Skip to content

ISW-5893: Routine npm package updates for the repo, not components#2002

Open
EdwinGuzman wants to merge 5 commits into
developmentfrom
ISW-5893/npm-updates
Open

ISW-5893: Routine npm package updates for the repo, not components#2002
EdwinGuzman wants to merge 5 commits into
developmentfrom
ISW-5893/npm-updates

Conversation

@EdwinGuzman

@EdwinGuzman EdwinGuzman commented Jul 6, 2026

Copy link
Copy Markdown
Member

Fixes JIRA ticket ISW-5893

This PR does the following:

  • Updates npm packages to fix security issues flagged by dependabot and npm audit.
  • Only updates dev dependencies and not dependencies that would affect the DS components themselves.
  • Updates unit tests to reflect updated package APIs.

How has this been tested?

  • Will create npm release candidate for testing.

Accessibility concerns or updates

  • N/A

Checklist:

  • I have updated the Storybook documentation and changelog accordingly.
  • I have added relevant accessibility documentation for this pull request.
  • All new and existing tests passed.

Front End Review:

  • Review the Vercel preview deployment once it is ready.

@vercel

vercel Bot commented Jul 6, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
nypl-design-system Ready Ready Preview, Comment Jul 10, 2026 6:48pm

Request Review

@EdwinGuzman EdwinGuzman changed the title WIP updating npm packages that affect the repo, not components ISW-5893: Routine npm package updates for the repo, not components Jul 7, 2026

@bigfishdesign13 bigfishdesign13 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Everything looks to be updated consistently.

});

it("opens the accordion when the label is clicked", () => {
it("opens the accordion when the label is clicked", async () => {

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why is async now needed? And why isn't it needed for all unit tests? Is it only necessary for tests that rely on userEvent?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, only whenever userEvent is used.

);

userEvent.click(accordionLabel);
await userEvent.click(accordionLabel);

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same here.

Comment thread package.json
"vite": "5.4.18",
"vite-plugin-dts": "2.3.0",
"vite": "7.3.6",
"vite-plugin-dts": "4.5.4",

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are all these updates based on recommendations from the bot?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The dependabot bot? Sort of. Sometimes they recommended an even higher version.

I think in this case it was higher but I had to manually find one that was compatible with the rest of our packages and versions.

@7emansell 7emansell left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also interested in the new async/await on click events but otherwise running smoothly

@EdwinGuzman

Copy link
Copy Markdown
Member Author

@bigfishdesign13 @7emansell The async/await update is specific to the @testing-library/user-event upgrade from 13.2.1 to 14.5.2. https://testing-library.com/docs/user-event/intro/

It's now all async/await. This is great and I didn't even realize before that user-event 13.x is deprecated.

Comment thread src/components/NewsletterSignup/NewsletterSignup.test.tsx Outdated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants