Skip to content

Bump jsdom from 26.1.0 to 29.1.1 in /dashboard#45

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dashboard/jsdom-29.1.1
Closed

Bump jsdom from 26.1.0 to 29.1.1 in /dashboard#45
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dashboard/jsdom-29.1.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 15, 2026

Bumps jsdom from 26.1.0 to 29.1.1.

Release notes

Sourced from jsdom's releases.

v29.1.1

  • Fixed 'border-radius' computed style serialization. (@​asamuzaK)
  • Fixed computed style computation when using 'background-origin' and 'background-clip' CSS properties. (@​asamuzaK)
  • Significantly optimized initial calls to getComputedStyle(), before the cache warms up. (@​asamuzaK)

v29.1.0

  • Added basic support for the ratio CSS type. (@​asamuzaK)
  • Fixed getComputedStyle() sometimes returning outdated results after CSS was modified. (@​asamuzaK)

v29.0.2

  • Significantly improved and sped up getComputedStyle(). Computed value rules are now applied across a broader set of properties, and include fixes related to inheritance, defaulting keywords, custom properties, and color-related values such as currentcolor and system colors. (@​asamuzaK)
  • Fixed CSS 'background' and 'border' shorthand parsing. (@​asamuzaK)

v29.0.1

  • Fixed CSS parsing of 'border', 'background', and their sub-shorthands containing keywords or var(). (@​asamuzaK)
  • Fixed getComputedStyle() to return a more functional CSSStyleDeclaration object, including indexed access support, which regressed in v29.0.0.

v29.0.0

Breaking changes:

  • Node.js v22.13.0+ is now the minimum supported v22 version (was v22.12.0+).

Other changes:

  • Overhauled the CSSOM implementation, replacing the @acemir/cssom and cssstyle dependencies with fresh internal implementations built on webidl2js wrappers and the css-tree parser. Serialization, parsing, and API behavior is improved in various ways, especially around edge cases.
  • Added CSSCounterStyleRule and CSSNamespaceRule to jsdom Windows.
  • Added cssMediaRule.matches and cssSupportsRule.matches getters.
  • Added proper media query parsing in MediaList, using css-tree instead of naive comma-splitting. Invalid queries become "not all" per spec.
  • Added cssKeyframeRule.keyText getter/setter validation.
  • Added cssStyleRule.selectorText setter validation: invalid selectors are now rejected.
  • Added styleSheet.ownerNode, styleSheet.href, and styleSheet.title.
  • Added bad port blocking per the fetch specification, preventing fetches to commonly-abused ports.
  • Improved Document initialization performance by lazily initializing the CSS selector engine, avoiding ~0.5 ms of overhead per Document. (@​thypon)
  • Fixed a memory leak when stylesheets were removed from the document.
  • Fixed CSSStyleDeclaration modifications to properly trigger custom element reactions.
  • Fixed nested @media rule parsing.
  • Fixed CSSStyleSheet's "disallow modification" flag not being checked in all mutation methods.
  • Fixed XMLHttpRequest's response getter returning parsed JSON during the LOADING state instead of null.
  • Fixed getComputedStyle() crashing in XHTML documents when stylesheets contained at-rules such as @page or @font-face.
  • Fixed a potential hang in synchronous XMLHttpRequest caused by a race condition with the worker thread's idle timeout.

v28.1.0

  • Added blob.text(), blob.arrayBuffer(), and blob.bytes() methods.
  • Improved getComputedStyle() to account for CSS specificity when multiple rules apply. (@​asamuzaK)
  • Improved synchronous XMLHttpRequest performance by using a persistent worker thread, avoiding ~400ms of setup overhead on every synchronous request after the first one.
  • Improved performance of node.getRootNode(), node.isConnected, and event.dispatchEvent() by caching the root node of document-connected trees.
  • Fixed getComputedStyle() to correctly handle !important priority. (@​asamuzaK)
  • Fixed document.getElementById() to return the first element in tree order when multiple elements share the same ID.
  • Fixed <svg> elements to no longer incorrectly proxy event handlers to the Window.
  • Fixed FileReader event timing and fileReader.result state to more closely follow the spec.

... (truncated)

Commits
  • 9b9ea7e 29.1.1
  • 07efb78 Optimize computed style comparison
  • 5f66329 Fix background-origin/background-clip in background shorthand
  • ad8af77 Fix border shorthand handling
  • 5a3e88e 29.1.0
  • 73db204 Update dependencies and dev dependencies
  • a7168a5 Support ratio CSS unit type
  • 15346e0 Fix style cache invalidation
  • 2a1e2cd 29.0.2
  • 4097d66 Resolve computed CSS values lazily in CSSStyleDeclaration
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for jsdom since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 15, 2026
@pulkitpareek18
Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/dashboard/jsdom-29.1.1 branch from 7ea0584 to dbaa638 Compare May 15, 2026 11:53
Bumps [jsdom](https://github.com/jsdom/jsdom) from 26.1.0 to 29.1.1.
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v26.1.0...v29.1.1)

---
updated-dependencies:
- dependency-name: jsdom
  dependency-version: 29.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/dashboard/jsdom-29.1.1 branch from dbaa638 to 54c15d8 Compare May 15, 2026 11:54
@pulkitpareek18
Copy link
Copy Markdown
Collaborator

Closing — package-lock conflicts after main was rewritten. Dependabot will recreate against the fresh base on the next scan, once Actions runners unblock for the org.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 15, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@pulkitpareek18 pulkitpareek18 deleted the dependabot/npm_and_yarn/dashboard/jsdom-29.1.1 branch May 15, 2026 14:54
pulkitpareek18 added a commit that referenced this pull request May 28, 2026
Delivers the A35-W3-Mon outline + A35-W4-Mon full script combined into a
single 898-line operator runbook for the 22-minute Anchor Bank demo
defined in docs/plan/bfsi-v1/02-bank-demo.md.

Twelve sections cover the entire room-time:

  1. Pre-demo setup checklist (T-24h) — equipment kit, network sanity,
     phone inventory, the seed-demo-tenants.ts live-key handling, dashboard
     and Basescan tab prep, dry-run, sleep.
  2. Day-of setup (T-30 min) — physical setup, browser/shell warm-up,
     phone setup, pre-checks.
  3. Opening 30-second pitch (verbatim from 02-bank-demo.md operator
     script).
  4-9. Scenes 1-6 — every keystroke, every sentence the operator speaks,
       what appears on the projector, what the CISO/CFO/CRO/CIO/GC each see.
       Scene 3 includes the substitution-attack demonstration. Scene 4
       includes the \\d users + SELECT * FROM users + DPDP 2(t) reading
       moment. Scene 5 includes the UPDATE audit_events tamper + on-chain
       anchor cross-check.
  10. Q&A bank — 13 questions sourced from 02-bank-demo.md with prepared
      2-3 sentence operator answers.
  11. Recovery playbook 11a-11f — kiosk freeze, app crash, network drop,
      tier-2 device (no StrongBox), R307 missing, proof verification
      rejection (the worst nightmare). Each has a calm-recovery script.
  12. Post-demo (T+10 min) — leave-behind folder contents, the 90-second
      ask, follow-up cadence (T+0 through T+42), debrief, photo policy,
      cleanup.

Two appendices: operator wallet-card contact list + timing reference.

References docs/plan/bfsi-v1/02-bank-demo.md as the canonical demo spec,
docs/plan/bfsi-v1/01-pain-points.md for the P1-P10 cross-references, and
scripts/seed-demo-tenants.ts for the exact tenant + API-key format.

Owner: Agent #35 (writer-compliance) + Agent #45 (solutions architect).

[no-test] markdown-only.
pulkitpareek18 added a commit that referenced this pull request May 28, 2026
Delivers the A35-W3-Mon outline + A35-W4-Mon full script combined into a
single 898-line operator runbook for the 22-minute Anchor Bank demo
defined in docs/plan/bfsi-v1/02-bank-demo.md.

Twelve sections cover the entire room-time:

  1. Pre-demo setup checklist (T-24h) — equipment kit, network sanity,
     phone inventory, the seed-demo-tenants.ts live-key handling, dashboard
     and Basescan tab prep, dry-run, sleep.
  2. Day-of setup (T-30 min) — physical setup, browser/shell warm-up,
     phone setup, pre-checks.
  3. Opening 30-second pitch (verbatim from 02-bank-demo.md operator
     script).
  4-9. Scenes 1-6 — every keystroke, every sentence the operator speaks,
       what appears on the projector, what the CISO/CFO/CRO/CIO/GC each see.
       Scene 3 includes the substitution-attack demonstration. Scene 4
       includes the \\d users + SELECT * FROM users + DPDP 2(t) reading
       moment. Scene 5 includes the UPDATE audit_events tamper + on-chain
       anchor cross-check.
  10. Q&A bank — 13 questions sourced from 02-bank-demo.md with prepared
      2-3 sentence operator answers.
  11. Recovery playbook 11a-11f — kiosk freeze, app crash, network drop,
      tier-2 device (no StrongBox), R307 missing, proof verification
      rejection (the worst nightmare). Each has a calm-recovery script.
  12. Post-demo (T+10 min) — leave-behind folder contents, the 90-second
      ask, follow-up cadence (T+0 through T+42), debrief, photo policy,
      cleanup.

Two appendices: operator wallet-card contact list + timing reference.

References docs/plan/bfsi-v1/02-bank-demo.md as the canonical demo spec,
docs/plan/bfsi-v1/01-pain-points.md for the P1-P10 cross-references, and
scripts/seed-demo-tenants.ts for the exact tenant + API-key format.

Owner: Agent #35 (writer-compliance) + Agent #45 (solutions architect).

[no-test] markdown-only.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant