Skip to content

chore(deps): hold vitest below 5 and group vitest packages in Dependabot - #144

Merged
felipesauer merged 1 commit into
mainfrom
chore/dependabot-hold-vitest-4
Oct 21, 2026
Merged

felipesauer merged 1 commit into
mainfrom
chore/dependabot-hold-vitest-4

Conversation

@felipesauer

Copy link
Copy Markdown
Owner

vitest 5 cannot be adopted yet because the Stryker vitest-runner (10.0.0, the latest release)
breaks on it. Its per-test name filter matches nothing under vitest 5, so every covered mutant
survives. The mutation score falls from about 85% to 0.88% on a local run, while the unit tests
and v8 coverage stay green at 100%. Tracked upstream as stryker-mutator/stryker-js#6210.

Revisit once a @stryker-mutator/vitest-runner release fixes the filter. Then drop the two ignore
entries and bump vitest and @vitest/coverage-v8 together.

vitest 5 cannot be adopted yet because the Stryker vitest-runner (10.0.0, the latest release)
breaks on it. Its per-test name filter matches nothing under vitest 5, so every covered mutant
survives. The mutation score falls from about 85% to 0.88% on a local run, while the unit tests
and v8 coverage stay green at 100%. Tracked upstream as stryker-mutator/stryker-js#6210.

- Ignore semver-major updates of vitest and @vitest/* until Stryker ships a fix.
- Group vitest and @vitest/* so minor and patch bumps arrive in one PR. coverage-v8 requires the
  exact vitest version as a peer, so separate PRs can never install or pass, as with #134 and #136.
- Keep them out of the npm group with exclude-patterns, so grouping does not depend on order.

Revisit once a @stryker-mutator/vitest-runner release fixes the filter. Then drop the two ignore
entries and bump vitest and @vitest/coverage-v8 together.
@felipesauer
felipesauer merged commit ba6f8d9 into main Oct 21, 2026
2 checks passed
@felipesauer
felipesauer deleted the chore/dependabot-hold-vitest-4 branch October 21, 2026 01:12
felipesauer added a commit that referenced this pull request Oct 21, 2026
)

Adds the three decisions settled while clearing the Dependabot queue,
and their acceptance, to
the signed record under .mnema/. Only the tail files changed, and no key
material is involved.

- ADR-1 runs the commitlint PR-title check only for human-authored PRs
(#141).
- ADR-2 holds mermaid at 11 and ignores semver-major mermaid updates in
Dependabot (#141).
- ADR-3 holds vitest below 5 until the Stryker vitest-runner is fixed,
with vitest and @vitest/*
  grouped so they arrive together (#144).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant