chore(deps-dev): bump vitest from 3.2.4 to 4.1.0#4164
Conversation
|
Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability. Example:
Projects:
Please add a Jira issue key to your PR title. |
|
|
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit ff424d8. Configure here.
| "sequelize": "6.37.8", | ||
| "typescript": "^5.6.3", | ||
| "vitest": "^3.2.4" | ||
| "vitest": "^4.1.0" |
There was a problem hiding this comment.
Vitest four needs Node twenty
Medium Severity
vitest is bumped to ^4.1.0, which declares Node ^20.0.0 || ^22.0.0 || >=24.0.0, while this package still pins @types/node to ^18.16.3 and has no engines guard. Running pnpm test under Node 18 (still implied by those types) can fail even though CI uses Node 20.
Reviewed by Cursor Bugbot for commit ff424d8. Configure here.
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 3.2.4 to 4.1.0. - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest) --- updated-dependencies: - dependency-name: vitest dependency-version: 4.1.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
ff424d8 to
6be954c
Compare


Bumps vitest from 3.2.4 to 4.1.0.
Release notes
Sourced from vitest's releases.
... (truncated)
Commits
4150b91chore: release v4.1.01de0aa2fix: correctly identify concurrent test during static analysis (#9846)c3cac1cfix: use isAgent check, not just TTY, for watch mode (#9841)eab68bachore(deps): update all non-major dependencies (#9824)031f02afix: allow catch/finally for async assertion (#9827)3e9e096feat(reporters): addagentreporter to reduce ai agent token usage (#9779)0c2c013chore: release v4.1.0-beta.68181e06fix:hideSkippedTestsshould not hidetest.todo(fix #9562) (#9781)a8216b0fix: manual and redirect mock shouldn'tloadortransformoriginal module...689a22afix(browser): types ofgetCDPSessionandcdp()(#9716)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for vitest since your current version.
Note
Medium Risk
Major devDependency upgrade with large lockfile churn; CI must pass on supported Node versions, especially where Node 18 types are still declared.
Overview
Upgrades Vitest from
3.2.4to^4.1.0in@crowd/packages-workerand@crowd/data-access-layerdevDependencies;pnpm-lock.yamlis refreshed for the new Vitest stack (e.g. chai 6, updated rollup/postcss, removal ofvite-node/tinypoolfrom the resolved tree).No test files or Vitest config are edited—existing
vitest runscripts and standarddescribe/expectimports stay as-is. Verifypnpm test(or CI) in both packages after merge; Vitest 4’s documented Node requirement (^20 || ^22 || >=24) may matter fordata-access-layerif anything still runs tests on Node 18.Reviewed by Cursor Bugbot for commit 6be954c. Bugbot is set up for automated code reviews on this repo. Configure here.