Repository navigation
build(deps-dev): upgrade vitest to v5 - #179
Merged
Merged
Conversation
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01N2vvE5XzurMvQfsX7Vz7bF
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
dsanders11
requested changes
Oct 7, 2026
dsanders11
left a comment
dsanders11
left a comment
Member
There was a problem hiding this comment.
@claude, lets create a .nvmrc file here in the repo and point CI to it.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01N2vvE5XzurMvQfsX7Vz7bF
Contributor
Author
|
Added Generated by Claude Code |
dsanders11
approved these changes
Oct 7, 2026
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01N2vvE5XzurMvQfsX7Vz7bF
Moves vite off 8.3.0, which is affected by GHSA-587h-7wmj-h5pm (>=8.3.0 <8.3.3). 8.3.4 is the newest patched 8.x that passes the repo's npmMinimalAgeGate; the range floor is raised so the vulnerable versions can no longer be resolved. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01N2vvE5XzurMvQfsX7Vz7bF
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01N2vvE5XzurMvQfsX7Vz7bF
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01N2vvE5XzurMvQfsX7Vz7bF
|
All alerts resolved. Learn more about Socket for GitHub. This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. |
Main's vite 8.3.4 bump (#181) locked rolldown 1.2.15, its bindings, @oxc-project/types 0.155.0 and postcss 8.5.31, all published less than 7 days ago. Pin rolldown back to 1.2.14 and postcss to 8.5.30 (lockfile-only) to stay outside the minimal age gate. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01N2vvE5XzurMvQfsX7Vz7bF
MarshallOfSound
approved these changes
Oct 22, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This moves the test suite to Vitest 5 (vitest and @vitest/coverage-v8 to ^5.0.1). Vitest 5 needs Node 22.12+, so the engines floor goes from 22 to 22.12.0 and the CI, check-dist and lint workflows now run on Node 24, which also matches the action's node24 runtime. Vite is now a required peer of Vitest rather than a transitive dependency, so it is added as a devDependency at ^8.3.0, reusing the 8.3.0 already in the lockfile. @types/node goes from ^20 to ^24 to line up with the runtime and with Vite's peer range; that bump needed no source changes. No tests or config used APIs Vitest 5 removed, there are no snapshots, and the rebuilt dist/ is unchanged. Install, format check, lint, typecheck, tests with coverage, and the dist comparison all pass locally.
🤖 Generated with Claude Code
https://claude.ai/code/session_01N2vvE5XzurMvQfsX7Vz7bF
Generated by Claude Code