Skip to content

chore(security): clear Dependabot critical/high vitest/vite advisories - #137

Merged
thomasrockhu-codecov merged 1 commit into
mainfrom
th/dependabot-cve-vitest-vite
Aug 11, 2026
Merged

chore(security): clear Dependabot critical/high vitest/vite advisories#137
thomasrockhu-codecov merged 1 commit into
mainfrom
th/dependabot-cve-vitest-vite

Conversation

@thomasrockhu-codecov

Copy link
Copy Markdown
Collaborator

Summary

  • Floor vitest/@vitest/coverage-v8 to ^3.2.6 and add npm overrides for postcss, brace-expansion, vite, picomatch, minimatch, and rollup.
  • Clears Dependabot critical/high alerts (projected until merge).

Test plan

  • CI passes on this branch
  • After merge, Dependabot critical/high count drops to 0
Floor vitest/@vitest/coverage-v8 to ^3.2.6 and add npm overrides for postcss, brace-expansion, vite, picomatch, minimatch, and rollup.
@codecov

codecov Bot commented Aug 7, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (9d71e41) to head (4e5cc7a).

Additional details and impacted files
@@            Coverage Diff            @@
##              main      #137   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            1         1           
  Lines            8         8           
  Branches         5         5           
=========================================
  Hits             8         8           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

@thomasrockhu-codecov
thomasrockhu-codecov merged commit 8d8a81e into main Aug 11, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

1 participant