Skip to content

Update NodeJS / UI5 dependencies for javascript/frameworks/ui5*/test/**#409

Merged
mbaluda merged 1 commit into
mainfrom
dd/node-upgrade/ui5-tests/1
Jul 10, 2026
Merged

Update NodeJS / UI5 dependencies for javascript/frameworks/ui5*/test/**#409
mbaluda merged 1 commit into
mainfrom
dd/node-upgrade/ui5-tests/1

Conversation

@data-douser

Copy link
Copy Markdown
Collaborator

UI5 companion PR for #408.

What This PR Contributes

This pull request updates NodeJS and UI5 dependencies across javascript/frameworks/{ui5,ui5-webcomponents}/test/** projects . The main focus is on keeping the codebase up-to-date with the latest features, bug fixes, and security patches from the upstream packages.

Dependency Updates:

UI5 Web Components and React:

  • Updated all @ui5/webcomponents, @ui5/webcomponents-base, @ui5/webcomponents-fiori, @ui5/webcomponents-icons, and @ui5/webcomponents-react dependencies to version ^2.24.x in xss-input-dangerouslySetInnerHTML/package.json. Also updated React and TypeScript to their latest major versions.

SAP UI5 VK:

  • Bumped @sapui5/sap.ui.vk from ^1.140.0 to ^1.150.0 in both log-entry-flows-to-notifications/package.json and its lockfile. [1] [2]

UI5 CLI and Tooling:

  • Upgraded @ui5/cli to ^4.0.57 in both xss-book-example/package.json and xss-eventbus-with-data/package.json. [1] [2]
  • Updated UI5 middleware, ESLint, and other dev dependencies to their latest versions in xss-book-example/package.json.

Future Works

@data-douser data-douser self-assigned this Jul 9, 2026
@data-douser data-douser added the dependencies Pull requests that update a dependency file label Jul 9, 2026
@data-douser data-douser marked this pull request as ready for review July 9, 2026 23:57
@data-douser data-douser requested review from Copilot and mbaluda July 9, 2026 23:57

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates NodeJS/UI5-related dependencies used by the UI5 and UI5 Web Components CodeQL test projects under javascript/frameworks/{ui5,ui5-webcomponents}/test/**, aiming to keep these test fixtures aligned with upstream package updates.

Changes:

  • Bumped @ui5/cli (and resulting lockfile resolutions) for the UI5 XSS eventbus test project.
  • Bumped @sapui5/sap.ui.vk for the UI5 log injection test project (plus lockfile update).
  • Updated UI5 Web Components + React/TypeScript-related dependencies for the webcomponents XSS fixture (plus lockfile update).
Show a summary per file
File Description
javascript/frameworks/ui5/test/queries/UI5Xss/xss-eventbus-with-data/package.json Bumps @ui5/cli version used by this UI5 XSS test fixture.
javascript/frameworks/ui5/test/queries/UI5Xss/xss-eventbus-with-data/package-lock.json Updates the resolved dependency graph after the @ui5/cli bump.
javascript/frameworks/ui5/test/queries/UI5Xss/xss-book-example/package.json Updates UI5 tooling/dev dependencies for the UI5 “book example” fixture.
javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-notifications/package.json Bumps @sapui5/sap.ui.vk for the UI5 log injection fixture.
javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-notifications/package-lock.json Updates the resolved package for the @sapui5/sap.ui.vk bump.
javascript/frameworks/ui5-webcomponents/test/queries/xss-input-dangerouslySetInnerHTML/package.json Updates UI5 webcomponents + React/TS-related dependencies for the webcomponents XSS fixture.
javascript/frameworks/ui5-webcomponents/test/queries/xss-input-dangerouslySetInnerHTML/package-lock.json Updates the resolved dependency graph for the webcomponents fixture changes.

Review details

Files not reviewed (3)
  • javascript/frameworks/ui5-webcomponents/test/queries/xss-input-dangerouslySetInnerHTML/package-lock.json: Generated file
  • javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-notifications/package-lock.json: Generated file
  • javascript/frameworks/ui5/test/queries/UI5Xss/xss-eventbus-with-data/package-lock.json: Generated file
  • Files reviewed: 4/8 changed files
  • Comments generated: 2
  • Review effort level: Low

"react-dom": "^19.2.7",
"react-scripts": "5.0.1",
"typescript": "^4.9.5"
"typescript": "^7.0.2"
"@ui5/webcomponents-react": "^2.15.3",
"react": "^18.3.1",
"react-dom": "^18.3.1",
"@types/jest": "^30.0.0",

@mbaluda mbaluda left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚢

@mbaluda mbaluda merged commit 9dfdc8f into main Jul 10, 2026
18 checks passed
@mbaluda mbaluda deleted the dd/node-upgrade/ui5-tests/1 branch July 10, 2026 09:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants