Skip to content

chore(deps): align Vitest and coverage providers at 4.1.11 - #522

Merged
ty-everett merged 4 commits into
mainfrom
dependabot-monthly_stack_maintenance-0d65bea298
Sep 15, 2026
Merged

ty-everett merged 4 commits into
mainfrom
dependabot-monthly_stack_maintenance-0d65bea298

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor

Program and scope

Align the Vitest 4.1.11 runner and its exact-version coverage provider across the wallet helpers, 402 middleware, toolbox client/mobile packages, and LCH reference app. This resolves the coverage peer mismatch in the original dependency update. Refreshed against repaired main including #523.

Impact

  • Public package manifest changed: @bsv/fund-wallet 1.5.1, @bsv/402-pay 0.3.1, @bsv/wallet-toolbox-client 2.13.1, @bsv/wallet-toolbox-mobile 2.13.1.
  • Documentation, release ledger, generated package facts and migration notes are current.
  • Runtime implementation and wire contracts are unchanged; no consumer migration is required.

Verification

  • Node 24.19.0 / pnpm 10.33.2; frozen install with lifecycle scripts disabled.
  • pnpm health:check, pnpm lint, pnpm format:check, pnpm build, pnpm typecheck, and pnpm audit:security passed locally.
  • Affected coverage suites: fund-wallet 22, 402-pay 112, toolbox client 19, toolbox mobile 42 tests passed (195 total).
  • LCH reference app: 15 tests passed.
  • pnpm test:mutation --target fund-wallet-cli: 90.10%, 173 killed / 19 survived, passing the governed threshold.
  • Exact head: 3e105ff.
  • Hosted validation: https://github.com/bsv-blockchain/ts-stack/actions/runs/35011332461 (success).
  • Complete diff self-reviewed for compatibility, artifacts, dependency graph, and documentation.
  • Every applicable hosted check is terminal and successful on this head.

Security and dependencies

  • Upstream Vitest 4.1.11 changes and exact coverage-provider peer compatibility reviewed. Upstream fixes cover browser iframe IDs/lifetime, mock redirects, and lifecycle concurrency.
  • Frozen lockfile uses one matching 4.1.11 runner/provider family.
  • Audit passed; only the two existing governed patched image-size advisory exclusions remain, with no new override or dismissal.
  • Exact-head CodeQL has no new alert.
  • Repository gate reports zero new Sonar findings and zero unreviewed hotspots.

Release and operations

  • Public manifest changes have patch bumps and release/migration documentation.
  • No workstation publication; package publication remains with the protected workflow.
  • No infrastructure, container, or deployed service change.

Completion evidence

  • Review conversations resolved and exact-head checks complete before admin merge.

Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.10 to 4.1.11.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 8, 2026
@socket-security

socket-security Bot commented Sep 8, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​vitest/​coverage-v8@​4.1.10 ⏵ 4.1.11991007999 +1100
Updatednpm/​vitest@​4.1.10 ⏵ 4.1.1198 +1100 +279 +198100

View full report

…ack_maintenance-0d65bea298

# Conflicts:
#	docs/reference/stack-facts.md
#	governance/repository-health/baselines.json
@sonarqubecloud

Copy link
Copy Markdown

@ty-everett
ty-everett marked this pull request as draft September 15, 2026 19:07
@ty-everett ty-everett changed the title chore(deps): bump vitest from 4.1.10 to 4.1.11 chore(deps): align Vitest and coverage providers at 4.1.11 Sep 15, 2026
@ty-everett
ty-everett marked this pull request as ready for review September 15, 2026 19:15
@ty-everett
ty-everett merged commit fd08660 into main Sep 15, 2026
39 checks passed
@ty-everett
ty-everett deleted the dependabot-monthly_stack_maintenance-0d65bea298 branch September 15, 2026 19:15
@codecov

codecov Bot commented Sep 15, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant