Skip to content

Bump simple-git and promptfoo in /test/ai-development - #84104

Merged
jeryj merged 1 commit into
trunkfrom
dependabot/npm_and_yarn/test/ai-development/multi-26e27d1400
Oct 8, 2026
Merged

Bump simple-git and promptfoo in /test/ai-development#84104
jeryj merged 1 commit into
trunkfrom
dependabot/npm_and_yarn/test/ai-development/multi-26e27d1400

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps simple-git to 4.0.2 and updates ancestor dependency promptfoo. These dependencies need to be updated together.

Updates simple-git from 3.36.0 to 4.0.2

Release notes

Sourced from simple-git's releases.

simple-git@4.0.2

Patch Changes

  • 68874c2: Add VISUAL environment variable to set of allowUnsafeEditor environment variables.

    Thanks to @​oss-security-shopify for identifying the vulnerability.

  • Updated dependencies [68874c2]

    • @​simple-git/argv-parser@​2.0.1

simple-git@4.0.1

Patch Changes

  • 365f52d: Prepare package.json before publishing.

simple-git@4.0.0

Major Changes

  • 98864c6: Major upgrade to v4. In this version:

    • Removed previously available default export, now uses a consistently named simpleGit export.
    • Removed previously deprecated import simple-git/promise (change to using the main simple-git import).
    • Removed legacy gitP export (change to using the main simpleGit export).
    // v3 - previously supported imports
import simpleGit from "simple-git";
import { gitP } from "simple-git";
import simpleGit from "simple-git/promise";
const simpleGit = require("simple-git");
// v4 - consolidates to a single supported import
import { simpleGit } from "simple-git";
const { simpleGit } = require("simple-git");

    • Prevents the use of abbreviated long-form git options:
    // v3 - allowed the use of unambiguous long-form options
git.raw("clone", "--conf=user.name=me", "...");
// v4 - requires full option names, abbreviated option names will now throw a GitConfigurationError
git.raw("fetch", "--config=user.name=me", "...");

    • Ambient environment variables are filtered before passing into the git child process.
    // v3

... (truncated)

Changelog

Sourced from simple-git's changelog.

4.0.2

Patch Changes

  • 68874c2: Add VISUAL environment variable to set of allowUnsafeEditor environment variables.

    Thanks to @​oss-security-shopify for identifying the vulnerability.

  • Updated dependencies [68874c2]

    • @​simple-git/argv-parser@​2.0.1

4.0.1

Patch Changes

  • 365f52d: Prepare package.json before publishing.

4.0.0

Major Changes

  • 98864c6: Major upgrade to v4. In this version:

    • Removed previously available default export, now uses a consistently named simpleGit export.
    • Removed previously deprecated import simple-git/promise (change to using the main simple-git import).
    • Removed legacy gitP export (change to using the main simpleGit export).
    // v3 - previously supported imports
import simpleGit from "simple-git";
import { gitP } from "simple-git";
import simpleGit from "simple-git/promise";
const simpleGit = require("simple-git");
// v4 - consolidates to a single supported import
import { simpleGit } from "simple-git";
const { simpleGit } = require("simple-git");

    • Prevents the use of abbreviated long-form git options:
    // v3 - allowed the use of unambiguous long-form options
git.raw("clone", "--conf=user.name=me", "...");
// v4 - requires full option names, abbreviated option names will now throw a GitConfigurationError
git.raw("fetch", "--config=user.name=me", "...");

    Thanks to @​anir0y, @​CFionaBF, @​Leeziao, @​internetteletubbie, @​idisdi, @​the-vibe-dev,

... (truncated)

Commits

Updates promptfoo from 0.123.1 to 0.124.0

Release notes

Sourced from promptfoo's releases.

0.124.0

0.124.0 (2026-10-06)

⚠ BREAKING CHANGES

  • providers: remove hosted ChatKit provider (#11434)
  • providers: make WatsonX SDKs opt-in (#11359)
  • deps: make Langfuse SDK opt-in (#11351)
  • deps: make Slack SDK opt-in (#11349)
  • providers: make OpenAI Agents an explicit install (#11177)
  • providers: make Codex Security SDK opt-in (#11325)
  • providers: make browser SDKs explicit installs (#11163)
  • deps: make local Transformers opt-in (#11119)

Features

Bug Fixes

  • anthropic: bump OAuth Claude Code user-agent to 2.1.285 (#11323) (29bddde)
  • app: share cloud configuration requests across consumers (#11193) (ef7923c)
  • assertions: accept grader result shapes earlier releases recorded (#11391) (3233b37)
  • assertions: await meteor handler so missing natural dep grades as failure (#11312) (6b00513)
  • assertions: clamp inverse RAG scores to the documented 0-1 range (#11082) (eee76e2)
  • assertions: honor the not- prefix for model-graded-closedqa and factuality (#11185) (8a1d6a7)
  • assertions: ignore blank BLEU references (#11278) (eee7e74)
  • assertions: ignore grader prose in context-relevance scoring (#10251) (016aad3)
  • assertions: keep custom reason when negated script assertions fail (#11246) (0f11b51)
  • assertions: log why select-best grading failed (#11396) (941f738)
  • assertions: validate BLEU weights before empty score (#9858) (0251010)
  • assertions: validate custom grading results (#11079) (f34fe4e)
  • cli: allow a literal comma in --filter-metadata values (#11397) (d206bb3)
  • cli: correct Cloud organization guidance (#11078) (de8a542)
  • cli: fail the exit code when a target error stops the eval (#11400) (84fbc8e)
  • cli: handle asynchronous browser launch errors (#11115) (11a4ce2)
  • cli: keep Cloud login in the token organization (#11026) (b85c2f1)
  • cli: preserve Cloud team selection (#11018) (3379c9e)

... (truncated)

Changelog

Sourced from promptfoo's changelog.

0.124.0 (2026-10-06)

⚠ BREAKING CHANGES

  • providers: remove hosted ChatKit provider (#11434)
  • providers: make WatsonX SDKs opt-in (#11359)
  • deps: make Langfuse SDK opt-in (#11351)
  • deps: make Slack SDK opt-in (#11349)
  • providers: make OpenAI Agents an explicit install (#11177)
  • providers: make Codex Security SDK opt-in (#11325)
  • providers: make browser SDKs explicit installs (#11163)
  • deps: make local Transformers opt-in (#11119)

Features

Bug Fixes

  • anthropic: bump OAuth Claude Code user-agent to 2.1.285 (#11323) (29bddde)
  • app: share cloud configuration requests across consumers (#11193) (ef7923c)
  • assertions: accept grader result shapes earlier releases recorded (#11391) (3233b37)
  • assertions: await meteor handler so missing natural dep grades as failure (#11312) (6b00513)
  • assertions: clamp inverse RAG scores to the documented 0-1 range (#11082) (eee76e2)
  • assertions: honor the not- prefix for model-graded-closedqa and factuality (#11185) (8a1d6a7)
  • assertions: ignore blank BLEU references (#11278) (eee7e74)
  • assertions: ignore grader prose in context-relevance scoring (#10251) (016aad3)
  • assertions: keep custom reason when negated script assertions fail (#11246) (0f11b51)
  • assertions: log why select-best grading failed (#11396) (941f738)
  • assertions: validate BLEU weights before empty score (#9858) (0251010)
  • assertions: validate custom grading results (#11079) (f34fe4e)
  • cli: allow a literal comma in --filter-metadata values (#11397) (d206bb3)
  • cli: correct Cloud organization guidance (#11078) (de8a542)
  • cli: fail the exit code when a target error stops the eval (#11400) (84fbc8e)
  • cli: handle asynchronous browser launch errors (#11115) (11a4ce2)
  • cli: keep Cloud login in the token organization (#11026) (b85c2f1)
  • cli: preserve Cloud team selection (#11018) (3379c9e)
  • cli: silence internal decompression warning (#11346) (c0017f6)
  • code-scan: include large unknown text files (#11129) (3d65dce)
  • code-scan: launch filesystem MCP on Windows (#11244) (9759f34)

... (truncated)

Commits
  • 3094993 chore(main): release 0.124.0 (#10988)
  • 1287cfd fix(deps-dev): bump http-cache-semantics from 4.2.0 to 4.3.0 in the npm_and_y...
  • 86e69ca fix(providers): scope prepared cloud provider resolution (#11440)
  • bbd7795 fix(providers): release resources while preserving reuse (#11432)
  • 35bd151 chore(providers)!: remove hosted ChatKit provider (#11434)
  • 4bc2d95 chore(deps): update dependency @​anthropic-ai/claude-agent-sdk to v0.3.283 (#1...
  • fa605a9 ci: run package acceptance checks in parallel (#11430)
  • f5738e3 fix(eval): cap HuggingFace dataset pages at 100 rows (#11421)
  • 13f82c3 fix(eval): keep HuggingFace rows when a prefetch fails (#11419)
  • b56166b docs(site): clarify MCP redirect protection (#11426)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added [Type] Build Tooling Issues or PRs related to build tooling dependencies Pull requests that update a dependency file labels Oct 6, 2026
@github-actions

github-actions Bot commented Oct 6, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 PR meta 🤖

🎉 Props

If you're merging code through a pull request on GitHub, copy and paste the following into the bottom of the merge commit message.

Co-authored-by: jeryj <jeryj@git.wordpress.org>
Co-authored-by: sirreal <jonsurrell@git.wordpress.org>

To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook.

Updated as activity occurs, without notifying anyone named here. Add the props-bot label to refresh.

📦 Bundle size

Size Change: 0 B

Total Size: 8.3 MB

0b5a9d7 Run

⚡ Performance

Show the results

Client side metrics exclude the server response time.

front-end-block-theme

Metric 193f80c trunk % Change
timeToFirstByte 61.1 ms +10.72% -4.17% 59.1 ms +4.48% -5.08% 3.38%
largestContentfulPaint 100 ms +8% -4% 100 ms +4% -4% 0%
lcpMinusTtfb 36.95 ms +7.31% -4.33% 39.1 ms +11.64% -8.82% -5.5%
wpBeforeTemplate 31.34 ms +13.02% -6.45% 28.94 ms +10.99% -2.25% 8.29%
wpTemplate 26.54 ms +2.41% -5.73% 24.54 ms +6.32% -3.06% 8.15%
wpTotal 57.18 ms +8.73% -4.39% 55.19 ms +4.98% -4.98% 3.61%
wpMemoryUsage 7.66 MB +0% -0% 7.63 MB +0% -0% 0.45%
wpDbQueries 17 +0% -0% 17 +0% -0% 0%

front-end-classic-theme

Metric 193f80c trunk % Change
timeToFirstByte 50.1 ms +9.28% -3.59% 49.5 ms +1.92% -2.63% 1.21%
largestContentfulPaint 108 ms +5.56% -3.7% 104 ms +3.85% -0% 3.85%
lcpMinusTtfb 57.9 ms +1.55% -2.76% 55.8 ms +5.91% -2.33% 3.76%
wpBeforeTemplate 27.59 ms +12.29% -3.08% 26.83 ms +7.38% -1.08% 2.83%
wpTemplate 18.87 ms +5.94% -2.28% 18.45 ms +3.63% -3.52% 2.28%
wpTotal 46.7 ms +9.06% -3.06% 46.24 ms +2.42% -2.47% 0.99%
wpMemoryUsage 6.29 MB +0% -0% 6.24 MB +0% -0% 0.7%
wpDbQueries 14 +0% -0% 14 +0% -0% 0%

media-processing

Metric 193f80c trunk % Change
mediaProcessingJpeg 405.09 ms +2.08% -0.57% 401.46 ms +0.81% -1.16% 0.9%
mediaProcessingAvif 6086.06 ms +0.18% -0.11% 6066.7 ms +0.31% -0.19% 0.32%
mediaProcessingJpegToAvif 4194.62 ms +0.12% -0.05% 4192.3 ms +0.28% -0.1% 0.06%

media-upload

Metric 193f80c trunk % Change
jpegUploadProcessing 1473.75 ms +33.64% -3.2% 1413.37 ms +2.14% -0.42% 4.27%
pngUploadProcessing 197.95 ms +21.27% -10.38% 221.94 ms +1.39% -4.67% -10.81%
largeJpegUploadProcessing 1420.55 ms +1.38% -0.59% 1415.24 ms +0.92% -0.35% 0.38%
multipleImageUploadProcessing 1644.93 ms +5.54% -3.59% 1569.07 ms +9.69% -2.09% 4.83%

post-editor

Metric 193f80c trunk % Change
serverResponse 264.37 ms +4.85% -8.45% 249.13 ms +8.28% -6.86% 6.12%
firstPaint 190.53 ms +7.24% -21.07% 122.76 ms +14.56% -4.81% 55.21%
domContentLoaded 676.92 ms +2.54% -1.32% 660.98 ms +1.89% -2.74% 2.41%
loaded 678 ms +2.55% -1.31% 661.92 ms +1.91% -2.75% 2.43%
firstContentfulPaint 304.65 ms +1.47% -1.55% 298.3 ms +0.31% -3.17% 2.13%
firstBlock 2004.2 ms +1.12% -2.53% 1927 ms +1.94% -3.09% 4.01%
type 14.3 ms +3.08% -7.69% 14.72 ms +3.06% -5.16% -2.85%
typeWithoutInspector 14.55 ms +4.12% -7.49% 13.64 ms +3.81% -2.35% 6.67%
typeWithTopToolbar 20.21 ms +2.72% -7.52% 20.09 ms +5.18% -2.09% 0.6%
typeContainer 6.69 ms +1.64% -3.44% 7.24 ms +4.56% -4.97% -7.6%
focus 74.21 ms +8.84% -6.09% 74.02 ms +5.31% -3.31% 0.26%
firstFocus 150.81 ms +0% -0% 161.91 ms +0% -0% -6.86%
selectAll 342.59 ms +3.63% -3.11% 345.56 ms +7.88% -1.34% -0.86%
listViewOpen 46.24 ms +5.28% -4.93% 49.7 ms +2.66% -3.88% -6.96%
inserterOpen 25.92 ms +5.44% -3.43% 27.71 ms +9.46% -4.04% -6.46%
inserterHover 8.87 ms +2.71% -5.75% 10.17 ms +2.56% -5.7% -12.78%
inserterSearch 6.78 ms +6.64% -2.65% 7.3 ms +6.85% -3.97% -7.12%
loadPatterns 413.3 ms +2.84% -2.65% 444.05 ms +1.29% -2.17% -6.92%
wpTotal 257.77 ms +4.91% -8.62% 242.24 ms +8.48% -7% 6.41%
wpMemoryUsage 13.22 MB +0% -0% 13.19 MB +0% -0% 0.25%
wpDbQueries 54 +0% -0% 54 +0% -0% 0%

site-editor

Metric 193f80c trunk % Change
serverResponse 409.65 ms +2.58% -4.25% 407.97 ms +2.23% -2.42% 0.41%
firstPaint 247.83 ms +68.2% -9.09% 243.96 ms +4.9% -8.22% 1.59%
domContentLoaded 1080.31 ms +2.07% -1.72% 1084.36 ms +1.26% -0.95% -0.37%
loaded 1081.38 ms +2.07% -1.72% 1085.36 ms +1.27% -0.93% -0.37%
firstContentfulPaint 434.26 ms +1.2% -1.38% 422.11 ms +2.29% -0.68% 2.88%
firstBlock 4015.8 ms +0.86% -0.46% 4004.61 ms +0.37% -0.67% 0.28%
type 17.79 ms +4.5% -3.2% 17.39 ms +5.06% -3.91% 2.3%
navigate 114.09 ms +4.07% -1.38% 121.07 ms +5.69% -4.82% -5.77%
loadPatterns 1246.15 ms +7.58% -2.36% 1173.12 ms +3.9% -7.05% 6.23%
loadPages 997.78 ms +0.34% -0.88% 996.74 ms +3.32% -0.88% 0.1%
wpTotal 400.3 ms +2.56% -4.35% 398.84 ms +2.28% -2.53% 0.37%
wpMemoryUsage 12.26 MB +0% -0% 12.23 MB +0% -0% 0.3%
wpDbQueries 43 +2.33% -0% 43 +2.33% -0% 0%

0b5a9d7 Run

@sirreal

sirreal commented Oct 7, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
Bump simple-git and promptfoo in /test/ai-development
0b5a9d7 
Bumps [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git) to 4.0.2 and updates ancestor dependency [promptfoo](https://github.com/promptfoo/promptfoo). These dependencies need to be updated together.


Updates `simple-git` from 3.36.0 to 4.0.2
- [Release notes](https://github.com/steveukx/git-js/releases)
- [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md)
- [Commits](https://github.com/steveukx/git-js/commits/simple-git@4.0.2/simple-git)

Updates `promptfoo` from 0.123.1 to 0.124.0
- [Release notes](https://github.com/promptfoo/promptfoo/releases)
- [Changelog](https://github.com/promptfoo/promptfoo/blob/main/CHANGELOG.md)
- [Commits](promptfoo/promptfoo@0.123.1...0.124.0)

---
updated-dependencies:
- dependency-name: promptfoo
  dependency-version: 0.124.0
  dependency-type: direct:development
- dependency-name: simple-git
  dependency-version: 4.0.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/test/ai-development/multi-26e27d1400 branch from 915398e to 0b5a9d7 Compare October 7, 2026 08:15
@sirreal
sirreal requested a review from jeryj October 7, 2026 08:18
@sirreal

sirreal commented Oct 7, 2026

Copy link
Copy Markdown
Member

This was introduced in #80812 - @jeryj will you check this and merge if the dependency bump is OK?

@jeryj
jeryj requested a balanced review from Copilot October 7, 2026 20:16
Copilot AI reviewed Oct 7, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The dependency update is internally consistent and existing configurations do not use the removed opt-in providers.

0 open findings

What changed in this PR

Updates the standalone AI-development evaluation tooling to Promptfoo 0.124.0, bringing its compatible simple-git 4.0.2 dependency.

Changes:

  • Bumps Promptfoo from 0.123.1 to 0.124.0.
  • Resolves the associated simple-git security update.
File Description
test/​ai-development/​package.json Updates the pinned Promptfoo development dependency.

🧠 Review effort: Balanced

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

jeryj
jeryj approved these changes Oct 7, 2026
View reviewed changes

@jeryj jeryj left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Looks good. Thanks!

@jeryj
jeryj enabled auto-merge (squash) October 7, 2026 20:30
@jeryj
jeryj merged commit 7c659ee into trunk Oct 8, 2026
86 of 87 checks passed
@jeryj
jeryj deleted the dependabot/npm_and_yarn/test/ai-development/multi-26e27d1400 branch October 8, 2026 00:38
@github-actions github-actions Bot added this to the Gutenberg 24.3 milestone Oct 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@jeryj jeryj jeryj approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file [Type] Build Tooling Issues or PRs related to build tooling

Projects

None yet

Milestone

Gutenberg 24.3

Development

Successfully merging this pull request may close these issues.

3 participants

@sirreal @jeryj