GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — chore(deps): bump @vitest/coverage-v8 from 4.0.3 to 4.0.14 by dependabot[bot] · Pull Request #966 · SocketDev/socket-cli

Conversation

dependabot Bot commented on behalf of github Dec 8, 2025

Copy link

Copy Markdown

Contributor

Bumps @vitest/coverage-v8 from 4.0.3 to 4.0.14.

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.0.14

   🚀 Experimental Features

browser: Expose utils.configurePrettyDOM - by @sheremet-va in vitest-dev/vitest#9103 (2cc34)

runner: Add full names to tasks - by @macarie in vitest-dev/vitest#9087 (821aa)

ui: Add tabbed failure view for toMatchScreenshot with comparison slider - by @macarie in vitest-dev/vitest#8813 (c37c2)

   🐞 Bug Fixes

Externalize before caching - by @sheremet-va in vitest-dev/vitest#9077 (e1b2e)

Collect the duration of external imports - by @sheremet-va in vitest-dev/vitest#9097 (3326c)

Rename collect to import, remove prepare - by @sheremet-va in vitest-dev/vitest#9091 (1256b)

browser:

Unsubscribe onCancel on rpc destroy - by @AriPerkkio in vitest-dev/vitest#9088 (f5b72)

Revert the viewport scaling in non-ui mode #9018 - by @sheremet-va in vitest-dev/vitest#9072 and vitest-dev/vitest#9018 (64502)

coverage:

Invalidate circular modules correctly on rerun with coverage - by @aicest in vitest-dev/vitest#9096 (6f22c)

expect:

Allow function as standard schema - by @hi-ogawa in vitest-dev/vitest#9099 (ed8a2)

jsdom:

Reuse abort signals if possible - by @sheremet-va in vitest-dev/vitest#9090 (2c468)

pool:

Init VITEST_POOL_ID + VITEST_WORKER_ID before environment setup - by @AriPerkkio in vitest-dev/vitest#9085 (37918)

web-worker:

postMessage to send ports to workers - by @whitphx and @AriPerkkio in vitest-dev/vitest#9078 (9d176)

   🏎 Performance

Replace debug with obug - by @sxzz and @AriPerkkio in vitest-dev/vitest#9057 (acc51)

    View changes on GitHub

v4.0.13

   🐞 Bug Fixes

types:

Don't use type from Vite 7.1 - by @sheremet-va in vitest-dev/vitest#9071 (6356b)

Don't import node.js dependent types in vitest/browser - by @sheremet-va in vitest-dev/vitest#9068 (332af)

   🏎 Performance

Avoid fetchModule roundtrip if the module is cached - by @sheremet-va in vitest-dev/vitest#9075 (b27e0)

experimental: If fsCacheModule is enabled, read from the memory when possible - by @sheremet-va in vitest-dev/vitest#9076 (6b9a1)

    View changes on GitHub

v4.0.12

   🐞 Bug Fixes

Inherit fsModuleCachePath by default - by @sheremet-va in vitest-dev/vitest#9063 (9a8bc)

... (truncated)

Commits

9ca74cf chore: release v4.0.14
acc5152 perf: replace debug with obug (#9057)
73b54ce chore: release v4.0.13
5aa84d5 chore: release v4.0.12
c3befb0 chore: release v4.0.11
259a3d1 chore: release v4.0.10
62fab24 chore: release v4.0.9
46bfd09 chore: release v4.0.8
da8b93a fix(deps): update all non-major dependencies (#8636)
1f5d9d2 chore: release v4.0.7
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions


          chore(deps): bump @vitest/coverage-v8 from 4.0.3 to 4.0.14

c833645

Bumps [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) from 4.0.3 to 4.0.14.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.14/packages/coverage-v8)

---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added dependencies

Pull requests that update a dependency file

javascript Pull requests that update Javascript code labels

Dec 8, 2025

socket-security Bot commented Dec 8, 2025

Copy link

Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/@vitest/coverage-v8@4.0.14

View full report

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

socket-security-staging Bot commented Dec 8, 2025

Copy link

Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/@vitest/coverage-v8@4.0.14

View full report

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

socket-security-staging Bot commented Dec 8, 2025

Copy link

Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Low adoption: npm `obug` Location: Package overview From: pnpm-lock.yaml → `npm/@vitest/[email protected]` → `npm/[email protected]` ℹ Read more on: This package \| This alert \| What are unpopular packages? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `[email protected]`. Suggestion: Unpopular packages may have less maintenance and contain other problems. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity-Staging ignore npm/[email protected]`. You can also ignore all packages with `@SocketSecurity-Staging ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

John-David Dalton (jdalton) closed this

Dec 8, 2025

dependabot Bot commented on behalf of github Dec 8, 2025

Copy link

Copy Markdown

Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

dependabot Bot deleted the dependabot/npm_and_yarn/vitest/coverage-v8-4.0.14 branch

December 8, 2025 10:46

Mikola Lysenko (mikolalysenko) mentioned this pull request

Oct 9, 2026

test(patch): use get instead of the removed download alias #1600

Closed

Reviewers

No reviews

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

dependencies

Pull requests that update a dependency file

javascript

Pull requests that update Javascript code

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

1 participant

Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.