Skip to content

chore(deps-dev): bump chai from 4.3.6 to 6.2.2 in /src/microsoft-trydotnet#106

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/src/microsoft-trydotnet/chai-6.2.2
Open

chore(deps-dev): bump chai from 4.3.6 to 6.2.2 in /src/microsoft-trydotnet#106
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/src/microsoft-trydotnet/chai-6.2.2

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 23, 2026

Bumps chai from 4.3.6 to 6.2.2.

Release notes

Sourced from chai's releases.

v6.2.2

What's Changed

New Contributors

Full Changelog: chaijs/chai@v6.2.1...v6.2.2

v6.2.1

What's Changed

New Contributors

Full Changelog: chaijs/chai@v6.2.0...v6.2.1

... (truncated)

Commits
  • 814172d chore(deps): update dependency esbuild to v0.27.2 (#1759)
  • b38c22b chore: add legal-comments=none option (#1756)
  • 180d4cc chore(deps): update dependencies to v9.39.2 (#1757)
  • 678cd00 chore(deps): update dependencies (#1755)
  • c8fb100 chore(deps): update dependency prettier to v3.7.3 (#1754)
  • d63c74e chore(deps): update dependency eslint-plugin-jsdoc to v61.4.1 (#1751)
  • 243bf86 fix: avoid BigInt literal in closeTo for runtime compat (#1748)
  • d8b0395 chore(deps): update actions/checkout action to v6 (#1749)
  • 7e1e247 build(deps): bump glob from 10.4.5 to 10.5.0 (#1747)
  • b25e5d8 chore(deps): update dependency eslint-plugin-jsdoc to v61.2.1 (#1746)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for chai since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file npm labels Feb 23, 2026
@dependabot dependabot bot had a problem deploying to BuildAndUploadImage February 23, 2026 17:11 Failure
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/src/microsoft-trydotnet/chai-6.2.2 branch from addcf67 to a308891 Compare February 23, 2026 21:38
@dependabot dependabot bot had a problem deploying to BuildAndUploadImage February 23, 2026 21:38 Failure
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/src/microsoft-trydotnet/chai-6.2.2 branch from a308891 to 08886ed Compare March 2, 2026 17:32
@dependabot dependabot bot had a problem deploying to BuildAndUploadImage March 2, 2026 17:32 Failure
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/src/microsoft-trydotnet/chai-6.2.2 branch from 08886ed to 07913ff Compare March 5, 2026 23:24
@dependabot dependabot bot temporarily deployed to BuildAndUploadImage March 5, 2026 23:24 Inactive
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/src/microsoft-trydotnet/chai-6.2.2 branch from 07913ff to d6ef1bd Compare March 5, 2026 23:24
@dependabot dependabot bot temporarily deployed to BuildAndUploadImage March 5, 2026 23:24 Inactive
@github-actions github-actions bot mentioned this pull request Mar 5, 2026
BenjaminMichaelis added a commit that referenced this pull request Mar 6, 2026
The GitHub MCP list_workflow_runs tool does not support head_sha
filtering, causing the agent to report 'No CI workflow runs exist'
for PRs with all-green CI. The check-runs approach was also unreliable
(only 2 raw API calls reached api.github.com during agent execution;
the rest were proxied through api.githubcopilot.com).

Replace both CI check instructions with a single reliable gate:
  mergeable_state === 'clean'

This field is already on the PR object (pull_requests toolset,
get_pull_request). GitHub computes it from all branch protection
checks. Confirmed: PR#112 and #106 show 'clean', PR#101 shows
'blocked' (failing CI) — exactly the right behavior.
BenjaminMichaelis added a commit that referenced this pull request Mar 6, 2026
The GitHub MCP list_workflow_runs tool does not support head_sha
filtering, causing the agent to report 'No CI workflow runs exist'
for PRs with all-green CI. The check-runs approach was also unreliable
(only 2 raw API calls reached api.github.com during agent execution;
the rest were proxied through api.githubcopilot.com).

Replace both CI check instructions with a single reliable gate:
  mergeable_state === 'clean'

This field is already on the PR object (pull_requests toolset,
get_pull_request). GitHub computes it from all branch protection
checks. Confirmed: PR#112 and #106 show 'clean', PR#101 shows
'blocked' (failing CI) — exactly the right behavior.

Fix CI gate: use pull_request_read get_check_runs instead of mergeable_state

mergeable_state is lazily computed and goes stale for inactive PRs.
The bulk list_pull_requests call never triggers recomputation, so old
Dependabot PRs always return 'unknown' — causing all PRs to be skipped.

Fix: use pull_request_read with method 'get_check_runs' (pull_requests
toolset) which directly returns check-run conclusions for the PR head
commit. Confirmed 9 check-runs (all success/skipped) for PR#112 and
PR#106 via this API. PR#101 has a failing check-run — correctly skipped.

Fix CI gate: use actions_list list_workflow_runs with branch filter

pull_request_read does not have a get_check_runs method — the agent was
silently falling back to get_status which queries the old commit-statuses
API (returns total_count=0 for GitHub Actions, which uses check-runs).

Fix: use actions_list with method list_workflow_runs, filtered by the
PR's head.ref branch. This is a supported MCP tool method and correctly
returns GitHub Actions workflow runs. Group by name, take latest per
workflow (highest run_number), require all to be completed success/skipped.

Verified: branch filter returns all 3 workflows for PR#106 and PR#112
with success conclusions. Also correctly surfaces old failures (run dotnet#213,
dotnet#230 on chai branch) while latest runs show success — 'latest per workflow'
logic handles re-runs correctly.
@BenjaminMichaelis
Copy link
Member

@dependabot rebase

Bumps [chai](https://github.com/chaijs/chai) from 4.3.6 to 6.2.2.
- [Release notes](https://github.com/chaijs/chai/releases)
- [Changelog](https://github.com/chaijs/chai/blob/main/History.md)
- [Commits](chaijs/chai@v4.3.6...v6.2.2)

---
updated-dependencies:
- dependency-name: chai
  dependency-version: 6.2.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/src/microsoft-trydotnet/chai-6.2.2 branch from d6ef1bd to 11dfd72 Compare March 6, 2026 01:42
@dependabot dependabot bot temporarily deployed to BuildAndUploadImage March 6, 2026 01:43 Inactive
@github-actions github-actions bot added the ai-approved-major-update AI-reviewed major dependency update safe to merge label Mar 6, 2026
@github-actions
Copy link

github-actions bot commented Mar 6, 2026

🤖 Automated Major Version Review — APPROVED

Package: chai
Ecosystem: npm
Version change: 4.3.6 → 6.2.2 (major bump, spanning v4→v5→v6)

Research Summary

Breaking Changes Analysis

chai v5.0.0:

  • ESM-only: Dropped CommonJS require('chai') support.
    • Impact assessment: Test files use import * as chai from "chai" and import { expect } from "chai" (ESM syntax). While TypeScript's "module": "commonjs" setting would normally compile these to require() calls, the CI ciTest step (which runs mocha test/**/*.specs.ts via ts-node/register) passed successfully with chai 6.2.2, confirming no runtime breakage.
  • Dropped Node.js < 18.
    • Impact assessment: CI uses Node.js 20, well above the minimum.

chai v6.0.0:

  • lib/*.js internal files removed; chai is now bundled into a single index.js.
    • Impact assessment: All test files in src/microsoft-trydotnet/test/ import only from "chai" (the top-level package), never from "chai/lib/*". This breaking change does not affect the repository.

Security Check

No security advisories were found for chai in the GitHub Advisory Database. There are no known vulnerabilities in chai 6.2.2.

Decision

✅ This major version update is safe to merge. CI checks pass (including the actual mocha test suite for microsoft-trydotnet), the diff contains only version file changes, the breaking changes do not affect this repository's usage of chai, and no security advisories exist for the new version.

Generated by Dependabot Major Version Reviewer ·

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ai-approved-major-update AI-reviewed major dependency update safe to merge dependencies Pull requests that update a dependency file npm

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant