Skip to content

chore(deps-dev): bump mocha from 11.7.5 to 11.8.0 - #1094

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mocha-11.8.0
Open

chore(deps-dev): bump mocha from 11.7.5 to 11.8.0#1094
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mocha-11.8.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps mocha from 11.7.5 to 11.8.0.

Release notes

Sourced from mocha's releases.

v11.8.0

11.8.0 (2026-08-02)

🌟 Features

  • add --fail-hook-affected-tests option to report skipped tests as failed (#5519) (#6052) (7830309)

🧹 Chores

v11.7.7

11.7.7 (2026-06-13)

🩹 Fixes

v11.7.6

11.7.6 (2026-02-14)

🩹 Fixes

  • make describe().timeout() work (aafe6fd)
  • test: replace wmic usage with native Windows API (#5694) (73ebdfa)

🧹 Chores

Changelog

Sourced from mocha's changelog.

11.8.0 (2026-08-02)

🌟 Features

  • add --fail-hook-affected-tests option to report skipped tests as failed (#5519) (#6052) (7830309)

🧹 Chores

11.7.7 (2026-06-13)

🩹 Fixes

11.7.6 (2026-02-14)

🩹 Fixes

  • make describe().timeout() work (aafe6fd)
  • test: replace wmic usage with native Windows API (#5694) (73ebdfa)

🧹 Chores

Commits
  • 90c1bb3 chore(v11.x): release 11.8.0 (#6076)
  • 05aec43 chore(CI): bump Node from 22 to 24 in publish action (#6206)
  • 1f44d5f chore: change site title to Mocha 11, update index note (#6086)
  • 26deb23 chore: add modern Netlify to v11.x branch (#6082)
  • 7830309 feat: add --fail-hook-affected-tests option to report skipped tests as failed...
  • 41f2b95 chore(v11.x): release 11.7.7 (#6068)
  • 3477563 fix: surface ts-node compile errors (#6045)
  • 3765ba0 chore(v11.x): release 11.7.6 (#5632)
  • 73ebdfa fix(test): replace wmic usage with native Windows API (#5694)
  • aafe6fd fix: make describe().timeout() work
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mocha since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [mocha](https://github.com/mochajs/mocha) from 11.7.5 to 11.8.0.
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/v11.8.0/CHANGELOG.md)
- [Commits](mochajs/mocha@v11.7.5...v11.8.0)

---
updated-dependencies:
- dependency-name: mocha
  dependency-version: 11.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 9, 2026
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Sep 9, 2026
@chagong

Changyong Gong (chagong) commented Sep 10, 2026

Copy link
Copy Markdown
Contributor

Decision: NOT_MERGED

Dependabot PR Manager result

  • Repository: microsoft/vscode-java-dependency
  • Pull request: microsoft/vscode-java-dependency#1094chore(deps-dev): bump mocha from 11.7.5 to 11.8.0
  • Update: mocha 11.7.5 -> 11.8.0 — direct development dependency, minor update.
  • Safety assessment: Dependabot-authored with bot-only history. The two-file manifest/lockfile diff qualifies for the standard dependency gate, but dependency necessity and final validation could not be refreshed because branch recovery is a prerequisite. Current risk remains low, but the stale head is ineligible for approval.
  • Final state: Head 25616e5c88d25ebef70aea2972a16acb4eb965be; open, mergeable, BEHIND, review decision REVIEW_REQUIRED. The head is one commit behind current main (f8cbde4b7fe08a11d1d54722660b6b16d173d905). CI: 31/33 successful and none non-terminal. E2E Linux (java-dep-build-lifecycle) is UNRELATED based on its unchanged rerun failing to retrieve the vsix-linux artifact; E2E Summary is UNRELATED as the downstream aggregate failure. All four required checks passed.
  • Actions taken: Posted @dependabot rebase; Dependabot rejected it because the originating dependabot.yml entry was deleted. Posted the authorized @dependabot recreate fallback; Dependabot rejected it for the same reason. Both attempts left the head unchanged. No remediation, approval, push, review request, or merge was attempted.
  • Reason: The stale branch cannot be recovered: both rebase and recreation are unavailable after deletion of its originating Dependabot configuration entry.
  • Next action: A maintainer must close this stale PR so Dependabot can create a replacement using the current configuration.
  • Workflow run: https://github.com/chagong/JavaForge/actions/runs/34573424885

@chagong

Copy link
Copy Markdown
Contributor

Dependabot (@dependabot) rebase

@dependabot @github

dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor Author

The dependabot.yml entry that created this PR has been deleted so this PR can't be rebased. Please close the PR so Dependabot can create a new one with the current dependabot.yml.

@chagong

Copy link
Copy Markdown
Contributor

Dependabot (@dependabot) recreate

@dependabot @github

dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor Author

The dependabot.yml entry that created this PR has been deleted so this PR can't be recreated. Please close the PR so Dependabot can create a new one with the current dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant