[dependabot]

Bumps @testing-library/user-event from 14.6.1 to 14.6.8.

Release notes

Sourced from @​testing-library/user-event's releases.

v14.6.8

14.6.8 (2026-10-13)

Bug Fixes

• treat programmatic null input values as empty string (#1329) (1951eb7)

v14.6.7

14.6.7 (2026-09-02)

Bug Fixes

• normalize DataTransfer format aliases (#1326) (1e0020b)
• feature: Add iframe support for user.keyboard typing (#1275) (1e0020b)

v14.6.6

14.6.6 (2026-08-22)

Bug Fixes

• default pointer event pointerType to empty string instead of the string "undefined" (#1325) (71a5475)

v14.6.5

14.6.5 (2026-08-18)

Bug Fixes

• tab retargeting if focus moved during keydown (#1296) (43efda7)

v14.6.4

14.6.4 (2026-08-11)

Bug Fixes

• keyboard event repeat property (#1312) (d7e80e3)

v14.6.3

14.6.3 (2026-08-03)

Bug Fixes

• release: manually release a patch version (#1321) (1d18b1f), closes #1317

v14.6.2

... (truncated)

Commits

• 1951eb7 fix: treat programmatic null input values as empty string (#1329)
• 1e0020b fix: normalize DataTransfer format aliases (#1326)
• d4b0593 feature: Add iframe support for user.keyboard typing (#1275)
• 71a5475 fix: default pointer event pointerType to empty string instead of the string ...
• 43efda7 fix: tab retargeting if focus moved during keydown (#1296)
• d7e80e3 fix: keyboard event repeat property (#1312)
• 43d8e6c ci: remove broken npm backfill step (#1322)
• 1d18b1f fix(release): manually release a patch version (#1321)
• 232f3e6 docs: add migration note and clean up README badges (#1320)
• 83e2b22 ci: remove deprecated CodeSandbox CI (#1318)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/user-event since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[martastn]

Verdict: Safe to merge

Bump: @testing-library/user-event 14.6.1 → 14.6.8 (patch, direct in dependencies, no dependents)

Changes:

• Bug fixes only (keyboard repeat, Tab retargeting, pointerType default, DataTransfer aliases, null input values); no breaking changes, no CVEs, no dep/peer/engine changes
• Publishing moved to OIDC trusted publishing (build(deps): bump public/libs/jsroot from 89f7201 to a9e628a #1317), which explains the "new releaser"; 14.6.8 has SLSA provenance from testing-library/user-event ci.yml@main

Usage in repo: not imported anywhere (only listed in package.json)

Impact: none

Verified (origin/master vs origin/master + PR):

• tsc ✅ · unit 28/28 ✅ · full npm test 37 passed / 1 failed (flaky ProjectMenu, identical failure on master) · build ✅ (bundle Δ 0 B; output byte-identical after path normalisation)
• Manual UI/functional diff vs master: login, examples, 3D editor (load example, add/rename object, undo), project export, Simulations/Input files/About, light/dark theme, 700px width, console. No differences (DOM/style fingerprints and screenshot MD5 identical)