Skip to content

chore(deps-dev): bump @vitest/coverage-v8 from 3.2.7 to 4.1.10 - #1621

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vitest/coverage-v8-4.1.9
Open

chore(deps-dev): bump @vitest/coverage-v8 from 3.2.7 to 4.1.10#1621
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vitest/coverage-v8-4.1.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 28, 2026

Copy link
Copy Markdown
Contributor

Bumps @vitest/coverage-v8 from 3.2.7 to 4.1.10.

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.10

   🐞 Bug Fixes

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

    View changes on GitHub

v4.1.6

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

... (truncated)

Commits

@dependabot dependabot Bot added automated dependencies Pull requests that update a dependency file labels Jun 28, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner June 28, 2026 09:39
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file automated labels Jun 28, 2026
@netlify

netlify Bot commented Jun 28, 2026

Copy link
Copy Markdown

Deploy Preview for endearing-brigadeiros-63f9d0 canceled.

Name Link
🔨 Latest commit e7a9e46
🔍 Latest deploy log https://app.netlify.com/projects/endearing-brigadeiros-63f9d0/deploys/6a603c13e890200008bc6616

@github-actions

github-actions Bot commented Jun 28, 2026

Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ✅ 0 package(s) with unknown licenses.
  • ⚠️ 1 packages with OpenSSF Scorecard issues.
See the Details below.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/@vitest/coverage-v8 4.1.10 UnknownUnknown
npm/@vitest/pretty-format 4.1.10 UnknownUnknown
npm/@vitest/utils 4.1.10 UnknownUnknown
npm/ast-v8-to-istanbul 1.0.5 UnknownUnknown
npm/js-tokens 10.0.0 ⚠️ 2.9
Details
CheckScoreReason
Code-Review⚠️ 0Found 2/23 approved changesets -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Maintained⚠️ 01 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/magicast 0.5.3 UnknownUnknown
npm/obug 2.1.4 UnknownUnknown
npm/std-env 4.2.0 UnknownUnknown
npm/tinyrainbow 3.1.0 UnknownUnknown

Scanned Files

  • package-lock.json

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vitest/coverage-v8-4.1.9 branch from 29d0881 to e928b29 Compare July 13, 2026 06:10
Bumps [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) from 3.2.7 to 4.1.10.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8)

---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.9
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps-dev): bump @vitest/coverage-v8 from 3.2.4 to 4.1.9 chore(deps-dev): bump @vitest/coverage-v8 from 3.2.7 to 4.1.10 Jul 22, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vitest/coverage-v8-4.1.9 branch from e928b29 to e7a9e46 Compare July 22, 2026 03:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants