[DPEDE-1784](deps): Bump the all-dependencies group across 1 directory with 18 updates - #2110
Open
dependabot[bot] wants to merge 1 commit into
Open
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
|
The CI pipeline did not run successfully in https://jenkinsprod.corp.intranet:8443/job/UX-CHI/job/Productive/job/Chi/job/PR-2110/1/. ❌ |
|
🔖 AiFEL verdict — 🚨 Escalate (breaking-change) — human review required
TL;DR
📋 Why this route + what AiFEL checked (click to expand)Why this route?escalate because: critical CI is failing (pass rate 64.3% over 28 runs, Escalation category: Confidence breakdown — score:
What AiFEL checked
Will merging break your code?
Security advisories✅ No security advisories found for any of the 18 packages in this group bump. Packages — what you have vs what this PR installs
Machine-readable verdict{
"schema_version": "1.1",
"classification": "major",
"risk_band": "high",
"ci_confidence": "low",
"decision_route": "escalate",
"data_completeness": "blind",
"escalate_reason": "risk",
"missing_signals": [
{"signal": "api_usage", "reason": "group bump of 18 packages — no primary package identified by pre-step; usage scan skipped"},
{"signal": "release_notes", "reason": "changelog not available for multi-package group bump"}
],
"confidence": 0.65,
"packages": [
{"ecosystem": "npm", "name": "@babel/preset-env", "old_version": "^7.27.2", "new_version": "^8.0.2"},
{"ecosystem": "npm", "name": "@cypress/code-coverage", "old_version": "^3.14.7", "new_version": "^4.0.3"},
{"ecosystem": "npm", "name": "@types/node", "old_version": "^24.0.4", "new_version": "^26.0.1"},
{"ecosystem": "npm", "name": "chokidar", "old_version": "^4.0.3", "new_version": "^5.0.0"},
{"ecosystem": "npm", "name": "commander", "old_version": "^13.1.0", "new_version": "^15.0.0"},
{"ecosystem": "npm", "name": "cross-env", "old_version": "^7.0.3", "new_version": "^10.1.0"},
{"ecosystem": "npm", "name": "cssnano", "old_version": "^7.0.7", "new_version": "^8.0.2"},
{"ecosystem": "npm", "name": "express-rate-limit", "old_version": "^7.5.1", "new_version": "^8.5.2"},
{"ecosystem": "npm", "name": "nyc", "old_version": "^17.1.0", "new_version": "^18.0.0"},
{"ecosystem": "npm", "name": "ora", "old_version": "^8.2.0", "new_version": "^9.4.1"},
{"ecosystem": "npm", "name": "ssri", "old_version": "^12.0.0", "new_version": "^14.0.0"},
{"ecosystem": "npm", "name": "vite-plugin-istanbul", "old_version": "^7.2.0", "new_version": "^9.0.1"}
],
"breaking_changes": [],
"cascade_conflicts": [],
"summary": "Group bump of 18 npm devDependencies (12 major-version jumps); API usage and release notes unavailable; critical CI failing at 64% pass rate — escalated for human review.",
"upgrade_risk_note": null,
"cross_repo_signal": "standalone",
"api_usage_found": null,
"advisory_ids": [],
"max_cvss": null,
"feedback_capture_marker": "aifel-CenturyLink-Chi-2110",
"agent_version": "1.1.1-aw"
}
|
cl-aifel-test
Bot
added
the
aifel/escalate
dependabot
Bot
force-pushed
the
dependabot-npm_and_yarn-all-dependencies-f486a7f64d
branch
from
July 1, 2026 11:31
d0d0df2 to
b225333
Compare
|
The CI pipeline did not run successfully in https://jenkinsprod.corp.intranet:8443/job/UX-CHI/job/Productive/job/Chi/job/PR-2110/2/. ❌ |
dependabot
Bot
force-pushed
the
dependabot-npm_and_yarn-all-dependencies-f486a7f64d
branch
from
July 6, 2026 17:28
b225333 to
8657592
Compare
|
The CI pipeline did not run successfully in https://jenkinsprod.corp.intranet:8443/job/UX-CHI/job/Productive/job/Chi/job/PR-2110/3/. ❌ |
dependabot
Bot
force-pushed
the
dependabot-npm_and_yarn-all-dependencies-f486a7f64d
branch
from
July 13, 2026 06:07
8657592 to
9cce907
Compare
|
The CI pipeline did not run successfully in https://jenkinsprod.corp.intranet:8443/job/UX-CHI/job/Productive/job/Chi/job/PR-2110/4/. ❌ |
dependabot
Bot
force-pushed
the
dependabot-npm_and_yarn-all-dependencies-f486a7f64d
branch
from
July 20, 2026 06:05
9cce907 to
0c8da98
Compare
|
The CI pipeline did not run successfully in https://jenkinsprod.corp.intranet:8443/job/UX-CHI/job/Productive/job/Chi/job/PR-2110/5/. ❌ |
…y with 18 updates Bumps the all-dependencies group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.29.2` | `8.0.2` | | [@cypress/code-coverage](https://github.com/cypress-io/code-coverage) | `3.14.7` | `4.0.3` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.12.2` | `26.1.1` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.0` | `10.5.4` | | [chokidar](https://github.com/paulmillr/chokidar) | `4.0.3` | `5.0.0` | | [commander](https://github.com/tj/commander.js) | `13.1.0` | `15.0.0` | | [cross-env](https://github.com/kentcdodds/cross-env) | `7.0.3` | `10.1.0` | | [cssnano](https://github.com/cssnano/cssnano) | `7.1.7` | `8.0.2` | | [cypress](https://github.com/cypress-io/cypress) | `15.14.1` | `15.19.0` | | [dayjs](https://github.com/iamkun/dayjs) | `1.11.20` | `1.11.21` | | [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `7.5.1` | `8.6.0` | | [nyc](https://github.com/istanbuljs/nyc) | `17.1.0` | `18.0.0` | | [ora](https://github.com/sindresorhus/ora) | `8.2.0` | `9.4.1` | | [sass](https://github.com/sass/dart-sass) | `1.99.0` | `1.101.7` | | [ssri](https://github.com/npm/ssri) | `12.0.0` | `14.0.0` | | [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.23.1` | | [vite-plugin-istanbul](https://github.com/iFaxity/vite-plugin-istanbul) | `7.2.1` | `9.0.1` | | [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup) | `4.60.2` | `4.62.2` | Updates `@babel/preset-env` from 7.29.2 to 8.0.2 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.2/packages/babel-preset-env) Updates `@cypress/code-coverage` from 3.14.7 to 4.0.3 - [Release notes](https://github.com/cypress-io/code-coverage/releases) - [Commits](cypress-io/code-coverage@v3.14.7...v4.0.3) Updates `@types/node` from 24.12.2 to 26.1.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `autoprefixer` from 10.5.0 to 10.5.4 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.5.0...10.5.4) Updates `chokidar` from 4.0.3 to 5.0.0 - [Release notes](https://github.com/paulmillr/chokidar/releases) - [Commits](paulmillr/chokidar@4.0.3...5.0.0) Updates `commander` from 13.1.0 to 15.0.0 - [Release notes](https://github.com/tj/commander.js/releases) - [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md) - [Commits](tj/commander.js@v13.1.0...v15.0.0) Updates `cross-env` from 7.0.3 to 10.1.0 - [Release notes](https://github.com/kentcdodds/cross-env/releases) - [Changelog](https://github.com/kentcdodds/cross-env/blob/main/CHANGELOG.md) - [Commits](kentcdodds/cross-env@v7.0.3...v10.1.0) Updates `cssnano` from 7.1.7 to 8.0.2 - [Release notes](https://github.com/cssnano/cssnano/releases) - [Commits](https://github.com/cssnano/cssnano/compare/cssnano@7.1.7...cssnano@8.0.2) Updates `cypress` from 15.14.1 to 15.19.0 - [Release notes](https://github.com/cypress-io/cypress/releases) - [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md) - [Commits](cypress-io/cypress@v15.14.1...v15.19.0) Updates `dayjs` from 1.11.20 to 1.11.21 - [Release notes](https://github.com/iamkun/dayjs/releases) - [Changelog](https://github.com/iamkun/dayjs/blob/dev/CHANGELOG.md) - [Commits](iamkun/dayjs@v1.11.20...v1.11.21) Updates `express-rate-limit` from 7.5.1 to 8.6.0 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v7.5.1...v8.6.0) Updates `nyc` from 17.1.0 to 18.0.0 - [Release notes](https://github.com/istanbuljs/nyc/releases) - [Changelog](https://github.com/istanbuljs/nyc/blob/main/CHANGELOG.md) - [Commits](istanbuljs/nyc@nyc-v17.1.0...nyc-v18.0.0) Updates `ora` from 8.2.0 to 9.4.1 - [Release notes](https://github.com/sindresorhus/ora/releases) - [Commits](sindresorhus/ora@v8.2.0...v9.4.1) Updates `sass` from 1.99.0 to 1.101.7 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.99.0...1.101.7) Updates `ssri` from 12.0.0 to 14.0.0 - [Release notes](https://github.com/npm/ssri/releases) - [Changelog](https://github.com/npm/ssri/blob/main/CHANGELOG.md) - [Commits](npm/ssri@v12.0.0...v14.0.0) Updates `tsx` from 4.21.0 to 4.23.1 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.21.0...v4.23.1) Updates `vite-plugin-istanbul` from 7.2.1 to 9.0.1 - [Release notes](https://github.com/iFaxity/vite-plugin-istanbul/releases) - [Changelog](https://github.com/iFaxity/vite-plugin-istanbul/blob/next/release.config.mjs) - [Commits](iFaxity/vite-plugin-istanbul@v7.2.1...v9.0.1) Updates `@rollup/rollup-linux-x64-gnu` from 4.60.2 to 4.62.2 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.60.2...v4.62.2) --- updated-dependencies: - dependency-name: "@babel/preset-env" dependency-version: 8.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@cypress/code-coverage" dependency-version: 4.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@rollup/rollup-linux-x64-gnu" dependency-version: 4.62.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@types/node" dependency-version: 26.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: autoprefixer dependency-version: 10.5.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: chokidar dependency-version: 5.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: commander dependency-version: 15.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: cross-env dependency-version: 10.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: cssnano dependency-version: 8.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: cypress dependency-version: 15.18.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: dayjs dependency-version: 1.11.21 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: express-rate-limit dependency-version: 8.5.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: nyc dependency-version: 18.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: ora dependency-version: 9.4.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: sass dependency-version: 1.101.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: ssri dependency-version: 14.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: tsx dependency-version: 4.22.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: vite-plugin-istanbul dependency-version: 9.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot-npm_and_yarn-all-dependencies-f486a7f64d
branch
from
July 24, 2026 08:23
0c8da98 to
264d180
Compare
|
The CI pipeline did not run successfully in https://jenkinsprod.corp.intranet:8443/job/UX-CHI/job/Productive/job/Chi/job/PR-2110/6/. ❌ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the all-dependencies group with 18 updates in the / directory:
7.29.28.0.23.14.74.0.324.12.226.1.110.5.010.5.44.0.35.0.013.1.015.0.07.0.310.1.07.1.78.0.215.14.115.19.01.11.201.11.217.5.18.6.017.1.018.0.08.2.09.4.11.99.01.101.712.0.014.0.04.21.04.23.17.2.19.0.14.60.24.62.2Updates
@babel/preset-envfrom 7.29.2 to 8.0.2Release notes
Sourced from @babel/preset-env's releases.
... (truncated)
Changelog
Sourced from @babel/preset-env's changelog.
... (truncated)
Commits
73940a0v8.0.259a63a6Update@babel/preset-modulesand polyfill packages (#18081)b4be199v8.0.1b68b1cbActually removepreset-env'suseBuiltIns(#18079)cd96c47chore(pkg): set@babel/corepeer deps to ^8.0.0 (#18076)7dc825av8.0.0004f4b4Fallback to assuming ESM support withmodules: auto(#18069)73bceefv8.0.0-rc.6c6d71f3EnablestrictFunctionTypes(#17946)dc91f90v8.0.0-rc.5Updates
@cypress/code-coveragefrom 3.14.7 to 4.0.3Release notes
Sourced from @cypress/code-coverage's releases.
Commits
995b23achore(deps): update dependency@types/debugto v4.1.13 (#989)985dbddfix(deps): update dependency debug to v4.4.3 (#990)72e4299chore(deps): update dependency serve to v14.2.6 (#987)0540776fix(deps): update dependency dayjs to v1.11.20 (#988)fbe9918chore(deps): update dependency@types/lodashto v4.17.24 (#984)649cf9dchore(deps): update nyc, babel-plugin-istanbul, rimraf, and semantic-release ...a9a10f4fix(deps): update dependency dayjs to v1.11.19 (#983)067c87cchore(deps): update dependency win to v5.1.1 (#982)67df880chore(deps): update dependency lodash to v4.17.23 (#980)fd56f59chore(deps): update dependency serve to v14.2.5 (#981)Updates
@types/nodefrom 24.12.2 to 26.1.1Commits
Updates
autoprefixerfrom 10.5.0 to 10.5.4Release notes
Sourced from autoprefixer's releases.
Changelog
Sourced from autoprefixer's changelog.
Commits
4cad00fRelease 10.5.4 versione62a4b1Update CI configc8f0d0aUpdate dependenciescae3577Move back to latest pnpm 11fd31eb3Fix duplicated prefixed selectors on reformatted CSS (#1552)958d390Release 10.5.3 version21d2adbFix gradient parserf7ddae9Fix bracket parser10ea5e7Update dependencies and remove patchb6e8a2aUpdate Dev ContainerMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for autoprefixer since your current version.
Updates
chokidarfrom 4.0.3 to 5.0.0Release notes
Sourced from chokidar's releases.
Commits
c0c8d20Release 5.0.0.b211cecRemove src from npm8742246Upgrade dev deps, jsbt, ci files. Upgrade readdirp to v5.de5a34cMerge pull request #1442 from paulmillr/flaky-bunsc08a6c4fix: throttle based on dir + target0c55ab3test: wait for explicit calls in directory testce81be5perf: re-use double slash regex (#1435)7d9c1edMerge pull request #1433 from paulmillr/super-matrices3915541Merge pull request #1430 from paulmillr/esm-only9308bedchore: use Nodejs 24 in CI (#1432)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for chokidar since your current version.
Updates
commanderfrom 13.1.0 to 15.0.0Release notes
Sourced from commander's releases.
... (truncated)
Changelog
Sourced from commander's changelog.
... (truncated)
Commits
ba6d13dFix release dates in changelog (#2523)a752ed9Pin GitHub actions with hash (#2521)74d5dfeDrop EOL node 20 from test matrix, and add node 26 (#2520)6df9b68Update details for 15.0.0 release (#2519)01ce5d0Remove jest esm examples (#2517)d785d8bUpdate dependencies (#2518)9098b48Update dependencies (#2506)373f660Use node:util stripVTControlCharacters instead of own code (#2486)987f289Use simple match in test (to avoid warning about expensive regex) (#2485)0ea3bb3Update dependecies and lint (#2489)Updates
cross-envfrom 7.0.3 to 10.1.0Release notes
Sourced from cross-env's releases.
Commits
152ae6afeat: add support ofr default value syntaxbd70d1achore: upgrade zshy8e0b190chore(ci): get coverage8635e80fix(release): manually release a major version3a58f22chore: fix npmrc registryb70bfffchore(ci): add names to steps and workflowscc5759dfix(release): manually release a major version080a859chore: remove publish script31e5bc7chore(ci): restore built files81e9c34chore(ci): add back semantic-releaseUpdates
cssnanofrom 7.1.7 to 8.0.2Release notes
Sourced from cssnano's releases.
Commits
185e1c7Publish cssnano 8.0.22ce8c2dchore: update the postcs peer dependency99bd9c1docs: update website dependencies2ca8d4achore: update development depsb245a0bfix: update caniuse-api3bf3f4dchore: update postcss-selector-parser7343c87fix: preserve apostrophes in svg data uris (#1819)964b9dbchore(util): add benchmark + cpuprofile tooling (#1812)54a8db2Include postcss-discard-overridden types in packagee0e39aeperf(postcss-merge-longhand): skip processors with no relevant declsUpdates
cypressfrom 15.14.1 to 15.19.0Release notes
Sourced from cypress's releases.
Commits
d19a47ctest: migrate dev-server e2e specs to the reporter iframe (#34301)dd72f31chore: Update Chrome (stable) to 150.0.7871.128 (#34293)388f6e0chore: retrieve SSL.com CodeSignTool for Windows signing from github CDN (#34...3ff5960perf: render command log in an isolated iframe to prevent renderer crash (#34...37a899cfix: allow chaining assertions after should('exist') on raw DOM elements (#34...bfe83a1chore: clean up the server cookie automation converters and various automatio...72cef52chore: Update Chrome (stable) to 150.0.7871.124 and Chrome (beta) to 151.0.79...6792160chore: bump websocket-driver to 0.7.5 to resolve critical Snyk vulnerability ...de06a07test: fix cy-in-cy studio AI test to exercise authenticated flow (#34278)9e7e850feat: upgrade chai to 4.5.0 and expose new assertion aliases (#34178)Updates
dayjsfrom 1.11.20 to 1.11.21Release notes
Sourced from dayjs's releases.
Changelog
Sourced from dayjs's changelog.
Commits
a25f01echore(release): 1.11.21 [skip ci]ee75cc2Merge pull request #3113 from iamkun/dev1a8bf27chore: update doc51ef048chore: support window os test execution using cross-env (#3064)7bb06f8chore: add download chart (#3045)f6d72cedocs: fix documentation (#3044)dcae6d7chore: update docb84592fchore: update docea2929dchore: update doc523007dchore: update docUpdates
express-rate-limitfrom 7.5.1 to 8.6.0Release notes
Sourced from express-rate-limit's releases.
Commits
fffb3c48.6.0f366b2ddocs: debugging guide, time constants, & v8.6.0 changelog (#652)593ddd2fix: make debug output easier to read (#653)ef8c129fix: Pin safe version of@asyncapi/specsdev dep (#659)7b05e0dfeat: add time constants to support more readable values for windowMs (#655)863e730chore(deps-dev): bump the development-dependencies group with 3 updates (#657)e0e711efix: correct wording in usage documentation for express-rate-limit (#656)fcd3aa7chore(deps-dev): bump the development-dependencies group with 3 updates (#651)99d4298feat: usedebugfor debug logging (#641)23e4ddefeat: Run validations once each (#650)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for express-rate-limit since your current version.
Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
nycfrom 17.1.0 to 18.0.0Release notes
Sourced from nyc's releases.
Changelog
Sourced from nyc's changelog.
Commits
3ce6d97chore(main): release nyc 18.0.0 (#1613)b9f6781build: publication is now manual again due to changes in tokens0707729fix(deps)!: update dependencies pulling in old glob (#1612)Updates
orafrom 8.2.0 to 9.4.1Release notes
Sourced from ora's releases.