Skip to content

release: v1.0.3 - align esbuild to 0.28.1 (vitest's version) + sync lock - #5

Merged
Shinrai merged 4 commits into
masterfrom
next
Aug 3, 2026
Merged

release: v1.0.3 - align esbuild to 0.28.1 (vitest's version) + sync lock#5
Shinrai merged 4 commits into
masterfrom
next

Conversation

@cldmv-bot

@cldmv-bot cldmv-bot Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

🚀 What's Changed

💥 Breaking Changes

No breaking changes

✨ Features

No new features

🐛 Bug Fixes

No bug fixes

📦 Dependencies

🔧 Other Changes

👥 Contributors

coverage

Metric Coverage
Statements 32.9%
Branches 25.3%
Functions 50.7%
Lines 32.9%

Avg: 35.5% · 7f53285 · Node lts/*

Shinrai and others added 4 commits August 2, 2026 19:21
npm ci failed on CI (npm 10.9.8) with 'Missing esbuild@0.28.1 from lock file':
the direct esbuild ^0.19.0 (build) conflicted with vitest/vite 8's esbuild
0.28.1, and local npm 11 tolerated the split while CI's npm 10.9.8 rejected it.
Bump the direct esbuild to ^0.28.1 so there's a single version; regenerated
lock. Verified npm ci -> 0 + full chain green.
@cldmv-bot cldmv-bot Bot added ! release → master v4 flow: persistent next → master release PR (carries the next feature release) release Marks a pull request as a pending release — merge to publish a new version semver: patch This release contains only backwards-compatible bug fixes type: bug Something is broken or not behaving as expected labels Aug 3, 2026
@cldmv-bot

cldmv-bot Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor Author

🔒 Dependency Review

  • 0 vulnerable package(s)
  • 0 package(s) with incompatible licenses
  • 0 package(s) with invalid SPDX license definitions
  • 0 package(s) with unknown licenses
  • 0 denied package(s)
  • ⚠️ 3 package(s) with OpenSSF Scorecard score < 3
    • @jridgewell/resolve-uri@3.1.2 — score 2.8
    • html-escaper@2.0.2 — score 2
    • js-tokens@10.0.0 — score 2.9

Full job summary

@Shinrai
Shinrai merged commit 74530ef into master Aug 3, 2026
26 checks passed
@cldmv-bot
cldmv-bot Bot deleted the next branch August 3, 2026 03:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

! release → master v4 flow: persistent next → master release PR (carries the next feature release) release Marks a pull request as a pending release — merge to publish a new version semver: patch This release contains only backwards-compatible bug fixes type: bug Something is broken or not behaving as expected

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant