Skip to content

Bump the npm_and_yarn group across 11 directories with 7 updates#17807

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/extension/npm_and_yarn-169ab14268
Closed

Bump the npm_and_yarn group across 11 directories with 7 updates#17807
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/extension/npm_and_yarn-169ab14268

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 4 updates in the /extension directory: ws, @nevware21/ts-utils, fast-uri and qs.
Bumps the npm_and_yarn group with 4 updates in the /playground/AspireWithJavaScript/AspireJavaScript.Angular directory: ws, fast-uri, qs and @babel/plugin-transform-modules-systemjs.
Bumps the npm_and_yarn group with 1 update in the /playground/AspireWithJavaScript/AspireJavaScript.NodeApp directory: qs.
Bumps the npm_and_yarn group with 4 updates in the /playground/AspireWithJavaScript/AspireJavaScript.React directory: ws, fast-uri, qs and @babel/plugin-transform-modules-systemjs.
Bumps the npm_and_yarn group with 1 update in the /playground/PostgresEndToEnd/PostgresEndToEnd.NodeService directory: qs.
Bumps the npm_and_yarn group with 1 update in the /playground/TypeScriptAppHost/express-api directory: qs.
Bumps the npm_and_yarn group with 1 update in the /playground/TypeScriptApps/AzureFunctionsSample/TypeScriptApiService directory: qs.
Bumps the npm_and_yarn group with 1 update in the /playground/TypeScriptApps/RpsArena/node-player directory: qs.
Bumps the npm_and_yarn group with 1 update in the /tests/Aspire.Cli.EndToEnd.Tests/Fixtures/JsPublish/nextjs directory: next.
Bumps the npm_and_yarn group with 1 update in the /tests/Aspire.Cli.EndToEnd.Tests/Fixtures/JsPublish/npmscript directory: qs.
Bumps the npm_and_yarn group with 1 update in the /tests/Aspire.Hosting.CodeGeneration.TypeScript.JsTests directory: vitest.

Updates ws from 8.20.0 to 8.20.1

Release notes

Sourced from ws's releases.

8.20.1

Bug fixes

  • Fixed an uninitialized memory disclosure issue in websocket.close() (c0327ec1).

Providing a TypedArray (e.g. Float32Array) as the reason argument for websocket.close(), rather than the supported string or Buffer types, caused uninitialized memory to be disclosed to the remote peer.

import { deepStrictEqual } from 'node:assert';
import { WebSocket, WebSocketServer } from 'ws';
const wss = new WebSocketServer(
{ port: 0, skipUTF8Validation: true },
function () {
const { port } = wss.address();
const ws = new WebSocket(ws://localhost:${port}, {
skipUTF8Validation: true
});
ws.on('close', function (code, reason) {
  deepStrictEqual(reason, Buffer.alloc(80));
});

}
);
wss.on('connection', function (ws) {
ws.close(1000, new Float32Array(20));
});

The issue was privately reported by Nikita Skovoroda.

Commits
  • 5d9b316 [dist] 8.20.1
  • c0327ec [security] Fix uninitialized memory disclosure in websocket.close()
  • ce2a3d6 [ci] Test on node 26
  • 58e45b8 [ci] Do not test on node 25
  • 5f26c24 [ci] Run the lint step on node 24
  • See full diff in compare view

Updates @nevware21/ts-utils from 0.13.0 to 0.15.0

Release notes

Sourced from @​nevware21/ts-utils's releases.

0.15.0

Changelog

Features

  • #570 Add microtask scheduling helpers with native queueMicrotask, Promise, and timer-backed fallbacks
    • New functions: scheduleMicrotask, hasQueueMicrotask, getQueueMicrotask, setMicroTaskFallbackOptions
    • New public types: ScheduleMicrotaskFn, MicroTaskOptions
    • Extends microtask support by providing cancellable microtasks via ITimerHandler, plus fallback ordering to run microtasks before queued timers when using the timer-backed implementation
    • Provides runtime parity across all supported environments by using native queueMicrotask when present, Promise-backed scheduling when available, and a timer-backed microtask queue otherwise
  • #573 Add nextTick scheduling support and new helper exports
    • New timer/runtime functions: scheduleNextTick, getProcessNextTick, hasProcessNextTick, setNextTickFallbackOptions
    • Uses native process.nextTick in Node runtimes when available, while providing equivalent nextTick behavior in browser and worker runtimes via Promise and timer-backed fallbacks
    • Adds shared queue logic and callback-argument support across microtask and nextTick scheduling
    • Adds arrConcat as a dedicated array helper and fnBindArgs as a dedicated function helper
    • Improves function binding typing with exported BoundFunction and updated signatures for fnBind / fnBindArgs
  • #574 feat(iterator,array): add iterator collection helpers, split helper modules, and align collection membership semantics
    • Added new iterator helpers: iterMap, iterFilter, iterTake, iterReduce, iterSome, iterEvery, iterToArray, iterUnion, iterIntersection, iterDifference
    • Added arrToMap helper in the array module and moved callback/type declarations into iterator/types
    • Refactored iterator helper implementation/tests into per-function files and updated root exports
    • Added NaN regression coverage and switched iterator set-operation membership checks to arrIncludes semantics for parity with array helpers
  • #576 Refactor timer microtask/nextTick shared types and environment helpers, with expanded fallback coverage
    • Moved MicrotaskFn and ScheduleMicrotaskFn to helpers/types and updated timer internals to consume shared type definitions
    • Moved getQueueMicrotask and hasQueueMicrotask to helpers/environment, updated root exports, and aligned scheduleNextTick fallback resolution to prefer queueMicrotask when available
    • Added internal microtaskQueue scheduler helper wiring and expanded tests for queue fallback behavior, Promise ordering, and no-Promise edge cases

Bug Fixes

  • #568 Rolldown INVALID_ANNOTATION warnings caused by non-canonical PURE annotation spacing in generated output
    • #569 Add generated-chunk PURE annotation normalization so spaced forms are rewritten to canonical (/*#__PURE__*/ / (/*@__PURE__*/ in rollup output
    • #575 Add packaged artifact validation for PURE annotation spacing and update normalization tolerance, with per-file logging while scanning lib/bundle and lib/dist

New Contributors

Full Changelog: nevware21/ts-utils@0.14.0...0.15.0

0.14.0

Changelog

Features

  • #525 feat(array): add new array helpers and array-like detection
    • New helpers: isArrayLike, arrUnique, arrCompact, arrFlatten, arrGroupBy, arrChunk and export previously missed isArrayLike
  • #527 feat(string): add strReplace and strReplaceAll helpers with refactored internal replacements
  • #528 feat(string): add strCapitalizeWords helper
  • #529 / #530 feat(string): add strTruncate, strCount, strAt, and strMatchAll helpers with shared literal regex helper
  • #533 feat(array): add arrFlatMap with ES5 polyfill support
  • #535 docs(types): add typing utilities for v0.14.0 and expand TSDoc examples
  • #536 feat: add isAsyncIterable and isIntegerInRange type/value inspection helpers

... (truncated)

Changelog

Sourced from @​nevware21/ts-utils's changelog.

v0.15.0 May 29th, 2026

Changelog

Features

  • #570 Add microtask scheduling helpers with native queueMicrotask, Promise, and timer-backed fallbacks
    • New functions: scheduleMicrotask, hasQueueMicrotask, getQueueMicrotask, setMicroTaskFallbackOptions
    • New public types: ScheduleMicrotaskFn, MicroTaskOptions
    • Extends microtask support by providing cancellable microtasks via ITimerHandler, plus fallback ordering to run microtasks before queued timers when using the timer-backed implementation
    • Provides runtime parity across all supported environments by using native queueMicrotask when present, Promise-backed scheduling when available, and a timer-backed microtask queue otherwise
  • #573 Add nextTick scheduling support and new helper exports
    • New timer/runtime functions: scheduleNextTick, getProcessNextTick, hasProcessNextTick, setNextTickFallbackOptions
    • Uses native process.nextTick in Node runtimes when available, while providing equivalent nextTick behavior in browser and worker runtimes via Promise and timer-backed fallbacks
    • Adds shared queue logic and callback-argument support across microtask and nextTick scheduling
    • Adds arrConcat as a dedicated array helper and fnBindArgs as a dedicated function helper
    • Improves function binding typing with exported BoundFunction and updated signatures for fnBind / fnBindArgs
  • #574 feat(iterator,array): add iterator collection helpers, split helper modules, and align collection membership semantics
    • Added new iterator helpers: iterMap, iterFilter, iterTake, iterReduce, iterSome, iterEvery, iterToArray, iterUnion, iterIntersection, iterDifference
    • Added arrToMap helper in the array module and moved callback/type declarations into iterator/types
    • Refactored iterator helper implementation/tests into per-function files and updated root exports
    • Added NaN regression coverage and switched iterator set-operation membership checks to arrIncludes semantics for parity with array helpers
  • #576 Refactor timer microtask/nextTick shared types and environment helpers, with expanded fallback coverage
    • Moved MicrotaskFn and ScheduleMicrotaskFn to helpers/types and updated timer internals to consume shared type definitions
    • Moved getQueueMicrotask and hasQueueMicrotask to helpers/environment, updated root exports, and aligned scheduleNextTick fallback resolution to prefer queueMicrotask when available
    • Added internal microtaskQueue scheduler helper wiring and expanded tests for queue fallback behavior, Promise ordering, and no-Promise edge cases

Bug Fixes

  • #568 Rolldown INVALID_ANNOTATION warnings caused by non-canonical PURE annotation spacing in generated output
    • #569 Add generated-chunk PURE annotation normalization so spaced forms are rewritten to canonical (/*#__PURE__*/ / (/*@__PURE__*/ in rollup output
    • #575 Add packaged artifact validation for PURE annotation spacing and update normalization tolerance, with per-file logging while scanning lib/bundle and lib/dist

Full Changelog

v0.14.0 May 18th, 2026

Changelog

Features

  • #525 feat(array): add new array helpers and array-like detection
    • New helpers: isArrayLike, arrUnique, arrCompact, arrFlatten, arrGroupBy, arrChunk and export previously missed isArrayLike
  • #527 feat(string): add strReplace and strReplaceAll helpers with refactored internal replacements
  • #528 feat(string): add strCapitalizeWords helper
  • #529 / #530 feat(string): add strTruncate, strCount, strAt, and strMatchAll helpers with shared literal regex helper
  • #533 feat(array): add arrFlatMap with ES5 polyfill support
  • #535 docs(types): add typing utilities for v0.14.0 and expand TSDoc examples
  • #536 feat: add isAsyncIterable and isIntegerInRange type/value inspection helpers
  • #543 feat(string): add strStartsWithAny, strEndsWithAny, strWrap, strUnwrap, and strNormalizeNewlines helpers

... (truncated)

Commits
  • 66b5fba [Release] Increase version to 0.15.0 (#577)
  • 358d5d1 refactor(timer): centralize microtask types and queueMicrotask access; expand...
  • 382853e feat(iterator): add iterator collection helpers with docs and tests (#574)
  • 87cb303 test(build): validate packaged bundle PURE annotations and improve no… (#575)
  • 124d67f feat: add nextTick support, add arrConcat and fnBindArgs helpers (#573)
  • 34178c1 Fix #PURE annotations being ignored by Rolldown/Vite 8 (#568) (#569)
  • 5b5854b feat(timer): add cancellable microtask scheduling with cross-runtime fallback...
  • 45cb369 [Release] Increase version to 0.14.0 (#567)
  • 5e887f4 Add new object utility helpers and harden defaults against prototype pollutio...
  • 0a486d3 Bug: Falsy thisArg (0, '', false) overridden in arrForEach/iterForOf/objForEa...
  • Additional commits viewable in compare view

Updates fast-uri from 3.1.0 to 3.1.2

Release notes

Sourced from fast-uri's releases.

v3.1.2

⚠️ Security Release

What's Changed

Full Changelog: fastify/fast-uri@v3.1.1...v3.1.2

v3.1.1

⚠️ Security Release

What's Changed

New Contributors

Full Changelog: fastify/fast-uri@v3.1.0...v3.1.1

Commits
  • 919dd8e Bumped v3.1.2
  • c65ba57 fixup: linting
  • 6c86c17 Merge commit from fork
  • a95158a Handle malformed fragment decoding without throwing (#171)
  • cea547c Bumped v3.1.1
  • 876ce79 Merge commit from fork
  • dcdf690 ci: add lock-threads workflow (#169)
  • c860e65 build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 (#167)
  • 9b4c6dc build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml (#166)
  • 85d09a9 build(deps): bump fastify/workflows/.github/workflows/plugins-ci-package-mana...
  • Additional commits viewable in compare view

Updates qs from 6.15.0 to 6.15.2

Changelog

Sourced from qs's changelog.

6.15.2

  • [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + encodeValuesOnly instead of crashing in encoder
  • [Fix] stringify: use configured delimiter after charsetSentinel (#555)
  • [Fix] stringify: apply formatter to encoded key under strictNullHandling (#554)
  • [Fix] stringify: skip null/undefined filter-array entries instead of crashing in encoder (#551)
  • [Fix] parse: handle nested bracket groups and add regression tests (#530)
  • [readme] fix grammar (#550)
  • [Dev Deps] update @ljharb/eslint-config
  • [Tests] add regression tests for keys containing percent-encoded bracket text

6.15.1

  • [Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently drops all parameters
  • [Deps] update @ljharb/eslint-config
  • [Dev Deps] update @ljharb/eslint-config, iconv-lite
  • [Tests] increase coverage
Commits
  • 9aca407 v6.15.2
  • 5e33d33 [Dev Deps] update @ljharb/eslint-config
  • 21f80b3 [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + `e...
  • a0a81ea [Fix] stringify: use configured delimiter after charsetSentinel
  • e3062f7 [Fix] stringify: apply formatter to encoded key under strictNullHandling
  • 0c180a4 [Fix] stringify: skip null/undefined filter-array entries instead of crashi...
  • 3a8b94a [Tests] add regression tests for keys containing percent-encoded bracket text
  • 96755ab [readme] fix grammar
  • a419ce5 [Fix] parse: handle nested bracket groups and add regression tests
  • 3f5e1c5 v6.15.1
  • Additional commits viewable in compare view

Updates ws from 8.18.3 to 8.21.0

Release notes

Sourced from ws's releases.

8.20.1

Bug fixes

  • Fixed an uninitialized memory disclosure issue in websocket.close() (c0327ec1).

Providing a TypedArray (e.g. Float32Array) as the reason argument for websocket.close(), rather than the supported string or Buffer types, caused uninitialized memory to be disclosed to the remote peer.

import { deepStrictEqual } from 'node:assert';
import { WebSocket, WebSocketServer } from 'ws';
const wss = new WebSocketServer(
{ port: 0, skipUTF8Validation: true },
function () {
const { port } = wss.address();
const ws = new WebSocket(ws://localhost:${port}, {
skipUTF8Validation: true
});
ws.on('close', function (code, reason) {
  deepStrictEqual(reason, Buffer.alloc(80));
});

}
);
wss.on('connection', function (ws) {
ws.close(1000, new Float32Array(20));
});

The issue was privately reported by Nikita Skovoroda.

Commits
  • 5d9b316 [dist] 8.20.1
  • c0327ec [security] Fix uninitialized memory disclosure in websocket.close()
  • ce2a3d6 [ci] Test on node 26
  • 58e45b8 [ci] Do not test on node 25
  • 5f26c24 [ci] Run the lint step on node 24
  • See full diff in compare view

Updates fast-uri from 3.1.0 to 3.1.2

Release notes

Sourced from fast-uri's releases.

v3.1.2

⚠️ Security Release

What's Changed

Full Changelog: fastify/fast-uri@v3.1.1...v3.1.2

v3.1.1

⚠️ Security Release

What's Changed

New Contributors

Full Changelog: fastify/fast-uri@v3.1.0...v3.1.1

Commits
  • 919dd8e Bumped v3.1.2
  • c65ba57 fixup: linting
  • 6c86c17 Merge commit from fork
  • a95158a Handle malformed fragment decoding without throwing (#171)
  • cea547c Bumped v3.1.1
  • 876ce79 Merge commit from fork
  • dcdf690 ci: add lock-threads workflow (#169)
  • c860e65 build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 (#167)
  • 9b4c6dc build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml (#166)
  • 85d09a9 build(deps): bump fastify/workflows/.github/workflows/plugins-ci-package-mana...
  • Additional commits viewable in compare view

Updates qs from 6.15.1 to 6.15.2

Changelog

Sourced from qs's changelog.

6.15.2

  • [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + encodeValuesOnly instead of crashing in encoder
  • [Fix] stringify: use configured delimiter after charsetSentinel (#555)
  • [Fix] stringify: apply formatter to encoded key under strictNullHandling (#554)
  • [Fix] stringify: skip null/undefined filter-array entries instead of crashing in encoder (#551)
  • [Fix] parse: handle nested bracket groups and add regression tests (#530)
  • [readme] fix grammar (#550)
  • [Dev Deps] update @ljharb/eslint-config
  • [Tests] add regression tests for keys containing percent-encoded bracket text

6.15.1

  • [Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently drops all parameters
  • [Deps] update @ljharb/eslint-config
  • [Dev Deps] update @ljharb/eslint-config, iconv-lite
  • [Tests] increase coverage
Commits
  • 9aca407 v6.15.2
  • 5e33d33 [Dev Deps] update @ljharb/eslint-config
  • 21f80b3 [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + `e...
  • a0a81ea [Fix] stringify: use configured delimiter after charsetSentinel
  • e3062f7 [Fix] stringify: apply formatter to encoded key under strictNullHandling
  • 0c180a4 [Fix] stringify: skip null/undefined filter-array entries instead of crashi...
  • 3a8b94a [Tests] add regression tests for keys containing percent-encoded bracket text
  • 96755ab [readme] fix grammar
  • a419ce5 [Fix] parse: handle nested bracket groups and add regression tests
  • 3f5e1c5 v6.15.1
  • Additional commits viewable in compare view

Updates @babel/plugin-transform-modules-systemjs from 7.29.0 to 7.29.7

Release notes

Sourced from @​babel/plugin-transform-modules-systemjs's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

  • babel-preset-env
    • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

  • babel-plugin-transform-modules-systemjs
    • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
  • babel-register
  • babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

💅 Polish

  • babel-parser

... (truncated)

Commits

Updates qs from 6.15.0 to 6.15.2

Changelog

Sourced from qs's changelog.

6.15.2

  • [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + encodeValuesOnly instead of crashing in encoder
  • [Fix] stringify: use configured delimiter after charsetSentinel (#555)
  • [Fix] stringify: apply formatter to encoded key under strictNullHandling (#554)
  • [Fix] stringify: skip null/undefined filter-array entries instead of crashing in encoder (#551)
  • [Fix] parse: handle nested bracket groups and add regression tests (#530)
  • [readme] fix grammar (#550)
  • [Dev Deps] update @ljharb/eslint-config
  • [Tests] add regression tests for keys containing percent-encoded bracket text

6.15.1

  • [Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently drops all parameters
  • [Deps] update @ljharb/eslint-config
  • [Dev Deps] update @ljharb/eslint-config, iconv-lite
  • [Tests] increase coverage
Commits
  • 9aca407 v6.15.2
  • 5e33d33 [Dev Deps] update @ljharb/eslint-config
  • 21f80b3 [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + `e...
  • a0a81ea [Fix] stringify: use configured delimiter after charsetSentinel
  • e3062f7 [Fix] stringify: apply formatter to encoded key under strictNullHandling
  • 0c180a4 [Fix] stringify: skip null/undefined filter-array entries instead of crashi...
  • 3a8b94a [Tests] add regression tests for keys containing percent-encoded bracket text
  • 96755ab [readme] fix grammar
  • a419ce5 [Fix] parse: handle nested bracket groups and add regression tests
  • 3f5e1c5 v6.15.1
  • Additional commits viewable in compare view

Updates ws from 8.18.3 to 8.21.0

Release notes

Sourced from ws's releases.

8.20.1

Bug fixes

  • Fixed an uninitialized memory disclosure issue in websocket.close() (c0327ec1).

Providing a TypedArray (e.g. Float32Array) as the reason argument for websocket.close(), rather than the supported string or Buffer types, caused uninitialized memory to be disclosed to the remote peer.

import { deepStrictEqual } from 'node:assert';
import { WebSocket, WebSocketServer } from 'ws';
const wss = new WebSocketServer(
{ port: 0, skipUTF8Validation: true },
function () {
const { port } = wss.address();
const ws = new WebSocket(ws://localhost:${port}, {
skipUTF8Validation: true
});
ws.on('close', function (code, reason) {
  deepStrictEqual(reason, Buffer.alloc(80));
});

}
);
wss.on('connection', function (ws) {
ws.close(1000, new Float32Array(20));
});

The issue was privately reported by Nikita Skovoroda.

Commits
  • 5d9b316 [dist] 8.20.1
  • c0327ec [security] Fix uninitialized memory disclosure in websocket.close()
  • ce2a3d6 [ci] Test on node 26
  • 58e45b8 [ci] Do not test on node 25
  • 5f26c24 [ci] Run the lint step on node 24
  • See full diff in compare view

Updates fast-uri from 3.1.0 to 3.1.2

Release notes

Sourced from fast-uri's releases.

v3.1.2

⚠️ Security Release

What's Changed

Full Changelog: fastify/fast-uri@v3.1.1...v3.1.2

v3.1.1

⚠️ Security Release

What's Changed

New Contributors

Full Changelog: fastify/fast-uri@v3.1.0...v3.1.1

Commits
  • 919dd8e Bumped v3.1.2
  • c65ba57 fixup: linting
  • 6c86c17 Merge commit from fork
  • a95158a Handle malformed fragment decoding without throwing (#171)
  • cea547c Bumped v3.1.1
  • 876ce79 Merge commit from fork
  • dcdf690 ci: add lock-threads workflow (#169)
  • c860e65 build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 (#167)
  • 9b4c6dc build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml (#166)
  • 85d09a9 build(deps): bump fastify/workflows/.github/workflows/plugins-ci-package-mana...
  • Additional commits viewable in compare view

Updates qs from 6.14.2 to 6.15.2

Changelog

Sourced from qs's changelog.

6.15.2

  • [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + encodeValuesOnly instead of crashing in encoder
  • [Fix] stringify: use configured delimiter after charsetSentinel (#555)
  • [Fix] stringify: apply formatter to encoded key under strictNullHandling (#554)
  • [Fix] stringify: skip null/undefined filter-array entries instead of crashing in encoder (#551)
  • [Fix] parse: handle nested bracket groups and add regression tests (#530)
  • [readme] fix grammar (#550)
  • [Dev Deps] update @ljharb/eslint-config
  • [Tests] add regression tests for keys containing percent-encoded bracket text

6.15.1

  • [Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently drops all parameters
  • [Deps] update @ljharb/eslint-config
  • [Dev Deps] update @ljharb/eslint-config, iconv-lite
  • [Tests] increase coverage
Commits
  • 9aca407 v6.15.2
  • 5e33d33 [Dev Deps] update @ljharb/eslint-config
  • 21f80b3 [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + `e...
  • a0a81ea [Fix] stringify: use configured delimiter after...

    Description has been truncated

@dependabot
Bump the npm_and_yarn group across 11 directories with 7 updates
0a597d7 
Bumps the npm_and_yarn group with 4 updates in the /extension directory: [ws](https://github.com/websockets/ws), [@nevware21/ts-utils](https://github.com/nevware21/ts-utils), [fast-uri](https://github.com/fastify/fast-uri) and [qs](https://github.com/ljharb/qs).
Bumps the npm_and_yarn group with 4 updates in the /playground/AspireWithJavaScript/AspireJavaScript.Angular directory: [ws](https://github.com/websockets/ws), [fast-uri](https://github.com/fastify/fast-uri), [qs](https://github.com/ljharb/qs) and [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs).
Bumps the npm_and_yarn group with 1 update in the /playground/AspireWithJavaScript/AspireJavaScript.NodeApp directory: [qs](https://github.com/ljharb/qs).
Bumps the npm_and_yarn group with 4 updates in the /playground/AspireWithJavaScript/AspireJavaScript.React directory: [ws](https://github.com/websockets/ws), [fast-uri](https://github.com/fastify/fast-uri), [qs](https://github.com/ljharb/qs) and [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs).
Bumps the npm_and_yarn group with 1 update in the /playground/PostgresEndToEnd/PostgresEndToEnd.NodeService directory: [qs](https://github.com/ljharb/qs).
Bumps the npm_and_yarn group with 1 update in the /playground/TypeScriptAppHost/express-api directory: [qs](https://github.com/ljharb/qs).
Bumps the npm_and_yarn group with 1 update in the /playground/TypeScriptApps/AzureFunctionsSample/TypeScriptApiService directory: [qs](https://github.com/ljharb/qs).
Bumps the npm_and_yarn group with 1 update in the /playground/TypeScriptApps/RpsArena/node-player directory: [qs](https://github.com/ljharb/qs).
Bumps the npm_and_yarn group with 1 update in the /tests/Aspire.Cli.EndToEnd.Tests/Fixtures/JsPublish/nextjs directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /tests/Aspire.Cli.EndToEnd.Tests/Fixtures/JsPublish/npmscript directory: [qs](https://github.com/ljharb/qs).
Bumps the npm_and_yarn group with 1 update in the /tests/Aspire.Hosting.CodeGeneration.TypeScript.JsTests directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `ws` from 8.20.0 to 8.20.1
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.20.0...8.20.1)

Updates `@nevware21/ts-utils` from 0.13.0 to 0.15.0
- [Release notes](https://github.com/nevware21/ts-utils/releases)
- [Changelog](https://github.com/nevware21/ts-utils/blob/main/CHANGELOG.md)
- [Commits](nevware21/ts-utils@0.13.0...0.15.0)

Updates `fast-uri` from 3.1.0 to 3.1.2
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.0...v3.1.2)

Updates `qs` from 6.15.0 to 6.15.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.0...v6.15.2)

Updates `ws` from 8.18.3 to 8.21.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.20.0...8.20.1)

Updates `fast-uri` from 3.1.0 to 3.1.2
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.0...v3.1.2)

Updates `qs` from 6.15.1 to 6.15.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.0...v6.15.2)

Updates `@babel/plugin-transform-modules-systemjs` from 7.29.0 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-modules-systemjs)

Updates `qs` from 6.15.0 to 6.15.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.0...v6.15.2)

Updates `ws` from 8.18.3 to 8.21.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.20.0...8.20.1)

Updates `fast-uri` from 3.1.0 to 3.1.2
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.0...v3.1.2)

Updates `qs` from 6.14.2 to 6.15.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.0...v6.15.2)

Updates `@babel/plugin-transform-modules-systemjs` from 7.28.5 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-modules-systemjs)

Updates `qs` from 6.14.2 to 6.15.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.0...v6.15.2)

Updates `qs` from 6.14.2 to 6.15.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.0...v6.15.2)

Updates `qs` from 6.15.1 to 6.15.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.0...v6.15.2)

Updates `qs` from 6.14.2 to 6.15.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.0...v6.15.2)

Updates `next` from 15.5.15 to 15.5.18
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.5.15...v15.5.18)

Updates `qs` from 6.14.2 to 6.15.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.0...v6.15.2)

Updates `vitest` from 3.2.4 to 4.1.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest)

---
updated-dependencies:
- dependency-name: ws
  dependency-version: 8.20.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@nevware21/ts-utils"
  dependency-version: 0.15.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-version: 8.21.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/plugin-transform-modules-systemjs"
  dependency-version: 7.29.7
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-version: 8.21.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: fast-uri
  dependency-version: 3.1.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/plugin-transform-modules-systemjs"
  dependency-version: 7.29.7
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.18
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: vitest
  dependency-version: 4.1.0
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI review requested due to automatic review settings June 1, 2026 19:21
@dependabot dependabot Bot requested a review from adamint as a code owner June 1, 2026 19:21
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 1, 2026
Copilot AI reviewed Jun 1, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@github-actions

github-actions Bot commented Jun 1, 2026

Copy link
Copy Markdown
Contributor

🚀 Dogfood this PR with:

⚠️ WARNING: Do not do this without first carefully reviewing the code of this PR to satisfy yourself it is safe.

curl -fsSL https://raw.githubusercontent.com/microsoft/aspire/main/eng/scripts/get-aspire-cli-pr.sh | bash -s -- 17807

Or

  • Run remotely in PowerShell:
iex "& { $(irm https://raw.githubusercontent.com/microsoft/aspire/main/eng/scripts/get-aspire-cli-pr.ps1) } 17807"

@github-actions

github-actions Bot commented Jun 1, 2026

Copy link
Copy Markdown
Contributor

❌ CLI E2E Tests failed — 109 passed, 1 failed, 2 unknown (commit 0a597d7)

❌ Failed Tests

Status Test Recording Job Artifacts
❌ AllPublishMethodsBuildDockerImages Recording #78932204697 Logs
View all recordings
Status Test Recording Job Artifacts
✅ AddPackageInteractiveWhileAppHostRunningDetached Recording #78932205234 Logs
✅ AddPackageWhileAppHostRunningDetached Recording #78932205234 Logs
✅ AgentCommands_AllHelpOutputs_AreCorrect Recording #78932205581 Logs
✅ AgentInitCommand_DefaultSelection_InstallsDefaultSkills Recording #78932205581 Logs
✅ AgentInitCommand_MigratesDeprecatedConfig Recording #78932205581 Logs
✅ AgentInitCommand_NonInteractive_BundleOnlySkillsBeyondCliCatalog_AreInstallable Recording #78932205581 Logs
✅ AgentMcpListStructuredLogsReturnsLogsFromStarterApp Recording #78932205610 Logs
✅ AgentMcpListStructuredLogsReturnsLogsFromStarterApp_DevLocalhost Recording #78932205610 Logs
✅ AgentMcpListStructuredLogsReturnsLogsFromStarterApp_Isolated Recording #78932205610 Logs
❌ AllPublishMethodsBuildDockerImages Recording #78932204697 Logs
✅ AspireAddAndStartWorkAgainstLegacyAppHostTs Recording #78932205486 Logs
✅ AspireAddPackageVersionToDirectoryPackagesProps Recording #78932205141 Logs
✅ AspireInitSingleFileAppHostRunsViaDotnetRunAppHost Recording #78932205190 Logs
✅ AspireInitWithExistingAppHostDirRecreatesMissingNuGetConfigAndPreservesFiles Recording #78932205154 Logs
❔ AspireInitWithSolutionFileGeneratesAppHostThatBuildsAgainstChannelHive Recording #78932205154 Logs
✅ AspireStartUpdatesStaleTypeScriptAppHostPath Recording #78932205601 Logs
✅ AspireUpdateRemovesAppHostPackageVersionFromDirectoryPackagesProps Recording #78932205141 Logs
✅ AspireUpdateRemovesOrphanAppHostPackageVersionWhenSdkAlreadyCurrent Recording #78932205141 Logs
✅ Banner_DisplayedOnFirstRun Recording #78932205075 Logs
✅ Banner_DisplayedWithExplicitFlag Recording #78932205075 Logs
✅ Banner_NotDisplayedWithNoLogoFlag Recording #78932205075 Logs
✅ CertificatesClean_RemovesCertificates Recording #78932205365 Logs
✅ CertificatesTrust_WithNoCert_CreatesAndTrustsCertificate Recording #78932205365 Logs
✅ CertificatesTrust_WithUntrustedCert_TrustsCertificate Recording #78932205365 Logs
✅ ConfigSetGet_CreatesNestedJsonFormat Recording #78932205483 Logs
✅ CreateAndRunAspireStarterProject Recording #78932205044 Logs
✅ CreateAndRunAspireStarterProjectWithBundle Recording #78932205298 Logs
✅ CreateAndRunEmptyAppHostProject Recording #78932205591 Logs
✅ CreateAndRunJavaEmptyAppHostProject Recording #78932205116 Logs
✅ CreateAndRunJsReactProject Recording #78932205532 Logs
✅ CreateAndRunPolyglotAppHostWithDevLocalhostUrls Recording #78932205044 Logs
✅ CreateAndRunPythonReactProject Recording #78932204984 Logs
✅ CreateAndRunTypeScriptEmptyAppHostProject Recording #78932205166 Logs
✅ CreateAndRunTypeScriptStarterProject Recording #78932205295 Logs
✅ CreateJavaAppHostWithViteApp Recording #78932205793 Logs
✅ CreateTypeScriptAppHostWithViteApp_AllowsGuestAppPackageManagerToDiffer Recording #78932204992 Logs
✅ CreateTypeScriptAppHostWithViteApp_UsesConfiguredToolchain Recording #78932204992 Logs
✅ DashboardRunWithAgentMcpListTracesReturnsNoTraces Recording #78932205635 Logs
✅ DashboardRunWithAgentMcpListTracesReturnsNoTraces_DevLocalhost Recording #78932205635 Logs
✅ DashboardRunWithOtelTracesReturnsNoTraces Recording #78932205635 Logs
✅ DashboardRunWithOtelTracesReturnsNoTraces_DevLocalhost Recording #78932205635 Logs
✅ DeployK8sBasicApiService Recording #78932204871 Logs
✅ DeployK8sWithExternalHelmChart Recording #78932205710 Logs
✅ DeployK8sWithGarnet Recording #78932205695 Logs
✅ DeployK8sWithMongoDB Recording #78932205010 Logs
✅ DeployK8sWithMySql Recording #78932205344 Logs
✅ DeployK8sWithPostgres Recording #78932205762 Logs
✅ DeployK8sWithRabbitMQ Recording #78932204936 Logs
✅ DeployK8sWithRedis Recording #78932205374 Logs
✅ DeployK8sWithSqlServer Recording #78932205238 Logs
✅ DeployK8sWithValkey Recording #78932205565 Logs
✅ DeployTypeScriptAppToKubernetes Recording #78932205669 Logs
✅ DescribeCommandResolvesReplicaNames Recording #78932205306 Logs
✅ DescribeCommandShowsRunningResources Recording #78932205306 Logs
✅ DetachFormatJsonProducesValidJson Recording #78932204998 Logs
✅ DetachFormatJsonProducesValidJsonWhenRestartingExistingInstance Recording #78932204998 Logs
✅ DoPublishAndDeployListStepsWork Recording #78932205217 Logs
✅ DocsCommand_RendersInteractiveMarkdownFromLocalSource Recording #78932204942 Logs
✅ DoctorCommand_DetectsDeprecatedAgentConfig Recording #78932205581 Logs
✅ DoctorCommand_TypeScriptAppHostReportsMissingConfiguredToolchain Recording #78932205611 Logs
✅ DoctorCommand_WithSslCertDir_ShowsTrusted Recording #78932205611 Logs
✅ DoctorCommand_WithoutSslCertDir_ShowsPartiallyTrusted Recording #78932205611 Logs
✅ GatewayWithoutExternalEndpoint_FailsPublishWithGuidance Recording #78932205224 Logs
✅ GeneratedAspireDevScript_StartsWatchMode_WithConfiguredToolchain Recording #78932204992 Logs
✅ GlobalMigration_HandlesCommentsAndTrailingCommas Recording #78932205483 Logs
✅ GlobalMigration_HandlesMalformedLegacyJson Recording #78932205483 Logs
✅ GlobalMigration_PreservesAllValueTypes Recording #78932205483 Logs
✅ GlobalMigration_SkipsWhenNewConfigExists Recording #78932205483 Logs
✅ GlobalSettings_MigratedFromLegacyFormat Recording #78932205483 Logs
✅ IngressWithoutExternalEndpoint_FailsPublishWithGuidance Recording #78932205224 Logs
✅ InitTypeScriptAppHost_AugmentsExistingViteRepoInWorkspaceSubdirectory Recording #78932204992 Logs
✅ InteractiveCSharpInitCreatesExpectedFiles Recording #78932205618 Logs
✅ InvalidAppHostPathWithComments_IsHealedOnRun Recording #78932205761 Logs
✅ JavaScriptHostingApisRunFromTypeScriptAppHost Recording #78932204697 Logs
✅ LatestCliCanStartStableChannelAppHost Recording #78932205044 Logs
✅ LatestCliCanStartStableChannelTypeScriptAppHost Recording #78932205044 Logs
✅ LegacySettingsMigration_AdjustsRelativeAppHostPath Recording #78932205601 Logs
✅ LogsCommandShowsResourceLogs Recording #78932205520 Logs
✅ OtelLogsReturnsStructuredLogsFromStarterApp Recording #78932205524 Logs
✅ OtelLogsReturnsStructuredLogsFromStarterAppIsolated Recording #78932205524 Logs
✅ PsCommandListsRunningAppHost Recording #78932205602 Logs
✅ PsFormatJsonOutputsOnlyJsonToStdout Recording #78932205602 Logs
✅ PublishJavaScriptPatternsGeneratesExpectedDockerComposeArtifacts Recording #78932205538 Logs
✅ PublishWithConfigureEnvFileUpdatesEnvOutput Recording #78932205538 Logs
✅ PublishWithDockerComposeServiceCallbackSucceeds Recording #78932205538 Logs
✅ PublishWithoutOutputPathUsesAppHostDirectoryDefault Recording #78932205538 Logs
✅ ResourceCommand_FailedExecution_DisplaysAppHostLogPathAndLogContainsEntries Recording #78932205511 Logs
✅ ResourceCommand_SetAndDeleteParameterUpdatesDescribeOutput Recording #78932205511 Logs
✅ RestoreGeneratesSdkFiles Recording #78932205376 Logs
✅ RestoreGeneratesSdkFiles_WithConfiguredToolchain Recording #78932205743 Logs
✅ RestoreRefreshesGeneratedSdkAfterAddingIntegration Recording #78932205743 Logs
✅ RestoreSupportsConfigOnlyHelperPackageAndCrossPackageTypes Recording #78932205505 Logs
✅ RunFromParentDirectory_UsesExistingConfigNearAppHost Recording #78932204847 Logs
✅ RunReportsSyntaxErrorsForDotNetAppHost Recording #78932205654 Logs
✅ RunReportsSyntaxErrorsForTypeScriptAppHost Recording #78932205654 Logs
✅ SecretCrudOnDotNetAppHost Recording #78932205689 Logs
✅ SecretCrudOnTypeScriptAppHost Recording #78932205589 Logs
✅ StagingChannel_ConfigureAndVerifySettings_ThenSwitchChannels Recording #78932205258 Logs
✅ StartAndWaitForTypeScriptSqlServerAppHostWithNativeAssets Recording #78932205443 Logs
✅ StartReportsSyntaxErrorsForDotNetAppHost Recording #78932205654 Logs
✅ StartReportsSyntaxErrorsForTypeScriptAppHost Recording #78932205654 Logs
✅ StopAllAppHostsFromAppHostDirectory Recording #78932204869 Logs
✅ StopJavaPolyglotAppHostUsingApphostDirectory Recording #78932205595 Logs
✅ StopNonInteractiveSingleAppHost Recording #78932204869 Logs
✅ StopTypeScriptPolyglotAppHostUsingApphostDirectory Recording #78932205245 Logs
✅ StopWithNoRunningAppHostExitsSuccessfully Recording #78932205234 Logs
✅ TypeScriptAppHostRunDoesNotDeadlockWhenLazyOptionsInvokeAsyncCallback Recording #78932205166 Logs
✅ UnAwaitedChainsCompileWithAutoResolvePromises Recording #78932205743 Logs
❔ UpdateProjectChannelToStable_CSharpEmptyAppHost_PreservesAspireConfigChannel Recording #78932204753 Logs
✅ UpdateProjectChannelToStable_CSharpSingleFileInit_PreservesAspireConfigChannel Recording #78932204753 Logs
✅ UpdateProjectChannelToStable_TypeScriptSingleFileInit_PreservesAspireConfigChannel Recording #78932204753 Logs
✅ UpdateProjectChannelToStable_TypeScript_PreviewsStablePackagesAndPreservesChannel Recording #78932204753 Logs

📹 Recordings uploaded automatically from CI run #26776691966

@mitchdenny

mitchdenny commented Jun 2, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jun 2, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #17833.

@dependabot dependabot Bot closed this Jun 2, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/extension/npm_and_yarn-169ab14268 branch June 2, 2026 08:41
@microsoft-github-policy-service microsoft-github-policy-service Bot added this to the 13.5 milestone Jun 2, 2026
@github-actions github-actions Bot locked and limited conversation to collaborators Jul 2, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

Copilot code review Copilot Copilot left review comments
@adamint adamint Awaiting requested review from adamint adamint is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

13.5

Development

Successfully merging this pull request may close these issues.

2 participants

@mitchdenny