📦 Bump the all-dependencies group across 1 directory with 10 updates by dependabot[bot] · Pull Request #15989 · microsoft/react-native-windows

dependabot · 2026-04-14T12:29:23Z

Bumps the all-dependencies group with 10 updates in the / directory:

Package	From	To
beachball	`2.64.2`	`2.64.3`
lage	`2.15.7`	`2.15.8`
simple-git	`3.35.2`	`3.36.0`
metro-runtime	`0.83.5`	`0.83.6`
metro-source-map	`0.83.5`	`0.83.6`
eslint-plugin-jest	`29.15.1`	`29.15.2`
metro-babel-register	`0.83.5`	`0.83.6`
metro-transform-plugins	`0.83.5`	`0.83.6`
@rnx-kit/fork-sync	`0.4.0`	`0.4.1`
resolve	`1.22.11`	`1.22.12`

Updates beachball from 2.64.2 to 2.64.3

Changelog

Sourced from beachball's changelog.

2.64.3

Fri, 10 Apr 2026 02:42:47 GMT

Patches

Refine publish logging (elcraig@microsoft.com)

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for beachball since your current version.

Updates lage from 2.15.7 to 2.15.8

Commits

d386157 applying package updates
56f718d Enable trusted publishing (#1108)
67207bc Remove backfill-utils-dotenv (#1106)
4d11192 Security updates for nested deps (#1105)
874e75f Move normalized-tmpdir into lage repo (#1103)
dbc1f0d Update github/codeql-action digest to c10b806 (#1104)
48b588e Add advanced CodeQL setup to run on all PRs
ba8e7f0 Add reporter option to config file (#1101)
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for lage since your current version.

Updates simple-git from 3.35.2 to 3.36.0

Release notes

Sourced from simple-git's releases.

simple-git@3.36.0

Minor Changes

89a2294: Extend known exploitable configuration keys and per-task environment variables.

Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues.

Thanks to @zebbern for identifying the need to block core.fsmonitor. Thanks to @kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config.

Patch Changes

1ad57e8: Remove conflicting node:buffer import

Updated dependencies [89a2294]

Updated dependencies [675570a]

@simple-git/argv-parser@1.1.0

@simple-git/args-pathspec@1.0.3

Changelog

Sourced from simple-git's changelog.

3.36.0

Minor Changes

89a2294: Extend known exploitable configuration keys and per-task environment variables.

Note - ParsedVulnerabilities from argv-parser is removed in favour of a readonly array of Vulnerability to match usage in simple-git, rolled into the new vulnerabilityCheck for simpler access to the identified issues.

Thanks to @zebbern for identifying the need to block core.fsmonitor. Thanks to @kodareef5 for identifying the need to block GIT_CONFIG_COUNT environment variables and --template / merge related config.

Patch Changes

1ad57e8: Remove conflicting node:buffer import

Updated dependencies [89a2294]

Updated dependencies [675570a]

@simple-git/argv-parser@1.1.0

@simple-git/args-pathspec@1.0.3

Commits

7dc1a53 Version Packages
76f5376 Merge pull request #1061 from Vinzent03/fix/buffer-import
89a2294 Environment Parsing (#1156)
1b91b76 fix: remove explicit node:buffer import
See full diff in compare view

Updates metro-runtime from 0.83.5 to 0.83.6

Release notes

Sourced from metro-runtime's releases.

v0.83.6

This release is on the 0.83.x branch

[Feature]: Add keepalive "heartbeat" message to Fast Refresh connections (facebook/metro#1685 by @robhogan)

[Feature]: Add changeId metadata on HMRClient update-done messages (facebook/metro@1585e444284f by @huntie)

[Fix]: Include user-defined Babel config in transformer cache key to ensure correctness (facebook/metro#1638 by @evanbacon)

[Fix]: Detection of contents of directories moved or cloned into a watched location (facebook/metro#1660 by @robhogan)

[Fix]: Correctly detect contents as removed when a watched directory is moved, on macOS without Watchman (facebook/metro@c9e9fe64a77c by @robhogan)

[Performance]: Optimize PackageCache: use Map/Set, cache null results, eliminate per-hit allocations (facebook/metro@877b64ea5967 by @robhogan)

[Types]: Restore type exports from metro that were previously TypeScript-specific (facebook/metro#1672 by @robhogan)

NOTE: Experimental features are not covered by semver and can change at any time.

[Experimental]: Add config.unstable_fileMapPlugins (facebook/metro@567aa8b62b95 by @robhogan)

Commits

3eecb5a Publish hotfix 0.83.6
7da3861 Add keepalive "heartbeat" message to Fast Refresh connections (#1685)
b6e3989 Add changeId on HMRClient update-done message
41a2713 fix console errors thrown about not wrapping renders in act during tests
c81087f Add SignedSource (@generated) to generated TS types, use @noformat
See full diff in compare view

Updates metro-source-map from 0.83.5 to 0.83.6

Release notes

Sourced from metro-source-map's releases.

v0.83.6

This release is on the 0.83.x branch

[Feature]: Add keepalive "heartbeat" message to Fast Refresh connections (facebook/metro#1685 by @robhogan)

[Feature]: Add changeId metadata on HMRClient update-done messages (facebook/metro@1585e444284f by @huntie)

[Fix]: Include user-defined Babel config in transformer cache key to ensure correctness (facebook/metro#1638 by @evanbacon)

[Fix]: Detection of contents of directories moved or cloned into a watched location (facebook/metro#1660 by @robhogan)

[Fix]: Correctly detect contents as removed when a watched directory is moved, on macOS without Watchman (facebook/metro@c9e9fe64a77c by @robhogan)

[Performance]: Optimize PackageCache: use Map/Set, cache null results, eliminate per-hit allocations (facebook/metro@877b64ea5967 by @robhogan)

[Types]: Restore type exports from metro that were previously TypeScript-specific (facebook/metro#1672 by @robhogan)

NOTE: Experimental features are not covered by semver and can change at any time.

[Experimental]: Add config.unstable_fileMapPlugins (facebook/metro@567aa8b62b95 by @robhogan)

Commits

3eecb5a Publish hotfix 0.83.6
f5a16a1 transformTypeParamBound codemod 9/9 (#1665)
c81087f Add SignedSource (@generated) to generated TS types, use @noformat
See full diff in compare view

Updates eslint-plugin-jest from 29.15.1 to 29.15.2

Release notes

Sourced from eslint-plugin-jest's releases.

v29.15.2

29.15.2 (2026-04-09)

Bug Fixes

valid-mock-module-path: don't report virtual mocks (#1946) (a1916d1)

Changelog

Sourced from eslint-plugin-jest's changelog.

29.15.2 (2026-04-09)

Bug Fixes

valid-mock-module-path: don't report virtual mocks (#1946) (a1916d1)

Commits

f14a941 chore(release): 29.15.2 [skip ci]
a1916d1 fix(valid-mock-module-path): don't report virtual mocks (#1946)
4a52787 chore(deps): lock file maintenance (#1958)
285c6f6 ci: don't run smoketest on tannerlinsley/react-table (#1959)
1da0928 chore(deps): lock file maintenance (#1956)
8532d0e docs(valid-expect): use valid alert syntax (#1954)
03405ae chore(deps): update dependency @schemastore/package to v1 (#1942)
de0e154 chore(deps): update codecov/codecov-action action to v6 (#1952)
d50f50c chore: add node v25 to CI (#1950)
See full diff in compare view

Updates metro-babel-register from 0.83.5 to 0.83.6

Release notes

Sourced from metro-babel-register's releases.

v0.83.6

This release is on the 0.83.x branch

[Feature]: Add keepalive "heartbeat" message to Fast Refresh connections (facebook/metro#1685 by @robhogan)

[Feature]: Add changeId metadata on HMRClient update-done messages (facebook/metro@1585e444284f by @huntie)

[Fix]: Include user-defined Babel config in transformer cache key to ensure correctness (facebook/metro#1638 by @evanbacon)

[Fix]: Detection of contents of directories moved or cloned into a watched location (facebook/metro#1660 by @robhogan)

[Fix]: Correctly detect contents as removed when a watched directory is moved, on macOS without Watchman (facebook/metro@c9e9fe64a77c by @robhogan)

[Performance]: Optimize PackageCache: use Map/Set, cache null results, eliminate per-hit allocations (facebook/metro@877b64ea5967 by @robhogan)

[Types]: Restore type exports from metro that were previously TypeScript-specific (facebook/metro#1672 by @robhogan)

NOTE: Experimental features are not covered by semver and can change at any time.

[Experimental]: Add config.unstable_fileMapPlugins (facebook/metro@567aa8b62b95 by @robhogan)

Commits

3eecb5a Publish hotfix 0.83.6
148ae9f Update hermes-parser and related packages in fbsource to 0.35.0
d943f17 Update hermes-parser and related packages in xplat to 0.34.0
See full diff in compare view

Updates metro-transform-plugins from 0.83.5 to 0.83.6

Release notes

Sourced from metro-transform-plugins's releases.

v0.83.6

This release is on the 0.83.x branch

[Feature]: Add keepalive "heartbeat" message to Fast Refresh connections (facebook/metro#1685 by @robhogan)

[Feature]: Add changeId metadata on HMRClient update-done messages (facebook/metro@1585e444284f by @huntie)

[Fix]: Include user-defined Babel config in transformer cache key to ensure correctness (facebook/metro#1638 by @evanbacon)

[Fix]: Detection of contents of directories moved or cloned into a watched location (facebook/metro#1660 by @robhogan)

[Fix]: Correctly detect contents as removed when a watched directory is moved, on macOS without Watchman (facebook/metro@c9e9fe64a77c by @robhogan)

[Performance]: Optimize PackageCache: use Map/Set, cache null results, eliminate per-hit allocations (facebook/metro@877b64ea5967 by @robhogan)

[Types]: Restore type exports from metro that were previously TypeScript-specific (facebook/metro#1672 by @robhogan)

NOTE: Experimental features are not covered by semver and can change at any time.

[Experimental]: Add config.unstable_fileMapPlugins (facebook/metro@567aa8b62b95 by @robhogan)

Commits

3eecb5a Publish hotfix 0.83.6
f5a16a1 transformTypeParamBound codemod 9/9 (#1665)
c81087f Add SignedSource (@generated) to generated TS types, use @noformat
See full diff in compare view

Updates @rnx-kit/fork-sync from 0.4.0 to 0.4.1

Changelog

Sourced from @rnx-kit/fork-sync's changelog.

0.4.1

Patch Changes

b326fad: Improve arg escaping

Commits

See full diff in compare view

Updates resolve from 1.22.11 to 1.22.12

Commits

d2d30de v1.22.12
655c3db [Fix] defaultPaths: handle null homedir gracefully
0cec52b [Fix] homedir: fix operator precedence bug with HOMEDRIVE/HOMEPATH concaten...
a93a913 [Fix] loadpkg: add missing return after error callback to prevent double-...
eeb965e [meta] update security policy to use GitHub PVR instead of Tidelift
7929ac1 [Test] add test from v2 branch
9fcaf60 [Refactor] use non-hoisted declarations instead of expressions
4c6db66 [Robustness] use es-errors
29bac90 [readme] replace runkit CI badge with shields.io check-runs badge
651f4d1 [Performance] avoid an unnecessary slice
Additional commits viewable in compare view

Bumps the all-dependencies group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [beachball](https://github.com/microsoft/beachball) | `2.64.2` | `2.64.3` | | [lage](https://github.com/microsoft/lage) | `2.15.7` | `2.15.8` | | [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) | `3.35.2` | `3.36.0` | | [metro-runtime](https://github.com/facebook/metro/tree/HEAD/packages/metro-runtime) | `0.83.5` | `0.83.6` | | [metro-source-map](https://github.com/facebook/metro/tree/HEAD/packages/metro-source-map) | `0.83.5` | `0.83.6` | | [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) | `29.15.1` | `29.15.2` | | [metro-babel-register](https://github.com/facebook/metro/tree/HEAD/packages/metro-babel-register) | `0.83.5` | `0.83.6` | | [metro-transform-plugins](https://github.com/facebook/metro/tree/HEAD/packages/metro-transform-plugins) | `0.83.5` | `0.83.6` | | [@rnx-kit/fork-sync](https://github.com/microsoft/rnx-kit/tree/HEAD/incubator/fork-sync) | `0.4.0` | `0.4.1` | | [resolve](https://github.com/browserify/resolve) | `1.22.11` | `1.22.12` | Updates `beachball` from 2.64.2 to 2.64.3 - [Changelog](https://github.com/microsoft/beachball/blob/main/CHANGELOG.md) - [Commits](https://github.com/microsoft/beachball/commits) Updates `lage` from 2.15.7 to 2.15.8 - [Commits](microsoft/lage@lage_v2.15.7...lage_v2.15.8) Updates `simple-git` from 3.35.2 to 3.36.0 - [Release notes](https://github.com/steveukx/git-js/releases) - [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md) - [Commits](https://github.com/steveukx/git-js/commits/simple-git@3.36.0/simple-git) Updates `metro-runtime` from 0.83.5 to 0.83.6 - [Release notes](https://github.com/facebook/metro/releases) - [Changelog](https://github.com/facebook/metro/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/metro/commits/v0.83.6/packages/metro-runtime) Updates `metro-source-map` from 0.83.5 to 0.83.6 - [Release notes](https://github.com/facebook/metro/releases) - [Changelog](https://github.com/facebook/metro/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/metro/commits/v0.83.6/packages/metro-source-map) Updates `eslint-plugin-jest` from 29.15.1 to 29.15.2 - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases) - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md) - [Commits](jest-community/eslint-plugin-jest@v29.15.1...v29.15.2) Updates `metro-babel-register` from 0.83.5 to 0.83.6 - [Release notes](https://github.com/facebook/metro/releases) - [Changelog](https://github.com/facebook/metro/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/metro/commits/v0.83.6/packages/metro-babel-register) Updates `metro-transform-plugins` from 0.83.5 to 0.83.6 - [Release notes](https://github.com/facebook/metro/releases) - [Changelog](https://github.com/facebook/metro/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/metro/commits/v0.83.6/packages/metro-transform-plugins) Updates `@rnx-kit/fork-sync` from 0.4.0 to 0.4.1 - [Release notes](https://github.com/microsoft/rnx-kit/releases) - [Changelog](https://github.com/microsoft/rnx-kit/blob/main/incubator/fork-sync/CHANGELOG.md) - [Commits](https://github.com/microsoft/rnx-kit/commits/@rnx-kit/cli_v0.4.1/incubator/fork-sync) Updates `resolve` from 1.22.11 to 1.22.12 - [Commits](browserify/resolve@v1.22.11...v1.22.12) --- updated-dependencies: - dependency-name: beachball dependency-version: 2.64.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: lage dependency-version: 2.15.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: simple-git dependency-version: 3.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: metro-runtime dependency-version: 0.83.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: metro-source-map dependency-version: 0.83.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: eslint-plugin-jest dependency-version: 29.15.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: metro-babel-register dependency-version: 0.83.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: metro-transform-plugins dependency-version: 0.83.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: "@rnx-kit/fork-sync" dependency-version: 0.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: resolve dependency-version: 1.22.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

azure-pipelines · 2026-04-15T13:13:50Z

Azure Pipelines: 1 pipeline(s) require an authorized user to comment /azp run to run.

dependabot bot added the dependencies Pull requests that update a dependency file label Apr 14, 2026

dependabot bot requested a review from a team as a code owner April 14, 2026 12:29

dependabot bot added the dependencies Pull requests that update a dependency file label Apr 14, 2026

dependabot bot force-pushed the dependabot/npm_and_yarn/main/all-dependencies-a9e8743dea branch from a3b31f0 to 99fc9fe Compare April 15, 2026 13:13

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

📦 Bump the all-dependencies group across 1 directory with 10 updates#15989

📦 Bump the all-dependencies group across 1 directory with 10 updates#15989
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/main/all-dependencies-a9e8743dea

dependabot bot commented on behalf of github Apr 14, 2026 •

edited

Loading

Uh oh!

azure-pipelines bot commented Apr 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Apr 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.64.3

Patches

simple-git@3.36.0

Minor Changes

Patch Changes

3.36.0

Minor Changes

Patch Changes

v0.83.6

v0.83.6

v29.15.2

29.15.2 (2026-04-09)

Bug Fixes

29.15.2 (2026-04-09)

Bug Fixes

v0.83.6

v0.83.6

0.4.1

Patch Changes

Uh oh!

azure-pipelines bot commented Apr 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Apr 14, 2026 •

edited

Loading