Skip to content

Bump @vitest/coverage-v8 from 3.2.4 to 4.1.2#381

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/vitest/coverage-v8-4.1.2
Open

Bump @vitest/coverage-v8 from 3.2.4 to 4.1.2#381
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/vitest/coverage-v8-4.1.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 30, 2026

Bumps @vitest/coverage-v8 from 3.2.4 to 4.1.2.

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

   🐞 Bug Fixes

    View changes on GitHub

v4.1.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v4.1.0

Vitest 4.1 is out!

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​vitest/coverage-v8 since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) from 3.2.4 to 4.1.2.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.2/packages/coverage-v8)

---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added major skip-release Do not publish new release labels Mar 30, 2026
@dependabot dependabot bot requested review from a team, CarlosGamero, drdaemos and kibertoad as code owners March 30, 2026 12:29
@dependabot dependabot bot added major skip-release Do not publish new release labels Mar 30, 2026
@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Mar 30, 2026

📝 Walkthrough

Summary by CodeRabbit

  • Chores
    • Updated code coverage tooling to the latest version for improved testing infrastructure and compatibility.

Walkthrough

The pull request updates the @vitest/coverage-v8 development dependency in package.json from version ^3.2.4 to ^4.1.2. This changes the code coverage tool used by the existing test coverage scripts. No other dependencies, scripts, or package configurations were modified.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The description includes comprehensive release notes and commit history from the upstream package, but lacks the required template sections (Changes summary, Checklist with labels and confirmations). Add missing template sections: summarize the changes in the 'Changes' section and complete the 'Checklist' with appropriate labels (major/minor/patch) and confirmations about documentation and tests.
✅ Passed checks (2 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and concisely describes the main change: a version bump of @vitest/coverage-v8 from 3.2.4 to 4.1.2, which is the primary and only modification in the changeset.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/npm_and_yarn/vitest/coverage-v8-4.1.2

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@package.json`:
- Line 74: package.json currently has a major version mismatch:
`@vitest/coverage-v8` is ^4.1.2 while vitest is still 3.2.4; update vitest to
^4.1.2 to match the coverage plugin and then update vitest.config.mts to remove
the deprecated all: true setting and replace it with explicit
coverage.include/glob patterns per Vitest v4 breaking changes (verify any other
v4 config keys). Ensure package.json dependency "vitest" version and
"@vitest/coverage-v8" align and that vitest.config.mts no longer uses all: true
but defines coverage.include appropriately.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository: lokalise/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 734fceff-2c6c-46c8-9c13-94a5e1cc38bd

📥 Commits

Reviewing files that changed from the base of the PR and between fd67520 and 4cea6d6.

📒 Files selected for processing (1)
  • package.json

"@types/newrelic": "^9.14.8",
"@types/node": "^24.7.0",
"@vitest/coverage-v8": "^3.2.4",
"@vitest/coverage-v8": "^4.1.2",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Description: Check vitest v4 compatibility requirements and configuration

echo "=== Checking vitest config for deprecated v3 options ==="
rg -n -A2 -B2 'reporter:' vitest.config.mts

echo -e "\n=== Checking if vitest package needs to be updated ==="
cat package.json | jq -r '.devDependencies.vitest, .devDependencies."@vitest/coverage-v8"'

Repository: lokalise/fastify-extras

Length of output: 402


🌐 Web query:

vitest v4 coverage-v8 compatibility requirements and breaking changes

💡 Result:

Vitest v4 compatibility requirements for coverage-v8: Requires Vite >=6.0.0 and Node.js >=20.0.0. Install @vitest/coverage-v8 and set coverage.provider: 'v8' (default provider). Breaking changes in v4 for coverage-v8: - Switched to new AST-based remapping (from v8-to-istanbul), providing more accurate coverage matching Istanbul; expect changes in reports, fewer false positives. - coverage.ignoreEmptyLines removed (empty lines without runtime code excluded by default). - coverage.experimentalAstAwareRemapping removed (now always on). - coverage.all and coverage.extensions removed; default to including only files loaded during tests. Explicitly set coverage.include (e.g., ['packages//src/.{js,ts}']) for uncovered files. - Updated ignore hints to Istanbul-compatible: use /* v8 ignore next /, / v8 ignore start / ... / v8 ignore stop /, often with -- @preserve (/ v8 ignore next -- @preserve /). See docs for full syntax. - coverage.ignoreClassMethods now supported. - V8-specific: Requires V8 runtime (Node.js, Chrome); no pre-instrumentation, but minor V8 limitations apply. Config example: export default defineConfig({ test: { coverage: { provider: 'v8', include: ['src//.{js,ts}'], exclude: ['src//.test.ts'], }, }, }); Run with npx vitest --coverage. V8 remains default and recommended for speed + accuracy.

Citations:


Critical: Version mismatch between @vitest/coverage-v8 (v4.1.2) and vitest core (v3.2.4).

The @vitest/coverage-v8 package is updated to v4.1.2, but vitest itself (line 86) remains at v3.2.4. This major version mismatch will break coverage functionality. Additionally, the vitest.config.mts uses all: true (line 23), which was removed in v4 as part of breaking changes that require explicit coverage.include configuration instead.

Update vitest to ^4.1.2 to match the coverage plugin version, and audit the coverage configuration for v4 breaking changes including removal of coverage.all and requirement for explicit coverage.include.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@package.json` at line 74, package.json currently has a major version
mismatch: `@vitest/coverage-v8` is ^4.1.2 while vitest is still 3.2.4; update
vitest to ^4.1.2 to match the coverage plugin and then update vitest.config.mts
to remove the deprecated all: true setting and replace it with explicit
coverage.include/glob patterns per Vitest v4 breaking changes (verify any other
v4 config keys). Ensure package.json dependency "vitest" version and
"@vitest/coverage-v8" align and that vitest.config.mts no longer uses all: true
but defines coverage.include appropriately.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

major skip-release Do not publish new release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants