Skip to content

build(deps-dev): bump @microsoft/rush from 5.177.2 to 5.178.0 in the dev group#331

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/dev-a3de2cdac7
Open

build(deps-dev): bump @microsoft/rush from 5.177.2 to 5.178.0 in the dev group#331
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/dev-a3de2cdac7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev group with 1 update: @microsoft/rush.

Updates @microsoft/rush from 5.177.2 to 5.178.0

Changelog

Sourced from @​microsoft/rush's changelog.

5.178.0

Mon, 20 Jul 2026 17:49:39 GMT

Patches

  • Pass change file paths as discrete Git arguments when adding commit details during publishing.
  • Fix an issue where "rush-pnpm patch-commit" rewrote the pre-existing "globalPatchedDependencies" entries in pnpm-config.json using absolute paths when running with pnpm >= 9.
  • Fixed an issue where the pnpm ignoredOptionalDependencies, trustPolicy, trustPolicyExclude, and trustPolicyIgnoreAfterMinutes settings were written to the pnpm field of the generated package.json (which pnpm 11 ignores) instead of pnpm-workspace.yaml, causing them to be silently ignored under pnpm 11.
  • Fix pnpm 11 silently ignoring the globalOverrides, globalPackageExtensions, globalPeerDependencyRules, globalAllowedDeprecatedVersions, and globalPatchedDependencies settings from pnpm-config.json. Because pnpm 11 no longer reads the pnpm field of package.json, Rush now writes these settings to the generated common/temp/pnpm-workspace.yaml for pnpm 11+ (matching the existing allowBuilds relocation), and rush-pnpm patch-commit/patch-remove now read patchedDependencies back from pnpm-workspace.yaml for pnpm 11+. Behavior for pnpm 10 and earlier is unchanged.

Updates

  • Fix minimumReleaseAge and minimumReleaseAgeExclude in pnpm-config.json being silently ignored because they were written to package.json instead of pnpm-workspace.yaml
  • Add optional file-based transfer APIs (tryDownloadCacheEntryToFileAsync, tryUploadCacheEntryFromFileAsync) to ICloudBuildCacheProvider, allowing cache plugins to transfer cache entries directly to and from files on disk without buffering entire contents in memory. Implement in @rushstack/rush-http-build-cache-plugin, @rushstack/rush-amazon-s3-build-cache-plugin, and @rushstack/rush-azure-storage-build-cache-plugin. Gated behind the useDirectFileTransfersForBuildCache experiment.
  • Avoid redundant downloads when multiple local Rush processes race to restore the same build cache entry (when useDirectFileTransfersForBuildCache is enabled).
  • Replace @override with the override keyword.
  • (PLUGIN BREAKING CHANGE) Overhaul watch-mode commands such that the graph is only created once at the start of command invocation, along with a stateful manager object. Plugins may now access the manager object and use it to orchestrate and tap into the build process.
Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
@microsoft/rush [>= 5.144.a, < 5.145]

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev group with 1 update: [@microsoft/rush](https://github.com/microsoft/rushstack/tree/HEAD/apps/rush).


Updates `@microsoft/rush` from 5.177.2 to 5.178.0
- [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/rush/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rushstack/commits/@microsoft/rush_v5.178.0/apps/rush)

---
updated-dependencies:
- dependency-name: "@microsoft/rush"
  dependency-version: 5.178.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 23, 2026
@dependabot
dependabot Bot requested review from a team as code owners July 23, 2026 20:34
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 23, 2026
@codecov

codecov Bot commented Jul 23, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.30%. Comparing base (7725a8e) to head (dbdaa04).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #331   +/-   ##
=======================================
  Coverage   95.30%   95.30%           
=======================================
  Files         137      137           
  Lines        6388     6388           
  Branches     1679     1679           
=======================================
  Hits         6088     6088           
  Misses        300      300           
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@nevware21-bot nevware21-bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved by nevware21-bot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant