chore(deps-dev): bump @vitest/ui from 3.0.4 to 3.0.7 #6330

dependabot · 2025-02-24T23:38:38Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps @vitest/ui from 3.0.4 to 3.0.7.

Release notes

Sourced from @vitest/ui's releases.

v3.0.7

   🐞 Bug Fixes

browser: Support webdriverio 9 - by @sheremet-va in vitest-dev/vitest#7553 (b1949)

deps: Update all non-major dependencies - in vitest-dev/vitest#7543 (365ff)

expect: Correct generic MatchersObject this type in expect.extend - by @Workingstiff-s in vitest-dev/vitest#7526 (d5765)

mocker: Include more modules to prefix-only module list - by @btea in vitest-dev/vitest#7524 (a12ec)

spy: Clear/reset/restore mocks in stack order - by @hi-ogawa in vitest-dev/vitest#7499 (f7100)

   🏎 Performance

browser: Do wdio context switching only once per file - by @sheremet-va in vitest-dev/vitest#7549 (aaa58)

    View changes on GitHub

v3.0.6

   🐞 Bug Fixes

Fix getMockedSystemTime for useFakeTimer - by @hi-ogawa in vitest-dev/vitest#7405 (03912)

Compat for jest-image-snapshot - by @hi-ogawa in vitest-dev/vitest#7390 (9542b)

Ensure project names are readable in dark terminals - by @rgrove in vitest-dev/vitest#7371 (bb94c)

Exclude queueMicrotask from default fake timers to not break node fetch - by @hi-ogawa in vitest-dev/vitest#7505 (167a9)

browser:

Fix mocking modules out of root - by @hi-ogawa in vitest-dev/vitest#7415 (d3acb)

Fix toHaveClass typing - by @hi-ogawa in vitest-dev/vitest#7383 (7ef23)

Relax locator selectors methods - by @sheremet-va in vitest-dev/vitest#7422 (1b8c5)

Resolve thread count from maxWorkers - by @AriPerkkio in vitest-dev/vitest#7483 (adbb2)

Cleanup timeout on resolve and give more information in the error - by @sheremet-va in vitest-dev/vitest#7487 (5a45a)

coverage:

vite-node to pass correct execution wrapper offset - by @AriPerkkio in vitest-dev/vitest#7417 (1f2e5)

Preserve moduleExecutionInfo in non-isolated runs - by @AriPerkkio in vitest-dev/vitest#7486 (f31a0)

deps:

Update all non-major dependencies - by @hi-ogawa in vitest-dev/vitest#7363 (e348b)

Update all non-major dependencies - by @hi-ogawa in vitest-dev/vitest#7507 (6cc40)

init:

Invalid browser config - by @AriPerkkio in vitest-dev/vitest#7475 (8fe64)

reporters:

Render tasks in tree when in TTY - by @AriPerkkio in vitest-dev/vitest#7503 (027ce)

vite-node:

Remove fake first line mapping on Vite 6 - by @hi-ogawa in vitest-dev/vitest#7124 (b9973)

watch:

Properly remove cache after removing existing test files - by @soc221b in vitest-dev/vitest#7399 (01a59)

workspace:

Forward inspect related cli options - by @AriPerkkio in vitest-dev/vitest#7373 (ed15b)

    View changes on GitHub

v3.0.5

This release includes security patches for:

Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

... (truncated)

Commits

358cccf chore: release v3.0.7
365ffe6 fix(deps): update all non-major dependencies (#7543)
9584be3 chore: release v3.0.6
6cc408d fix(deps): update all non-major dependencies (#7507)
accd2ed refactor: enable isolatedDeclarations (#7473)
e348bd4 fix(deps): update all non-major dependencies (#7363)
bb94c19 fix: ensure project names are readable in dark terminals (#7371)
1154662 chore: release v3.0.5
92da490 feat(ui): insert message "no tests found" in ui (#7366)
191ef9e fix: validate websocket request (#7317)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

PR-Codex overview

This PR updates several package dependencies, particularly focusing on version upgrades for @vitest/ui, @babel/core, and other related libraries. It also modifies version specifications in the pnpm-lock.yaml file for consistency and compatibility.

Detailed summary

Updated @vitest/ui from 3.0.4 to 3.0.7.
Updated @babel/core from 7.26.7 to 7.26.9.
Updated several packages in pnpm-lock.yaml to their latest versions.
Adjusted dependencies for @expo related packages.
Updated compression from 1.7.5 to 1.8.0.
Updated form-data from 3.0.2 to 3.0.3.
Updated libphonenumber-js from 1.11.19 to 1.11.20.
Updated styled-components from 6.1.14 to 6.1.15.
Updated stylis from 4.3.5 to 4.3.6.

The following files were skipped due to too many changes: pnpm-lock.yaml

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

Bumps [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) from 3.0.4 to 3.0.7. - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v3.0.7/packages/ui) --- updated-dependencies: - dependency-name: "@vitest/ui" dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2025-02-24T23:38:42Z

⚠️ No Changeset found

Latest commit: 00fe0bb

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

vercel · 2025-02-24T23:38:45Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
docs-v2	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Feb 25, 2025 0:03am
login	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Feb 25, 2025 0:03am
thirdweb_playground	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Feb 25, 2025 0:03am
thirdweb-www	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Feb 25, 2025 0:03am
wallet-ui	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Feb 25, 2025 0:03am

graphite-app · 2025-02-24T23:38:45Z

How to use the Graphite Merge Queue

Add either label to this PR to merge it via the merge queue:

merge-queue - adds this PR to the back of the merge queue
hotfix - for urgent hot fixes, skip the queue and merge this PR next

You must have a Graphite account in order to use the merge queue. Sign up using this link.

_{An organization admin has enabled the Graphite Merge Queue in this repository.} _{Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.}

socket-security · 2025-02-24T23:39:19Z

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@vitest/ui@3.0.7 🔁 npm/@vitest/ui@3.0.4	Transitive: environment, filesystem	`+14`	1.12 MB

View full report↗︎

dependabot · 2025-02-26T00:50:13Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot bot requested review from a team as code owners February 24, 2025 23:38

dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 24, 2025

dependabot bot mentioned this pull request Feb 24, 2025

build(deps-dev): bump @vitest/ui from 3.0.4 to 3.0.6 #6307

Closed

github-actions bot added packages SDK Involves changes to the thirdweb SDK labels Feb 24, 2025

vercel bot deployed to Preview – thirdweb-www February 24, 2025 23:46 View deployment

vercel bot deployed to Preview – login February 24, 2025 23:55 View deployment

vercel bot deployed to Preview – wallet-ui February 24, 2025 23:56 View deployment

vercel bot deployed to Preview – thirdweb_playground February 24, 2025 23:59 View deployment

vercel bot deployed to Preview – docs-v2 February 25, 2025 00:03 View deployment

jnsdls closed this Feb 26, 2025

dependabot bot deleted the dependabot/npm_and_yarn/vitest/ui-3.0.7 branch February 26, 2025 00:50

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump @vitest/ui from 3.0.4 to 3.0.7 #6330

chore(deps-dev): bump @vitest/ui from 3.0.4 to 3.0.7 #6330

Uh oh!

dependabot bot commented on behalf of github Feb 24, 2025 •

edited

Loading

Uh oh!

changeset-bot bot commented Feb 24, 2025

Uh oh!

vercel bot commented Feb 24, 2025 •

edited

Loading

Uh oh!

graphite-app bot commented Feb 24, 2025

Uh oh!

socket-security bot commented Feb 24, 2025

Uh oh!

dependabot bot commented on behalf of github Feb 26, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps-dev): bump @vitest/ui from 3.0.4 to 3.0.7 #6330

chore(deps-dev): bump @vitest/ui from 3.0.4 to 3.0.7 #6330

Uh oh!

Conversation

dependabot bot commented on behalf of github Feb 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.0.7

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

v3.0.6

🐞 Bug Fixes

View changes on GitHub

v3.0.5

PR-Codex overview

Detailed summary

Uh oh!

changeset-bot bot commented Feb 24, 2025

⚠️ No Changeset found

Uh oh!

vercel bot commented Feb 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

graphite-app bot commented Feb 24, 2025

How to use the Graphite Merge Queue

Uh oh!

socket-security bot commented Feb 24, 2025

Uh oh!

dependabot bot commented on behalf of github Feb 26, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Feb 24, 2025 •

edited

Loading

vercel bot commented Feb 24, 2025 •

edited

Loading