Skip to content

build(deps-dev): bump msw from 2.6.4 to 3.0.2 in /console - #39655

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/console/msw-3.0.2
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/console/msw-3.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 7, 2026

Copy link
Copy Markdown
Contributor

Bumps msw from 2.6.4 to 3.0.2.

Release notes

Sourced from msw's releases.

v3.0.2 (2026-10-03)

Bug Fixes

  • vite: support virtual:msw imports in vitest (#2802) (e73c381e3adc0848fcf9a7ef291b614b06a0d92b) @​kettanaito

v3.0.1 (2026-09-30)

Bug Fixes

  • treat CONNECT requests as the transport mechanism (#2796) (7cad86a03b0ddb2efdec96ce8a49b0ed07d9f4dc) @​kettanaito

v3.0.0 (2026-09-28)

⚠️ BREAKING CHANGES

  • MSW is now ESM-only (#2765).
  • Deprecate support for Node.js v18 and v20 (#2729). The minimal supported Node.js version is v22.
  • msw/native is removed in favor of @msw/react-native.
  • Require TypeScript 5.9 as the minimal version.
  • Deprecate support for TypeScript 5.1 and 5.2 (#2730)
  • worker.stop() returns a Promise (#2724). Awaiting it is relevant only for in-flight critical scenarios.
  • graphql is now exported as msw/graphql (#2691). GraphQL is now handled as a proper optional peer dependency.
  • Removes the handleRequest() utility. Please use the defineNetwork() API instead.
  • GraphQLLinkHandlers type has been renamed to GraphQLLink.
  • The file:// requests now throw in Node.js as they normally do (not supported by fetch).
  • The Content-Length request header is now removed by bypass().
  • HTTP-to-WebSocket upgrade requests performed via fetch() now throw in Node.js as they normally do (not supported by fetch).
  • Cookies are no longer managed in Node.js for better compatibilty. Instead, whatever is the default behavior of your environment that's the cookie behavior you get. This has no effect on the browser.
  • WebSocket connection life cycle event has been renamed to websocket:connection (#2783).
  • onUnhandledRequest option has been renamed to onUnhandledFrame.
  • The library no longer patches setTimeout to circumvent fake timers in test runners. You should advance the fake timers normally for delayed mocked responses to resolve.
  • The library no longer returns a mocked cookie string on request.headers.get('cookie') in the handlers. It returns null in all environments. Please use the cookies resolver argument to have cookie-based logic.

Features

  • Supports Node.js v24 and v26.
  • Supports TypeScript v6.0 and v7.0.
  • You can import individual utilities, like delay or passthrough, from the new msw/utils entrypoint for smaller footprint on your bundle.
  • Support GraphQL v17.0.
  • Support intercepting page navigations and form submissions (#2721).
  • Support GraphQL subscriptions (#285, #2763).
  • Migrate from path-to-regexp to @msw/url (#2678).
  • Remove the following dependencies:
    • graphql
    • path-to-regexp
    • picocolors
    • statuses

... (truncated)

Commits
  • a7fa5f0 chore(release): v3.0.2
  • 01b1084 docs: feature "msw/http" imports in README examples
  • e73c381 fix(vite): support virtual:msw imports in vitest (#2802)
  • 6d6aef1 chore(release): v3.0.1
  • 7cad86a fix: treat CONNECT requests as the transport mechanism (#2796)
  • 975cb45 docs: remove spacing before logo, update description
  • b6b50f0 chore(release): v3.0.0
  • 32cf523 chore: run release job on ubuntu-latest to unlock provenance
  • 2bb4342 feat!: v3.0.0 (#2692)
  • 85f4bf3 docs: add blacksmith mention (#2780)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for msw since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [msw](https://github.com/mswjs/msw) from 2.6.4 to 3.0.2.
- [Release notes](https://github.com/mswjs/msw/releases)
- [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md)
- [Commits](mswjs/msw@v2.6.4...v3.0.2)

---
updated-dependencies:
- dependency-name: msw
  dependency-version: 3.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added the A-dependencies Area: dependency upgrades label Oct 7, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 7, 2026 17:11
@dependabot
dependabot Bot requested a review from Alphadelta14 October 7, 2026 17:11
@dependabot dependabot Bot added the A-dependencies Area: dependency upgrades label Oct 7, 2026
@leedqin leedqin mentioned this pull request Oct 8, 2026
@leedqin

leedqin commented Oct 8, 2026

Copy link
Copy Markdown
Contributor

Superseded by #39684

@leedqin leedqin closed this Oct 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/console/msw-3.0.2 branch October 8, 2026 20:21
leedqin added a commit that referenced this pull request Nov 10, 2026
### Motivation

Supersedes #39655. Dependabot's version of this bump fails typecheck and
several unit tests.

### Description

msw is only used by tests.

- `request.clone()` now keeps the declared body type, where msw 2
returned a plain `Request` whose `json()` was `any`. The three SQL
handlers that destructure the body now declare it with `http.post<never,
ExtendedRequest>`.
- `HttpResponse` is now generic, so two pending handlers resolve a plain
`Response`.
- `onUnhandledRequest` is renamed to `onUnhandledFrame`. msw 3 ignores
the old name at runtime, so keeping it would let unhandled requests
reach the real network instead of erroring. `vitest.setup.ts` uses the
new name.
- msw 3 answers a few ticks later, so `AlterClusterModal`'s "closes the
modal on success" test now waits for `onClose` instead of checking right
after the click.

- **Test server:** msw 3 mocks Node's `fetch` at the socket level
(undici). When a test aborts an in-flight request, undici opens a
replacement socket it never writes to. msw passes that idle socket
through to the real network, and the next fetch can reuse it and fail
with `fetch failed`. That made a few tests flaky under CI load.
- `src/api/mocks/server.ts` now builds the server with msw's
`defineNetwork` and the interceptor that patches `fetch` directly, so
mocked requests never touch undici.
- This uses msw's experimental API, with a TODO to return to
`setupServer` once mswjs/interceptors#863 (the upstream fix, still a
draft) ships.
- With faster responses, one Object Explorer spinner test now holds its
request open, as its sibling tests already do.

msw 3 requires Node 22.12 or later. CI and the Volta pin run Node 26,
and #39683 updates `engines.node`.

### Verification

Existing tests, plus five consecutive full-suite runs on Node 26 (CI's
Node version) with no failures.

🤖 Generated with [Claude Code](https://claude.com/claude-code)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

A-dependencies Area: dependency upgrades

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant