Skip to content

chore(deps): upgrade javascript devDependencies to latest stable - #58

Open
WhatIsHeDoing wants to merge 1 commit into
mainfrom
chore/dependabot-security-upgrades
Open

chore(deps): upgrade javascript devDependencies to latest stable#58
WhatIsHeDoing wants to merge 1 commit into
mainfrom
chore/dependabot-security-upgrades

Conversation

@WhatIsHeDoing

Copy link
Copy Markdown
Owner

Bump @biomejs/biome 2.4.13→2.5.0, cspell 9.8.0→10.0.1,
vitest 4.1.5→4.1.9. Lint and tests pass (9/9).

Note: the Dependabot vite (GHSA-fx2h/4w7w/v2wj) and esbuild
(GHSA-gv7w, withdrawn) advisories are transitive solely under
vitest, which pins vite@7.3.1 / esbuild@0.25.10. The patched
vite 7.3.5 / esbuild 0.28.1 are unreachable via a parent bump
and would require a pnpm override; left for a follow-up decision.

Bump @biomejs/biome 2.4.13→2.5.0, cspell 9.8.0→10.0.1,
vitest 4.1.5→4.1.9. Lint and tests pass (9/9).

Note: the Dependabot vite (GHSA-fx2h/4w7w/v2wj) and esbuild
(GHSA-gv7w, withdrawn) advisories are transitive solely under
vitest, which pins vite@7.3.1 / esbuild@0.25.10. The patched
vite 7.3.5 / esbuild 0.28.1 are unreachable via a parent bump
and would require a pnpm override; left for a follow-up decision.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant