Skip to content

chore(deps): bump vitest to 4.1.12 and vite override to ^8.1.6 - #35

Merged
NewscatcherAPI merged 1 commit into
mainfrom
fix-dependabot-2026-10-28
Oct 28, 2026
Merged

NewscatcherAPI merged 1 commit into
mainfrom
fix-dependabot-2026-10-28

Conversation

@Kizy625

@Kizy625 Kizy625 commented Oct 28, 2026

Copy link
Copy Markdown
Collaborator

Fixes Dependabot alerts #34-#40:

Verified: vitest run (479/479 pass), cjs + esm tsc builds, biome check shows no new errors vs baseline.

Fixes Dependabot alerts #34-#40:
- @vitest/mocker GHSA-qxg6-89mg-rqv8, GHSA-xp26-3454-mjgp (< 4.1.12):
  bump direct devDep vitest ^4.1.11 -> ^4.1.12 (mocker is version-locked).
- vite GHSA-587h-7wmj-h5pm (high), GHSA-9jrq-w75r-8gcw, GHSA-rq7h-c2jc-7f22,
  GHSA-r825-w8mm-5pxw, GHSA-698v-4r3x-3vcv (8.0.0 - 8.1.5):
  override ">=8.0.16" -> "^8.1.6"; caret keeps vite on the 8.x line that
  vitest 4 supports instead of allowing a future major. Resolves to 8.3.5.

Verified: vitest run (479/479 pass), cjs + esm tsc builds, biome check
shows no new errors vs baseline.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@NewscatcherAPI
NewscatcherAPI merged commit f900ad5 into main Oct 28, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants