Skip to content

chore(deps-dev): bump @faker-js/faker from 8.4.1 to 10.5.0 - #6474

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/faker-js/faker-10.5.0
Open

chore(deps-dev): bump @faker-js/faker from 8.4.1 to 10.5.0#6474
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/faker-js/faker-10.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor

Bumps @faker-js/faker from 8.4.1 to 10.5.0.

Release notes

Sourced from @​faker-js/faker's releases.

v10.5.0

What's Changed

... (truncated)

Changelog

Sourced from @​faker-js/faker's changelog.

10.5.0 (2026-06-17)

New Locales

  • locale: add color to cy (#3816) (5a6379f)
  • locale: add Farsi airline module locale (#3789) (f4a1c3e)
  • locale: add mn_MN_cyrl (Mongolian) locale (#3796) (d17c0f1)
  • locale: Add more realistic Greek address data (#3792) (6153eb7)
  • locale: Add postal_address and improved secondary_address for es (#3798) (6c2a0ab)
  • locale: add sl_SI locale, location module (#3652) (28d4f7c)
  • locale: add Welsh (cy) animal type definitions (#3842) (50a5ec9)
  • locale: add Welsh (cy) book format definitions (#3846) (#3846) (2b32d6e)
  • locale: add Welsh (cy) building numbers definition (#3892) (4996a2b)
  • locale: add Welsh (cy) city name definitions (#3884) (ac36c22)
  • locale: add Welsh (cy) continents definitions (#3880) (03a1682)
  • locale: add Welsh (cy) county definitions (#3849) (f51d28a)
  • locale: add Welsh (cy) direction definitions (#3840) (d862071)
  • locale: add Welsh (cy) internet domain suffix definitions (#3865) (#3865) (fb2e2cb)
  • locale: add Welsh (cy) phone number definitions (#3878) (70994db)
  • locale: add Welsh (cy) postal address definitions (#3850) (e72fd7c)
  • locale: add Welsh (cy) postcode definitions (#3851) (1afbd59)
  • locale: add Welsh (cy) sex definitions (#3824) (6f29eb7)
  • locale: add Welsh (cy) state definitions (#3891) (#3891) (606d47c)
  • locale: add Welsh (cy) street name definitions (#3889) (143789e)
  • locale: add Welsh (cy) vehicle fuel definitions (#3845) (29c918a)
  • locale: extend tr person last names (#3839) (f433771)
  • locale: improved en_GB postcodes (#3864) (a4e5039)
  • locale: improved en_IE postal_address (#3797) (fb3ffd3)

Features

  • add first standalone module functions (#3818) (5d4f5de)
  • date: add ability to provide date range for recent and soon (#3844) (0bc038d)
  • date: add ability to provide year range for past and future (#3783) (237e7dc)
  • food: expand plant-based dish and pattern variety (#3887) (5eaf729)
  • introduce FakerCore (#2838) (68e15d7)
  • location: add postal address generation (#3760) (753bec6)
  • number: add distributor functions (#3375) (325e402)
  • phone: mobile style for phone.number (#3583) (cd5953b)

Bug Fixes

  • date: incorrect date boundary in past and future (#3827) (0446411)
  • finance: routingNumber now uses real FederalReserveRoutingSymbol from lookup table. (#3429) (c53c1fe)
  • food: correct fruit and vegetable locale data (#3800) (30a812a)
  • handle single-character fromRegExp patterns (#3877) (ec6cc3b)
  • helpers: ignore wrapper characters in fromRegExp (#3795) (9e2c0e3)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​faker-js/faker since your current version.


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note

Medium Risk
Major-version devDependency bump affects many test files via hoisting; split versions between root (10.x) and redisinsight/api (8.x) may cause inconsistent test behavior until aligned.

Overview
Bumps the root devDependency @faker-js/faker from 8.4.1 to 10.5.0 in package.json and package-lock.json. There are no application or test file edits in this PR—only the lockfile resolution for the new tarball, MIT license metadata, and updated Node/npm engine requirements on the package (^20.19.0 / npm >=10, which matches the repo’s engines).

Faker is used in Jest specs (e.g. UI component tests and some API specs) for test data; those imports already use v8+ APIs like faker.string.* and faker.person.*. redisinsight/api/package.json still lists @faker-js/faker ^8.4.1, so API installs may keep 8.x until that package is bumped separately.

After merge, run root and UI Jest suites to catch any v10/Jest module-resolution issues noted in faker’s v10 migration docs.

Reviewed by Cursor Bugbot for commit 2a3acfe. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps [@faker-js/faker](https://github.com/faker-js/faker) from 8.4.1 to 10.5.0.
- [Release notes](https://github.com/faker-js/faker/releases)
- [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md)
- [Commits](faker-js/faker@v8.4.1...v10.5.0)

---
updated-dependencies:
- dependency-name: "@faker-js/faker"
  dependency-version: 10.5.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 2, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 2, 2026 14:23
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 2, 2026

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2a3acfeae6

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread package.json
"@babel/preset-typescript": "^7.29.7",
"@electron/rebuild": "^4.2.0",
"@faker-js/faker": "^8.4.1",
"@faker-js/faker": "^10.5.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Configure Jest before upgrading Faker to ESM-only v10

When any frontend Jest test imports @faker-js/faker—as dozens of UI specs and mock factories do—the root Jest 29 configuration transpiles test imports to CommonJS while transformIgnorePatterns still excludes Faker. Faker v10 is ESM-only, so Jest loads its distribution without transpilation and fails before executing the tests; add Faker to the ESM allowlist or retain a Jest-compatible version.

AGENTS.md reference: AGENTS.md:L86-L93

Useful? React with 👍 / 👎.

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using high effort and found 2 potential issues.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 2a3acfe. Configure here.

Comment thread package.json
"@babel/preset-typescript": "^7.29.7",
"@electron/rebuild": "^4.2.0",
"@faker-js/faker": "^8.4.1",
"@faker-js/faker": "^10.5.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Faker v10 fails under Jest

High Severity

Bumping @faker-js/faker to 10.5.0 makes the package ESM-only, but root Jest 29 still ignores it in node_modules. UI tests that import faker fail to load because @faker-js/faker is not in transformIgnorePatterns.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 2a3acfe. Configure here.

Comment thread package.json
"@babel/preset-typescript": "^7.29.7",
"@electron/rebuild": "^4.2.0",
"@faker-js/faker": "^8.4.1",
"@faker-js/faker": "^10.5.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Removed userName API still used

High Severity

Faker v10 removed faker.internet.userName. UI factories still call it, so build() throws and tests and Storybook stories that use those factories fail.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 2a3acfe. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants