Skip to content

chore(deps-dev): bump jasmine-core from 5.1.1 to 6.3.0 in /build#41621

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/build/jasmine-core-6.3.0
Open

chore(deps-dev): bump jasmine-core from 5.1.1 to 6.3.0 in /build#41621
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/build/jasmine-core-6.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 14, 2026

Copy link
Copy Markdown
Contributor

Bumps jasmine-core from 5.1.1 to 6.3.0.

Release notes

Sourced from jasmine-core's releases.

6.3.0

Please see the release notes.

v6.2.0

Please see the release notes.

v6.1.0

Please see the release notes.

v6.0.1

Please see the release notes.

v6.0.0

Please see the release notes.

v6.0.0-beta.1

Please see the release notes.

v6.0.0-beta.0

Please see the release notes.

v6.0.0-alpha.2

Please see the release notes.

v6.0.0-alpha.1

Please see the release notes.

v6.0.0-alpha.0

Please see the release notes.

v5.13.0

Please see the release notes.

v5.12.1

Please see the release notes.

v5.12.0

Please see the release notes.

v5.11.0

Please see the release notes.

v5.10.0

Please see the release notes.

v5.9.0

Please see the release notes.

v5.8.0

Please see the release notes.

... (truncated)

Commits
  • c2ead64 Bump version to 6.3.0
  • 05fd5cb Bump version to 6.2.1
  • f1a4ccf Improve spec name
  • f41dc6a Merge branch 'fix/xdescribe-pending-reason' of github.com:Aryannaik-max/jasmine
  • 91a9e97 test: ensure pendingReason survives reset in xdescribe test
  • ddde63a fix: add pendingReason message for xdescribe
  • fc88950 Run eslint and prettier after tests even if ignore-scripts=true
  • 6166a03 Check in package-lock.json
  • 031ffc8 Copy 7.0.0-pre.1 release notes from branch
  • b05ea4b Bump version to 6.2.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [jasmine-core](https://github.com/jasmine/jasmine) from 5.1.1 to 6.3.0.
- [Release notes](https://github.com/jasmine/jasmine/releases)
- [Changelog](https://github.com/jasmine/jasmine/blob/main/RELEASE.md)
- [Commits](jasmine/jasmine@v5.1.1...v6.3.0)

---
updated-dependencies:
- dependency-name: jasmine-core
  dependency-version: 6.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@update-docs

update-docs Bot commented Jun 14, 2026

Copy link
Copy Markdown

Thanks for opening this pull request! The maintainers of this repository would appreciate it if you would create a changelog item based on your changes.

@DeepDiver1975 DeepDiver1975 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

Overview

Dependabot bump of jasmine-core from 5.1.1 to 6.3.0 (major version) in the /build dev-dependency tree. Changes touch package.json and yarn.lock only — no production code affected.

Analysis

  • Major version jump (5 → 6): Jasmine 6.x introduced breaking changes. The PR description links to release notes but does not surface what broke. Key breaking change from the Jasmine 6.0.0 release: the jasmine binary is no longer included in jasmine-core; a separate jasmine package is required for CLI usage. If the project runs Jasmine via the CLI (rather than through karma), this will silently break the test runner.
  • karma-jasmine compatibility: jasmine-sinon 0.4.0 and karma-jasmine in the lock file should be checked for Jasmine 6 compatibility. jasmine-sinon 0.4.0 was last released in 2016 and may not work with Jasmine 6's updated matchers API.
  • Diff is correct: package.json pin updated to ^6.3.0, lock file entry replaced with the new resolved hash and integrity. No extra files touched.

Concerns

  1. Test suite compatibility is unknown from the diff alone. Verify that CI passes with this change before merging — particularly the karma-based test run, since the karma-jasmine adapter must support Jasmine 6.
  2. jasmine-sinon 0.4.0 is very old and likely incompatible with Jasmine 6's updated jasmine.matchersUtil API. If any tests use jasmine-sinon matchers (e.g., expect(spy).toHaveBeenCalledWith(...)), they may silently pass or fail unexpectedly.

Summary

Mechanically correct dependency bump. Safe to merge only after confirming the full JS test suite passes in CI — the major version bump carries real compatibility risk with the existing jasmine-sinon version.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant