Skip to content

build(deps-dev): bump vitest to 5.0.5 - #421

Open
claude[bot] wants to merge 1 commit into
mainfrom
vitest-5.0.5
Open

claude[bot] wants to merge 1 commit into
mainfrom
vitest-5.0.5

Conversation

@claude

@claude claude Bot commented Oct 22, 2026

Copy link
Copy Markdown
Contributor

This moves vitest and @vitest/coverage-v8 from 5.0.1 to 5.0.5. 5.0.5 carries the fix for GHSA-p458-7748-mcp3, which affects @vitest/ui and @vitest/browser. This repo doesn't use either of those, so it wasn't exposed; the bump just keeps the vitest family in step. The lockfile only moves vitest and its own dependencies. Lint, build and build:docs pass locally on Linux with Node 22. In yarn test, 86 tests pass; the 5 that download from GitHub releases fail locally only because my sandbox can't reach github.com release assets, so CI is the check for those.


Generated by Claude Code

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01N2vvE5XzurMvQfsX7Vz7bF
@claude
claude Bot requested a review from a team as a code owner October 22, 2026 22:52
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​vitest/​coverage-v8@​5.0.1 ⏵ 5.0.599 +110079 +199100
Updatedvitest@​5.0.1 ⏵ 5.0.59810079 +199 +1100

View full report

@claude claude Bot left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code review found no issues

No high-confidence issues detected in this change.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants