Skip to content

chore(deps): vitest and @vitest/coverage-v8 4.1.12 (@vitest/mocker advisories) - #23

Merged
rmotafreitas merged 1 commit into
mainfrom
chore/vitest-4.1.12
Oct 31, 2026
Merged

rmotafreitas merged 1 commit into
mainfrom
chore/vitest-4.1.12

Conversation

@rmotafreitas

@rmotafreitas rmotafreitas commented Oct 31, 2026 •

Copy link
Copy Markdown
Contributor

Summary

@vitest/mocker 4.1.11 has GHSA-qxg6-89mg-rqv8 and GHSA-xp26-3454-mjgp (moderate, tests only). vitest and @vitest/coverage-v8 move to ^4.1.12 together, because coverage peer-depends on the exact vitest. The lockfile now resolves @vitest/mocker 4.1.12.

Once the app's submodule pin moves past this, the app drops its vitest and @vitest/coverage-v8 overrides.

Closes #22.

Testing

The app's pnpm check:animu-api (an isolated install from this lockfile): audit, lint, typecheck and 246 tests pass.

The one 4.1.11 left in the lockfile is @vitest/browser-webdriverio: ^4.1.11: the optional peer range vitest 4.1.12 itself publishes, not a stale resolution.

Council review

Rounds: 1

Delegate Round 1
Claude Opus 5.5 9/10
GPT-6.1 Sol 10/10
Gemini 4 Argon no score

Reviewed with sol-loop: 1 round with GPT-6.1 Sol. Sol verdict: approved.

Gemini could not run: OpenCode Go needs a subscription.

…visories)

@vitest/mocker 4.1.11 has GHSA-qxg6-89mg-rqv8 and GHSA-xp26-3454-mjgp
(moderate, tests only). Coverage peer-depends on the exact vitest, so both
move together.

Closes #22
@rmotafreitas
rmotafreitas merged commit 3758596 into main Oct 31, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bump vitest and @vitest/coverage-v8 to ^4.1.12 (@vitest/mocker advisories)

1 participant