Update dependency msw to v2

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
msw (source)	1.3.5 → 2.13.2

---

Release Notes

mswjs/msw (msw)

v2.13.2

Compare Source

v2.13.2 (2026-04-08)

Bug Fixes

• delay: prevent infinite mode from throwing (#​2697) (613d4a1) @​kettanaito

v2.13.1

Compare Source

v2.13.1 (2026-04-07)

Bug Fixes

• annotate life-cycle events correctly (#​2694) (e7890e9) @​kettanaito

v2.13.0

Compare Source

v2.13.0 (2026-04-06)

Features

• use the network source architecture (defineNetwork) (#​2650) (2b73790) @​kettanaito @​felmonon
• handlers are not grouped internally by kind, making handler lookup a O(1) operation.
• handlers filtering no longer uses an instanceof check. Instead, the kind property of the handler is used.

Bug fixes

• fix an issue where a WebSocket connection would be logged in the console even when there are no matching event handlers for it.

v2.12.14

Compare Source

v2.12.14 (2026-03-21)

Bug Fixes

• support wildcard ports in url matching (#​2677) (f90bf49) @​trknhr @​kettanaito

v2.12.13

Compare Source

v2.12.13 (2026-03-17)

Bug Fixes

• GraphQL: support application/graphql-response+json response content-type (#​2513) (4b8c330) @​phryneas @​kettanaito
• HttpResponse: mark implicit content-type headers with a symbol (#​2675) (98716e7) @​kettanaito

v2.12.12

Compare Source

v2.12.12 (2026-03-17)

Bug Fixes

• minor improvements (#​2672) (cd52873) @​kettanaito
• handle special characters in postinstall script (#​2649) (b79d7ae) @​aloisklink @​kettanaito
• replace barrel exports with granular exports (#​2671) (83bc40e) @​kettanaito

v2.12.11

Compare Source

v2.12.11 (2026-03-15)

Bug Fixes

• node: avoid open handles for infinite delays (#​2669) (3ccc8a3) @​FelmonFekadu @​kettanaito

v2.12.10

Compare Source

v2.12.10 (2026-02-10)

Bug Fixes

• export AnyHandler type (#​2663) (90f9be4) @​kettanaito

v2.12.9

Compare Source

v2.12.9 (2026-02-06)

Bug Fixes

• ws: support relative urls in ws.link (#​2661) (2f1d23c) @​kettanaito

v2.12.8

Compare Source

v2.12.8 (2026-02-03)

Bug Fixes

• update @mswjs/interceptors to fix a memory leak (#​2659) (e5e905f) @​kettanaito
• update rettime (#​2657) (3a7b451) @​kettanaito

v2.12.7

Compare Source

v2.12.7 (2025-12-27)

Bug Fixes

• graphql: export the GraphQLLinkHandlers type (#​2647) (cfab780) @​kettanaito
• graphql: support TypedDocumentString as request predicate (#​2646) (494d5e8) @​kettanaito
• graphql: remove redundant DocumentNode union (#​2645) (0f6e28f) @​kettanaito

v2.12.6

Compare Source

v2.12.6 (2025-12-26)

Bug Fixes

• sse: respect the worker quiet option (#​2644) (d50f73e) @​kettanaito

v2.12.5

Compare Source

v2.12.5 (2025-12-26)

Bug Fixes

• sse: handle multi-line messages (#​2643) (1266f61) @​BSteffaniak @​kettanaito

v2.12.4

Compare Source

v2.12.4 (2025-12-03)

Bug Fixes

• handle incomplete localStorage in Node.js v25 (#​2636) (3da2c76) @​rvagg

v2.12.3

Compare Source

v2.12.3 (2025-11-23)

Bug Fixes

• publish the types used in HttpHandler (#​2560) (1af6cee) @​SerkanSipahi @​kettanaito
• update dependencies (#​2634) (9efe103) @​kettanaito
• toPublicUrl: remove search parameters in Node.js (#​2629) (18d7d3d) @​Enet4 @​kettanaito

v2.12.2

Compare Source

v2.12.2 (2025-11-14)

Bug Fixes

• node: move browser and react-native export conditions lower (#​2627) (102d85a) @​vidschofelix

v2.12.1

Compare Source

v2.12.1 (2025-11-09)

Bug Fixes

• setupWorker: fix response init in response:* events (#​2621) (7f48f21) @​jbms

v2.12.0

Compare Source

v2.12.0 (2025-11-05)

Features

• support server-sent events (SSE) (#​2299) (d5a16d8) @​kettanaito @​Andarist

v2.11.6

Compare Source

v2.11.6 (2025-10-20)

Bug Fixes

• update @mswjs/interceptors to 0.40.0 (#​2613) (50028b7) @​kettanaito

v2.11.5

Compare Source

v2.11.5 (2025-10-09)

Bug Fixes

• export onUnhandledRequest for use in @​msw/playwright (#​2562) (54ce919) @​zachatrocity @​kettanaito

v2.11.4

Compare Source

v2.11.4 (2025-10-08)

Bug Fixes

• add missing parameter documentation for getResponse function (#​2580) (f33fb47) @​djpremier @​kettanaito
• HttpResponse: preserve request body type after cloning the request (#​2600) (f40515b) @​Slessi @​kettanaito
• use statuses as a shim (#​2607) (fee715c) @​kettanaito
• use cookie directly via a shim (#​2606) (29d0b53) @​kettanaito
• setupWorker: prevent WorkerChannel access in fallback mode (#​2594) (1e653c9) @​kettanaito
• setupWorker: remove unused deferNetworkRequestsUntil (#​2595) (44d13d2) @​kettanaito

v2.11.3

Compare Source

v2.11.3 (2025-09-20)

Bug Fixes

• migrate to until-async (#​2590) (7087b1e) @​kettanaito

v2.11.2

Compare Source

v2.11.2 (2025-09-10)

Bug Fixes

• setupWorker: handle in-flight requests after calling worker.stop() (#​2578) (97cf4c7) @​kettanaito

v2.11.1

Compare Source

v2.11.1 (2025-08-31)

Bug Fixes

• use tough-cookie@6 directly (#​2453) (6ce3b95) @​sampsonjoliver @​SamMousa @​kettanaito
• HttpResponse: infer provided body type for HttpResponse.arrayBuffer (#​2575) (ad3d7c1) @​kettanaito

v2.11.0

Compare Source

v2.11.0 (2025-08-30)

Features

• custom request predicate function (#​2541) (a05405b) @​ytoshiki @​kettanaito

v2.10.5

Compare Source

v2.10.5 (2025-08-13)

Bug Fixes

• export the GraphQLResponseBody type (#​2565) (642523d) @​breadadams

v2.10.4

Compare Source

v2.10.4 (2025-07-12)

Bug Fixes

• HttpHandler: use correct query parameters docs link (#​2547) (6cdce81) @​kettanaito

v2.10.3

Compare Source

v2.10.3 (2025-07-04)

Bug Fixes

• ws: support resolutionContext on parse and run (#​2544) (0245685) @​kettanaito
• getResponse: support resolutionContext argument (#​2543) (ce3ab1f) @​kettanaito

v2.10.2

Compare Source

v2.10.2 (2025-06-09)

Bug Fixes

• TypeScript: support Response.error() and HttpResponse.error() as mocked responses (#​2132) (72cc8dd) @​jacquesg @​kettanaito

v2.10.1

Compare Source

v2.10.1 (2025-06-07)

Bug Fixes

• update @mswjs/interceptors to support WebSocket server protocol (#​2528) (6704fa0) @​kettanaito

v2.10.0

Compare Source

v2.10.0 (2025-06-07)

Features

• WebSocketHandler: add run method (#​2527) (94fc78e) @​kettanaito

v2.9.0

Compare Source

v2.9.0 (2025-06-03)

Features

• send request reference within the RESPONSE event (#​2510) (4256351) @​kettanaito

v2.8.7

Compare Source

v2.8.7 (2025-05-31)

Bug Fixes

• update links to the documentation (#​2519) (56f24d5) @​kettanaito

v2.8.6

Compare Source

v2.8.6 (2025-05-29)

Bug Fixes

• browser: set the default entrypoint to commonjs (#​2516) (ee44fab) @​kettanaito

v2.8.5

Compare Source

v2.8.5 (2025-05-27)

Bug Fixes

• HttpResponse: strictly annotate all response methods (#​2509) (2cdc2b1) @​kettanaito
• update @mswjs/interceptors to 0.38.7 (#​2508) (b06fd0e) @​kettanaito

v2.8.4

Compare Source

v2.8.4 (2025-05-19)

Bug Fixes

• support nullable GraphQL queries (#​2403) (594e8ca) @​huuyafwww @​kettanaito

v2.8.3

Compare Source

v2.8.3 (2025-05-17)

Bug Fixes

• HttpResponse: export StrictResponse type again with added deprecation notice (#​2500) (a5bbe97) @​christoph-fricke

v2.8.2

Compare Source

v2.8.2 (2025-05-09)

Bug Fixes

• catch postinstall errors (#​2498) (6d3013c) @​kettanaito

v2.8.1

Compare Source

v2.8.1 (2025-05-09)

Bug Fixes

• do not append .mjs to .d.ts core imports (#​2496) (6ae6b29) @​kettanaito

v2.8.0

Compare Source

v2.8.0 (2025-05-08)

Features

• support typescript 5.6 - 5.8 (#​2493) (3fce594) @​kettanaito
• migrate to ESM internally, remain CJS-first (#​2490) (17d553b) @​kettanaito @​Andarist
• SetupServerApi: allow using custom interceptors (#​2464) (0cc656a) @​tastypackets @​kettanaito
• HttpResponse: support explicitly empty response body via null type argument (#​2118) (50ce6a4) @​kettanaito

v2.7.6

Compare Source

v2.7.6 (2025-05-05)

Bug Fixes

• remove unused dependencies (#​2484) (436cbcb) @​kettanaito

v2.7.5

Compare Source

v2.7.5 (2025-04-18)

Bug Fixes

• ws: ignore /socket.io/ path prefix during url matching (#​2476) (69ae82d) @​kettanaito

v2.7.4

Compare Source

v2.7.4 (2025-04-12)

Bug Fixes

• resolve relative URLs against location.href (#​2471) (fa9b07f) @​kettanaito
• graphql: add extensions property to the GraphQLResponseBody type (#​2468) (827a5dc) @​ytoshiki

v2.7.3

Compare Source

v2.7.3 (2025-02-24)

Bug Fixes

• do not treat static asset requests as unhandled by default (#​2440, docs) (eb45e7a) @​kettanaito

v2.7.2

Compare Source

v2.7.2 (2025-02-24)

Bug Fixes

• HttpResponse: set the default bodyType to any (#​2439) (bb1faf8) @​kettanaito

v2.7.1

Compare Source

v2.7.1 (2025-02-20)

Bug Fixes

• HttpResponse: support non-configurable status codes (#​2434) (0cf639e) @​kettanaito

v2.7.0

Compare Source

v2.7.0 (2024-12-17)

Features

• use picocolors instead of chalk (#​2377) (85bdd82) @​Namchee @​kettanaito

v2.6.9

Compare Source

v2.6.9 (2024-12-16)

Bug Fixes

• support SharedArrayBuffer in HttpResponse.arrayBuffer (#​2389) (41f00e1) @​danilofuchs @​kettanaito

v2.6.8

Compare Source

v2.6.8 (2024-12-07)

Bug Fixes

• setupServer: reapply interception after calling server.listen() after server.close() (#​2383) (00da9ca) @​kettanaito

v2.6.7

Compare Source

v2.6.7 (2024-12-06)

Bug Fixes

• setupWorker: correctly delete internal accept header on passthrough (#​2375) (3f40055) @​smouillour @​kettanaito

v2.6.6

Compare Source

v2.6.6 (2024-11-22)

Bug Fixes

• types: support optional path parameters (#​2368) (3b7b776) @​kettanaito

v2.6.5

Compare Source

v2.6.5 (2024-11-16)

Bug Fixes

• support non-configurable responses (#​2360) (5bf3e3b) @​kettanaito

v2.6.4

Compare Source

v2.6.4 (2024-11-10)

Bug Fixes

• prevent infinite loop when bypassing sendBeacon() requests (#​2353) (2fa98c3) @​kettanaito
• remove the internal bypass request header before performing the request as-is in Node.js (#​2353) (2fa98c3) @​kettanaito

v2.6.3

Compare Source

v2.6.3 (2024-11-10)

Bug Fixes

• handleRequest: remove transformResponse option (#​2351) (74c4a3a) @​kettanaito

v2.6.2

Compare Source

v2.6.2 (2024-11-07)

Bug Fixes

• update @bundled-es-modules/cookie to 2.0.1 (#​2312) (c134352) @​kettanaito

v2.6.1

Compare Source

v2.6.1 (2024-11-06)

Bug Fixes

• prevent instanceof handler check failures between different MSW versions (#​2349) (28d26bd) @​kettanaito

v2.6.0

Compare Source

v2.6.0 (2024-10-29)

Features

• support mocking WebSocket APIs (#​2011) (ae786f5) @​kettanaito @​DanielleHuisman

v2.5.2

Compare Source

v2.5.2 (2024-10-27)

Bug Fixes

• enable provenance for publishing (#​2334) (e9b0636) @​kettanaito

v2.5.1

Compare Source

v2.5.1 (2024-10-24)

Bug Fixes

• update@inquirer/confirm requirement to 5.0.0 (#​2325) (b65c0a8) @​greysteil @​kettanaito

v2.5.0

Compare Source

v2.5.0 (2024-10-22)

Features

• isolate parent and child frames when handling requests (#​2324) (a1a81ba) @​kettanaito

v2.4.13

Compare Source

v2.4.13 (2024-10-22)

Bug Fixes

• update @inquirer/confirm to 4.0 (#​2300) (0cf9cce) @​greysteil @​kettanaito

v2.4.12

Compare Source

v2.4.12 (2024-10-21)

Bug Fixes

• node: preserve headers instanceof when recording raw headers (#​2321) (a58a300) @​paoloricciuti

v2.4.11

Compare Source

v2.4.11 (2024-10-14)

Bug Fixes

• update dependencies (#​2313) (8f68f0a) @​kettanaito

v2.4.10

Compare Source

v2.4.10 (2024-10-11)

Bug Fixes

• setupWorker: perform worker update in the background (#​2311) (8e40724) @​kettanaito

v2.4.9

Compare Source

v2.4.9 (2024-09-20)

Bug Fixes

• ClientRequest: support Request as init when recording raw headers (#​2293) (bf982ea) @​kettanaito

v2.4.8

Compare Source

v2.4.8 (2024-09-17)

Bug Fixes

• address express and path-to-regexp vulnerabilities (#​2285) (e3487bc) @​markmssd

v2.4.7

Compare Source

v2.4.7 (2024-09-15)

Bug Fixes

• ClientRequest: prevent duplicates when recording set headers (#​2284) (e04eb8f) @​kettanaito
• use Object.defineProperty for Headers proxy (#​2283) (94e17be) @​kettanaito

v2.4.6

Compare Source

v2.4.6 (2024-09-13)

Bug Fixes

• xhr: clone request body before calculating its size (#​2282) (397444b) @​kettanaito

v2.4.5

Compare Source

v2.4.5 (2024-09-11)

Bug Fixes

• remove cookies with max-age=0 from cookie store (#​2275) (c307ab2) @​kettanaito

v2.4.4

Compare Source

v2.4.4 (2024-09-08)

Bug Fixes

• fetch: follow mocked redirect responses (#​2268) (f5785bf) @​kettanaito
• Adopts a new, Socket-based request interception algorithm.

v2.4.3

Compare Source

v2.4.3 (2024-09-07)

Bug Fixes

• revert "graphql" as optional peer dependency (#​2267) (7cd39e7) @​kettanaito

v2.4.2

Compare Source

v2.4.2 (2024-09-04)

Bug Fixes

• cli: support windows paths in the init command (#​2260) (ba285b8) @​ivanfernandez2646 @​kettanaito
• use typescript@​4.8 as the minimal supported version (#​2251) (6b2a7e6) @​THETCR @​kettanaito
• keep graphql import as require in cjs (#​2258) (b977602) @​kettanaito

v2.4.1

Compare Source

v2.4.1 (2024-08-29)

Bug Fixes

• import graphql lazily (#​2250) (1799e06) @​kettanaito
• add graphql to "peerDependencies" (#​2249) (8a9568a) @​THETCR

v2.4.0

Compare Source

v2.4.0 (2024-08-28)

Features

• add HttpResponse.html() static method (#​2140, docs) (8c5580a) @​scruffymongrel @​kettanaito
• list "graphql" as an optional peer dependency (#​2187) (40b17fd) @​kettanaito
• print request body in onUnhandledRequest message (#​2227) (a2153c9) @​bitttttten @​kettanaito

v2.3.5

Compare Source

v2.3.5 (2024-08-02)

Bug Fixes

• HttpResponse: skip setting "Content-Length" if it is already set (#​2228) (a0234c9) @​kettanaito

v2.3.4

Compare Source

v2.3.4 (2024-07-23)

Bug Fixes

• cookieStore: remove left-over console.log (#​2217) (00fdbb2) @​Lalem001

v2.3.3

Compare Source

v2.3.3 (2024-07-23)

Bug Fixes

• implement cookie persistence using tough-cookie (#​2206) (c30613c) @​kettanaito
• support async generators as response resolvers (#​2108) (d38fc3d) @​kettanaito @​jakebailey

v2.3.2

Compare Source

v2.3.2 (2024-07-19)

Bug Fixes

• support typescript@​5.5 (deprecate v4.7) (#​2190) (7df2533) @​KaiSpencer @​kettanaito

v2.3.1

Compare Source

v2.3.1 (2024-06-01)

Bug Fixes

• preserve trailing optional path parameters (#​2169) (e69bbd6) @​kettanaito @​KaiSpencer

v2.3.0

Compare Source

v2.3.0 (2024-05-08)

[!WARNING]
This release changes how MSW treats unhandled exceptions in response resolvers. Previously, they were treated as request errors. Starting with this release, unhandled resolver exceptions will be coerced to 500 Unhandled Exception mocked error responses produced by the library. Please note that you must not intentionally throw errors in your resolvers. Please use Response.error() to mock request/network errors. Unhandled exceptions are considered unintended and will be treated as if they happen on the actual server.

Features

• treat unhandled exceptions in handlers as 500 error responses (#​2135) (5191399) @​kettanaito
• prioritize the node export when importing msw/node (#​2134, transitively through @​mswjs/interceptors).
• add a new unhandledException event (#​2135, docs).

server.events.on('unhandledException', ({ request, error }) => {
  console.log('%s %s errored! See details below.', request.method, request.url)
  console.error(error)
})

Bug Fixes

• Disposable: make the ".dispose()" method synchronous (#​2144) (686d3d6) @​kettanaito

v2.2.14

Compare Source

v2.2.14 (2024-04-17)

Bug Fixes

• preserve search params in "onUnhandledRequest" messages (#​2128) (64bcae7) @​nagadevkrishna @​kettanaito
• give node export condition higher priority (#​2134) (f948d13) @​phryneas

v2.2.13

Compare Source

v2.2.13 (2024-03-27)

Bug Fixes

• use createRequestId() instead of crypto.randomUUID() (#​2113) (8f2be77) @​kettanaito

v2.2.12

Compare Source

v2.2.12 (2024-03-27)

Bug Fixes

• do not mutate user-defined "X-Request-Id" request header (#​2110) (64b6ba5) @​kettanaito

v2.2.11

Compare Source

v2.2.11 (2024-03-26)

Bug Fixes

• accept a narrower response body type by default (#​2107) (d35ef92) @​kettanaito

v2.2.10

Compare Source

v2.2.10 (2024-03-22)

Bug Fixes

• feature "new URL()" in the redundant query params warning (#​2102) (9af301a) @​psjostrom @​kettanaito

v2.2.9

Compare Source

v2.2.9 (2024-03-20)

Bug Fixes

• properly infer parameter and return types in server.boundary() (#​2101) (1370736) @​Andarist @​kettanaito

v2.2.8

Compare Source

v2.2.8 (2024-03-19)

Bug Fixes

• setupWorker: remove left-over console.log() (#​2099) (cf97991) @​kettanaito

v2.2.7

Compare Source

v2.2.7 (2024-03-18)

Bug Fixes

• resolve "~/core" import for .d.mts modules (#​2095) (7cdbd1a) @​kettanaito

v2.2.6

Compare Source

v2.2.6 (2024-03-17)

Bug Fixes

• setupWorker: emit the correct life-cycle events for bypassed requests (#​2094) (c485989) @​kettanaito
• bypass: support modifying the bypassed request (#​2093) (2c8570b) @​kettanaito

v2.2.5

Compare Source

v2.2.5 (2024-03-17)

Bug Fixes

• improve the worker integrity warning (#​2091) (e749355) @​kettanaito
• make worker integrity mismatch a warning (#​2090) (a0f8021) [@​k

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.