Skip to content

⬆️ Bump cross-spawn, @semantic-release/github, @semantic-release/npm and jest - #158

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-2c45a6c292
Open

⬆️ Bump cross-spawn, @semantic-release/github, @semantic-release/npm and jest#158
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-2c45a6c292

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 18, 2026

Copy link
Copy Markdown
Contributor

Bumps cross-spawn to 7.0.6 and updates ancestor dependencies cross-spawn, @semantic-release/github, @semantic-release/npm and jest. These dependencies need to be updated together.

Updates cross-spawn from 7.0.3 to 7.0.6

Changelog

Sourced from cross-spawn's changelog.

7.0.6 (2024-11-18)

Bug Fixes

  • update cross-spawn version to 7.0.5 in package-lock.json (f700743)

7.0.5 (2024-11-07)

Bug Fixes

  • fix escaping bug introduced by backtracking (640d391)

7.0.4 (2024-11-07)

Bug Fixes

Commits
  • 77cd97f chore(release): 7.0.6
  • 6717de4 chore: upgrade standard-version
  • f700743 fix: update cross-spawn version to 7.0.5 in package-lock.json
  • 9a7e3b2 chore: fix build status badge
  • 0852683 chore(release): 7.0.5
  • 640d391 fix: fix escaping bug introduced by backtracking
  • bff0c87 chore: remove codecov
  • a7c6abc chore: replace travis with github workflows
  • 9b9246e chore(release): 7.0.4
  • 5ff3a07 fix: disable regexp backtracking (#160)
  • Additional commits viewable in compare view

Updates @semantic-release/github from 7.1.1 to 7.2.3

Release notes

Sourced from @​semantic-release/github's releases.

v7.2.3

7.2.3 (2021-05-07)

Bug Fixes

v7.2.2

7.2.2 (2021-05-04)

Bug Fixes

  • deps: update dependency fs-extra to v10 (1a28625)

v7.2.1

7.2.1 (2021-04-05)

Bug Fixes

  • allow proxy to be false and fallback an empty string (#356) (bea917f)

v7.2.0

7.2.0 (2020-11-17)

Features

  • set target_commitish when creating a GitHub release (#305) (a54e596), closes #304

v7.1.2

7.1.2 (2020-11-13)

Bug Fixes

  • deps: update dependency @​octokit/rest to v18 (#297) (73490fc)
Commits
  • 0aa2ba1 fix: improve text in comment (#367)
  • 3b1edd6 chore(deps): lock file maintenance (#357)
  • 1a28625 fix(deps): update dependency fs-extra to v10
  • 59357e3 chore(deps): lock file maintenance (#354)
  • bea917f fix: allow proxy to be false and fallback an empty string (#356)
  • 8cb77a1 chore(deps): update dependency nock to v13.0.9 (#353)
  • dae783e chore(deps): lock file maintenance (#352)
  • 50fe019 chore(deps): lock file maintenance (#351)
  • ff4c781 chore(deps): lock file maintenance (#350)
  • 58a3edc chore(deps): update dependency semantic-release to v17.3.9 (#349)
  • Additional commits viewable in compare view

Updates @semantic-release/npm from 7.0.6 to 7.1.3

Release notes

Sourced from @​semantic-release/npm's releases.

v7.1.3

7.1.3 (2021-05-04)

Bug Fixes

  • use NPM_CONFIG_USERCONFIG in get-registry to match auth (#362) (13200ca)

v7.1.2

7.1.2 (2021-05-04)

Bug Fixes

  • deps: update dependency fs-extra to v10 (80fde1e)

v7.1.1

7.1.1 (2021-04-08)

Bug Fixes

  • deps: update dependency normalize-url to v6 (97ca719)

v7.1.0

7.1.0 (2021-03-30)

Features

v7.0.10

7.0.10 (2021-01-17)

Bug Fixes

  • improve error message text for npm tokens (#323) (88e5862)

v7.0.9

7.0.9 (2020-12-03)

Bug Fixes

v7.0.8

7.0.8 (2020-11-17)

... (truncated)

Commits
  • 13200ca fix: use NPM_CONFIG_USERCONFIG in get-registry to match auth (#362)
  • a8b1026 chore(deps): lock file maintenance (#358)
  • 80fde1e fix(deps): update dependency fs-extra to v10
  • 97ca719 fix(deps): update dependency normalize-url to v6
  • adc5c49 chore(deps): lock file maintenance (#352)
  • 60de512 chore(deps): lock file maintenance (#350)
  • a15c017 feat: use npm v7 (#304)
  • 7338fc2 chore(deps): lock file maintenance (#348)
  • cc771b8 docs(readme): fix postpublish script suggestion (#346)
  • 1800e75 chore(deps): update dependency p-retry to v4.4.0 (#345)
  • Additional commits viewable in compare view

Updates jest from 26.6.3 to 30.4.2

Release notes

Sourced from jest's releases.

v30.4.2

Fixes

  • [jest-runtime] Fix named imports from CJS modules whose module.exports is a function with own-property exports (#16150)

Full Changelog: jestjs/jest@v30.4.1...v30.4.2

v30.4.1

Features

  • [jest-config, jest-core, jest-runner, jest-schemas, jest-types] Allow custom runner configuration options via tuple format ['runner-path', {options}] (#16141)

Fixes

  • [jest-runtime] Align CJS-from-ESM default export with Node: module.exports is always the ESM default, __esModule unwrapping is no longer applied (#16143)

Full Changelog: jestjs/jest@v30.4.0...v30.4.1

v30.4.0

Big release! 😀

Main feature is a rewrite of our custom runtime in preparation for stabilisation of native support of ESM. As part of that work require(esm) module is now supported on Node 24.9+ (still requires --experimental-vm-modules like before).

In addition we now support fake timers for the recently released Temporal API in Node v26.

React 19 is also supported properly in pretty-format, meaning snapshots of React components now work like they should.

Due to all the changes, there might be regressions that snuck in. Please report them!

Full list of changes below

Features

  • [babel-jest] Support collecting coverage from .mts, .cts (and other) files (#15994)
  • [jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types] Add --collect-tests flag to discover and list tests without executing them (#16006)
  • [jest-config, jest-runner, jest-worker] Add workerGracefulExitTimeout config option to control how long workers are given to exit before being force-killed (#15984)
  • [jest-config] Add support for jest.config.mts as a valid configuration file (#16005)
  • [jest-config, jest-core, jest-reporters, jest-runner] verbose and silent can now be set per-project; the project-level value overrides the global value for that project's tests (#16133)
  • [@jest/fake-timers] Accept Temporal.Duration in jest.advanceTimersByTime() and jest.advanceTimersByTimeAsync() (#16128)
  • [@jest/fake-timers] Accept Temporal.Instant and Temporal.ZonedDateTime in jest.setSystemTime() and useFakeTimers({now}) (#16128)
  • [@jest/fake-timers] Support faking Temporal.Now.* (#16131)
  • [jest-mock] Add clearMocksOnScope(scope) on ModuleMocker for clearing every mock function exposed on a scope object (#16088)
  • [jest-resolve] Add canResolveSync() on Resolver so callers can detect when a user-configured resolver only exports an async hook (#16064)
  • [jest-runtime] Use synchronous evaluate() for ES modules without top-level await on Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#16062)
  • [jest-runtime] Support require() of ES modules on Node v24.9+ (#16074)
  • [jest-runtime] Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#16127)
  • [@jest/transform] Add canTransformSync(filename) on ScriptTransformer so callers can pick the sync vs async transform path (#16062)
  • [jest-util] Add isError helper (#16076)

... (truncated)

Changelog

Sourced from jest's changelog.

30.4.2

Fixes

  • [jest-runtime] Fix named imports from CJS modules whose module.exports is a function with own-property exports (#16150)

30.4.1

Features

  • [jest-config, jest-core, jest-runner, jest-schemas, jest-types] Allow custom runner configuration options via tuple format ['runner-path', {options}] (#16141)

Fixes

  • [jest-runtime] Align CJS-from-ESM default export with Node: module.exports is always the ESM default, __esModule unwrapping is no longer applied (#16143)

30.4.0

Features

  • [babel-jest] Support collecting coverage from .mts, .cts (and other) files (#15994)
  • [jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types] Add --collect-tests flag to discover and list tests without executing them (#16006)
  • [jest-config, jest-runner, jest-worker] Add workerGracefulExitTimeout config option to control how long workers are given to exit before being force-killed (#15984)
  • [jest-config] Add support for jest.config.mts as a valid configuration file (#16005)
  • [jest-config, jest-core, jest-reporters, jest-runner] verbose and silent can now be set per-project; the project-level value overrides the global value for that project's tests (#16133)
  • [@jest/fake-timers] Accept Temporal.Duration in jest.advanceTimersByTime() and jest.advanceTimersByTimeAsync() (#16128)
  • [@jest/fake-timers] Accept Temporal.Instant and Temporal.ZonedDateTime in jest.setSystemTime() and useFakeTimers({now}) (#16128)
  • [@jest/fake-timers] Support faking Temporal.Now.* (#16131)
  • [jest-mock] Add clearMocksOnScope(scope) on ModuleMocker for clearing every mock function exposed on a scope object (#16088)
  • [jest-resolve] Add canResolveSync() on Resolver so callers can detect when a user-configured resolver only exports an async hook (#16064)
  • [jest-runtime] Use synchronous evaluate() for ES modules without top-level await on Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#16062)
  • [jest-runtime] Support require() of ES modules on Node v24.9+ (#16074)
  • [jest-runtime] Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#16127)
  • [@jest/transform] Add canTransformSync(filename) on ScriptTransformer so callers can pick the sync vs async transform path (#16062)
  • [jest-util] Add isError helper (#16076)
  • [pretty-format] Support React 19 (#16123)

Fixes

  • [expect-utils] Fix toStrictEqual failing on structuredClone results due to cross-realm constructor mismatch (#15959)
  • [@jest/expect-utils] Prevent toMatchObject/subset matching from throwing when encountering exotic iterables (#15952)
  • [fake-timers] Convert Date to milliseconds before passing to @sinonjs/fake-timers (#16029)
  • [jest] Export GlobalConfig and ProjectConfig TypeScript types (#16132)
  • [jest-circus] Prevent crash when asyncError is undefined for non-Error throws (#16003)
  • [jest-circus, jest-jasmine2] Include Error.cause in JSON failureMessages output (#15967)
  • [jest-config] Fix preset path resolution on Windows when the preset uses subpath exports (#15961)
  • [jest-config] Allow collectCoverage and coverageProvider in project config without a validation warning (#16132)
  • [jest-config] Project config validator now emits "is not supported in an individual project configuration" instead of "probably a typing mistake" for known global-only options (#16132)
  • [jest-environment-node] Fix --localstorage-file warning on Node 25+ (#16086)
  • [jest-reporters] Apply global coverage threshold to unmatched pattern files in addition to glob/path thresholds (#16137)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…and jest

Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn) to 7.0.6 and updates ancestor dependencies [cross-spawn](https://github.com/moxystudio/node-cross-spawn), [@semantic-release/github](https://github.com/semantic-release/github), [@semantic-release/npm](https://github.com/semantic-release/npm) and [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest). These dependencies need to be updated together.


Updates `cross-spawn` from 7.0.3 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6)

Updates `@semantic-release/github` from 7.1.1 to 7.2.3
- [Release notes](https://github.com/semantic-release/github/releases)
- [Commits](semantic-release/github@v7.1.1...v7.2.3)

Updates `@semantic-release/npm` from 7.0.6 to 7.1.3
- [Release notes](https://github.com/semantic-release/npm/releases)
- [Commits](semantic-release/npm@v7.0.6...v7.1.3)

Updates `jest` from 26.6.3 to 30.4.2
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest)

---
updated-dependencies:
- dependency-name: cross-spawn
  dependency-version: 7.0.6
  dependency-type: indirect
- dependency-name: "@semantic-release/github"
  dependency-version: 7.2.3
  dependency-type: indirect
- dependency-name: "@semantic-release/npm"
  dependency-version: 7.1.3
  dependency-type: indirect
- dependency-name: jest
  dependency-version: 30.4.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

config dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code package

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants