes

Sourced from @​testing-library/react's releases.

v16.2.0

16.2.0 (2025-01-15)

Features

• Add support for React error handlers (#1354) (9618c51)

v16.1.0

16.1.0 (2024-12-05)

Features

• Add support for React 19 (#1367) (85ac253)

v16.0.1

16.0.1 (2024-08-29)

Bug Fixes

• Add support for exactOptionalPropertyTypes in TypeScript (#1351) (3dcd8a9)

v16.0.0

16.0.0 (2024-06-03)

Features

• Move @testing-library/dom and @types/react-dom to peer dependencies (#1305) (a4744fa)

BREAKING CHANGES

• @testing-library/dom was moved to a peer dependency and needs to be explicitly installed. This reduces the chance of having conflicting versions of @testing-library/dom installed that frequently caused bugs when used with @testing-library/user-event. We will also be able to allow new versions of @testing-library/dom being used without a SemVer major release of @testing-library/react by just widening the peer dependency. @types/react-dom needs to be installed if you're typechecking files using @testing-library/react.

v15.0.7

15.0.7 (2024-05-07)

Bug Fixes

• Ensure act is not any when React.act is not declared (#1323) (c1f2957)

v15.0.6

... (truncated)

Commits

• 9618c51 feat: Add support for React error handlers (#1354)
• eab6e67 [ci] Codecov fix follow-up
• 7134e5d [ci] Fix codecov action (#1376)
• 85ac253 feat: Add support for React 19 (#1367)
• 3dcd8a9 fix: Add support for exactOptionalPropertyTypes in TypeScript (#1351)
• 7a28fa9 Fix React Canary and Experimental tests (#1353)
• a4744fa feat: Move @testing-library/dom and @types/react-dom to peer dependencie...
• c1f2957 fix: Ensure act is not any when React.act is not declared (#1323)
• b6e59f7 fix: export new act when available (#1319)
• f6a1677 chore: Adjust tests to workaround 18.3.0 bug (#1315)
• Additional commits viewable in compare view

Updates cheerio from 1.0.0-rc.12 to 1.0.0

Release notes

Sourced from cheerio's releases.

v1.0.0

Cheerio 1.0 is here! 🎉

Announcement Blog Post

Breaking Changes

• The minimum NodeJS version is now 18.17 or higher cheeriojs/cheerio#3959

• Import paths were simplified. For example, use cheerio/slim instead of cheerio/lib/slim. cheeriojs/cheerio#3970

• The deprecated default Cheerio instance and static methods were removed. cheeriojs/cheerio#3974

  Before, it was possible to write code like this:

  import cheerio, { html } from 'cheerio';
  html(cheerio('<test></test>')); // ~ '<test></test>' -- NO LONGER WORKS

  Make sure to always load documents first:

  import * as cheerio from 'cheerio';
  cheerio.load('<test></test>').html();

• Node types previously re-exported by Cheerio must now be imported directly from (domhandler)(https://github.com/fb55/domhandler). cheeriojs/cheerio#3969

• htmlparser2 options now reside exclusively under the xml key (cheeriojs/cheerio#2916):

  const $ = cheerio.load('<html>', {
    xml: {
      withStartIndices: true,
    },
  });

New Features

• Add functions to load buffers, streams & URLs in NodeJS by @​fb55 in cheeriojs/cheerio#2857
• Add extract method by @​fb55 in cheeriojs/cheerio#2750

Fixes

• Allow imports of cheerio/utils by @​blixt in cheeriojs/cheerio#2601
• Allow empty string in data, and simplify by @​fb55 in cheeriojs/cheerio#2818

... (truncated)

Commits

• 50b5d5c 1.0.0
• eea2fec fix(eslint): Disable misfiring lint rule
• e60f659 chore(package): Update published files
• 4fe3e7b chore(docs): Add 1.0 Announcement Post (#3984)
• 944553b build(deps): bump docusaurus-plugin-typedoc in /website (#3983)
• e34967e build(deps-dev): bump tsx from 4.16.5 to 4.17.0 (#3982)
• eb7122b chore(traversing): Add test case for lowerCaseTags (#3981)
• b824ba8 fix(website): Fix ReactLiveScope examples (#3980)
• 08ebee5 build(deps-dev): bump eslint-plugin-jsdoc from 49.0.0 to 50.0.0 (#3979)
• bf5f44c build(deps-dev): bump eslint-plugin-jsdoc from 48.11.0 to 49.0.0 (#3976)
• Additional commits viewable in compare view

Updates msw from 2.2.13 to 2.7.1

Release notes

Sourced from msw's releases.

v2.7.1 (2025-02-20)

Bug Fixes

• HttpResponse: support non-configurable status codes (#2434) (0cf639e9c12b25093fe8aa0cce865168ea7db978) @​kettanaito

v2.7.0 (2024-12-17)

Features

• use picocolors instead of chalk (#2377) (85bdd82dfe4cd3d514d7820dad3338b485084fbf) @​Namchee @​kettanaito

v2.6.9 (2024-12-16)

Bug Fixes

• support SharedArrayBuffer in HttpResponse.arrayBuffer (#2389) (41f00e1a67e21010ab9c1a46c8e92193b655f24a) @​danilofuchs @​kettanaito

v2.6.8 (2024-12-07)

Bug Fixes

• setupServer: reapply interception after calling server.listen() after server.close() (#2383) (00da9cad4249b61732ee375d9dbefeb76028cc2b) @​kettanaito

v2.6.7 (2024-12-06)

Bug Fixes

• setupWorker: correctly delete internal accept header on passthrough (#2375) (3f40055b1d3814da4b30e5eb7555e09b1084798c) @​smouillour @​kettanaito

v2.6.6 (2024-11-22)

Bug Fixes

• types: support optional path parameters (#2368) (3b7b776e8c0de341185df4686a895c24326748d3) @​kettanaito

v2.6.5 (2024-11-16)

Bug Fixes

• support non-configurable responses (#2360) (5bf3e3bf5f9a6d32c79410c11abd539ec4c2ddc5) @​kettanaito

v2.6.4 (2024-11-10)

Bug Fixes

• prevent infinite loop when bypassing sendBeacon() requests (#2353) (2fa98c327acc51189f87789d9155c4ec57be2299) @​kettanaito
• remove the internal bypass request header before performing the request as-is in Node.js (#2353) (2fa98c327acc51189f87789d9155c4ec57be2299) @​kettanaito

v2.6.3 (2024-11-10)

... (truncated)

Commits

• 5e042cb chore(release): v2.7.1
• 543142c docs: update readme description
• 0cf639e fix(HttpResponse): support non-configurable status codes (#2434)
• e5cca27 chore: add stackblitz to golden sponsors (#2429)
• 08c4fec chore: fix a typo in the test (#2425)
• e3234fd chore(release): v2.7.0
• 85bdd82 feat: use picocolors instead of chalk (#2377)
• 58f2d2c chore: use v18 in .nvmrc
• a845ea1 chore(release): v2.6.9
• 417918f chore: pack/build before all e2e tests (#2395)
• Additional commits viewable in compare view

Updates puppeteer from 22.11.2 to 24.2.1

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v24.2.1

24.2.1 (2025-02-13)

Bug Fixes

• change Browser.setCookie type to be CookieData (#13593) (8971cc2)
• don't wait for activation if the connection is disconnected (#13591) (6b20ac1)
• network: propagate CDP error in interception (#13607) (2f470cd)
• roll to Chrome 133.0.6943.98 (#13611) (ea11a46)

puppeteer: v24.2.1

24.2.1 (2025-02-13)

Bug Fixes

• don't wait for activation if the connection is disconnected (#13591) (6b20ac1)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 24.2.0 to 24.2.1

puppeteer-core: v24.2.0

24.2.0 (2025-02-05)

Features

• add keyboard-lock and pointer-lock permissions (#13586) (108cd53)
• roll to Chrome 133.0.6943.53 (#13584) (a63d568)
• roll to Firefox 135.0 (#13587) (b42c046)

Bug Fixes

• roll to Chrome 132.0.6834.159 (#13566) (416534b)
• webdriver: make sure user agent can be set twice (#13585) (411ff95)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 2.7.0 to 2.7.1

puppeteer: v24.2.0

... (truncated)

Changelog

Sourced from puppeteer's changelog.

24.2.1 (2025-02-13)

Bug Fixes

• change Browser.setCookie type to be CookieData (#13593) (8971cc2)
• don't wait for activation if the connection is disconnected (#13591) (6b20ac1)
• network: propagate CDP error in interception (#13607) (2f470cd)
• roll to Chrome 133.0.6943.98 (#13611) (ea11a46)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 24.2.0 to 24.2.1

24.2.0 (2025-02-05)

Features

• add keyboard-lock and pointer-lock permissions (#13586) (108cd53)
• roll to Chrome 133.0.6943.53 (#13584) (a63d568)
• roll to Firefox 135.0 (#13587) (b42c046)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 2.7.0 to 2.7.1

Bug Fixes

• roll to Chrome 132.0.6834.159 (#13566) (416534b)
• webdriver: make sure user agent can be set twice (#13585) (411ff95)

24.1.1 (2025-01-23)

Miscellaneous Chores

• puppeteer: Synchronize puppeteer versions

Dependencies

... (truncated)

Commits

• 91d0925 chore: release main (#13594)
• ea11a46 fix: roll to Chrome 133.0.6943.98 (#13611)
• 436e95a chore(deps): Bump serialize-javascript from 6.0.1 to 6.0.2 in /website (#13610)
• fad9744 chore: fix release please issue (#13608)
• 2f470cd fix(network): propagate CDP error in interception (#13607)
• 54481ed chore(deps): Bump github/codeql-action from 3.28.8 to 3.28.9 in the all group...
• cb449d3 chore(deps-dev): Bump the dev-dependencies group across 1 directory with 10 u...
• 4e42d53 chore(deps): Bump semver from 7.7.0 to 7.7.1 in the dependencies group (#13601)
• 996eae8 chore(deps): Bump node from ae2f3d4 to 5145c88 in /docker in the all grou...
• 6e8014d test: add a test for multiple dblclicks (#13597)
• Additional commits viewable in compare view

Updates supertest from 6.3.4 to 7.0.0

Release notes

Sourced from supertest's releases.

v7.0.0

• Merge pull request #834 from Bruception/master 225118c
• Fix TestAgent not inheriting Agent properties f290431
• fix: bump deps, drop Node.js v<14.16.0 1e18c20

ladjs/supertest@v6.3.4...v7.0.0

Commits

• 2ae1c36 7.0.0
• 225118c Merge pull request #834 from Bruception/master
• f290431 Fix TestAgent not inheriting Agent properties
• 1e18c20 fix: bump deps, drop Node.js v<14.16.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Superseded by #5247.