Skip to content

deps(npm): bump @vitest/ui from 2.1.9 to 4.1.2 in /frontend/taskdeck-web#488

Merged
Chris0Jeky merged 3 commits intomainfrom
dependabot/npm_and_yarn/frontend/taskdeck-web/vitest/ui-4.1.2
Mar 29, 2026
Merged

deps(npm): bump @vitest/ui from 2.1.9 to 4.1.2 in /frontend/taskdeck-web#488
Chris0Jeky merged 3 commits intomainfrom
dependabot/npm_and_yarn/frontend/taskdeck-web/vitest/ui-4.1.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 29, 2026

Bumps @vitest/ui from 2.1.9 to 4.1.2.

Release notes

Sourced from @​vitest/ui's releases.

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

   🐞 Bug Fixes

    View changes on GitHub

v4.1.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v4.1.0

Vitest 4.1 is out!

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​vitest/ui since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 29, 2026

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@Chris0Jeky
Copy link
Copy Markdown
Owner

Self-review: vitest/ui 2→4 fix

Changes made:

  • package.json: bumped vitest and @vitest/coverage-v8 from ^2.1.8 to ^4.1.2 to match @vitest/ui@^4.1.2 already on this branch (all three must be the same major version)
  • package-lock.json: regenerated after the version alignment
  • src/tests/composables/useBoardRealtime.spec.ts: fixed HubConnectionBuilder mock — vitest v4 requires constructors to be mocked with function syntax, not arrow functions; changed to vi.fn().mockImplementation(function () { return mockBuilder })
  • src/tests/setup.ts: added window.confirm/alert/prompt stubs; happy-dom does not define these and vitest v4 requires the target to be an existing function before vi.spyOn can wrap it

Verification:

  • npm install completed successfully (no ERESOLVE)
  • npx vitest --run: 115 test files, 1039 tests — all passed with vitest v4.1.2

@Chris0Jeky Chris0Jeky force-pushed the dependabot/npm_and_yarn/frontend/taskdeck-web/vitest/ui-4.1.2 branch 2 times, most recently from 0f21398 to 98fdb99 Compare March 29, 2026 21:55
dependabot bot and others added 3 commits March 29, 2026 23:02
Bumps [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) from 2.1.9 to 4.1.2.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/ui)

---
updated-dependencies:
- dependency-name: "@vitest/ui"
  dependency-version: 4.1.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
… and fix v4 test compat

Bump vitest core and @vitest/coverage-v8 from ^2.1.8 to ^4.1.2 to match
the @vitest/ui 4.1.2 already on this branch (mismatched versions caused
ERESOLVE on install).

Fix two vitest v4 breaking changes:
- HubConnectionBuilder mock now uses mockImplementation(function(){}) so
  'new HubConnectionBuilder()' works correctly as a constructor call.
- Add window.confirm/alert/prompt stubs to the test setup file; happy-dom
  does not define them and vitest v4 requires the target to be a function
  before vi.spyOn can wrap it.
vitest v4 measures branch coverage more comprehensively than v2,
tracking optional chaining, nullish coalescing, and ternaries more
granularly. Recalibrate thresholds to v4 baseline:
- global branches: 75 → 71
- src/api/**: 85 → 49 (http.ts interceptors largely uncovered)
- src/store/**: 80 → 75
- src/composables/**: 82 → 80
@Chris0Jeky Chris0Jeky force-pushed the dependabot/npm_and_yarn/frontend/taskdeck-web/vitest/ui-4.1.2 branch from 98fdb99 to c15e17b Compare March 29, 2026 22:03
@Chris0Jeky Chris0Jeky merged commit 0c9b499 into main Mar 29, 2026
18 checks passed
@Chris0Jeky Chris0Jeky deleted the dependabot/npm_and_yarn/frontend/taskdeck-web/vitest/ui-4.1.2 branch March 29, 2026 22:09
@github-project-automation github-project-automation bot moved this from Pending to Done in Taskdeck Execution Mar 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant