Skip to content

Bump vitest to 4.1.12 for a @vitest/mocker security fix - #176

Merged
ttktjmt merged 1 commit into
mainfrom
fix/dependabot-virtualenv-vitest
Oct 22, 2026
Merged

ttktjmt merged 1 commit into
mainfrom
fix/dependabot-virtualenv-vitest

Conversation

@ttktjmt

@ttktjmt ttktjmt commented Oct 22, 2026 •

Copy link
Copy Markdown
Owner

Addresses Dependabot alerts #113 and #114 (@vitest/mocker, fixed in 4.1.12).

vitest 4.1.11 -> 4.1.12, which brings @vitest/mocker 4.1.12. npm update would not move it, so the package.json floor is now ^4.1.12. The virtualenv bump this PR first carried landed in #175.

npm test passes.

🤖 Generated with Claude Code

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

Deploying mjswan with  Cloudflare Pages  Cloudflare Pages

Latest commit: 0fb7c82
Status: ✅  Deploy successful!
Preview URL: https://d76f33a4.mjswan.pages.dev
Branch Preview URL: https://fix-dependabot-virtualenv-vi.mjswan.pages.dev

View logs

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@ttktjmt
ttktjmt force-pushed the fix/dependabot-virtualenv-vitest branch from 4d3a66e to 0fb7c82 Compare October 22, 2026 03:47
@ttktjmt ttktjmt changed the title Bump virtualenv and vitest for security fixes Bump vitest to 4.1.12 for a @vitest/mocker security fix Oct 22, 2026
@ttktjmt
ttktjmt merged commit 2b0e279 into main Oct 22, 2026
8 checks passed
@ttktjmt
ttktjmt deleted the fix/dependabot-virtualenv-vitest branch October 22, 2026 04:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant