Skip to content

chore(deps-dev): bump mocha from 11.7.5 to 11.8.0 - #1094

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mocha-11.8.0
Open

chore(deps-dev): bump mocha from 11.7.5 to 11.8.0#1094
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mocha-11.8.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps mocha from 11.7.5 to 11.8.0.

Release notes

Sourced from mocha's releases.

v11.8.0

11.8.0 (2026-08-02)

🌟 Features

  • add --fail-hook-affected-tests option to report skipped tests as failed (#5519) (#6052) (7830309)

🧹 Chores

v11.7.7

11.7.7 (2026-06-13)

🩹 Fixes

v11.7.6

11.7.6 (2026-02-14)

🩹 Fixes

  • make describe().timeout() work (aafe6fd)
  • test: replace wmic usage with native Windows API (#5694) (73ebdfa)

🧹 Chores

Changelog

Sourced from mocha's changelog.

11.8.0 (2026-08-02)

🌟 Features

  • add --fail-hook-affected-tests option to report skipped tests as failed (#5519) (#6052) (7830309)

🧹 Chores

11.7.7 (2026-06-13)

🩹 Fixes

11.7.6 (2026-02-14)

🩹 Fixes

  • make describe().timeout() work (aafe6fd)
  • test: replace wmic usage with native Windows API (#5694) (73ebdfa)

🧹 Chores

Commits
  • 90c1bb3 chore(v11.x): release 11.8.0 (#6076)
  • 05aec43 chore(CI): bump Node from 22 to 24 in publish action (#6206)
  • 1f44d5f chore: change site title to Mocha 11, update index note (#6086)
  • 26deb23 chore: add modern Netlify to v11.x branch (#6082)
  • 7830309 feat: add --fail-hook-affected-tests option to report skipped tests as failed...
  • 41f2b95 chore(v11.x): release 11.7.7 (#6068)
  • 3477563 fix: surface ts-node compile errors (#6045)
  • 3765ba0 chore(v11.x): release 11.7.6 (#5632)
  • 73ebdfa fix(test): replace wmic usage with native Windows API (#5694)
  • aafe6fd fix: make describe().timeout() work
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mocha since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [mocha](https://github.com/mochajs/mocha) from 11.7.5 to 11.8.0.
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/v11.8.0/CHANGELOG.md)
- [Commits](mochajs/mocha@v11.7.5...v11.8.0)

---
updated-dependencies:
- dependency-name: mocha
  dependency-version: 11.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 9, 2026
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Sep 9, 2026
@chagong

Changyong Gong (chagong) commented Sep 10, 2026

Copy link
Copy Markdown
Contributor

Decision: NOT_MERGED

Dependabot PR Manager result

  • Repository: microsoft/vscode-java-dependency
  • Pull request: microsoft/vscode-java-dependency#1094chore(deps-dev): bump mocha from 11.7.5 to 11.8.0
  • Update: mocha 11.7.5 -> 11.8.0 — direct development dependency, minor, non-security update.
  • Safety assessment: Valid Dependabot-authored, bot-only history. The manifest/lockfile-only diff passes the standard dependency gate. Mocha remains necessary because both test harnesses import it. Release and engine requirements remain compatible; risk is low.
  • Final state: Head 25616e5c88d25ebef70aea2972a16acb4eb965be; open and mergeable; GitHub reports BEHIND, although comparison proves current main is its parent (behind_by: 0). Review decision is REVIEW_REQUIRED. CI is 31/33 successful with no non-terminal checks; all four required checks passed. E2E Linux (java-dep-build-lifecycle) is UNRELATED because its rerun could not retrieve the expired vsix-linux artifact, and E2E Summary is the resulting unrelated aggregate failure.
  • Actions taken: Verified the prior Dependabot rebase and recreation attempts were rejected because the originating npm configuration was deleted. Confirmed the E2E workflow already exhausted its single rerun. Clean installation and Mocha resolution succeeded; compilation and 32 tests passed before broader local testing was blocked by the unavailable JDK 21 backend.
  • Reason: The complete current-head check rollup remains unsuccessful after its permitted rerun, so approval and merge are not allowed.
  • Next action: A maintainer must rerun the complete E2E workflow to regenerate vsix-linux, then obtain the required approval.
  • Workflow run: https://github.com/chagong/JavaForge/actions/runs/34745166209

@chagong

Copy link
Copy Markdown
Contributor

Dependabot (@dependabot) rebase

@dependabot @github

dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor Author

The dependabot.yml entry that created this PR has been deleted so this PR can't be rebased. Please close the PR so Dependabot can create a new one with the current dependabot.yml.

@chagong

Copy link
Copy Markdown
Contributor

Dependabot (@dependabot) recreate

@dependabot @github

dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor Author

The dependabot.yml entry that created this PR has been deleted so this PR can't be recreated. Please close the PR so Dependabot can create a new one with the current dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant