chore(deps-dev): bump jsdom from 28.1.0 to 29.0.0 in /src/microsoft-trydotnet

[dependabot]

Bumps jsdom from 28.1.0 to 29.0.0.

Release notes

Sourced from jsdom's releases.

v29.0.0

Breaking changes:

• Node.js v22.13.0+ is now the minimum supported v22 version (was v22.12.0+).

Other changes:

• Overhauled the CSSOM implementation, replacing the @acemir/cssom and cssstyle dependencies with fresh internal implementations built on webidl2js wrappers and the css-tree parser. Serialization, parsing, and API behavior is improved in various ways, especially around edge cases.
• Added CSSCounterStyleRule and CSSNamespaceRule to jsdom Windows.
• Added cssMediaRule.matches and cssSupportsRule.matches getters.
• Added proper media query parsing in MediaList, using css-tree instead of naive comma-splitting. Invalid queries become "not all" per spec.
• Added cssKeyframeRule.keyText getter/setter validation.
• Added cssStyleRule.selectorText setter validation: invalid selectors are now rejected.
• Added styleSheet.ownerNode, styleSheet.href, and styleSheet.title.
• Added bad port blocking per the fetch specification, preventing fetches to commonly-abused ports.
• Improved Document initialization performance by lazily initializing the CSS selector engine, avoiding ~0.5 ms of overhead per Document. (@​thypon)
• Fixed a memory leak when stylesheets were removed from the document.
• Fixed CSSStyleDeclaration modifications to properly trigger custom element reactions.
• Fixed nested @media rule parsing.
• Fixed CSSStyleSheet's "disallow modification" flag not being checked in all mutation methods.
• Fixed XMLHttpRequest's response getter returning parsed JSON during the LOADING state instead of null.
• Fixed getComputedStyle() crashing in XHTML documents when stylesheets contained at-rules such as @page or @font-face.
• Fixed a potential hang in synchronous XMLHttpRequest caused by a race condition with the worker thread's idle timeout.

Changelog

Sourced from jsdom's changelog.

29.0.0

Breaking changes:

• Node.js v22.13.0+ is now the minimum supported v22 version (was v22.12.0+).

Other changes:

• Overhauled the CSSOM implementation, replacing the @acemir/cssom and cssstyle dependencies with fresh internal implementations built on webidl2js wrappers and the css-tree parser. Serialization, parsing, and API behavior is improved in various ways, especially around edge cases.
• Added CSSCounterStyleRule and CSSNamespaceRule to jsdom Windows.
• Added cssMediaRule.matches and cssSupportsRule.matches getters.
• Added proper media query parsing in MediaList, using css-tree instead of naive comma-splitting. Invalid queries become "not all" per spec.
• Added cssKeyframeRule.keyText getter/setter validation.
• Added cssStyleRule.selectorText setter validation: invalid selectors are now rejected.
• Added styleSheet.ownerNode, styleSheet.href, and styleSheet.title.
• Added bad port blocking per the fetch specification, preventing fetches to commonly-abused ports.
• Improved Document initialization performance by lazily initializing the CSS selector engine, avoiding ~0.5 ms of overhead per Document. (thypon)
• Fixed a memory leak when stylesheets were removed from the document.
• Fixed CSSStyleDeclaration modifications to properly trigger custom element reactions.
• Fixed nested @media rule parsing.
• Fixed CSSStyleSheet's "disallow modification" flag not being checked in all mutation methods.
• Fixed XMLHttpRequest's response getter returning parsed JSON during the LOADING state instead of null.
• Fixed getComputedStyle() crashing in XHTML documents when stylesheets contained at-rules such as @page or @font-face.
• Fixed a potential hang in synchronous XMLHttpRequest caused by a race condition with the worker thread's idle timeout.

Commits

• 00522ce Version 29.0.0
• a217975 Use undici's request() API for XHR dispatching
• f29722d Convert CSSStyleDeclaration to webidl2js
• 4aaacc6 Merge in cssstyle and replace @acemir/cssom
• 6c2769a Remove unused http(s)-proxy-agent dependencies
• eba96b5 Update domSelector
• 54f9995 Use --fgrep for npm run test:tuwpt:browser
• 15e7664 Use stable ports for test:tuwpt:browser
• 7410bdb Suppress informational WPT output when using the min reporter
• c44377e Lazily initialize DOMSelector
• Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Automated Major Version Review — APPROVED

Package: jsdom
Ecosystem: npm
Version change: 28.1.0 → 29.0.0 (major bump)

Research Summary

• Sources consulted:
  • https://github.com/jsdom/jsdom/releases/tag/29.0.0 — Official release notes for jsdom 29.0.0; reviewed all breaking and non-breaking changes
  • https://github.com/advisories?query=ecosystem%3Anpm+jsdom — Checked GitHub Advisory Database for security advisories affecting jsdom
  • .github/actions/setup-node/action.yml — Verified the Node.js version used in CI (Node.js 20)

Breaking Changes Analysis

• Node.js v22.13.0+ minimum for v22 series (was v22.12.0+): This repository uses Node.js 20 in CI (node-version: '20' in the setup-node action), so this change does not affect the build or test pipeline. Node.js 20.19.0+ is still supported (same as jsdom 28).
• All other changes in jsdom 29.0.0 are improvements and bug fixes: overhauled CSSOM implementation (removing @acemir/cssom and cssstyle dependencies in favor of fresh internal implementations), new APIs (CSSCounterStyleRule, CSSNamespaceRule, etc.), performance improvements, and memory leak fixes.
• jsdom is a dev dependency used only for tests, so the CSSOM/CSS improvements carry no production risk.

Security Check

• The GitHub Advisory Database shows 2 historical advisories for jsdom; these are known older vulnerabilities affecting versions well below 28.x. No advisories were found affecting jsdom 28.1.0 or 29.0.0 specifically. Upgrading to 29.0.0 reduces the attack surface by removing external dependencies (agent-base, http-proxy-agent, https-proxy-agent, cssstyle, @acemir/cssom).

Decision

✅ This major version update is safe to merge. CI checks pass, the diff contains only version file changes (package.json, package-lock.json), and no breaking changes affect this repository's usage of the package.

Generated by Dependabot Major Version Reviewer · ◷