Copilot commented on code in PR #8454:
URL: https://github.com/apache/texera/pull/8454#discussion_r4031217452
##########
frontend/package.json:
##########
@@ -131,7 +131,7 @@
"sass": "1.71.1",
"ts-proto": "2.2.0",
"typescript": "5.9.3",
- "vitest": "4.1.10"
+ "vitest": "4.1.11"
Review Comment:
This security update leaves `@vitest/browser` and
`@vitest/browser-playwright` pinned to 4.1.10, so the lockfile still installs
the vulnerable `@vitest/[email protected]` used by the active browser-mode
configuration. The mixed versions also violate Vitest's exact 4.1.11 peer
requirements. Update all direct `@vitest/*` packages (including coverage) to
4.1.11 and regenerate the lockfile so no 4.1.10 mocker remains.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
