[Snyk] Upgrade @testing-library/user-event from 13.5.0 to 14.6.1 by LCSOGthb · Pull Request #11 · LCSOGthb/AirMerge

LCSOGthb · 2026-01-12T09:39:59Z

Snyk has created this PR to upgrade @testing-library/user-event from 13.5.0 to 14.6.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 56 versions ahead of your current version.
The recommended version was released a year ago.

Release notes

Package name: @testing-library/user-event

14.6.1 - 2025-01-21
14.6.1 (2025-01-21)

Bug Fixes
- correct description for delay option (#1175) (2edf14d)
- keyboard: add ContextMenu to defaultKeyMap (#1079) (3e471d1)
- keyboard: add brackets to defaultKeyMap (#1226) (543ecb0)
- keyboard: walk through radio group per arrow keys (#1049) (bf8111c)
- pointer: dispatch mouse events if pointerdown is defaultPrevented (#1121) (f681f7b)
- pointer: set button and buttons properties on PointerEvent (#1219) (6614f72)
- pointer: use 1 as default value for PointerEvent.width and PointerEvent.height (#1224) (f0468d0)
- prevent click event loop on form-associated custom element (#1238) (465fc7e)
- prevent click event on non-focusable control (#1130) (e429094)
- upload: apply accept filter more leniently (#1064) (a344ad4)
14.6.0 - 2025-01-15
14.6.0 (2025-01-15)

Features
- dispatch FocusEvent in hidden documents (#1252) (1ed8b15)
Bug Fixes
- clipboard: await DataTransferItem.getAsString() callback (#1251) (7b11b0e)
- event: assign pointer coords to MouseEvent (#1039) (8528972)
- pointer: check PointerCoords.x in isDifferentPointerPosition (#1216) (75edef5)
- pointer: check all fields of PointerCoords in isDifferentPointerPosition() (#1229) (5f3d28f)
14.5.2 - 2023-12-29
14.5.2 (2023-12-29)

Bug Fixes
- remove interop and deep DTL imports (6a3c896)
14.5.1 - 2023-09-15
14.5.1 (2023-09-15)

Bug Fixes
- incorrect default import from @ testing-library/dom (#1162) (d7483f0)
14.5.0 - 2023-09-14
14.5.0 (2023-09-14)

Bug Fixes
- exports: add a named export for userEvent (4019cee), closes #1146
Features
- types: Add additional type exports for UserEvent & Options (#1112) (da00e8d)
14.4.3 - 2022-08-09
14.4.3 (2022-08-09)

Bug Fixes
- build: add types field in exports (#1029) (5bed8c6)
- remove circular dependencies (#1027) (1aa2027)
14.4.2 - 2022-08-04
14.4.1 - 2022-08-02
14.4.0 - 2022-08-02
14.3.0 - 2022-07-19
14.2.6 - 2022-07-18
14.2.5 - 2022-07-15
14.2.4 - 2022-07-15
14.2.3 - 2022-07-14
14.2.2 - 2022-07-14
14.2.1 - 2022-06-17
14.2.0 - 2022-05-12
14.1.1 - 2022-04-17
14.1.0 - 2022-04-11
14.0.4 - 2022-04-01
14.0.3 - 2022-03-31
14.0.2 - 2022-03-31
14.0.1 - 2022-03-31
14.0.0 - 2022-03-29
14.0.0-beta.14 - 2022-03-24
14.0.0-beta.13 - 2022-03-04
14.0.0-beta.12 - 2022-03-01
14.0.0-beta.11 - 2022-02-10
14.0.0-beta.10 - 2022-02-08
14.0.0-beta.9 - 2022-02-07
14.0.0-beta.8 - 2022-01-16
14.0.0-beta.7 - 2022-01-05
14.0.0-beta.6 - 2022-01-01
14.0.0-beta.5 - 2021-12-31
14.0.0-beta.4 - 2021-12-30
14.0.0-beta.3 - 2021-12-13
14.0.0-beta.2 - 2021-12-07
14.0.0-beta.1 - 2021-11-28
14.0.0-alpha.18 - 2021-11-28
14.0.0-alpha.17 - 2021-11-25
14.0.0-alpha.16 - 2021-11-25
14.0.0-alpha.15 - 2021-11-25
14.0.0-alpha.14 - 2021-11-17
14.0.0-alpha.13 - 2021-11-17
14.0.0-alpha.12 - 2021-11-16
14.0.0-alpha.11 - 2021-11-15
14.0.0-alpha.10 - 2021-11-15
14.0.0-alpha.9 - 2021-11-15
14.0.0-alpha.8 - 2021-11-11
14.0.0-alpha.7 - 2021-11-09
14.0.0-alpha.6 - 2021-11-03
14.0.0-alpha.5 - 2021-10-30
14.0.0-alpha.4 - 2021-10-29
14.0.0-alpha.3 - 2021-10-25
14.0.0-alpha.2 - 2021-10-22
14.0.0-alpha.1 - 2021-10-21
13.5.0 - 2021-10-18

from @testing-library/user-event GitHub release notes

Important

Warning: This PR contains a major version upgrade, and may be a breaking change.
Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @testing-library/user-event from 13.5.0 to 14.6.1. See this package in npm: @testing-library/user-event See this project in Snyk: https://app.snyk.io/org/lcsogthb/project/c2b95214-2aa7-47c9-b51d-ab7a1c993cf2?utm_source=github&utm_medium=referral&page=upgrade-pr

vercel · 2026-01-12T09:40:01Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
airmerge	Error		Jan 21, 2026 1:04pm

coderabbitai · 2026-01-12T09:40:06Z

📝 Walkthrough

Summary by CodeRabbit

Chores
- Updated testing framework dependencies to enhance test infrastructure and maintain compatibility with current development standards.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

Walkthrough

Updated @testing-library/user-event dependency from ^13.5.0 to ^14.6.1 in the aq-dashboard package configuration. This modifies test utility versions without affecting production code or runtime behavior.

Changes

Cohort / File(s)	Summary
Dependency Update `aq-dashboard/package.json`	Bumped `@testing-library/user-event` from ^13.5.0 to ^14.6.1

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Suggested labels

dependencies

Poem

🐰 A tiny hop through package.json's hall,
Where testing libraries hear the call,
From version thirteen to fourteen's grace,
User-event takes its rightful place!
No runtime fears, just tests made bright,
Another dependency set just right! ✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and specifically describes the main change: upgrading `@testing-library/user-event` from version 13.5.0 to 14.6.1, which is the sole modification in this pull request.
Description check	✅ Passed	The description is directly related to the changeset, explaining that Snyk created this PR to upgrade `@testing-library/user-event` and providing detailed context including release notes, version comparisons, and warnings about the major version upgrade.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

deepsource-io · 2026-01-12T09:40:36Z

Here's the code health analysis summary for commits 68d7183..0c62365. View details on DeepSource ↗.

Analysis Summary

Analyzer	Status	Summary	Link
Ruby	✅ Success		View Check ↗
Rust	✅ Success		View Check ↗
JavaScript	✅ Success		View Check ↗
Scala	✅ Success		View Check ↗
Shell	✅ Success		View Check ↗
Secrets	✅ Success		View Check ↗
Terraform	✅ Success		View Check ↗
Swift	✅ Success		View Check ↗
SQL	✅ Success		View Check ↗
Test coverage	⚠️ Artifact not reported	Timed out: Artifact was never reported	View Check ↗
C & C++	✅ Success		View Check ↗
C#	✅ Success		View Check ↗
Ansible	✅ Success		View Check ↗

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

LCSOGthb · 2026-01-21T13:04:32Z

@coderabbitai review

coderabbitai · 2026-01-21T13:04:38Z

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

LCSOGthb · 2026-01-21T13:06:40Z

@coderabbitai review

coderabbitai · 2026-01-21T13:06:49Z

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

coderabbitai

Actionable comments posted: 1

🤖 Fix all issues with AI agents

In `@aq-dashboard/package.json`:
- Line 10: The package "@testing-library/user-event" (and any other
"@testing-library/*" entries) is incorrectly listed in dependencies; move these
testing libraries into devDependencies in package.json so they are not installed
in production. Edit package.json to remove "@testing-library/user-event" from
the "dependencies" object and add it (and any other `@testing-library` packages)
to "devDependencies" with the same version string; ensure package-lock/yarn.lock
is updated by reinstalling or running the lockfile update after the change. Also
keep in mind when tests are added that userEvent v14 requires calling
userEvent.setup() before interactions.

🧹 Nitpick comments (1)

aq-dashboard/package.json (1)
7-10: Consider moving testing libraries to devDependencies.

The @testing-library/* packages (lines 7–10) are test utilities and should typically reside in devDependencies rather than dependencies, as they are not required at runtime in production builds.
Suggested change

Move these entries from dependencies to devDependencies:
  "dependencies": {
-   "@testing-library/dom": "^10.4.0",
-   "@testing-library/jest-dom": "^6.6.3",
-   "@testing-library/react": "^16.3.0",
-   "@testing-library/user-event": "^14.6.1",
    "@types/jest": "^27.5.2",
    ...
  },
  "devDependencies": {
+   "@testing-library/dom": "^10.4.0",
+   "@testing-library/jest-dom": "^6.6.3",
+   "@testing-library/react": "^16.3.0",
+   "@testing-library/user-event": "^14.6.1",
    "@types/leaflet": "^1.9.20",
    ...
  }

aq-dashboard/package.json

vercel bot deployed to Preview January 12, 2026 09:42 View deployment

LCSOGthb self-assigned this Jan 21, 2026

Merge branch 'main' into snyk-upgrade-751199cd2bf70e87e0f5dfec516f3075

0c62365

vercel bot had a problem deploying to Preview January 21, 2026 13:04 Failure

coderabbitai bot added the dependencies Pull requests that update a dependency file label Jan 21, 2026

coderabbitai bot requested changes Jan 21, 2026

View reviewed changes

aq-dashboard/package.json Show resolved Hide resolved

coderabbitai bot approved these changes Jan 21, 2026

View reviewed changes

LCSOGthb merged commit ec17f66 into main Jan 21, 2026
28 of 34 checks passed

LCSOGthb deleted the snyk-upgrade-751199cd2bf70e87e0f5dfec516f3075 branch January 21, 2026 13:20

Conversation

LCSOGthb commented Jan 12, 2026

Snyk has created this PR to upgrade @testing-library/user-event from 13.5.0 to 14.6.1.

14.6.1 (2025-01-21)

Bug Fixes

14.6.0 (2025-01-15)

Features

Bug Fixes

14.5.2 (2023-12-29)

Bug Fixes

14.5.1 (2023-09-15)

Bug Fixes

14.5.0 (2023-09-14)

Bug Fixes

Features

14.4.3 (2022-08-09)

Bug Fixes

Uh oh!

vercel bot commented Jan 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

coderabbitai bot commented Jan 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Walkthrough

Changes

Estimated code review effort

Suggested labels

Poem

Uh oh!

deepsource-io bot commented Jan 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Analysis Summary

Uh oh!

LCSOGthb commented Jan 21, 2026

Uh oh!

coderabbitai bot commented Jan 21, 2026

Uh oh!

LCSOGthb commented Jan 21, 2026

Uh oh!

coderabbitai bot commented Jan 21, 2026

Uh oh!

coderabbitai bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

vercel bot commented Jan 12, 2026 •

edited

Loading

coderabbitai bot commented Jan 12, 2026 •

edited

Loading

deepsource-io bot commented Jan 12, 2026 •

edited

Loading