Skip to content

chore(deps): bump vitest from 5.0.3 to 5.0.5 - #452

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/vitest-5.0.4
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/vitest-5.0.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

Bumps vitest from 5.0.3 to 5.0.5.

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 16, 2026
@coderabbitai

coderabbitai Bot commented Oct 16, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: d5c8922b-4038-4437-b196-3abb0572a2fc

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@dependabot
dependabot Bot force-pushed the dependabot/bun/vitest-5.0.4 branch 5 times, most recently from f48ebe9 to 3113def Compare October 17, 2026 21:37
@dependabot dependabot Bot changed the title chore(deps): bump vitest from 5.0.3 to 5.0.4 chore(deps): bump vitest from 5.0.3 to 5.0.5 Oct 18, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bun/vitest-5.0.4 branch 11 times, most recently from 9d06db2 to ffabc73 Compare October 21, 2026 13:39
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 5.0.3 to 5.0.5.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-version: 5.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/bun/vitest-5.0.4 branch from ffabc73 to ccfa6ef Compare October 21, 2026 17:27
dbtlr added a commit that referenced this pull request Oct 24, 2026
…perseding Dependabot #449-#453 (MMR-593) (#514)

Five Dependabot PRs (#449 to #453) had sat open for a week, and more
updates had piled up behind them: Bun 1.4.4, vite-plus 1.4, and patch
releases across the CLI, MCP server, console, and toolchain. This PR
lands them all at once.

Everything outdated is now on its latest release except Loom. Loom
0.15.0 carries about 40 breaking migrations, which makes it a framework
move rather than a bump, so it gets its own task (MMR-594). The security
overrides move to the newest release in their current major.
`brace-expansion` and `fast-uri` stay on 2.x and 3.x because the
overrides force those lines on every consumer.

The update surfaced one hidden problem. `@loomcli/core` 0.14.0 declares
`@types/node` 22.20.5 as an exact runtime dependency. Once `bun-types`
changed, a fresh resolve hoisted that copy over the 25.x line the repo
had been using, and type-checking broke in four packages
(`ChildProcess.once`, `events.once`, and `node:path`'s `join`). The root
now pins `@types/node` 26.6.5, matching Bun 1.4.4's Node 26.3 runtime.
The pin is filed upstream as LM-s36.

Smaller changes:
- oxlint 1.89 flagged two new findings, both fixed in place: a
`String.raw` with the identical string value, and a key-order swap.
- `bun install` marks every workspace `bin` target executable, so
`packages/cli/src/main.ts` is now committed as 100755, matching
`packages/bin/src/main.ts`. Without it, every install left the tree
dirty.

Verification:
- `bun run verify` passes: zero warnings, 5,064 bun tests, and 1,069
Vitest tests.
- `test:pwa` (2/2) and `test:host` (7/7, including the container build
on `oven/bun:1.4.4`) pass.
- A compiled `dist/mimir` was smoked in a throwaway directory. Project,
initiative, task, start, done, search, seed, and doctor all ran against
its own SQLite store. An MCP stdio handshake succeeded, listed 50 tools,
and answered `overview`.

Supersedes #449, #450, #451, #452, #453.

Changes made by Claude Opus 5.5 in Claude Code.
@dbtlr

dbtlr commented Oct 24, 2026

Copy link
Copy Markdown
Owner

Superseded by #514, which landed this update (or a newer one) on main.

@dbtlr dbtlr closed this Oct 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant