[dependabot]

Bumps chokidar from 5.0.0 to 6.0.0.

Release notes

Sourced from chokidar's releases.

6.0.0

High-level changes

• Rewrote the watcher around a single observation pipeline. Backend callbacks are treated as invalidations and confirmed with lstat, stat, or readdir before any event is emitted, so the final state after a burst of changes matches the filesystem.
• Added native recursive watching through fs.watch({ recursive: true }). The default auto backend uses it on macOS and Windows and per-directory watching elsewhere.
• Shared native handles across watchers and opened them per directory only: files no longer own handles. This fixes EBADF errors when watching many files on macOS (#1385, #1452).
• Replaced fs.watchFile with Chokidar-owned stat polling. Poll loops are shared across watchers at the fastest requested interval.
• Required Node.js 22.22 or later.

API changes

• Added the backend option: 'auto' (default), 'native', 'native-recursive', or 'polling'.
  • usePolling: true remains as a deprecated alias for backend: 'polling'.
• Renamed interval and binaryInterval to pollingInterval and pollingBinaryInterval.
  • The old names remain as deprecated aliases; the new names win when both are given.
• Changed the atomic default to false with polling. An explicit value is preserved.
• Made close() terminal: add() now throws once closing has started. Construct a new watcher instead.
• Validated options in the constructor: invalid backend, atomic, depth, awaitWriteFinish, and polling intervals throw TypeError.
• Emitted errors from add() as error events instead of unhandled rejections (#1378).
• Made getWatched() return a null-prototype object, so a watched directory named __proto__ is listed (#1493). Use Object.hasOwn() instead of hasOwnProperty() on the result.
• Stopped applying ignored to directories above a path passed to watch() or add(), so a missing path is still watched through its parent (#1374). Other entries in those directories are still filtered.

Fixes

• Fixed a 100% CPU loop when the process working directory containing a relatively watched file was deleted (#1474).
• Fixed watching a filesystem root, which emitted unlink and unlinkDir for every entry (#1184, #452).
• Fixed UNKNOWN errors from fs.watch on macOS sockets, which prevented watching /var/run (#1391).
• Fixed a symlink whose target passes through a regular file (ENOTDIR) disabling watching of its directory and preventing ready (#1476).
• Fixed files created in a newly added directory between its scan and watch registration being missed (#1471).
• Fixed watching a missing nested path stopping its parent directory's subtree from being watched (#1470).
• Fixed false change events on Windows when many sibling files are written (#1466).
• Fixed duplicate add events for unchanged files under directory activity (#1465).
• Fixed replacing a watched directory with a file of the same name hanging the process (#1464).
• Fixed persistent watching stopping after a watched directory was removed (#1463).
• Fixed a deleted watched path not being reported when recreated: previously only a deleted file that was the sole watched path was watched for its return. Any path passed to watch() or add() is now awaited from its nearest existing parent.
• Fixed event throttling discarding updates; the newest differing change is now replayed when the window closes (#1455).
• Fixed relative ignored paths; relative strings now resolve against cwd or the process working directory (#1436).
• Fixed files not being detected when their directory did not exist before watching (#1422).
• Fixed removed files being reported as unlinkDir instead of unlink (#1421).
• Fixed ignored files and directories still being watched in WSL (#1418).
• Fixed change being reported for every file when one file changed under Deno (#1417).
• Fixed changes not being detected after the second save (#1399).
• Fixed renaming a watched directory that contains subdirectories on Windows (#1380, #1398).
• Fixed re-watching a path not honoring ignoreInitial (#1386).
• Fixed EISDIR errors during the initial scan of network drives (#1376).
• Fixed watching an array of absolute file paths (#1366).
• Fixed unwatching a deleted watched directory on Windows, contributed by @​sapphi-red in [pull request #1467](paulmillr/chokidar#1467).
• Documented that unwatched paths stay ignored until they are added again (#1439).

Misc

... (truncated)

Changelog

Sourced from chokidar's changelog.

6.0.0 (2026-10-19)

High-level changes

• Rewrote the watcher around a single observation pipeline. Backend callbacks are treated as invalidations and confirmed with lstat, stat, or readdir before any event is emitted, so the final state after a burst of changes matches the filesystem.
• Added native recursive watching through fs.watch({ recursive: true }). The default auto backend uses it on macOS and Windows and per-directory watching elsewhere.
• Shared native handles across watchers and opened them per directory only: files no longer own handles. This fixes EBADF errors when watching many files on macOS (#1385, #1452).
• Replaced fs.watchFile with Chokidar-owned stat polling. Poll loops are shared across watchers at the fastest requested interval.
• Required Node.js 22.22 or later.

API changes

• Added the backend option: 'auto' (default), 'native', 'native-recursive', or 'polling'.
  • usePolling: true remains as a deprecated alias for backend: 'polling'.
• Renamed interval and binaryInterval to pollingInterval and pollingBinaryInterval.
  • The old names remain as deprecated aliases; the new names win when both are given.
• Changed the atomic default to false with polling. An explicit value is preserved.
• Made close() terminal: add() now throws once closing has started. Construct a new watcher instead.
• Validated options in the constructor: invalid backend, atomic, depth, awaitWriteFinish, and polling intervals throw TypeError.
• Emitted errors from add() as error events instead of unhandled rejections (#1378).
• Made getWatched() return a null-prototype object, so a watched directory named __proto__ is listed (#1493). Use Object.hasOwn() instead of hasOwnProperty() on the result.
• Stopped applying ignored to directories above a path passed to watch() or add(), so a missing path is still watched through its parent (#1374). Other entries in those directories are still filtered.

Fixes

• Fixed a 100% CPU loop when the process working directory containing a relatively watched file was deleted (#1474).
• Fixed watching a filesystem root, which emitted unlink and unlinkDir for every entry (#1184, #452).
• Fixed UNKNOWN errors from fs.watch on macOS sockets, which prevented watching /var/run (#1391).
• Fixed a symlink whose target passes through a regular file (ENOTDIR) disabling watching of its directory and preventing ready (#1476).
• Fixed files created in a newly added directory between its scan and watch registration being missed (#1471).
• Fixed watching a missing nested path stopping its parent directory's subtree from being watched (#1470).
• Fixed false change events on Windows when many sibling files are written (#1466).
• Fixed duplicate add events for unchanged files under directory activity (#1465).
• Fixed replacing a watched directory with a file of the same name hanging the process (#1464).
• Fixed persistent watching stopping after a watched directory was removed (#1463).
• Fixed a deleted watched path not being reported when recreated: previously only a deleted file that was the sole watched path was watched for its return. Any path passed to watch() or add() is now awaited from its nearest existing parent.
• Fixed event throttling discarding updates; the newest differing change is now replayed when the window closes (#1455).
• Fixed relative ignored paths; relative strings now resolve against cwd or the process working directory (#1436).
• Fixed files not being detected when their directory did not exist before watching (#1422).
• Fixed removed files being reported as unlinkDir instead of unlink (#1421).
• Fixed ignored files and directories still being watched in WSL (#1418).
• Fixed change being reported for every file when one file changed under Deno (#1417).
• Fixed changes not being detected after the second save (#1399).
• Fixed renaming a watched directory that contains subdirectories on Windows (#1380, #1398).
• Fixed re-watching a path not honoring ignoreInitial (#1386).
• Fixed EISDIR errors during the initial scan of network drives (#1376).
• Fixed watching an array of absolute file paths (#1366).
• Fixed unwatching a deleted watched directory on Windows, contributed by @​sapphi-red in [pull request #1467](paulmillr/chokidar#1467).
• Documented that unwatched paths stay ignored until they are added again (#1439).

... (truncated)

Commits

• 4130839 Release 6.0.0.
• 53f3256 Bump devdeps
• 11ad48f More fixes
• b6812dd Change date
• 706ef2c Merge pull request #1492 from paulmillr/jg/private-public
• d85f4cc chore: expose tested members
• 97e1b93 Add changelog
• 8d5c07d More v6 fixes
• 7af52df Bump ci release.yml
• a0b05d9 Merge pull request #1478 from paulmillr/jg/sponsors
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Note

Overview
Bumps chokidar from ^5.0.0 to ^6.0.0 in packages/mock-server (Dependabot). No application code changes.

That package uses chokidar only to watch the toolbar CDN directory for hot-reload SSE notifications, with existing options (ignored, ignoreInitial, awaitWriteFinish, etc.) that remain supported in v6. Chokidar 6 is a major release with a rewritten watcher pipeline and stricter runtime requirements (Node.js 22.22+ per upstream), while mock-server still declares engines.node: >=18—worth confirming CI and local dev Node versions before merge.

^{Reviewed by Cursor Bugbot for commit a079e15. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit a079e15. Configure here.}

[cursor]

Node engine below chokidar requirement

Medium Severity

chokidar 6.0.0 requires Node.js 22.22 or later, but mock-server still declares engines.node as >=18. On Node 18 through 22.21, which the repo still documents as supported, starting the mock server can fail when chokidar loads.

Additional Locations (1)

• packages/mock-server/package.json#L17-L18

 

^{Reviewed by Cursor Bugbot for commit a079e15. Configure here.}