Skip to content

chore: 🔨 Update dependencies - vitest - #605

Merged
pierpman merged 1 commit into
skupperproject:mainfrom
pierpman:fix/deps/169
Sep 30, 2026
Merged

pierpman merged 1 commit into
skupperproject:mainfrom
pierpman:fix/deps/169

Conversation

@pierpman

Copy link
Copy Markdown
Contributor

Description

Fixes a critical vulnerability (Dependabot alert #169) by bumping vitest and @vitest/coverage-v8 from ^3.1.3 to ^3.2.7 in package.json.

.npmrc and .yarnrc are added to .gitignore to prevent accidental commits of local registry configuration files.

Additional context (optional)

This upgrade addresses a critical security vulnerability reported by Dependabot. Vitest 3.2.x also includes bug fixes, performance improvements, and new features over 3.1.x. Keeping these two packages in sync ensures compatibility between the test runner and the coverage provider.

The .npmrc/.yarnrc exclusions prevent developer-specific registry overrides (e.g. corporate Artifactory proxies) from being accidentally committed to the repository.

How to test

  1. Install the updated dependencies:
    yarn install
  2. Run the test suite to verify all existing tests pass:
    yarn test
  3. Run the coverage report to confirm coverage collection still works as expected:
    yarn coverage
  4. Verify there are no regressions or unexpected failures in the output.

@pierpman pierpman added the dependencies Pull requests that update a dependency file label Sep 24, 2026
@pierpman
pierpman merged commit d009e55 into skupperproject:main Sep 30, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants