Skip to content

build(deps-dev): bump vitest to 5.0.5 - #185

Open
claude[bot] wants to merge 1 commit into
mainfrom
vitest-5.0.5
Open

claude[bot] wants to merge 1 commit into
mainfrom
vitest-5.0.5

Conversation

@claude

@claude claude Bot commented Oct 22, 2026

Copy link
Copy Markdown
Contributor

This moves vitest and @vitest/coverage-v8 from ^5.0.1 (locked at 5.0.3) to ^5.0.5, which brings @vitest/mocker and @vitest/spy to 5.0.5 and obug to 3.0.0 in the lockfile. Vitest 5.0.5 carries the fix for GHSA-p458-7748-mcp3, which affects @vitest/ui and @vitest/browser; this repo uses neither, so it was not exposed, and the bump keeps the vitest family in step. Lint, typecheck, format check and the tests with coverage pass locally, and yarn bundle leaves dist/ unchanged.


Generated by Claude Code

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01N2vvE5XzurMvQfsX7Vz7bF
@claude
claude Bot requested review from a team as code owners October 22, 2026 22:46
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​vitest/​coverage-v8@​5.0.3 ⏵ 5.0.599 +110079 +199100
Updatedvitest@​5.0.3 ⏵ 5.0.59810079 +199100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants