fix(deps): update dependency @testing-library/user-event (14.6.6 → 14.6.7) - #911

Merged
joryirving merged 2 commits into
mainfrom
renovate/testing-library-monorepo
Sep 2, 2026
Merged

fix(deps): update dependency @testing-library/user-event (14.6.6 → 14.6.7)#911
joryirving merged 2 commits into
mainfrom
renovate/testing-library-monorepo

Conversation

@its-miso

@its-misoits-misoBot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

PackageChangeAgeAdoptionPassingConfidence
@testing-library/user-event14.6.6 → 14.6.7ageadoptionpassingconfidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

testing-library/user-event (@​testing-library/user-event)

v14.6.7

Compare Source

Bug Fixes

Configuration

📅 Schedule: (in timezone America/Edmonton)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@its-miso
its-misoBot requested a review from joryirving as a code ownerSeptember 2, 2026 02:41
@joryirving
joryirving merged commit 0145810 into mainSep 2, 2026
12 checks passed
@joryirving
joryirving deleted the renovate/testing-library-monorepo branch September 2, 2026 02:47
its-saffron[bot]
its-saffronBot approved these changes Sep 2, 2026
View reviewed changes

@its-saffronits-saffronBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Automated Review

Full PR review.

Analysis engine: MiniMax-M3@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)

Recommendation

Approve. This is a lockfile-only patch bump of @testing-library/user-event from 14.6.6 to 14.6.7, a patch release with no public API removals. All required CI gates passed on the PR commit, the underlying changes are scoped to DataTransfer format normalization and iframe focus handling, and CI coverage validates the test suite against the bumped package.

Change-by-change findings

  • package-lock.json (only file modified): Three lines changed — version string (14.6.6 → 14.6.7), resolved tarball URL, and the integrity hash. No other transitive package was disturbed, and package.json was not touched, so the direct dependency declaration is unaffected. The engines constraint and dev-only flag remain unchanged.
  • @testing-library/user-event14.6.6 → 14.6.7 upstream: Two commits in the patch range. (1) fix: normalize DataTransfer format aliases — adds spec-compliant ASCII-lowercase normalization and text/url shorthand expansion in the DataTransfer stub's setData, getData, clearData, and add paths. (2) feat: Add iframe support for user.keyboard typing — getActiveElement now recurses into a focused <iframe>'s contentDocument so keyboard input is dispatched to the iframe's focused element rather than the host document. Both are additive bug-fix/feature work inside the package; neither changes exported function signatures or removes anything from the public surface.

Sources

  • Upstream compare between the two versions on testing-library/user-event, summarizing both fixes and their affected files (src/utils/dataTransfer/DataTransfer.ts, src/utils/focus/getActiveElement.ts).
  • v14.6.7 release page on testing-library/user-event for the patch's canonical summary.
  • Repository history showing prior identical bumps (14.6.5 → 14.6.6, the previous fix(deps) PR) were handled the same way and merged cleanly.

Required Checks

  • Check for breaking API changes in updated dependencies. Verified. The 14.6.6 → 14.6.7 diff (two commits) modifies only internal helpers in src/utils/dataTransfer/DataTransfer.ts (adds toAsciiLowercase/normalizeFormat and threads the normalized value through existing setData/getData/clearData/add paths) and adds an iframe-focus branch to getActiveElement. No public exports are added, renamed, or removed; no signatures change. Behavior shifts are confined to the package's DataTransfer stub (format alias normalization, now spec-conformant) and keyboard focus traversal into focused <iframe> content — neither alters the API surface Dispatch consumes. Risk of breakage for Dispatch's existing tests is low and would manifest as test changes, not runtime failures, because user-event is a dev-only test utility (no production code paths). This is not a HOST-PLATFORM-coupled bump: the changed manifest pins no host/peer platform version, so the host-platform compatibility-matrix step does not apply.
  • Run full test suite after upgrade. Verified by CI. The PR's head commit (a8954a130b0f2d974f3c86321b16baf3bbea0013) has terminal-status CI with all checks green, including Tests, Coverage, Lint, Typecheck, Build, npm audit, smoke, both Docker Build jobs, Database migrations, and Database integration. The CI runs against the bumped package-lock, so the suite is exercised post-upgrade, not against the old pin. No post-merge run is required to satisfy this check.

Tool Harness Findings

The harness issued no tool calls, so no extra signals beyond the corpus. CI results above are authoritative evidence that the suite passed against the bumped lockfile.

Standards Compliance

AGENTS.md does not define conventions specific to dependency bump PRs beyond the general code standards (no secrets in commits, lint/typecheck must pass CI). This PR touches only package-lock.json and the contributing .github/workflows/ci.yaml and image workflow remain unaffected. Lint, typecheck, tests, and the security advisory gate (npm audit) all passed in CI, which is the practical enforcement of those standards for a dep bump. No standards violation observed.

@its-misoits-misoBot mentioned this pull request Sep 2, 2026
Merged
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@its-saffronits-saffron[bot]its-saffron[bot] approved these changes
@joryirvingjoryirvingAwaiting requested review from joryirvingjoryirving is a code owner

Assignees

No one assigned

Labels

type/patch

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@joryirving
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
fix(deps): update dependency @testing-library/user-event (14.6.6 → 14.6.7) - #911
Merged
joryirving merged 2 commits into
mainfrom 
renovate/testing-library-monorepo
Sep 2, 2026
Merged
fix(deps): update dependency @testing-library/user-event (14.6.6 → 14.6.7)#911
joryirving merged 2 commits into
mainfrom 
renovate/testing-library-monorepo
Conversation
@its-miso
@its-misoits-misoBot
commented
Sep 2, 2026

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageChangeAgeAdoptionPassingConfidence
@testing-library/user-event14.6.6 → 14.6.7ageadoptionpassingconfidence
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
testing-library/user-event (@​testing-library/user-event)
v14.6.7
Compare Source
Bug Fixes
Configuration
📅 Schedule: (in timezone America/Edmonton)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate CLI.
@its-miso
its-misoBot
requested a review
from joryirving
as a code ownerSeptember 2, 2026 02:41
@joryirving
joryirving
merged commit 0145810
into
mainSep 2, 2026

12 checks passed

@joryirving
joryirving
deleted the

renovate/testing-library-monorepo

branch
September 2, 2026 02:47
its-saffron[bot]
its-saffronBot
approved these changes
Sep 2, 2026
View reviewed changes
@its-saffronits-saffronBot
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Automated Review
Full PR review.
Analysis engine: MiniMax-M3@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)
Recommendation
Approve. This is a lockfile-only patch bump of @testing-library/user-event from 14.6.6 to 14.6.7, a patch release with no public API removals. All required CI gates passed on the PR commit, the underlying changes are scoped to DataTransfer format normalization and iframe focus handling, and CI coverage validates the test suite against the bumped package.
Change-by-change findings
  • package-lock.json (only file modified): Three lines changed — version string (14.6.6 → 14.6.7), resolved tarball URL, and the integrity hash. No other transitive package was disturbed, and package.json was not touched, so the direct dependency declaration is unaffected. The engines constraint and dev-only flag remain unchanged.
  • @testing-library/user-event14.6.6 → 14.6.7 upstream: Two commits in the patch range. (1) fix: normalize DataTransfer format aliases — adds spec-compliant ASCII-lowercase normalization and text/url shorthand expansion in the DataTransfer stub's setData, getData, clearData, and add paths. (2) feat: Add iframe support for user.keyboard typing — getActiveElement now recurses into a focused <iframe>'s contentDocument so keyboard input is dispatched to the iframe's focused element rather than the host document. Both are additive bug-fix/feature work inside the package; neither changes exported function signatures or removes anything from the public surface.
Sources
  • Upstream compare between the two versions on testing-library/user-event, summarizing both fixes and their affected files (src/utils/dataTransfer/DataTransfer.ts, src/utils/focus/getActiveElement.ts).
  • v14.6.7 release page on testing-library/user-event for the patch's canonical summary.
  • Repository history showing prior identical bumps (14.6.5 → 14.6.6, the previous fix(deps) PR) were handled the same way and merged cleanly.
Required Checks
  • Check for breaking API changes in updated dependencies. Verified. The 14.6.6 → 14.6.7 diff (two commits) modifies only internal helpers in src/utils/dataTransfer/DataTransfer.ts (adds toAsciiLowercase/normalizeFormat and threads the normalized value through existing setData/getData/clearData/add paths) and adds an iframe-focus branch to getActiveElement. No public exports are added, renamed, or removed; no signatures change. Behavior shifts are confined to the package's DataTransfer stub (format alias normalization, now spec-conformant) and keyboard focus traversal into focused <iframe> content — neither alters the API surface Dispatch consumes. Risk of breakage for Dispatch's existing tests is low and would manifest as test changes, not runtime failures, because user-event is a dev-only test utility (no production code paths). This is not a HOST-PLATFORM-coupled bump: the changed manifest pins no host/peer platform version, so the host-platform compatibility-matrix step does not apply.
  • Run full test suite after upgrade. Verified by CI. The PR's head commit (a8954a130b0f2d974f3c86321b16baf3bbea0013) has terminal-status CI with all checks green, including Tests, Coverage, Lint, Typecheck, Build, npm audit, smoke, both Docker Build jobs, Database migrations, and Database integration. The CI runs against the bumped package-lock, so the suite is exercised post-upgrade, not against the old pin. No post-merge run is required to satisfy this check.
Tool Harness Findings
The harness issued no tool calls, so no extra signals beyond the corpus. CI results above are authoritative evidence that the suite passed against the bumped lockfile.
Standards Compliance
AGENTS.md does not define conventions specific to dependency bump PRs beyond the general code standards (no secrets in commits, lint/typecheck must pass CI). This PR touches only package-lock.json and the contributing .github/workflows/ci.yaml and image workflow remain unaffected. Lint, typecheck, tests, and the security advisory gate (npm audit) all passed in CI, which is the practical enforcement of those standards for a dep bump. No standards violation observed.
@its-misoits-misoBot
mentioned this pull request
Sep 2, 2026
 Merged

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@its-saffronits-saffron[bot]its-saffron[bot] approved these changes
@joryirvingjoryirvingAwaiting requested review from joryirvingjoryirving is a code owner

Assignees


No one assigned


Labels

type/patch

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@joryirving

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
fix(deps): update dependency @testing-library/user-event (14.6.6 → 14.6.7) - #911
Merged
joryirving merged 2 commits into
mainfrom 
renovate/testing-library-monorepo
Sep 2, 2026
Merged
fix(deps): update dependency @testing-library/user-event (14.6.6 → 14.6.7)#911
joryirving merged 2 commits into
mainfrom 
renovate/testing-library-monorepo
Conversation
@its-miso
@its-misoits-misoBot
commented
Sep 2, 2026

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageChangeAgeAdoptionPassingConfidence
@testing-library/user-event14.6.6 → 14.6.7ageadoptionpassingconfidence
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
testing-library/user-event (@​testing-library/user-event)
v14.6.7
Compare Source
Bug Fixes
Configuration
📅 Schedule: (in timezone America/Edmonton)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate CLI.
@its-miso
its-misoBot
requested a review
from joryirving
as a code ownerSeptember 2, 2026 02:41
@joryirving
joryirving
merged commit 0145810
into
mainSep 2, 2026

12 checks passed

@joryirving
joryirving
deleted the

renovate/testing-library-monorepo

branch
September 2, 2026 02:47
its-saffron[bot]
its-saffronBot
approved these changes
Sep 2, 2026
View reviewed changes
@its-saffronits-saffronBot
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Automated Review
Full PR review.
Analysis engine: MiniMax-M3@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)
Recommendation
Approve. This is a lockfile-only patch bump of @testing-library/user-event from 14.6.6 to 14.6.7, a patch release with no public API removals. All required CI gates passed on the PR commit, the underlying changes are scoped to DataTransfer format normalization and iframe focus handling, and CI coverage validates the test suite against the bumped package.
Change-by-change findings
  • package-lock.json (only file modified): Three lines changed — version string (14.6.6 → 14.6.7), resolved tarball URL, and the integrity hash. No other transitive package was disturbed, and package.json was not touched, so the direct dependency declaration is unaffected. The engines constraint and dev-only flag remain unchanged.
  • @testing-library/user-event14.6.6 → 14.6.7 upstream: Two commits in the patch range. (1) fix: normalize DataTransfer format aliases — adds spec-compliant ASCII-lowercase normalization and text/url shorthand expansion in the DataTransfer stub's setData, getData, clearData, and add paths. (2) feat: Add iframe support for user.keyboard typing — getActiveElement now recurses into a focused <iframe>'s contentDocument so keyboard input is dispatched to the iframe's focused element rather than the host document. Both are additive bug-fix/feature work inside the package; neither changes exported function signatures or removes anything from the public surface.
Sources
  • Upstream compare between the two versions on testing-library/user-event, summarizing both fixes and their affected files (src/utils/dataTransfer/DataTransfer.ts, src/utils/focus/getActiveElement.ts).
  • v14.6.7 release page on testing-library/user-event for the patch's canonical summary.
  • Repository history showing prior identical bumps (14.6.5 → 14.6.6, the previous fix(deps) PR) were handled the same way and merged cleanly.
Required Checks
  • Check for breaking API changes in updated dependencies. Verified. The 14.6.6 → 14.6.7 diff (two commits) modifies only internal helpers in src/utils/dataTransfer/DataTransfer.ts (adds toAsciiLowercase/normalizeFormat and threads the normalized value through existing setData/getData/clearData/add paths) and adds an iframe-focus branch to getActiveElement. No public exports are added, renamed, or removed; no signatures change. Behavior shifts are confined to the package's DataTransfer stub (format alias normalization, now spec-conformant) and keyboard focus traversal into focused <iframe> content — neither alters the API surface Dispatch consumes. Risk of breakage for Dispatch's existing tests is low and would manifest as test changes, not runtime failures, because user-event is a dev-only test utility (no production code paths). This is not a HOST-PLATFORM-coupled bump: the changed manifest pins no host/peer platform version, so the host-platform compatibility-matrix step does not apply.
  • Run full test suite after upgrade. Verified by CI. The PR's head commit (a8954a130b0f2d974f3c86321b16baf3bbea0013) has terminal-status CI with all checks green, including Tests, Coverage, Lint, Typecheck, Build, npm audit, smoke, both Docker Build jobs, Database migrations, and Database integration. The CI runs against the bumped package-lock, so the suite is exercised post-upgrade, not against the old pin. No post-merge run is required to satisfy this check.
Tool Harness Findings
The harness issued no tool calls, so no extra signals beyond the corpus. CI results above are authoritative evidence that the suite passed against the bumped lockfile.
Standards Compliance
AGENTS.md does not define conventions specific to dependency bump PRs beyond the general code standards (no secrets in commits, lint/typecheck must pass CI). This PR touches only package-lock.json and the contributing .github/workflows/ci.yaml and image workflow remain unaffected. Lint, typecheck, tests, and the security advisory gate (npm audit) all passed in CI, which is the practical enforcement of those standards for a dep bump. No standards violation observed.
@its-misoits-misoBot
mentioned this pull request
Sep 2, 2026
 Merged

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@its-saffronits-saffron[bot]its-saffron[bot] approved these changes
@joryirvingjoryirvingAwaiting requested review from joryirvingjoryirving is a code owner

Assignees


No one assigned


Labels

type/patch

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@joryirving

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
fix(deps): update dependency @testing-library/user-event (14.6.6 → 14.6.7) - #911
Merged
joryirving merged 2 commits into
mainfrom 
renovate/testing-library-monorepo
Sep 2, 2026
Merged
fix(deps): update dependency @testing-library/user-event (14.6.6 → 14.6.7)#911
joryirving merged 2 commits into
mainfrom 
renovate/testing-library-monorepo
Conversation
@its-miso
@its-misoits-misoBot
commented
Sep 2, 2026

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageChangeAgeAdoptionPassingConfidence
@testing-library/user-event14.6.6 → 14.6.7ageadoptionpassingconfidence
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
testing-library/user-event (@​testing-library/user-event)
v14.6.7
Compare Source
Bug Fixes
Configuration
📅 Schedule: (in timezone America/Edmonton)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate CLI.
@its-miso
its-misoBot
requested a review
from joryirving
as a code ownerSeptember 2, 2026 02:41
@joryirving
joryirving
merged commit 0145810
into
mainSep 2, 2026

12 checks passed

@joryirving
joryirving
deleted the

renovate/testing-library-monorepo

branch
September 2, 2026 02:47
its-saffron[bot]
its-saffronBot
approved these changes
Sep 2, 2026
View reviewed changes
@its-saffronits-saffronBot
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Automated Review
Full PR review.
Analysis engine: MiniMax-M3@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)
Recommendation
Approve. This is a lockfile-only patch bump of @testing-library/user-event from 14.6.6 to 14.6.7, a patch release with no public API removals. All required CI gates passed on the PR commit, the underlying changes are scoped to DataTransfer format normalization and iframe focus handling, and CI coverage validates the test suite against the bumped package.
Change-by-change findings
  • package-lock.json (only file modified): Three lines changed — version string (14.6.6 → 14.6.7), resolved tarball URL, and the integrity hash. No other transitive package was disturbed, and package.json was not touched, so the direct dependency declaration is unaffected. The engines constraint and dev-only flag remain unchanged.
  • @testing-library/user-event14.6.6 → 14.6.7 upstream: Two commits in the patch range. (1) fix: normalize DataTransfer format aliases — adds spec-compliant ASCII-lowercase normalization and text/url shorthand expansion in the DataTransfer stub's setData, getData, clearData, and add paths. (2) feat: Add iframe support for user.keyboard typing — getActiveElement now recurses into a focused <iframe>'s contentDocument so keyboard input is dispatched to the iframe's focused element rather than the host document. Both are additive bug-fix/feature work inside the package; neither changes exported function signatures or removes anything from the public surface.
Sources
  • Upstream compare between the two versions on testing-library/user-event, summarizing both fixes and their affected files (src/utils/dataTransfer/DataTransfer.ts, src/utils/focus/getActiveElement.ts).
  • v14.6.7 release page on testing-library/user-event for the patch's canonical summary.
  • Repository history showing prior identical bumps (14.6.5 → 14.6.6, the previous fix(deps) PR) were handled the same way and merged cleanly.
Required Checks
  • Check for breaking API changes in updated dependencies. Verified. The 14.6.6 → 14.6.7 diff (two commits) modifies only internal helpers in src/utils/dataTransfer/DataTransfer.ts (adds toAsciiLowercase/normalizeFormat and threads the normalized value through existing setData/getData/clearData/add paths) and adds an iframe-focus branch to getActiveElement. No public exports are added, renamed, or removed; no signatures change. Behavior shifts are confined to the package's DataTransfer stub (format alias normalization, now spec-conformant) and keyboard focus traversal into focused <iframe> content — neither alters the API surface Dispatch consumes. Risk of breakage for Dispatch's existing tests is low and would manifest as test changes, not runtime failures, because user-event is a dev-only test utility (no production code paths). This is not a HOST-PLATFORM-coupled bump: the changed manifest pins no host/peer platform version, so the host-platform compatibility-matrix step does not apply.
  • Run full test suite after upgrade. Verified by CI. The PR's head commit (a8954a130b0f2d974f3c86321b16baf3bbea0013) has terminal-status CI with all checks green, including Tests, Coverage, Lint, Typecheck, Build, npm audit, smoke, both Docker Build jobs, Database migrations, and Database integration. The CI runs against the bumped package-lock, so the suite is exercised post-upgrade, not against the old pin. No post-merge run is required to satisfy this check.
Tool Harness Findings
The harness issued no tool calls, so no extra signals beyond the corpus. CI results above are authoritative evidence that the suite passed against the bumped lockfile.
Standards Compliance
AGENTS.md does not define conventions specific to dependency bump PRs beyond the general code standards (no secrets in commits, lint/typecheck must pass CI). This PR touches only package-lock.json and the contributing .github/workflows/ci.yaml and image workflow remain unaffected. Lint, typecheck, tests, and the security advisory gate (npm audit) all passed in CI, which is the practical enforcement of those standards for a dep bump. No standards violation observed.
@its-misoits-misoBot
mentioned this pull request
Sep 2, 2026
 Merged

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@its-saffronits-saffron[bot]its-saffron[bot] approved these changes
@joryirvingjoryirvingAwaiting requested review from joryirvingjoryirving is a code owner

Assignees


No one assigned


Labels

type/patch

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@joryirving

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
fix(deps): update dependency @testing-library/user-event (14.6.6 → 14.6.7) - #911
Merged
joryirving merged 2 commits into
mainfrom 
renovate/testing-library-monorepo
Sep 2, 2026
Merged
fix(deps): update dependency @testing-library/user-event (14.6.6 → 14.6.7)#911
joryirving merged 2 commits into
mainfrom 
renovate/testing-library-monorepo
Conversation
@its-miso
@its-misoits-misoBot
commented
Sep 2, 2026

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageChangeAgeAdoptionPassingConfidence
@testing-library/user-event14.6.6 → 14.6.7ageadoptionpassingconfidence
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
testing-library/user-event (@​testing-library/user-event)
v14.6.7
Compare Source
Bug Fixes
Configuration
📅 Schedule: (in timezone America/Edmonton)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate CLI.
@its-miso
its-misoBot
requested a review
from joryirving
as a code ownerSeptember 2, 2026 02:41
@joryirving
joryirving
merged commit 0145810
into
mainSep 2, 2026

12 checks passed

@joryirving
joryirving
deleted the

renovate/testing-library-monorepo

branch
September 2, 2026 02:47
its-saffron[bot]
its-saffronBot
approved these changes
Sep 2, 2026
View reviewed changes
@its-saffronits-saffronBot
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Automated Review
Full PR review.
Analysis engine: MiniMax-M3@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)
Recommendation
Approve. This is a lockfile-only patch bump of @testing-library/user-event from 14.6.6 to 14.6.7, a patch release with no public API removals. All required CI gates passed on the PR commit, the underlying changes are scoped to DataTransfer format normalization and iframe focus handling, and CI coverage validates the test suite against the bumped package.
Change-by-change findings
  • package-lock.json (only file modified): Three lines changed — version string (14.6.6 → 14.6.7), resolved tarball URL, and the integrity hash. No other transitive package was disturbed, and package.json was not touched, so the direct dependency declaration is unaffected. The engines constraint and dev-only flag remain unchanged.
  • @testing-library/user-event14.6.6 → 14.6.7 upstream: Two commits in the patch range. (1) fix: normalize DataTransfer format aliases — adds spec-compliant ASCII-lowercase normalization and text/url shorthand expansion in the DataTransfer stub's setData, getData, clearData, and add paths. (2) feat: Add iframe support for user.keyboard typing — getActiveElement now recurses into a focused <iframe>'s contentDocument so keyboard input is dispatched to the iframe's focused element rather than the host document. Both are additive bug-fix/feature work inside the package; neither changes exported function signatures or removes anything from the public surface.
Sources
  • Upstream compare between the two versions on testing-library/user-event, summarizing both fixes and their affected files (src/utils/dataTransfer/DataTransfer.ts, src/utils/focus/getActiveElement.ts).
  • v14.6.7 release page on testing-library/user-event for the patch's canonical summary.
  • Repository history showing prior identical bumps (14.6.5 → 14.6.6, the previous fix(deps) PR) were handled the same way and merged cleanly.
Required Checks
  • Check for breaking API changes in updated dependencies. Verified. The 14.6.6 → 14.6.7 diff (two commits) modifies only internal helpers in src/utils/dataTransfer/DataTransfer.ts (adds toAsciiLowercase/normalizeFormat and threads the normalized value through existing setData/getData/clearData/add paths) and adds an iframe-focus branch to getActiveElement. No public exports are added, renamed, or removed; no signatures change. Behavior shifts are confined to the package's DataTransfer stub (format alias normalization, now spec-conformant) and keyboard focus traversal into focused <iframe> content — neither alters the API surface Dispatch consumes. Risk of breakage for Dispatch's existing tests is low and would manifest as test changes, not runtime failures, because user-event is a dev-only test utility (no production code paths). This is not a HOST-PLATFORM-coupled bump: the changed manifest pins no host/peer platform version, so the host-platform compatibility-matrix step does not apply.
  • Run full test suite after upgrade. Verified by CI. The PR's head commit (a8954a130b0f2d974f3c86321b16baf3bbea0013) has terminal-status CI with all checks green, including Tests, Coverage, Lint, Typecheck, Build, npm audit, smoke, both Docker Build jobs, Database migrations, and Database integration. The CI runs against the bumped package-lock, so the suite is exercised post-upgrade, not against the old pin. No post-merge run is required to satisfy this check.
Tool Harness Findings
The harness issued no tool calls, so no extra signals beyond the corpus. CI results above are authoritative evidence that the suite passed against the bumped lockfile.
Standards Compliance
AGENTS.md does not define conventions specific to dependency bump PRs beyond the general code standards (no secrets in commits, lint/typecheck must pass CI). This PR touches only package-lock.json and the contributing .github/workflows/ci.yaml and image workflow remain unaffected. Lint, typecheck, tests, and the security advisory gate (npm audit) all passed in CI, which is the practical enforcement of those standards for a dep bump. No standards violation observed.
@its-misoits-misoBot
mentioned this pull request
Sep 2, 2026
 Merged

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@its-saffronits-saffron[bot]its-saffron[bot] approved these changes
@joryirvingjoryirvingAwaiting requested review from joryirvingjoryirving is a code owner

Assignees


No one assigned


Labels

type/patch

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@joryirving

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
fix(deps): update dependency @testing-library/user-event (14.6.6 → 14.6.7) - #911
Merged
joryirving merged 2 commits into
mainfrom 
renovate/testing-library-monorepo
Sep 2, 2026
Merged
fix(deps): update dependency @testing-library/user-event (14.6.6 → 14.6.7)#911
joryirving merged 2 commits into
mainfrom 
renovate/testing-library-monorepo
Conversation
@its-miso
@its-misoits-misoBot
commented
Sep 2, 2026

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageChangeAgeAdoptionPassingConfidence
@testing-library/user-event14.6.6 → 14.6.7ageadoptionpassingconfidence
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
testing-library/user-event (@​testing-library/user-event)
v14.6.7
Compare Source
Bug Fixes
Configuration
📅 Schedule: (in timezone America/Edmonton)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate CLI.
@its-miso
its-misoBot
requested a review
from joryirving
as a code ownerSeptember 2, 2026 02:41
@joryirving
joryirving
merged commit 0145810
into
mainSep 2, 2026

12 checks passed

@joryirving
joryirving
deleted the

renovate/testing-library-monorepo

branch
September 2, 2026 02:47
its-saffron[bot]
its-saffronBot
approved these changes
Sep 2, 2026
View reviewed changes
@its-saffronits-saffronBot
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Automated Review
Full PR review.
Analysis engine: MiniMax-M3@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)
Recommendation
Approve. This is a lockfile-only patch bump of @testing-library/user-event from 14.6.6 to 14.6.7, a patch release with no public API removals. All required CI gates passed on the PR commit, the underlying changes are scoped to DataTransfer format normalization and iframe focus handling, and CI coverage validates the test suite against the bumped package.
Change-by-change findings
  • package-lock.json (only file modified): Three lines changed — version string (14.6.6 → 14.6.7), resolved tarball URL, and the integrity hash. No other transitive package was disturbed, and package.json was not touched, so the direct dependency declaration is unaffected. The engines constraint and dev-only flag remain unchanged.
  • @testing-library/user-event14.6.6 → 14.6.7 upstream: Two commits in the patch range. (1) fix: normalize DataTransfer format aliases — adds spec-compliant ASCII-lowercase normalization and text/url shorthand expansion in the DataTransfer stub's setData, getData, clearData, and add paths. (2) feat: Add iframe support for user.keyboard typing — getActiveElement now recurses into a focused <iframe>'s contentDocument so keyboard input is dispatched to the iframe's focused element rather than the host document. Both are additive bug-fix/feature work inside the package; neither changes exported function signatures or removes anything from the public surface.
Sources
  • Upstream compare between the two versions on testing-library/user-event, summarizing both fixes and their affected files (src/utils/dataTransfer/DataTransfer.ts, src/utils/focus/getActiveElement.ts).
  • v14.6.7 release page on testing-library/user-event for the patch's canonical summary.
  • Repository history showing prior identical bumps (14.6.5 → 14.6.6, the previous fix(deps) PR) were handled the same way and merged cleanly.
Required Checks
  • Check for breaking API changes in updated dependencies. Verified. The 14.6.6 → 14.6.7 diff (two commits) modifies only internal helpers in src/utils/dataTransfer/DataTransfer.ts (adds toAsciiLowercase/normalizeFormat and threads the normalized value through existing setData/getData/clearData/add paths) and adds an iframe-focus branch to getActiveElement. No public exports are added, renamed, or removed; no signatures change. Behavior shifts are confined to the package's DataTransfer stub (format alias normalization, now spec-conformant) and keyboard focus traversal into focused <iframe> content — neither alters the API surface Dispatch consumes. Risk of breakage for Dispatch's existing tests is low and would manifest as test changes, not runtime failures, because user-event is a dev-only test utility (no production code paths). This is not a HOST-PLATFORM-coupled bump: the changed manifest pins no host/peer platform version, so the host-platform compatibility-matrix step does not apply.
  • Run full test suite after upgrade. Verified by CI. The PR's head commit (a8954a130b0f2d974f3c86321b16baf3bbea0013) has terminal-status CI with all checks green, including Tests, Coverage, Lint, Typecheck, Build, npm audit, smoke, both Docker Build jobs, Database migrations, and Database integration. The CI runs against the bumped package-lock, so the suite is exercised post-upgrade, not against the old pin. No post-merge run is required to satisfy this check.
Tool Harness Findings
The harness issued no tool calls, so no extra signals beyond the corpus. CI results above are authoritative evidence that the suite passed against the bumped lockfile.
Standards Compliance
AGENTS.md does not define conventions specific to dependency bump PRs beyond the general code standards (no secrets in commits, lint/typecheck must pass CI). This PR touches only package-lock.json and the contributing .github/workflows/ci.yaml and image workflow remain unaffected. Lint, typecheck, tests, and the security advisory gate (npm audit) all passed in CI, which is the practical enforcement of those standards for a dep bump. No standards violation observed.
@its-misoits-misoBot
mentioned this pull request
Sep 2, 2026
 Merged

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@its-saffronits-saffron[bot]its-saffron[bot] approved these changes
@joryirvingjoryirvingAwaiting requested review from joryirvingjoryirving is a code owner

Assignees


No one assigned


Labels

type/patch

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@joryirving

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
fix(deps): update dependency @testing-library/user-event (14.6.6 → 14.6.7) - #911
Merged
joryirving merged 2 commits into
mainfrom 
renovate/testing-library-monorepo
Sep 2, 2026
Merged
fix(deps): update dependency @testing-library/user-event (14.6.6 → 14.6.7)#911
joryirving merged 2 commits into
mainfrom 
renovate/testing-library-monorepo
Conversation
@its-miso
@its-misoits-misoBot
commented
Sep 2, 2026

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageChangeAgeAdoptionPassingConfidence
@testing-library/user-event14.6.6 → 14.6.7ageadoptionpassingconfidence
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
testing-library/user-event (@​testing-library/user-event)
v14.6.7
Compare Source
Bug Fixes
Configuration
📅 Schedule: (in timezone America/Edmonton)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate CLI.
@its-miso
its-misoBot
requested a review
from joryirving
as a code ownerSeptember 2, 2026 02:41
@joryirving
joryirving
merged commit 0145810
into
mainSep 2, 2026

12 checks passed

@joryirving
joryirving
deleted the

renovate/testing-library-monorepo

branch
September 2, 2026 02:47
its-saffron[bot]
its-saffronBot
approved these changes
Sep 2, 2026
View reviewed changes
@its-saffronits-saffronBot
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Automated Review
Full PR review.
Analysis engine: MiniMax-M3@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)
Recommendation
Approve. This is a lockfile-only patch bump of @testing-library/user-event from 14.6.6 to 14.6.7, a patch release with no public API removals. All required CI gates passed on the PR commit, the underlying changes are scoped to DataTransfer format normalization and iframe focus handling, and CI coverage validates the test suite against the bumped package.
Change-by-change findings
  • package-lock.json (only file modified): Three lines changed — version string (14.6.6 → 14.6.7), resolved tarball URL, and the integrity hash. No other transitive package was disturbed, and package.json was not touched, so the direct dependency declaration is unaffected. The engines constraint and dev-only flag remain unchanged.
  • @testing-library/user-event14.6.6 → 14.6.7 upstream: Two commits in the patch range. (1) fix: normalize DataTransfer format aliases — adds spec-compliant ASCII-lowercase normalization and text/url shorthand expansion in the DataTransfer stub's setData, getData, clearData, and add paths. (2) feat: Add iframe support for user.keyboard typing — getActiveElement now recurses into a focused <iframe>'s contentDocument so keyboard input is dispatched to the iframe's focused element rather than the host document. Both are additive bug-fix/feature work inside the package; neither changes exported function signatures or removes anything from the public surface.
Sources
  • Upstream compare between the two versions on testing-library/user-event, summarizing both fixes and their affected files (src/utils/dataTransfer/DataTransfer.ts, src/utils/focus/getActiveElement.ts).
  • v14.6.7 release page on testing-library/user-event for the patch's canonical summary.
  • Repository history showing prior identical bumps (14.6.5 → 14.6.6, the previous fix(deps) PR) were handled the same way and merged cleanly.
Required Checks
  • Check for breaking API changes in updated dependencies. Verified. The 14.6.6 → 14.6.7 diff (two commits) modifies only internal helpers in src/utils/dataTransfer/DataTransfer.ts (adds toAsciiLowercase/normalizeFormat and threads the normalized value through existing setData/getData/clearData/add paths) and adds an iframe-focus branch to getActiveElement. No public exports are added, renamed, or removed; no signatures change. Behavior shifts are confined to the package's DataTransfer stub (format alias normalization, now spec-conformant) and keyboard focus traversal into focused <iframe> content — neither alters the API surface Dispatch consumes. Risk of breakage for Dispatch's existing tests is low and would manifest as test changes, not runtime failures, because user-event is a dev-only test utility (no production code paths). This is not a HOST-PLATFORM-coupled bump: the changed manifest pins no host/peer platform version, so the host-platform compatibility-matrix step does not apply.
  • Run full test suite after upgrade. Verified by CI. The PR's head commit (a8954a130b0f2d974f3c86321b16baf3bbea0013) has terminal-status CI with all checks green, including Tests, Coverage, Lint, Typecheck, Build, npm audit, smoke, both Docker Build jobs, Database migrations, and Database integration. The CI runs against the bumped package-lock, so the suite is exercised post-upgrade, not against the old pin. No post-merge run is required to satisfy this check.
Tool Harness Findings
The harness issued no tool calls, so no extra signals beyond the corpus. CI results above are authoritative evidence that the suite passed against the bumped lockfile.
Standards Compliance
AGENTS.md does not define conventions specific to dependency bump PRs beyond the general code standards (no secrets in commits, lint/typecheck must pass CI). This PR touches only package-lock.json and the contributing .github/workflows/ci.yaml and image workflow remain unaffected. Lint, typecheck, tests, and the security advisory gate (npm audit) all passed in CI, which is the practical enforcement of those standards for a dep bump. No standards violation observed.
@its-misoits-misoBot
mentioned this pull request
Sep 2, 2026
 Merged

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@its-saffronits-saffron[bot]its-saffron[bot] approved these changes
@joryirvingjoryirvingAwaiting requested review from joryirvingjoryirving is a code owner

Assignees


No one assigned


Labels

type/patch

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@joryirving

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
fix(deps): update dependency @testing-library/user-event (14.6.6 → 14.6.7) - #911
Merged
joryirving merged 2 commits into
mainfrom 
renovate/testing-library-monorepo
Sep 2, 2026
Merged
fix(deps): update dependency @testing-library/user-event (14.6.6 → 14.6.7)#911
joryirving merged 2 commits into
mainfrom 
renovate/testing-library-monorepo
Conversation
@its-miso
@its-misoits-misoBot
commented
Sep 2, 2026

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageChangeAgeAdoptionPassingConfidence
@testing-library/user-event14.6.6 → 14.6.7ageadoptionpassingconfidence
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
testing-library/user-event (@​testing-library/user-event)
v14.6.7
Compare Source
Bug Fixes
Configuration
📅 Schedule: (in timezone America/Edmonton)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate CLI.
@its-miso
its-misoBot
requested a review
from joryirving
as a code ownerSeptember 2, 2026 02:41
@joryirving
joryirving
merged commit 0145810
into
mainSep 2, 2026

12 checks passed

@joryirving
joryirving
deleted the

renovate/testing-library-monorepo

branch
September 2, 2026 02:47
its-saffron[bot]
its-saffronBot
approved these changes
Sep 2, 2026
View reviewed changes
@its-saffronits-saffronBot
left a comment


Copy link


Copy Markdown

Contributor
Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Automated Review
Full PR review.
Analysis engine: MiniMax-M3@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)
Recommendation
Approve. This is a lockfile-only patch bump of @testing-library/user-event from 14.6.6 to 14.6.7, a patch release with no public API removals. All required CI gates passed on the PR commit, the underlying changes are scoped to DataTransfer format normalization and iframe focus handling, and CI coverage validates the test suite against the bumped package.
Change-by-change findings
  • package-lock.json (only file modified): Three lines changed — version string (14.6.6 → 14.6.7), resolved tarball URL, and the integrity hash. No other transitive package was disturbed, and package.json was not touched, so the direct dependency declaration is unaffected. The engines constraint and dev-only flag remain unchanged.
  • @testing-library/user-event14.6.6 → 14.6.7 upstream: Two commits in the patch range. (1) fix: normalize DataTransfer format aliases — adds spec-compliant ASCII-lowercase normalization and text/url shorthand expansion in the DataTransfer stub's setData, getData, clearData, and add paths. (2) feat: Add iframe support for user.keyboard typing — getActiveElement now recurses into a focused <iframe>'s contentDocument so keyboard input is dispatched to the iframe's focused element rather than the host document. Both are additive bug-fix/feature work inside the package; neither changes exported function signatures or removes anything from the public surface.
Sources
  • Upstream compare between the two versions on testing-library/user-event, summarizing both fixes and their affected files (src/utils/dataTransfer/DataTransfer.ts, src/utils/focus/getActiveElement.ts).
  • v14.6.7 release page on testing-library/user-event for the patch's canonical summary.
  • Repository history showing prior identical bumps (14.6.5 → 14.6.6, the previous fix(deps) PR) were handled the same way and merged cleanly.
Required Checks
  • Check for breaking API changes in updated dependencies. Verified. The 14.6.6 → 14.6.7 diff (two commits) modifies only internal helpers in src/utils/dataTransfer/DataTransfer.ts (adds toAsciiLowercase/normalizeFormat and threads the normalized value through existing setData/getData/clearData/add paths) and adds an iframe-focus branch to getActiveElement. No public exports are added, renamed, or removed; no signatures change. Behavior shifts are confined to the package's DataTransfer stub (format alias normalization, now spec-conformant) and keyboard focus traversal into focused <iframe> content — neither alters the API surface Dispatch consumes. Risk of breakage for Dispatch's existing tests is low and would manifest as test changes, not runtime failures, because user-event is a dev-only test utility (no production code paths). This is not a HOST-PLATFORM-coupled bump: the changed manifest pins no host/peer platform version, so the host-platform compatibility-matrix step does not apply.
  • Run full test suite after upgrade. Verified by CI. The PR's head commit (a8954a130b0f2d974f3c86321b16baf3bbea0013) has terminal-status CI with all checks green, including Tests, Coverage, Lint, Typecheck, Build, npm audit, smoke, both Docker Build jobs, Database migrations, and Database integration. The CI runs against the bumped package-lock, so the suite is exercised post-upgrade, not against the old pin. No post-merge run is required to satisfy this check.
Tool Harness Findings
The harness issued no tool calls, so no extra signals beyond the corpus. CI results above are authoritative evidence that the suite passed against the bumped lockfile.
Standards Compliance
AGENTS.md does not define conventions specific to dependency bump PRs beyond the general code standards (no secrets in commits, lint/typecheck must pass CI). This PR touches only package-lock.json and the contributing .github/workflows/ci.yaml and image workflow remain unaffected. Lint, typecheck, tests, and the security advisory gate (npm audit) all passed in CI, which is the practical enforcement of those standards for a dep bump. No standards violation observed.
@its-misoits-misoBot
mentioned this pull request
Sep 2, 2026
 Merged

Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers

@its-saffronits-saffron[bot]its-saffron[bot] approved these changes
@joryirvingjoryirvingAwaiting requested review from joryirvingjoryirving is a code owner

Assignees


No one assigned


Labels

type/patch

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

1 participant

@joryirving