Skip to content

ci(deps): bump the ui-npm group across 1 directory with 16 updates - #2553

Merged
thjaeckle merged 2 commits into
masterfrom
dependabot/npm_and_yarn/ui/ui-npm-dee56e3f6f
Sep 21, 2026
Merged

ci(deps): bump the ui-npm group across 1 directory with 16 updates#2553
thjaeckle merged 2 commits into
masterfrom
dependabot/npm_and_yarn/ui/ui-npm-dee56e3f6f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the ui-npm group with 16 updates in the /ui directory:

Package From To
@tarekraafat/autocomplete.js 10.2.7 10.2.10
ace-builds 1.35.4 1.44.0
bootstrap 5.3.3 5.3.8
bootstrap-icons 1.11.3 1.13.1
dompurify 3.4.13 3.4.15
jsonpath-plus 10.3.0 10.4.0
oidc-client-ts 3.3.0 3.5.0
esbuild 0.28.1 0.28.2
esbuild-sass-plugin 3.3.1 3.7.0
eslint 9.8.0 10.10.0
eslint-plugin-n 17.10.1 18.3.0
eslint-plugin-promise 7.0.0 7.3.0
jest 29.7.0 30.5.1
@types/jest 29.5.12 30.0.0
ts-jest 29.2.3 29.4.12
typescript 5.5.4 7.0.2

Updates @tarekraafat/autocomplete.js from 10.2.7 to 10.2.10

Release notes

Sourced from @​tarekraafat/autocomplete.js's releases.

v10.2.10 ✨

  • ➕ Added: llms.txt for AI agent discoverability
  • 🔧 Fixed: Async function detection fails in transpiled environments (Thanks 👍 @​folknor) #442
  • 🎛️ Updated: Development dependencies

v10.2.9 ✨

v10.2.8 ✨

Changelog

Sourced from @​tarekraafat/autocomplete.js's changelog.

v10.2.10 ✨

  • ➕ Added: llms.txt for AI agent discoverability
  • 🔧 Fixed: Async function detection fails in transpiled environments (Thanks 👍 @​folknor) #442
  • 🎛️ Updated: Development dependencies

v10.2.9

v10.2.8

Commits

Updates ace-builds from 1.35.4 to 1.44.0

Changelog

Sourced from ace-builds's changelog.

1.44.0 (2026-05-11)

Features

  • Extension to show whitespaces in selection (#5844) (9498a7f)
  • mode: Add Cedar and CedarSchema language modes for Ace Editor (#5944) (c5c19dc)
  • rust: Include raw borrow operator in keyword list (#5942) (93581d6)
  • update Flix keywords (#5931) (f45eb67)

Bug Fixes

  • mode type to accept both SyntaxMode and string across definitions and implementations (#5925) (a6b1cb1)
  • row calculation for fractional coords in virtual_renderer (#5914) (a6724b7)

1.43.6 (2026-01-23)

Bug Fixes

1.43.5 (2025-12-02)

1.43.4 (2025-10-17)

Bug Fixes

  • Update for compliance with typescript 5.9.2 (#5855) (6e110b0)

1.43.3 (2025-09-02)

Bug Fixes

  • firefox textarea autocomplete corruption (#5860) (23ac02f)

1.43.2 (2025-07-15)

Features

1.43.1 (2025-07-02)

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ace-builds since your current version.


Updates bootstrap from 5.3.3 to 5.3.8

Release notes

Sourced from bootstrap's releases.

v5.3.8

What's Changed

Dependencies

New Contributors

Full Changelog: twbs/bootstrap@v5.3.7...v5.3.8

v5.3.7

📚 Documentation

... (truncated)

Commits

Updates bootstrap-icons from 1.11.3 to 1.13.1

Release notes

Sourced from bootstrap-icons's releases.

v1.13.1

Quick fix for search on the docs.

What's Changed

Full Changelog: twbs/icons@v1.13.0...v1.13.1

v1.13.0

What's Changed

Full Changelog: twbs/icons@v1.12.1...v1.13.0

v1.12.1

Forgot to generate new docs page for Bluesky because I was too excited about a single icon update.

v1.12.0: The Bluesky Update

There's only one new icon in this release… and it‘s Bluesky. 🤣

v1.11.4

What's Changed

Not including several dependency updates…

New Contributors

Full Changelog: twbs/icons@v1.11.3...v1.11.4

Commits

Updates dompurify from 3.4.13 to 3.4.15

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.15

  • Added better clobbering hardening when XML content is involved, thanks @​gnyselcuk
  • Added several smaller hardening and edge-case improvements, thanks @​leechristensen
  • Bumped several dependencies where possible

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions
Commits

Updates jsonpath-plus from 10.3.0 to 10.4.0

Release notes

Sourced from jsonpath-plus's releases.

v10.4.0

What's Changed

New Contributors

Full Changelog: JSONPath-Plus/JSONPath@v10.3.0...v10.4.0

Changelog

Sourced from jsonpath-plus's changelog.

10.4.0

Commits
  • 0bedaea chore: bump version
  • 3e597e5 chore(coverage): ignore Function guard from coverage as it is unreachable
  • 1bab1cc fix(eval): rce using lookupGetter or lookupSetter
  • 5d3d63e build(deps): bump lodash from 4.17.21 to 4.17.23 (#249)
  • 233d754 chore: update security policy (#250)
  • d8dad28 build(deps): bump qs from 6.14.0 to 6.14.1 (#248)
  • c78a9b6 chore: update devDeps. and lock file
  • 106d243 feat: add void operator (#244)
  • 235b283 chore: remove lgtm file and update devDeps.
  • b92ebbf chore: update devDeps.
  • Additional commits viewable in compare view

Updates oidc-client-ts from 3.3.0 to 3.5.0

Release notes

Sourced from oidc-client-ts's releases.

v3.5.0

oidc-client-ts v3.5.0 is a minor release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

  • Features:
    • #2295 add maxSilentRenewTimeoutRetries configuration
    • #2311 add nonce validation for ID tokens
  • Fixes;
    • #2369 reword misleading error messages for request_type check

thanks to @​ninadvadujkar, @​Osmose and @​ferdinand-varta

v3.4.1

oidc-client-ts v3.4.1 is a bugfix release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

  • Fixes:
    • #2259 forward popupAbortOnClose to PopupNavigator.prepare

thanks to @​watabean

v3.4.0

oidc-client-ts v3.4.0 is a minor release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

  • Features:
    • #1890 optionally enforce iframe auth flow in signinSilent
    • #2180 add support for client_secret_jwt
    • #2244 optionally restore popup close rejection
  • Fixes;
    • #2147 wait until the page is shown again to resolve in RedirectNavigator

thanks to @​Hyperkid123, @​Nick-Source, @​Skizu and @​smujmaiku

Commits
  • 9bea2d8 v3.5.0
  • e2f2a38 Merge pull request #2390 from authts/dependabot/npm_and_yarn/globals-17.4.0
  • 70d36c0 Merge pull request #2401 from authts/dependabot/npm_and_yarn/lint-staged-16.3.3
  • dd84fc5 Merge pull request #2402 from authts/dependabot/npm_and_yarn/microsoft/api-ex...
  • 104def8 build(deps-dev): bump @​microsoft/api-extractor from 7.57.6 to 7.57.7
  • cf0e029 build(deps-dev): bump lint-staged from 16.2.7 to 16.3.3
  • c23b00c build(deps-dev): bump globals from 17.3.0 to 17.4.0
  • fd7eb5c Merge pull request #2386 from authts/dependabot/npm_and_yarn/rollup-4.59.0
  • 1043ef4 Merge pull request #2387 from authts/dependabot/npm_and_yarn/multi-770cfcd984
  • d5a1b1e Merge pull request #2364 from authts/dependabot/npm_and_yarn/samples/Parcel/q...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for oidc-client-ts since your current version.


Updates esbuild from 0.28.1 to 0.28.2

Release notes

Sourced from esbuild's releases.

v0.28.2

  • Fix tree shaking bug due to TypeScript import alias (#4507)

    This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

    import Base from './dep.js';
import Alias = Base.SomeType;

  • Fix CSS minification bug involving & (#4497)

    This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

    /* Original code */
.a .b {
  & .b:not(& .c) {
    color: red;
  }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}

    This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

  • Avoid overwriting input files without --allow-overwrite (#4484)

    For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

    This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

  • Fix incorrect code generated when using top-level await (#4498)

    Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

  • Fix a minification bug with lowered logical assignment operators (#4508)

    This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

    // Original code
function foo() {
  let x
  bar(x ||= {})

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.2

  • Fix tree shaking bug due to TypeScript import alias (#4507)

    This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

    import Base from './dep.js';
import Alias = Base.SomeType;

  • Fix CSS minification bug involving & (#4497)

    This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

    /* Original code */
.a .b {
  & .b:not(& .c) {
    color: red;
  }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}

    This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

  • Avoid overwriting input files without --allow-overwrite (#4484)

    For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

    This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

  • Fix incorrect code generated when using top-level await (#4498)

    Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

  • Fix a minification bug with lowered logical assignment operators (#4508)

    This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

    // Original code
function foo() {
  let x

... (truncated)

Commits
  • 609683d publish 0.28.2 to npm
  • 11b1fe4 add to release notes
  • ab50d91 css: fix green/blue channel swap in oklch gamut mapping (#4488)
  • 04627b6 fix #4498: async TLA checks need a worklist
  • 5c15177 disable gopls in the go folder
  • fc2ee9b css: adjust parser to allow --foo: {...}
  • 209db54 release notes for css nesting bugfix
  • c625d31 fix #4497: preserve nested ampersands during minification (#4500)
  • 34474e2 better isolation of current part in js parser
  • 07f6e8c fix #4507: import assignment tree-shaking bug
  • Additional commits viewable in compare view

Updates esbuild-sass-plugin from 3.3.1 to 3.7.0

Release notes

Sourced from esbuild-sass-plugin's releases.

v3.7.0 Hasta la vista

v3.5.0

Thanks to @​mattlewis92 for fixing css chunk prefix clashes when using transform and multiple plugins #192

Commits

Updates eslint from 9.8.0 to 10.10.0

Release notes

Sourced from eslint's releases.

v10.10.0

Features

  • 264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)
  • c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)
  • 5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

  • bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)
  • 427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)
  • 9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)
  • 87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)
  • 8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)
  • 9f4a364 fix: Ignore static imports in no-unreachable (#21276) (Taha Kotil)

Documentation

  • 2417cad docs: Update README (GitHub Actions Bot)
  • 9cecb8a docs: document \c control letter escapes in no-control-regex (#21286) (한국)
  • 8724829 docs: update compat table links (#21263) (fnx)
  • 5634542 docs: Clarify eqeqeq suggestion behavior (#21256) (Müslüm Yılmaz)

Chores

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 10, 2026
@dependabot dependabot Bot changed the title ci(deps): bump the ui-npm group in /ui with 16 updates ci(deps): bump the ui-npm group across 1 directory with 16 updates Sep 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ui/ui-npm-dee56e3f6f branch from e4faaec to a0fc4e2 Compare September 10, 2026 15:05
@dependabot
ci(deps): bump the ui-npm group across 1 directory with 16 updates
1f22940 
Bumps the ui-npm group with 16 updates in the /ui directory:

| Package | From | To |
| --- | --- | --- |
| [@tarekraafat/autocomplete.js](https://github.com/TarekRaafat/autoComplete.js) | `10.2.7` | `10.2.10` |
| [ace-builds](https://github.com/ajaxorg/ace-builds) | `1.35.4` | `1.44.0` |
| [bootstrap](https://github.com/twbs/bootstrap) | `5.3.3` | `5.3.8` |
| [bootstrap-icons](https://github.com/twbs/icons) | `1.11.3` | `1.13.1` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.13` | `3.4.15` |
| [jsonpath-plus](https://github.com/s3u/JSONPath) | `10.3.0` | `10.4.0` |
| [oidc-client-ts](https://github.com/authts/oidc-client-ts) | `3.3.0` | `3.5.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [esbuild-sass-plugin](https://github.com/glromeo/esbuild-sass-plugin) | `3.3.1` | `3.7.0` |
| [eslint](https://github.com/eslint/eslint) | `9.8.0` | `10.10.0` |
| [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n) | `17.10.1` | `18.3.0` |
| [eslint-plugin-promise](https://github.com/eslint-community/eslint-plugin-promise) | `7.0.0` | `7.3.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `29.7.0` | `30.5.1` |
| [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) | `29.5.12` | `30.0.0` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.2.3` | `29.4.12` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.5.4` | `7.0.2` |



Updates `@tarekraafat/autocomplete.js` from 10.2.7 to 10.2.10
- [Release notes](https://github.com/TarekRaafat/autoComplete.js/releases)
- [Changelog](https://github.com/TarekRaafat/autoComplete.js/blob/master/CHANGELOG.md)
- [Commits](TarekRaafat/autoComplete.js@v10.2.7...v10.2.10)

Updates `ace-builds` from 1.35.4 to 1.44.0
- [Release notes](https://github.com/ajaxorg/ace-builds/releases)
- [Changelog](https://github.com/ajaxorg/ace-builds/blob/master/CHANGELOG.md)
- [Commits](ajaxorg/ace-builds@v1.35.4...v1.44.0)

Updates `bootstrap` from 5.3.3 to 5.3.8
- [Release notes](https://github.com/twbs/bootstrap/releases)
- [Commits](twbs/bootstrap@v5.3.3...v5.3.8)

Updates `bootstrap-icons` from 1.11.3 to 1.13.1
- [Release notes](https://github.com/twbs/icons/releases)
- [Commits](twbs/icons@v1.11.3...v1.13.1)

Updates `dompurify` from 3.4.13 to 3.4.15
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.13...3.4.15)

Updates `jsonpath-plus` from 10.3.0 to 10.4.0
- [Release notes](https://github.com/s3u/JSONPath/releases)
- [Changelog](https://github.com/JSONPath-Plus/JSONPath/blob/main/CHANGES.md)
- [Commits](JSONPath-Plus/JSONPath@v10.3.0...v10.4.0)

Updates `oidc-client-ts` from 3.3.0 to 3.5.0
- [Release notes](https://github.com/authts/oidc-client-ts/releases)
- [Commits](authts/oidc-client-ts@v3.3.0...v3.5.0)

Updates `esbuild` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.28.1...v0.28.2)

Updates `esbuild-sass-plugin` from 3.3.1 to 3.7.0
- [Release notes](https://github.com/glromeo/esbuild-sass-plugin/releases)
- [Commits](glromeo/esbuild-sass-plugin@v3.3.1...v3.7.0)

Updates `eslint` from 9.8.0 to 10.10.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.8.0...v10.10.0)

Updates `eslint-plugin-n` from 17.10.1 to 18.3.0
- [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-n@v17.10.1...v18.3.0)

Updates `eslint-plugin-promise` from 7.0.0 to 7.3.0
- [Release notes](https://github.com/eslint-community/eslint-plugin-promise/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-promise/blob/main/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-promise@v7.0.0...v7.3.0)

Updates `jest` from 29.7.0 to 30.5.1
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.5.1/packages/jest)

Updates `@types/jest` from 29.5.12 to 30.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

Updates `ts-jest` from 29.2.3 to 29.4.12
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.2.3...v29.4.12)

Updates `typescript` from 5.5.4 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.5.4...v7.0.2)

---
updated-dependencies:
- dependency-name: "@tarekraafat/autocomplete.js"
  dependency-version: 10.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui-npm
- dependency-name: "@types/jest"
  dependency-version: 30.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: ui-npm
- dependency-name: ace-builds
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui-npm
- dependency-name: bootstrap
  dependency-version: 5.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui-npm
- dependency-name: bootstrap-icons
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui-npm
- dependency-name: dompurify
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ui-npm
- dependency-name: esbuild
  dependency-version: 0.28.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ui-npm
- dependency-name: esbuild-sass-plugin
  dependency-version: 3.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui-npm
- dependency-name: eslint
  dependency-version: 10.9.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: ui-npm
- dependency-name: eslint-plugin-n
  dependency-version: 18.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: ui-npm
- dependency-name: eslint-plugin-promise
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui-npm
- dependency-name: jest
  dependency-version: 30.5.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: ui-npm
- dependency-name: jsonpath-plus
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui-npm
- dependency-name: oidc-client-ts
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ui-npm
- dependency-name: ts-jest
  dependency-version: 29.4.12
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ui-npm
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: ui-npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ui/ui-npm-dee56e3f6f branch from a0fc4e2 to 1f22940 Compare September 21, 2026 14:28
@thjaeckle @claude
fix(ui): keep TypeScript at 6.x and adapt the build to it
9267dc9 
The grouped ui-npm bump raised typescript to 7.0.2 - the Go-native compiler
rewrite - which ts-jest does not support (peer "typescript >=4.3 <7"), so
npm install fails with ERESOLVE before anything is built. Stay on 6.0.3, the
latest version the toolchain supports, and ignore typescript >=7 in the
dependabot config until ts-jest gained TypeScript 7 support.

TypeScript 6 itself changed defaults the UI relied on:

* "strict" now defaults to true - the codebase was written un-strict and
  reports ~1500 strictness findings; pin strict=false and leave adopting
  strict mode to a dedicated effort.
* node_modules/@types is no longer auto-included - declare types=["jest"]
  for the test globals.
* side-effect imports are module-resolved (TS2882) - declare the css/scss
  style modules in custom.d.ts.
* Promise.allSettled needs the ES2020 lib; raise the (type-check-only)
  target from ES2019 - esbuild emits the shipped JS unchanged.

Also add jest-util as an explicit devDependency: ts-jest requires it at
runtime but only declares it as an optional peer, and with Jest 30 npm no
longer hoists a copy to the top level, failing every test run.

Verified with the CI steps (npm install + npm run build) on Node 18.14 and
the jest suite: build green, 14/14 tests pass.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Signed-off-by: Thomas Jäckle <thomas.jaeckle@beyonnex.io>
@thjaeckle
thjaeckle merged commit 6cb085e into master Sep 21, 2026
7 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/ui/ui-npm-dee56e3f6f branch September 21, 2026 15:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@thjaeckle