Skip to content
Validate Dependencies

fix(cli,create-objectstack): scaffolds declare vitest ~4.1.12, outside GHSA-qxg6-89mg-rqv8, and still install on npm 10 #6213

Sign in to view logs

fix(cli,create-objectstack): scaffolds declare vitest ~4.1.12, outside GHSA-qxg6-89mg-rqv8, and still install on npm 10

fix(cli,create-objectstack): scaffolds declare vitest ~4.1.12, outside GHSA-qxg6-89mg-rqv8, and still install on npm 10 #6213

Triggered via pull request October 22, 2026 05:36
@os-billos-bill
synchronize #25173
claude/issue-25165-scaffold-vitest-advisory
Status Success
Total duration 1m 21s
Artifacts –

validate-deps.yml

on: pull_request
Validate Package Dependencies
1m 18s
Validate Package Dependencies
Fit to window
Zoom out
Zoom in

Annotations

2 notices
OSV-Scanner verdict (base-relative)
lockfile unchanged — inherits main's verdict. pnpm-lock.yaml and osv-scanner.toml are identical to the merge base ab488d9b7dff, so this pull request introduces no advisory; main's daily scheduled scan judges that lockfile.
Validate Package Dependencies
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"