chore(deps-dev): bump msw from 1.3.5 to 2.13.6#2970
Conversation
Bumps [msw](https://github.com/mswjs/msw) from 1.3.5 to 2.13.6. - [Release notes](https://github.com/mswjs/msw/releases) - [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md) - [Commits](mswjs/msw@v1.3.5...v2.13.6) --- updated-dependencies: - dependency-name: msw dependency-version: 2.13.6 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 2d4adec. Configure here.
| "jest-junit": "^15.0.0", | ||
| "mini-css-extract-plugin": "^2.6.0", | ||
| "msw": "^1.3.2", | ||
| "msw": "^2.13.6", |
There was a problem hiding this comment.
MSW v2 removes rest API used throughout codebase
High Severity
Bumping msw from v1 to v2 is a major version upgrade with breaking API changes, but no source code was updated. The codebase imports rest from msw and uses the v1 response resolver pattern (req, res, ctx) => res(ctx.json(...)) across multiple test files. In MSW v2, rest was removed and replaced with http, and response resolvers now return HttpResponse instances instead of using res(ctx.json(...)). All tests using msw will fail at import time or runtime.
Reviewed by Cursor Bugbot for commit 2d4adec. Configure here.
Bumps msw from 1.3.5 to 2.13.6.
Release notes
Sourced from msw's releases.
... (truncated)
Commits
a680221chore(release): v2.13.63da7048fix(WebSocketHandler): add publictest()method (#2727)d814fc8chore(release): v2.13.58d16801fix: reset generator state on.resetHandlers()/.restoreHandlers()(#2725)edeb058chore: replace missingServiceWorkerIncomingRequestwith `IncomingWorkerReq...20521b9chore(release): v2.13.4580256bfix: implement properServiceWorkerSourcesingleton pattern (#2715)9dedf52fix: useverbatimModuleSyntaxconsistently in exports (#2702)d0cbd2dfix: update dependencies (#2719)429e05cfix(sse): respectrequest.signalfor the underlying stream (#2718)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for msw since your current version.
Install script changes
This version modifies
postinstallscript that runs during installation. Review the package contents before updating.You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
Medium Risk
This is a major-version upgrade of
msw, which can introduce breaking changes in request-mocking behavior and APIs used by the test suite. Risk is mainly around CI/test stability rather than production runtime, sincemswis a dev dependency.Overview
Upgrades the dev dependency
mswfrom1.3.xto2.13.6inpackage.jsonand refreshespackage-lock.jsonaccordingly.The lockfile update replaces/removes a number of transitive dependencies and updates others (e.g.,
@mswjs/interceptors,headers-polyfill,graphql), reflectingmswv2’s newer dependency graph and Node engine expectations.Reviewed by Cursor Bugbot for commit 2d4adec. Bugbot is set up for automated code reviews on this repo. Configure here.