Skip to content

chore: bump @vitest/mocker and vitest - #1064

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-fea79c7e0d
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-fea79c7e0d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Removes @vitest/mocker. It's no longer used after updating ancestor dependency vitest. These dependencies need to be updated together.

Removes @vitest/mocker

Updates vitest from 3.2.4 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vitest since your current version.


@dependabot
dependabot Bot requested a review from a team as a code owner October 19, 2026 23:29
@dependabot dependabot Bot added auto-merge Ready to automatically merge after being open for 48 hours dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 19, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-fea79c7e0d branch 4 times, most recently from a99ba0f to 3fb9184 Compare November 1, 2026 16:08
ovflowd added a commit that referenced this pull request Nov 1, 2026
@cloudflare/vitest-pool-workers is deprecated: it was renamed to
@cloudflare/vitest-plugin at 1.0.0 and its last release (0.23.0)
peers on vitest ^4.1.0, so the vitest 5 bump in #1042 and the security
update in #1064 both fail `npm ci` with ERESOLVE. The plugin peers on
vitest ^4.1.0 || ^5.0.0.

Migration, per the upstream changelog:

- vitest.config.ts uses `defineConfig` with the `cloudflareTest()`
  plugin instead of `defineWorkersConfig` + `poolOptions.workers`.
- `fetchMock` is gone from `cloudflare:test`, so the S3 and misc tests
  spy on `globalThis.fetch`, reject anything unmocked and assert the
  expected calls instead of `assertNoPendingInterceptors()`.
- `ProvidedEnv` is replaced by `Cloudflare.Env`, and `env` comes from
  `cloudflare:workers`.
- `vi.mock` calls move to module top level, which vitest 5 requires.

This also clears the open vitest and @vitest/mocker advisories. The
plugin pins wrangler 4.156.0 exactly, so the lockfile resolves root
wrangler to it as well (within the existing ^4.130.0 range).

Assisted-by: Claude Opus 5.5 <noreply@anthropic.com>
Removes [@vitest/mocker](https://github.com/vitest-dev/vitest/tree/HEAD/packages/mocker). It's no longer used after updating ancestor dependency [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). These dependencies need to be updated together.


Removes `@vitest/mocker`

Updates `vitest` from 3.2.4 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

---
updated-dependencies:
- dependency-name: "@vitest/mocker"
  dependency-version:
  dependency-type: indirect
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-fea79c7e0d branch from 3fb9184 to 6b5e259 Compare November 1, 2026 17:13
ovflowd added a commit that referenced this pull request Nov 1, 2026
@cloudflare/vitest-pool-workers is deprecated: it was renamed to
@cloudflare/vitest-plugin at 1.0.0 and its last release (0.23.0)
peers on vitest ^4.1.0, so the vitest 5 bump in #1042 and the security
update in #1064 both fail `npm ci` with ERESOLVE. The plugin peers on
vitest ^4.1.0 || ^5.0.0.

Migration, per the upstream changelog:

- vitest.config.ts uses `defineConfig` with the `cloudflareTest()`
  plugin instead of `defineWorkersConfig` + `poolOptions.workers`.
- `fetchMock` is gone from `cloudflare:test`, so the S3 and misc tests
  spy on `globalThis.fetch`, reject anything unmocked and assert the
  expected calls instead of `assertNoPendingInterceptors()`.
- `ProvidedEnv` is replaced by `Cloudflare.Env`, and `env` comes from
  `cloudflare:workers`.
- `vi.mock` calls move to module top level, which vitest 5 requires.

This also clears the open vitest and @vitest/mocker advisories. The
plugin pins wrangler 4.156.0 exactly, so the lockfile resolves root
wrangler to it as well (within the existing ^4.130.0 range).

Assisted-by: Claude Opus 5.5 <noreply@anthropic.com>
ovflowd added a commit that referenced this pull request Nov 1, 2026
chore: migrate to @cloudflare/vitest-plugin and vitest 5

@cloudflare/vitest-pool-workers is deprecated: it was renamed to
@cloudflare/vitest-plugin at 1.0.0 and its last release (0.23.0)
peers on vitest ^4.1.0, so the vitest 5 bump in #1042 and the security
update in #1064 both fail `npm ci` with ERESOLVE. The plugin peers on
vitest ^4.1.0 || ^5.0.0.

Migration, per the upstream changelog:

- vitest.config.ts uses `defineConfig` with the `cloudflareTest()`
  plugin instead of `defineWorkersConfig` + `poolOptions.workers`.
- `fetchMock` is gone from `cloudflare:test`, so the S3 and misc tests
  spy on `globalThis.fetch`, reject anything unmocked and assert the
  expected calls instead of `assertNoPendingInterceptors()`.
- `ProvidedEnv` is replaced by `Cloudflare.Env`, and `env` comes from
  `cloudflare:workers`.
- `vi.mock` calls move to module top level, which vitest 5 requires.

This also clears the open vitest and @vitest/mocker advisories. The
plugin pins wrangler 4.156.0 exactly, so the lockfile resolves root
wrangler to it as well (within the existing ^4.130.0 range).

Assisted-by: Claude Opus 5.5 <noreply@anthropic.com>

Co-authored-by: Claudio Wunder <cwunder@gnome.org>
@dependabot @github

dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 1, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-fea79c7e0d branch November 1, 2026 18:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge Ready to automatically merge after being open for 48 hours dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants