chore(deps): bump vite from 8.0.11 to 8.0.12 in the vite group by dependabot[bot] · Pull Request #1917 · Hack23/blacktrigram

dependabot · 2026-05-11T09:51:20Z

Bumps the vite group with 1 update: vite.

Updates vite from 8.0.11 to 8.0.12

Release notes

v8.0.12

Please refer to CHANGELOG.md for details.

Changelog

8.0.12 (2026-05-11)

Features

update rolldown to 1.0.0 (#22401) (cf0ff41)

Bug Fixes

create-vite: pass react framework to TanStack CLI (#22397) (18f0f90)

deps: update all non-major dependencies (#22420) (2be6000)

module-runner: prevent partial-exports race on concurrent imports of in-flight invalidated re-export chains (#22369) (f5a22e6)

refer to rolldownOptions instead of deprecated rollupOptions in messages (#22400) (b675c7b)

worker: apply build.target to worker bundle (#22404) (3c93fde)

worker: forward define to worker bundle transform (#22408) (d4838a0)

Miscellaneous Chores

deps: update dependency eslint-plugin-n to v18 (#22423) (2fe7bd2)

deps: update rolldown-related dependencies (#22421) (66b9eb3)

Commits

4dce8b4 release: v8.0.12
b675c7b fix: refer to rolldownOptions instead of deprecated rollupOptions in mess...
66b9eb3 chore(deps): update rolldown-related dependencies (#22421)
2fe7bd2 chore(deps): update dependency eslint-plugin-n to v18 (#22423)
2be6000 fix(deps): update all non-major dependencies (#22420)
d4838a0 fix(worker): forward define to worker bundle transform (#22408)
cf0ff41 feat: update rolldown to 1.0.0 (#22401)
3c93fde fix(worker): apply build.target to worker bundle (#22404)
f5a22e6 fix(module-runner): prevent partial-exports race on concurrent imports of in-...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the vite group with 1 update: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `vite` from 8.0.11 to 8.0.12 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.0.12/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 8.0.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: vite ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-05-11T09:52:04Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@oxc-project/types

0.129.0

Unknown

npm/@rolldown/binding-android-arm64

1.0.0

Unknown

npm/@rolldown/binding-darwin-arm64

1.0.0

Unknown

npm/@rolldown/binding-darwin-x64

1.0.0

Unknown

npm/@rolldown/binding-freebsd-x64

1.0.0

Unknown

npm/@rolldown/binding-linux-arm-gnueabihf

1.0.0

Unknown

npm/@rolldown/binding-linux-arm64-gnu

1.0.0

Unknown

npm/@rolldown/binding-linux-arm64-musl

1.0.0

Unknown

npm/@rolldown/binding-linux-ppc64-gnu

1.0.0

Unknown

npm/@rolldown/binding-linux-s390x-gnu

1.0.0

Unknown

npm/@rolldown/binding-linux-x64-gnu

1.0.0

Unknown

npm/@rolldown/binding-linux-x64-musl

1.0.0

Unknown

npm/@rolldown/binding-openharmony-arm64

1.0.0

Unknown

npm/@rolldown/binding-wasm32-wasi

1.0.0

Unknown

npm/@rolldown/binding-win32-arm64-msvc

1.0.0

Unknown

npm/@rolldown/binding-win32-x64-msvc

1.0.0

Unknown

npm/@rolldown/pluginutils

1.0.0

Unknown

npm/rolldown

1.0.0

Unknown

npm/vite

8.0.12

🟢 6.8

Details

Check	Score	Reason
Code-Review	🟢 8	Found 20/25 approved changesets -- score normalized to 8
Maintained	🟢 10	30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	🟢 5	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 5	binaries present in source code
Pinned-Dependencies	🟢 6	dependency not pinned by hash detected -- score normalized to 6
License	🟢 10	license file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 5	SAST tool is not run on all commits -- score normalized to 5

Scanned Files

package-lock.json

github-actions · 2026-05-11T09:57:05Z

📸 Automated UI Screenshots

📋 Screenshots Captured (8)

#	Screenshot
1	`01-splash-screen.png` - 01 splash screen.png
2	`02-intro-screen-menu.png` - 02 intro screen menu.png
3	`03-intro-screen-archetype-selector.png` - 03 intro screen archetype selector.png
4	`04-controls-screen.png` - 04 controls screen.png
5	`05-philosophy-screen.png` - 05 philosophy screen.png
6	`06-training-screen.png` - 06 training screen.png
7	`07-combat-screen-practice.png` - 07 combat screen practice.png
8	`08-combat-screen-versus.png` - 08 combat screen versus.png

📦 Download Screenshots

📥 Download all screenshots from workflow artifacts

Screenshots are preserved as workflow artifacts for 30 days.

🤖 Generated by Playwright automation

pethers · 2026-05-11T10:06:26Z

@copilot analyse and fix all issues in Test and Report / unit-tests (pull_request)
Test and Report / unit-tests (pull_request)Failing after 5m

Agent-Logs-Url: https://github.com/Hack23/blacktrigram/sessions/78a5270a-40e0-4457-b4fe-89cf48b6a509 Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

Copilot · 2026-05-11T10:20:16Z

@copilot analyse and fix all issues in Test and Report / unit-tests (pull_request)
Test and Report / unit-te...

Fixed in 2a11f25. I investigated run 25662993481 / job 75328709440 and addressed the failing test (LateralityTransform.test.ts) by replacing the single-shot timing check with a warmed-up 25-iteration average plus a bounded worst-case threshold to avoid CI jitter flakes while keeping the <5ms average budget. Validation passed (npm run check && npm run lint && npm test && npm run build) and parallel validation is clean. No UI changes were made, so screenshot is not applicable.

github-actions · 2026-05-11T10:25:22Z

📸 Automated UI Screenshots

📋 Screenshots Captured (8)

#	Screenshot
1	`01-splash-screen.png` - 01 splash screen.png
2	`02-intro-screen-menu.png` - 02 intro screen menu.png
3	`03-intro-screen-archetype-selector.png` - 03 intro screen archetype selector.png
4	`04-controls-screen.png` - 04 controls screen.png
5	`05-philosophy-screen.png` - 05 philosophy screen.png
6	`06-training-screen.png` - 06 training screen.png
7	`07-combat-screen-practice.png` - 07 combat screen practice.png
8	`08-combat-screen-versus.png` - 08 combat screen versus.png

📦 Download Screenshots

📥 Download all screenshots from workflow artifacts

Screenshots are preserved as workflow artifacts for 30 days.

🤖 Generated by Playwright automation

pethers · 2026-05-11T14:15:47Z

@copilot improve test, fix flakey test to have higher pass rate failing checks
Test and Report / e2e-tests (pull_request)
Test and Report / e2e-tests (pull_request)Failing after 13m

Agent-Logs-Url: https://github.com/Hack23/blacktrigram/sessions/9b3d1521-93f5-46bf-ad04-cd40f2483c53 Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

Copilot · 2026-05-11T14:37:33Z

@copilot improve test, fix flakey test to have higher pass rate failing checks
[Test and Report / e2e-tests (pull_request)](https://github.com/Hack23/blacktrigram/actions/runs/25664293323/job/7533648...

Fixed in cb4debb. I analyzed run 25664293323 / job 75336481460 and the failure was in the post-cache step, not Cypress tests: hashFiles('**/package-lock.json') failed during Post Cache Cypress binary. I updated .github/workflows/test-and-report.yml to use hashFiles('package-lock.json') so only the repo root lockfile is hashed, which removes the flaky recursive scan failure and keeps cache invalidation correct. Parallel validation is clean. No UI changes were made, so screenshot is not applicable.

github-actions · 2026-05-11T14:41:02Z

📸 Automated UI Screenshots

📋 Screenshots Captured (8)

#	Screenshot
1	`01-splash-screen.png` - 01 splash screen.png
2	`02-intro-screen-menu.png` - 02 intro screen menu.png
3	`03-intro-screen-archetype-selector.png` - 03 intro screen archetype selector.png
4	`04-controls-screen.png` - 04 controls screen.png
5	`05-philosophy-screen.png` - 05 philosophy screen.png
6	`06-training-screen.png` - 06 training screen.png
7	`07-combat-screen-practice.png` - 07 combat screen practice.png
8	`08-combat-screen-versus.png` - 08 combat screen versus.png

📦 Download Screenshots

📥 Download all screenshots from workflow artifacts

Screenshots are preserved as workflow artifacts for 30 days.

🤖 Generated by Playwright automation

dependabot Bot added dependencies Dependency updates npm labels May 11, 2026

Copilot AI review requested due to automatic review settings May 11, 2026 09:51

dependabot Bot requested a review from pethers as a code owner May 11, 2026 09:51

dependabot Bot added the dependencies Dependency updates label May 11, 2026

dependabot Bot review requested due to automatic review settings May 11, 2026 09:51

dependabot Bot added the npm label May 11, 2026

github-actions Bot added the infrastructure CI/CD and build infrastructure label May 11, 2026

pethers approved these changes May 11, 2026

View reviewed changes

Copilot started work on behalf of pethers May 11, 2026 10:06 View session

test(animation): stabilize LateralityTransform performance assertion

2a11f25

Agent-Logs-Url: https://github.com/Hack23/blacktrigram/sessions/78a5270a-40e0-4457-b4fe-89cf48b6a509 Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

Copilot AI review requested due to automatic review settings May 11, 2026 10:19

dependabot Bot review requested due to automatic review settings May 11, 2026 10:19

github-actions Bot added testing Testing improvements test-coverage-impact Impacts test coverage labels May 11, 2026

Copilot finished work on behalf of pethers May 11, 2026 10:21

Copilot AI requested a review from pethers May 11, 2026 10:21

Copilot started work on behalf of pethers May 11, 2026 14:16 View session

ci(e2e): stabilize Cypress cache key hashing in container workflow

cb4debb

Agent-Logs-Url: https://github.com/Hack23/blacktrigram/sessions/9b3d1521-93f5-46bf-ad04-cd40f2483c53 Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

Copilot AI review requested due to automatic review settings May 11, 2026 14:35

dependabot Bot review requested due to automatic review settings May 11, 2026 14:35

Copilot finished work on behalf of pethers May 11, 2026 14:38

pethers merged commit 9266b70 into main May 11, 2026
13 checks passed

pethers deleted the dependabot/npm_and_yarn/vite-c24196cdb4 branch May 11, 2026 16:20

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump vite from 8.0.11 to 8.0.12 in the vite group#1917

chore(deps): bump vite from 8.0.11 to 8.0.12 in the vite group#1917
pethers merged 3 commits into
mainfrom
dependabot/npm_and_yarn/vite-c24196cdb4

dependabot Bot commented on behalf of github May 11, 2026

Uh oh!

github-actions Bot commented May 11, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

pethers commented May 11, 2026

Uh oh!

Copilot AI commented May 11, 2026

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

pethers commented May 11, 2026

Uh oh!

Copilot AI commented May 11, 2026

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github May 11, 2026

v8.0.12

8.0.12 (2026-05-11)

Features

Bug Fixes

Miscellaneous Chores

Uh oh!

github-actions Bot commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

github-actions Bot commented May 11, 2026

📸 Automated UI Screenshots

📋 Screenshots Captured (8)

📦 Download Screenshots

Uh oh!

pethers commented May 11, 2026

Uh oh!

Copilot AI commented May 11, 2026

Uh oh!

github-actions Bot commented May 11, 2026

📸 Automated UI Screenshots

📋 Screenshots Captured (8)

📦 Download Screenshots

Uh oh!

pethers commented May 11, 2026

Uh oh!

Copilot AI commented May 11, 2026

Uh oh!

github-actions Bot commented May 11, 2026

📸 Automated UI Screenshots

📋 Screenshots Captured (8)

📦 Download Screenshots

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

github-actions Bot commented May 11, 2026 •

edited

Loading