chore(deps): bump the dependencies group across 1 directory with 13 updates by dependabot[bot] · Pull Request #362 · zaproxy/actions-common

dependabot · 2026-09-01T22:14:07Z

Bumps the dependencies group with 12 updates in the / directory:

Package	From	To
@octokit/plugin-retry	`8.1.0`	`8.1.1`
@octokit/plugin-throttling	`11.0.3`	`11.0.5`
babel-jest	`30.4.1`	`30.5.0`
@tsconfig/node24	`24.0.4`	`24.0.5`
@types/lodash	`4.17.24`	`4.17.25`
@types/node	`26.1.0`	`26.4.0`
@typescript-eslint/eslint-plugin	`8.60.1`	`8.68.0`
eslint-plugin-jest	`29.15.2`	`29.16.5`
jest	`30.4.2`	`30.5.0`
prettier	`3.8.3`	`3.9.6`
semantic-release	`25.0.3`	`25.0.9`
ts-jest	`29.4.11`	`29.4.12`

Updates @octokit/plugin-retry from 8.1.0 to 8.1.1

Release notes

Sourced from @octokit/plugin-retry's releases.

v8.1.1

8.1.1 (2026-08-01)

Bug Fixes

deps: update dependency @octokit/types to v17 (#685) (a323a9a)

Commits

ed95dae ci(action): update actions/checkout action to v7 (#680)
a323a9a fix(deps): update dependency @octokit/types to v17 (#685)
944c701 ci(action): update actions/setup-node action to v7 (#682)
3a4e3d0 build(deps): lock file maintenance (#684)
bae11ba build(deps): lock file maintenance (#679)
433e259 chore(deps): update dependency esbuild to ^0.28.0 [security] (#678)
03ed096 build(deps): lock file maintenance (#669)
5a0d924 build(deps): lock file maintenance (#664)
f8773e4 tests: correct the errorRequest tests due not testing the right thing (#662)
4447fd3 chore(deps): update dependency esbuild to ^0.27.0 (#652)
Additional commits viewable in compare view

Updates @octokit/plugin-throttling from 11.0.3 to 11.0.5

Release notes

Sourced from @octokit/plugin-throttling's releases.

v11.0.5

11.0.5 (2026-08-01)

Bug Fixes

deps: update dependency @octokit/types to v17 (#860) (4859cd1)

v11.0.4

11.0.4 (2026-08-01)

Bug Fixes

defer Bottleneck instantiation until first request (CF Workers compat) (#850) (d711c52)

Commits

54030a4 ci(action): update actions/setup-node action to v7 (#857)
4859cd1 fix(deps): update dependency @octokit/types to v17 (#860)
d711c52 fix: defer Bottleneck instantiation until first request (CF Workers compat) (...
003e302 chore(deps): update dependency typescript to v7 (#856)
d218863 build(deps): lock file maintenance (#859)
0c6f81f build(deps): lock file maintenance (#853)
e064466 chore(deps): update dependency esbuild to ^0.28.0 [security] (#852)
cb71e45 build(deps): lock file maintenance (#841)
1a64804 build(deps-dev): bump lodash-es from 4.17.23 to 4.18.1 (#835)
07c8297 build(deps): lock file maintenance (#833)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @octokit/plugin-throttling since your current version.

Updates babel-jest from 30.4.1 to 30.5.0

Release notes

Sourced from babel-jest's releases.

v30.5.0

On a personal note: King Harald V of Norway passed away this morning. He ascended the throne 35 years ago, two months before I was born. This release is dedicated to his memory. Hvil i fred 🇳🇴

This is a big release. It touches jest-runtime, jest-resolve and jest-haste-map in many places, and with this many changes there might be regressions 😬. If your suite behaves differently after upgrading, please open an issue.

Highlights

whenCalledWith

Mock functions can now configure return values per argument list, contributed by @timkindberg (#16053):
const fn = jest.fn();
fn.whenCalledWith('apple').mockReturnValue('red');
fn.whenCalledWith('banana').mockReturnValue('yellow');
fn.whenCalledWith(expect.any(Number)).mockReturnValue('numeric');
fn('apple'); // 'red'
fn('banana'); // 'yellow'
fn(42); // 'numeric'
fn('grape'); // undefined
The returned object is a real Mock, so mockReturnValueOnce, mockResolvedValue, mockImplementation etc. all chain here too. Argument slots accept literals or any asymmetric matcher, with the same equality semantics as toHaveBeenCalledWith(). Calls that match nothing fall through to the base mock. See the Mock Functions docs for matching and precedence details.

Describe-level retries

jest.retryTimes() can now retry a whole describe block instead of a single test, contributed by @soltonigiri (#16322). Each attempt reruns the block's beforeAll/afterAll hooks, child tests and nested describes, which helps when tests in a block depend on shared state:
describe('workflow', () => {
  jest.retryTimes(3, {entireDescribe: true});
test('first step', () => {});
test('second step', () => {}); // a failure retries the entire block
});
New file watcher

The non-watchman path of jest-haste-map is rewritten. @parcel/watcher replaces the homegrown NodeWatcher and FSEventsWatcher (#16188), and fdir replaces the hand-rolled directory recursion in the crawler (#16187). A batch of fixes also makes watching and indexing survive locked files on Windows, watchman failures, and duplicate manual mocks (#16295, #16358, #16355, #16360).

If you can, please run your suite with --no-watchman (in and out of watch mode) to exercise the new crawler and watchers, and report anything odd 👍

Long-requested dependency updates

babel-plugin-istanbul is updated to v8 (#16049)

glob is updated to v13 (#16397)

... (truncated)

Changelog

Sourced from babel-jest's changelog.

30.5.0

Features

[@jest/expect-utils, jest-mock] Add mockFn.whenCalledWith(...args) for configuring return values per argument list, with first-class asymmetric-matcher support (#16053)

[@jest/expect-utils] Export AsymmetricMatcher and FunctionParameters types (previously private to expect) (#16053)

[jest-circus, jest-core, jest-jasmine2, jest-test-result, jest-types] --collectTests now expands test.each/describe.each cases and reports per-status counts (skipped/todo via the new wouldRun flag for selected tests) plus a summary line that match a real run, including under --testNamePattern and .only/fdescribe focus on both the circus and jasmine2 runners (#16259)

[jest-circus, jest-environment, jest-runtime, jest-types] Add describe-level retries via jest.retryTimes(..., {entireDescribe: true}) (#16322)

[jest-circus, jest-message-util, jest-reporters, jest-types] Add retryMessages to AssertionResult and export formatErrorStack, so the retry log renders nested cause and AggregateError sections with code frames instead of serialized [cause]:/[errors]: markers (#16316)

[jest-circus, jest-types] Add unhandledErrorsDetailed to Circus.RunResult, so an unhandled rejection reports its cause chain and AggregateError entries with code frames instead of a pre-serialized stack (#16316)

[jest-haste-map] Replace NodeWatcher and FSEventsWatcher with @parcel/watcher for the non-watchman watch path (#16188)

[jest-resolve] Bump unrs-resolver to 1.12.1, remove jest-pnp-resolver and unnecessary checks (#15721)

[jest-resolve] Honor Node's --preserve-symlinks / NODE_PRESERVE_SYMLINKS in the default resolver by passing symlinks: false to unrs-resolver (#16260)

[jest-runtime] Apply automocking and manual __mocks__ files to synchronously evaluable ESM graphs on Node 24.9+ - static imports, dynamic import() and require() of an ESM file now generate an automock from the real module's namespace instead of failing with "Attempting to import a mock without a factory". Graphs that need async evaluation (top-level await) or an async-only resolver or transformer still throw (#16391)

[jest-runtime] Route process.getBuiltinModule through the sandbox, so it returns the sandbox process and the hooked node:module instead of the host's (#16391)

[jest-runtime] Throw an actionable error from module.register() and module.registerHooks() inside a test - the hooks attached to the loader running Jest itself, never saw the sandboxed requires they were meant for, and stayed registered for every later test file in the worker (#16391)

[jest-runtime] Surface resolution and import-attribute errors in an ESM graph before executing any of its CJS dependencies on Node 24.9+, matching Node's run-nothing-on-a-broken-graph behavior; the legacy loader on older versions keeps its linking-time execution order (#16391)

[jest-runtime] Throw ERR_SOURCE_PHASE_NOT_DEFINED with an actionable message for import source and import.source(), instead of failing at instantiation with V8's bare "Source phase import object is not defined" (#16391)

[jest-runtime] Emit the JSON-without-import-attribute deprecation warning once per test file instead of once per worker, so it is no longer silently swallowed for every file after the first (#16391)

[jest-runtime] Set import.meta.main to true in the test file and false in every module it loads, matching Node 24+ (#16367)

[jest-runtime] Resolve the module-sync export condition, so a package that exposes its ESM entry point for require() loads the same file Node would (#16336)

[jest-snapshot] Add external snapshot paths to custom reporter failure details (#16374)

Fixes

[jest-console, jest-reporters] CustomConsole now buffers console output so TestResult.console is populated for reporters when verbose is enabled, while GitHubActionsReporter avoids replaying buffered output in verbose mode (#16155)

[expect, jest-message-util, jest-pattern, jest-regex-util, jest-util] Revert node: protocol imports to restore webpack/browser-bundle compatibility (#16167)

[expect] Widen toMatchObject and objectContaining parameter type from Record<string, unknown> to object so class instances are accepted (#16196)

[jest-circus] Call a generator test body with the shared test context, so this matches what a regular test function receives (#16347)

[jest-circus] Capture the error listeners of the parent process instead of the in-sandbox process, so listeners registered before the test file survive teardown and sandbox listeners no longer leak onto the parent (#16347)

[jest-circus] Clear currentlyRunningTest after skipped and todo tests (#16342)

[jest-circus] Prevent late done() callbacks from affecting later test or hook invocations (#16343)

[jest-circus, jest-jasmine2] Honor --expand when formatting node:assert failures, instead of always collapsing the diff (#16347)

[jest-circus, jest-jasmine2, jest-message-util] Serialize the inner errors of an AggregateError into failureMessages, retryReasons and unhandledErrors, so --json output and reporter annotations include them (#16316)

[jest-circus, jest-snapshot] Keep snapshot state and counts correct when a test retries (#16344)

[@jest/create-cache-key-function] Include the caller support flags in the generated key, so a transformer that emits ESM or CJS based on them no longer shares one cache entry between the two (#16331)

[@jest/create-cache-key-function] Include the stringified project config in the generated key, so editing a transformer's own settings invalidates what it cached (#16331)

[@jest/transform] Include the caller support flags in a transform's cache key, so a file transformed both as ESM and as CJS no longer serves one shape's output for the other (#16331)

[jest-config] Add missing findRelatedTests, outputFile, and replname entries to ValidConfig so they no longer trigger spurious "Unknown option" warnings (#16224)

[jest-config] Use --config for the global config when multiple --projects are specified (#16273)

[jest-core] Serialize bigint values in --json and --outputFile output as their literal form (4n), instead of failing the run with TypeError: Do not know how to serialize a BigInt (#16338)

[jest-core] Do not report a CustomGC async resource (used by N-API addons such as napi-rs for per-isolate GC bookkeeping) as an open handle, since it is napi_unref'd by the addon and can never keep the event loop alive (#16379)

[jest-each] Keep a $&, $`, $' or $$ inside a %p param value out of the replacement, so the title shows the value instead of the text around it (#16338)

[jest-each] Interpolate a bigint into a %j title as its literal form ("4n") at any depth, instead of throwing TypeError: Do not know how to serialize a BigInt while collecting the tests (#16338)

[jest-environment, jest-runtime] Bind sandboxInjectedGlobals to the right values when injectGlobals is false, instead of shifting every one of them by a position (#16377)

[jest-environment-node, jest-util] Only warn about a conflicting globalsCleanup mode when one was explicitly configured, and follow the mode that is actually in effect (#16323)

[jest-environment-node, jest-util] Stop resolving lazy globals when setting up an environment, so Node 26's builtin module globals are no longer loaded (and no longer emit their deprecation warnings) for every test file (#16324)

[jest-haste-map] Keep watch mode alive when an outside process briefly makes a file unreadable on Windows, instead of tearing the watcher down on EPERM (#16295)

[jest-haste-map] Keep indexing when an outside process holds a file open on Windows, instead of failing the whole crawl on EPERM (#16358)

[jest-haste-map] Keep a duplicated manual mock resolving when the file it pointed at is deleted in watch mode (#16360)

... (truncated)

Commits

912baa3 v30.5.0
8e6d128 Update istanbul dependencies (#16049)
1865dd8 chore: update yarn & refresh lockfiles (#16251)
ff542da chore(deps): update babel monorepo to v8.0.0-rc.5 (#16172)
b91717a chore: refresh coding agent instructions (#16182)
See full diff in compare view

Updates @tsconfig/node24 from 24.0.4 to 24.0.5

Commits

See full diff in compare view

Updates @types/lodash from 4.17.24 to 4.17.25

Commits

See full diff in compare view

Updates @types/node from 26.1.0 to 26.4.0

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.60.1 to 8.68.0

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

eslint-plugin: [strict-void-return] add fix suggestions (#12086)

utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

eslint-plugin: [unified-signatures] deduplicate types in report (#12656)

eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)

eslint-plugin: [unified-signatures] report identical signatures (#12678)

eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)

eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)

eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)

website: playground crashes on extends configs (#12608)

website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

Evyatar Daud @StyleShit

Hugo @hugop95

Josh Goldberg ✨

Niki @phaux

Thiago Barbosa

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

... (truncated)

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.68.0 (2026-08-24)

🚀 Features

eslint-plugin: [strict-void-return] add fix suggestions (#12086)

🩹 Fixes

eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)

eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)

eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)

eslint-plugin: [unified-signatures] report identical signatures (#12678)

eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)

eslint-plugin: [unified-signatures] deduplicate types in report (#12656)

❤️ Thank You

Evyatar Daud @StyleShit

Hugo @hugop95

Niki @phaux

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.67.0 (2026-08-10)

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.66.0 (2026-08-03)

🩹 Fixes

eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#12617)

eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#12588)

eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#12607)

eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#12591)

eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#12590)

❤️ Thank You

Evyatar Daud @StyleShit

송재욱

See GitHub Releases for more information.

... (truncated)

Commits

8f4e00a chore(release): publish 8.68.0
db30514 feat(eslint-plugin): [strict-void-return] add fix suggestions (#12086)
9690339 test(eslint-plugin): [prefer-optional-chain] use createRuleTesterWithTypes ...
abe9011 fix(eslint-plugin): [no-empty-object-type] ignore suggestions that result in ...
79c16e7 chore(eslint-plugin): extract FunctionSignature and enum comparison utils (#1...
2442e30 test(eslint-plugin): [no-floating-promises] format test snippets (#12723)
3596323 fix(eslint-plugin): [no-floating-promises] setting ignoreVoid: false result...
956a339 fix(eslint-plugin): [no-unnecessary-type-assertion] prevent stack overflow in...
55f6d5d chore: enable source maps (#12677)
3aefb6a test: improve vitest performance with isolate: false (#12703)
Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.60.1 to 8.68.0

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

eslint-plugin: [strict-void-return] add fix suggestions (#12086)

utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

eslint-plugin: [unified-signatures] deduplicate types in report (#12656)

eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)

eslint-plugin: [unified-signatures] report identical signatures (#12678)

eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)

eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)

eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)

website: playground crashes on extends configs (#12608)

website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

Evyatar Daud @StyleShit

Hugo @hugop95

Josh Goldberg ✨

Niki @phaux

Thiago Barbosa

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

... (truncated)

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.68.0 (2026-08-24)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.67.0 (2026-08-10)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.66.0 (2026-08-03)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.65.0 (2026-07-20)

🚀 Features

add warning when TS 7 is detected (#12529)

parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

... (truncated)

Commits

8f4e00a chore(release): publish 8.68.0
55f6d5d chore: enable source maps (#12677)
20a261f chore(release): publish 8.67.0
3b155bb chore: use typescript 7 for typechecking (#12601)
e51b11b chore(release): publish 8.66.0
63ba81b chore(release): publish 8.65.0
eaf4576 feat: add warning when TS 7 is detected (#12529)
d8f1044 feat(parser): add onUnsupportedTypeScriptVersion option to error on unsupport...
0d06406 chore: add attw validation to repo (#12437)
c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
Additional commits viewable in compare view

Updates eslint-plugin-jest from 29.15.2 to 29.16.5

Release notes

Sourced from eslint-plugin-jest's releases.

v29.16.5

29.16.5 (2026-08-27)

Bug Fixes

no-export: handle literal property accessors (#2011) (d848f70)

v29.16.4

29.16.4 (2026-08-27)

Bug Fixes

no-export: handle nested assignment chains (#2009) (14b559a)

v29.16.3

29.16.3 (2026-08-27)

Bug Fixes

no-export: check for exports global (#1988) (f506cb2)

v29.16.2

29.16.2 (2026-08-25)

Bug Fixes

prefer-equality-matcher: don't crash on expect chain without a value (#2006) (27665cd)

v29.16.1

29.16.1 (2026-08-12)

Bug Fixes

prefer-comparison-matcher: don't crash on expect chain without a value (#2001) (a4d20e0)

prefer-expect-resolves: don't crash on expect chain without a value (#2002) (0cf65de)

v29.16.0

29.16.0 (2026-07-24)

Features

valid-expect-with-promise: add checkThenables option for custom promises (#1996) (692c748)

v29.15.5

... (truncated)

Changelog

Sourced from eslint-plugin-jest's changelog.

29.16.5 (2026-08-27)

Bug Fixes

no-export: handle literal property accessors (#2011) (d848f70)

29.16.4 (2026-08-27)

Bug Fixes

no-export: handle nested assignment chains (#2009) (14b559a)

29.16.3 (2026-08-27)

Bug Fixes

no-export: check for exports global (#1988) (f506cb2)

29.16.2 (2026-08-25)

Bug Fixes

prefer-equality-matcher: don't crash on expect chain without a value (#2006) (27665cd)

29.16.1 (2026-08-12)

Bug Fixes

prefer-comparison-matcher: don't crash on expect chain without a value (#2001) (a4d20e0)

prefer-expect-resolves: don't crash on expect chain without a value (#2002) (0cf65de)

29.16.0 (2026-07-24)

Features

valid-expect-with-promise: add checkThenables option for custom promises (#1996) (692c748)

29.15.5 (2026-07-20)

Bug Fixes

allow TypeScript v7 as a peer dependency (#1992) (155ba2e)

... (truncated)

Commits

b1c0328 chore(release): 29.16.5 [skip ci]
d848f70 fix(no-export): handle literal property accessors (#2011)
fc5657c refactor: use replaceText in fixers when possible (#2012)
6156650 chore(release): 29.16.4 [skip ci]
14b559a fix(no-export): handle nested assignment chains (#2009)
9518a24 refactor(no-export): remove unneeded length check (#2010)
4474ac9 chore(release): 29.16.3 [skip ci]
f506cb2 fix(no-export): check for exports global (#1988)
8b43c66 chore(deps): lock file maintenance (#2003)
ba1a215 chore: explicitly set types (#2008)
Additional commits viewable in compare view

Updates jest from 30.4.2 to 30.5.0

Release notes

Sourced from jest's releases.

v30.5.0

On a personal note: King Harald V of Norway passed away this morning. He ascended the throne 35 years ago, two months before I was born. This release is dedicated to his memory. Hvil i fred 🇳🇴

This is a big release. It touches jest-runtime, jest-resolve and jest-haste-map in many places, and with this many changes there might be regressions 😬. If your suite behaves differently after upgrading, please open an issue.

Highlights

whenCalledWith

Mock functions can now configure return values per argument list, contributed by @timkindberg (#16053):
const fn = jest.fn();
fn.whenCalledWith('apple').mockReturnValue('red');
fn.whenCalledWith('banana').mockReturnValue('yellow');
fn.whenCalledWith(expect.any(Number)).mockReturnValue('numeric');
fn('apple'); // 'red'
fn('banana'); // 'yellow'
fn(42); // 'numeric'
fn('grape'); // undefined
The returned object is a real Mock, so mockReturnValueOnce, mockResolvedValue, mockImplementation etc. all chain here too. Argument slots accept literals or any asymmetric matcher, with the same equality semantics as toHaveBeenCalledWith(). Calls that match nothing fall through to the base mock. See the Mock Functions docs for matching and precedence details.

Describe-level retries

jest.retryTimes() can now retry a whole describe block instead of a single test, contributed by @soltonigiri (#16322). Each attempt reruns the block's beforeAll/afterAll hooks, child tests and nested describes, which helps when tests in a block depend on shared state:
describe('workflow', () => {
  jest.retryTimes(3, {entireDescribe: true});
test('first step', () => {});
test('second step', () => {}); // a failure retries the entire block
});
New file watcher

The non-watchman path of jest-haste-map is rewritten. @parcel/watcher replaces the homegrown NodeWatcher and FSEventsWatcher (#16188), and fdir replaces the hand-rolled directory recursion in the crawler (#16187). A batch of fixes also makes watching and indexing survive locked files on Windows, watchman failures, and duplicate manual mocks (#16295, #16358, #16355, #16360).

If you can, please run your suite with --no-watchman (in and out of watch mode) to exercise the new crawler and watchers, and report anything odd 👍

Long-requested dependency updates

babel-plugin-istanbul is updated to v8 (#16049)

glob is updated to v13 (#16397)

... (truncated)

Changelog

Sourced from jest's changelog.

30.5.0

Features

[@jest/expect-utils, jest-mock] Add mockFn.whenCalledWith(...args) for configuring return values per argument list, with first-class asymmetric-matcher support (#16053)

[@jest/expect-utils] Export AsymmetricMatcher and FunctionParameters types (previously private to expect) (#16053)

[jest-circus, jest-core, jest-jasmine2, jest-test-result, jest-types] --collectTests now expands test.each/describe.each cases and reports per-status counts (skipped/todo via the new wouldRun flag for selected tests) plus a summary line that match a real run, including under --testNamePattern and .only/fdescribe focus on both the circus and jasmine2 runners (#16259)

[jest-circus, jest-environment, jest-runtime, jest-types] Add describe-level retries via jest.retryTimes(..., {entireDescribe: true}) (

…pdates Bumps the dependencies group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@octokit/plugin-retry](https://github.com/octokit/plugin-retry.js) | `8.1.0` | `8.1.1` | | [@octokit/plugin-throttling](https://github.com/octokit/plugin-throttling.js) | `11.0.3` | `11.0.5` | | [babel-jest](https://github.com/jestjs/jest/tree/HEAD/packages/babel-jest) | `30.4.1` | `30.5.0` | | [@tsconfig/node24](https://github.com/tsconfig/bases/tree/HEAD/bases) | `24.0.4` | `24.0.5` | | [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) | `4.17.24` | `4.17.25` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.0` | `26.4.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.60.1` | `8.68.0` | | [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) | `29.15.2` | `29.16.5` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.4.2` | `30.5.0` | | [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.6` | | [semantic-release](https://github.com/semantic-release/semantic-release) | `25.0.3` | `25.0.9` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.11` | `29.4.12` | Updates `@octokit/plugin-retry` from 8.1.0 to 8.1.1 - [Release notes](https://github.com/octokit/plugin-retry.js/releases) - [Commits](octokit/plugin-retry.js@v8.1.0...v8.1.1) Updates `@octokit/plugin-throttling` from 11.0.3 to 11.0.5 - [Release notes](https://github.com/octokit/plugin-throttling.js/releases) - [Commits](octokit/plugin-throttling.js@v11.0.3...v11.0.5) Updates `babel-jest` from 30.4.1 to 30.5.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.5.0/packages/babel-jest) Updates `@tsconfig/node24` from 24.0.4 to 24.0.5 - [Commits](https://github.com/tsconfig/bases/commits/HEAD/bases) Updates `@types/lodash` from 4.17.24 to 4.17.25 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash) Updates `@types/node` from 26.1.0 to 26.4.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 8.60.1 to 8.68.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.68.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.60.1 to 8.68.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.68.0/packages/parser) Updates `eslint-plugin-jest` from 29.15.2 to 29.16.5 - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases) - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md) - [Commits](jest-community/eslint-plugin-jest@v29.15.2...v29.16.5) Updates `jest` from 30.4.2 to 30.5.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.5.0/packages/jest) Updates `prettier` from 3.8.3 to 3.9.6 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.3...3.9.6) Updates `semantic-release` from 25.0.3 to 25.0.9 - [Release notes](https://github.com/semantic-release/semantic-release/releases) - [Commits](semantic-release/semantic-release@v25.0.3...v25.0.9) Updates `ts-jest` from 29.4.11 to 29.4.12 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.11...v29.4.12) --- updated-dependencies: - dependency-name: "@octokit/plugin-retry" dependency-version: 8.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@octokit/plugin-throttling" dependency-version: 11.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: babel-jest dependency-version: 30.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@tsconfig/node24" dependency-version: 24.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@types/lodash" dependency-version: 4.17.25 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: "@types/node" dependency-version: 26.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.68.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.68.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: eslint-plugin-jest dependency-version: 29.16.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: jest dependency-version: 30.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: prettier dependency-version: 3.9.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: semantic-release dependency-version: 25.0.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: ts-jest dependency-version: 29.4.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

psiinon · 2026-09-01T22:17:52Z

Checkmarx One – Scan Summary & Details – a8923ba4-fef1-4718-ba31-019c3f25080a

New Issues (10)

High: 9 · Medium: 1

Checkmarx found the following issues in this Pull Request

#	Issue	Source File / Package	Checkmarx Insight
1	CVE-2026-69152	Npm-brace-expansion-1.1.13	details Recommended version: 1.1.18 Description: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.x prior to 2.1.4, 3.x prior to 3.... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
2	CVE-2026-69152	Npm-brace-expansion-2.0.3	details Recommended version: 2.1.4 Description: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.x prior to 2.1.4, 3.x prior to 3.... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
3	CVE-2026-69152	Npm-brace-expansion-5.0.6	details Recommended version: 5.0.9 Description: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.x prior to 2.1.4, 3.x prior to 3.... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
4	CVE-2026-69192	Npm-ip-address-10.2.0	details Recommended version: 10.3.1 Description: ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
5	CVE-2026-73088	Npm-browserslist-4.28.2	details Recommended version: 4.28.7 Description: Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, "normalizeStats()" ... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
6	CVE-2026-73089	Npm-browserslist-4.28.2	details Recommended version: 4.28.7 Description: Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, index.js retains ev... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
7	CVE-2026-73566	Npm-tar-7.5.16	details Recommended version: 7.5.21 Description: node-tar is a tar archive manipulation library for Node.js. Prior to version 7.5.21, node-tar's `filesFilter` in `src/list.ts` uses the recursive `... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
8	Cx0e1b35ca-f68b	Npm-js-yaml-4.1.1	details Recommended version: 4.3.1 Description: "resolveYamlOmap()" enforces key uniqueness for !!omap sequences with a linear scan (objectKeys.indexOf(...)) inside the per-element loop, making r... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
9	Cx0e1b35ca-f68b	Npm-js-yaml-3.14.2	details Recommended version: 3.15.1 Description: "resolveYamlOmap()" enforces key uniqueness for !!omap sequences with a linear scan (objectKeys.indexOf(...)) inside the per-element loop, making r... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
10	CVE-2026-76845	Npm-adm-zip-0.6.0	details Description: adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing... Attack Vector: LOCAL Attack Complexity: LOW Vulnerable Package

Fixed Issues (1)

High: 1

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	~~Cxdca8e59f-8bfe~~	Npm-inflight-1.0.6

Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026

Navigation Menu

Uh oh!

chore(deps): bump the dependencies group across 1 directory with 13 updates - #362

chore(deps): bump the dependencies group across 1 directory with 13 updates#362
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/dependencies-bde0a5d70f

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

psiinon commented Sep 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026

v8.1.1

8.1.1 (2026-08-01)

Bug Fixes

v11.0.5

11.0.5 (2026-08-01)

Bug Fixes

v11.0.4

11.0.4 (2026-08-01)

Bug Fixes

v30.5.0

Highlights

whenCalledWith

Describe-level retries

New file watcher

Long-requested dependency updates

30.5.0

Features

Fixes

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

❤️ Thank You

v8.66.0

8.68.0 (2026-08-24)

🚀 Features

🩹 Fixes

❤️ Thank You

8.67.0 (2026-08-10)

8.66.0 (2026-08-03)

🩹 Fixes

❤️ Thank You

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

❤️ Thank You

v8.66.0

8.68.0 (2026-08-24)

8.67.0 (2026-08-10)

8.66.0 (2026-08-03)

8.65.0 (2026-07-20)

🚀 Features

❤️ Thank You

8.64.0 (2026-07-13)

v29.16.5

29.16.5 (2026-08-27)

Bug Fixes

v29.16.4

29.16.4 (2026-08-27)

Bug Fixes

v29.16.3

29.16.3 (2026-08-27)

Bug Fixes

v29.16.2

29.16.2 (2026-08-25)

Bug Fixes

v29.16.1

29.16.1 (2026-08-12)

Bug Fixes

v29.16.0

29.16.0 (2026-07-24)

Features

v29.15.5

29.16.5 (2026-08-27)

Bug Fixes

29.16.4 (2026-08-27)

Bug Fixes

29.16.3 (2026-08-27)

`whenCalledWith`

`whenCalledWith`