Skip to content

build(deps-dev): bump vitest to 5.0.5 - #222

Merged
MarshallOfSound merged 1 commit into
mainfrom
vitest-5.0.5
Oct 25, 2026
Merged

MarshallOfSound merged 1 commit into
mainfrom
vitest-5.0.5

Conversation

@claude

@claude claude Bot commented Oct 22, 2026

Copy link
Copy Markdown
Contributor

This bumps vitest from ^5.0.1 to ^5.0.5 and the exactly pinned @vitest/coverage-v8 from 5.0.1 to 5.0.5, which pulls @vitest/mocker, @vitest/spy and the @vitest/istanbul-lib-* packages along with vitest's own updated dependencies in the lockfile. Vitest 5.0.5 carries the fix for GHSA-p458-7748-mcp3, which affects @vitest/ui and @vitest/browser; this repo doesn't use either, so it wasn't actually exposed and this keeps the vitest family in step. Lint, build, all 240 tests and a coverage run pass locally.


Generated by Claude Code

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01N2vvE5XzurMvQfsX7Vz7bF
@claude
claude Bot requested a review from a team as a code owner October 22, 2026 22:54
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​vitest/​coverage-v8@​5.0.1 ⏵ 5.0.599 +110079 +199100
Updatedvitest@​5.0.1 ⏵ 5.0.59810079 +199 +1100

View full report

@claude claude Bot left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code review found no issues

No high-confidence issues detected in this change.

@MarshallOfSound
MarshallOfSound enabled auto-merge (squash) October 25, 2026 22:03
@MarshallOfSound
MarshallOfSound merged commit 404c38e into main Oct 25, 2026
11 checks passed
@MarshallOfSound
MarshallOfSound deleted the vitest-5.0.5 branch October 25, 2026 22:03
@electron-npm-package-publisher

Copy link
Copy Markdown

🎉 This PR is included in version 3.0.3 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants