Skip to content

Bump js-yaml and mocha in /reports/mocha#682

Merged
jozefizso merged 1 commit intomainfrom
dependabot/npm_and_yarn/reports/mocha/multi-f14266366f
Nov 30, 2025
Merged

Bump js-yaml and mocha in /reports/mocha#682
jozefizso merged 1 commit intomainfrom
dependabot/npm_and_yarn/reports/mocha/multi-f14266366f

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 15, 2025

Bumps js-yaml to 4.1.1 and updates ancestor dependency mocha. These dependencies need to be updated together.

Updates js-yaml from 4.0.0 to 4.1.1

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.

[4.1.0] - 2021-04-15

Added

  • Types are now exported as yaml.types.XXX.
  • Every type now has options property with original arguments kept as they were (see yaml.types.int.options as an example).

Changed

  • Schema.extend() now keeps old type order in case of conflicts (e.g. Schema.extend([ a, b, c ]).extend([ b, a, d ]) is now ordered as abcd instead of cbad).
Commits

Updates mocha from 8.3.0 to 11.7.5

Release notes

Sourced from mocha's releases.

v11.7.5

11.7.5 (2025-11-04)

🩹 Fixes

  • swallow more require errors from *ts files (#5498) (d89dbaf)

🧹 Chores

v11.7.4

11.7.4 (2025-10-01)

🩹 Fixes

📚 Documentation

  • migrate remaining legacy wiki pages to main documentation (#5465) (bff9166)

🧹 Chores

v11.7.3

11.7.3 (2025-09-30)

🩹 Fixes

  • use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#5408) (ebdbc48)

📚 Documentation

🤖 Automation

... (truncated)

Changelog

Sourced from mocha's changelog.

11.7.5 (2025-11-04)

🩹 Fixes

  • swallow more require errors from *ts files (#5498) (d89dbaf)

🧹 Chores

11.7.4 (2025-10-01)

🩹 Fixes

📚 Documentation

  • migrate remaining legacy wiki pages to main documentation (#5465) (bff9166)

🧹 Chores

11.7.3 (2025-09-30)

🩹 Fixes

  • use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#5408) (ebdbc48)

📚 Documentation

🤖 Automation

  • deps: bump actions/setup-node in the github-actions group (#5459) (48c6f40)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by voxpelli, a new releaser for mocha since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 15, 2025
@jozefizso
Copy link
Collaborator

@dependabot rebase

Bumps [js-yaml](https://github.com/nodeca/js-yaml) to 4.1.1 and updates ancestor dependency [mocha](https://github.com/mochajs/mocha). These dependencies need to be updated together.


Updates `js-yaml` from 4.0.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.0.0...4.1.1)

Updates `mocha` from 8.3.0 to 11.7.5
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/v11.7.5/CHANGELOG.md)
- [Commits](mochajs/mocha@v8.3.0...v11.7.5)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
- dependency-name: mocha
  dependency-version: 11.7.5
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/reports/mocha/multi-f14266366f branch from 5929e16 to 3445860 Compare November 29, 2025 23:45
@jozefizso
Copy link
Collaborator

Analysis: Mocha Upgrade and js-yaml Dependency

Why Mocha Must Be Updated with js-yaml

The reports/mocha sub-project had Mocha 8.3.0 which internally depends on js-yaml 4.0.0 (a vulnerable version). Since mocha pins this dependency, you cannot update js-yaml independently within that sub-project.

Upgrading to Mocha 11.7.5 automatically resolves the js-yaml vulnerability because Mocha 11.x uses js-yaml 4.1.1 (the patched version).

Potential Breaking Changes (Mocha 8 → 11)

  1. Node.js requirement: Mocha 11 requires Node.js 20+ (aligns with the project's engines field)

  2. done() callback mixing: The test in reports/mocha/test/second.test.js uses both async and done callback:

    it('Timeout test', async function(done) {
      this.timeout(1);
      setTimeout(done, 1000);
    });

    Mocha 8+ warns against mixing async with done. This may produce different output or behavior.

  3. JSON reporter output format: The JSON structure may have minor differences between versions, which could affect the fixture file __tests__/fixtures/mocha-json.json.

Verification Steps

After upgrading, regenerate the fixture and verify:

  1. The JSON output structure in mocha-json.json is compatible with the parser
  2. Snapshot tests pass or need updating
  3. The markdown output in mocha-json.md renders correctly

@jozefizso jozefizso self-assigned this Nov 30, 2025
@jozefizso jozefizso merged commit e40a1da into main Nov 30, 2025
2 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/reports/mocha/multi-f14266366f branch November 30, 2025 00:01
mergify bot added a commit to ArcadeData/arcadedb that referenced this pull request Dec 1, 2025
Bumps [dorny/test-reporter](https://github.com/dorny/test-reporter) from 2.2.0 to 2.3.0.
Release notes

*Sourced from [dorny/test-reporter's releases](https://github.com/dorny/test-reporter/releases).*

> v2.3.0
> ------
>
> What's Changed
> --------------
>
> * Fix short summary formatting when a report title is present by [`@​micmarc`](https://github.com/micmarc) in [dorny/test-reporter#645](https://redirect.github.com/dorny/test-reporter/pull/645)
> * Python support based on Java JUnit parser by [`@​micmarc`](https://github.com/micmarc) in [dorny/test-reporter#643](https://redirect.github.com/dorny/test-reporter/pull/643)
> * Update sax.js to fix large XML file parsing by [`@​phactum-mnestler`](https://github.com/phactum-mnestler) in [dorny/test-reporter#681](https://redirect.github.com/dorny/test-reporter/pull/681)
> * Enhance pytest support by [`@​micmarc`](https://github.com/micmarc) in [dorny/test-reporter#683](https://redirect.github.com/dorny/test-reporter/pull/683)
> * Bump actions/checkout from 5 to 6 by [`@​dependabot`](https://github.com/dependabot)[bot] in [dorny/test-reporter#687](https://redirect.github.com/dorny/test-reporter/pull/687)
> * Add missing golang-json reporter to action.yml by [`@​jozefizso`](https://github.com/jozefizso) in [dorny/test-reporter#690](https://redirect.github.com/dorny/test-reporter/pull/690)
> * Bump js-yaml from 3.14.0 to 3.14.2 in /reports/jest by [`@​dependabot`](https://github.com/dependabot)[bot] in [dorny/test-reporter#685](https://redirect.github.com/dorny/test-reporter/pull/685)
> * Complete documentation for all supported reporters by [`@​jozefizso`](https://github.com/jozefizso) in [dorny/test-reporter#691](https://redirect.github.com/dorny/test-reporter/pull/691)
> * Bump js-yaml and mocha in /reports/mocha by [`@​dependabot`](https://github.com/dependabot)[bot] in [dorny/test-reporter#682](https://redirect.github.com/dorny/test-reporter/pull/682)
>
> New Contributors
> ----------------
>
> * [`@​phactum-mnestler`](https://github.com/phactum-mnestler) made their first contribution in [dorny/test-reporter#681](https://redirect.github.com/dorny/test-reporter/pull/681)
>
> **Full Changelog**: <dorny/test-reporter@v2.2.0...v2.3.0>


Changelog

*Sourced from [dorny/test-reporter's changelog](https://github.com/dorny/test-reporter/blob/main/CHANGELOG.md).*

> Changelog
> =========
>
> 2.3.0
> -----
>
> * Feature: Add Python support with `python-xunit` reporter (pytest) [dorny/test-reporter#643](https://redirect.github.com/dorny/test-reporter/pull/643)
> * Feature: Add pytest traceback parsing and `directory-mapping` option [dorny/test-reporter#238](https://redirect.github.com/dorny/test-reporter/pull/238)
> * Performance: Update sax.js to fix large XML file parsing [dorny/test-reporter#681](https://redirect.github.com/dorny/test-reporter/pull/681)
> * Documentation: Complete documentation for all supported reporters [dorny/test-reporter#691](https://redirect.github.com/dorny/test-reporter/pull/691)
> * Security: Bump js-yaml and mocha in /reports/mocha (fixes prototype pollution) [dorny/test-reporter#682](https://redirect.github.com/dorny/test-reporter/pull/682)
>
> 2.2.0
> -----
>
> * Feature: Add collapsed option to control report summary visibility [dorny/test-reporter#664](https://redirect.github.com/dorny/test-reporter/pull/664)
> * Fix badge encoding for values including underscore and hyphens [dorny/test-reporter#672](https://redirect.github.com/dorny/test-reporter/pull/672)
> * Fix missing `report-title` attribute in action definition [dorny/test-reporter#637](https://redirect.github.com/dorny/test-reporter/pull/637)
> * Refactor variable names to fix shadowing issues [dorny/test-reporter#630](https://redirect.github.com/dorny/test-reporter/pull/630)
>
> 2.1.1
> -----
>
> * Fix error when a TestMethod element does not have a className attribute in a trx file [dorny/test-reporter#623](https://redirect.github.com/dorny/test-reporter/pull/623)
> * Add stack trace from trx to summary [dorny/test-reporter#615](https://redirect.github.com/dorny/test-reporter/pull/615)
> * List only failed tests [dorny/test-reporter#606](https://redirect.github.com/dorny/test-reporter/pull/606)
> * Add type definitions to `github-utils.ts` [dorny/test-reporter#604](https://redirect.github.com/dorny/test-reporter/pull/604)
> * Avoid split on undefined [dorny/test-reporter#258](https://redirect.github.com/dorny/test-reporter/pull/258)
> * Return links to summary report [dorny/test-reporter#588](https://redirect.github.com/dorny/test-reporter/pull/588)
> * Add step summary short summary [dorny/test-reporter#589](https://redirect.github.com/dorny/test-reporter/pull/589)
> * Fix for empty TRX TestDefinitions [dorny/test-reporter#582](https://redirect.github.com/dorny/test-reporter/pull/582)
> * Increase step summary limit to 1MiB [dorny/test-reporter#581](https://redirect.github.com/dorny/test-reporter/pull/581)
> * Fix input description for list options [dorny/test-reporter#572](https://redirect.github.com/dorny/test-reporter/pull/572)
>
> 2.1.0
> -----
>
> * Feature: Add summary title [dorny/test-reporter#568](https://redirect.github.com/dorny/test-reporter/pull/568)
> * Feature: Add Golang test parser [dorny/test-reporter#571](https://redirect.github.com/dorny/test-reporter/pull/571)
> * Increase step summary limit to 1MiB [dorny/test-reporter#581](https://redirect.github.com/dorny/test-reporter/pull/581)
> * Fix for empty TRX TestDefinitions [dorny/test-reporter#582](https://redirect.github.com/dorny/test-reporter/pull/582)
> * Fix input description for list options [dorny/test-reporter#572](https://redirect.github.com/dorny/test-reporter/pull/572)
> * Update npm packages [dorny/test-reporter#583](https://redirect.github.com/dorny/test-reporter/pull/583)
>
> 2.0.0
> -----
>
> * Parse JUnit report with detailed message in failure [dorny/test-reporter#559](https://redirect.github.com/dorny/test-reporter/pull/559)
> * Support displaying test results in markdown using GitHub Actions Job Summaries [dorny/test-reporter#383](https://redirect.github.com/dorny/test-reporter/pull/383)
>
> 1.9.1
> -----
>
> * Fix problematic retransmission of authentication token [dorny/test-reporter#438](https://redirect.github.com/dorny/test-reporter/pull/438)
> * Report correct number of tests in Dart [dorny/test-reporter#426](https://redirect.github.com/dorny/test-reporter/pull/426)
> * Number of completed tests mismatches passed/failed [dorny/test-reporter#319](https://redirect.github.com/dorny/test-reporter/issues/319)
>
> 1.9.0
> -----
>
> * Add support for Rspec (Ruby) [dorny/test-reporter#398](https://redirect.github.com/dorny/test-reporter/pull/398)
>
> 1.8.0
> -----
>
> * Add `SwiftXunitParser` class based on `JavaJunitParser` for `swift-xunit` reporter [dorny/test-reporter#317](https://redirect.github.com/dorny/test-reporter/pull/317)
> * Use NodeJS 18 LTS as default runtime [dorny/test-reporter#332](https://redirect.github.com/dorny/test-reporter/pull/332)

... (truncated)


Commits

* [`fe45e95`](dorny/test-reporter@fe45e95) test-reporter release v2.3.0
* [`e40a1da`](dorny/test-reporter@e40a1da) Merge pull request [#682](https://redirect.github.com/dorny/test-reporter/issues/682) from dorny/dependabot/npm\_and\_yarn/reports/mocha/mult...
* [`3445860`](dorny/test-reporter@3445860) Bump js-yaml and mocha in /reports/mocha
* [`9ef5c13`](dorny/test-reporter@9ef5c13) Merge pull request [#691](https://redirect.github.com/dorny/test-reporter/issues/691) from dorny/fix/complete-documentation
* [`83e20c1`](dorny/test-reporter@83e20c1) Merge pull request [#685](https://redirect.github.com/dorny/test-reporter/issues/685) from dorny/dependabot/npm\_and\_yarn/reports/jest/js-ya...
* [`4331a3b`](dorny/test-reporter@4331a3b) Clarify the `dotnet-nunit` docs to require `NUnit3TestAdapter` for `nunit` lo...
* [`04232af`](dorny/test-reporter@04232af) Complete documentation for all supported reporters
* [`cf146f4`](dorny/test-reporter@cf146f4) Merge pull request [#690](https://redirect.github.com/dorny/test-reporter/issues/690) from dorny/fix/add-golang-json-to-action-yml
* [`33fc27c`](dorny/test-reporter@33fc27c) Merge pull request [#687](https://redirect.github.com/dorny/test-reporter/issues/687) from dorny/dependabot/github\_actions/actions/checkout-6
* [`8fd5fc5`](dorny/test-reporter@8fd5fc5) Add missing golang-json reporter to action.yml
* Additional commits viewable in [compare view](dorny/test-reporter@7b7927a...fe45e95)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=dorny/test-reporter&package-manager=github\_actions&previous-version=2.2.0&new-version=2.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
mergify bot added a commit to ArcadeData/arcadedb that referenced this pull request Jan 4, 2026
Bumps [dorny/test-reporter](https://github.com/dorny/test-reporter) from 2.3.0 to 2.5.0.
Release notes

*Sourced from [dorny/test-reporter's releases](https://github.com/dorny/test-reporter/releases).*

> v2.5.0
> ------
>
> What's Changed
> --------------
>
> ### Features
>
> * Add Nette Tester JUnit Reporter by [`@​jozefizso`](https://github.com/jozefizso) in [dorny/test-reporter#707](https://redirect.github.com/dorny/test-reporter/pull/707)
>
> ### Project maintanance
>
> * Bump actions/upload-artifact from 5 to 6 by [`@​dependabot`](https://github.com/dependabot)[bot] in [dorny/test-reporter#695](https://redirect.github.com/dorny/test-reporter/pull/695)
>
> **Full Changelog**: <dorny/test-reporter@v2.4.0...v2.5.0>
>
> v2.4.0
> ------
>
> What's Changed
> --------------
>
> * Create tests for sample JUnit files by [`@​jozefizso`](https://github.com/jozefizso) in [dorny/test-reporter#701](https://redirect.github.com/dorny/test-reporter/pull/701)
> * Support for the PHPUnit dialect of JUnit by [`@​mbeccati`](https://github.com/mbeccati) in [dorny/test-reporter#422](https://redirect.github.com/dorny/test-reporter/pull/422)
> * Use `String.substring()` function by [`@​jozefizso`](https://github.com/jozefizso) in [dorny/test-reporter#704](https://redirect.github.com/dorny/test-reporter/pull/704)
>
> New Contributors
> ----------------
>
> * [`@​mbeccati`](https://github.com/mbeccati) made their first contribution in [dorny/test-reporter#422](https://redirect.github.com/dorny/test-reporter/pull/422)
>
> **Full Changelog**: <dorny/test-reporter@v2.3.0...v2.4.0>


Changelog

*Sourced from [dorny/test-reporter's changelog](https://github.com/dorny/test-reporter/blob/main/CHANGELOG.md).*

> Changelog
> =========
>
> 2.5.0
> -----
>
> * Feature: Add Nette Tester support with `tester-junit` reporter [dorny/test-reporter#707](https://redirect.github.com/dorny/test-reporter/pull/707)
> * Maintenance: Bump actions/upload-artifact from 5 to 6 [dorny/test-reporter#695](https://redirect.github.com/dorny/test-reporter/pull/695)
>
> 2.4.0
> -----
>
> * Feature: Add PHPUnit support with JUnit XML dialect parser [dorny/test-reporter#422](https://redirect.github.com/dorny/test-reporter/pull/422)
> * Feature: Add JUnit XML sample files and tests for validation [dorny/test-reporter#701](https://redirect.github.com/dorny/test-reporter/pull/701)
> * Fix: Refactor deprecated `String.substr()` function to use `String.substring()` [dorny/test-reporter#704](https://redirect.github.com/dorny/test-reporter/pull/704)
>
> 2.3.0
> -----
>
> * Feature: Add Python support with `python-xunit` reporter (pytest) [dorny/test-reporter#643](https://redirect.github.com/dorny/test-reporter/pull/643)
> * Feature: Add pytest traceback parsing and `directory-mapping` option [dorny/test-reporter#238](https://redirect.github.com/dorny/test-reporter/pull/238)
> * Performance: Update sax.js to fix large XML file parsing [dorny/test-reporter#681](https://redirect.github.com/dorny/test-reporter/pull/681)
> * Documentation: Complete documentation for all supported reporters [dorny/test-reporter#691](https://redirect.github.com/dorny/test-reporter/pull/691)
> * Security: Bump js-yaml and mocha in /reports/mocha (fixes prototype pollution) [dorny/test-reporter#682](https://redirect.github.com/dorny/test-reporter/pull/682)
>
> 2.2.0
> -----
>
> * Feature: Add collapsed option to control report summary visibility [dorny/test-reporter#664](https://redirect.github.com/dorny/test-reporter/pull/664)
> * Fix badge encoding for values including underscore and hyphens [dorny/test-reporter#672](https://redirect.github.com/dorny/test-reporter/pull/672)
> * Fix missing `report-title` attribute in action definition [dorny/test-reporter#637](https://redirect.github.com/dorny/test-reporter/pull/637)
> * Refactor variable names to fix shadowing issues [dorny/test-reporter#630](https://redirect.github.com/dorny/test-reporter/pull/630)
>
> 2.1.1
> -----
>
> * Fix error when a TestMethod element does not have a className attribute in a trx file [dorny/test-reporter#623](https://redirect.github.com/dorny/test-reporter/pull/623)
> * Add stack trace from trx to summary [dorny/test-reporter#615](https://redirect.github.com/dorny/test-reporter/pull/615)
> * List only failed tests [dorny/test-reporter#606](https://redirect.github.com/dorny/test-reporter/pull/606)
> * Add type definitions to `github-utils.ts` [dorny/test-reporter#604](https://redirect.github.com/dorny/test-reporter/pull/604)
> * Avoid split on undefined [dorny/test-reporter#258](https://redirect.github.com/dorny/test-reporter/pull/258)
> * Return links to summary report [dorny/test-reporter#588](https://redirect.github.com/dorny/test-reporter/pull/588)
> * Add step summary short summary [dorny/test-reporter#589](https://redirect.github.com/dorny/test-reporter/pull/589)
> * Fix for empty TRX TestDefinitions [dorny/test-reporter#582](https://redirect.github.com/dorny/test-reporter/pull/582)
> * Increase step summary limit to 1MiB [dorny/test-reporter#581](https://redirect.github.com/dorny/test-reporter/pull/581)
> * Fix input description for list options [dorny/test-reporter#572](https://redirect.github.com/dorny/test-reporter/pull/572)
>
> 2.1.0
> -----
>
> * Feature: Add summary title [dorny/test-reporter#568](https://redirect.github.com/dorny/test-reporter/pull/568)
> * Feature: Add Golang test parser [dorny/test-reporter#571](https://redirect.github.com/dorny/test-reporter/pull/571)
> * Increase step summary limit to 1MiB [dorny/test-reporter#581](https://redirect.github.com/dorny/test-reporter/pull/581)
> * Fix for empty TRX TestDefinitions [dorny/test-reporter#582](https://redirect.github.com/dorny/test-reporter/pull/582)
> * Fix input description for list options [dorny/test-reporter#572](https://redirect.github.com/dorny/test-reporter/pull/572)
> * Update npm packages [dorny/test-reporter#583](https://redirect.github.com/dorny/test-reporter/pull/583)
>
> 2.0.0
> -----
>
> * Parse JUnit report with detailed message in failure [dorny/test-reporter#559](https://redirect.github.com/dorny/test-reporter/pull/559)
> * Support displaying test results in markdown using GitHub Actions Job Summaries [dorny/test-reporter#383](https://redirect.github.com/dorny/test-reporter/pull/383)
>
> 1.9.1
> -----
>
> * Fix problematic retransmission of authentication token [dorny/test-reporter#438](https://redirect.github.com/dorny/test-reporter/pull/438)

... (truncated)


Commits

* [`b082adf`](dorny/test-reporter@b082adf) test-reporter release v2.5.0
* [`bcafc9f`](dorny/test-reporter@bcafc9f) Merge pull request [#707](https://redirect.github.com/dorny/test-reporter/issues/707) from dorny/feature/700-nette-tester-junit-reporter
* [`b0cbac6`](dorny/test-reporter@b0cbac6) Rebuild the `dist/index.js` file
* [`c92a289`](dorny/test-reporter@c92a289) Remove unnecessary output files
* [`6697ec4`](dorny/test-reporter@6697ec4) Merge pull request [#695](https://redirect.github.com/dorny/test-reporter/issues/695) from dorny/dependabot/github\_actions/actions/upload-a...
* [`6387029`](dorny/test-reporter@6387029) Create `tester-junit` reporter for Nette Tester tool
* [`6896772`](dorny/test-reporter@6896772) Merge pull request [#706](https://redirect.github.com/dorny/test-reporter/issues/706) from dorny/release/v2.4.0
* [`e17be7e`](dorny/test-reporter@e17be7e) test-reporter release v2.4.0
* [`6efb86e`](dorny/test-reporter@6efb86e) Merge pull request [#704](https://redirect.github.com/dorny/test-reporter/issues/704) from dorny/bugfix/703-refactor-deprecated-substr-func...
* [`055bc8c`](dorny/test-reporter@055bc8c) Rebuild the `dist/index.js` file
* Additional commits viewable in [compare view](dorny/test-reporter@fe45e95...b082adf)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=dorny/test-reporter&package-manager=github\_actions&previous-version=2.3.0&new-version=2.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
mergify bot added a commit to robfrank/linklift that referenced this pull request Jan 9, 2026
…updates [skip ci]

Bumps the github-actions group with 4 updates in the / directory: [graalvm/setup-graalvm](https://github.com/graalvm/setup-graalvm), [dorny/test-reporter](https://github.com/dorny/test-reporter), [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) and [ruby/setup-ruby](https://github.com/ruby/setup-ruby).
Updates `graalvm/setup-graalvm` from 1.4.4 to 1.4.5
Commits

* [`54b4f5a`](graalvm/setup-graalvm@54b4f5a) Bump version to `1.4.5`.
* [`3742797`](graalvm/setup-graalvm@3742797) Update dist files.
* [`24f39d0`](graalvm/setup-graalvm@24f39d0) Bump the npm-updates group with 11 updates
* [`f9a4cbb`](graalvm/setup-graalvm@f9a4cbb) Bump the github-actions-updates group with 3 updates
* [`3f22a48`](graalvm/setup-graalvm@3f22a48) Add 25e1 EA builds.
* [`2e57584`](graalvm/setup-graalvm@2e57584) Replace `macos-13` with `macos-15-intel`.
* See full diff in [compare view](graalvm/setup-graalvm@790e289...54b4f5a)
  
Updates `dorny/test-reporter` from 2.3.0 to 2.5.0
Release notes

*Sourced from [dorny/test-reporter's releases](https://github.com/dorny/test-reporter/releases).*

> v2.5.0
> ------
>
> What's Changed
> --------------
>
> ### Features
>
> * Add Nette Tester JUnit Reporter by [`@​jozefizso`](https://github.com/jozefizso) in [dorny/test-reporter#707](https://redirect.github.com/dorny/test-reporter/pull/707)
>
> ### Project maintanance
>
> * Bump actions/upload-artifact from 5 to 6 by [`@​dependabot`](https://github.com/dependabot)[bot] in [dorny/test-reporter#695](https://redirect.github.com/dorny/test-reporter/pull/695)
>
> **Full Changelog**: <dorny/test-reporter@v2.4.0...v2.5.0>
>
> v2.4.0
> ------
>
> What's Changed
> --------------
>
> * Create tests for sample JUnit files by [`@​jozefizso`](https://github.com/jozefizso) in [dorny/test-reporter#701](https://redirect.github.com/dorny/test-reporter/pull/701)
> * Support for the PHPUnit dialect of JUnit by [`@​mbeccati`](https://github.com/mbeccati) in [dorny/test-reporter#422](https://redirect.github.com/dorny/test-reporter/pull/422)
> * Use `String.substring()` function by [`@​jozefizso`](https://github.com/jozefizso) in [dorny/test-reporter#704](https://redirect.github.com/dorny/test-reporter/pull/704)
>
> New Contributors
> ----------------
>
> * [`@​mbeccati`](https://github.com/mbeccati) made their first contribution in [dorny/test-reporter#422](https://redirect.github.com/dorny/test-reporter/pull/422)
>
> **Full Changelog**: <dorny/test-reporter@v2.3.0...v2.4.0>


Changelog

*Sourced from [dorny/test-reporter's changelog](https://github.com/dorny/test-reporter/blob/main/CHANGELOG.md).*

> Changelog
> =========
>
> 2.5.0
> -----
>
> * Feature: Add Nette Tester support with `tester-junit` reporter [dorny/test-reporter#707](https://redirect.github.com/dorny/test-reporter/pull/707)
> * Maintenance: Bump actions/upload-artifact from 5 to 6 [dorny/test-reporter#695](https://redirect.github.com/dorny/test-reporter/pull/695)
>
> 2.4.0
> -----
>
> * Feature: Add PHPUnit support with JUnit XML dialect parser [dorny/test-reporter#422](https://redirect.github.com/dorny/test-reporter/pull/422)
> * Feature: Add JUnit XML sample files and tests for validation [dorny/test-reporter#701](https://redirect.github.com/dorny/test-reporter/pull/701)
> * Fix: Refactor deprecated `String.substr()` function to use `String.substring()` [dorny/test-reporter#704](https://redirect.github.com/dorny/test-reporter/pull/704)
>
> 2.3.0
> -----
>
> * Feature: Add Python support with `python-xunit` reporter (pytest) [dorny/test-reporter#643](https://redirect.github.com/dorny/test-reporter/pull/643)
> * Feature: Add pytest traceback parsing and `directory-mapping` option [dorny/test-reporter#238](https://redirect.github.com/dorny/test-reporter/pull/238)
> * Performance: Update sax.js to fix large XML file parsing [dorny/test-reporter#681](https://redirect.github.com/dorny/test-reporter/pull/681)
> * Documentation: Complete documentation for all supported reporters [dorny/test-reporter#691](https://redirect.github.com/dorny/test-reporter/pull/691)
> * Security: Bump js-yaml and mocha in /reports/mocha (fixes prototype pollution) [dorny/test-reporter#682](https://redirect.github.com/dorny/test-reporter/pull/682)
>
> 2.2.0
> -----
>
> * Feature: Add collapsed option to control report summary visibility [dorny/test-reporter#664](https://redirect.github.com/dorny/test-reporter/pull/664)
> * Fix badge encoding for values including underscore and hyphens [dorny/test-reporter#672](https://redirect.github.com/dorny/test-reporter/pull/672)
> * Fix missing `report-title` attribute in action definition [dorny/test-reporter#637](https://redirect.github.com/dorny/test-reporter/pull/637)
> * Refactor variable names to fix shadowing issues [dorny/test-reporter#630](https://redirect.github.com/dorny/test-reporter/pull/630)
>
> 2.1.1
> -----
>
> * Fix error when a TestMethod element does not have a className attribute in a trx file [dorny/test-reporter#623](https://redirect.github.com/dorny/test-reporter/pull/623)
> * Add stack trace from trx to summary [dorny/test-reporter#615](https://redirect.github.com/dorny/test-reporter/pull/615)
> * List only failed tests [dorny/test-reporter#606](https://redirect.github.com/dorny/test-reporter/pull/606)
> * Add type definitions to `github-utils.ts` [dorny/test-reporter#604](https://redirect.github.com/dorny/test-reporter/pull/604)
> * Avoid split on undefined [dorny/test-reporter#258](https://redirect.github.com/dorny/test-reporter/pull/258)
> * Return links to summary report [dorny/test-reporter#588](https://redirect.github.com/dorny/test-reporter/pull/588)
> * Add step summary short summary [dorny/test-reporter#589](https://redirect.github.com/dorny/test-reporter/pull/589)
> * Fix for empty TRX TestDefinitions [dorny/test-reporter#582](https://redirect.github.com/dorny/test-reporter/pull/582)
> * Increase step summary limit to 1MiB [dorny/test-reporter#581](https://redirect.github.com/dorny/test-reporter/pull/581)
> * Fix input description for list options [dorny/test-reporter#572](https://redirect.github.com/dorny/test-reporter/pull/572)
>
> 2.1.0
> -----
>
> * Feature: Add summary title [dorny/test-reporter#568](https://redirect.github.com/dorny/test-reporter/pull/568)
> * Feature: Add Golang test parser [dorny/test-reporter#571](https://redirect.github.com/dorny/test-reporter/pull/571)
> * Increase step summary limit to 1MiB [dorny/test-reporter#581](https://redirect.github.com/dorny/test-reporter/pull/581)
> * Fix for empty TRX TestDefinitions [dorny/test-reporter#582](https://redirect.github.com/dorny/test-reporter/pull/582)
> * Fix input description for list options [dorny/test-reporter#572](https://redirect.github.com/dorny/test-reporter/pull/572)
> * Update npm packages [dorny/test-reporter#583](https://redirect.github.com/dorny/test-reporter/pull/583)
>
> 2.0.0
> -----
>
> * Parse JUnit report with detailed message in failure [dorny/test-reporter#559](https://redirect.github.com/dorny/test-reporter/pull/559)
> * Support displaying test results in markdown using GitHub Actions Job Summaries [dorny/test-reporter#383](https://redirect.github.com/dorny/test-reporter/pull/383)
>
> 1.9.1
> -----
>
> * Fix problematic retransmission of authentication token [dorny/test-reporter#438](https://redirect.github.com/dorny/test-reporter/pull/438)

... (truncated)


Commits

* [`b082adf`](dorny/test-reporter@b082adf) test-reporter release v2.5.0
* [`bcafc9f`](dorny/test-reporter@bcafc9f) Merge pull request [#707](https://redirect.github.com/dorny/test-reporter/issues/707) from dorny/feature/700-nette-tester-junit-reporter
* [`b0cbac6`](dorny/test-reporter@b0cbac6) Rebuild the `dist/index.js` file
* [`c92a289`](dorny/test-reporter@c92a289) Remove unnecessary output files
* [`6697ec4`](dorny/test-reporter@6697ec4) Merge pull request [#695](https://redirect.github.com/dorny/test-reporter/issues/695) from dorny/dependabot/github\_actions/actions/upload-a...
* [`6387029`](dorny/test-reporter@6387029) Create `tester-junit` reporter for Nette Tester tool
* [`6896772`](dorny/test-reporter@6896772) Merge pull request [#706](https://redirect.github.com/dorny/test-reporter/issues/706) from dorny/release/v2.4.0
* [`e17be7e`](dorny/test-reporter@e17be7e) test-reporter release v2.4.0
* [`6efb86e`](dorny/test-reporter@6efb86e) Merge pull request [#704](https://redirect.github.com/dorny/test-reporter/issues/704) from dorny/bugfix/703-refactor-deprecated-substr-func...
* [`055bc8c`](dorny/test-reporter@055bc8c) Rebuild the `dist/index.js` file
* Additional commits viewable in [compare view](dorny/test-reporter@fe45e95...b082adf)
  
Updates `anthropics/claude-code-action` from 1.0.27 to 1.0.28
Release notes

*Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).*

> v1.0.28
> -------
>
> What's Changed
> --------------
>
> * fix: update broken link in cloud-providers.md by [`@​ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#758](https://redirect.github.com/anthropics/claude-code-action/pull/758)
> * chore: remove unused ci yaml file by [`@​kiwamizamurai`](https://github.com/kiwamizamurai) in [anthropics/claude-code-action#763](https://redirect.github.com/anthropics/claude-code-action/pull/763)
> * feat: add instant "Fix this" links to PR code reviews by [`@​aiddun`](https://github.com/aiddun) in [anthropics/claude-code-action#773](https://redirect.github.com/anthropics/claude-code-action/pull/773)
> * feat: add ssh\_signing\_key input for SSH commit signing by [`@​ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#784](https://redirect.github.com/anthropics/claude-code-action/pull/784)
> * feat: send user request as separate content block for slash command support by [`@​ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#785](https://redirect.github.com/anthropics/claude-code-action/pull/785)
> * feat: support local plugin marketplace paths by [`@​gor-st`](https://github.com/gor-st) in [anthropics/claude-code-action#761](https://redirect.github.com/anthropics/claude-code-action/pull/761)
> * fix: prevent orphaned installer processes from blocking retries by [`@​ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#790](https://redirect.github.com/anthropics/claude-code-action/pull/790)
> * fix: set CLAUDE\_CODE\_ENTRYPOINT for SDK path to match CLI path by [`@​ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#791](https://redirect.github.com/anthropics/claude-code-action/pull/791)
>
> New Contributors
> ----------------
>
> * [`@​kiwamizamurai`](https://github.com/kiwamizamurai) made their first contribution in [anthropics/claude-code-action#763](https://redirect.github.com/anthropics/claude-code-action/pull/763)
> * [`@​aiddun`](https://github.com/aiddun) made their first contribution in [anthropics/claude-code-action#773](https://redirect.github.com/anthropics/claude-code-action/pull/773)
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.28>


Commits

* [`c9ec2b0`](anthropics/claude-code-action@c9ec2b0) fix: set CLAUDE\_CODE\_ENTRYPOINT for SDK path to match CLI path ([#791](https://redirect.github.com/anthropics/claude-code-action/issues/791))
* [`63ea7e3`](anthropics/claude-code-action@63ea7e3) fix: prevent orphaned installer processes from blocking retries ([#790](https://redirect.github.com/anthropics/claude-code-action/issues/790))
* [`653f9cd`](anthropics/claude-code-action@653f9cd) feat: support local plugin marketplace paths ([#761](https://redirect.github.com/anthropics/claude-code-action/issues/761))
* [`b17b541`](anthropics/claude-code-action@b17b541) feat: send user request as separate content block for slash command support (...
* [`7e4bf87`](anthropics/claude-code-action@7e4bf87) feat: add ssh\_signing\_key input for SSH commit signing ([#784](https://redirect.github.com/anthropics/claude-code-action/issues/784))
* [`154d0de`](anthropics/claude-code-action@154d0de) feat: add instant "Fix this" links to PR code reviews ([#773](https://redirect.github.com/anthropics/claude-code-action/issues/773))
* [`3ba9f7c`](anthropics/claude-code-action@3ba9f7c) chore: bump Claude Code to 2.0.76 and Agent SDK to 0.1.76
* [`e5b0741`](anthropics/claude-code-action@e5b0741) chore: remove unused ci yaml file ([#763](https://redirect.github.com/anthropics/claude-code-action/issues/763))
* [`b89827f`](anthropics/claude-code-action@b89827f) fix: update broken link in cloud-providers.md ([#758](https://redirect.github.com/anthropics/claude-code-action/issues/758))
* See full diff in [compare view](anthropics/claude-code-action@7145c3e...c9ec2b0)
  
Updates `ruby/setup-ruby` from 1.275.0 to 1.280.0
Release notes

*Sourced from [ruby/setup-ruby's releases](https://github.com/ruby/setup-ruby/releases).*

> v1.280.0
> --------
>
> What's Changed
> --------------
>
> * Test ruby 4.0 on windows by [`@​ntkme`](https://github.com/ntkme) in [ruby/setup-ruby#853](https://redirect.github.com/ruby/setup-ruby/pull/853)
> * Add token input for downloading release assets by [`@​TingluoHuang`](https://github.com/TingluoHuang) in [ruby/setup-ruby#851](https://redirect.github.com/ruby/setup-ruby/pull/851)
>
> New Contributors
> ----------------
>
> * [`@​TingluoHuang`](https://github.com/TingluoHuang) made their first contribution in [ruby/setup-ruby#851](https://redirect.github.com/ruby/setup-ruby/pull/851)
>
> **Full Changelog**: <ruby/setup-ruby@v1.279.0...v1.280.0>
>
> v1.279.0
> --------
>
> **Full Changelog**: <ruby/setup-ruby@v1.278.0...v1.279.0>
>
> v1.278.0
> --------
>
> What's Changed
> --------------
>
> * Set BUNDLER\_VERSION whenever we know which version to use by [`@​eregon`](https://github.com/eregon) in [ruby/setup-ruby#849](https://redirect.github.com/ruby/setup-ruby/pull/849)
>
> **Full Changelog**: <ruby/setup-ruby@v1.277.0...v1.278.0>
>
> v1.277.0
> --------
>
> What's Changed
> --------------
>
> * Update CRuby releases on Windows by [`@​ruby-builder-bot`](https://github.com/ruby-builder-bot) in [ruby/setup-ruby#847](https://redirect.github.com/ruby/setup-ruby/pull/847)
>
> **Full Changelog**: <ruby/setup-ruby@v1.276.0...v1.277.0>
>
> v1.276.0
> --------
>
> What's Changed
> --------------
>
> * Add ruby-4.0.0 by [`@​ruby-builder-bot`](https://github.com/ruby-builder-bot) in [ruby/setup-ruby#844](https://redirect.github.com/ruby/setup-ruby/pull/844)
>
> **Full Changelog**: <ruby/setup-ruby@v1.275.0...v1.276.0>


Commits

* [`d5f787c`](ruby/setup-ruby@d5f787c) Define a helper to download to avoid duplication
* [`1010da4`](ruby/setup-ruby@1010da4) Tweaks
* [`7f50f6e`](ruby/setup-ruby@7f50f6e) Add token input and pass it to release assets download.
* [`be19563`](ruby/setup-ruby@be19563) Test ruby 4.0 on windows
* [`b90be12`](ruby/setup-ruby@b90be12) Rename 3.4-asan to asan-release
* [`4c24fa5`](ruby/setup-ruby@4c24fa5) Set BUNDLER\_VERSION whenever we know which version to use
* [`8a836ef`](ruby/setup-ruby@8a836ef) Update CRuby releases on Windows
* [`ae195bb`](ruby/setup-ruby@ae195bb) Add ruby-4.0.0
* See full diff in [compare view](ruby/setup-ruby@d354de1...d5f787c)
  
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore  major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore  minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore  ` will remove the ignore condition of the specified dependency and ignore conditions
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant