chore(deps-dev): bump fast-check from 4.8.0 to 4.9.0 by dependabot[bot] · Pull Request #893 · shouri123/Late-Meet

dependabot · 2026-07-24T11:44:09Z

Bumps fast-check from 4.8.0 to 4.9.0.

Release notes

Shrinkable entityGraph and few performance chips

[Code][Diff]

Features

(PR#7008) Towards shrinkable entityGraph thanks to chainUntil

Fixes

(PR#7010) Bug: Fix latent state-sharing bug in entityGraph

(PR#7063) Bug: Equiprobable alternatives in stringMatching

(PR#6973) CI: Drop caches on push for build package flow

(PR#6971) CI: Only mark fast-check's releases as latest

(PR#6974) CI: Drop pull_request_target flows

(PR#6975) CI: Drop discussion creation on release publish

(PR#6976) CI: Drop caches from publication steps

(PR#6977) CI: Revert "Drop caches from publication steps"

(PR#6978) CI: Make zizmor audit a required status check

(PR#6991) CI: Remove Claude Code workflow

(PR#6994) CI: Replace pnpm dlx with pnpm exec for pkg-pr-new

(PR#6995) CI: Inline zizmor ignores in workflow

(PR#6996) CI: Move to devEngines.packageManager

(PR#7005) CI: Update PULL_REQUEST_TEMPLATE.md

(PR#7011) CI: Drop OTP prompt from npm publish

(PR#7013) CI: Switch release jobs to npm stage publish

(PR#7027) CI: Run benchmarks against main

(PR#7037) CI: Use comparison mode for bench

(PR#7069) CI: Run pnpm dedupe to deduplicate lockfile

(PR#6959) CI: Announce releases on Bluesky

(PR#7105) CI: Switch to actions/attest for attestations

(PR#7117) CI: Use pnpm version in changelog script

(PR#7120) CI: Allow unclean tree in changelog generation

(PR#7125) CI: Stage publish using pnpm in publish jobs

(PR#7065) Clean: Delete skills directory

(PR#6983) Doc: Tweak PR Template to hint AI agents into revealing themselves

(PR#7092) Doc: Add back skills directory

(PR#7095) Doc: Add release notes for fast-check 4.8.0

(PR#7104) Doc: Add makeeno as doc contributor

(PR#7103) Doc: Fix info box in docs

(PR#7108) Doc: Add jneidel as doc contributor

(PR#7035) Performance: Faster fc.integer on generate

(PR#7046) Performance: Faster fc.record on generate

(PR#7047) Performance: Faster fc.dictionary on generate

(PR#7048) Performance: Faster fc.webPath/fc.webUrl on generate

(PR#7050) Performance: Faster fc.stringMatching for \W \D \S .

(PR#7054) Performance: Faster fc.stringMatching on generate

(PR#7049) Performance: Drop nested tuple on generate for fc.record

(PR#7045) Performance: Faster fc.entityGraph on generate

(PR#7071) Performance: Early exit on empty tuple in fc.entityGraph

... (truncated)

Changelog

Sourced from fast-check's changelog.

4.9.0

Shrinkable entityGraph and few performance chips [Code][Diff]

Features

(PR#7008) Towards shrinkable entityGraph thanks to chainUntil

Fixes

(PR#7010) Bug: Fix latent state-sharing bug in entityGraph

(PR#7063) Bug: Equiprobable alternatives in stringMatching

(PR#6973) CI: Drop caches on push for build package flow

(PR#6971) CI: Only mark fast-check's releases as latest

(PR#6974) CI: Drop pull_request_target flows

(PR#6975) CI: Drop discussion creation on release publish

(PR#6976) CI: Drop caches from publication steps

(PR#6977) CI: Revert "Drop caches from publication steps"

(PR#6978) CI: Make zizmor audit a required status check

(PR#6991) CI: Remove Claude Code workflow

(PR#6994) CI: Replace pnpm dlx with pnpm exec for pkg-pr-new

(PR#6995) CI: Inline zizmor ignores in workflow

(PR#6996) CI: Move to devEngines.packageManager

(PR#7005) CI: Update PULL_REQUEST_TEMPLATE.md

(PR#7011) CI: Drop OTP prompt from npm publish

(PR#7013) CI: Switch release jobs to npm stage publish

(PR#7027) CI: Run benchmarks against main

(PR#7037) CI: Use comparison mode for bench

(PR#7069) CI: Run pnpm dedupe to deduplicate lockfile

(PR#6959) CI: Announce releases on Bluesky

(PR#7105) CI: Switch to actions/attest for attestations

(PR#7117) CI: Use pnpm version in changelog script

(PR#7120) CI: Allow unclean tree in changelog generation

(PR#7125) CI: Stage publish using pnpm in publish jobs

(PR#7065) Clean: Delete skills directory

(PR#6983) Doc: Tweak PR Template to hint AI agents into revealing themselves

(PR#7092) Doc: Add back skills directory

(PR#7095) Doc: Add release notes for fast-check 4.8.0

(PR#7104) Doc: Add makeeno as doc contributor

(PR#7103) Doc: Fix info box in docs

(PR#7108) Doc: Add jneidel as doc contributor

(PR#7035) Performance: Faster fc.integer on generate

(PR#7046) Performance: Faster fc.record on generate

(PR#7047) Performance: Faster fc.dictionary on generate

(PR#7048) Performance: Faster fc.webPath/fc.webUrl on generate

(PR#7050) Performance: Faster fc.stringMatching for \W \D \S .

(PR#7054) Performance: Faster fc.stringMatching on generate

(PR#7049) Performance: Drop nested tuple on generate for fc.record

(PR#7045) Performance: Faster fc.entityGraph on generate

... (truncated)

Commits

0d3c254 🔖 Update CHANGELOG.md for fast-check@4.9.0, @fast-check/packaged@0.7.1 (#7124)
bd85efe ⬆️ Update dependency @types/node to ^24.13.3 (#7118)
a0596ab ⬆️ Update dependency vitest to ^4.1.10 (#7119)
3c085da ⬆️ Update dependency prettier to v3.9.4 (#7114)
6538ff0 👥 Add jneidel as doc contributor (#7108)
8096ab0 👥 Add makeeno as doc contributor (#7104)
13fd4a6 ✏️ Typo in type EntityGraphContraints (#7088)
36e70d2 ⬆️ Update dependency @microsoft/api-extractor to ^7.58.9 (#7080)
451ede0 ⬆️ Update dependency vitest to ^4.1.8 (#7074)
949564d ⚡️ Early exit on empty tuple in fc.entityGraph (#7071)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [fast-check](https://github.com/dubzzz/fast-check/tree/HEAD/packages/fast-check) from 4.8.0 to 4.9.0. - [Release notes](https://github.com/dubzzz/fast-check/releases) - [Changelog](https://github.com/dubzzz/fast-check/blob/main/packages/fast-check/CHANGELOG.md) - [Commits](https://github.com/dubzzz/fast-check/commits/v4.9.0/packages/fast-check) --- updated-dependencies: - dependency-name: fast-check dependency-version: 4.9.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2026-07-24T11:44:37Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

github-actions · 2026-07-24T11:45:16Z

📊 Test Coverage Report

Coverage Results

github-actions · 2026-07-24T11:45:22Z

🚀 Thank You for Contributing to Late-Meet

Please ensure that:

the issue was assigned to you before opening this PR
the PR references the related issue
your changes follow repository contribution guidelines
the project builds successfully before submission

Unassigned, duplicate, or low-quality PRs may be closed.

Thank you for contributing 💙

github-actions · 2026-07-24T11:45:40Z

📦 Bundle Size Report

Metric	Size
PR Bundle	453KiB
Base Bundle	453KiB
Difference	✅ No change

🤖 Generated by the Bundle Size Report workflow

github-actions · 2026-07-24T11:45:57Z

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package

Version

Score

Details

npm/fast-check

4.9.0

🟢 7.8

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Dependency-Update-Tool	🟢 10	update tool detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	⚠️ 1	Found 1/8 approved changesets -- score normalized to 1
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
CII-Best-Practices	🟢 5	badge detected: Passing
Vulnerabilities	⚠️ 0	14 existing vulnerabilities detected
SAST	🟢 10	SAST tool is run on all commits
Packaging	🟢 10	packaging workflow detected
Signed-Releases	🟢 8	5 out of the last 5 releases have a total of 5 signed artifacts.
License	🟢 10	license file detected
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches
Fuzzing	🟢 10	project is fuzzed
CI-Tests	🟢 10	30 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors	🟢 10	project has 4 contributing companies or organizations

Scanned Files

package-lock.json

github-actions · 2026-07-24T11:48:35Z

👋 Thank you @dependabot[bot] for your contribution to Late-Meet!

⚠️ Warning: This PR does not seem to link to an open issue. Please edit the PR description to include Closes #XX to ensure your contribution counts for GSSoC points.

Please review any automated suggestions or code review comments that may appear below! We will review your PR as soon as possible!

Please consider starring the repository ⭐ to show your support!

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026

dependabot Bot requested a review from shouri123 as a code owner July 24, 2026 11:44

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026

github-actions Bot added the type:config Type: Configuration change label Jul 24, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump fast-check from 4.8.0 to 4.9.0#893

chore(deps-dev): bump fast-check from 4.8.0 to 4.9.0#893
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/fast-check-4.9.0

dependabot Bot commented on behalf of github Jul 24, 2026

Uh oh!

sonarqubecloud Bot commented Jul 24, 2026

Uh oh!

github-actions Bot commented Jul 24, 2026

Uh oh!

github-actions Bot commented Jul 24, 2026

Uh oh!

github-actions Bot commented Jul 24, 2026

Uh oh!

github-actions Bot commented Jul 24, 2026

Uh oh!

github-actions Bot commented Jul 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 24, 2026

Shrinkable entityGraph and few performance chips

Features

Fixes

4.9.0

Features

Fixes

Uh oh!

sonarqubecloud Bot commented Jul 24, 2026

Quality Gate passed

Uh oh!

github-actions Bot commented Jul 24, 2026

📊 Test Coverage Report

Uh oh!

github-actions Bot commented Jul 24, 2026

🚀 Thank You for Contributing to Late-Meet

Uh oh!

github-actions Bot commented Jul 24, 2026

📦 Bundle Size Report

Uh oh!

github-actions Bot commented Jul 24, 2026

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

github-actions Bot commented Jul 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Shrinkable `entityGraph` and few performance chips