chore(deps): bump the misc group across 1 directory with 8 updates by dependabot[bot] · Pull Request #1051 · JamesIves/github-sponsors-readme-action

dependabot · 2026-04-10T10:04:32Z

Bumps the misc group with 8 updates in the / directory:

Package	From	To
dompurify	`3.3.1`	`3.3.3`
jsdom	`28.0.0`	`29.0.2`
@types/node	`25.2.1`	`25.6.0`
eslint	`9.39.2`	`10.2.0`
jest	`30.2.0`	`30.3.0`
prettier	`3.8.1`	`3.8.2`
ts-jest	`29.4.6`	`29.4.9`
typescript	`5.9.3`	`6.0.2`

Updates dompurify from 3.3.1 to 3.3.3

Release notes

Sourced from dompurify's releases.

DOMPurify 3.3.3

Fixed an engine requirement for Node 20 which caused hiccups, thanks @Rotzbua

DOMPurify 3.3.2

Fixed a possible bypass caused by jsdom's faulty raw-text tag parsing, thanks multiple reporters

Fixed a prototype pollution issue when working with custom elements, thanks @christos-eth

Fixed a lenient config parsing in _isValidAttribute, thanks @christos-eth

Bumped and removed several dependencies, thanks @Rotzbua

Fixed the test suite after bumping dependencies, thanks @Rotzbua

Commits

8bcbf73 chore: Preparing 3.3.3 release
5faddd6 fix: engine requirement (#1210)
0f91e3a Update README.md
d5ff1a8 Merge branch 'main' of github.com:cure53/DOMPurify
c3efd48 fix: moved back from jsdom 28 to jsdom 20
988b888 fix: moved back from jsdom 28 to jsdom 20
2726c74 chore: Preparing 3.3.2 release
6202c7e build(deps): bump @tootallnate/once and jsdom (#1204)
302b51d fix: Expanded the regex ever so slightly to also cover script
cd85175 Merge branch 'main' of github.com:cure53/DOMPurify
Additional commits viewable in compare view

Updates jsdom from 28.0.0 to 29.0.2

Release notes

Sourced from jsdom's releases.

v29.0.2

Significantly improved and sped up getComputedStyle(). Computed value rules are now applied across a broader set of properties, and include fixes related to inheritance, defaulting keywords, custom properties, and color-related values such as currentcolor and system colors. (@asamuzaK)

Fixed CSS 'background' and 'border' shorthand parsing. (@asamuzaK)

v29.0.1

Fixed CSS parsing of 'border', 'background', and their sub-shorthands containing keywords or var(). (@asamuzaK)

Fixed getComputedStyle() to return a more functional CSSStyleDeclaration object, including indexed access support, which regressed in v29.0.0.

v29.0.0

Breaking changes:

Node.js v22.13.0+ is now the minimum supported v22 version (was v22.12.0+).

Other changes:

Overhauled the CSSOM implementation, replacing the @acemir/cssom and cssstyle dependencies with fresh internal implementations built on webidl2js wrappers and the css-tree parser. Serialization, parsing, and API behavior is improved in various ways, especially around edge cases.

Added CSSCounterStyleRule and CSSNamespaceRule to jsdom Windows.

Added cssMediaRule.matches and cssSupportsRule.matches getters.

Added proper media query parsing in MediaList, using css-tree instead of naive comma-splitting. Invalid queries become "not all" per spec.

Added cssKeyframeRule.keyText getter/setter validation.

Added cssStyleRule.selectorText setter validation: invalid selectors are now rejected.

Added styleSheet.ownerNode, styleSheet.href, and styleSheet.title.

Added bad port blocking per the fetch specification, preventing fetches to commonly-abused ports.

Improved Document initialization performance by lazily initializing the CSS selector engine, avoiding ~0.5 ms of overhead per Document. (@thypon)

Fixed a memory leak when stylesheets were removed from the document.

Fixed CSSStyleDeclaration modifications to properly trigger custom element reactions.

Fixed nested @media rule parsing.

Fixed CSSStyleSheet's "disallow modification" flag not being checked in all mutation methods.

Fixed XMLHttpRequest's response getter returning parsed JSON during the LOADING state instead of null.

Fixed getComputedStyle() crashing in XHTML documents when stylesheets contained at-rules such as @page or @font-face.

Fixed a potential hang in synchronous XMLHttpRequest caused by a race condition with the worker thread's idle timeout.

v28.1.0

Added blob.text(), blob.arrayBuffer(), and blob.bytes() methods.

Improved getComputedStyle() to account for CSS specificity when multiple rules apply. (@asamuzaK)

Improved synchronous XMLHttpRequest performance by using a persistent worker thread, avoiding ~400ms of setup overhead on every synchronous request after the first one.

Improved performance of node.getRootNode(), node.isConnected, and event.dispatchEvent() by caching the root node of document-connected trees.

Fixed getComputedStyle() to correctly handle !important priority. (@asamuzaK)

Fixed document.getElementById() to return the first element in tree order when multiple elements share the same ID.

Fixed <svg> elements to no longer incorrectly proxy event handlers to the Window.

Fixed FileReader event timing and fileReader.result state to more closely follow the spec.

Fixed a potential hang when synchronous XMLHttpRequest encountered dispatch errors.

Fixed compatibility with environments where Node.js's built-in fetch() has been used before importing jsdom, by working around undici v6/v7 incompatibilities.

Commits

2a1e2cd 29.0.2
4097d66 Resolve computed CSS values lazily in CSSStyleDeclaration
cf5523f Add more test cases for nested color-mix with currentColor
b33b616 Add test that getComputedStyle() works with !important
6bf559c Add test for custom property inheritance in computed styles
6817657 Fix border shorthand handling
470f5c5 Consolidate color helpers
3db53cb Fix background shorthand handlers
678e840 Remove some longhand property files
d526a07 Add regression test for getComputedStyle() liveness
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for jsdom since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates @types/node from 25.2.1 to 25.6.0

Commits

See full diff in compare view

Updates eslint from 9.39.2 to 10.2.0

Release notes

Sourced from eslint's releases.

v10.2.0

Features

586ec2f feat: Add meta.languages support to rules (#20571) (Copilot)

14207de feat: add Temporal to no-obj-calls (#20675) (Pixel998)

bbb2c93 feat: add Temporal to ES2026 globals (#20672) (Pixel998)

Bug Fixes

542cb3e fix: update first-party dependencies (#20714) (Francesco Trotta)

Documentation

a2af743 docs: add language to configuration objects (#20712) (Francesco Trotta)

845f23f docs: Update README (GitHub Actions Bot)

5fbcf59 docs: remove sourceType from ts playground link (#20477) (Tanuj Kanti)

8702a47 docs: Update README (GitHub Actions Bot)

ddeaded docs: Update README (GitHub Actions Bot)

2b44966 docs: add Major Releases section to Manage Releases (#20269) (Milos Djermanovic)

eab65c7 docs: update eslint versions in examples (#20664) (루밀LuMir)

3e4a299 docs: update ESM Dependencies policies with note for own-usage packages (#20660) (Milos Djermanovic)

Chores

8120e30 refactor: extract no unmodified loop condition (#20679) (kuldeep kumar)

46e8469 chore: update dependency markdownlint-cli2 to ^0.22.0 (#20697) (renovate[bot])

01ed3aa test: add unit tests for unicode utilities (#20622) (Manish chaudhary)

811f493 ci: remove --legacy-peer-deps from types integration tests (#20667) (Milos Djermanovic)

6b86fcf chore: update dependency npm-run-all2 to v8 (#20663) (renovate[bot])

632c4f8 chore: add prettier update commit to .git-blame-ignore-revs (#20662) (루밀LuMir)

b0b0f21 chore: update dependency eslint-plugin-regexp to ^3.1.0 (#20659) (Milos Djermanovic)

228a2dd chore: update dependency eslint-plugin-eslint-plugin to ^7.3.2 (#20661) (Milos Djermanovic)

3ab4d7e test: Add tests for eslintrc-style keys (#20645) (kuldeep kumar)

v10.1.0

Features

ff4382b feat: apply fix for no-var in TSModuleBlock (#20638) (Tanuj Kanti)

0916995 feat: Implement api support for bulk-suppressions (#20565) (Blake Sager)

Bug Fixes

2b8824e fix: Prevent no-var autofix when a variable is used before declaration (#20464) (Amaresh S M)

e58b4bf fix: update eslint (#20597) (renovate[bot])

Documentation

b7b57fe docs: use correct JSDoc link in require-jsdoc.md (#20641) (mkemna-clb)

58e4cfc docs: add deprecation notice partial (#20639) (Milos Djermanovic)

7143dbf docs: update v9 migration guide for @eslint/js usage (#20540) (fnx)

035fc4f docs: note that globalReturn applies only with sourceType: "script" (#20630) (Milos Djermanovic)

e972c88 docs: merge ESLint option descriptions into type definitions (#20608) (Francesco Trotta)

7f10d84 docs: Update README (GitHub Actions Bot)

aeed007 docs: open playground link in new tab (#20602) (Tanuj Kanti)

a0d1a37 docs: Add AI Usage Policy (#20510) (Nicholas C. Zakas)

Chores

... (truncated)

Commits

000128c 10.2.0
1988fad Build: changelog update for 10.2.0
542cb3e fix: update first-party dependencies (#20714)
a2af743 docs: add language to configuration objects (#20712)
845f23f docs: Update README
5fbcf59 docs: remove sourceType from ts playground link (#20477)
8702a47 docs: Update README
ddeaded docs: Update README
8120e30 refactor: extract no unmodified loop condition (#20679)
46e8469 chore: update dependency markdownlint-cli2 to ^0.22.0 (#20697)
Additional commits viewable in compare view

Updates jest from 30.2.0 to 30.3.0

Release notes

Sourced from jest's releases.

v30.3.0

Features

[jest-config] Add defineConfig and mergeConfig helpers for type-safe Jest config (#15844)

[jest-fake-timers] Add setTimerTickMode to configure how timers advance

[*] Reduce token usage when run through LLMs (3f17932)

Fixes

[jest-config] Keep CLI coverage output when using --json with --outputFile (#15918)

[jest-mock] Use Symbol from test environment (#15858)

[jest-reporters] Fix issue where console output not displayed for GHA reporter even with silent: false option (#15864)

[jest-runtime] Fix issue where user cannot utilize dynamic import despite specifying --experimental-vm-modules Node option (#15842)

[jest-test-sequencer] Fix issue where failed tests due to compilation errors not getting re-executed even with --onlyFailures CLI option (#15851)

[jest-util] Make sure process.features.require_module is false (#15867)

Chore & Maintenance

[*] Replace remaining micromatch uses with picomatch

[deps] Update to sinon/fake-timers v15

[docs] Update V30 migration guide to notify users on jest.mock() work with case-sensitive path (#15849)

Updated Twitter icon to match the latest brand guidelines (#15869)

Changelog

Sourced from jest's changelog.

30.3.0

Features

[jest-config] Add defineConfig and mergeConfig helpers for type-safe Jest config (#15844)

[jest-fake-timers] Add setTimerTickMode to configure how timers advance

[*] Reduce token usage when run through LLMs (3f17932)

Fixes

[jest-config] Keep CLI coverage output when using --json with --outputFile (#15918)

[jest-mock] Use Symbol from test environment (#15858)

[jest-reporters] Fix issue where console output not displayed for GHA reporter even with silent: false option (#15864)

[jest-runtime] Fix issue where user cannot utilize dynamic import despite specifying --experimental-vm-modules Node option (#15842)

[jest-test-sequencer] Fix issue where failed tests due to compilation errors not getting re-executed even with --onlyFailures CLI option (#15851)

[jest-util] Make sure process.features.require_module is false (#15867)

Chore & Maintenance

[*] Replace remaining micromatch uses with picomatch

[deps] Update to sinon/fake-timers v15

[docs] Update V30 migration guide to notify users on jest.mock() work with case-sensitive path (#15849)

Updated Twitter icon to match the latest brand guidelines (#15869)

Commits

efb59c2 v30.3.0
96c53d3 feat(jest-config): add defineConfig and mergeConfig functions (#15844)
See full diff in compare view

Updates prettier from 3.8.1 to 3.8.2

Release notes

Sourced from prettier's releases.

3.8.2

Support Angular v21.2

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.2

diff

Angular: Support Angular v21.2 (#18722, #19034 by `@fisker`)

Exhaustive typechecking with @default never;

<!-- Input -->
@switch (foo) {
  @case (1) {}
  @default never;
}
<!-- Prettier 3.8.1 -->
SyntaxError: Incomplete block "default never". If you meant to write the @ character, you should use the "&#64;" HTML entity instead. (3:3)
<!-- Prettier 3.8.2 -->
@switch (foo) {
@case (1) {}
@default never;
}

arrow function and instanceof expressions.

<!-- Input -->
@let fn = (a) =>        a?    1:2;
{{ fn ( a         instanceof b)}}
<!-- Prettier 3.8.1 -->
@let fn = (a) =>        a?    1:2;
{{ fn ( a         instanceof b)}}
<!-- Prettier 3.8.2 -->
@let fn = (a) => (a ? 1 : 2);
{{ fn(a instanceof b) }}

Commits

b31557c Release 3.8.2
96bbaed Support Angular v21.2 (#18722)
881360b Support default never in Angular v21.2 (#19034)
07d6724 Bump Prettier dependency to 3.8.1
8b4a53a Clean changelog_unreleased
See full diff in compare view

Updates ts-jest from 29.4.6 to 29.4.9

Release notes

Sourced from ts-jest's releases.

v29.4.9

Please refer to CHANGELOG.md for details.

v29.4.8

No release notes provided.

v29.4.7

Please refer to CHANGELOG.md for details.

Changelog

Sourced from ts-jest's changelog.

29.4.7 (2026-04-01)

Features

support TypeScript v6 (eda517d)

Commits

bac2e77 chore(release): bump version to 29.4.9
f8a9cc9 fix: use correct registry for npm OIDC trusted publishing
e2eec26 fix: npm permissions
263f2ac chore: remove npm auth token
5df0e45 OIDC
f82c144 Merge pull request #5250 from kulshekhar/copilot/bump-patch-version
e6ec5ae Update CHANGELOG.md
62c3199 Update CHANGELOG.md
052e751 Bump patch version to 29.4.7
f79e77b Merge pull request #5249 from ext/feature/ts6-peer
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for ts-jest since your current version.

Updates typescript from 5.9.3 to 6.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

npm

Commits

607a22a Bump version to 6.0.2 and LKG
9e72ab7 🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...
35ff23d 🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...
e175b69 Bump version to 6.0.1-rc and LKG
af4caac Update LKG
8efd7e8 Merge remote-tracking branch 'origin/main' into release-6.0
206ed1a Deprecate assert in import() (#63172)
e688ac8 Update dependencies (#63156)
29b300d Bump the github-actions group across 1 directory with 2 updates (#63205)
0c2c7a3 DOM update (#63183)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the misc group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [dompurify](https://github.com/cure53/DOMPurify) | `3.3.1` | `3.3.3` | | [jsdom](https://github.com/jsdom/jsdom) | `28.0.0` | `29.0.2` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.2.1` | `25.6.0` | | [eslint](https://github.com/eslint/eslint) | `9.39.2` | `10.2.0` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.2.0` | `30.3.0` | | [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.8.2` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.6` | `29.4.9` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.2` | Updates `dompurify` from 3.3.1 to 3.3.3 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.3.1...3.3.3) Updates `jsdom` from 28.0.0 to 29.0.2 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v28.0.0...v29.0.2) Updates `@types/node` from 25.2.1 to 25.6.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 9.39.2 to 10.2.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.2...v10.2.0) Updates `jest` from 30.2.0 to 30.3.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.3.0/packages/jest) Updates `prettier` from 3.8.1 to 3.8.2 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.1...3.8.2) Updates `ts-jest` from 29.4.6 to 29.4.9 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.6...v29.4.9) Updates `typescript` from 5.9.3 to 6.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.2) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: misc - dependency-name: jsdom dependency-version: 29.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: misc - dependency-name: "@types/node" dependency-version: 25.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: misc - dependency-name: eslint dependency-version: 10.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: misc - dependency-name: jest dependency-version: 30.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: misc - dependency-name: prettier dependency-version: 3.8.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: misc - dependency-name: ts-jest dependency-version: 29.4.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: misc - dependency-name: typescript dependency-version: 6.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: misc ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 10, 2026

dependabot Bot requested a review from JamesIves as a code owner April 10, 2026 10:04

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 10, 2026

github-actions Bot added the chore 🧹 Changes which involve repo tidiness. label Apr 10, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the misc group across 1 directory with 8 updates - #1051

chore(deps): bump the misc group across 1 directory with 8 updates#1051
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/misc-f886293d5a

dependabot Bot commented on behalf of github Apr 10, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Apr 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

DOMPurify 3.3.3

DOMPurify 3.3.2

v29.0.2

v29.0.1

v29.0.0

v28.1.0

v10.2.0

Features

Bug Fixes

Documentation

Chores

v10.1.0

Features

Bug Fixes

Documentation

Chores

v30.3.0

Features

Fixes

Chore & Maintenance

30.3.0

Features

Fixes

Chore & Maintenance

3.8.2

3.8.2

Angular: Support Angular v21.2 (#18722, #19034 by @​fisker)

v29.4.9

v29.4.8

v29.4.7

29.4.7 (2026-04-01)

Features

TypeScript 6.0

TypeScript 6.0 Beta

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Apr 10, 2026 •

edited

Loading

Angular: Support Angular v21.2 (#18722, #19034 by `@fisker`)