Skip to content

Vitest and other dependency upgrades#223

Merged
hbmartin merged 1 commit into
masterfrom
dep-ups-apr21
Apr 22, 2026
Merged

Vitest and other dependency upgrades#223
hbmartin merged 1 commit into
masterfrom
dep-ups-apr21

Conversation

@hbmartin

@hbmartin hbmartin commented Apr 22, 2026

Copy link
Copy Markdown
Owner

Summary by CodeRabbit

Chores

  • Updated development dependencies including testing and build tooling to latest patch and minor versions.

Note

Upgrade Vitest to 4.1.5 and knip to 6.6.0

Bumps vitest, @vitest/browser-playwright, @vitest/browser-preview, and @vitest/coverage-v8 from 4.1.4 to 4.1.5, and knip from 6.5.0 to 6.6.0. The pnpm-lock.yaml is regenerated to match.

Macroscope summarized c09e1b6.

Copilot AI review requested due to automatic review settings April 22, 2026 15:26
@coderabbitai

coderabbitai Bot commented Apr 22, 2026

Copy link
Copy Markdown

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 558b4de6-1f1f-4be4-8336-e0c10d3dee8c

📥 Commits

Reviewing files that changed from the base of the PR and between 138399c and c09e1b6.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (1)
  • package.json

📝 Walkthrough

Walkthrough

Updated devDependency version ranges in package.json. Bumped @vitest/browser-playwright, @vitest/browser-preview, @vitest/coverage-v8, and vitest from ^4.1.4 to ^4.1.5, and knip from ^6.5.0 to ^6.6.0. No functional or API changes.

Changes

Cohort / File(s) Summary
Dependency Version Updates
package.json
Bumped devDependency versions: vitest-related packages (@vitest/browser-playwright, @vitest/browser-preview, @vitest/coverage-v8, vitest) from ^4.1.4 to ^4.1.5; knip from ^6.5.0 to ^6.6.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately describes the main change: updating vitest and other dependencies in package.json.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dep-ups-apr21

Comment @coderabbitai help to get the list of available commands and usage tips.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedvitest@​4.1.4 ⏵ 4.1.596 +110079 +199 +2100
Updated@​vitest/​coverage-v8@​4.1.4 ⏵ 4.1.5991007999 +1100
Updated@​vitest/​browser-preview@​4.1.4 ⏵ 4.1.5951008499 +1100
Updated@​vitest/​browser-playwright@​4.1.4 ⏵ 4.1.5991008699 +2100
Updatedknip@​6.5.0 ⏵ 6.6.09910095 +196100

View full report

@hbmartin hbmartin merged commit 2110092 into master Apr 22, 2026
18 checks passed
@hbmartin hbmartin deleted the dep-ups-apr21 branch April 22, 2026 15:28

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the project’s dev tooling dependencies (primarily Vitest and related browser/coverage packages) and refreshes the pnpm lockfile to reflect the resolved dependency graph.

Changes:

  • Bump vitest and @vitest/* browser/coverage packages from 4.1.4 to 4.1.5
  • Bump knip from 6.5.0 to 6.6.0
  • Update pnpm-lock.yaml for the new direct and transitive dependency resolutions

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File Description
package.json Updates direct devDependency version ranges for Vitest-related packages and Knip.
pnpm-lock.yaml Captures the resulting resolved versions, peer dep wiring, and transitive updates from the upgrades.
Files not reviewed (1)
  • pnpm-lock.yaml: Language not supported

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread package.json
Comment on lines 156 to 158
"jsonc-eslint-parser": "^3.1.0",
"knip": "^6.5.0",
"knip": "^6.6.0",
"oxfmt": "^0.46.0",

Copilot AI Apr 22, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

knip@^6.6.0 requires Node ^20.19.0 || >=22.12.0 (see pnpm-lock.yaml), but this repo advertises engines.node: ">=22". That allows Node 22.0–22.11, which will fail/warn on install. Please either bump engines.node to >=22.12.0 (or ^22.12.0) to match dependencies, or keep knip on a version that supports the currently declared engine range.

Copilot uses AI. Check for mistakes.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates several development dependencies, primarily upgrading Vitest and its associated plugins from version 4.1.4 to 4.1.5. It also updates knip to version 6.6.0, which involves a shift in its internal dependencies, and includes minor version bumps for electron-to-chromium and flow-parser. I have no feedback to provide.

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 2 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="package.json">

<violation number="1" location="package.json:157">
P2: `knip@^6.6.0` requires `node ^20.19.0 || >=22.12.0` (visible in the lockfile), but this repo declares `engines.node: ">=22"`. Node 22.0–22.11 satisfies the project constraint but fails knip's engine check. Bump `engines.node` to `">=22.12.0"` or pin knip to a version compatible with the current engine range.</violation>
</file>

Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.

Comment thread package.json
"jsdom": "^29.0.2",
"jsonc-eslint-parser": "^3.1.0",
"knip": "^6.5.0",
"knip": "^6.6.0",

@cubic-dev-ai cubic-dev-ai Bot Apr 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2: knip@^6.6.0 requires node ^20.19.0 || >=22.12.0 (visible in the lockfile), but this repo declares engines.node: ">=22". Node 22.0–22.11 satisfies the project constraint but fails knip's engine check. Bump engines.node to ">=22.12.0" or pin knip to a version compatible with the current engine range.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At package.json, line 157:

<comment>`knip@^6.6.0` requires `node ^20.19.0 || >=22.12.0` (visible in the lockfile), but this repo declares `engines.node: ">=22"`. Node 22.0–22.11 satisfies the project constraint but fails knip's engine check. Bump `engines.node` to `">=22.12.0"` or pin knip to a version compatible with the current engine range.</comment>

<file context>
@@ -154,7 +154,7 @@
     "jsdom": "^29.0.2",
     "jsonc-eslint-parser": "^3.1.0",
-    "knip": "^6.5.0",
+    "knip": "^6.6.0",
     "oxfmt": "^0.46.0",
     "oxlint": "^1.61.0",
</file context>
Fix with Cubic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants