chore(deps-dev): bump the npm_and_yarn group across 8 directories with 1 update#4835
Conversation
…h 1 update Bumps the npm_and_yarn group with 1 update in the /apps/realtime directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Bumps the npm_and_yarn group with 1 update in the /apps/sim directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Bumps the npm_and_yarn group with 1 update in the /packages/audit directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Bumps the npm_and_yarn group with 1 update in the /packages/logger directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Bumps the npm_and_yarn group with 1 update in the /packages/security directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Bumps the npm_and_yarn group with 1 update in the /packages/testing directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Bumps the npm_and_yarn group with 1 update in the /packages/ts-sdk directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Bumps the npm_and_yarn group with 1 update in the /packages/utils directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `vitest` from 3.2.6 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest) Updates `vitest` from 3.2.6 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest) Updates `vitest` from 3.2.6 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest) Updates `vitest` from 3.2.6 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest) Updates `vitest` from 3.2.6 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest) Updates `vitest` from 3.2.6 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest) Updates `vitest` from 3.2.6 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest) Updates `vitest` from 3.2.6 to 4.1.8 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest) --- updated-dependencies: - dependency-name: vitest dependency-version: 4.1.8 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.8 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.8 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.8 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.8 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.8 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.8 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.8 dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
PR SummaryMedium Risk Overview Reviewers should note what the diff does not update: Reviewed by Cursor Bugbot for commit 84e7e73. Bugbot is set up for automated code reviews on this repo. Configure here. |
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 2 potential issues.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 84e7e73. Configure here.
| "typescript": "^5.7.3", | ||
| "vite-tsconfig-paths": "^5.1.4", | ||
| "vitest": "^3.0.8" | ||
| "vitest": "^4.1.8" |
There was a problem hiding this comment.
Vitest and coverage-v8 major version mismatch
High Severity
@vitest/coverage-v8 remains at ^3.0.8 while vitest is bumped to ^4.1.8. Vitest requires its companion packages to share the same major version and actively warns (or errors) on mismatch. This will cause coverage collection to fail at runtime in both apps/sim and packages/ts-sdk.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 84e7e73. Configure here.
| "@sim/tsconfig": "workspace:*", | ||
| "typescript": "^5.7.3", | ||
| "vitest": "^3.0.8" | ||
| "vitest": "^4.1.8" |
There was a problem hiding this comment.
Outdated peerDependencies for vitest in testing package
Medium Severity
The peerDependencies declares "vitest": "^3.0.0" but devDependencies now uses ^4.1.8. All consumer packages also use vitest 4.x, so the peer dependency range is unsatisfied, generating warnings or install failures depending on the package manager's strictness settings.
Reviewed by Cursor Bugbot for commit 84e7e73. Configure here.
Greptile SummaryThis is an automated dependabot bump of
Confidence Score: 3/5Safe to merge only after aligning @vitest/coverage-v8 to ^4.1.8 in packages/ts-sdk; the mismatch will break coverage runs in that package. All seven other packages are straightforward version bumps with no issues. The single problem is in packages/ts-sdk, where @vitest/coverage-v8 was not updated alongside vitest — these companion packages require matching major versions, so coverage collection will fail until this is corrected. packages/ts-sdk/package.json requires @vitest/coverage-v8 to be bumped to ^4.1.8 to match the new vitest version. Important Files Changed
Flowchart%%{init: {'theme': 'neutral'}}%%
flowchart TD
A[dependabot bump: vitest ^3.0.8 → ^4.1.8] --> B[apps/realtime ✅]
A --> C[apps/sim ✅]
A --> D[packages/audit ✅]
A --> E[packages/logger ✅]
A --> F[packages/security ✅]
A --> G[packages/testing ✅]
A --> H[packages/utils ✅]
A --> I[packages/ts-sdk ⚠️]
I --> J[vitest → ^4.1.8 ✅]
I --> K["@vitest/coverage-v8 stays at ^3.0.8 ❌\nMajor version mismatch — coverage will break"]
Reviews (1): Last reviewed commit: "chore(deps-dev): bump the npm_and_yarn g..." | Re-trigger Greptile |
![greptile-apps[bot]](https://avatars.githubusercontent.com/in/867647?s=60&v=4){kind=small}
| @@ -43,7 +43,7 @@ | |||
| "@types/node": "^20.5.1", | |||
| "@vitest/coverage-v8": "^3.0.8", | |||
There was a problem hiding this comment.
@vitest/coverage-v8 is a companion package that must match the major version of vitest. With vitest now at ^4.1.8, keeping @vitest/coverage-v8 at ^3.0.8 will cause a peer-dependency conflict at install time and coverage reporting will fail at runtime because the v3 coverage plugin is incompatible with the v4 runner API.
| "@vitest/coverage-v8": "^3.0.8", | |
| "@vitest/coverage-v8": "^4.1.8", |
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/apps/realtime/npm_and_yarn-3edb4aa9a2
branch
1 participant
Bumps the npm_and_yarn group with 1 update in the /apps/realtime directory: vitest.
Bumps the npm_and_yarn group with 1 update in the /apps/sim directory: vitest.
Bumps the npm_and_yarn group with 1 update in the /packages/audit directory: vitest.
Bumps the npm_and_yarn group with 1 update in the /packages/logger directory: vitest.
Bumps the npm_and_yarn group with 1 update in the /packages/security directory: vitest.
Bumps the npm_and_yarn group with 1 update in the /packages/testing directory: vitest.
Bumps the npm_and_yarn group with 1 update in the /packages/ts-sdk directory: vitest.
Bumps the npm_and_yarn group with 1 update in the /packages/utils directory: vitest.
Updates
vitestfrom 3.2.6 to 4.1.8Release notes
Sourced from vitest's releases.
... (truncated)
Commits
e61f2ddchore: release v4.1.8e4067b3fix(browser): disable clientcdpAPI whenallowWrite/allowExec: false[ba...a09d472chore: release v4.1.7a8fd24cchore: release v4.1.618af98cfix(browser): simplify orchestrator otel carrier (#10285)3188260feat(browser): provide project reference inToMatchScreenshotResolvePath(#...e399846chore: release v4.1.57dc6d54Revert "fix: respect diff config options in soft assertions (#8696)"9787dedfix: respect diff config options in soft assertions (#8696)325463afix(ast-collect): recognize _vi_import prefix in static test discovery (#10...Updates
vitestfrom 3.2.6 to 4.1.8Release notes
Sourced from vitest's releases.
... (truncated)
Commits
e61f2ddchore: release v4.1.8e4067b3fix(browser): disable clientcdpAPI whenallowWrite/allowExec: false[ba...a09d472chore: release v4.1.7a8fd24cchore: release v4.1.618af98cfix(browser): simplify orchestrator otel carrier (#10285)3188260feat(browser): provide project reference inToMatchScreenshotResolvePath(#...e399846chore: release v4.1.57dc6d54Revert "fix: respect diff config options in soft assertions (#8696)"9787dedfix: respect diff config options in soft assertions (#8696)325463afix(ast-collect): recognize _vi_import prefix in static test discovery (#10...Updates
vitestfrom 3.2.6 to 4.1.8Release notes
Sourced from vitest's releases.
... (truncated)
Commits
e61f2ddchore: release v4.1.8e4067b3fix(browser): disable clientcdpAPI whenallowWrite/allowExec: false[ba...a09d472chore: release v4.1.7a8fd24cchore: release v4.1.618af98cfix(browser): simplify orchestrator otel carrier (#10285)3188260feat(browser): provide project reference inToMatchScreenshotResolvePath(#...e399846chore: release v4.1.57dc6d54Revert "fix: respect diff config options in soft assertions (#8696)"9787dedfix: respect diff config options in soft assertions (#8696)325463afix(ast-collect): recognize _vi_import prefix in static test discovery (#10...Updates
vitestfrom 3.2.6 to 4.1.8Release notes
Sourced from vitest's releases.
... (truncated)
Commits
e61f2ddchore: release v4.1.8e4067b3fix(browser): disable clientcdpAPI whenallowWrite/allowExec: false[ba...a09d472chore: release v4.1.7a8fd24cchore: release v4.1.618af98cfix(browser): simplify orchestrator otel carrier (#10285)3188260feat(browser): provide project reference inToMatchScreenshotResolvePath(#...e399846chore: release v4.1.57dc6d54Revert "fix: respect diff config options in soft assertions (#8696)"9787dedfix: respect diff config options in soft assertions (#8696)325463afix(ast-collect): recognize _vi_import prefix in static test discovery (#10...Updates
vitestfrom 3.2.6 to 4.1.8Release notes
Sourced from vitest's releases.
... (truncated)
Commits
e61f2ddchore: release v4.1.8e4067b3fix(browser): disable clientcdpAPI whenallowWrite/allowExec: false[ba...a09d472chore: release v4.1.7a8fd24cchore: release v4.1.618af98cfix(browser): simplify orchestrator otel carrier (#10285)3188260feat(browser): provide project reference inToMatchScreenshotResolvePath(#...e399846chore: release v4.1.57dc6d54Revert "fix: respect diff config options in soft assertions (#8696)"9787dedfix: respect diff config options in soft assertions (#8696)325463afix(ast-collect): recognize _vi_import prefix in static test discovery (#10...Updates
vitestfrom 3.2.6 to 4.1.8Release notes
Sourced from vitest's releases.