chore(deps-dev): bump @types/jsdom from 27.0.0 to 28.0.0 in /src/microsoft-trydotnet

[dependabot]

Bumps @types/jsdom from 27.0.0 to 28.0.0.

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Automated Major Version Review — APPROVED

Package: @types/jsdom
Ecosystem: npm
Version change: 27.0.0 → 28.0.0 (major bump)

Research Summary

• Sources consulted:
  • https://github.com/jsdom/jsdom/releases — Reviewed jsdom 27.x and 28.x release notes to understand what changed in the underlying package
  • https://github.com/jsdom/jsdom/blob/main/Changelog.md — Confirmed breaking changes in jsdom 28.0.0 (resource loading customization overhaul)
  • https://github.com/advisories?query=jsdom — Checked for security advisories

Breaking Changes Analysis

@types/jsdom 28.0.0 adds undici-types as a peer dependency (to reflect jsdom 28's new dependency on undici types for fetch/WebSocket). The type package version bump corresponds to jsdom 28.x's API. The repository's microsoft-trydotnet package already depends on jsdom 28.1.0 at runtime (confirmed from package-lock.json), so upgrading the type definitions to match is the correct and necessary step. The test code uses only JSDOM constructor (with url and runScripts options) and the DOMWindow type — neither changed in v28.

Security Check

The GitHub Advisory Database shows 2 advisories for jsdom, both affecting older versions. No advisories affect jsdom 28.x. Upgrading the type definitions does not introduce any security risk.

Decision

✅ This major version update is safe to merge. CI checks pass, the diff contains only version file changes (package.json, package-lock.json), and no breaking changes affect this repository's usage of the package.

Generated by Dependabot Major Version Reviewer · ◷