Skip to content

Bump the npm group with 28 updates#2068

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-de5a92ee9c
Oct 27, 2025
Merged

Bump the npm group with 28 updates#2068
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-de5a92ee9c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2025

Copy link
Copy Markdown
Contributor

Bumps the npm group with 28 updates:

Package From To
@vitest/coverage-v8 3.2.4 4.0.2
vite 7.1.11 7.1.12
vitest 3.2.4 4.0.2
@babel/compat-data 7.28.4 7.28.5
@babel/core 7.28.4 7.28.5
@babel/generator 7.28.3 7.28.5
@babel/helper-validator-identifier 7.27.1 7.28.5
@babel/parser 7.28.4 7.28.5
@babel/traverse 7.28.4 7.28.5
@babel/types 7.28.4 7.28.5
@emnapi/core 1.5.0 1.6.0
@emnapi/runtime 1.5.0 1.6.0
@eslint-community/regexpp 4.12.1 4.12.2
@types/yargs 17.0.33 17.0.34
@vitest/expect 3.2.4 4.0.2
@vitest/mocker 3.2.4 4.0.2
@vitest/pretty-format 3.2.4 4.0.2
@vitest/runner 3.2.4 4.0.2
@vitest/snapshot 3.2.4 4.0.2
@vitest/spy 3.2.4 4.0.2
@vitest/utils 3.2.4 4.0.2
ast-v8-to-istanbul 0.3.7 0.3.8
baseline-browser-mapping 2.8.19 2.8.20
chai 5.3.3 6.2.0
electron-to-chromium 1.5.239 1.5.240
get-tsconfig 4.12.0 4.13.0
magic-string 0.30.19 0.30.21
tinyrainbow 2.0.0 3.0.3

Updates @vitest/coverage-v8 from 3.2.4 to 4.0.2

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.0.2

   🐞 Bug Fixes

    View changes on GitHub

v4.0.1

   🐞 Bug Fixes

    View changes on GitHub

v4.0.0

Vitest 4.0 is out!

To stay updated, read our blog post and check the migration guide.

   🚨 Breaking Changes

... (truncated)

Commits
  • 07bc56a chore: release v4.0.2
  • 4a28faa chore: release v4.0.1
  • da7ce17 chore: release v4.0.0
  • 3e4b6b7 chore: release v4.0.0-beta.19
  • 35816fe fix(coverage): v8 to ignore Vite's generated cjs import helpers (#8718)
  • bc7c20d chore: release v4.0.0-beta.18
  • 4783137 chore: release v4.0.0-beta.17
  • 6fc7890 chore: release v4.0.0-beta.16
  • d677c0b chore: release v4.0.0-beta.15
  • e24e56b chore: release v4.0.0-beta.14
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​vitest/coverage-v8 since your current version.


Updates vite from 7.1.11 to 7.1.12

Release notes

Sourced from vite's releases.

v7.1.12

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.1.12 (2025-10-23)

Bug Fixes

  • deps: downgrade commonjs plugin to 28.0.6 to avoid rollup/plugins#1909 (#20990) (56fd722)
Commits

Updates vitest from 3.2.4 to 4.0.2

Release notes

Sourced from vitest's releases.

v4.0.2

   🐞 Bug Fixes

    View changes on GitHub

v4.0.1

   🐞 Bug Fixes

    View changes on GitHub

v4.0.0

Vitest 4.0 is out!

To stay updated, read our blog post and check the migration guide.

   🚨 Breaking Changes

... (truncated)

Commits
  • 07bc56a chore: release v4.0.2
  • 2eedbce fix(spy): reset spies if both restoreMocks and mockReset is set in the co...
  • 26ce88d fix(pool): assign envs before running tests to keep in sync with process.env ...
  • 4a28faa chore: release v4.0.1
  • 3fae73e fix(pool): don't teardown the communication channel too soon if something is ...
  • 8100063 fix: move the getBuiltins check (#8765)
  • da7ce17 chore: release v4.0.0
  • 8e15bc8 perf: create only one fetcher per project (#8762)
  • 9f0eccc fix: base option doesn't crash vitest (#8760)
  • d3ef4f2 perf(pool): resolve all environments first (#8759)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vitest since your current version.


Updates @babel/compat-data from 7.28.4 to 7.28.5

Release notes

Sourced from @​babel/compat-data's releases.

v7.28.5 (2025-10-23)

Thank you @​CO0Ki3, @​Olexandr88, and @​youthfulhps for your first PRs!

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private
  • babel-parser
  • babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • babel-traverse

🏠 Internal

🏃‍♀️ Performance

Committers: 8

Changelog

Sourced from @​babel/compat-data's changelog.

v7.28.5 (2025-10-23)

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private
  • babel-parser
  • babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • babel-traverse

🏠 Internal

🏃‍♀️ Performance

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​babel/compat-data since your current version.


Updates @babel/core from 7.28.4 to 7.28.5

Release notes

Sourced from @​babel/core's releases.

v7.28.5 (2025-10-23)

Thank you @​CO0Ki3, @​Olexandr88, and @​youthfulhps for your first PRs!

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private
  • babel-parser
  • babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • babel-traverse

🏠 Internal

🏃‍♀️ Performance

Committers: 8

Changelog

Sourced from @​babel/core's changelog.

v7.28.5 (2025-10-23)

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private
  • babel-parser
  • babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • babel-traverse

🏠 Internal

🏃‍♀️ Performance

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​babel/core since your current version.


Updates @babel/generator from 7.28.3 to 7.28.5

Release notes

Sourced from @​babel/generator's releases.

v7.28.5 (2025-10-23)

Thank you @​CO0Ki3, @​Olexandr88, and @​youthfulhps for your first PRs!

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private
  • babel-parser
  • babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • babel-traverse

🏠 Internal

🏃‍♀️ Performance

Committers: 8

v7.28.4 (2025-09-05)

Thanks @​gwillen and @​mrginglymus for your first PRs!

🏠 Internal

  • babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types
  • babel-plugin-transform-regenerator

... (truncated)

Changelog

Sourced from @​babel/generator's changelog.

v7.28.5 (2025-10-23)

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private
  • babel-parser
  • babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • babel-traverse

🏠 Internal

🏃‍♀️ Performance

v7.28.4 (2025-09-05)

🏠 Internal

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​babel/generator since your current version.


Updates @babel/helper-validator-identifier from 7.27.1 to 7.28.5

Release notes

Sourced from @​babel/helper-validator-identifier's releases.

v7.28.5 (2025-10-23)

Thank you @​CO0Ki3, @​Olexandr88, and @​youthfulhps for your first PRs!

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private
  • babel-parser
  • babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • babel-traverse

🏠 Internal

🏃‍♀️ Performance

Committers: 8

v7.28.4 (2025-09-05)

Thanks @​gwillen and @​mrginglymus for your first PRs!

🏠 Internal

  • babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types
  • babel-plugin-transform-regenerator

... (truncated)

Changelog

Sourced from @​babel/helper-validator-identifier's changelog...

Description has been truncated

@dependabot
Bump the npm group with 28 updates
d65ac36 
Bumps the npm group with 28 updates:

| Package | From | To |
| --- | --- | --- |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `3.2.4` | `4.0.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.1.11` | `7.1.12` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.4` | `4.0.2` |
| [@babel/compat-data](https://github.com/babel/babel/tree/HEAD/packages/babel-compat-data) | `7.28.4` | `7.28.5` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.28.4` | `7.28.5` |
| [@babel/generator](https://github.com/babel/babel/tree/HEAD/packages/babel-generator) | `7.28.3` | `7.28.5` |
| [@babel/helper-validator-identifier](https://github.com/babel/babel/tree/HEAD/packages/babel-helper-validator-identifier) | `7.27.1` | `7.28.5` |
| [@babel/parser](https://github.com/babel/babel/tree/HEAD/packages/babel-parser) | `7.28.4` | `7.28.5` |
| [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.28.4` | `7.28.5` |
| [@babel/types](https://github.com/babel/babel/tree/HEAD/packages/babel-types) | `7.28.4` | `7.28.5` |
| [@emnapi/core](https://github.com/toyobayashi/emnapi) | `1.5.0` | `1.6.0` |
| [@emnapi/runtime](https://github.com/toyobayashi/emnapi) | `1.5.0` | `1.6.0` |
| [@eslint-community/regexpp](https://github.com/eslint-community/regexpp) | `4.12.1` | `4.12.2` |
| [@types/yargs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/yargs) | `17.0.33` | `17.0.34` |
| [@vitest/expect](https://github.com/vitest-dev/vitest/tree/HEAD/packages/expect) | `3.2.4` | `4.0.2` |
| [@vitest/mocker](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker) | `3.2.4` | `4.0.2` |
| [@vitest/pretty-format](https://github.com/vitest-dev/vitest/tree/HEAD/packages/pretty-format) | `3.2.4` | `4.0.2` |
| [@vitest/runner](https://github.com/vitest-dev/vitest/tree/HEAD/packages/runner) | `3.2.4` | `4.0.2` |
| [@vitest/snapshot](https://github.com/vitest-dev/vitest/tree/HEAD/packages/snapshot) | `3.2.4` | `4.0.2` |
| [@vitest/spy](https://github.com/vitest-dev/vitest/tree/HEAD/packages/spy) | `3.2.4` | `4.0.2` |
| [@vitest/utils](https://github.com/vitest-dev/vitest/tree/HEAD/packages/utils) | `3.2.4` | `4.0.2` |
| [ast-v8-to-istanbul](https://github.com/AriPerkkio/ast-v8-to-istanbul) | `0.3.7` | `0.3.8` |
| [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.8.19` | `2.8.20` |
| [chai](https://github.com/chaijs/chai) | `5.3.3` | `6.2.0` |
| [electron-to-chromium](https://github.com/kilian/electron-to-chromium) | `1.5.239` | `1.5.240` |
| [get-tsconfig](https://github.com/privatenumber/get-tsconfig) | `4.12.0` | `4.13.0` |
| [magic-string](https://github.com/Rich-Harris/magic-string) | `0.30.19` | `0.30.21` |
| [tinyrainbow](https://github.com/tinylibs/tinyrainbow) | `2.0.0` | `3.0.3` |


Updates `@vitest/coverage-v8` from 3.2.4 to 4.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.2/packages/coverage-v8)

Updates `vite` from 7.1.11 to 7.1.12
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.1.12/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.1.12/packages/vite)

Updates `vitest` from 3.2.4 to 4.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.2/packages/vitest)

Updates `@babel/compat-data` from 7.28.4 to 7.28.5
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-compat-data)

Updates `@babel/core` from 7.28.4 to 7.28.5
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-core)

Updates `@babel/generator` from 7.28.3 to 7.28.5
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-generator)

Updates `@babel/helper-validator-identifier` from 7.27.1 to 7.28.5
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-helper-validator-identifier)

Updates `@babel/parser` from 7.28.4 to 7.28.5
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-parser)

Updates `@babel/traverse` from 7.28.4 to 7.28.5
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-traverse)

Updates `@babel/types` from 7.28.4 to 7.28.5
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-types)

Updates `@emnapi/core` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/toyobayashi/emnapi/releases)
- [Commits](toyobayashi/emnapi@v1.5.0...v1.6.0)

Updates `@emnapi/runtime` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/toyobayashi/emnapi/releases)
- [Commits](toyobayashi/emnapi@v1.5.0...v1.6.0)

Updates `@eslint-community/regexpp` from 4.12.1 to 4.12.2
- [Release notes](https://github.com/eslint-community/regexpp/releases)
- [Commits](eslint-community/regexpp@v4.12.1...v4.12.2)

Updates `@types/yargs` from 17.0.33 to 17.0.34
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/yargs)

Updates `@vitest/expect` from 3.2.4 to 4.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.2/packages/expect)

Updates `@vitest/mocker` from 3.2.4 to 4.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.2/packages/mocker)

Updates `@vitest/pretty-format` from 3.2.4 to 4.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.2/packages/pretty-format)

Updates `@vitest/runner` from 3.2.4 to 4.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.2/packages/runner)

Updates `@vitest/snapshot` from 3.2.4 to 4.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.2/packages/snapshot)

Updates `@vitest/spy` from 3.2.4 to 4.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.2/packages/spy)

Updates `@vitest/utils` from 3.2.4 to 4.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.2/packages/utils)

Updates `ast-v8-to-istanbul` from 0.3.7 to 0.3.8
- [Release notes](https://github.com/AriPerkkio/ast-v8-to-istanbul/releases)
- [Commits](AriPerkkio/ast-v8-to-istanbul@v0.3.7...v0.3.8)

Updates `baseline-browser-mapping` from 2.8.19 to 2.8.20
- [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases)
- [Commits](web-platform-dx/baseline-browser-mapping@v2.8.19...v2.8.20)

Updates `chai` from 5.3.3 to 6.2.0
- [Release notes](https://github.com/chaijs/chai/releases)
- [Changelog](https://github.com/chaijs/chai/blob/main/History.md)
- [Commits](chaijs/chai@v5.3.3...v6.2.0)

Updates `electron-to-chromium` from 1.5.239 to 1.5.240
- [Changelog](https://github.com/Kilian/electron-to-chromium/blob/master/CHANGELOG.md)
- [Commits](Kilian/electron-to-chromium@v1.5.239...v1.5.240)

Updates `get-tsconfig` from 4.12.0 to 4.13.0
- [Release notes](https://github.com/privatenumber/get-tsconfig/releases)
- [Commits](privatenumber/get-tsconfig@v4.12.0...v4.13.0)

Updates `magic-string` from 0.30.19 to 0.30.21
- [Release notes](https://github.com/Rich-Harris/magic-string/releases)
- [Changelog](https://github.com/Rich-Harris/magic-string/blob/master/CHANGELOG.md)
- [Commits](Rich-Harris/magic-string@v0.30.19...v0.30.21)

Updates `tinyrainbow` from 2.0.0 to 3.0.3
- [Release notes](https://github.com/tinylibs/tinyrainbow/releases)
- [Commits](tinylibs/tinyrainbow@v2.0.0...v3.0.3)

---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: vite
  dependency-version: 7.1.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vitest
  dependency-version: 4.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@babel/compat-data"
  dependency-version: 7.28.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@babel/core"
  dependency-version: 7.28.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@babel/generator"
  dependency-version: 7.28.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@babel/helper-validator-identifier"
  dependency-version: 7.28.5
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@babel/parser"
  dependency-version: 7.28.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@babel/traverse"
  dependency-version: 7.28.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@babel/types"
  dependency-version: 7.28.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@emnapi/core"
  dependency-version: 1.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@emnapi/runtime"
  dependency-version: 1.6.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@eslint-community/regexpp"
  dependency-version: 4.12.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@types/yargs"
  dependency-version: 17.0.34
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/expect"
  dependency-version: 4.0.2
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@vitest/mocker"
  dependency-version: 4.0.2
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@vitest/pretty-format"
  dependency-version: 4.0.2
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@vitest/runner"
  dependency-version: 4.0.2
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@vitest/snapshot"
  dependency-version: 4.0.2
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@vitest/spy"
  dependency-version: 4.0.2
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@vitest/utils"
  dependency-version: 4.0.2
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: ast-v8-to-istanbul
  dependency-version: 0.3.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: baseline-browser-mapping
  dependency-version: 2.8.20
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: chai
  dependency-version: 6.2.0
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: electron-to-chromium
  dependency-version: 1.5.240
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: get-tsconfig
  dependency-version: 4.13.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: magic-string
  dependency-version: 0.30.21
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: tinyrainbow
  dependency-version: 3.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 27, 2025
@github-actions github-actions Bot enabled auto-merge (squash) October 27, 2025 01:30
@github-actions

github-actions Bot commented Oct 27, 2025

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.
See the Details below.

License Issues

pnpm-lock.yaml

PackageVersionLicenseIssue Type
ast-v8-to-istanbul0.3.8NullUnknown License
@types/yargs17.0.34NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@vitest/coverage-v8 ^4.0.2 UnknownUnknown
npm/vite ^7.1.12 🟢 7.3
Details
CheckScoreReason
Code-Review🟢 8Found 20/24 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 6detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Binary-Artifacts🟢 7binaries present in source code
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 10security policy file detected
SAST🟢 3SAST tool is not run on all commits -- score normalized to 3
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/vitest ^4.0.2 UnknownUnknown
npm/@babel/compat-data 7.28.5 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 9Found 29/30 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
CII-Best-Practices⚠️ 2badge detected: InProgress
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 032 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
npm/@babel/core 7.28.5 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 9Found 29/30 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
CII-Best-Practices⚠️ 2badge detected: InProgress
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 032 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
npm/@babel/generator 7.28.5 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 9Found 29/30 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
CII-Best-Practices⚠️ 2badge detected: InProgress
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 032 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
npm/@babel/helper-validator-identifier 7.28.5 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 9Found 29/30 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
CII-Best-Practices⚠️ 2badge detected: InProgress
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 032 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
npm/@babel/parser 7.28.5 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 9Found 29/30 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
CII-Best-Practices⚠️ 2badge detected: InProgress
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 032 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
npm/@babel/traverse 7.28.5 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 9Found 29/30 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
CII-Best-Practices⚠️ 2badge detected: InProgress
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 032 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
npm/@babel/types 7.28.5 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 9Found 29/30 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
CII-Best-Practices⚠️ 2badge detected: InProgress
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 032 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
npm/@emnapi/core 1.6.0 🟢 4.3
Details
CheckScoreReason
Maintained🟢 1017 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 0Found 0/30 approved changesets -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@emnapi/runtime 1.6.0 🟢 4.3
Details
CheckScoreReason
Maintained🟢 1017 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Code-Review⚠️ 0Found 0/30 approved changesets -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/@standard-schema/spec 1.0.0 UnknownUnknown
npm/@types/yargs 17.0.34 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 8Found 26/29 approved changesets -- score normalized to 8
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 9license file detected
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/@vitest/coverage-v8 4.0.2 UnknownUnknown
npm/@vitest/expect 4.0.2 UnknownUnknown
npm/@vitest/mocker 4.0.2 UnknownUnknown
npm/@vitest/pretty-format 4.0.2 UnknownUnknown
npm/@vitest/runner 4.0.2 UnknownUnknown
npm/@vitest/snapshot 4.0.2 UnknownUnknown
npm/@vitest/spy 4.0.2 UnknownUnknown
npm/@vitest/utils 4.0.2 UnknownUnknown
npm/ast-v8-to-istanbul 0.3.8 UnknownUnknown
npm/baseline-browser-mapping 2.8.20 UnknownUnknown
npm/chai 6.2.0 🟢 5.5
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1022 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 7Found 13/18 approved changesets -- score normalized to 7
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Packaging🟢 10packaging workflow detected
Vulnerabilities🟢 55 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/electron-to-chromium 1.5.240 UnknownUnknown
npm/get-tsconfig 4.13.0 UnknownUnknown
npm/magic-string 0.30.21 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 4Found 13/30 approved changesets -- score normalized to 4
Maintained🟢 89 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 8
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Vulnerabilities⚠️ 011 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/tinyrainbow 3.0.3 UnknownUnknown
npm/vite 7.1.12 🟢 7.3
Details
CheckScoreReason
Code-Review🟢 8Found 20/24 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 6detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Binary-Artifacts🟢 7binaries present in source code
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 10security policy file detected
SAST🟢 3SAST tool is not run on all commits -- score normalized to 3
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/vitest 4.0.2 UnknownUnknown

Scanned Files

  • package.json
  • pnpm-lock.yaml

@github-actions github-actions Bot merged commit 18efcd0 into main Oct 27, 2025
5 checks passed
@github-actions github-actions Bot deleted the dependabot/npm_and_yarn/npm-de5a92ee9c branch October 27, 2025 01:30
@github-actions github-actions Bot mentioned this pull request Feb 22, 2026
Closed
@my-pull-request-auto-merge my-pull-request-auto-merge Bot mentioned this pull request Feb 22, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

@poad poad

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@poad