Skip to content

Commit c775a60

Browse files
raifdmuellerclaude
andcommitted
chore(deps): bump vitest to 4.1.8 to clear critical audit finding
npm audit --audit-level=high (the Dependency Security Audit CI job) now fails on a newly published critical advisory in vitest <4.1.0 (GHSA-5xrq-8626-4rwp: Vitest UI server can read/execute arbitrary files). Bump vitest from ^4.0.18 to ^4.1.8. audit --audit-level=high exits 0; all 96 unit tests pass. Unblocks unrelated PRs whose CI this was failing. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
1 parent 457c183 commit c775a60

2 files changed

Lines changed: 85 additions & 64 deletions

File tree

website/package-lock.json

Lines changed: 84 additions & 63 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

website/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@
3434
"prettier": "^3.8.1",
3535
"tailwindcss": "^4.2.1",
3636
"vite": "^7.3.1",
37-
"vitest": "^4.0.18"
37+
"vitest": "^4.1.8"
3838
},
3939
"dependencies": {
4040
"@asciidoctor/core": "^3.0.4",

0 commit comments

Comments
 (0)