chore(deps-dev): bump @testing-library/jest-dom from 6.9.1 to 7.0.0 in /web-ui

[dependabot]

Bumps @testing-library/jest-dom from 6.9.1 to 7.0.0.

Release notes

Sourced from @​testing-library/jest-dom's releases.

v7.0.0

7.0.0 (2026-07-20)

Features

• add toContainAnyBy* and toContainOneBy* query matchers (1e39089)

BREAKING CHANGES

• @​testing-library/dom is now a required peer dependency. The minimum supported Node.js version is now 22.

Repaired release for testing-library/jest-dom#731

v6.10.0

6.10.0 (2026-07-20)

Features

• add toContainAnyBy* and toContainOneBy* query matchers (#731) (cae44df)

Commits

• 1e39089 feat: add toContainAnyBy* and toContainOneBy* query matchers
• cae44df feat: add toContainAnyBy* and toContainOneBy* query matchers (#731)
• 55c07ce ci: switch release to npm trusted publishing (#726)
• 213256f docs: move toHaveSelection from the deprecated section (#717)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/jest-dom since your current version.

[frankbria]

Dependabot Triage — PR #1107: @testing-library/jest-dom 6.9.1 → 7.0.0

Classification

• Update type: Routine low-impact (dev-only, major version)
• Security urgency: Low
• Supply-chain risk: Low

Key observations

• devDependencies only — a test-assertion matcher library. It never reaches a build artifact or production runtime, so the blast radius is the test suite.
• The "vulnerabilities" string in the PR body is Dependabot's standard changelog boilerplate; no advisory applies to this package or version range.
• Major bump, so the realistic failure mode is removed/renamed matchers breaking tests — which the frontend suite reports directly on this PR.
• Diff is 2 files / 52 lines, no new packages, no lifecycle scripts added.
• Frontend unit tests are currently green on this PR; the only red check is claude-review, which cannot authenticate on Dependabot PRs.

Recommendation

Merge now (batched with the rest of this sweep)

Dev-only dependency with a clean diff, no advisory either way, and the one thing a major bump could break — the tests — already passing on this PR.

Follow-up actions

• None.

---

_{Supply-chain triage per the reviewing-dependabot-prs skill. Advisories verified via gh api /advisories/; action SHA pins verified by dereferencing the annotated tag to its commit. Green CI is a functional gate, not a supply-chain signal — a malicious lifecycle script passes CI happily, so the diff was scanned for one separately.}

[frankbria]

@dependabot rebase