fix(security): remove CVE-2026-84373 from Vitest lock - #569

Merged

seonghobae merged 9 commits into

mainfrom

fix/vitest-cve-2026-84373

Sep 9, 2026

Commits on Sep 9, 2026

fix(security): require non-vulnerable Vitest line
seonghobae
committed
783c211
test(security): reject vulnerable Vitest lock
seonghobae
committed
5864d0b
merge main into CVE-2026-84373 remediation lane
seonghobae
committed
a181d03
fix(security): bind Vitest lock regeneration policy
seonghobae
committed
d966e4a
fix(security): promote canonical Vitest 4.1.11 regeneration artifact
seonghobae
committed
f739684
fix(security): preserve Vitest WASI validator runtime
seonghobae
committed
8887f65
fix(ci): restore WASI rolldown binding for Vitest 4.1.11 image deps
seonghobae
committed
eea46a2
Merge remote-tracking branch 'origin/fix/vitest-cve-2026-84373' into fix/vitest-cve-2026-84373
seonghobae
committed
196dae0
fix(security): complete WASI binding pin with canonical lock and policy
seonghobae
committed
626be6a