Align Dependencies, Fix Semgrep-identified errors

[MightyPrytanis]

Open one or more PR requests to:

1. Implement a solution for failing job 61119799331. Use the logs, job definition, and any referenced files where the failure occurred. Keep your response focused on the solution and include code suggestions when appropriate.
   2 references
   The failing job encountered a dependency conflict during the npm ci command, caused by incompatible peer dependencies between vitest@4.0.17 and @vitest/coverage-v8@4.0.16.

Solution:
Align the Dependency Versions: Update the @vitest/coverage-v8 package version in package.json to match the same 4.0.17 version as vitest to ensure compatibility. Modify your package.json:

JSON
"devDependencies": {
"vitest": "^4.0.17",
"@vitest/coverage-v8": "^4.0.17",
"@vitest/ui": "^4.0.17"
}
After making this change, run:

bash
npm install
Then commit and push the updated package.json and package-lock.json.

Resolve Dependency Conflicts Temporarily: If you need quick relief while working on a permanent fix, use:

bash
npm ci --legacy-peer-deps
This bypasses strict peer dependency checks but should only be used as a stopgap solution.

Adjust the Workflow: In the .github/workflows/ci.yml file, consider adding a temporary --legacy-peer-deps flag to the npm ci step (line 55):

YAML

• name: Install dependencies
  run: npm ci --legacy-peer-deps
  Upgrade Vitest Ecosystem: Check for updates to ensure all Vitest-related packages are on compatible versions. Run:

bash
npm outdated
npm update @vitest/coverage-v8
Once the dependencies are updated and compatible, the job should transition to success.

2. Check codebase for similar dependency alignment errors. Fix if any are discovered.

3. Implement fixes for remaining 69 minor errors identified. by Semgrep but not fixed yet.