chore(deps): bump the testing-and-build group across 1 directory with 5 updates by dependabot[bot] · Pull Request #10621 · DataDog/dd-trace-js

dependabot · 2026-10-05T00:59:16Z

Bumps the testing-and-build group with 5 updates in the /packages/dd-trace/test/plugins/versions directory:

Package	From	To
cypress	`16.1.0`	`16.1.1`
electron	`44.4.5`	`44.5.1`
mocha	`12.0.2`	`12.0.3`
next	`16.3.6`	`16.3.8`
selenium-webdriver	`4.49.0`	`4.50.0`

Updates cypress from 16.1.0 to 16.1.1

Release notes

Sourced from cypress's releases.

v16.1.1

Changelog: https://docs.cypress.io/app/references/changelog#16-1-1

Commits

727c47b misc: show cy.contains() as a parent command in the Command Log when it start...
6395a6d chore: migrate 2 @packages/server unit specs to vitest (#34934)
e952cc9 chore: release @cypress/vue-v7.0.1
f418e5d chore: release @cypress/react-v10.0.1
0a34f86 dependency: update axios to 1.20.0 (#34918)
08ec143 perf: make shadow-aware .closest() linear instead of quadratic (#34925)
764fa3d misc: name the running command in the .each() and .spread() mixed async/sync ...
9fd0ea1 misc: show the injectDocumentDomain hint in the cross-origin command error (#...
21122f5 docs: add guidance on testing securely to SECURITY.md (#34923)
3e1949f misc: document the true default of multiple for .dblclick() in types (#34929)
Additional commits viewable in compare view

Updates electron from 44.4.5 to 44.5.1

Release notes

Sourced from electron's releases.

electron v44.5.1

Release Notes for v44.5.1

Other Changes

Backported fixes from upstream ANGLE, Chromium, Dawn and V8. #54564

electron v44.5.0

Release Notes for v44.5.0

Features

Added launch-failure reporting with systemErrorCode to the app child-process-gone event. #54231 (Also in 45)

Fixes

Changed the default trash implementation on KDE Plasma 6 to kioclient. #54361 (Also in 45)

DevTools zoom in/out now uses the same zoom steps as Chromium. #54387 (Also in 45)

Fixed --xdg-portal-required-version having no effect and a spurious portal warning being logged for file dialogs on Linux. #54303 (Also in 43, 45)

Fixed a child WebContentsView losing focus when its window is reactivated. #54455 (Also in 43, 45)

Fixed a crash when a WebAuthn request used a security key that required its PIN. #54403 (Also in 45)

Fixed a crash when creating a framed window on Wayland in environments where GTK could not initialize. #54420 (Also in 45)

Fixed a crash when sending a DevTools protocol command with a non-string value for an optional string parameter via webContents.debugger. #54445 (Also in 43, 45)

Fixed a GPU process crash on startup when another instance of the app is using the same session data directory. #54469

Fixed a grey border around frameless windows on Linux WMs without compositing. #54391 (Also in 43, 45)

Fixed a main process crash when a native API method was called with a this value of a different native type; it now throws a TypeError. #54315 (Also in 43)

Fixed a possible crash during process exit when vm.Script or vm contexts created in the main process had been garbage collected shortly before quitting. #54266 (Also in 43, 45)

Fixed a possible crash on Windows on ARM when powerMonitor is torn down. #54408 (Also in 45)

Fixed a renderer crash calling image.toPNG() from a sandboxed preload script. #54502 (Also in 43, 45)

Fixed a renderer crash when a ResizeObserver loop-limit error handler modified layout. #54290 (Also in 45)

Fixed accent-color-changed on Windows reporting a colour that differed from systemPreferences.getAccentColor(). #54409 (Also in 45)

Fixed an issue where crashReporter.setUploadToServer() had no effect after crashReporter.start() was called. #54518 (Also in 45)

Fixed app.getRecentDocuments() omitting documents with non-ASCII paths on Windows. #54407 (Also in 45)

Fixed clipboard.read(), readText() and has() resolving seconds late on Linux while the app was idle. #54308 (Also in 42, 43, 45)

Fixed desktopCapturer.getSources() leaving non-resizable windows resizable on macOS. #54397 (Also in 43, 45)

Fixed fs.rmSync failing to remove read-only files on Windows. #54255 (Also in 42, 43, 45)

Fixed GDK_BACKEND leaking into processes spawned by Electron apps on Linux. #54425 (Also in 43, 45)

Fixed hidden windows continuing to render at full frame rate after setBackgroundThrottling(false) followed by setBackgroundThrottling(true). #54341 (Also in 45)

Fixed pointerLock permission requests from some iframes reporting the parent frame. #54464 (Also in 42, 43, 45)

Fixed setContentProtection(true) having no effect in Windows remote sessions. #54500 (Also in 45)

Fixed setIgnoreMouseEvents() taking effect late on X11. #54497 (Also in 43, 45)

Fixed setIgnoreMouseEvents(true) being undone by the next resize on X11. #54393 (Also in 43, 45)

Added setIgnoreMouseEvents support on Wayland.

Fixed shell.showItemInFolder() on Linux for paths containing #, ? or % when the file manager is reached over D-Bus. #54406 (Also in 45)

Fixed the default action label on Linux notifications not being localized. #54401 (Also in 43, 45)

Fixed the GPU process crash-looping on Windows when the sandbox cannot read the install folder; the folder is now reported instead. #54484 (Also in 43, 45)

Fixed the zoom level resetting on file: and other host-less pages after a location.hash change. #54442 (Also in 43, 45)

Fixed typing not working after closing an alert() or confirm() on Windows. #54461 (Also in 43, 45)

Fixed utilityProcess dropping stdout/stderr output that the child wrote immediately before exiting. #54278 (Also in 42, 43, 45)

Fixed visual zoom limits resetting on navigation and not applying to webviews. #54449 (Also in 43, 45)

... (truncated)

Commits

19c6011 chore: cherry-pick 27 changes from angle, chromium, dawn and v8 (#54564)
435b189 test: parse all custom page size PDFs in one pdf.js process (#54544)
a2db7a8 test: wait for child output before asserting on it (#54541)
fa180db fix: crashReporter.setUploadToServer() having no effect after start (#54518)
60f40fe test: wait for focus before requesting pointer lock in spec (#54533)
f0a852d test: wait for earlier Electron workers to exit before serial specs (#54512)
42ed175 fix: apply the X11 input shape before setIgnoreMouseEvents() returns (#54497)
71490d8 fix: apply setContentProtection() in Windows remote sessions again (#54500)
d4bd178 fix: throw instead of crashing when nativeImage cannot create a Buffer (#54502)
614efcd fix: report install folders that the sandbox cannot read on Windows instead o...
Additional commits viewable in compare view

Updates mocha from 12.0.2 to 12.0.3

Release notes

Sourced from mocha's releases.

v12.0.3

12.0.3 (2026-10-01)

🩹 Fixes

keep watching when the last test file is removed (#6355) (921c161)

show require() error on unsupported directory import (#6354) (a68344f)

support --X one-char aliases (#6391) (1227939)

📚 Documentation

refresh help output, fix stale links (#6357) (bb2e69a)

🧹 Chores

add --import=tsx integration test (#6356) (3382fdd)

touch a new file without stamping it afterwards (#6349) (d59467a)

Changelog

Sourced from mocha's changelog.

12.0.3 (2026-10-01)

🩹 Fixes

keep watching when the last test file is removed (#6355) (921c161)

show require() error on unsupported directory import (#6354) (a68344f)

support --X one-char aliases (#6391) (1227939)

📚 Documentation

refresh help output, fix stale links (#6357) (bb2e69a)

🧹 Chores

add --import=tsx integration test (#6356) (3382fdd)

touch a new file without stamping it afterwards (#6349) (d59467a)

Commits

51a0cc5 chore(main): release 12.0.3 (#6353)
1227939 fix: support --X one-char aliases (#6391)
bb2e69a docs: refresh help output, fix stale links (#6357)
921c161 fix: keep watching when the last test file is removed (#6355)
3382fdd test: add --import=tsx integration test (#6356)
a68344f fix: show require() error on unsupported directory import (#6354)
d59467a test: touch a new file without stamping it afterwards (#6349)
See full diff in compare view

Updates next from 16.3.6 to 16.3.8

Release notes

Sourced from next's releases.

v16.3.8

This release contains security fixes for the following advisories:

High:

Server-Side Request Forgery in Image Optimization

Medium:

Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass

Cache poisoning of SSG and ISR pages in self-hosted Next.js applications

Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service

Pending use cache fill can leak Draft Mode content into regular responses and persisted pages

Cache leak across root param values in nested 'use cache' functions

Low:

Information disclosure in the Next.js development server's Model Context Protocol endpoint

v16.3.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

turbo-tasks-backend: fix strongly consistent read hanging on a canceled task (#98931)

Credits

Huge thanks to @lukesandberg for helping!

Commits

b0fad0d v16.3.8
719e4c6 [lts-active] Scope response cache keys to their source route (#218)
e92db45 [lts-active] Fix metadata propagation for deduplicated nested caches (#223)
40c2ba9 [lts-active] Match Next data paths case-sensitively (#196)
2d9f50a [lts-active] Fix MCP middleware DNS rebinding (#213)
bd9214f [lts-active] Fix draft mode leaks through cross-request 'use cache' dedupli...
8db4a62 [lts-active][webpack] Ensure dynamicParams is respected in `opengraph-image...
e002ad6 [lts-active] fix(next/image): Pin DNS resolution when fetching external image...
4c20699 v16.3.7
2521aec [backport] turbo-tasks-backend: fix strongly consistent read hanging on a can...
See full diff in compare view

Updates selenium-webdriver from 4.49.0 to 4.50.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.50.0

Detailed Changelogs by Component

Java | Python | DotNet | Ruby | JavaScript

What's Changed

[dotnet] [bidi] Add image size to capture screenshots by @nvborisenko in SeleniumHQ/selenium#18016

[build] only need to run nightly Grid release after production release by @titusfortner in SeleniumHQ/selenium#18013

[build] merge the release PR automatically once required checks pass by @titusfortner in SeleniumHQ/selenium#18018

[build] move Selenium Manager publishing into sm-snapshot.yml so releases no longer skip it by @titusfortner in SeleniumHQ/selenium#18017

[adr] Network async/event API proposal by @titusfortner in SeleniumHQ/selenium#17685

[adr] Behavioral contract for the low-level WebDriver BiDi layer by @titusfortner in SeleniumHQ/selenium#17786

[java] remove deprecated methods from the HttpClient interface by @joerg1985 in SeleniumHQ/selenium#17993

[rb] cover BiDi key, wheel, release, and setFiles scenarios in the Input spec by @titusfortner in SeleniumHQ/selenium#18022

[py] replace the blanket remote BiDi test suite with an opt-in list by @titusfortner in SeleniumHQ/selenium#18023

[build] always use the latest Selenium Manager code when needed for tests by @titusfortner in SeleniumHQ/selenium#18024

[py] cleanup for ruff b904 raise from by @iampopovich in SeleniumHQ/selenium#18030

[py]: Apply ClientConfig user_agent and extra_headers per connection by @navin772 in SeleniumHQ/selenium#17944

[build] add bazel flag to support cross-compiling all Selenium Manager binaries from Linux or Mac by @titusfortner in SeleniumHQ/selenium#18029

[rb] render WebSocket debug log lines lazily by @ikraamg in SeleniumHQ/selenium#18033

[rb] Implement driver methods for installing and uninstalling web extensions via BiDi by @titusfortner in SeleniumHQ/selenium#17879

[java] Parse each BiDi command response only once by @pujagani in SeleniumHQ/selenium#18011

[py] run the requirements lock check on RBE with a platform-agnostic lock by @titusfortner in SeleniumHQ/selenium#18039

[dotnet] [bidi] Support DestinationFolder optional arg in StartScreencast by @nvborisenko in SeleniumHQ/selenium#18042

[dotnet] [bidi] Add Emulation.SetTextLayoutModeOverride command by @nvborisenko in SeleniumHQ/selenium#18043

[build] use RBE to prepare and build the artifacts for releases by @titusfortner in SeleniumHQ/selenium#18041

[py] move complete GitHub Actions test suite to nightly and run only high value smoke tests for PRs by @titusfortner in SeleniumHQ/selenium#18040

[py] Type BaseOptions.set_capability parameters by @adamtheturtle in SeleniumHQ/selenium#18027

[java] Use one HttpClient.Factory inside one RemoteWebDriver instance by @joerg1985 in SeleniumHQ/selenium#18038

[build] Ignore exec.log recursively by @nvborisenko in SeleniumHQ/selenium#18049

[build] fetch the changelog history since the previous release tag instead of computing a depth by @titusfortner in SeleniumHQ/selenium#18044

[build] prefix workflow names by how they run so the Actions sidebar groups them by @titusfortner in SeleniumHQ/selenium#18053

[py] run grid specific tests on windows during scheduled tests by @titusfortner in SeleniumHQ/selenium#18054

[build] generate webref_cddl.bzl from the BiDi spec's external specifications list by @titusfortner in SeleniumHQ/selenium#18055

[build] update BiDi schema generation to include external spec methods missing due to upstream spec omissions by @titusfortner in SeleniumHQ/selenium#18057

[py] Type WebElement.get_attribute name by @adamtheturtle in SeleniumHQ/selenium#18028

[build] generate the BiDi schema vendor section from Mozilla's Firefox CDDL by @titusfortner in SeleniumHQ/selenium#18060

[dotnet] [build] Include package license/notice files by @nvborisenko in SeleniumHQ/selenium#18048

[dotnet][java][js][py][rb] remove deprecated Firefox profile extension and cert methods by @titusfortner in SeleniumHQ/selenium#18066

[java] resolve exceptions from the W3C state in ErrorHandler by @yashp676 in SeleniumHQ/selenium#18059

[build] Fix the two CDDL repin fallouts breaking every Python target by @AutomatedTester in SeleniumHQ/selenium#18068

[dotnet] [bidi] Eliminate BiDi context on hot path by @nvborisenko in SeleniumHQ/selenium#18069

[py] [dotnet] [java] declare Firefox default preferences in each binding by @titusfortner in SeleniumHQ/selenium#18070

[build] add support for Mozilla's Commands fragment in the BiDi schema by @titusfortner in SeleniumHQ/selenium#18071

[rust] fix flaky tests by @titusfortner in SeleniumHQ/selenium#18073

[js] Align BiDi Generator with the low-level contract by @pujagani in SeleniumHQ/selenium#17973

... (truncated)

Commits

ca2a966 [build] Prepare for release of selenium-4.50.0 (#18105)
47912e0 [build] publish docs with a rebase instead of serializing on a concurrency group
89f967d [dotnet] [bidi] Align CapabilityResponse type name with spec (#18099)
6d070b5 [dotnet] [bidi] Preserve BiDi additional data in context commands (#18097)
18c9d4e [java] Keep guarded runnables alive when a task throws an Error (#18091)
97caa3f [java] Restore HttpCommandExecutor client and httpClientFactory fields as dep...
1564f3a [build] Automated Browser Version Update (major) (#18096)
b63635e [build] ensure the pin for the released Selenium Manager is the one built in ...
1d433a9 [build] verify published packages from the release tag instead of trunk HEAD
531ccc7 [build] grant the release Selenium Manager job the permissions its nested job...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… 5 updates Bumps the testing-and-build group with 5 updates in the /packages/dd-trace/test/plugins/versions directory: | Package | From | To | | --- | --- | --- | | [cypress](https://github.com/cypress-io/cypress) | `16.1.0` | `16.1.1` | | [electron](https://github.com/electron/electron) | `44.4.5` | `44.5.1` | | [mocha](https://github.com/mochajs/mocha) | `12.0.2` | `12.0.3` | | [next](https://github.com/vercel/next.js) | `16.3.6` | `16.3.8` | | [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.49.0` | `4.50.0` | Updates `cypress` from 16.1.0 to 16.1.1 - [Release notes](https://github.com/cypress-io/cypress/releases) - [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md) - [Commits](cypress-io/cypress@v16.1.0...v16.1.1) Updates `electron` from 44.4.5 to 44.5.1 - [Release notes](https://github.com/electron/electron/releases) - [Commits](electron/electron@v44.4.5...v44.5.1) Updates `mocha` from 12.0.2 to 12.0.3 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md) - [Commits](mochajs/mocha@v12.0.2...v12.0.3) Updates `next` from 16.3.6 to 16.3.8 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.6...v16.3.8) Updates `selenium-webdriver` from 4.49.0 to 4.50.0 - [Release notes](https://github.com/SeleniumHQ/selenium/releases) - [Commits](SeleniumHQ/selenium@selenium-4.49.0...selenium-4.50.0) --- updated-dependencies: - dependency-name: cypress dependency-version: 16.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: testing-and-build - dependency-name: electron dependency-version: 44.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: testing-and-build - dependency-name: mocha dependency-version: 12.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: testing-and-build - dependency-name: next dependency-version: 16.3.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: testing-and-build - dependency-name: selenium-webdriver dependency-version: 4.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: testing-and-build ... Signed-off-by: dependabot[bot] <support@github.com>

dd-octo-sts · 2026-10-05T01:00:06Z

Overall package size

Self size: 9.41 MB
Deduped: 10.14 MB
No deduping: 10.14 MB

Dependency sizes

| name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 3.5.1 | 127.66 kB | 513.61 kB | | opentracing | 0.14.7 | 194.81 kB | 194.81 kB | | dc-polyfill | 0.1.11 | 25.74 kB | 25.74 kB |

_{🤖 This report was automatically generated by heaviest-objects-in-the-universe}

datadog-datadog-us1-prod · 2026-10-05T01:04:40Z

✅ All CI checks and tests passed. Datadog automation helped this PR pass.

🎉 All green!

🧪 All tests passed
❄️ No new flaky tests detected

🔄 Datadog retried 2 tests - 2 passed on retry

_{This comment will be updated automatically if new data arrives.

🔗 Commit SHA: 62f764e | Docs | View more details | Give us feedback!}

pr-commenter · 2026-10-05T01:26:23Z

Benchmarks

Benchmark execution time: 2026-10-05 01:26:20

Comparing candidate commit 62f764e in PR branch dependabot/npm_and_yarn/packages/dd-trace/test/plugins/versions/testing-and-build-7d204b3780 with baseline commit 94d088b in branch master.

📊 Benchmarking dashboard

Found 0 performance improvements and 0 performance regressions! Performance is the same for 2390 metrics, 13 unstable metrics.

Explanation

This is an A/B test comparing a candidate commit's performance against that of a baseline commit. Performance changes are noted in the tables below as:

🟩 = significantly better candidate vs. baseline
🟥 = significantly worse candidate vs. baseline

We compute a confidence interval (CI) over the relative difference of means between metrics from the candidate and baseline commits, considering the baseline as the reference.

If the CI is entirely outside the configured SIGNIFICANT_IMPACT_THRESHOLD (or the deprecated UNCONFIDENCE_THRESHOLD), the change is considered significant.

Feel free to reach out to #apm-benchmarking-platform on Slack if you have any questions.

More details about the CI and significant changes

You can imagine this CI as a range of values that is likely to contain the true difference of means between the candidate and baseline commits.

CIs of the difference of means are often centered around 0%, because often changes are not that big:

---------------------------------(------|---^--------)-------------------------------->
                              -0.6%    0%  0.3%     +1.2%
                                 |          |        |
         lower bound of the CI --'          |        |
sample mean (center of the CI) -------------'        |
         upper bound of the CI ----------------------'

As described above, a change is considered significant if the CI is entirely outside the configured SIGNIFICANT_IMPACT_THRESHOLD (or the deprecated UNCONFIDENCE_THRESHOLD).

For instance, for an execution time metric, this confidence interval indicates a significantly worse performance:

----------------------------------------|---------|---(---------^---------)---------->
                                       0%        1%  1.3%      2.2%      3.1%
                                                  |   |         |         |
       significant impact threshold --------------'   |         |         |
                      lower bound of CI --------------'         |         |
       sample mean (center of the CI) --------------------------'         |
                      upper bound of CI ----------------------------------'

Unstable benchmarks

These benchmarks have a confidence interval too wide to call a change; treat them as noise rather than signal.

scenario:appsec-iast-no-vulnerability-iast-enabled-default-config-20

unstable max_rss_usage [-19718967 bytes; +19717967 bytes] or [-8.366%; +8.365%]

scenario:appsec-iast-with-vulnerability-iast-enabled-default-config-20

unstable max_rss_usage [-26.888MB; +18.670MB] or [-7.421%; +5.153%]

scenario:debugger-line-probe-without-snapshot-26

unstable cpu_user_time [-516.340ms; +424.987ms] or [-5.954%; +4.901%]

scenario:encoders-0.4-immediate-flush-20

unstable max_rss_usage [-11040.974KB; +10896.974KB] or [-13.402%; +13.227%]

scenario:id-parse-128bit-24

unstable execution_time [-86.232ms; +132.488ms] or [-4.163%; +6.396%]

scenario:openfeature-scale-full-24

unstable max_rss_usage [-24.332MB; +22.064MB] or [-8.316%; +7.541%]

scenario:plugin-aws-sdk-eventbridge-inject-detail-26

unstable cpu_usage_percentage [-9.734%; +6.236%]
unstable execution_time [-329.338ms; +498.085ms] or [-8.172%; +12.360%]
unstable throughput [-156386.229op/s; +104492.400op/s] or [-10.437%; +6.973%]

scenario:plugin-aws-sdk-extract-response-body-24

unstable execution_time [-290.225ms; +321.853ms] or [-5.531%; +6.133%]

scenario:plugin-graphql-long-with-depth-off-26

unstable max_rss_usage [-41.736MB; +21.165MB] or [-16.558%; +8.397%]
unstable throughput [-12.174op/s; +23.210op/s] or [-3.760%; +7.169%]

scenario:plugin-graphql-long-with-depth-on-max-26

unstable max_rss_usage [-6.384MB; +21.150MB] or [-2.481%; +8.221%]

… 5 updates (#10621) Bumps the testing-and-build group with 5 updates in the /packages/dd-trace/test/plugins/versions directory: | Package | From | To | | --- | --- | --- | | [cypress](https://github.com/cypress-io/cypress) | `16.1.0` | `16.1.1` | | [electron](https://github.com/electron/electron) | `44.4.5` | `44.5.1` | | [mocha](https://github.com/mochajs/mocha) | `12.0.2` | `12.0.3` | | [next](https://github.com/vercel/next.js) | `16.3.6` | `16.3.8` | | [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.49.0` | `4.50.0` | Updates `cypress` from 16.1.0 to 16.1.1 - [Release notes](https://github.com/cypress-io/cypress/releases) - [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md) - [Commits](cypress-io/cypress@v16.1.0...v16.1.1) Updates `electron` from 44.4.5 to 44.5.1 - [Release notes](https://github.com/electron/electron/releases) - [Commits](electron/electron@v44.4.5...v44.5.1) Updates `mocha` from 12.0.2 to 12.0.3 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md) - [Commits](mochajs/mocha@v12.0.2...v12.0.3) Updates `next` from 16.3.6 to 16.3.8 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.6...v16.3.8) Updates `selenium-webdriver` from 4.49.0 to 4.50.0 - [Release notes](https://github.com/SeleniumHQ/selenium/releases) - [Commits](SeleniumHQ/selenium@selenium-4.49.0...selenium-4.50.0) --- updated-dependencies: - dependency-name: cypress dependency-version: 16.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: testing-and-build - dependency-name: electron dependency-version: 44.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: testing-and-build - dependency-name: mocha dependency-version: 12.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: testing-and-build - dependency-name: next dependency-version: 16.3.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: testing-and-build - dependency-name: selenium-webdriver dependency-version: 4.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: testing-and-build ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot Bot added dependabot dependencies javascript Pull requests that update javascript code semver-patch labels Oct 5, 2026

dependabot Bot requested review from a team as code owners October 5, 2026 00:59

dependabot Bot added dependencies javascript Pull requests that update javascript code labels Oct 5, 2026

dependabot Bot removed the request for review from a team October 5, 2026 00:59

dependabot Bot added the dependabot label Oct 5, 2026

dependabot Bot requested a review from tlhunter October 5, 2026 00:59

dd-octo-sts Bot approved these changes Oct 5, 2026

View reviewed changes

dd-octo-sts Bot enabled auto-merge (squash) October 5, 2026 00:59

dd-octo-sts Bot merged commit e4a73d7 into master Oct 5, 2026
676 checks passed

dd-octo-sts Bot deleted the dependabot/npm_and_yarn/packages/dd-trace/test/plugins/versions/testing-and-build-7d204b3780 branch October 5, 2026 01:28

Navigation Menu

Repository navigation

chore(deps): bump the testing-and-build group across 1 directory with 5 updates - #10621

chore(deps): bump the testing-and-build group across 1 directory with 5 updates#10621
dd-octo-sts[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/packages/dd-trace/test/plugins/versions/testing-and-build-7d204b3780

dependabot Bot commented on behalf of github Oct 5, 2026

Uh oh!

dd-octo-sts Bot commented Oct 5, 2026

Uh oh!

datadog-datadog-us1-prod Bot commented Oct 5, 2026 •

edited by datadog-prod-us1-3 Bot

Loading

Uh oh!

pr-commenter Bot commented Oct 5, 2026

Explanation

More details about the CI and significant changes

Unstable benchmarks

scenario:appsec-iast-no-vulnerability-iast-enabled-default-config-20

scenario:appsec-iast-with-vulnerability-iast-enabled-default-config-20

scenario:debugger-line-probe-without-snapshot-26

scenario:encoders-0.4-immediate-flush-20

scenario:id-parse-128bit-24

scenario:openfeature-scale-full-24

scenario:plugin-aws-sdk-eventbridge-inject-detail-26

scenario:plugin-aws-sdk-extract-response-body-24

scenario:plugin-graphql-long-with-depth-off-26

scenario:plugin-graphql-long-with-depth-on-max-26

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 5, 2026

v16.1.1

electron v44.5.1

Release Notes for v44.5.1

Other Changes

electron v44.5.0

Release Notes for v44.5.0

Features

Fixes

v12.0.3

12.0.3 (2026-10-01)

🩹 Fixes

📚 Documentation

🧹 Chores

12.0.3 (2026-10-01)

🩹 Fixes

📚 Documentation

🧹 Chores

v16.3.8

v16.3.7

Core Changes

Credits

Selenium 4.50.0

Detailed Changelogs by Component

What's Changed

Uh oh!

dd-octo-sts Bot commented Oct 5, 2026

Overall package size

Uh oh!

datadog-datadog-us1-prod Bot commented Oct 5, 2026 • edited by datadog-prod-us1-3 Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pr-commenter Bot commented Oct 5, 2026

Benchmarks

Explanation

More details about the CI and significant changes

Unstable benchmarks

scenario:appsec-iast-no-vulnerability-iast-enabled-default-config-20

scenario:appsec-iast-with-vulnerability-iast-enabled-default-config-20

scenario:debugger-line-probe-without-snapshot-26

scenario:encoders-0.4-immediate-flush-20

scenario:id-parse-128bit-24

scenario:openfeature-scale-full-24

scenario:plugin-aws-sdk-eventbridge-inject-detail-26

scenario:plugin-aws-sdk-extract-response-body-24

scenario:plugin-graphql-long-with-depth-off-26

scenario:plugin-graphql-long-with-depth-on-max-26

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

datadog-datadog-us1-prod Bot commented Oct 5, 2026 •

edited by datadog-prod-us1-3 Bot

Loading