Skip to content

Bump @faker-js/faker from 9.9.0 to 10.2.0 in /js - #137

Closed
dependabot[bot] wants to merge 1 commit into
demonstrate-cross-realm-session-vulnerabilityfrom
dependabot/npm_and_yarn/js/faker-js/faker-10.2.0
Closed

Bump @faker-js/faker from 9.9.0 to 10.2.0 in /js#137
dependabot[bot] wants to merge 1 commit into
demonstrate-cross-realm-session-vulnerabilityfrom
dependabot/npm_and_yarn/js/faker-js/faker-10.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 5, 2026

Copy link
Copy Markdown
Contributor

Bumps @faker-js/faker from 9.9.0 to 10.2.0.

Release notes

Sourced from @​faker-js/faker's releases.

v10.2.0

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from @​faker-js/faker's changelog.

10.2.0 (2025-12-27)

New Locales

  • locale: add bn_BD location module (#3614) (99a448c)
  • locale: add counties & states to nb_NO location (#3617) (3dbcbe1)
  • locale: add da states (regions) (#3656) (78c892b)
  • locale: add id_ID translation for animal, color, commerce, and word also add country to location id_ID translation. (#3608) (02c2c3e)
  • locale: add ku_kmr_latin locale (#3629) (247f42d)
  • locale: add person module data to ku_ckb (#3630) (6be2c20)

Features

  • Add support for UPC (#3648) (57b2d78)
  • commerce: allow for locale-specific product name patterns (#3657) (1cf3991)
  • finance: add IR iban (#3678) (101a74a)
  • locales: add sl_SI locale, person module (#3564) (e7c9945)
  • location: Hungarian support for city name, full street address, continents, countries and directions (hu) (#3618) (2c9aefd)

Bug Fixes

  • food: move raspberry from vegetable to fruit (#3650) (6a4f01f)
  • locale: endonym should be in Latin script (#3660) (4cda07f)
  • locale: remove additional inappropriate words from ja locale (#3665) (18a1554)
  • locale: remove offensive and inappropriate words from ja locale (#3661) (8310c8c)
  • locale: remove some negative hu words (#3664) (bd36bae)
  • location: Use accents in en country names (#3637) (24aa11f)
  • vehicle: Updated spelling Mercielago to Murcielago (#3636) (bfb1bdb)

10.1.0 (2025-10-14)

New Locales

Bug Fixes

  • locale: fix the Spring Airlines IATA Code (#3612) (b547045)

10.0.0 (2025-08-21)

New Locales

... (truncated)

Commits
  • 6ab5670 chore(release): 10.2.0 (#3688)
  • 214d7fc chore(deps): lock file maintenance (#3607)
  • a2f1575 chore(deps): update eslint (major) (#3687)
  • ca01985 chore(deps): update actions/checkout action to v6 (#3686)
  • 92daab3 chore(deps): update dependency vue-tsc to v3.2.1 (#3685)
  • c0234b1 chore(deps): update mcr.microsoft.com/devcontainers/typescript-node docker ta...
  • c7feaff chore(deps): update all non-major dependencies (#3682)
  • 27666af chore(deps): update dependency prettier to v3.7.4 (#3683)
  • d656a82 chore(deps): update dependency @​vitest/eslint-plugin to v1.6.3 (#3645)
  • 8794cac chore(deps): update mcr.microsoft.com/devcontainers/typescript-node:22 docker...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​faker-js/faker since your current version.


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [@faker-js/faker](https://github.com/faker-js/faker) from 9.9.0 to 10.2.0.
- [Release notes](https://github.com/faker-js/faker/releases)
- [Changelog](https://github.com/faker-js/faker/blob/next/CHANGELOG.md)
- [Commits](faker-js/faker@v9.9.0...v10.2.0)

---
updated-dependencies:
- dependency-name: "@faker-js/faker"
  dependency-version: 10.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jan 5, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: area/dependencies, team/ui. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@augment-app-staging

Copy link
Copy Markdown
🤖 Augment PR Summary

Summary: Updates the JS workspace’s test-data generator dependency to a newer major release.

Changes:

  • Bumped @faker-js/faker in js/libs/keycloak-admin-client from ^9.9.0 to ^10.2.0.
  • Updated js/pnpm-lock.yaml to lock Faker at 10.2.0.
  • Lockfile refresh also updates some transitive tooling deps (notably esbuild to 0.25.12 and get-tsconfig to 4.13.0) along with platform-specific packages.
  • Records updated upstream package metadata in the lockfile (e.g., new deprecated notices).

Technical Notes: Faker v10 introduces stricter Node engine requirements, so ensuring the repo’s documented/tooling Node version remains aligned may be important.

🤖 Was this summary useful? React with 👍 or 👎

@augment-app-staging augment-app-staging Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review completed. 1 suggestions posted.

Fix All in Augment

Comment augment review to trigger a new review at any time.

},
"devDependencies": {
"@faker-js/faker": "^9.9.0",
"@faker-js/faker": "^10.2.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@faker-js/faker@10.2.0 tightens its engines to Node ^20.19.0 (per the lockfile), so installs/tests will fail on Node 18. This appears to conflict with this package’s engines: >=18 (and docs that mention “Node 18+”), so please verify the intended minimum Node version for contributors.

Fix This in Augment

🤖 Was this useful? React with 👍 or 👎, or 🚀 if it prevented an incident/outage.

@dependabot @github

dependabot Bot commented on behalf of github Feb 9, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #198.

@dependabot dependabot Bot closed this Feb 9, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/js/faker-js/faker-10.2.0 branch February 9, 2026 00:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants