chore(deps-dev): bump vitest from 3.2.7 to 4.1.11 - #54
Conversation
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 3.2.7 to 4.1.11. - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest) --- updated-dependencies: - dependency-name: vitest dependency-version: 4.1.11 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
|
PR Title: chore(deps-dev): bump vitest from 3.2.7 to 4.1.11 Commit: 本 PR 仅做依赖升级：package.json 将 devDependency Prompt To Fix All With AI |
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Comment |
| "typescript": "^5.8.0", | ||
| "vite": "^7.0.0", | ||
| "vitest": "^3.2.0" | ||
| "vitest": "^4.1.11" |
There was a problem hiding this comment.
vitest 跨主版本升级 3→4 缺少配套的配置/测试验证，存在测试套件回归风险
本改动把 devDependency vitest 从 ^3.2.0 直接升级到 ^4.1.11，属于破坏性主版本升级，但 diff 中除 package.json 一行与自动生成的 package-lock.json 外，没有任何测试代码或 vitest 配置的相应调整。经核对：vitest.config.ts 仍为 defineConfig + root + test.include 的最小配置，vite.config.ts 的 root: "src" 也未变；仓库中 npm test 使用 vitest run 收集 src/**/*.test.ts 与 plugins/**/*.test.js。vitest 4 相对 3 存在多处 breaking change（如移除 Node 18 支持、快照序列化格式变更、mock/spy 语义与部分被移除的 API/选项），这些变化会在不改动测试的情况下改变断言与快照行为，可能让既有测试静默失败或产生误报。当前 PR 未提供任何运行 npm ci && npm test 通过或快照已更新的证据，因此无法确认测试套件在 v4 下仍然成立。
Problem code:
Line 28 in 7c3a39b
Recommendation:
在合并前用 npm ci 后运行 npm test 验证全部用例通过（含快照用例），若存在快照不匹配或使用已移除 API 的测试，需在本 PR 内一并更新；同时确认 CI/开发环境 Node 版本满足 vitest 4 的 engines（^20.0.0 || ^22.0.0 || >=24.0.0，已与 README 的 Node 20.19+ 要求一致）。
Prompt To Fix All With AI
This is a comment left during a code review.
Repository: https://github.com/LRainner/AgentCat
Path: package.json
Line: 28
Comment:
vitest 跨主版本升级 3→4 缺少配套的配置/测试验证，存在测试套件回归风险
本改动把 devDependency `vitest` 从 `^3.2.0` 直接升级到 `^4.1.11`，属于破坏性主版本升级，但 diff 中除 package.json 一行与自动生成的 package-lock.json 外，没有任何测试代码或 vitest 配置的相应调整。经核对：vitest.config.ts 仍为 `defineConfig` + `root` + `test.include` 的最小配置，`vite.config.ts` 的 `root: "src"` 也未变；仓库中 `npm test` 使用 `vitest run` 收集 `src/**/*.test.ts` 与 `plugins/**/*.test.js`。vitest 4 相对 3 存在多处 breaking change（如移除 Node 18 支持、快照序列化格式变更、mock/spy 语义与部分被移除的 API/选项），这些变化会在不改动测试的情况下改变断言与快照行为，可能让既有测试静默失败或产生误报。当前 PR 未提供任何运行 `npm ci && npm test` 通过或快照已更新的证据，因此无法确认测试套件在 v4 下仍然成立。
---
For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.
Bumps vitest from 3.2.7 to 4.1.11.
Release notes
Sourced from vitest's releases.
... (truncated)
Commits
9bd8d46chore: release v4.1.11 (#10995)9851dbcfix(browser): trigger playwright/chromium gc on lower disk availability [back...db616d2chore: release v4.1.10 (#10718)bae52b5fix(vm): fix external module resolve error with deps optimizer query for enco...a7a61e7chore: release v4.1.9 (#10598)934b0f5fix(pool): prevent test run hang on worker crash (#10543) [backport to v4] (#...7fb2965fix(browser): wait for orchestrator readiness before resolving browser sessio...a518019fix: fiximportOriginalwith optimizer and query import [backport to v4] (#...e61f2ddchore: release v4.1.8e4067b3fix(browser): disable clientcdpAPI whenallowWrite/allowExec: false[ba...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.