Skip to content

build(deps-dev): bump vitest from 5.0.0 to 5.0.2 - #280

Merged
amanthanvi merged 1 commit into
mainfrom
dependabot/npm_and_yarn/vitest-5.0.1
Sep 29, 2026
Merged

amanthanvi merged 1 commit into
mainfrom
dependabot/npm_and_yarn/vitest-5.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps vitest from 5.0.0 to 5.0.2.

Release notes

Sourced from vitest's releases.

v5.0.2

   🐞 Bug Fixes

    View changes on GitHub

v5.0.1

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 28, 2026
@dependabot
dependabot Bot requested a review from amanthanvi as a code owner September 28, 2026 06:34
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 28, 2026
@vercel

vercel Bot commented Sep 28, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
betterman Ready Ready Preview Sep 29, 2026 4:24am UTC

Request Review

@coderabbitai

coderabbitai Bot commented Sep 28, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: e1a40143-00b9-40ea-8026-568215399e70

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@greptile-apps

greptile-apps Bot commented Sep 28, 2026 •

Copy link
Copy Markdown

RetriggerConfidence Score: 4/5

[High risk] Bumps test framework to a patch release.

The Vitest bump itself has no established failure, but the lockfile should be brought into compliance with the repository’s scoped-diff requirement before merging.

Fix All in CodexFindings

  1. P2 Unrelated lockfile updates ▶
Fix with agent prompt
### Issue 1
pnpm-lock.yaml:9974-9976
This Vitest patch bump also changes Webpack’s resolved browserslist and enhanced-resolve versions. Elsewhere in the lockfile, Webpack picks up new schema-utils and webpack-sources versions, and schema-utils moves ajv-formats across a major version. These changes are outside the Vitest update and make a build regression harder to isolate. AGENTS.md requires diffs to stay scoped, so please remove the unrelated lockfile updates before merging.

Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.
Summary

Updates Vitest from 5.0.0 to 5.0.1 in the root and Next.js packages and regenerates the pnpm lockfile.

  • The lockfile also updates dependencies outside the Vitest tree; those changes should be scoped back.

Reviews (1) · Last reviewed commit: "build(deps-dev): bump vitest from 5.0.0 ..."

Comment thread pnpm-lock.yaml
@amanthanvi

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 5.0.0 to 5.0.2.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps-dev): bump vitest from 5.0.0 to 5.0.1 build(deps-dev): bump vitest from 5.0.0 to 5.0.2 Sep 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vitest-5.0.1 branch from 2980667 to a89fa99 Compare September 29, 2026 04:23
@amanthanvi
amanthanvi merged commit 3df249e into main Sep 29, 2026
15 checks passed
@amanthanvi
amanthanvi deleted the dependabot/npm_and_yarn/vitest-5.0.1 branch September 29, 2026 05:03

This branch was successfully deployed

1 active deployment
Preview — a89fa997 Deployed Sep 29, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant