GitHub
08/10/2026, 1:43 AM* 0-3 * * 1)
• Automerge
• At any time (no schedule defined)
🚦 Automerge: Enabled.
♻️ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
---
• If you want to rebase/retry this PR, check this box
---
This PR was generated by Mend Renovate. View the repository job log.
pact-foundation/pact-js-coreGitHub
08/10/2026, 2:10 AM* 0-3 * * 1)
• Automerge
• At any time (no schedule defined)
🚦 Automerge: Enabled.
♻️ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
---
• If you want to rebase/retry this PR, check this box
---
This PR was generated by Mend Renovate. View the repository job log.
pact-foundation/pact-jsGitHub
08/10/2026, 6:31 AM@pact-foundation/pact@17.1.0
• Provider Pact library: does not matter
• Node Version: 24
Issue Checklist
Please confirm the following:
• I have upgraded to the latest
• I have the read the FAQs in the Readme
• I have triple checked, that there are no unhandled promises in my code and have read the section on intermittent test failures
• I have set my log level to debug and attached a log file showing the complete request/response cycle
• For bonus points and virtual high fives, I have created a reproduceable git repository (see below) to illustrate the problem
Expected behaviour
@pact-foundation/pact should work with jest in a non ESM environment.
This is a regression introduced in 17.1.0 that also has existed in a previous version. See Issue #1858. It seams like the dependency https-proxy-agent was again updated to v9 in #1861. Reintroducing the same error again in 17.1.0.
Actual behaviour
As in #1858 we are getting the following error
SyntaxError: Cannot use import statement outside a module
Steps to reproduce
How can someone else reproduce this bug?
Provide a Minimal, Reproducible Example. You can create your own repository, or use this template that's already hooked up to CI and everything.
Relevant log files
Please ensure you set logging to DEBUG and attach any relevant log files here (or link to a gist).
pact-foundation/pact-jsGitHub
08/10/2026, 9:20 AMonProxyAuth callback and negotiate option for Kerberos/SPNEGO proxy authentication
• Extract shared Negotiate/SPNEGO auth logic into new proxy-agent-negotiate package
• Added optional onProxyAuth async callback to HttpsProxyAgent and HttpProxyAgent options
• When the proxy responds with 407 Proxy-Authentication Required, the callback is invoked with the response and auth scheme
• The callback returns headers (e.g. Proxy-Authorization) to retry the request with
• Added negotiate: true option that uses the kerberos package for automatic Negotiate/SPNEGO auth
• Added kerberos as an optional peer dependency of proxy-agent-negotiate
• Extended the proxy test package to support authenticate: 'negotiate' mode for mock testing
• `3ebf4b2`: Add proxy event emission on the request object for all proxy agents. After the proxy connection is established, the request emits a proxy event with { proxy, socket } where proxy is the proxy URL string. This is useful for debugging and logging which proxy was used for a connection.
Patch Changes
• `1852c75`: Fix socket event race condition by deferring socket.resume() via setImmediate(), ensuring HTTP client machinery has time to attach data listeners before data starts flowing
• Updated dependencies [`84e85ed`]
• proxy-agent-negotiate@1.1.0
`v9.0.0`
Compare Source
Major Changes
• `7d12b51`: Set minimum Node.js version to 20
Patch Changes
• `7ca27d0`: Simplify package.json exports to remove unnecessary imports restriction
• Updated dependencies [`ca12148`]
• Updated dependencies [`7d12b51`]
• Updated dependencies [`7ca27d0`]
• agent-base@9.0.0
`v8.0.0`
Compare Source
Major Changes
• `9c92c09`: Convert to ESM. All packages now use "type": "module" and compile to ESM output instead of CommonJS.
Patch Changes
• Updated dependencies [`9c92c09`]
• agent-base@8.0.0
---
Configuration
📅 Schedule: (UTC)
• Branch creation
• At any time (no schedule defined)
• Automerge
• At any time (no schedule defined)
🚦 Automerge: Disabled because a matching PR …
pact-foundation/pact-jsGitHub
08/10/2026, 9:39 AM*6.15.3
• [Fix] `parse`: enforcefor cumulative array growth via `combine`/`merge`throwOnLimitExceeded
• [Fix] `utils`: respect encoding of surrogate pairs across chunks (#559)
• [Robustness] `parse`: throw theerror before splitting oversized comma valuesarrayLimit
• [Robustness]/ `utils.assign`: avoid invokingutils.mergesetter when copying own properties__proto__
• [Robustness] `utils`: enforceconsistently across `merge`'s array pathsarrayLimit
• [Perf] `utils`: makeO(n) via a side-channel visited-set instead ofcompactArray.indexOf
• [Deps] updateside-channel
• [Dev Deps] update,eslint,mock-propertytape
• [Tests] `parse`: characterize current lenient handling of unbalanced bracket keys (#558)
*6.15.2
• [Fix] `stringify`: skip null/undefined entries in+arrayFormat: 'comma'instead of crashing inencodeValuesOnlyencoder
• [Fix] `stringify`: use configuredafterdelimiter(#555)charsetSentinel
• [Fix] `stringify`: applyto encoded key underformatter(#554)strictNullHandling
• [Fix] `stringify`: skip null/undefined filter-array entries instead of crashing in(#551)encoder
• [Fix] `parse`: handle nested bracket groups and add regression tests (#530)
• [readme] fix grammar (#550)
• [Dev Deps] update@ljharb/eslint-config
• [Tests] add regression tests for keys containing percent-encoded bracket textCommits • `18d085e` v6.15.3 • `c38af42` [Deps] update
side-channel
• `adce539` [Dev Deps] update eslint, mock-property, tape
• `74a0f6a` [Robustness] `utils`: enforce arrayLimit consistently across `merge`'s arra...
• `f4938f5` [Tests] `parse`: characterize current lenient handling of unbalanced bracket ...
• `5d5f723` [Perf] `utils`: make compact O(n) via a side-channel visited-set instead of...
• `52afe00` [Robustness] `parse`: throw the arrayLimit error before splitting oversized...
• `963e538` [Fix] `parse`: enforce throwOnLimitExceeded for cumulative array growth via...
• `59da434` [Fix] `utils`: respect encoding of surrogate pairs across chunks
• `9532969` [Robustness] utils.merge / `utils.assign`: avoid invoking __proto__ sette...
• Additional commits viewable in compare view
Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.pact-foundation/pact-js
GitHub
08/10/2026, 9:41 AMGitHub
08/10/2026, 6:45 PMstatus and statusText are optional (38a0191), closes #133
1.22.2 (2024-11-07)
Bug Fixes
• use/koa: Use the parsed request body rather than ctx.body (#132) (9f8b1f1)
1.22.1 (2024-04-10)
Bug Fixes
• audit/render: Omit set-cookie header and html body (#116) (1c5c744)
• handler: Support both utf-8 and utf8 charsets (94100d6), closes #120
• use: Set request readable encoding to utf-8 (50d3bcd), closes #118
---
Configuration
📅 Schedule: (UTC)
• Branch creation
• At any time (no schedule defined)
• Automerge
• At any time (no schedule defined)
🚦 Automerge: Enabled.
♻️ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
---
• If you want to rebase/retry this PR, check this box
---
This PR was generated by Mend Renovate. View the repository job log.
pact-foundation/pact-jsGitHub
08/10/2026, 11:10 PM<https://github.com/pact-foundation/nestjs-pact/tree/master|master> by JP-Ellis
<https://github.com/pact-foundation/nestjs-pact/commit/9312120cb5ee8bc946b7dcd3b87b9bee96535bf7|9312120c> - chore(deps-dev): bump ts-node from 10.9.1 to 10.9.2 (#107)
pact-foundation/nestjs-pactGitHub
08/10/2026, 11:10 PMFixfile not foundtsconfig.json
Fixed
• FixedCommits • `057ac1b` 10.9.2 • `c8805d5` Update package lock • `99862f7` Bump swc dependency • `cdc4e88` Ignore test files in build schema • `08cdfb0` Backport swc fixes on main • `9639daa` Ignore test files in build • `cc1a503` Fixfile not found on latest TypeScript version (TypeStrong/ts-node#2091)tsconfig.json
tsconfig.json not found with TS >= 5.3 (#2091)
• See full diff in compare view
Dependabot compatibility score
You can trigger a rebase of this PR by commenting @dependabot rebase.
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.pact-foundation/nestjs-pact
GitHub
08/10/2026, 11:15 PM<https://github.com/pact-foundation/pact-js-cli/tree/main|main> by JP-Ellis
<https://github.com/pact-foundation/pact-js-cli/commit/cea521785d7cfe0c9dc4ec7a96bbef2cd8c2cb71|cea52178> - chore(deps): update dependency @types/node to v24.13.3 (#161)
pact-foundation/pact-js-cliGitHub
08/10/2026, 11:15 PMGitHub
08/10/2026, 11:15 PM<https://github.com/pact-foundation/pact-js-cli/tree/main|main> by JP-Ellis
<https://github.com/pact-foundation/pact-js-cli/commit/69f1bb215ef8b600f37c6ad4cfbdfc2c81b5ccbc|69f1bb21> - chore(deps): update dependency semver to v7.8.5 (#162)
pact-foundation/pact-js-cliGitHub
08/10/2026, 11:15 PMGitHub
08/10/2026, 11:15 PM<https://github.com/pact-foundation/pact-js-cli/tree/main|main> by JP-Ellis
<https://github.com/pact-foundation/pact-js-cli/commit/9f07349a94dba5a8a53b8a947f6700d688c85e62|9f07349a> - chore(deps): update dependency prettier to v3.9.6 (#163)
pact-foundation/pact-js-cliGitHub
08/10/2026, 11:15 PM<https://github.com/pact-foundation/pact-js-cli/tree/main|main> by JP-Ellis
<https://github.com/pact-foundation/pact-js-cli/commit/8dd9a1b3a9c0a42e085137aa272db8c632035fb8|8dd9a1b3> - chore(deps): update actions/checkout action to v7 (#164)
pact-foundation/pact-js-cliGitHub
08/10/2026, 11:15 PM<> from an inline link or image with an empty URL and a title, as this removal would change its interpretation.
<!-- Input -->
[link](<> "title")
<!-- Prettier 3.9.4 -->
[link]( "title")
<!-- Prettier 3.9.5 -->
[link](<> "title")
Less: Remove extra spaces after [ in map lookups (#19503 by @kovsu)
// Input
.foo {
color: #theme[ primary];
color: #theme[@​name];
color: #theme[@​@​name];
}
// Prettier 3.9.4
.foo {
color: #theme[ primary];
color: #theme[ @​name];
color: #theme[ @​@​name];
}
// Prettier 3.9.5
.foo {
color: #theme[primary];
color: #theme[@​name];
color: #theme[@​@​name];
}
CSS: Prevent addition space in type() with + (#19516 by @bigandy)
This fixes the addition space before + in CSS type() declaration. For example type(<number>+) was being converted into type(<number> +) which is invalid CSS and does not work.
/* Input */
div {
border-radius: attr(br type(<length>+));
}
/* Prettier 3.9.4 */
div {
border-radius: attr(br type(<length> +));
}
/* Prettier 3.9.5 */
div {
border-radius: attr(br type(<length>+));
}
Less: Remove spaces between merge markers and colons (#19517 by @kovsu)
// Input
a {
box-shadow + : 0 0 1px #​000;
}
// Prettier 3.9.4
a {
box-shadow+ : 0 0 1px #​000;
}
// Prettier 3.9.5
a {
box-shadow+: 0 0 1px #​000;
}
Markdown: Preserve wiki links with aliases (#19527 by @kovsu)
<!-- Input -->
[[Foo:Bar]]
<!-- Prettier 3.9.4 -->
[[Foo]]
<!-- Prettier 3.9.5 -->
[[Foo:Bar]]
TypeScript: Fix comments being dropped on shorthand type import/export specifiers (#19565 by @kirkwaiblinger)
// Input
export { type /* comment */ T } from "foo";
import { type /* comment */ T } from "foo";
// Prettier 3.9.4
Error: Comment "comment" was not printed. Please report this error!
// Prettier 3.9.5
export { type /* comment */ T } from "foo";
import { type /* comment */ T } from "foo";
*Miscellaneous: Preserving comments' placement property (<https:/…
pact-foundation/pact-js-cliGitHub
08/10/2026, 11:15 PM<https://github.com/pact-foundation/pact-js-cli/tree/main|main> by JP-Ellis
<https://github.com/pact-foundation/pact-js-cli/commit/d19e8d2f530e955ce20d7c5d03bd3aef2beebb06|d19e8d2f> - chore(deps-dev): bump js-yaml from 4.1.1 to 4.3.0 (#165)
pact-foundation/pact-js-cliGitHub
08/10/2026, 11:15 PM4.3.0 - 2026-06-27
Added
• [backport] Added(10000) loader option to limit the total number of keys processed by YAML merge (maxTotalMergeKeys) across one<</load()call.loadAll()
Fixed
• Restore umd builds back to es5.
Removed
• [backport]replaced withmaxMergeSeqLengthfor limiting YAML merge processing.maxTotalMergeKeys
[4.2.0] - 2026-06-01
Added
• Addedwith notes about processing untrusted YAML.docs/safety.md
• Added(100) loader option. Not a problem, but gives a better exception instead of RangeError on stack overflow.maxDepth
• Added(20) loader option. Not a problem aftermaxMergeSeqLengthfix, but an additional restriction for safety.merge
• Added sourcemaps tobuilds.dist/
Changed
• Stop resolving numbers with underscores as numeric scalars, #627.
• Switched dev toolchains to Vite / neostandard.
• Updated demo.
• Reorganized tests.
•files are no longer kept in the repository.dist/
Fixed
• Fix parsing of properties on the first implicit block mapping key, #62.
• Fix trailing whitespace handling when folding flow scalar lines, #307.
• Reject top-level block scalars without content indentation, #280.
• Ensure numbers survive round-trip, #737.
• Fix test coverage for issue #221.
• Fix flow scalar trailing whitespace folding, #307.
• Fix digits in YAML named tag handles.
Security
• Fix potential DoS via quadratic complexity in merge - deduplicate repeated elements (makes sense for malformed files > 10K).
[3.14.2] - 2025-11-15
Security
• Backported v4.1.1 fix to v3Commits • `33d05b5` 4.3.0 released • `663bfab` Drop demo publish, to not override new v5 one. • `1cb8c7b` Add v4-legacy tag for publish • `02f27af` Restore umd builds back to es5 • `8be84ed` Fix es5 compatibility • `59423c6` Replace
maxMergeSeqLength option with maxTotalMergeKeys (more robust). Ba...
• `6842ef6` doc polish
• `590dbab` 4.2.0 released
• `f944dc5` Add package.json funding field
• `f692719` Changelog update
• Additional commits viewable in compare view
Dependabot compatibility score
You can trigger a rebase of this PR by commenting @dependabot rebase.
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.pact-foundation/pact-js-cli
GitHub
08/10/2026, 11:15 PMGitHub
08/10/2026, 11:16 PM<https://github.com/pact-foundation/pact-js-cli/tree/main|main> by JP-Ellis
<https://github.com/pact-foundation/pact-js-cli/commit/e721f71161016c3fe4d096c8dfe8d5d8f87c1ff5|e721f711> - chore(deps): update dependency commit-and-tag-version to v13 (#172)
pact-foundation/pact-js-cliGitHub
08/10/2026, 11:34 PMbrace-expansion from 1.1.12 to 1.1.18
Release notes
Sourced from brace-expansion's releases.
v1.1.15
• Backport v5.0.6 change to v1 (#111) 0b09384
---
juliangruber/brace-expansion@v1.1.14...v1.1.15Commits • `758fcd6` 1.1.18 • `27fbeed` Merge commit from fork • `5c57cc2` 1.1.17 • `d757f1d` npm ignore
.claude
• `cb4b9e4` fix: backport GHSA-mh99-v99m-4gvg (#129)
• `447763a` 1.1.16
• `d74e630` fix: v1 backport for CVE-2026-13149 (#122)
• `2203f4f` 1.1.15
• `0b09384` Backport v5.0.6 change to v1 (#111)
• `10c05fc` 1.1.14
• Additional commits viewable in compare view
Updates brace-expansion from 2.0.2 to 2.1.4
Release notes
Sourced from brace-expansion's releases.
v1.1.15
• Backport v5.0.6 change to v1 (#111) 0b09384
---
juliangruber/brace-expansion@v1.1.14...v1.1.15Commits • `758fcd6` 1.1.18 • `27fbeed` Merge commit from fork • `5c57cc2` 1.1.17 • `d757f1d` npm ignore
.claude
• `cb4b9e4` fix: backport GHSA-mh99-v99m-4gvg (#129)
• `447763a` 1.1.16
• `d74e630` fix: v1 backport for CVE-2026-13149 (#122)
• `2203f4f` 1.1.15
• `0b09384` Backport v5.0.6 change to v1 (#111)
• `10c05fc` 1.1.14
• Additional commits viewable in compare view
Updates brace-expansion from 5.0.4 to 5.0.9
Release notes
Sourced from brace-expansion's releases.
v1.1.15
• Backport v5.0.6 change to v1 (#111) 0b09384
---
juliangruber/brace-expansion@v1.1.14...v1.1.15Commits • `758fcd6` 1.1.18 • `27fbeed` Merge commit from fork • `5c57cc2` 1.1.17 • `d757f1d` npm ignore
.claude
• `cb4b9e4` fix: backport GHSA-mh99-v99m-4gvg (#129)
• `447763a` 1.1.16
• `d74e630` fix: v1 backport for CVE-2026-13149 (#122)
• `2203f4f` 1.1.15
• `0b09384` Backport v5.0.6 change to v1 (#111)
• `10c05fc` 1.1.14
• Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
pact-foundation/pact-js-cliGitHub
08/10/2026, 11:35 PM4.3.1 - 2026-07-31
Security
• [backport] Remove quadratic complexity fromCommits • `86e91b8` 4.3.1 released • `c3cc4b0` Backport quadratic complexity fix for !!omap • See full diff in compare view Dependabot compatibility score Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commentingduplicate key detection.!!omap
@dependabot rebase.
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
pact-foundation/pact-js-cliGitHub
08/11/2026, 9:13 AMGitHub
08/11/2026, 9:29 AMnavigator not defined ReferenceError (#642) `4ebb62d`
`v5.4.0`
Compare Source
• Update CIRCLECI environments to return level 3 color support `f838120`
`v5.3.0`
Compare Source
• Add sideEffects field to package.json `5aafc0a`
• Add support for Gitea Actions (#603) `29b8569`
`v5.2.0`
Compare Source
• Improve Deno compatibility (#579) `7443e9f`
• Detect true-color support for GitHub Actions (#579) `7443e9f`
• Detect true-color support for Kitty terminal (#579) `7443e9f`
• Fix test for Azure DevOps environment (#579) `7443e9f`
`v5.1.2`
Compare Source
• Fix exported styles names (#569) `a34bcf6`
`v5.1.1`
Compare Source
• Improved the names of exports introduced in 5.1.0 (#567) `6e0df05`
• We of course preserved the old names.
`v5.1.0`
Compare Source
• Expose style names (#566) `d7d7571`
`v5.0.1`
Compare Source
• Add main field to package.json for backwards compatibility with some developer tools `85f7e96`
`v5.0.0`
Compare Source
Breaking
• *This packa…
pact-foundation/pact-jsGitHub
08/11/2026, 9:36 AMGitHub
08/11/2026, 9:31 PMGitHub
08/12/2026, 12:06 AMGitHub
08/13/2026, 8:15 PMGitHub
08/14/2026, 5:14 PM{@const} tags and recommends declaration tags with $derived().
Invalid:
{#each boxes as box}
{@const area = box.width * box.height}
<p>{area}</p>
{/each}
Valid:
{#each boxes as box}
{const area = $derived(box.width * box.height)}
<p>{area}</p>
{/each}
• #11252 `d5f5704` Thanks @Turtle-Hwan! - Fixed #11250: `useAwait` no longer reports async functions that contain an await using declaration.
• #11143 `6be7be1` Thanks @vznh! - Fixed #11017: `noUselessUndefined` no longer reports return undefined when the enclosing function has a return type annotation other than undefined or void.
• #11234 `caefe39` Thanks @subotac! - Fixed #11228: CSS block comments between a declaration colon and value now preserve their source indentation.
:root {
--font-stack:
-/* comment */
+ /* comment */
system-ui;
}
• #11285 `bca1f73` Thanks @denbezrukov! - Fixed #11280: CSS formatting keeps comments inside functional pseudo-classes and pseudo-elements instead of moving them before the function name.
-:/* comment */ where(div) {}
+:where(/* comment */ div) {}
• #11080 `af16a0b` Thanks @dyc3! - HTML style attribute values are now parsed as CSS. All Biome CSS lint rules are applied to the style attributes.
• <https:…
pact-foundation/pact-js-coreGitHub
08/15/2026, 5:36 AM