Skip to content

Tests: pin vite to 7.3.7, its patched release - #31

Merged
heliocosta-dev merged 1 commit into
mainfrom
fix/vite-7.3.7
Oct 21, 2026
Merged

heliocosta-dev merged 1 commit into
mainfrom
fix/vite-7.3.7

Conversation

@heliocosta-dev

Copy link
Copy Markdown
Member

vitest 5 takes vite as a peer dependency, and pnpm had filled it in at 7.3.6, which has open advisories (1 high, 3 medium, 1 low) fixed in 7.3.7. Dependabot's #30 can't update it: it tries to resolve vite 8 and fails on the lockfile.

  • vite becomes a direct dev dependency at ^7.3.7, which satisfies vitest's peer at the patched version and lets dependabot update vite directly from now on.
  • vite only runs the tests. Nothing in the published package changes, so no release.

Checked locally with pnpm 9, as CI uses: typecheck, tests (103 passed), build and Biome.

Supersedes #30.

🤖 Generated with Claude Code

vitest 5 takes vite as a peer, and pnpm had filled it in at 7.3.6, which
has open advisories fixed in 7.3.7. A direct dev dependency on ^7.3.7
satisfies the peer at the patched version and lets dependabot update
vite directly. vite only runs the tests, so the published package is
unchanged.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@heliocosta-dev
heliocosta-dev merged commit 2ed18e9 into main Oct 21, 2026
4 checks passed
@heliocosta-dev
heliocosta-dev deleted the fix/vite-7.3.7 branch October 21, 2026 22:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant