Skip to content

chore(deps-dev): bump @pact-foundation/pact from 16.0.4 to 17.0.1 - #117

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/pact-foundation/pact-17.0.1
Open

chore(deps-dev): bump @pact-foundation/pact from 16.0.4 to 17.0.1#117
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/pact-foundation/pact-17.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Contributor

Bumps @pact-foundation/pact from 16.0.4 to 17.0.1.

Release notes

Sourced from @​pact-foundation/pact's releases.

Release v17.0.1

17.0.1 (2026-07-01)

Fixes and Improvements

  • verifier: run beforeEach/afterEach once per interaction without desyncing on hook failure (#1865) (fed47e2), closes #1864

Release v17.0.0

17.0.0 (2026-06-25)

⚠ BREAKING CHANGES

  • drop node 20, test against node 26 (#1813)

  • drop node 20, test against node 26 (#1813) (bdf71f7)

Features

Fixes and Improvements

Release v16.5.0

16.5.0 (2026-05-24)

Features

  • Add HTTP response status code matching support (#1790) (38a4b9b)
  • add xml support to pactv4 (ae151b7)

Fixes and Improvements

  • deps: update dependency https-proxy-agent to v9 (#1731) (e0be974)
  • regression: fix Apollo/node-fetch v3 compatibility and graphql peer dep conflict (#1805) (ef8c9f9)
  • types: allow narrow body type in {synchronous,asynchronous}BodyHandler (#1798) (507ce81)
  • v3: pass cors option to mock server transport, defaulting to true (#1767) (c31ebb2)

Release v16.4.0

16.4.0 (2026-05-04)

Features

... (truncated)

Changelog

Sourced from @​pact-foundation/pact's changelog.

17.0.1 (2026-07-01)

Fixes and Improvements

  • verifier: run beforeEach/afterEach once per interaction without desyncing on hook failure (#1865) (fed47e2), closes #1864

17.0.0 (2026-06-25)

⚠ BREAKING CHANGES

  • drop node 20, test against node 26 (#1813)

  • drop node 20, test against node 26 (#1813) (bdf71f7)

Features

Fixes and Improvements

16.5.0 (2026-05-24)

Features

  • Add HTTP response status code matching support (#1790) (38a4b9b)
  • add xml support to pactv4 (ae151b7)

Fixes and Improvements

  • deps: update dependency https-proxy-agent to v9 (#1731) (e0be974)
  • regression: fix Apollo/node-fetch v3 compatibility and graphql peer dep conflict (#1805) (ef8c9f9)
  • types: allow narrow body type in {synchronous,asynchronous}BodyHandler (#1798) (507ce81)
  • v3: pass cors option to mock server transport, defaulting to true (#1767) (c31ebb2)

16.4.0 (2026-05-04)

Features

  • add the addInteractionReference function to V4 DSL classes to support external references (#1762) (a65fe91)

16.3.1 (2026-04-29)

... (truncated)

Commits
  • b58ec04 chore(release): 17.0.1
  • fed47e2 fix(verifier): run beforeEach/afterEach once per interaction without desyncin...
  • 80057cb chore(deps): update dependency axios to v1.18.1 (#1866)
  • 3a98c28 chore(deps): update dependency @​types/ramda to v0.32.0 (#1857)
  • 40f8a93 chore(deps): update dependency serverless to v4.38.1 (#1856)
  • 19f7b86 chore(release): 17.0.0
  • f6b204c fix: ESM import issue (#1860)
  • 58dcb73 chore(deps): update dependency fast-xml-parser to v5.9.3 (#1855)
  • c1d5593 feat: enable scarf download analytics (#1859)
  • 4d32d9a chore(deps): update dependency body-parser to v2.3.0 (#1845)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​pact-foundation/pact since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@pact-foundation/pact](https://github.com/pact-foundation/pact-js) from 16.0.4 to 17.0.1.
- [Release notes](https://github.com/pact-foundation/pact-js/releases)
- [Changelog](https://github.com/pact-foundation/pact-js/blob/master/CHANGELOG.md)
- [Commits](pact-foundation/pact-js@v16.0.4...v17.0.1)

---
updated-dependencies:
- dependency-name: "@pact-foundation/pact"
  dependency-version: 17.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the 📦 Dependencies Pull requests that update a dependency file label Jul 6, 2026
@dependabot
dependabot Bot requested a review from Proskynete as a code owner July 6, 2026 07:09
@dependabot dependabot Bot added the 📦 Dependencies Pull requests that update a dependency file label Jul 6, 2026
@github-actions

github-actions Bot commented Jul 6, 2026

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@pact-foundation/pact 17.0.1 🟢 4.2
Details
CheckScoreReason
Code-Review⚠️ 0Found 0/30 approved changesets -- score normalized to 0
Maintained🟢 1030 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Pinned-Dependencies🟢 7dependency not pinned by hash detected -- score normalized to 7
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@pact-foundation/pact-core 19.2.0 🟢 3.9
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/19 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 7dependency not pinned by hash detected -- score normalized to 7
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@pact-foundation/pact-core-darwin-arm64 19.2.0 🟢 3.9
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/19 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 7dependency not pinned by hash detected -- score normalized to 7
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@pact-foundation/pact-core-darwin-x64 19.2.0 🟢 3.9
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/19 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 7dependency not pinned by hash detected -- score normalized to 7
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@pact-foundation/pact-core-linux-arm64-glibc 19.2.0 🟢 3.9
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/19 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 7dependency not pinned by hash detected -- score normalized to 7
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@pact-foundation/pact-core-linux-arm64-musl 19.2.0 🟢 3.9
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/19 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 7dependency not pinned by hash detected -- score normalized to 7
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@pact-foundation/pact-core-linux-x64-glibc 19.2.0 🟢 3.9
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/19 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 7dependency not pinned by hash detected -- score normalized to 7
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@pact-foundation/pact-core-linux-x64-musl 19.2.0 🟢 3.9
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/19 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 7dependency not pinned by hash detected -- score normalized to 7
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@pact-foundation/pact-core-windows-x64 19.2.0 🟢 3.9
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/19 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 7dependency not pinned by hash detected -- score normalized to 7
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@scarf/scarf 1.4.0 🟢 4.2
Details
CheckScoreReason
Code-Review🟢 8Found 15/18 approved changesets -- score normalized to 8
Maintained⚠️ 01 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/underscore 1.13.8 🟢 5.1
Details
CheckScoreReason
Code-Review⚠️ 1Found 4/21 approved changesets -- score normalized to 1
Maintained⚠️ 12 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST🟢 8SAST tool detected but not run on all commits

Scanned Files

  • package-lock.json

@github-actions github-actions Bot added the 🤩 size/xs Extra small PR (0-10 lines) label Jul 6, 2026
@github-actions

github-actions Bot commented Jul 6, 2026

Copy link
Copy Markdown

🐳 Docker Image Size Comparison

Branch Size
Base (main) 402MB
PR (dependabot/npm_and_yarn/pact-foundation/pact-17.0.1) 402MB

💡 Tip: Keep image size small using multi-stage builds and .dockerignore

@github-actions

github-actions Bot commented Aug 6, 2026

Copy link
Copy Markdown

This PR is stale because it has been open 30 days with no activity.
Remove the stale label or comment, or this will be closed in 5 days.

@github-actions github-actions Bot added the stale Inactive for 30+ days label Aug 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

📦 Dependencies Pull requests that update a dependency file 🤩 size/xs Extra small PR (0-10 lines) stale Inactive for 30+ days

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants