Skip to content

build(deps-dev): bump vitest to 5.0.5 - #222

Open
claude[bot] wants to merge 1 commit into
mainfrom
vitest-5.0.5
Open

claude[bot] wants to merge 1 commit into
mainfrom
vitest-5.0.5

Conversation

@claude

@claude claude Bot commented Oct 22, 2026

Copy link
Copy Markdown
Contributor

This bumps vitest from ^5.0.1 to ^5.0.5 and the exactly pinned @vitest/coverage-v8 from 5.0.1 to 5.0.5, which pulls @vitest/mocker, @vitest/spy and the @vitest/istanbul-lib-* packages along with vitest's own updated dependencies in the lockfile. Vitest 5.0.5 carries the fix for GHSA-p458-7748-mcp3, which affects @vitest/ui and @vitest/browser; this repo doesn't use either, so it wasn't actually exposed and this keeps the vitest family in step. Lint, build, all 240 tests and a coverage run pass locally.


Generated by Claude Code

@claude
claude Bot requested a review from a team as a code owner October 22, 2026 22:54
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​vitest/​coverage-v8@​5.0.1 ⏵ 5.0.599 +110079 +199100
Updatedvitest@​5.0.1 ⏵ 5.0.59810079 +199 +1100

View full report

@claude claude Bot left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code review found no issues

No high-confidence issues detected in this change.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant