From 4af73c978f293eaa1a9bb0e9d8d17031655f0cc8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 21 Aug 2026 19:15:09 +0000 Subject: [PATCH 1/2] chore(deps-dev): bump impeccable from 3.5.0 to 3.6.0 Bumps [impeccable](https://github.com/pbakaus/impeccable) from 3.5.0 to 3.6.0. - [Release notes](https://github.com/pbakaus/impeccable/releases) - [Commits](https://github.com/pbakaus/impeccable/compare/cli-v3.5.0...cli-v3.6.0) --- updated-dependencies: - dependency-name: impeccable dependency-version: 3.6.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- package-lock.json | 10 +++++----- package.json | 2 +- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index 4eaf81d4..2ed3af64 100644 --- a/package-lock.json +++ b/package-lock.json @@ -11,7 +11,7 @@ "@axe-core/playwright": "^4.10.0", "@playwright/test": "^1.62.1", "force-graph": "1.51.4", - "impeccable": "3.5.0" + "impeccable": "3.6.0" } }, "node_modules/@axe-core/playwright": { @@ -727,9 +727,9 @@ } }, "node_modules/impeccable": { - "version": "3.5.0", - "resolved": "https://registry.npmjs.org/impeccable/-/impeccable-3.5.0.tgz", - "integrity": "sha512-mpm428oMTESAXKvHCCI+GsvhwAw2kTKtrnwsflLIyem6krMo2KoaH4RwRY7ke5JvtwAfYpu58AiIlptLOuKbzg==", + "version": "3.6.0", + "resolved": "https://registry.npmjs.org/impeccable/-/impeccable-3.6.0.tgz", + "integrity": "sha512-nysc6/2OHTWqLrcSxTxZk4r4QMufhU8NTIuG2ic6p5zzyZe45AWBX3/18OA5S88pCWq+4z8pKsjUxhAM990RKg==", "dev": true, "license": "Apache-2.0", "dependencies": { @@ -744,7 +744,7 @@ "impeccable": "cli/bin/cli.js" }, "engines": { - "node": ">=22.12.0" + "node": ">=22.18.0" }, "optionalDependencies": { "puppeteer": "^25.1.0" diff --git a/package.json b/package.json index 375ead3b..83467b18 100644 --- a/package.json +++ b/package.json @@ -1 +1 @@ -{"name":"engraphis-tests","version":"1.0.0","private":true,"description":"Browser accessibility, e2e, vendored bundle provenance, and design-quality dependencies for Engraphis","scripts":{"test:e2e":"playwright test"},"devDependencies":{"@playwright/test":"^1.62.1","@axe-core/playwright":"^4.10.0","force-graph":"1.51.4","impeccable":"3.5.0"}} \ No newline at end of file +{"name":"engraphis-tests","version":"1.0.0","private":true,"description":"Browser accessibility, e2e, vendored bundle provenance, and design-quality dependencies for Engraphis","scripts":{"test:e2e":"playwright test"},"devDependencies":{"@playwright/test":"^1.62.1","@axe-core/playwright":"^4.10.0","force-graph":"1.51.4","impeccable":"3.6.0"}} \ No newline at end of file From 53118cc5b39fc37ddfbbc60d367f4474477bf03e Mon Sep 17 00:00:00 2001 From: jomie Date: Fri, 21 Aug 2026 23:55:07 -0400 Subject: [PATCH 2/2] test: align impeccable exact-pin guards with 3.6.0 bump The dependabot bump only touches package.json/package-lock.json; the version-provenance guards assert the pinned version in three places the bump cannot reach. Bump them to 3.6.0 so the PR's CI can go green. --- tests/test_dashboard_vendor_assets.py | 2 +- tests/test_release_infrastructure.py | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/tests/test_dashboard_vendor_assets.py b/tests/test_dashboard_vendor_assets.py index 9393e0e3..3b213082 100644 --- a/tests/test_dashboard_vendor_assets.py +++ b/tests/test_dashboard_vendor_assets.py @@ -43,5 +43,5 @@ def test_design_linter_dependency_is_exactly_pinned(): package = json.loads((ROOT / "package.json").read_text(encoding="utf-8")) package_lock = json.loads((ROOT / "package-lock.json").read_text(encoding="utf-8")) version = package["devDependencies"]["impeccable"] - assert version == "3.5.0" + assert version == "3.6.0" assert package_lock["packages"]["node_modules/impeccable"]["version"] == version diff --git a/tests/test_release_infrastructure.py b/tests/test_release_infrastructure.py index 120105bb..cc1fabc9 100644 --- a/tests/test_release_infrastructure.py +++ b/tests/test_release_infrastructure.py @@ -63,9 +63,9 @@ def test_dependency_automation_covers_every_root_ecosystem(): ) package = json.loads(_text("package.json")) lock = json.loads(_text("package-lock.json")) - assert package["devDependencies"]["impeccable"] == "3.5.0" - assert lock["packages"][""]["devDependencies"]["impeccable"] == "3.5.0" - assert lock["packages"]["node_modules/impeccable"]["version"] == "3.5.0" + assert package["devDependencies"]["impeccable"] == "3.6.0" + assert lock["packages"][""]["devDependencies"]["impeccable"] == "3.6.0" + assert lock["packages"]["node_modules/impeccable"]["version"] == "3.6.0" def test_playwright_server_never_opens_the_developers_configured_database():