Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 6, 2026

Bumps @microsoft/rush from 5.166.0 to 5.167.0.

Changelog

Sourced from @​microsoft/rush's changelog.

5.167.0

Thu, 05 Feb 2026 00:24:16 GMT

Updates

  • Add support for rush-pnpm approve-builds command to persist globalOnlyBuiltDependencies in pnpm-config.json
  • Filter npm-incompatible properties from .npmrc when npm is used with a configuration intended for pnpm or yarn, to eliminate spurious warnings during package manager installation.
  • Fix a longstanding issue where a package.json script could hang on Windows if it accessed STDIN under certain circumstances
  • Upgrade tar dependency from 6.2.1 to 7.5.6 to fix security vulnerability GHSA-8qq5-rm4j-mr97
Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
@microsoft/rush [>= 5.144.a, < 5.145]

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@microsoft/rush](https://github.com/microsoft/rushstack/tree/HEAD/apps/rush) from 5.166.0 to 5.167.0.
- [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/rush/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rushstack/commits/@microsoft/rush_v5.167.0/apps/rush)

---
updated-dependencies:
- dependency-name: "@microsoft/rush"
  dependency-version: 5.167.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 6, 2026
@codecov
Copy link

codecov bot commented Feb 6, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.03%. Comparing base (9b0b5bc) to head (16faa6d).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #431   +/-   ##
=======================================
  Coverage   99.03%   99.03%           
=======================================
  Files          19       19           
  Lines         727      727           
  Branches      183      183           
=======================================
  Hits          720      720           
  Misses          7        7           
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@nev21 nev21 merged commit ace21cf into main Feb 6, 2026
12 checks passed
@nev21 nev21 deleted the dependabot/npm_and_yarn/microsoft/rush-5.167.0 branch February 6, 2026 04:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants