Skip to content

Conversation

@LCSOGthb
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade @testing-library/user-event from 13.5.0 to 14.6.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 56 versions ahead of your current version.

  • The recommended version was released a year ago.

Release notes
Package name: @testing-library/user-event
  • 14.6.1 - 2025-01-21

    14.6.1 (2025-01-21)

    Bug Fixes

    • correct description for delay option (#1175) (2edf14d)
    • keyboard: add ContextMenu to defaultKeyMap (#1079) (3e471d1)
    • keyboard: add brackets to defaultKeyMap (#1226) (543ecb0)
    • keyboard: walk through radio group per arrow keys (#1049) (bf8111c)
    • pointer: dispatch mouse events if pointerdown is defaultPrevented (#1121) (f681f7b)
    • pointer: set button and buttons properties on PointerEvent (#1219) (6614f72)
    • pointer: use 1 as default value for PointerEvent.width and PointerEvent.height (#1224) (f0468d0)
    • prevent click event loop on form-associated custom element (#1238) (465fc7e)
    • prevent click event on non-focusable control (#1130) (e429094)
    • upload: apply accept filter more leniently (#1064) (a344ad4)
  • 14.6.0 - 2025-01-15

    14.6.0 (2025-01-15)

    Features

    Bug Fixes

    • clipboard: await DataTransferItem.getAsString() callback (#1251) (7b11b0e)
    • event: assign pointer coords to MouseEvent (#1039) (8528972)
    • pointer: check PointerCoords.x in isDifferentPointerPosition (#1216) (75edef5)
    • pointer: check all fields of PointerCoords in isDifferentPointerPosition() (#1229) (5f3d28f)
  • 14.5.2 - 2023-12-29

    14.5.2 (2023-12-29)

    Bug Fixes

    • remove interop and deep DTL imports (6a3c896)
  • 14.5.1 - 2023-09-15

    14.5.1 (2023-09-15)

    Bug Fixes

    • incorrect default import from @ testing-library/dom (#1162) (d7483f0)
  • 14.5.0 - 2023-09-14

    14.5.0 (2023-09-14)

    Bug Fixes

    • exports: add a named export for userEvent (4019cee), closes #1146

    Features

    • types: Add additional type exports for UserEvent & Options (#1112) (da00e8d)
  • 14.4.3 - 2022-08-09

    14.4.3 (2022-08-09)

    Bug Fixes

  • 14.4.2 - 2022-08-04
  • 14.4.1 - 2022-08-02
  • 14.4.0 - 2022-08-02
  • 14.3.0 - 2022-07-19
  • 14.2.6 - 2022-07-18
  • 14.2.5 - 2022-07-15
  • 14.2.4 - 2022-07-15
  • 14.2.3 - 2022-07-14
  • 14.2.2 - 2022-07-14
  • 14.2.1 - 2022-06-17
  • 14.2.0 - 2022-05-12
  • 14.1.1 - 2022-04-17
  • 14.1.0 - 2022-04-11
  • 14.0.4 - 2022-04-01
  • 14.0.3 - 2022-03-31
  • 14.0.2 - 2022-03-31
  • 14.0.1 - 2022-03-31
  • 14.0.0 - 2022-03-29
  • 14.0.0-beta.14 - 2022-03-24
  • 14.0.0-beta.13 - 2022-03-04
  • 14.0.0-beta.12 - 2022-03-01
  • 14.0.0-beta.11 - 2022-02-10
  • 14.0.0-beta.10 - 2022-02-08
  • 14.0.0-beta.9 - 2022-02-07
  • 14.0.0-beta.8 - 2022-01-16
  • 14.0.0-beta.7 - 2022-01-05
  • 14.0.0-beta.6 - 2022-01-01
  • 14.0.0-beta.5 - 2021-12-31
  • 14.0.0-beta.4 - 2021-12-30
  • 14.0.0-beta.3 - 2021-12-13
  • 14.0.0-beta.2 - 2021-12-07
  • 14.0.0-beta.1 - 2021-11-28
  • 14.0.0-alpha.18 - 2021-11-28
  • 14.0.0-alpha.17 - 2021-11-25
  • 14.0.0-alpha.16 - 2021-11-25
  • 14.0.0-alpha.15 - 2021-11-25
  • 14.0.0-alpha.14 - 2021-11-17
  • 14.0.0-alpha.13 - 2021-11-17
  • 14.0.0-alpha.12 - 2021-11-16
  • 14.0.0-alpha.11 - 2021-11-15
  • 14.0.0-alpha.10 - 2021-11-15
  • 14.0.0-alpha.9 - 2021-11-15
  • 14.0.0-alpha.8 - 2021-11-11
  • 14.0.0-alpha.7 - 2021-11-09
  • 14.0.0-alpha.6 - 2021-11-03
  • 14.0.0-alpha.5 - 2021-10-30
  • 14.0.0-alpha.4 - 2021-10-29
  • 14.0.0-alpha.3 - 2021-10-25
  • 14.0.0-alpha.2 - 2021-10-22
  • 14.0.0-alpha.1 - 2021-10-21
  • 13.5.0 - 2021-10-18
from @testing-library/user-event GitHub release notes

Important

  • Warning: This PR contains a major version upgrade, and may be a breaking change.
  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade @testing-library/user-event from 13.5.0 to 14.6.1.

See this package in npm:
@testing-library/user-event

See this project in Snyk:
https://app.snyk.io/org/lcsogthb/project/c2b95214-2aa7-47c9-b51d-ab7a1c993cf2?utm_source=github&utm_medium=referral&page=upgrade-pr
@vercel
Copy link

vercel bot commented Jan 12, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Review Updated (UTC)
airmerge Error Error Jan 21, 2026 1:04pm

@coderabbitai
Copy link

coderabbitai bot commented Jan 12, 2026

📝 Walkthrough

Summary by CodeRabbit

  • Chores
    • Updated testing framework dependencies to enhance test infrastructure and maintain compatibility with current development standards.

✏️ Tip: You can customize this high-level summary in your review settings.

Walkthrough

Updated @testing-library/user-event dependency from ^13.5.0 to ^14.6.1 in the aq-dashboard package configuration. This modifies test utility versions without affecting production code or runtime behavior.

Changes

Cohort / File(s) Summary
Dependency Update
aq-dashboard/package.json
Bumped @testing-library/user-event from ^13.5.0 to ^14.6.1

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Suggested labels

dependencies

Poem

🐰 A tiny hop through package.json's hall,
Where testing libraries hear the call,
From version thirteen to fourteen's grace,
User-event takes its rightful place!
No runtime fears, just tests made bright,
Another dependency set just right! ✨

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and specifically describes the main change: upgrading @testing-library/user-event from version 13.5.0 to 14.6.1, which is the sole modification in this pull request.
Description check ✅ Passed The description is directly related to the changeset, explaining that Snyk created this PR to upgrade @testing-library/user-event and providing detailed context including release notes, version comparisons, and warnings about the major version upgrade.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@deepsource-io
Copy link

deepsource-io bot commented Jan 12, 2026

Here's the code health analysis summary for commits 68d7183..0c62365. View details on DeepSource ↗.

Analysis Summary

AnalyzerStatusSummaryLink
DeepSource Ruby LogoRuby✅ SuccessView Check ↗
DeepSource Rust LogoRust✅ SuccessView Check ↗
DeepSource JavaScript LogoJavaScript✅ SuccessView Check ↗
DeepSource Scala LogoScala✅ SuccessView Check ↗
DeepSource Shell LogoShell✅ SuccessView Check ↗
DeepSource Secrets LogoSecrets✅ SuccessView Check ↗
DeepSource Terraform LogoTerraform✅ SuccessView Check ↗
DeepSource Swift LogoSwift✅ SuccessView Check ↗
DeepSource SQL LogoSQL✅ SuccessView Check ↗
DeepSource Test coverage LogoTest coverage⚠️ Artifact not reportedTimed out: Artifact was never reportedView Check ↗
DeepSource C & C++ LogoC & C++✅ SuccessView Check ↗
DeepSource C# LogoC#✅ SuccessView Check ↗
DeepSource Ansible LogoAnsible✅ SuccessView Check ↗

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

@LCSOGthb
Copy link
Owner Author

@coderabbitai review

@coderabbitai
Copy link

coderabbitai bot commented Jan 21, 2026

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@LCSOGthb
Copy link
Owner Author

@coderabbitai review

@coderabbitai
Copy link

coderabbitai bot commented Jan 21, 2026

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@coderabbitai coderabbitai bot added the dependencies Pull requests that update a dependency file label Jan 21, 2026
Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Fix all issues with AI agents
In `@aq-dashboard/package.json`:
- Line 10: The package "@testing-library/user-event" (and any other
"@testing-library/*" entries) is incorrectly listed in dependencies; move these
testing libraries into devDependencies in package.json so they are not installed
in production. Edit package.json to remove "@testing-library/user-event" from
the "dependencies" object and add it (and any other `@testing-library` packages)
to "devDependencies" with the same version string; ensure package-lock/yarn.lock
is updated by reinstalling or running the lockfile update after the change. Also
keep in mind when tests are added that userEvent v14 requires calling
userEvent.setup() before interactions.
🧹 Nitpick comments (1)
aq-dashboard/package.json (1)

7-10: Consider moving testing libraries to devDependencies.

The @testing-library/* packages (lines 7–10) are test utilities and should typically reside in devDependencies rather than dependencies, as they are not required at runtime in production builds.

Suggested change

Move these entries from dependencies to devDependencies:

  "dependencies": {
-   "@testing-library/dom": "^10.4.0",
-   "@testing-library/jest-dom": "^6.6.3",
-   "@testing-library/react": "^16.3.0",
-   "@testing-library/user-event": "^14.6.1",
    "@types/jest": "^27.5.2",
    ...
  },
  "devDependencies": {
+   "@testing-library/dom": "^10.4.0",
+   "@testing-library/jest-dom": "^6.6.3",
+   "@testing-library/react": "^16.3.0",
+   "@testing-library/user-event": "^14.6.1",
    "@types/leaflet": "^1.9.20",
    ...
  }

@LCSOGthb LCSOGthb merged commit ec17f66 into main Jan 21, 2026
28 of 34 checks passed
@LCSOGthb LCSOGthb deleted the snyk-upgrade-751199cd2bf70e87e0f5dfec516f3075 branch January 21, 2026 13:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants