Repository navigation
build(deps-dev): bump the development-minor-and-patch group with 4 updates - #240
dependabot[bot] wants to merge 1 commit into
Conversation
…dates Bumps the development-minor-and-patch group with 4 updates: [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8), [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt), [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `@vitest/coverage-v8` from 5.0.3 to 5.0.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8) Updates `oxfmt` from 0.72.0 to 0.73.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.73.0/npm/oxfmt) Updates `oxlint` from 1.87.0 to 1.88.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.88.0/npm/oxlint) Updates `vitest` from 5.0.3 to 5.0.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest) --- updated-dependencies: - dependency-name: "@vitest/coverage-v8" dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-and-patch - dependency-name: oxfmt dependency-version: 0.73.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-minor-and-patch - dependency-name: oxlint dependency-version: 1.88.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-minor-and-patch - dependency-name: vitest dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
🦞👀 Pull request received. I will update this pull request when review starts. ClawSweeper review completeClawSweeper finished reviewing this revision. The review result is being finalized. |
clawsweeper
Bot
added
P3
|
Codex review: needs maintainer review before merge. What this changesUpdates Vitest and V8 coverage to 5.0.5, Oxfmt to 0.73.0, and Oxlint to 1.88.0 with their lockfile dependencies. Example: A contributor installs the locked development dependencies.
Review scores
ProductKind: Maintenance · Worth it: Yes · Fix scope: Complete Merge readiness✅ Ready for maintainer review Keep this PR open: the development dependency updates are absent from current main, follow the existing maintenance policy, and introduce no concrete defect found in review; CI validation remains queued. Priority: P3 Before mergeNone. FindingsNone. Tests
Agent review detailsHow this fits togetherThe package manifest and pnpm lockfile select the tools that format, lint, and test the TypeScript CLI; their outputs feed development and CI checks. flowchart LR
Manifest[Package manifest] --> Install[pnpm frozen install]
Lockfile[pnpm lockfile] --> Install
Install --> Formatting[Oxfmt and Oxlint]
Install --> Testing[Vitest and V8 coverage]
Formatting --> Validation[Development and CI results]
Testing --> Validation
Technical reviewBest possible solution: Land the focused dependency refresh once the existing CI gates validate the reviewed head. Do we have a high-confidence way to reproduce the issue? This is dependency maintenance, with no reported application bug to reproduce; the version changes are directly verified in the pinned diff. Is this the best way to solve the issue? Updating the existing manifest and lockfile is the smallest complete approach, preserves matching Vitest coverage versions, and introduces no parallel tooling. AGENTS.md: found and applied where relevant. Codex review notes: model internal, reasoning medium; reviewed against 610a26db8437. Provenance checked
TestingProof path: none. SecurityNone. EvidenceWhat I checked:
Likely related people:
LabelsLabel changes:
Label justifications:
Rank-up movesOptional improvements that raise the rating; they are not merge blockers.
Rating scale6/6 🦀 challenger crab · 5/6 🦞 diamond lobster · 4/6 🐚 platinum hermit · 3/6 🦐 gold shrimp · 2/6 🦪 silver shellfish · 1/6 🧂 unranked krab. Overall follows the weaker of proof and patch quality; ✨ marks media proof (a screenshot, video, or linked artifact) that directly shows the changed behavior. WorkflowClawSweeper edits this one comment on every review. Comment Reviewed October 19, 2026, 12:21 PM ET / 16:21 UTC. |
|
Consolidated and landed in #242 with the other eligible dependency updates, changelog credit, independent review, and passing Linux, Windows, and Node 22/24 checks. Closing this superseded update to keep the dependency changes in one coherent batch. Thank you! |
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
1 participant
Bumps the development-minor-and-patch group with 4 updates: @vitest/coverage-v8, oxfmt, oxlint and vitest.
Updates
@vitest/coverage-v8from 5.0.3 to 5.0.5Release notes
Sourced from @vitest/coverage-v8's releases.
... (truncated)
Commits
7a825dbchore: release v5.0.5 (#11609)6a11cf6chore: release v5.0.4 (#11554)2297d93fix(coverage): v8 browser memory leak between test files (#11466)c74e099fix(deps): update all non-major dependencies (#11167)Updates
oxfmtfrom 0.72.0 to 0.73.0Release notes
Sourced from oxfmt's releases.
Changelog
Sourced from oxfmt's changelog.
... (truncated)
Commits
6941b4erelease(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)a495e82feat(oxfmt): supportassociationsconfig to specify language over filepath ...408d87fdocs(oxfmt): simplify oxfmtrc docs (#27432)5db28fafeat(oxfmt): support Astro viaprettier-plugin-astro@1.x(#27386)902e188docs(oxfmt): update howembeddedLanguageFormattingoption works (#27362)Updates
oxlintfrom 1.87.0 to 1.88.0Release notes
Sourced from oxlint's releases.
Changelog
Sourced from oxlint's changelog.
... (truncated)
Commits
6941b4erelease(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)3c361a7feat(linter/unicorn/prefer-query-selector): addallowWithVariablesoption (...Updates
vitestfrom 5.0.3 to 5.0.5Release notes
Sourced from vitest's releases.
... (truncated)
Commits
7a825dbchore: release v5.0.5 (#11609)6621a72fix: abort all running tests on cancel (#11606)e9c3d72fix: release mocks of finished test files (#11607)8dd67c2fix(browser): run global setup once with instances (#11596)6c5a447fix: run hook cleanups when a later hook fails (#11605)9697b38fix: keep the import frame in native loader errors (#11599)6498b66fix(browser): wait 30s for the browser to close (#11601)f161e6dfix(browser): drop late connections of closed sessions (#11600)fe86a64fix: skip builtin loading in async leak detector (#11598)6ae8e89fix(reporter): end reason'failed'on worker crash (#11568)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions