Skip to content

build(deps-dev): bump jsdom from 28.1.0 to 29.0.2 in /web/admin-dash - #32

Closed
dependabot[bot] wants to merge 8 commits into
mainfrom
dependabot/npm_and_yarn/web/admin-dash/jsdom-29.0.2
Closed

dependabot[bot] wants to merge 8 commits into
mainfrom
dependabot/npm_and_yarn/web/admin-dash/jsdom-29.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 22, 2026

Copy link
Copy Markdown
Contributor

Bumps jsdom from 28.1.0 to 29.0.2.

Release notes

Sourced from jsdom's releases.

v29.0.2

  • Significantly improved and sped up getComputedStyle(). Computed value rules are now applied across a broader set of properties, and include fixes related to inheritance, defaulting keywords, custom properties, and color-related values such as currentcolor and system colors. (@​asamuzaK)
  • Fixed CSS 'background' and 'border' shorthand parsing. (@​asamuzaK)

v29.0.1

  • Fixed CSS parsing of 'border', 'background', and their sub-shorthands containing keywords or var(). (@​asamuzaK)
  • Fixed getComputedStyle() to return a more functional CSSStyleDeclaration object, including indexed access support, which regressed in v29.0.0.

v29.0.0

Breaking changes:

  • Node.js v22.13.0+ is now the minimum supported v22 version (was v22.12.0+).

Other changes:

  • Overhauled the CSSOM implementation, replacing the @acemir/cssom and cssstyle dependencies with fresh internal implementations built on webidl2js wrappers and the css-tree parser. Serialization, parsing, and API behavior is improved in various ways, especially around edge cases.
  • Added CSSCounterStyleRule and CSSNamespaceRule to jsdom Windows.
  • Added cssMediaRule.matches and cssSupportsRule.matches getters.
  • Added proper media query parsing in MediaList, using css-tree instead of naive comma-splitting. Invalid queries become "not all" per spec.
  • Added cssKeyframeRule.keyText getter/setter validation.
  • Added cssStyleRule.selectorText setter validation: invalid selectors are now rejected.
  • Added styleSheet.ownerNode, styleSheet.href, and styleSheet.title.
  • Added bad port blocking per the fetch specification, preventing fetches to commonly-abused ports.
  • Improved Document initialization performance by lazily initializing the CSS selector engine, avoiding ~0.5 ms of overhead per Document. (@​thypon)
  • Fixed a memory leak when stylesheets were removed from the document.
  • Fixed CSSStyleDeclaration modifications to properly trigger custom element reactions.
  • Fixed nested @media rule parsing.
  • Fixed CSSStyleSheet's "disallow modification" flag not being checked in all mutation methods.
  • Fixed XMLHttpRequest's response getter returning parsed JSON during the LOADING state instead of null.
  • Fixed getComputedStyle() crashing in XHTML documents when stylesheets contained at-rules such as @page or @font-face.
  • Fixed a potential hang in synchronous XMLHttpRequest caused by a race condition with the worker thread's idle timeout.
Commits
  • 2a1e2cd 29.0.2
  • 4097d66 Resolve computed CSS values lazily in CSSStyleDeclaration
  • cf5523f Add more test cases for nested color-mix with currentColor
  • b33b616 Add test that getComputedStyle() works with !important
  • 6bf559c Add test for custom property inheritance in computed styles
  • 6817657 Fix border shorthand handling
  • 470f5c5 Consolidate color helpers
  • 3db53cb Fix background shorthand handlers
  • 678e840 Remove some longhand property files
  • d526a07 Add regression test for getComputedStyle() liveness
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for jsdom since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

cwest and others added 8 commits April 21, 2026 11:17
Synced from upstream sources fixing two bugs that blocked the OSS

one-shot deploy on a fresh GCP project.

1. infra/modules/iam/main.tf: agent_engine_sa local now references

   google_service_account.agent_engine.email so iam_member resources

   pick up an implicit dep on the SA's CREATE. Removes a

   'Service account ... does not exist' race during tf-apply-base.

2. scripts/deploy/deploy.py: _pin_all_requirements() rewrites every

   AE requirements.txt entry to pkg[extras]==<build-venv version>.

   The AE base image (assembly-service-py313:prod) ships pre-installed

   versions that satisfy our loose '>=' constraints, so pip skipped

   upgrades. Build/runtime version skew (e.g. a2a-sdk 0.3.26 vs 1.0.0)

   broke cloudpickle.loads -- agent stderr surfaced a misleading

   'KeyError: serialized' from protobuf.Message.__setstate__.

Verified: end-to-end deploy on race-condition-deploy-c-177590,

build 8baeb7c2, 14m41s, frontend serves <title>Race Condition</title>.
Synced from upstream sources (backend 1303b221 + code-infra 4d02823).

The OSS deploy was shipping AGENT_URLS='planner=https://...,simulator=...'

which Go's url.Parse rejected with 'first path segment in URL cannot

contain colon'. The gateway's catalog skipped every agent and frontend

spawns failed with DISCOVERY_FAILURE. Drop the 'name=' prefix from each

deploy-ae-* step so cloudbuild collect-ae-urls produces bare comma-

separated URLs (matches the dev/prod .env contract; the gateway parses

AGENT_URLS as URLs and discovers agent names from /a2a/v1/card).

Verified: race-condition-deploy-c-177590 gateway revision 2 logs show

all 5 AE agents discovered after manually patching the live AGENT_URLS

to bare-URL form.
Bumps [jsdom](https://github.com/jsdom/jsdom) from 28.1.0 to 29.0.2.
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v28.1.0...v29.0.2)

---
updated-dependencies:
- dependency-name: jsdom
  dependency-version: 29.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 22, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner April 22, 2026 03:18
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Apr 22, 2026
@cwest cwest closed this Apr 22, 2026
@dependabot @github

dependabot Bot commented on behalf of github Apr 22, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/web/admin-dash/jsdom-29.0.2 branch April 22, 2026 15:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant