Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 8, 2025

Bumps fast-check from 4.2.0 to 4.4.0.

Release notes

Sourced from fast-check's releases.

Expose hidden arbitraries and widen capabilities of existing ones from a typing point of view

[Code][Diff]

Features

  • (PR#6232) Support full PropertyKey in fc.dictionary(...)
  • (PR#6267) Add fc.map arbitrary
  • (PR#6040) Add circular option to fc.letrec
  • (PR#6270) Add fc.set arbitrary
  • (PR#6334) REVERT-6040: Self-referencing capabilities from letrec

Fixes

  • (PR#6138) CI: Force OTP at publication time
  • (PR#6170) CI: Stop running tests against Windows
  • (PR#6178) CI: Add GH Action to reformat code in PRs or branches
  • (PR#6205) CI: Add GH Action to add contributors to the project
  • (PR#6246) CI: Fix PR mode in format-pr workflow
  • (PR#6184) CI: Add provenance attestation to npm package publishing
  • (PR#6248) CI: Add workflow to resolve pnpm lock file merge conflicts on PRs
  • (PR#6251) CI: Restrict Format workflow to PRs
  • (PR#6253) CI: Fix PR number type in workflows
  • (PR#6254) CI: Fix PR workflows
  • (PR#6255) CI: Fix PNPM conflicts workflow
  • (PR#6256) CI: Scope permissions of PR Format to job
  • (PR#6257) CI: Scope permissions of PR PNPM to job
  • (PR#6258) CI: Job level permissions for add contributor
  • (PR#6269) CI: Add GitHub Action to validate PR titles
  • (PR#6281) CI: Add back Windows runners for tests
  • (PR#6280) CI: Add back latest node for tests
  • (PR#6282) CI: Bump test matrix to Node 24
  • (PR#6283) CI: Shard tests producing coverage
  • (PR#6301) CI: Downgrade node in tests
  • (PR#6300) CI: Enforce trust-policy for pnpm
  • (PR#6307) CI: Add back latest Node in test matrix
  • (PR#6136) Doc: Release note for version 4.3.0
  • (PR#6169) Doc: Preserve links on Sponsors for the website
  • (PR#6172) Doc: Update CSP to properly display sponsors.svg
  • (PR#6173) Doc: Update CSP to properly display sponsors.svg
  • (PR#6174) Doc: Better support of mobile display for sponsors
  • (PR#6175) Doc: Better accessibility on website
  • (PR#6192) Doc: Add @traversable/zod-test to ecosystem
  • (PR#6204) Doc: Add ahrjarrett as doc contributor
  • (PR#6238) Doc: Add jamesbvaughan as code contributor
  • (PR#6250) Doc: Add GitHub Copilot instructions for gitmoji PR naming convention
  • (PR#6180) Doc: Generate llms.txt and related for AI crawlers
  • (PR#6279) Doc: Add emilianbold as code contributor
  • (PR#6287) Doc: Fix example in quick start guide
  • (PR#6288) Doc: Add russbiggs as doc contributor
  • (PR#6278) Performance: Use Math.imul and shifts in perf-critical paths

... (truncated)

Changelog

Sourced from fast-check's changelog.

4.4.0

Expose hidden arbitraries and widen capabilities of existing ones from a typing point of view [Code][Diff]

Features

  • (PR#6232) Support full PropertyKey in fc.dictionary(...)
  • (PR#6267) Add fc.map arbitrary
  • (PR#6040) Add circular option to fc.letrec
  • (PR#6270) Add fc.set arbitrary
  • (PR#6334) REVERT-6040: Self-referencing capabilities from letrec

Fixes

  • (PR#6138) CI: Force OTP at publication time
  • (PR#6170) CI: Stop running tests against Windows
  • (PR#6178) CI: Add GH Action to reformat code in PRs or branches
  • (PR#6205) CI: Add GH Action to add contributors to the project
  • (PR#6246) CI: Fix PR mode in format-pr workflow
  • (PR#6184) CI: Add provenance attestation to npm package publishing
  • (PR#6248) CI: Add workflow to resolve pnpm lock file merge conflicts on PRs
  • (PR#6251) CI: Restrict Format workflow to PRs
  • (PR#6253) CI: Fix PR number type in workflows
  • (PR#6254) CI: Fix PR workflows
  • (PR#6255) CI: Fix PNPM conflicts workflow
  • (PR#6256) CI: Scope permissions of PR Format to job
  • (PR#6257) CI: Scope permissions of PR PNPM to job
  • (PR#6258) CI: Job level permissions for add contributor
  • (PR#6269) CI: Add GitHub Action to validate PR titles
  • (PR#6281) CI: Add back Windows runners for tests
  • (PR#6280) CI: Add back latest node for tests
  • (PR#6282) CI: Bump test matrix to Node 24
  • (PR#6283) CI: Shard tests producing coverage
  • (PR#6301) CI: Downgrade node in tests
  • (PR#6300) CI: Enforce trust-policy for pnpm
  • (PR#6307) CI: Add back latest Node in test matrix
  • (PR#6136) Doc: Release note for version 4.3.0
  • (PR#6169) Doc: Preserve links on Sponsors for the website
  • (PR#6172) Doc: Update CSP to properly display sponsors.svg
  • (PR#6173) Doc: Update CSP to properly display sponsors.svg
  • (PR#6174) Doc: Better support of mobile display for sponsors
  • (PR#6175) Doc: Better accessibility on website
  • (PR#6192) Doc: Add @traversable/zod-test to ecosystem
  • (PR#6204) Doc: Add ahrjarrett as doc contributor
  • (PR#6238) Doc: Add jamesbvaughan as code contributor
  • (PR#6250) Doc: Add GitHub Copilot instructions for gitmoji PR naming convention
  • (PR#6180) Doc: Generate llms.txt and related for AI crawlers
  • (PR#6279) Doc: Add emilianbold as code contributor
  • (PR#6287) Doc: Fix example in quick start guide

... (truncated)

Commits
  • 33910a5 🔖 Update CHANGELOG.md for fast-check@4.4.0, @​fast-check/vitest@​0.2.4 (#6335)
  • 09ef663 ✨ REVERT-6040: Self-referencing capabilities from letrec (#6334)
  • ead616b ⬆️ Update dependency glob to v13 (#6330)
  • 86f73bf ♻️ Explicit null check in LazyArbitrary (#6321)
  • aa12370 ♻️ Iterate on own props array in letrec (#6320)
  • 4d054fd ♻️ Extract logic building lazy arbs (#6318)
  • ec5c36b ⬆️ Update dependency @​microsoft/api-extractor to ^7.55.1 (#6315)
  • 8178d2b ♻️ Factorize letrec implementations (#6311)
  • 90858c9 ⬆️ Update dependency glob to v12 (#6309)
  • d5cb506 ⬆️ Update dependency glob to ^11.1.0 (#6306)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for fast-check since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Bumps devDependency fast-check to 4.4.0 in injected and special-pages and updates the lockfile.

  • Dependencies:
    • Bump devDependency fast-check from ^4.2.0 to ^4.4.0 in injected/package.json and special-pages/package.json.
    • Refresh package-lock.json to reflect the new fast-check version.

Written by Cursor Bugbot for commit 3852076. This will update automatically on new commits. Configure here.

@dependabot dependabot bot added dependencies Update one or more dependencies version minor Increment the minor version when merged labels Dec 8, 2025
@dependabot dependabot bot requested review from a team, mgurgel and shakyShane as code owners December 8, 2025 10:02
@dependabot dependabot bot added dependencies Update one or more dependencies version minor Increment the minor version when merged labels Dec 8, 2025
@github-actions
Copy link

github-actions bot commented Dec 8, 2025

Temporary Branch Update

The temporary branch has been updated with the latest changes. Below are the details:

Please use the above install command to update to the latest version.

@netlify
Copy link

netlify bot commented Dec 8, 2025

Deploy Preview for content-scope-scripts canceled.

Name Link
🔨 Latest commit 3852076
🔍 Latest deploy log https://app.netlify.com/projects/content-scope-scripts/deploys/6936ac951424dd0008bfdb44

@jonathanKingston
Copy link
Contributor

@cursoragent can you review against our current testing and outline potential impacts based on the changelogs of the update?

@cursor
Copy link

cursor bot commented Dec 8, 2025

Impact Analysis: fast-check 4.2.0 → 4.4.0

Current Usage in Codebase

Found fast-check usage in 5 test files:

File APIs Used
injected/unit-test/timer-utils.js fc.integer(), fc.asyncProperty(), fc.assert()
injected/unit-test/broker-protection.js fc.property(), fc.string(), fc.option(), fc.anything(), fc.record(), fc.oneof(), fc.constant(), fc.dictionary(), fc.integer(), fc.boolean(), fc.object()
injected/unit-test/broker-protection-extractors.js fc.property(), fc.array(), fc.string()
special-pages/unit-test/color.spec.mjs fc.anything(), fc.property()
special-pages/unit-test/translations.mjs fc.anything(), fc.property(), fc.oneof(), fc.integer(), fc.float(), fc.object()

Changelog Impact Analysis

New Features (no breaking changes):

  • fc.map arbitrary - Not used in this codebase
  • fc.set arbitrary - Not used in this codebase
  • fc.dictionary() now supports full PropertyKey (string | number | symbol) - Used in broker-protection.js with fc.string() key, which remains compatible
  • fc.letrec circular option - Added then reverted in same release - Not used

Performance:

  • Math.imul and shifts in perf-critical paths - internal optimization, no API impact

All other changes: CI/documentation only

Test Results

All fast-check tests pass with v4.4.0:

  • injected workspace: fast-check tests pass (failures are unrelated build artifact checks)
  • special-pages workspace: 104/104 tests pass including property-based tests

Risk Assessment

Low risk upgrade:

  • No breaking changes in the release
  • fc.dictionary() widening is backward-compatible with existing fc.string() keys
  • Seeded test reproducibility maintained (hardcoded seeds in broker-protection.js work correctly)
  • All property-based tests continue to pass

Safe to merge.


Open in Cursor Open in Web

Learn more about Cursor Agents

@cursor
Copy link

cursor bot commented Dec 8, 2025

Cursor Agent can help with this pull request. Just @cursor in comments and I'll start working on changes in this branch.
Learn more about Cursor Agents

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/main/fast-check-4.4.0 branch 2 times, most recently from a235bc4 to 5f74051 Compare December 8, 2025 10:42
Bumps [fast-check](https://github.com/dubzzz/fast-check/tree/HEAD/packages/fast-check) from 4.2.0 to 4.4.0.
- [Release notes](https://github.com/dubzzz/fast-check/releases)
- [Changelog](https://github.com/dubzzz/fast-check/blob/main/packages/fast-check/CHANGELOG.md)
- [Commits](https://github.com/dubzzz/fast-check/commits/v4.4.0/packages/fast-check)

---
updated-dependencies:
- dependency-name: fast-check
  dependency-version: 4.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/main/fast-check-4.4.0 branch from 5f74051 to 3852076 Compare December 8, 2025 10:46
@jonathanKingston jonathanKingston added this pull request to the merge queue Dec 8, 2025
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Dec 8, 2025
@jonathanKingston jonathanKingston added this pull request to the merge queue Dec 8, 2025
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Dec 8, 2025
@jonathanKingston jonathanKingston added this pull request to the merge queue Dec 8, 2025
Merged via the queue into main with commit ae0fedb Dec 8, 2025
19 checks passed
@jonathanKingston jonathanKingston deleted the dependabot/npm_and_yarn/main/fast-check-4.4.0 branch December 8, 2025 11:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Update one or more dependencies version minor Increment the minor version when merged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant