Skip to content

build(deps-dev): bump @microsoft/rush from 5.178.1 to 5.179.0 in the dev group - #334

Merged
nev21 merged 3 commits into
mainfrom
dependabot/npm_and_yarn/dev-7045aa4565
Sep 11, 2026
Merged

build(deps-dev): bump @microsoft/rush from 5.178.1 to 5.179.0 in the dev group#334
nev21 merged 3 commits into
mainfrom
dependabot/npm_and_yarn/dev-7045aa4565

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev group with 1 update: @microsoft/rush.

Updates @microsoft/rush from 5.178.1 to 5.179.0

Changelog

Sourced from @​microsoft/rush's changelog.

5.179.0

Sat, 05 Sep 2026 00:15:08 GMT

Minor changes

  • Add early validation to rush install/rush update that immediately fails with a meaningful error message if an undeclared cycle is detected among workspace packages, specifying the cycle path.
  • Add a per-iteration, host-driven runner persist policy so IPC runners can be kept hot or torn down per operation per iteration, instead of fixing persistence at plugin construction.
  • Add a new provideNpmrcCredentialsViaEnvironment experiment for PNPM 10.34.2 through 10.x and PNPM 11.5.3 through versions earlier than 11.6.0. For these versions, Rush expands ${VAR} tokens from the generated .npmrc, passing credentials using npm_config_* environment variables instead of writing them to disk. PNPM 11.6.0 and newer should instead receive URL-scoped pnpm_config_//... credentials directly from CI.
  • Add a new trimRushEnvironmentVariablesForOperations experiment that, when enabled, omits environment variables whose names begin with RUSH_ from the environment forwarded to operation processes (e.g. "build", "test").

Patches

  • In PnpmShrinkwrapFile getIntegrityForImporter, remove the external filter and include workspace-local link: dependencies by recursing into their importer entries, so shrinkwrap-deps.json hashes cover the full dependency tree.
  • Embed the generated zero-dependency Rush reporter bootstrap protocol in the install-run-rush bundle.
  • Add the rush-reporter package dependency to the Rush frontend and engine without changing default output.
  • Fix cross-subspace workspace:* dependency failures with pnpm 11.
  • Fix rush change --verify to ignore peer dependency updates that accompany package version bumps.
  • Fix file: dependency context resolution to use canonical dependency keys for pnpm v9/v10.
  • Allow Rush plugin manifests to declare an optional supported Rush version range.
  • Allow Ctrl+A and Command+A to select text in Rush serve dashboard fields.
  • Add an optional internal IOperationGraphEventSink dual-emit hook to OperationGraph/OperationExecutionRecord: structured operation registration/status/header/activity events and an id-tagged per-operation raw output tap, with no change to existing terminal output.

Updates

  • Update class field declarations for ES2022 emit semantics.
  • Add support for Node 26.
  • Require Node.js 20.9 or newer for the Rush bootstrap and runtime.
Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @​microsoft/rush since your current version.


Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
@microsoft/rush [>= 5.144.a, < 5.145]

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev group with 1 update: [@microsoft/rush](https://github.com/microsoft/rushstack/tree/HEAD/apps/rush).


Updates `@microsoft/rush` from 5.178.1 to 5.179.0
- [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/rush/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rushstack/commits/HEAD/apps/rush)

---
updated-dependencies:
- dependency-name: "@microsoft/rush"
  dependency-version: 5.179.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 10, 2026
@dependabot
dependabot Bot requested review from a team as code owners September 10, 2026 20:34
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 10, 2026
@codecov

codecov Bot commented Sep 10, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.30%. Comparing base (7e4edb7) to head (c58de46).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #334   +/-   ##
=======================================
  Coverage   95.30%   95.30%           
=======================================
  Files         137      137           
  Lines        6388     6388           
  Branches     1679     1640   -39     
=======================================
  Hits         6088     6088           
  Misses        300      300           
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@nevware21-bot nevware21-bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved by nevware21-bot

@nev21
nev21 merged commit 5d5ee0b into main Sep 11, 2026
10 checks passed
@nev21
nev21 deleted the dependabot/npm_and_yarn/dev-7045aa4565 branch September 11, 2026 14:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants