deps: Bump vitest from 4.1.11 to 5.0.2 by dependabot[bot] · Pull Request #2090 · github/squad

dependabot · 2026-09-28T08:12:15Z

Bumps vitest from 4.1.11 to 5.0.2.

Release notes

v5.0.2

   🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in vitest-dev/vitest#11343 (0b792)

detect-async-leaks:

Ignore process.stdio handles - by @AriPerkkio in vitest-dev/vitest#11333 (0fd6b)

expect:

Fix toMatchObject with asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in vitest-dev/vitest#11100 (42523)

jsdom:

Fix Request with Blob body on jsdom 28+ - by @harshit-d3v in vitest-dev/vitest#11295 (d1c3e)

reporter:

agent to respect --silent - by @Raj4478 and @AriPerkkio in vitest-dev/vitest#11271 (5b95e)

reporters:

Handle concurrent createReport calls - by @7rulnik in vitest-dev/vitest#11278 (e8e55)

hanging-process to use ESM entrypoint - by @AriPerkkio in vitest-dev/vitest#11316 (4e91e)

spy:

Fix stack overflow when spying Set.prototype.add - by @fengmk2 in vitest-dev/vitest#11299 (a0a93)

ui:

Persist authentication cookie beyond current browser session - by @hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11066 (f8819)

    View changes on GitHub

v5.0.1

   🚀 Features

ui:

Move trace attempts selector to viewer header - by @hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11189 (5dc4b)

Add focused trace view layout mode - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in vitest-dev/vitest#11190 (376dc)

   🐞 Bug Fixes

Exit 1 when vitest list fails collection - by @hamed-bavar in vitest-dev/vitest#11145 and vitest-dev/vitest#11146 (6108b)

Keep parse error details in static collection - by @hamed-bavar in vitest-dev/vitest#11150 and vitest-dev/vitest#11151 (7c818)

Avoid recursive prototype in automocking - by @sheremet-va in vitest-dev/vitest#11195 (99fc5)

Prevent false Vitest import resolution - by @sheremet-va in vitest-dev/vitest#11196 (b426c)

Keep metadata file when clearing the cache - by @sheremet-va in vitest-dev/vitest#11199 (73614)

Correct typos in error message and comments - by @shinji00222 and Shinji in vitest-dev/vitest#11187 (115c3)

Resolve ResolvedConfig exactOptionalPropertyTypes errors - by @LukeAbby in vitest-dev/vitest#11175 (498fb)

Share the server on self-referencing extends - by @sheremet-va in vitest-dev/vitest#11034 (23dda)

Warn when deprecated deps.optimizer.web is used - by @im10furry in vitest-dev/vitest#11214 (2ce29)

browser:

Avoid double quotes in config.define - by @sheremet-va in vitest-dev/vitest#11198 (972e2)

doctor:

Measure vm pools for custom environments - by @sheremet-va in vitest-dev/vitest#11212 (91ab1)

expect:

Correct return value in toMatchAriaSnapshot - by @sheremet-va in vitest-dev/vitest#11208 (c119b)

fakeTimers:

Force queueMicrotask and nextTick in toNotFake - by @kingmakeruix, kingmakeruix, Hiroshi Ogawa, Codex and @hi-ogawa in vitest-dev/vitest#11261 (a47d7)

snapshot:

Report obsolete keys next to skipped tests - by @hamed-bavar, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11157 and vitest-dev/vitest#11158 (17e2b)

... (truncated)

Commits

428e2e5 chore: release v5.0.2 (#11357)
0b79231 fix: bind process in case global is overwritten (#11343)
597df56 docs: correct stale config defaults (#11354)
ea1c44f docs: sequence.setupFiles default is 'list' (#11351)
0fd6b97 fix(detect-async-leaks): ignore process.stdio handles (#11333)
4e91e56 fix(reporters): hanging-process to use ESM entrypoint (#11316)
1a57929 docs(browser): fix locators.exact default (#11338)
5b95efb fix(reporter): agent to respect --silent (#11271)
f58a209 docs: correct benchmark.exclude and watch defaults (#11268)
d1c3ecc fix(jsdom): fix Request with Blob body on jsdom 28+ (#11295)
Additional commits viewable in compare view

Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.11 to 5.0.2. - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest) --- updated-dependencies: - dependency-name: vitest dependency-version: 5.0.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.11 to 5.0.2. - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest) --- updated-dependencies: - dependency-name: vitest dependency-version: 5.0.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-10-02T19:55:22Z

🟡 Impact Analysis — PR #2090

Risk tier: 🟡 MEDIUM

📊 Summary

Metric	Count
Files changed	4
Files added	0
Files modified	4
Files deleted	0
Modules touched	3
Critical files	1

🎯 Risk Factors

4 files changed (≤5 → LOW)
3 modules touched (2-4 → MEDIUM)
Critical files touched: package.json

📦 Modules Affected

ci-workflows (1 file)

.github/workflows/squad-ci.yml

root (2 files)

package-lock.json
package.json

tests (1 file)

test/gh-aw-quality.test.ts

⚠️ Critical Files

package.json

This report is generated automatically for every PR. See #733 for details.

github-actions · 2026-10-02T19:55:23Z

🛫 PR Readiness Check

ℹ️ This comment updates on each push. Last checked: commit cd84e80

PR Scope: 🔧 Infrastructure

⚠️ 2 item(s) to address before review

Status	Check	Details
❌	Single commit	7 commits — consider squashing before review
✅	Not in draft	Ready for review
✅	Branch up to date	Up to date with dev
❌	Copilot review	No Copilot review yet — it may still be processing
✅	Changeset present	No source files changed — changeset not required
✅	Scope clean	No .squad/ or docs/proposals/ files
✅	No merge conflicts	No merge conflicts
✅	Copilot threads resolved	No Copilot review threads
✅	CI passing	All checks passing

Files Changed (4 files, +277 −379)

File	+/−
`.github/workflows/squad-ci.yml`	+1 −3
`package-lock.json`	+254 −374
`package.json`	+2 −2
`test/gh-aw-quality.test.ts`	+20 −0

Total: +277 −379

This check runs automatically on every push. Fix any ❌ items and push again.
See CONTRIBUTING.md and PR Requirements for details.

github-actions · 2026-10-02T19:55:27Z

🔒 Security Review

Authoritative evidence: base-controlled pull_request_target reporter.

🔒 Security review: 1 info.

Severity	Category	Finding	Location
ℹ️ info	new-dependency	2 new/changed dependency version(s) in package.json. Verify these packages are trusted and necessary.	`package.json:53`

Automated security review — informational only.

Fixes the dependency-install failure blocking Dependabot PR #2151 before strict compilation. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-10-02T19:57:13Z

🏗️ Architectural Review

Authoritative evidence: base-controlled pull_request_target reporter.

⚠️ Architectural review: 1 info.

Severity	Category	Finding	Files
ℹ️ info	template-sync	Template files changed in .github/workflows/ but not in other template locations. If these templates should stay in sync, consider updating the others too.	`Changed: .github/workflows/`, `Unchanged: templates/, .squad-templates/, packages/squad-cli/templates/`

Automated architectural review — informational only.

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 28, 2026

dependabot Bot requested review from bradygaster and tamirdresher as code owners September 28, 2026 08:12

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 28, 2026

dependabot Bot mentioned this pull request Sep 28, 2026

deps: Bump vitest from 4.1.11 to 5.0.1 #2020

Closed

dependabot Bot changed the title ~~deps: Bump vitest from 4.1.11 to 5.0.1~~ deps: Bump vitest from 4.1.11 to 5.0.2 Oct 1, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/vitest-5.0.1 branch 5 times, most recently from 8cda63d to 2db73cb Compare October 1, 2026 20:36

dependabot Bot force-pushed the dependabot/npm_and_yarn/vitest-5.0.1 branch from 2db73cb to 6d9a286 Compare October 2, 2026 18:14

brady gaster and others added 2 commits October 2, 2026 12:08

fix: align vitest coverage peer dependency (Part of #2090)

2c0d8a6

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

chore: use public registry URL for yaml lock (Part of #2090)

188a7a5

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

dependabot Bot force-pushed the dependabot/npm_and_yarn/vitest-5.0.1 branch from 6d9a286 to 8e9a3ae Compare October 2, 2026 19:47

dependabot Bot force-pushed the dependabot/npm_and_yarn/vitest-5.0.1 branch from 8e9a3ae to e1c3645 Compare October 2, 2026 19:50

Merge refreshed PR head and latest dev into Vitest fix (Part of #2090)

2807434

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

fix(ci): use public npm registry for gh-aw verifier

2653834

Fixes the dependency-install failure blocking Dependabot PR #2151 before strict compilation. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge branch 'dev' into dependabot/npm_and_yarn/vitest-5.0.1

cd84e80

bradygaster merged commit 59b0ee3 into dev Oct 2, 2026
18 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/vitest-5.0.1 branch October 2, 2026 20:07

Navigation Menu

Repository navigation

deps: Bump vitest from 4.1.11 to 5.0.2 - #2090

deps: Bump vitest from 4.1.11 to 5.0.2#2090
bradygaster merged 7 commits into
devfrom
dependabot/npm_and_yarn/vitest-5.0.1

dependabot Bot commented on behalf of github Sep 28, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 2, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 2, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 2, 2026

Uh oh!

github-actions Bot commented Oct 2, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.0.2

🐞 Bug Fixes

View changes on GitHub

v5.0.1

🚀 Features

🐞 Bug Fixes

Uh oh!

github-actions Bot commented Oct 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🟡 Impact Analysis — PR #2090

📊 Summary

🎯 Risk Factors

📦 Modules Affected

⚠️ Critical Files

Uh oh!

github-actions Bot commented Oct 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🛫 PR Readiness Check

⚠️ 2 item(s) to address before review

Files Changed (4 files, +277 −379)

Uh oh!

github-actions Bot commented Oct 2, 2026

🔒 Security Review

Uh oh!

github-actions Bot commented Oct 2, 2026

🏗️ Architectural Review

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 28, 2026 •

edited

Loading

github-actions Bot commented Oct 2, 2026 •

edited

Loading

github-actions Bot commented Oct 2, 2026 •

edited

Loading