Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 10, 2025

Bumps vitest and @vitest/coverage-istanbul. These dependencies needed to be updated together.
Updates vitest from 4.0.3 to 4.0.8

Release notes

Sourced from vitest's releases.

v4.0.8

   🐞 Bug Fixes

    View changes on GitHub

v4.0.7

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v4.0.6

   🐞 Bug Fixes

... (truncated)

Commits
  • 46bfd09 chore: release v4.0.8
  • c79f47c fix(forks): do not fail with Windows Defender enabled (#8967)
  • 7ed99cd chore: remove unnecessery values() call for set (#8964)
  • 9a9323b chore(deps): update dependency @​antfu/eslint-config to v6 (#8832)
  • 46b3529 chore(deps): update dependency jsdom to v27 (#8700)
  • 65292c3 docs: update structure (#8625)
  • da8b93a fix(deps): update all non-major dependencies (#8636)
  • bcb132f fix: workaround noExternal merging bug on Vite 6 (#8950)
  • 1f5d9d2 chore: release v4.0.7
  • a1b7361 fix(jsdom): support URL.createObjectURL, FormData.set(prop, blob) (#8935)
  • Additional commits viewable in compare view

Updates @vitest/coverage-istanbul from 4.0.3 to 4.0.8

Release notes

Sourced from @​vitest/coverage-istanbul's releases.

v4.0.8

   🐞 Bug Fixes

    View changes on GitHub

v4.0.7

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v4.0.6

   🐞 Bug Fixes

... (truncated)

Commits
  • 46bfd09 chore: release v4.0.8
  • 1f5d9d2 chore: release v4.0.7
  • 2e7b2b8 chore: release v4.0.6
  • e3b7775 fix(coverage): prevent filtering out virtual files before remapping to source...
  • ed9fc71 chore: release v4.0.5
  • 9b75ec5 chore: release v4.0.4
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 10, 2025
@changeset-bot
Copy link

changeset-bot bot commented Nov 10, 2025

⚠️ No Changeset found

Latest commit: ddee623

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@coderabbitai
Copy link
Contributor

coderabbitai bot commented Nov 10, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@codspeed-hq
Copy link

codspeed-hq bot commented Nov 10, 2025

CodSpeed Performance Report

Merging #591 will improve performances by ×3.4

Comparing dependabot/npm_and_yarn/multi-21f66d672c (8c30680) with main (58879be)

Summary

⚡ 1 improvement
✅ 64 untouched

Benchmarks breakdown

Mode Benchmark BASE HEAD Change
Simulation Stream approach: parseUint8ArrayStream (1KB) 42 ms 12.3 ms ×3.4

Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [@vitest/coverage-istanbul](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-istanbul). These dependencies needed to be updated together.

Updates `vitest` from 4.0.3 to 4.0.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.8/packages/vitest)

Updates `@vitest/coverage-istanbul` from 4.0.3 to 4.0.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.8/packages/coverage-istanbul)

---
updated-dependencies:
- dependency-name: vitest
  dependency-version: 4.0.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: "@vitest/coverage-istanbul"
  dependency-version: 4.0.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/multi-21f66d672c branch from 8c30680 to ddee623 Compare November 22, 2025 04:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant