chore(deps-dev): bump the npm_and_yarn group across 3 directories with 2 updates#17
Closed
dependabot[bot] wants to merge 1 commit into
Closed
chore(deps-dev): bump the npm_and_yarn group across 3 directories with 2 updates#17dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…h 2 updates Bumps the npm_and_yarn group with 2 updates in the / directory: [turbo](https://github.com/vercel/turborepo) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Bumps the npm_and_yarn group with 1 update in the /packages/cli directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Bumps the npm_and_yarn group with 1 update in the /packages/web directory: [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `turbo` from 2.9.6 to 2.9.14 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.9.6...v2.9.14) Updates `vitest` from 2.1.9 to 4.1.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest) Updates `vitest` from 2.1.9 to 4.1.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest) Updates `vitest` from 2.1.9 to 4.1.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest) --- updated-dependencies: - dependency-name: turbo dependency-version: 2.9.14 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: vitest dependency-version: 4.1.0 dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
📝 WalkthroughSummary by CodeRabbit릴리스 노트
Walkthrough이 PR은 두 패키지(cli, web)의 devDependencies에서 vitest를 ^2.1.9에서 ^4.1.0으로 업그레이드합니다. 각 package.json 파일의 단일 라인이 변경되었습니다. ChangesVitest 버전 업그레이드
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
✨ Simplify code
Warning Billing warning: we have not been able to collect payment for this subscription for more than 72 hours. Please update the payment method or pay any pending invoices in Billing to avoid service interruption. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@packages/web/package.json`:
- Line 54: 업데이트된 vitest (^4.1.0)로 인한 호환성 검증이 필요합니다: packages/web에서 터미널로 pnpm -C
packages/web test를 실행하여 vitest v4으로 모든 테스트(패턴 설정은 packages/web/vitest.config.ts의
environment/include)를 통과하는지 확인하고, 실패하면 vitest.config.ts(환경/테스트 패턴/타이밍 관련 옵션)와
영향받는 *.test.ts 테스트 코드(모킹/타이밍/API 사용)를 vitest v4 동작에 맞게 수정한 뒤 다시 실행하고 동일한 변경이 CI
설정에도 반영되어 파이프라인에서 통과하는지 확인하세요.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro
Run ID: 376bf581-4090-4e6d-b28c-29649d6e2980
⛔ Files ignored due to path filters (1)
pnpm-lock.yamlis excluded by!**/pnpm-lock.yaml
📒 Files selected for processing (2)
packages/cli/package.jsonpackages/web/package.json
| "tailwindcss": "^4", | ||
| "typescript": "^5", | ||
| "vitest": "^2.1.9" | ||
| "vitest": "^4.1.0" |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# 웹 패키지의 vitest 구성 및 테스트 파일 검사
echo "=== vitest 구성 파일 확인 ==="
fd -t f 'vitest.config' packages/web/
echo -e "\n=== packages/web의 테스트 파일 확인 ==="
fd -e ts -e tsx -e js -e jsx . packages/web/src --exec grep -l 'vitest\|describe\|test\|it\|expect' {} \; 2>/dev/null | head -10
echo -e "\n=== vitest API 및 환경 설정 사용 검색 ==="
rg -t ts -t tsx --glob 'packages/web/**' -C2 'from ["\x27]vitest["\x27]|`@vitest/`|environment:'Repository: Seongho-Bae/argos
Length of output: 676
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "=== packages/web/package.json (vitest 관련) ==="
cat -n packages/web/package.json | sed -n '40,80p'
echo -e "\n=== packages/web/vitest.config.ts (전체) ==="
wc -l packages/web/vitest.config.ts
cat -n packages/web/vitest.config.ts
echo -e "\n=== vitest 사용하는 파일(테스트/설정) 찾기: describe/test/it/expect ==="
rg -n --glob 'packages/web/**/*.{ts,tsx,js,jsx}' '(\bdescribe\b|\bit\b|\btest\b|\bexpect\b)' packages/web/src packages/web
echo -e "\n=== vitest 환경/브라우저 관련 키워드 찾기 ==="
rg -n --glob 'packages/web/**/*.{ts,tsx,js,jsx}' '(environment\s*:|browser\s*:|setupFiles|globals\s*:|`@vitest/`|from ["'"'"']vitest["'"'"']|test\s*:\s*\{' packages/web
echo -e "\n=== packages/web/package.json test 스크립트 확인 ==="
node -e "const p=require('./packages/web/package.json'); console.log(p.scripts||{})"Repository: Seongho-Bae/argos
Length of output: 50538
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "=== packages/web/package.json (next / scripts / vitest 관련) ==="
node - <<'NODE'
const p=require('./packages/web/package.json');
console.log(JSON.stringify({
next: p.dependencies?.next ?? p.devDependencies?.next ?? null,
scripts: p.scripts ?? {},
vitest: p.devDependencies?.vitest ?? null
}, null, 2));
NODE
echo -e "\n=== vitest 환경/브라우저 관련 키워드 (정확 문자열 검색) ==="
rg -n --glob 'packages/web/**/*.{ts,tsx,js,jsx,json}' \
'(environment:\s*['"'"'"]|jsdom|happy-dom|`@vitest/browser`|browser\s*:\s*|test:\s*\{|setupFiles|globals\s*:\s*)' \
packages/web || true
echo -e "\n=== vitest config에 지정된 include 확인 ==="
cat packages/web/vitest.config.tsRepository: Seongho-Bae/argos
Length of output: 1872
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "=== packages/web에서 .test.tsx 존재 여부 ==="
fd -e tsx --extension 'tsx' --full-path '.*' packages/web/src -a 2>/dev/null | head -n 1 >/dev/null || true
fd -e tsx '.test.tsx' packages/web/src || true
echo -e "\n=== packages/web/src에서 .test.tsx 파일만 리스트(가능한 경우) ==="
fd -e tsx -a '.test.tsx$' packages/web/src --exec printf '%p\n' {} \; 2>/dev/null || true
echo -e "\n=== include 패턴 대비 테스트 확장자 요약(간단) ==="
rg -n --glob 'packages/web/src/**/*.test.tsx' 'describe\(|test\(' packages/web/src || trueRepository: Seongho-Bae/argos
Length of output: 192
🏁 Script executed:
#!/bin/bash
set -euo pipefail
find packages/web/src -type f -name "*.test.tsx" | wc -l
find packages/web/src -type f -name "*.test.tsx" | head -n 20Repository: Seongho-Bae/argos
Length of output: 63
vitest v2.1.9 → v4.1.0 업그레이드 호환성: 현재 설정/테스트 범위 기준으로 pnpm test 실행 확인 필요
packages/web/package.jsondevDependencies의vitest가^4.1.0로 올랐습니다.packages/web/vitest.config.ts는environment: 'node',include: ['src/**/*.test.ts']로 고정되어 있고*.test.tsx는 없습니다. (브라우저/DOM 환경(@vitest/browser, jsdom/happy-dom) 관련 리스크는 상대적으로 낮음)- 다만
packages/web/src/app/**및 다양한 모듈의*.test.ts가 vitest로 실행되므로, vitest v4에서 테스트 API/런타임 동작이 깨지지 않는지 확인이 필요합니다.
pnpm -C packages/web test로 웹 패키지 vitest 테스트 스위트 전체 실행 및 통과 확인- 실패 시
vitestv4에서 바뀐 동작(테스트 환경/타이밍/모킹 등) 기준으로vitest.config.ts및 테스트 코드를 필요한 만큼 보정 - CI에서도 동일하게 통과 여부 확인
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@packages/web/package.json` at line 54, 업데이트된 vitest (^4.1.0)로 인한 호환성 검증이
필요합니다: packages/web에서 터미널로 pnpm -C packages/web test를 실행하여 vitest v4으로 모든 테스트(패턴
설정은 packages/web/vitest.config.ts의 environment/include)를 통과하는지 확인하고, 실패하면
vitest.config.ts(환경/테스트 패턴/타이밍 관련 옵션)와 영향받는 *.test.ts 테스트 코드(모킹/타이밍/API 사용)를
vitest v4 동작에 맞게 수정한 뒤 다시 실행하고 동일한 변경이 CI 설정에도 반영되어 파이프라인에서 통과하는지 확인하세요.
|
이 fork dependabot PR은 현재 main 대비 stale diff가 크고 build가 실패 중입니다. 새로 발견된 vitest 취약점은 별도 upstream PR vibemafiaclub/argos#30에서 vitest 4.1.8로 업데이트해 처리 중이며, 해당 PR은 build/dependency-review/scan이 모두 통과했습니다. 따라서 이 PR은 중복/오래된 PR로 닫겠습니다. |
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/npm_and_yarn-2a49c246e5
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 2 updates in the / directory: turbo and vitest.
Bumps the npm_and_yarn group with 1 update in the /packages/cli directory: vitest.
Bumps the npm_and_yarn group with 1 update in the /packages/web directory: vitest.
Updates
turbofrom 2.9.6 to 2.9.14Release notes
Sourced from turbo's releases.
... (truncated)
Commits
fc62fe0publish 2.9.14 to registryfb8c9aechore: Release 2.9.13 (#12803)e8e629dfix: Avoid project-local Yarn during detection (#12801)91c90cbfix: Harden VS Code extension command execution (#12800)84f4508fix: Validate auth callback state (#12802)1779ad7Removed unneeded import form hash creation script in docs (#12799)71f8c90test: Validate lockfiles without dependency downloads (#12789)5fcb960ci: Scope GitHub Actions caches by branch (#12788)4cf9fabci: Usepull_requestfor PR title linting (#12787)859c629fix: Restore docs mobile menu (#12782)Updates
vitestfrom 2.1.9 to 4.1.0Release notes
Sourced from vitest's releases.
... (truncated)
Commits
4150b91chore: release v4.1.01de0aa2fix: correctly identify concurrent test during static analysis (#9846)c3cac1cfix: use isAgent check, not just TTY, for watch mode (#9841)eab68bachore(deps): update all non-major dependencies (#9824)031f02afix: allow catch/finally for async assertion (#9827)3e9e096feat(reporters): addagentreporter to reduce ai agent token usage (#9779)0c2c013chore: release v4.1.0-beta.68181e06fix:hideSkippedTestsshould not hidetest.todo(fix #9562) (#9781)a8216b0fix: manual and redirect mock shouldn'tloadortransformoriginal module...689a22afix(browser): types ofgetCDPSessionandcdp()(#9716)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for vitest since your current version.
Updates
vitestfrom 2.1.9 to 4.1.0Release notes
Sourced from vitest's releases.
... (truncated)
Commits
4150b91chore: release v4.1.01de0aa2fix: correctly identify concurrent test during static analysis (#9846)c3cac1cfix: use isAgent check, not just TTY, for watch mode (#9841)eab68bachore(deps): update all non-major dependencies (#9824)031f02afix: allow catch/finally for async assertion (#9827)3e9e096feat(reporters): addagentreporter to reduce ai agent token usage (#9779)0c2c013chore: release v4.1.0-beta.68181e06fix:hideSkippedTestsshould not hidetest.todo(fix #9562) (#9781)a8216b0fix: manual and redirect mock shouldn'tloadortransformoriginal module...689a22afix(browser): types ofgetCDPSessionandcdp()(#9716)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for vitest since your current version.
Updates
vitestfrom 2.1.9 to 4.1.0Release notes
Sourced from vitest's releases.
... (truncated)
Commits
4150b91chore: release v4.1.01de0aa2fix: correctly identify concurrent test during static analysis (#9846)c3cac1cfix: use isAgent check, not just TTY, for watch mode (#9841)eab68bachore(deps): update all non-major dependencies (#9824)031f02afix: allow catch/finally for async assertion (#9827)3e9e096feat(reporters): addagentreporter to reduce ai agent token usage (#9779)0c2c013chore: release v4.1.0-beta.68181e06fix:hideSkippedTestsshould not hidetest.todo(fix #9562) (#9781)a8216b0fix: manual and redirect mock shouldn'tloadort...Description has been truncated