Skip to content

chore(deps): hold jsdom below 30.1 until vitest supports it - #954

Closed
mforce wants to merge 1 commit into
mainfrom
chore/dependabot-hold-jsdom-30-1
Closed

mforce wants to merge 1 commit into
mainfrom
chore/dependabot-hold-jsdom-30-1

Conversation

@mforce

@mforce mforce commented Sep 25, 2026

Copy link
Copy Markdown
Owner

Holds jsdom below 30.1 in the /web Dependabot config. This unblocks the dev-tooling group in #952.

Why. jsdom 30.1 no longer exposes Symbol(impl) as an own property on its wrappers. Vitest's jsdom URL.createObjectURL shim (createCompatUtils) finds the impl symbol through Object.getOwnPropertyDescriptors(new window.Blob()). On 30.1 it finds nothing, so blob[implSymbol]._buffer throws on every createObjectURL call. This fails the 5 Login — cached pre-auth banner (#833) tests in #952.

Bisected from #952's lockfile:

  • jsdom 30.0.1 with vitest 5.0.1: 51/51 pass.
  • jsdom 30.1.1 with vitest 5.0.0: 5 fail.
  • Own symbols on new window.Blob(): [Symbol(impl)] on 30.0.1, [] on 30.1.1.

Upstream vitest-dev/vitest#11295 (merged 2026-09-17, not yet released) handles jsdom 28's _buffer → _bytes rename. It does not address the missing symbol, so it will not fix this on its own.

Follow-up. After this merges, comment @dependabot recreate on #952 so the group is rebuilt without jsdom. Remove the ignore once a vitest release handles jsdom 30.1 wrappers.

jsdom 30.1 no longer exposes Symbol(impl) as an own property on its
wrappers. vitest's jsdom URL.createObjectURL shim looks that symbol up,
finds nothing, and throws on every call, failing the banner-cache tests
in #952.
@mforce

mforce commented Sep 25, 2026

Copy link
Copy Markdown
Owner Author

Follow-up to lift this hold: #955. Upstream bug: vitest-dev/vitest#11336, fix in vitest-dev/vitest#11353 (open).

@mforce

mforce commented Sep 25, 2026

Copy link
Copy Markdown
Owner Author

Closing unmerged: we'll wait for the vitest release carrying vitest-dev/vitest#11353 instead of holding jsdom. Tracked on #952.

@mforce mforce closed this Sep 25, 2026
@mforce
mforce deleted the chore/dependabot-hold-jsdom-30-1 branch September 25, 2026 05:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant