Skip to content

chore(deps): vitest 5.0.5, vite 8.3.4 and patched transitive deps - #449

Open
kYem wants to merge 1 commit into
mainfrom
chore/deps-security-sweep
Open

kYem wants to merge 1 commit into
mainfrom
chore/deps-security-sweep

Conversation

@kYem

@kYem kYem commented Oct 30, 2026

Copy link
Copy Markdown
Owner

Clears every open Dependabot alert (all dev/build tooling, none in shipped code) except fast-uri #159, whose fix (3.1.9) clears the age gate on 2026-11-02.

  • vitest family → 5.0.5; needs @cloudflare/vitest-plugin 1.4.3 (1.4.0 can't read 5.0.5's cache).
  • vite → 8.3.4, overridden so astro's copy moves too.
  • Overrides for launch-editor, shell-quote, brace-expansion, source-map-js, fast-uri, undici, devalue.
  • Drops the expired 1.4.0 cooldown exemptions.

Supersedes #433 and #440.

Clears the open Dependabot alerts (all dev/build tooling) except fast-uri 3.1.9 (#159),
which clears the age gate on 2026-11-02. vitest 5.0.5 needs @cloudflare/vitest-plugin 1.4.3.
Drops the expired 1.4.0 cooldown exemptions.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant