chore(deps-dev): bump @faker-js/faker from 8.4.1 to 10.5.0 - #6474
chore(deps-dev): bump @faker-js/faker from 8.4.1 to 10.5.0#6474dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [@faker-js/faker](https://github.com/faker-js/faker) from 8.4.1 to 10.5.0. - [Release notes](https://github.com/faker-js/faker/releases) - [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md) - [Commits](faker-js/faker@v8.4.1...v10.5.0) --- updated-dependencies: - dependency-name: "@faker-js/faker" dependency-version: 10.5.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 2a3acfeae6
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "@babel/preset-typescript": "^7.29.7", | ||
| "@electron/rebuild": "^4.2.0", | ||
| "@faker-js/faker": "^8.4.1", | ||
| "@faker-js/faker": "^10.5.0", |
There was a problem hiding this comment.
Configure Jest before upgrading Faker to ESM-only v10
When any frontend Jest test imports @faker-js/faker—as dozens of UI specs and mock factories do—the root Jest 29 configuration transpiles test imports to CommonJS while transformIgnorePatterns still excludes Faker. Faker v10 is ESM-only, so Jest loads its distribution without transpilation and fails before executing the tests; add Faker to the ESM allowlist or retain a Jest-compatible version.
AGENTS.md reference: AGENTS.md:L86-L93
Useful? React with 👍 / 👎.
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using high effort and found 2 potential issues.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 2a3acfe. Configure here.
| "@babel/preset-typescript": "^7.29.7", | ||
| "@electron/rebuild": "^4.2.0", | ||
| "@faker-js/faker": "^8.4.1", | ||
| "@faker-js/faker": "^10.5.0", |
There was a problem hiding this comment.
Faker v10 fails under Jest
High Severity
Bumping @faker-js/faker to 10.5.0 makes the package ESM-only, but root Jest 29 still ignores it in node_modules. UI tests that import faker fail to load because @faker-js/faker is not in transformIgnorePatterns.
Reviewed by Cursor Bugbot for commit 2a3acfe. Configure here.
| "@babel/preset-typescript": "^7.29.7", | ||
| "@electron/rebuild": "^4.2.0", | ||
| "@faker-js/faker": "^8.4.1", | ||
| "@faker-js/faker": "^10.5.0", |
There was a problem hiding this comment.
Removed userName API still used
High Severity
Faker v10 removed faker.internet.userName. UI factories still call it, so build() throws and tests and Storybook stories that use those factories fail.
Reviewed by Cursor Bugbot for commit 2a3acfe. Configure here.


Bumps @faker-js/faker from 8.4.1 to 10.5.0.
Release notes
Sourced from @faker-js/faker's releases.
... (truncated)
Changelog
Sourced from @faker-js/faker's changelog.
... (truncated)
Commits
5fb3b2dchore(release): 10.5.0 (#3898)f89348fchore(deps): lock file maintenance (#3861)e157511chore(deps): pin dependencies (#3896)77dbfaechore(deps): update prettier to v3.8.4 (#3893)123193achore(deps): update pnpm/action-setup action to v6 (#3894)8244a24chore(deps): update devdependencies (#3871)68bc79achore(deps): update eslint (major) (#3875)e43b21bchore(deps): update all non-major dependencies (#3870)b6aca31chore(deps): update vitest (#3872)a7e8c4fchore(deps): update mcr.microsoft.com/devcontainers/typescript-node:24 docker...Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@faker-js/fakersince your current version.You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Medium Risk
Major-version devDependency bump affects many test files via hoisting; split versions between root (10.x) and
redisinsight/api(8.x) may cause inconsistent test behavior until aligned.Overview
Bumps the root devDependency
@faker-js/fakerfrom 8.4.1 to 10.5.0 inpackage.jsonandpackage-lock.json. There are no application or test file edits in this PR—only the lockfile resolution for the new tarball, MIT license metadata, and updated Node/npm engine requirements on the package (^20.19.0/ npm>=10, which matches the repo’sengines).Faker is used in Jest specs (e.g. UI component tests and some API specs) for test data; those imports already use v8+ APIs like
faker.string.*andfaker.person.*.redisinsight/api/package.jsonstill lists@faker-js/faker^8.4.1, so API installs may keep 8.x until that package is bumped separately.After merge, run root and UI Jest suites to catch any v10/Jest module-resolution issues noted in faker’s v10 migration docs.
Reviewed by Cursor Bugbot for commit 2a3acfe. Bugbot is set up for automated code reviews on this repo. Configure here.