Skip to content

build(deps-dev): bump @microsoft/rush from 5.175.1 to 5.176.0 in the dev group#323

Merged
nev21 merged 2 commits into
mainfrom
dependabot/npm_and_yarn/dev-a2b5ff37ff
Jun 13, 2026
Merged

build(deps-dev): bump @microsoft/rush from 5.175.1 to 5.176.0 in the dev group#323
nev21 merged 2 commits into
mainfrom
dependabot/npm_and_yarn/dev-a2b5ff37ff

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev group with 1 update: @microsoft/rush.

Updates @microsoft/rush from 5.175.1 to 5.176.0

Changelog

Sourced from @​microsoft/rush's changelog.

5.176.0

Tue, 09 Jun 2026 02:02:32 GMT

Minor changes

  • Add support for pnpm 11's allowBuilds field in pnpm-workspace.yaml. Rush now correctly handles the pnpm 11 security model where build scripts must be explicitly approved. The new globalAllowBuilds field in pnpm-config.json replaces the deprecated globalOnlyBuiltDependencies and globalNeverBuiltDependencies fields for pnpm 11+. The rush-pnpm approve-builds command is also updated to work correctly with pnpm 11.
  • Include seconds in the generated change file name so that running rush change more than once in the same minute no longer silently overwrites the previously generated change file.
  • Default rush-pnpm outdated and rush-pnpm why to recursive workspace queries.

Patches

  • Fix a regression where Rush change-detection treated any pnpm-config.json containing comments as unparseable, causing every project to be flagged as impacted.
  • Route the "Lockfile was created or deleted" warning to stderr so that machine-readable output (e.g. rush list --json) remains parseable when the lockfile was added or removed in the diff range.
  • Fix rush update not syncing pnpm-lock.yaml when a workspace dependency moves from dependencies to devDependencies.

Updates

  • Bump the ws dependency to ~8.20.0.
Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
@microsoft/rush [>= 5.144.a, < 5.145]

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev group with 1 update: [@microsoft/rush](https://github.com/microsoft/rushstack/tree/HEAD/apps/rush).


Updates `@microsoft/rush` from 5.175.1 to 5.176.0
- [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/rush/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rushstack/commits/@microsoft/rush_v5.176.0/apps/rush)

---
updated-dependencies:
- dependency-name: "@microsoft/rush"
  dependency-version: 5.176.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 11, 2026
@dependabot dependabot Bot requested review from a team as code owners June 11, 2026 20:34
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 11, 2026
@codecov

codecov Bot commented Jun 13, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.30%. Comparing base (d7eff11) to head (32cf6cf).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #323   +/-   ##
=======================================
  Coverage   95.30%   95.30%           
=======================================
  Files         137      137           
  Lines        6388     6388           
  Branches     1679     1679           
=======================================
  Hits         6088     6088           
  Misses        300      300           
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@nevware21-bot nevware21-bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved by nevware21-bot

@nev21 nev21 merged commit d1e4789 into main Jun 13, 2026
10 checks passed
@nev21 nev21 deleted the dependabot/npm_and_yarn/dev-a2b5ff37ff branch June 13, 2026 16:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants