Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 7, 2025

Bumps vitest from 3.2.4 to 4.0.8.

Release notes

Sourced from vitest's releases.

v4.0.8

   🐞 Bug Fixes

    View changes on GitHub

v4.0.7

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v4.0.6

   🐞 Bug Fixes

... (truncated)

Commits
  • 46bfd09 chore: release v4.0.8
  • c79f47c fix(forks): do not fail with Windows Defender enabled (#8967)
  • 7ed99cd chore: remove unnecessery values() call for set (#8964)
  • 9a9323b chore(deps): update dependency @​antfu/eslint-config to v6 (#8832)
  • 46b3529 chore(deps): update dependency jsdom to v27 (#8700)
  • 65292c3 docs: update structure (#8625)
  • da8b93a fix(deps): update all non-major dependencies (#8636)
  • bcb132f fix: workaround noExternal merging bug on Vite 6 (#8950)
  • 1f5d9d2 chore: release v4.0.7
  • a1b7361 fix(jsdom): support URL.createObjectURL, FormData.set(prop, blob) (#8935)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vitest since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

  • Chores
    • Updated development dependencies

Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 3.2.4 to 4.0.8.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.8/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-version: 4.0.8
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 7, 2025
@dependabot dependabot bot requested a review from a team as a code owner November 7, 2025 17:07
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 7, 2025
@coderabbitai
Copy link

coderabbitai bot commented Nov 7, 2025

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)
Validation error: Unrecognized key(s) in object: 'tools'
⚙️ Configuration instructions
  • Please see the configuration documentation for more information.
  • You can also validate your configuration using the online YAML validator.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Walkthrough

The pull request updates the vitest devDependency in package.json from version ^3.2.4 to ^4.0.8. No other functional changes, API modifications, or engine updates are present.

Changes

Cohort / File(s) Change Summary
Dependency Update
package.json
Bumped vitest devDependency from ^3.2.4 to ^4.0.8

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately describes the main change: bumping vitest devDependency from 3.2.4 to 4.0.8 in package.json.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch dependabot/npm_and_yarn/vitest-4.0.8

📜 Recent review details

Configuration used: Repository: lokalise/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Pro

Disabled knowledge base sources:

  • Jira integration is disabled by default for public repositories

You can enable these sources in your CodeRabbit configuration.

📥 Commits

Reviewing files that changed from the base of the PR and between 84bdba8 and d3acf46.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • package.json (1 hunks)
🔇 Additional comments (1)
package.json (1)

44-44: Vitest v4.0.8 upgrade is safe — no action needed.

The test code uses only basic stable APIs (describe, it, expect) that are unaffected by the v3→v4 migration. No custom vitest configuration exists, and the project doesn't use any of the affected features (mocking/spying semantics, coverage AST logic, environment variables, or custom environments). The upgrade is compatible with this codebase.


Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant