Skip to content

Bump vitest to 4.1.12 for the @vitest/mocker advisory - #512

Merged
btsouth merged 1 commit into
mainfrom
deps/vitest-4.1.12
Oct 21, 2026
Merged

btsouth merged 1 commit into
mainfrom
deps/vitest-4.1.12

Conversation

@btsouth

@btsouth btsouth commented Oct 21, 2026 •

Copy link
Copy Markdown
Owner

Dependabot's security update job for @vitest/mocker (affected below 4.1.12) failed on main instead of opening a PR. vitest 4.1.12 brings the fixed mocker, and no 4.1.11 copies are left in the lockfile.

Test-only dependency. The 773 frontend tests pass locally on Node 22.

Note

Bump Vitest from 4.1.11 to 4.1.12 in apps/desktop-tauri

Updates the Vitest development dependency to 4.1.12 to address the @vitest/mocker security advisory. The lockfile is regenerated to match.

Macroscope summarized 532292a.

Summary by CodeRabbit

  • Chores
    • Updated the Vitest development tooling to version 4.1.12.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
ceiling 532292a Commit Preview URL

Branch Preview URL
Oct 21 2026, 11:10 PM

@coderabbitai

coderabbitai Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 38 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 3b85e488-d334-465f-b5d0-20256f9d2087
📥 Commits

Reviewing files that changed from the base of the PR and between b3a9698 and 532292a.

⛔ Files ignored due to path filters: 1
  • apps/desktop-tauri/pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing: 1
  • apps/desktop-tauri/package.json

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: a3a193a2-c09d-4900-96c1-04837ffa4deb
📥 Commits

Reviewing files that changed from the base of the PR and between b2355ea and b3a9698.

⛔ Files ignored due to path filters: 1
  • apps/desktop-tauri/pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing: 1
  • apps/desktop-tauri/package.json

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📝 Walkthrough

The desktop Tauri package updates its Vitest development dependency from version 4.1.11 to 4.1.12.

Changes: Vitest Version Update

Layer / File(s) Summary
Update Vitest version
apps/desktop-tauri/package.json
The Vitest development dependency changes from version 4.1.11 to 4.1.12.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to b3a96

The dependency update is correctly locked and presents no actionable merge risk.

Pre-merge checks: Passed 5
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title clearly identifies the main change: updating vitest to 4.1.12 to address the @vitest/mocker advisory.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Dependabot's security update for @vitest/mocker (affected below 4.1.12) failed
to open a PR; the fix ships with vitest 4.1.12.
@btsouth
btsouth force-pushed the deps/vitest-4.1.12 branch from b3a9698 to 532292a Compare October 21, 2026 23:09
@btsouth
btsouth merged commit 039472e into main Oct 21, 2026
11 checks passed
@btsouth
btsouth deleted the deps/vitest-4.1.12 branch October 21, 2026 23:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant