Skip to content

chore(deps-dev): bump the vitest group across 1 directory with 3 updates - #45

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vitest-1d50a822d5
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vitest-1d50a822d5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 3, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the vitest group with 3 updates in the / directory: @vitest/browser, @vitest/browser-playwright and vitest.

Updates @vitest/browser from 5.0.2 to 5.0.3

Release notes

Sourced from @​vitest/browser's releases.

v5.0.3

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @vitest/browser-playwright from 5.0.2 to 5.0.3

Release notes

Sourced from @​vitest/browser-playwright's releases.

v5.0.3

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates vitest from 5.0.2 to 5.0.3

Release notes

Sourced from vitest's releases.

v5.0.3

   🐞 Bug Fixes

    View changes on GitHub
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 3, 2026
@dependabot
dependabot Bot requested a review from htcom-code as a code owner October 3, 2026 04:34
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 3, 2026
htcom-code added a commit that referenced this pull request Oct 6, 2026
Dependabot opened three patch updates: #45 (vitest group 5.0.1 to
5.0.2), #46 (vite 8.3.0 to 8.3.1, demo) and #47 (`@microsoft/api-
extractor` 7.59.2 to 7.59.3, the dev group). All three rewrite
`pnpm-lock.yaml`, and #45 and #46 conflict directly because vitest's
snapshot keys carry vite's version as a peer suffix, so they land as
one branch.

The lockfile is the union of what the three pull requests resolved.
A fresh resolve would have pulled vite 8.3.2 and rolldown 1.2.12,
which no pull request carried; the conflict was resolved by keeping
the vitest side with its vite peer suffix moved to 8.3.1. The package
set matches main plus each pull request's additions and removals
exactly, and `pnpm install --frozen-lockfile` accepts it.

Nothing here reaches a published package: every change is in
devDependencies, and `pnpm api` reports all five API reports
unchanged.

Tags: #deps
Bumps the vitest group with 3 updates in the / directory: [@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser), [@vitest/browser-playwright](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `@vitest/browser` from 5.0.2 to 5.0.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/browser)

Updates `@vitest/browser-playwright` from 5.0.2 to 5.0.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/browser-playwright)

Updates `vitest` from 5.0.2 to 5.0.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest)

---
updated-dependencies:
- dependency-name: "@vitest/browser"
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vitest
- dependency-name: "@vitest/browser-playwright"
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vitest
- dependency-name: vitest
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vitest
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps-dev): bump the vitest group with 3 updates chore(deps-dev): bump the vitest group across 1 directory with 3 updates Oct 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vitest-1d50a822d5 branch from 15fd285 to ea9c645 Compare October 6, 2026 02:36
htcom-code added a commit that referenced this pull request Oct 6, 2026
Dependabot opened three patch updates: #45 (vitest group 5.0.2 to
5.0.3), #46 (vite 8.3.1 to 8.3.2, demo) and #49 (`@types/node`
26.6.3 to 26.6.4, the dev group). vitest's snapshot keys carry both
vite's and `@types/node`'s versions as peer suffixes, so each pull
request rewrites the same lockfile lines and they land as one branch.

The lockfile is the union of what the three pull requests resolved.
Re-resolving the peer suffixes left four transitive packages behind
(`rolldown`, `@oxc-project/types`, `chai`, `tinyrainbow`); a targeted
update moved them to the pull requests' versions. #46 moves only
postcss's `source-map-js` edge to 1.2.2, which `pnpm update` cannot
express, so that entry was copied from its lockfile. The package set
matches main plus each pull request's changes exactly.

`why-is-node-running` steps back to 3.2.1 because vitest 5.0.3 pins
it exactly. Nothing here reaches a published package: every change
is in devDependencies and `pnpm api` reports all five API reports
unchanged.

Tags: #deps
@dependabot @github

dependabot Bot commented on behalf of github Oct 6, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 6, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/vitest-1d50a822d5 branch October 6, 2026 03:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants