Deps: Bump the patch-updates group across 1 directory with 4 updates by dependabot[bot] · Pull Request #5234 · greenbone/gsa

dependabot · 2026-04-15T03:23:27Z

Bumps the patch-updates group with 3 updates in the / directory: @vitest/coverage-v8, @vitest/eslint-plugin and prettier.

Updates @vitest/coverage-v8 from 4.1.2 to 4.1.4

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.1.4

   🚀 Experimental Features

coverage:

Default to text reporter skipFull if agent detected - by @hi-ogawa in vitest-dev/vitest#10018 (53757)

experimental:

Expose assertion as a public field - by @sheremet-va in vitest-dev/vitest#10095 (a120e)

Support aria snapshot - by @hi-ogawa, Claude Opus 4.6 (1M context), @AriPerkkio, Codex and @sheremet-va in vitest-dev/vitest#9668 (d4fbb)

reporter:

Add filterMeta option to json reporter - by @nami8824 and @sheremet-va in vitest-dev/vitest#10078 (b77de)

   🐞 Bug Fixes

Use "black" foreground for labeled terminal message to ensure contrast - by @hi-ogawa in vitest-dev/vitest#10076 (203f0)

Make expect(..., message) consistent as error message prefix - by @hi-ogawa and Codex in vitest-dev/vitest#10068 (a1b5f)

Do not hoist imports whose names match class properties . - by @SunsetFi in vitest-dev/vitest#10093 and vitest-dev/vitest#10094 (0fc4b)

browser: Spread user server options into browser Vite server in project - by @GoldStrikeArch in vitest-dev/vitest#10049 (65c9d)

    View changes on GitHub

v4.1.3

   🚀 Experimental Features

Add experimental.preParse flag - by @sheremet-va in vitest-dev/vitest#10070 (78273)

Support browser.locators.exact option - by @sheremet-va in vitest-dev/vitest#10013 (48799)

Add TestAttachment.bodyEncoding - by @hi-ogawa in vitest-dev/vitest#9969 (89ca0)

Support custom snapshot matcher - by @hi-ogawa, Claude Sonnet 4.6 and Codex in vitest-dev/vitest#9973 (59b0e)

   🐞 Bug Fixes

Advance fake timers with expect.poll interval - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10022 (3f5bf)

Add @vitest/coverage-v8 and @vitest/coverage-istanbul as optional dependency - by @alan-agius4 in vitest-dev/vitest#10025 (146d4)

Fix defineHelper for webkit async stack trace + update playwright 1.59.0 - by @hi-ogawa in vitest-dev/vitest#10036 (5a5fa)

Fix suite hook throwing errors for unused auto test-scoped fixture - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10035 (39865)

expect:

Remove JestExtendError.context from verbose error reporting - by @hi-ogawa in vitest-dev/vitest#9983 (66751)

Don't leak "runner" types - by @sheremet-va in vitest-dev/vitest#10004 (ec204)

snapshot:

Fix flagging obsolete snapshots for snapshot properties mismatch - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#9986 (6b869)

Export custom snapshot matcher helper from vitest - by @hi-ogawa and Codex in vitest-dev/vitest#10042 (691d3)

ui:

Don't leak vite types - by @sheremet-va in vitest-dev/vitest#10005 (fdff1)

vm:

Fix external module resolve error with deps optimizer query - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10024 (9dbf4)

    View changes on GitHub

Commits

ac04bac chore: release v4.1.4
2dc0d62 chore: release v4.1.3
See full diff in compare view

Updates @vitest/eslint-plugin from 1.6.14 to 1.6.15

Release notes

Sourced from @vitest/eslint-plugin's releases.

v1.6.15

What's Changed

feat: allow same-file const variable timeouts by @hamirmahal in vitest-dev/eslint-plugin-vitest#888

Full Changelog: vitest-dev/eslint-plugin-vitest@v1.6.14...v1.6.15

Commits

123a9c4 chore: release v1.6.15
84f312a feat: allow same-file const variable timeouts (#888)
See full diff in compare view

Updates prettier from 3.8.1 to 3.8.3

Release notes

Sourced from prettier's releases.

3.8.3

SCSS: Prevent trailing comma in if() function (prettier/prettier#18471 by @kovsu)

🔗 Changelog

3.8.2

Support Angular v21.2

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.3

diff

SCSS: Prevent trailing comma in `if()` function (#18471 by `@kovsu`)

// Input
$value: if(sass(false): 1; else: -1);
// Prettier 3.8.2
$value: if(
sass(false): 1; else: -1,
);
// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

3.8.2

diff

Angular: Support Angular v21.2 (#18722, #19034 by `@fisker`)

Exhaustive typechecking with @default never;

<!-- Input -->
@switch (foo) {
  @case (1) {}
  @default never;
}
<!-- Prettier 3.8.1 -->
SyntaxError: Incomplete block "default never". If you meant to write the @ character, you should use the "&#64;" HTML entity instead. (3:3)
<!-- Prettier 3.8.2 -->
@switch (foo) {
@case (1) {}
@default never;
}

arrow function and instanceof expressions.

</tr></table>

... (truncated)

Commits

d7108a7 Release 3.8.3
177f908 Prevent trailing comma in SCSS if() function (#18471)
1cd4066 Release @prettier/plugin-oxc@0.1.4
a8700e2 Update oxc-parser to v0.125.0
752157c Fix tests
053fd41 Bump Prettier dependency to 3.8.2
904c636 Clean changelog_unreleased
dc1f7fc Update dependents count
b31557c Release 3.8.2
96bbaed Support Angular v21.2 (#18722)
Additional commits viewable in compare view

Updates vitest from 4.1.2 to 4.1.4

Release notes

Sourced from vitest's releases.

v4.1.4

   🚀 Experimental Features

coverage:

Default to text reporter skipFull if agent detected - by @hi-ogawa in vitest-dev/vitest#10018 (53757)

experimental:

Expose assertion as a public field - by @sheremet-va in vitest-dev/vitest#10095 (a120e)

Support aria snapshot - by @hi-ogawa, Claude Opus 4.6 (1M context), @AriPerkkio, Codex and @sheremet-va in vitest-dev/vitest#9668 (d4fbb)

reporter:

Add filterMeta option to json reporter - by @nami8824 and @sheremet-va in vitest-dev/vitest#10078 (b77de)

   🐞 Bug Fixes

Use "black" foreground for labeled terminal message to ensure contrast - by @hi-ogawa in vitest-dev/vitest#10076 (203f0)

Make expect(..., message) consistent as error message prefix - by @hi-ogawa and Codex in vitest-dev/vitest#10068 (a1b5f)

Do not hoist imports whose names match class properties . - by @SunsetFi in vitest-dev/vitest#10093 and vitest-dev/vitest#10094 (0fc4b)

browser: Spread user server options into browser Vite server in project - by @GoldStrikeArch in vitest-dev/vitest#10049 (65c9d)

    View changes on GitHub

v4.1.3

   🚀 Experimental Features

Add experimental.preParse flag - by @sheremet-va in vitest-dev/vitest#10070 (78273)

Support browser.locators.exact option - by @sheremet-va in vitest-dev/vitest#10013 (48799)

Add TestAttachment.bodyEncoding - by @hi-ogawa in vitest-dev/vitest#9969 (89ca0)

Support custom snapshot matcher - by @hi-ogawa, Claude Sonnet 4.6 and Codex in vitest-dev/vitest#9973 (59b0e)

   🐞 Bug Fixes

Advance fake timers with expect.poll interval - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10022 (3f5bf)

Add @vitest/coverage-v8 and @vitest/coverage-istanbul as optional dependency - by @alan-agius4 in vitest-dev/vitest#10025 (146d4)

Fix defineHelper for webkit async stack trace + update playwright 1.59.0 - by @hi-ogawa in vitest-dev/vitest#10036 (5a5fa)

Fix suite hook throwing errors for unused auto test-scoped fixture - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10035 (39865)

expect:

Remove JestExtendError.context from verbose error reporting - by @hi-ogawa in vitest-dev/vitest#9983 (66751)

Don't leak "runner" types - by @sheremet-va in vitest-dev/vitest#10004 (ec204)

snapshot:

Fix flagging obsolete snapshots for snapshot properties mismatch - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#9986 (6b869)

Export custom snapshot matcher helper from vitest - by @hi-ogawa and Codex in vitest-dev/vitest#10042 (691d3)

ui:

Don't leak vite types - by @sheremet-va in vitest-dev/vitest#10005 (fdff1)

vm:

Fix external module resolve error with deps optimizer query - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10024 (9dbf4)

    View changes on GitHub

Commits

ac04bac chore: release v4.1.4
82c858d chore: Remove no-op function in plugin config logic (#8501)
d4fbb5c feat(experimental): support aria snapshot (#9668)
b77de96 feat(reporter): add filterMeta option to json reporter (#10078)
a120e3a feat(experimental): expose assertion as a public field (#10095)
5375780 feat(coverage): default to text reporter skipFull if agent detected (#10018)
a1b5f0f fix: make expect(..., message) consistent as error message prefix (#10068)
203f07a fix: use "black" foreground for labeled terminal message to ensure contrast (...
2dc0d62 chore: release v4.1.3
7827363 feat: add experimental.preParse flag (#10070)
Additional commits viewable in compare view

github-actions · 2026-04-15T03:23:43Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 8ebe18e.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@vitest/coverage-v8

4.1.4

Unknown

npm/@vitest/eslint-plugin

1.6.15

Unknown

npm/@vitest/expect

4.1.4

Unknown

npm/@vitest/mocker

4.1.4

Unknown

npm/@vitest/pretty-format

4.1.4

Unknown

npm/@vitest/runner

4.1.4

Unknown

npm/@vitest/snapshot

4.1.4

Unknown

npm/@vitest/spy

4.1.4

Unknown

npm/@vitest/utils

4.1.4

Unknown

npm/prettier

3.8.3

🟢 7.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
Code-Review	🟢 8	Found 4/5 approved changesets -- score normalized to 8
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 9	SAST tool detected but not run on all commits

npm/vitest

4.1.4

Unknown

Scanned Files

package-lock.json

codecov · 2026-04-15T03:35:08Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 77.87%. Comparing base (ea7e925) to head (8ebe18e).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #5234   +/-   ##
=======================================
  Coverage   77.87%   77.87%           
=======================================
  Files        1190     1190           
  Lines       31243    31243           
  Branches     9378     9378           
=======================================
  Hits        24330    24330           
  Misses       6184     6184           
  Partials      729      729

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Bumps the patch-updates group with 4 updates: [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8), [@vitest/eslint-plugin](https://github.com/vitest-dev/eslint-plugin-vitest), [prettier](https://github.com/prettier/prettier) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `@vitest/coverage-v8` from 4.1.2 to 4.1.4 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/coverage-v8) Updates `@vitest/eslint-plugin` from 1.6.14 to 1.6.15 - [Release notes](https://github.com/vitest-dev/eslint-plugin-vitest/releases) - [Commits](vitest-dev/eslint-plugin-vitest@v1.6.14...v1.6.15) Updates `prettier` from 3.8.1 to 3.8.3 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.8.1...3.8.3) Updates `vitest` from 4.1.2 to 4.1.4 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/vitest) --- updated-dependencies: - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@vitest/eslint-plugin" dependency-version: 1.6.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: prettier dependency-version: 3.8.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: vitest dependency-version: 4.1.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 15, 2026

dependabot Bot requested a review from a team as a code owner April 15, 2026 03:23

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 15, 2026

greenbonebot enabled auto-merge (rebase) April 15, 2026 03:23

dependabot Bot changed the title ~~Deps: bump the patch-updates group with 4 updates~~ Deps: Bump the patch-updates group across 1 directory with 4 updates Apr 15, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/main/patch-updates-e2106f54ca branch 3 times, most recently from 79b80b7 to 2a67d63 Compare April 15, 2026 07:42

dependabot Bot force-pushed the dependabot/npm_and_yarn/main/patch-updates-e2106f54ca branch from 2a67d63 to 8ebe18e Compare April 15, 2026 07:55

bjoernricks approved these changes Apr 15, 2026

View reviewed changes

greenbonebot merged commit 35cf302 into main Apr 15, 2026
23 of 25 checks passed

greenbonebot deleted the dependabot/npm_and_yarn/main/patch-updates-e2106f54ca branch April 15, 2026 08:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Deps: Bump the patch-updates group across 1 directory with 4 updates#5234

Deps: Bump the patch-updates group across 1 directory with 4 updates#5234
greenbonebot merged 1 commit intomainfrom
dependabot/npm_and_yarn/main/patch-updates-e2106f54ca

dependabot Bot commented on behalf of github Apr 15, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Apr 15, 2026 •

edited

Loading

Uh oh!

codecov Bot commented Apr 15, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Apr 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.1.4

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

v4.1.3

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

v1.6.15

What's Changed

3.8.3

3.8.2

3.8.3

SCSS: Prevent trailing comma in if() function (#18471 by @​kovsu)

3.8.2

Angular: Support Angular v21.2 (#18722, #19034 by @​fisker)

v4.1.4

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

v4.1.3

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

Uh oh!

github-actions Bot commented Apr 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

Snapshot Warnings

OpenSSF Scorecard

Scanned Files

Uh oh!

codecov Bot commented Apr 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot Bot commented on behalf of github Apr 15, 2026 •

edited

Loading

SCSS: Prevent trailing comma in `if()` function (#18471 by `@kovsu`)

Angular: Support Angular v21.2 (#18722, #19034 by `@fisker`)

github-actions Bot commented Apr 15, 2026 •

edited

Loading

codecov Bot commented Apr 15, 2026 •

edited

Loading