Chore: bump vitest to 4.0.6 by rossgalloway · Pull Request #826 · yearn/yearn.fi

rossgalloway · 2025-11-10T21:40:44Z

Description

updated vitest to 4.0.6
fixed one test and deleted one test

Related Issue

same as dependabot #816

Motivation and Context

dependabot

How Has This Been Tested?

Locally

Screenshots (if appropriate):

vercel · 2025-11-10T21:40:50Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
yearnfi	Ready	Preview	Comment	Nov 15, 2025 7:26pm

github-actions · 2025-11-10T21:40:57Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package

Version

Score

Details

npm/@testing-library/jest-dom

6.9.1

🟢 5.2

Details

Check	Score	Reason
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	🟢 9	Found 16/17 approved changesets -- score normalized to 9
Packaging	⚠️ -1	packaging workflow not detected
Maintained	🟢 5	4 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 5
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Vulnerabilities	🟢 10	0 existing vulnerabilities detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy	⚠️ 0	security policy file not detected
Signed-Releases	⚠️ -1	no releases found
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@testing-library/user-event

^14.6.1

🟢 4.6

Details

Check	Score	Reason
Maintained	⚠️ 2	3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Code-Review	🟢 6	Found 20/29 approved changesets -- score normalized to 6
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Vulnerabilities	🟢 10	0 existing vulnerabilities detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Security-Policy	⚠️ 0	security policy file not detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@types/jsdom

27.0.0

🟢 6.9

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Code-Review	🟢 8	Found 24/30 approved changesets -- score normalized to 8
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 9	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Vulnerabilities	🟢 10	0 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Fuzzing	⚠️ 0	project is not fuzzed

npm/@vitest/browser

4.0.9

Unknown

npm/happy-dom

^20.0.10

🟢 6.1

Details

Check	Score	Reason
Code-Review	🟢 3	Found 9/29 approved changesets -- score normalized to 3
Maintained	🟢 10	18 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 4	dependency not pinned by hash detected -- score normalized to 4
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	🟢 5	5 existing vulnerabilities detected
SAST	🟢 7	SAST tool is not run on all commits -- score normalized to 7

npm/jsdom

27.2.0

🟢 7.3

Details

Check	Score	Reason
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	🟢 5	Found 17/29 approved changesets -- score normalized to 5
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Maintained	🟢 10	30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Pinned-Dependencies	🟢 3	dependency not pinned by hash detected -- score normalized to 3
Security-Policy	🟢 10	security policy file detected
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	🟢 10	0 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/vitest

4.0.6

Unknown

Scanned Files

package.json

socket-security · 2025-11-10T21:43:13Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@types/jsdom@27.0.0
	@vitest/browser@4.0.9
	vitest@1.6.1 ⏵ 4.0.6	⁺¹
	@testing-library/user-event@14.6.1
	happy-dom@20.0.10
	@testing-library/jest-dom@6.9.1
	jsdom@27.2.0

View full report

…bump-vitest-to-4.0.6

The previous test file was not actually testing - it was just example code showing how to use the Link component. This commit replaces it with proper Vitest 4.0.6 compatible tests using @testing-library/react. Changes: - Install jsdom, happy-dom, @testing-library/jest-dom, and @testing-library/user-event - Update vitest.config.ts to use jsdom environment instead of node - Add vitest.setup.ts to configure jest-dom matchers globally - Replace renderToStaticMarkup approach with proper render() from @testing-library/react - Add 7 comprehensive tests covering: - Internal routing with href prop - Internal routing with to prop - External links with default target="_blank" and rel="noopener noreferrer" - Overriding target and rel attributes - href prioritization over to prop - Custom className application - onClick event handling with userEvent All tests pass without warnings.

socket-security · 2025-11-14T22:31:48Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `safer-buffer` is 94.0% likely obfuscated Confidence: 0.94 Location: Package overview From: `?` → `npm/jsdom@27.2.0` → `npm/safer-buffer@2.1.2` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/safer-buffer@2.1.2`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

…bump-vitest-to-4.0.6

rossgalloway added 2 commits November 10, 2025 16:38

chore: bump vitest

a955c4b

fix: update and remove old tests

28e1b1c

rossgalloway mentioned this pull request Nov 10, 2025

chore(deps-dev): bump vitest from 1.6.1 to 4.0.6 #816

Closed

Merge branch 'main' into chore--bump-vitest-to-4.0.6

a9dbe7e

vercel bot deployed to Preview November 10, 2025 23:12 View deployment

0xeye previously approved these changes Nov 12, 2025

View reviewed changes

chore:lint

d90138b

rossgalloway dismissed 0xeye’s stale review via d90138b November 14, 2025 21:23

vercel bot deployed to Preview November 14, 2025 21:24 View deployment

rossgalloway added 2 commits November 14, 2025 16:26

Merge branch 'main' of https://github.com/yearn/yearn.fi into chore--…

a04ff7f

…bump-vitest-to-4.0.6

chore: update lock file

55a4bfe

rossgalloway requested a review from murderteeth November 14, 2025 21:42

vercel bot deployed to Preview November 14, 2025 21:42 View deployment

chore: add lockb to cleanup

45ce0c8

vercel bot deployed to Preview November 14, 2025 21:46 View deployment

vercel bot deployed to Preview November 14, 2025 22:32 View deployment

Merge branch 'main' of https://github.com/yearn/yearn.fi into chore--…

fb2a6f1

…bump-vitest-to-4.0.6

vercel bot deployed to Preview November 15, 2025 19:26 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Chore: bump vitest to 4.0.6#826

Chore: bump vitest to 4.0.6#826
rossgalloway wants to merge 9 commits intomainfrom
chore--bump-vitest-to-4.0.6

rossgalloway commented Nov 10, 2025

Uh oh!

vercel bot commented Nov 10, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Nov 10, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Nov 10, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Nov 14, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

rossgalloway commented Nov 10, 2025

Description

Related Issue

Motivation and Context

How Has This Been Tested?

Screenshots (if appropriate):

Uh oh!

vercel bot commented Nov 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Nov 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

socket-security bot commented Nov 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Nov 14, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

vercel bot commented Nov 10, 2025 •

edited

Loading

github-actions bot commented Nov 10, 2025 •

edited

Loading

socket-security bot commented Nov 10, 2025 •

edited

Loading

socket-security bot commented Nov 14, 2025 •

edited

Loading