Bump esbuild and vitest in /web #2371

Merged

dependabot[bot] merged 1 commit from refs/pull/2371/head into main

2025-11-20 03:46:28 +00:00

dependabot[bot] commented

2025-10-22 15:54:59 +00:00

(Migrated from github.com)

Owner

Imported from GitHub pull request.

Original GitHub pull request: #1851
Original author: @dependabot[bot]
Original URL: https://github.com/carverauto/serviceradar/pull/1851
Original created: 2025-10-22T15:54:59Z
Original updated: 2025-11-20T03:46:47Z
Original head: carverauto/serviceradar:dependabot/npm_and_yarn/web/multi-c74cd5c56a
Original base: main
Original merged: 2025-11-20T03:46:28Z by @mfreeman451

Bumps esbuild to 0.25.11 and updates ancestor dependency vitest. These dependencies need to be updated together.

Updates esbuild from 0.21.5 to 0.25.11

Release notes

Sourced from esbuild's releases.

v0.25.11
Add support for with { type: 'bytes' } imports (#4292)

The import bytes proposal has reached stage 2.7 in the TC39 process, which means that although it isn't quite recommended for implementation, it's generally approved and ready for validation. Furthermore it has already been implemented by Deno and Webpack. So with this release, esbuild will also add support for this. It behaves exactly the same as esbuild's existing binary loader. Here's an example:
import data from './image.png' with { type: 'bytes' }
const view = new DataView(data.buffer, 0, 24)
const width = view.getInt32(16)
const height = view.getInt32(20)
console.log('size:', width + '\xD7' + height)
Lower CSS media query range syntax (#3748, #4293)

With this release, esbuild will now transform CSS media query range syntax into equivalent syntax using min-/max- prefixes for older browsers. For example, the following CSS:
@media (640px <= width <= 960px) {
 main {
 display: flex;
 }
}
will be transformed like this with a target such as --target=chrome100 (or more specifically with --supported:media-range=false if desired):
@media (min-width: 640px) and (max-width: 960px) {
 main {
 display: flex;
 }
}
v0.25.10
Fix a panic in a minification edge case (#4287)

This release fixes a panic due to a null pointer that could happen when esbuild inlines a doubly-nested identity function and the final result is empty. It was fixed by emitting the value undefined in this case, which avoids the panic. This case must be rare since it hasn't come up until now. Here is an example of code that previously triggered the panic (which only happened when minifying):
function identity(x) { return x }
identity({ y: identity(123) })
Fix @supports nested inside pseudo-element (#4265)

When transforming nested CSS to non-nested CSS, esbuild is supposed to filter out pseudo-elements such as ::placeholder for correctness. The CSS nesting specification says the following:

The nesting selector cannot represent pseudo-elements (identical to the behavior of the ':is()' pseudo-class). We’d like to relax this restriction, but need to do so simultaneously for both ':is()' and '&', since they’re intentionally built on the same underlying mechanisms.

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2024

This changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2).

0.24.2

Fix regression with --define and import.meta (#4010, #4012, #4013)

The previous change in version 0.24.1 to use a more expression-like parser for define values to allow quoted property names introduced a regression that removed the ability to use --define:import.meta=.... Even though import is normally a keyword that can't be used as an identifier, ES modules special-case the import.meta expression to behave like an identifier anyway. This change fixes the regression.

This fix was contributed by @sapphi-red.

0.24.1
Allow es2024 as a target in tsconfig.json (#4004)

TypeScript recently added es2024 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:
{
  "compilerOptions": {
    "target": "ES2024"
  }
}
As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.

This fix was contributed by @billyjanitsch.
Allow automatic semicolon insertion after get/set

This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:
class Foo {
  get
  *x() {}
  set
  *y() {}
}
The above code will be considered valid starting with this release. This change to esbuild follows a similar change to TypeScript which will allow this syntax starting with TypeScript 5.7.
Allow quoted property names in --define and --pure (#4008)

The define and pure API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes --define and --pure consistent with --global-name, which already supported quoted property names. For example, the following is now possible:

... (truncated)

Commits

6b7c4f2 publish 0.25.11 to npm
7295c1a css: also parse media queries in @import rules
e3991dd css: some adjustments to @import parsing
8bb82ca fix #3748, fix #4293: lower css media range syntax
d8c3f87 css: parse and print media queries
6e75bc7 run make update-compat-table
8f506d5 fix #4292: support with { type: bytes }
d6b668f publish 0.25.10 to npm
5088c19 refactor: use strings.Builder (#4290)
755da31 run make update-compat-table
Additional commits viewable in compare view

Updates vitest from 2.1.9 to 4.0.1

Release notes

Sourced from vitest's releases.

v4.0.1

   🐞 Bug Fixes

Move the getBuiltins check - by @sheremet-va in vitest-dev/vitest#8765 (81000)

pool: Don't teardown the communication channel too soon if something is running after the test - by @sheremet-va in vitest-dev/vitest#8767 (3fae7)

    View changes on GitHub

v4.0.0

   🚨 Breaking Changes

Remove 'basic' reporter - by @AriPerkkio in vitest-dev/vitest#7884 (82fcf)

Simplify default exclude pattern - by @sheremet-va in vitest-dev/vitest#6287 (14c50)

Remove deprecated getSourceMap - by @sheremet-va in vitest-dev/vitest#8194 (ff934)

Replace deprecated ErrorWithDiff with TestError - by @sheremet-va in vitest-dev/vitest#8195 (da59e)

Remove UserConfig type in favor of ViteUserConfig - by @sheremet-va in vitest-dev/vitest#8196 (22f7f)

Remove deprecated coverage options in favor of vitest/node exports - by @sheremet-va in vitest-dev/vitest#8197 (dc848)

Remove deprecated internal helpers and environment exports - by @sheremet-va in vitest-dev/vitest#8198 (4703c)

Remove deprecated typecheck and runner types - by @sheremet-va in vitest-dev/vitest#8199 (89a1c)

Remove Node types from the main entry point, use vitest/node instead - by @sheremet-va in vitest-dev/vitest#8200 (1e60c)

Remove support for Vite 5 - by @sheremet-va in vitest-dev/vitest#8202 (cb8b0)

Remove deprecated types - by @sheremet-va in vitest-dev/vitest#8203 (66bee)

Remove deprecated environmentMatchGlobs and poolMatchGlobs - by @sheremet-va in vitest-dev/vitest#8205 (be11d)

Remove deprecated workspace option in favor of projects - by @sheremet-va in vitest-dev/vitest#8218 (76fb7)

Ignore --standalone when CLI filename filter is used - by @AriPerkkio in vitest-dev/vitest#8262 (013bf)

Use module-runner instead of vite-node - by @sheremet-va and @AriPerkkio in vitest-dev/vitest#8208 (9be01)

Rewrite spying implementation to make module mocking more intuitive - by @sheremet-va in vitest-dev/vitest#8363 (9e412)

Remove deprecated APIs - by @sheremet-va in vitest-dev/vitest#8428 (a1cb9)

Remove minWorkers and set it automatically to 0 in non watch mode - by @sheremet-va in vitest-dev/vitest#8454 (2c2d1)

Verbose reporter prints tests in a list, introduce tree reporter - by @sheremet-va and @AriPerkkio in vitest-dev/vitest#8500 (25fd3)

Include shadow root contents in pretty-format output - by @wkillerud in vitest-dev/vitest#8545 (9e722)

Remove deprecated order from test() API - by @sheremet-va in vitest-dev/vitest#8594 (4d419)

Rewrite pools without tinypool - by @AriPerkkio and @sheremet-va in vitest-dev/vitest#8705 (4822d)

browser: Require a provider factory instead of a string - by @sheremet-va in vitest-dev/vitest#8445 (606cb)

expect: Pass current equality testers to asymmetric matcher - by @hi-ogawa in vitest-dev/vitest#6825 (965ce)

projects: Allow only files that have "vitest.config" or "vite.config" in the name - by @sheremet-va in vitest-dev/vitest#8542 (304bc)

reporter: Remove deprecated APIs - by @AriPerkkio and @sheremet-va in vitest-dev/vitest#8223 (149f8)

runner: Set mode to todo if no function is passed down to test or describe - by @sheremet-va in vitest-dev/vitest#8346 (1a81c)

snapshot: Fail test with obsolete snapshot on CI - by @hi-ogawa in vitest-dev/vitest#7963 (4d84f)

spy: Support spying on classes - by @sheremet-va in vitest-dev/vitest#6160 (abc0d)

   🚀 Features

Provide entity to onConsoleLog - by @sheremet-va in vitest-dev/vitest#8159 (437d4)

Add onUnhandledError callback - by @sheremet-va in vitest-dev/vitest#8162 (924cb)

Add spy option to vi.mockObject - by @rChaoz in vitest-dev/vitest#8285 (81d76)

Don't use vite-node in coverage packages - by @sheremet-va (ffdb4)

Clickable dashboard numbers - by @shairez in vitest-dev/vitest#7406 (2344c)

Display test "path" when filtering - by @userquin in vitest-dev/vitest#8547 (2e491)

Introduce separate packages for browser mode providers - by @sheremet-va in vitest-dev/vitest#8629 (0dc93)

... (truncated)

Commits

4a28faa chore: release v4.0.1
3fae73e fix(pool): don't teardown the communication channel too soon if something is ...
8100063 fix: move the getBuiltins check (#8765)
da7ce17 chore: release v4.0.0
8e15bc8 perf: create only one fetcher per project (#8762)
9f0eccc fix: base option doesn't crash vitest (#8760)
d3ef4f2 perf(pool): resolve all environments first (#8759)
08498f0 fix(pool): properly reuse the vm pool (#8758)
bab343b chore: remove useless comments
3e4b6b7 chore: release v4.0.0-beta.19
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vitest since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Imported from GitHub pull request. Original GitHub pull request: #1851 Original author: @dependabot[bot] Original URL: https://github.com/carverauto/serviceradar/pull/1851 Original created: 2025-10-22T15:54:59Z Original updated: 2025-11-20T03:46:47Z Original head: carverauto/serviceradar:dependabot/npm_and_yarn/web/multi-c74cd5c56a Original base: main Original merged: 2025-11-20T03:46:28Z by @mfreeman451 --- Bumps [esbuild](https://github.com/evanw/esbuild) to 0.25.11 and updates ancestor dependency [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). These dependencies need to be updated together. Updates `esbuild` from 0.21.5 to 0.25.11 <details> <summary>Release notes</summary> Sourced from <a href="https://github.com/evanw/esbuild/releases">esbuild's releases</a>. <blockquote> <h2>v0.25.11</h2> <ul> <li> Add support for <code>with { type: 'bytes' }</code> imports (<a href="https://redirect.github.com/evanw/esbuild/issues/4292">#4292</a>) The <a href="https://github.com/tc39/proposal-import-bytes">import bytes</a> proposal has reached stage 2.7 in the TC39 process, which means that although it isn't quite recommended for implementation, it's generally approved and ready for validation. Furthermore it has already been implemented by <a href="https://docs.deno.com/examples/importing_bytes/">Deno</a> and <a href="https://redirect.github.com/webpack/webpack/pull/19928">Webpack</a>. So with this release, esbuild will also add support for this. It behaves exactly the same as esbuild's existing <a href="https://esbuild.github.io/content-types/#binary"><code>binary</code> loader</a>. Here's an example: <pre lang="js"><code>import data from './image.png' with { type: 'bytes' } const view = new DataView(data.buffer, 0, 24) const width = view.getInt32(16) const height = view.getInt32(20) console.log('size:', width + '\xD7' + height) </code></pre> </li> <li> Lower CSS media query range syntax (<a href="https://redirect.github.com/evanw/esbuild/issues/3748">#3748</a>, <a href="https://redirect.github.com/evanw/esbuild/issues/4293">#4293</a>) With this release, esbuild will now transform CSS media query range syntax into equivalent syntax using <code>min-</code>/<code>max-</code> prefixes for older browsers. For example, the following CSS: <pre lang="css"><code>@media (640px <= width <= 960px) { main { display: flex; } } </code></pre> will be transformed like this with a target such as <code>--target=chrome100</code> (or more specifically with <code>--supported:media-range=false</code> if desired): <pre lang="css"><code>@media (min-width: 640px) and (max-width: 960px) { main { display: flex; } } </code></pre> </li> </ul> <h2>v0.25.10</h2> <ul> <li> Fix a panic in a minification edge case (<a href="https://redirect.github.com/evanw/esbuild/issues/4287">#4287</a>) This release fixes a panic due to a null pointer that could happen when esbuild inlines a doubly-nested identity function and the final result is empty. It was fixed by emitting the value <code>undefined</code> in this case, which avoids the panic. This case must be rare since it hasn't come up until now. Here is an example of code that previously triggered the panic (which only happened when minifying): <pre lang="js"><code>function identity(x) { return x } identity({ y: identity(123) }) </code></pre> </li> <li> Fix <code>@supports</code> nested inside pseudo-element (<a href="https://redirect.github.com/evanw/esbuild/issues/4265">#4265</a>) When transforming nested CSS to non-nested CSS, esbuild is supposed to filter out pseudo-elements such as <code>::placeholder</code> for correctness. The <a href="https://www.w3.org/TR/css-nesting-1/">CSS nesting specification</a> says the following: <blockquote> The nesting selector cannot represent pseudo-elements (identical to the behavior of the ':is()' pseudo-class). We’d like to relax this restriction, but need to do so simultaneously for both ':is()' and '&', since they’re intentionally built on the same underlying mechanisms. </blockquote> </li> </ul>  </blockquote> ... (truncated) </details> <details> <summary>Changelog</summary> Sourced from <a href="https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md">esbuild's changelog</a>. <blockquote> <h1>Changelog: 2024</h1> This changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2). <h2>0.24.2</h2> <ul> <li> Fix regression with <code>--define</code> and <code>import.meta</code> (<a href="https://redirect.github.com/evanw/esbuild/issues/4010">#4010</a>, <a href="https://redirect.github.com/evanw/esbuild/issues/4012">#4012</a>, <a href="https://redirect.github.com/evanw/esbuild/pull/4013">#4013</a>) The previous change in version 0.24.1 to use a more expression-like parser for <code>define</code> values to allow quoted property names introduced a regression that removed the ability to use <code>--define:import.meta=...</code>. Even though <code>import</code> is normally a keyword that can't be used as an identifier, ES modules special-case the <code>import.meta</code> expression to behave like an identifier anyway. This change fixes the regression. This fix was contributed by <a href="https://github.com/sapphi-red"><code>@sapphi-red</code></a>. </li> </ul> <h2>0.24.1</h2> <ul> <li> Allow <code>es2024</code> as a target in <code>tsconfig.json</code> (<a href="https://redirect.github.com/evanw/esbuild/issues/4004">#4004</a>) TypeScript recently <a href="https://devblogs.microsoft.com/typescript/announcing-typescript-5-7/#support-for---target-es2024-and---lib-es2024">added <code>es2024</code></a> as a compilation target, so esbuild now supports this in the <code>target</code> field of <code>tsconfig.json</code> files, such as in the following configuration file: <pre lang="json"><code>{ "compilerOptions": { "target": "ES2024" } } </code></pre> As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in <a href="https://esbuild.github.io/content-types/#tsconfig-json">the documentation</a>. This fix was contributed by <a href="https://github.com/billyjanitsch"><code>@billyjanitsch</code></a>. </li> <li> Allow automatic semicolon insertion after <code>get</code>/<code>set</code> This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error: <pre lang="ts"><code>class Foo { get *x() {} set *y() {} } </code></pre> The above code will be considered valid starting with this release. This change to esbuild follows a <a href="https://redirect.github.com/microsoft/TypeScript/pull/60225">similar change to TypeScript</a> which will allow this syntax starting with TypeScript 5.7. </li> <li> Allow quoted property names in <code>--define</code> and <code>--pure</code> (<a href="https://redirect.github.com/evanw/esbuild/issues/4008">#4008</a>) The <code>define</code> and <code>pure</code> API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes <code>--define</code> and <code>--pure</code> consistent with <code>--global-name</code>, which already supported quoted property names. For example, the following is now possible: <pre lang="js"><code></code></pre> </li> </ul>  </blockquote> ... (truncated) </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/evanw/esbuild/commit/6b7c4f2dcbcaa1238bca0f7a4a1d95918296c82e"><code>6b7c4f2</code></a> publish 0.25.11 to npm</li> <li><a href="https://github.com/evanw/esbuild/commit/7295c1aebc8d4f42eed08aa008cc0d7ec617727d"><code>7295c1a</code></a> css: also parse media queries in <code>@import</code> rules</li> <li><a href="https://github.com/evanw/esbuild/commit/e3991dd25ab7422981bd6006a5a8c6f741699105"><code>e3991dd</code></a> css: some adjustments to <code>@import</code> parsing</li> <li><a href="https://github.com/evanw/esbuild/commit/8bb82cad6be9e51d44e98640618c56964188adbd"><code>8bb82ca</code></a> fix <a href="https://redirect.github.com/evanw/esbuild/issues/3748">#3748</a>, fix <a href="https://redirect.github.com/evanw/esbuild/issues/4293">#4293</a>: lower css media range syntax</li> <li><a href="https://github.com/evanw/esbuild/commit/d8c3f879ce9a4cfdf6ce97e0dc1163a816fc30dd"><code>d8c3f87</code></a> css: parse and print media queries</li> <li><a href="https://github.com/evanw/esbuild/commit/6e75bc74f17d09cbcf680b1902a0d4ad7757102c"><code>6e75bc7</code></a> run <code>make update-compat-table</code></li> <li><a href="https://github.com/evanw/esbuild/commit/8f506d5ca6882f2fa96a4a7233ab9784af0a5298"><code>8f506d5</code></a> fix <a href="https://redirect.github.com/evanw/esbuild/issues/4292">#4292</a>: support <code>with { type: bytes }</code></li> <li><a href="https://github.com/evanw/esbuild/commit/d6b668f96fb00d6a6d035f058e38b6bd2507beb6"><code>d6b668f</code></a> publish 0.25.10 to npm</li> <li><a href="https://github.com/evanw/esbuild/commit/5088c198b5ecee18ba903c4099458df98b1b6788"><code>5088c19</code></a> refactor: use strings.Builder (<a href="https://redirect.github.com/evanw/esbuild/issues/4290">#4290</a>)</li> <li><a href="https://github.com/evanw/esbuild/commit/755da31752d759f1ea70b8d4f7f677b3557dab3e"><code>755da31</code></a> run <code>make update-compat-table</code></li> <li>Additional commits viewable in <a href="https://github.com/evanw/esbuild/compare/v0.21.5...v0.25.11">compare view</a></li> </ul> </details> Updates `vitest` from 2.1.9 to 4.0.1 <details> <summary>Release notes</summary> Sourced from <a href="https://github.com/vitest-dev/vitest/releases">vitest's releases</a>. <blockquote> <h2>v4.0.1</h2> <h3> 🐞 Bug Fixes</h3> <ul> <li>Move the <code>getBuiltins</code> check - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8765">vitest-dev/vitest#8765</a> <a href="https://github.com/vitest-dev/vitest/commit/81000631d">(81000)</a></li> <li>pool: Don't teardown the communication channel too soon if something is running after the test - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8767">vitest-dev/vitest#8767</a> <a href="https://github.com/vitest-dev/vitest/commit/3fae73e2e">(3fae7)</a></li> </ul> <h5> <a href="https://github.com/vitest-dev/vitest/compare/v4.0.0...v4.0.1">View changes on GitHub</a></h5> <h2>v4.0.0</h2> <h3> 🚨 Breaking Changes</h3> <ul> <li>Remove <code>'basic'</code> reporter - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/7884">vitest-dev/vitest#7884</a> <a href="https://github.com/vitest-dev/vitest/commit/82fcf5d53">(82fcf)</a></li> <li>Simplify default exclude pattern - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/6287">vitest-dev/vitest#6287</a> <a href="https://github.com/vitest-dev/vitest/commit/14c507200">(14c50)</a></li> <li>Remove deprecated getSourceMap - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8194">vitest-dev/vitest#8194</a> <a href="https://github.com/vitest-dev/vitest/commit/ff93444f8">(ff934)</a></li> <li>Replace deprecated ErrorWithDiff with TestError - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8195">vitest-dev/vitest#8195</a> <a href="https://github.com/vitest-dev/vitest/commit/da59eb887">(da59e)</a></li> <li>Remove UserConfig type in favor of ViteUserConfig - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8196">vitest-dev/vitest#8196</a> <a href="https://github.com/vitest-dev/vitest/commit/22f7f2db5">(22f7f)</a></li> <li>Remove deprecated coverage options in favor of <code>vitest/node</code> exports - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8197">vitest-dev/vitest#8197</a> <a href="https://github.com/vitest-dev/vitest/commit/dc8486d22">(dc848)</a></li> <li>Remove deprecated internal helpers and environment exports - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8198">vitest-dev/vitest#8198</a> <a href="https://github.com/vitest-dev/vitest/commit/4703cf850">(4703c)</a></li> <li>Remove deprecated typecheck and runner types - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8199">vitest-dev/vitest#8199</a> <a href="https://github.com/vitest-dev/vitest/commit/89a1cb626">(89a1c)</a></li> <li>Remove Node types from the main entry point, use <code>vitest/node</code> instead - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8200">vitest-dev/vitest#8200</a> <a href="https://github.com/vitest-dev/vitest/commit/1e60c4f44">(1e60c)</a></li> <li>Remove support for Vite 5 - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8202">vitest-dev/vitest#8202</a> <a href="https://github.com/vitest-dev/vitest/commit/cb8b03bac">(cb8b0)</a></li> <li>Remove deprecated types - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8203">vitest-dev/vitest#8203</a> <a href="https://github.com/vitest-dev/vitest/commit/66bee836f">(66bee)</a></li> <li>Remove deprecated environmentMatchGlobs and poolMatchGlobs - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8205">vitest-dev/vitest#8205</a> <a href="https://github.com/vitest-dev/vitest/commit/be11d374c">(be11d)</a></li> <li>Remove deprecated <code>workspace</code> option in favor of <code>projects</code> - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8218">vitest-dev/vitest#8218</a> <a href="https://github.com/vitest-dev/vitest/commit/76fb75d42">(76fb7)</a></li> <li>Ignore <code>--standalone</code> when CLI filename filter is used - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8262">vitest-dev/vitest#8262</a> <a href="https://github.com/vitest-dev/vitest/commit/013bf2cb2">(013bf)</a></li> <li>Use module-runner instead of vite-node - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> and <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8208">vitest-dev/vitest#8208</a> <a href="https://github.com/vitest-dev/vitest/commit/9be01ba59">(9be01)</a></li> <li>Rewrite spying implementation to make module mocking more intuitive - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8363">vitest-dev/vitest#8363</a> <a href="https://github.com/vitest-dev/vitest/commit/9e412de35">(9e412)</a></li> <li>Remove deprecated APIs - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8428">vitest-dev/vitest#8428</a> <a href="https://github.com/vitest-dev/vitest/commit/a1cb9719a">(a1cb9)</a></li> <li>Remove <code>minWorkers</code> and set it automatically to 0 in non watch mode - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8454">vitest-dev/vitest#8454</a> <a href="https://github.com/vitest-dev/vitest/commit/2c2d1d4ce">(2c2d1)</a></li> <li>Verbose reporter prints tests in a list, introduce <code>tree</code> reporter - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> and <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8500">vitest-dev/vitest#8500</a> <a href="https://github.com/vitest-dev/vitest/commit/25fd32bf0">(25fd3)</a></li> <li>Include shadow root contents in pretty-format output - by <a href="https://github.com/wkillerud"><code>@wkillerud</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8545">vitest-dev/vitest#8545</a> <a href="https://github.com/vitest-dev/vitest/commit/9e722834a">(9e722)</a></li> <li>Remove deprecated order from test() API - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8594">vitest-dev/vitest#8594</a> <a href="https://github.com/vitest-dev/vitest/commit/4d41928c6">(4d419)</a></li> <li>Rewrite pools without <code>tinypool</code> - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> and <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8705">vitest-dev/vitest#8705</a> <a href="https://github.com/vitest-dev/vitest/commit/4822d047a">(4822d)</a></li> <li>browser: Require a provider factory instead of a string - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8445">vitest-dev/vitest#8445</a> <a href="https://github.com/vitest-dev/vitest/commit/606cb9e3e">(606cb)</a></li> <li>expect: Pass current equality testers to asymmetric matcher - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/6825">vitest-dev/vitest#6825</a> <a href="https://github.com/vitest-dev/vitest/commit/965cefc19">(965ce)</a></li> <li>projects: Allow only files that have "vitest.config" or "vite.config" in the name - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8542">vitest-dev/vitest#8542</a> <a href="https://github.com/vitest-dev/vitest/commit/304bc20f0">(304bc)</a></li> <li>reporter: Remove deprecated APIs - by <a href="https://github.com/AriPerkkio"><code>@AriPerkkio</code></a> and <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8223">vitest-dev/vitest#8223</a> <a href="https://github.com/vitest-dev/vitest/commit/149f8e509">(149f8)</a></li> <li>runner: Set mode to <code>todo</code> if no function is passed down to <code>test</code> or <code>describe</code> - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8346">vitest-dev/vitest#8346</a> <a href="https://github.com/vitest-dev/vitest/commit/1a81c21d2">(1a81c)</a></li> <li>snapshot: Fail test with obsolete snapshot on CI - by <a href="https://github.com/hi-ogawa"><code>@hi-ogawa</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/7963">vitest-dev/vitest#7963</a> <a href="https://github.com/vitest-dev/vitest/commit/4d84f0ac6">(4d84f)</a></li> <li>spy: Support spying on classes - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/6160">vitest-dev/vitest#6160</a> <a href="https://github.com/vitest-dev/vitest/commit/abc0d8273">(abc0d)</a></li> </ul> <h3> 🚀 Features</h3> <ul> <li>Provide entity to onConsoleLog - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8159">vitest-dev/vitest#8159</a> <a href="https://github.com/vitest-dev/vitest/commit/437d461aa">(437d4)</a></li> <li>Add <code>onUnhandledError</code> callback - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8162">vitest-dev/vitest#8162</a> <a href="https://github.com/vitest-dev/vitest/commit/924cb6961">(924cb)</a></li> <li>Add spy option to vi.mockObject - by <a href="https://github.com/rChaoz"><code>@rChaoz</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8285">vitest-dev/vitest#8285</a> <a href="https://github.com/vitest-dev/vitest/commit/81d7601e4">(81d76)</a></li> <li>Don't use vite-node in coverage packages - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> <a href="https://github.com/vitest-dev/vitest/commit/ffdb4d5fd">(ffdb4)</a></li> <li>Clickable dashboard numbers - by <a href="https://github.com/shairez"><code>@shairez</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/7406">vitest-dev/vitest#7406</a> <a href="https://github.com/vitest-dev/vitest/commit/2344c1f6e">(2344c)</a></li> <li>Display test "path" when filtering - by <a href="https://github.com/userquin"><code>@userquin</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8547">vitest-dev/vitest#8547</a> <a href="https://github.com/vitest-dev/vitest/commit/2e4918954">(2e491)</a></li> <li>Introduce separate packages for browser mode providers - by <a href="https://github.com/sheremet-va"><code>@sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8629">vitest-dev/vitest#8629</a> <a href="https://github.com/vitest-dev/vitest/commit/0dc93ea98">(0dc93)</a></li> </ul>  </blockquote> ... (truncated) </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/4a28faa67783db5de87194d39a1b3f643bc38287"><code>4a28faa</code></a> chore: release v4.0.1</li> <li><a href="https://github.com/vitest-dev/vitest/commit/3fae73e2e117f3a410d16259463079fbd2035e5b"><code>3fae73e</code></a> fix(pool): don't teardown the communication channel too soon if something is ...</li> <li><a href="https://github.com/vitest-dev/vitest/commit/81000631df5f262dca674aebca0952b58befb842"><code>8100063</code></a> fix: move the <code>getBuiltins</code> check (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/8765">#8765</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/da7ce1712fd4d0e4e807ec01ce755581e6892d5b"><code>da7ce17</code></a> chore: release v4.0.0</li> <li><a href="https://github.com/vitest-dev/vitest/commit/8e15bc8f97b5032dae6bec0d329f5ca5706a404c"><code>8e15bc8</code></a> perf: create only one fetcher per project (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/8762">#8762</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/9f0ecccb8b4482fe3532b819411f04928b529735"><code>9f0eccc</code></a> fix: <code>base</code> option doesn't crash vitest (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/8760">#8760</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/d3ef4f29c1cf07b3161117f614f12d688fa27ab5"><code>d3ef4f2</code></a> perf(pool): resolve all environments first (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/8759">#8759</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/08498f0e99ccacdca925bb5f51fab1f78e0d9d79"><code>08498f0</code></a> fix(pool): properly reuse the vm pool (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/8758">#8758</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/bab343bd250bce12afa257b523d549af5b858456"><code>bab343b</code></a> chore: remove useless comments</li> <li><a href="https://github.com/vitest-dev/vitest/commit/3e4b6b762ed3c58de8381910db006833eca67c57"><code>3e4b6b7</code></a> chore: release v4.0.0-beta.19</li> <li>Additional commits viewable in <a href="https://github.com/vitest-dev/vitest/commits/v4.0.1/packages/vitest">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for vitest since your current version. </details> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/carverauto/serviceradar/network/alerts). </details>

qodo-code-review[bot] commented

2025-11-20 03:46:47 +00:00

(Migrated from github.com)

Author

Owner

Imported GitHub PR comment.

Original author: @qodo-code-review[bot]
Original URL: https://github.com/carverauto/serviceradar/pull/1851#issuecomment-3555641494
Original created: 2025-11-20T03:46:47Z

PR Compliance Guide 🔍

Below is a summary of compliance checks for this PR:

Security Compliance
🟢	No security concerns identified No security vulnerabilities detected by AI analysis. Human verification advised for critical code.
Ticket Compliance
⚪	🎫 No ticket provided Create ticket/issue
Codebase Duplication Compliance
⚪	Codebase context is not defined Follow the guide to enable codebase context checks.
Custom Compliance
⚪	Generic: Comprehensive Audit Trails Objective: To create a detailed and reliable record of critical system actions for security analysis and compliance. Status: No audit impact: The changes only bump build/test dependencies (esbuild, vitest, vite) and do not introduce or modify application logic or logging, so there is no evidence of missing audit trails in this diff. Referred Code `esbuild@0.25.11: resolution: {integrity: sha512-KohQwyzrKTQmhXDW1PjCv3Tyspn9n5GcY2RTDqeORIdIJY8yKIF7sTSopFmn/wpMPW4rdPXI0UE5LJLuq3bx0Q==} engines: {node: '>=18'} hasBin: true` Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Meaningful Naming and Self-Documenting Code Objective: Ensure all identifiers clearly express their purpose and intent, making code self-documenting Status: No code changes: This PR updates dependency versions without adding or altering source identifiers, so naming conventions cannot be evaluated from the provided diff. Referred Code `"vitest": "^4.0.1" },` Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Robust Error Handling and Edge Case Management Objective: Ensure comprehensive error handling that provides meaningful context and graceful degradation Status: Infra-only changes: Only dependency version bumps are present; no new application error handling paths are introduced in this diff to assess robustness. Referred Code vite@7.1.11: resolution: {integrity: sha512-uzcxnSDVjAopEUjljkWh8EIrg6tlzrjFUfMcR1EVsRDGwf/ccef0qQPRyOrROwhrTDaApueq+ja+KLPlzR/zdg==} engines: {node: ^20.19.0 \|\| >=22.12.0} hasBin: true peerDependencies: '@types/node': ^20.19.0 \|\| >=22.12.0 jiti: '>=1.21.0' less: ^4.0.0 lightningcss: ^1.21.0 sass: ^1.70.0 sass-embedded: ^1.70.0 stylus: '>=0.54.8' sugarss: ^5.0.0 terser: ^5.16.0 tsx: ^4.8.1 yaml: ^2.4.2 peerDependenciesMeta: '@types/node': optional: true jiti: optional: true ... (clipped 22 lines) Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Secure Error Handling Objective: To prevent the leakage of sensitive system information through error messages while providing sufficient detail for internal debugging. Status: No user errors here: The diff contains package resolution updates only and does not modify user-facing error messages; security of error handling cannot be assessed from this change. Referred Code is-date-object: 1.1.0 is-symbol: 1.1.1 esbuild@0.25.11: optionalDependencies: '@esbuild/aix-ppc64': 0.25.11 '@esbuild/android-arm': 0.25.11 '@esbuild/android-arm64': 0.25.11 '@esbuild/android-x64': 0.25.11 '@esbuild/darwin-arm64': 0.25.11 '@esbuild/darwin-x64': 0.25.11 '@esbuild/freebsd-arm64': 0.25.11 '@esbuild/freebsd-x64': 0.25.11 '@esbuild/linux-arm': 0.25.11 '@esbuild/linux-arm64': 0.25.11 '@esbuild/linux-ia32': 0.25.11 '@esbuild/linux-loong64': 0.25.11 '@esbuild/linux-mips64el': 0.25.11 '@esbuild/linux-ppc64': 0.25.11 '@esbuild/linux-riscv64': 0.25.11 '@esbuild/linux-s390x': 0.25.11 ... (clipped 11 lines) Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Secure Logging Practices Objective: To ensure logs are useful for debugging and auditing without exposing sensitive information like PII, PHI, or cardholder data. Status: No logging changes: There are no new or modified application logging statements in this dependency bump; secure logging practices cannot be evaluated from the provided diff. Referred Code `'@babel/types': 7.28.4 '@jridgewell/remapping': 2.3.5 convert-source-map: 2.0.0 debug: 4.4.3 gensync: 1.0.0-beta.2 json5: 2.2.3 semver: 6.3.1` Learn more about managing compliance generic rules or creating your own custom rules
	Generic: Security-First Input Validation and Data Handling Objective: Ensure all data inputs are validated, sanitized, and handled securely to prevent vulnerabilities Status: Dependencies only: The PR updates dev/build/test dependencies and does not alter input handling or data paths; no assessment of validation/sanitization is possible from this diff. Referred Code `"postcss": "8.5.6", "tailwindcss": "^3.4.1", "typescript": "5.8.3", "vitest": "^4.0.1" },` Learn more about managing compliance generic rules or creating your own custom rules

Compliance status legend

🟢 - Fully Compliant
🟡 - Partial Compliant
🔴 - Not Compliant
⚪ - Requires Further Human Verification
🏷️ - Compliance label

Imported GitHub PR comment. Original author: @qodo-code-review[bot] Original URL: https://github.com/carverauto/serviceradar/pull/1851#issuecomment-3555641494 Original created: 2025-11-20T03:46:47Z --- ## PR Compliance Guide 🔍  Below is a summary of compliance checks for this PR: <table><tbody><tr><td colspan='2'>Security Compliance</td></tr> <tr><td>🟢</td><td><details><summary>No security concerns identified</summary> No security vulnerabilities detected by AI analysis. Human verification advised for critical code. </details></td></tr> <tr><td colspan='2'>Ticket Compliance</td></tr> <tr><td>⚪</td><td><details><summary>🎫 No ticket provided </summary> - [ ] Create ticket/issue  </details></td></tr> <tr><td colspan='2'>Codebase Duplication Compliance</td></tr> <tr><td>⚪</td><td><details><summary>Codebase context is not defined </summary> Follow the <a href='https://qodo-merge-docs.qodo.ai/core-abilities/rag_context_enrichment/'>guide</a> to enable codebase context checks. </details></td></tr> <tr><td colspan='2'>Custom Compliance</td></tr> <tr><td rowspan=6>⚪</td> <td><details> <summary>Generic: Comprehensive Audit Trails</summary> **Objective:** To create a detailed and reliable record of critical system actions for security analysis and compliance. **Status:** <a href='https://github.com/carverauto/serviceradar/pull/1851/files#diff-f11bfba22b3604b3a7b52e44e10f4eae265b030b5682714833ba689eda12a27bR1476-R1480'>No audit impact</a>: The changes only bump build/test dependencies (esbuild, vitest, vite) and do not introduce or modify application logic or logging, so there is no evidence of missing audit trails in this diff. <details open><summary>Referred Code</summary> ```yaml esbuild@0.25.11: resolution: {integrity: sha512-KohQwyzrKTQmhXDW1PjCv3Tyspn9n5GcY2RTDqeORIdIJY8yKIF7sTSopFmn/wpMPW4rdPXI0UE5LJLuq3bx0Q==} engines: {node: '>=18'} hasBin: true ``` </details> > Learn more about managing compliance <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#configuration-options'>generic rules</a> or creating your own <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#custom-compliance'>custom rules</a> </details></td></tr> <tr><td><details> <summary>Generic: Meaningful Naming and Self-Documenting Code</summary> **Objective:** Ensure all identifiers clearly express their purpose and intent, making code self-documenting **Status:** <a href='https://github.com/carverauto/serviceradar/pull/1851/files#diff-b861012a5dd72b8a9f3281b7cf09f5a779c98569d040b1bbc1db50f1b15e7cceR41-R41'>No code changes</a>: This PR updates dependency versions without adding or altering source identifiers, so naming conventions cannot be evaluated from the provided diff. <details open><summary>Referred Code</summary> ```json "vitest": "^4.0.1" }, ``` </details> > Learn more about managing compliance <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#configuration-options'>generic rules</a> or creating your own <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#custom-compliance'>custom rules</a> </details></td></tr> <tr><td><details> <summary>Generic: Robust Error Handling and Edge Case Management</summary> **Objective:** Ensure comprehensive error handling that provides meaningful context and graceful degradation **Status:** <a href='https://github.com/carverauto/serviceradar/pull/1851/files#diff-f11bfba22b3604b3a7b52e44e10f4eae265b030b5682714833ba689eda12a27bR2714-R2756'>Infra-only changes</a>: Only dependency version bumps are present; no new application error handling paths are introduced in this diff to assess robustness. <details open><summary>Referred Code</summary> ```yaml vite@7.1.11: resolution: {integrity: sha512-uzcxnSDVjAopEUjljkWh8EIrg6tlzrjFUfMcR1EVsRDGwf/ccef0qQPRyOrROwhrTDaApueq+ja+KLPlzR/zdg==} engines: {node: ^20.19.0 || >=22.12.0} hasBin: true peerDependencies: '@types/node': ^20.19.0 || >=22.12.0 jiti: '>=1.21.0' less: ^4.0.0 lightningcss: ^1.21.0 sass: ^1.70.0 sass-embedded: ^1.70.0 stylus: '>=0.54.8' sugarss: ^5.0.0 terser: ^5.16.0 tsx: ^4.8.1 yaml: ^2.4.2 peerDependenciesMeta: '@types/node': optional: true jiti: optional: true ... (clipped 22 lines) ``` </details> > Learn more about managing compliance <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#configuration-options'>generic rules</a> or creating your own <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#custom-compliance'>custom rules</a> </details></td></tr> <tr><td><details> <summary>Generic: Secure Error Handling</summary> **Objective:** To prevent the leakage of sensitive system information through error messages while providing sufficient detail for internal debugging. **Status:** <a href='https://github.com/carverauto/serviceradar/pull/1851/files#diff-f11bfba22b3604b3a7b52e44e10f4eae265b030b5682714833ba689eda12a27bR4207-R4238'>No user errors here</a>: The diff contains package resolution updates only and does not modify user-facing error messages; security of error handling cannot be assessed from this change. <details open><summary>Referred Code</summary> ```yaml is-date-object: 1.1.0 is-symbol: 1.1.1 esbuild@0.25.11: optionalDependencies: '@esbuild/aix-ppc64': 0.25.11 '@esbuild/android-arm': 0.25.11 '@esbuild/android-arm64': 0.25.11 '@esbuild/android-x64': 0.25.11 '@esbuild/darwin-arm64': 0.25.11 '@esbuild/darwin-x64': 0.25.11 '@esbuild/freebsd-arm64': 0.25.11 '@esbuild/freebsd-x64': 0.25.11 '@esbuild/linux-arm': 0.25.11 '@esbuild/linux-arm64': 0.25.11 '@esbuild/linux-ia32': 0.25.11 '@esbuild/linux-loong64': 0.25.11 '@esbuild/linux-mips64el': 0.25.11 '@esbuild/linux-ppc64': 0.25.11 '@esbuild/linux-riscv64': 0.25.11 '@esbuild/linux-s390x': 0.25.11 ... (clipped 11 lines) ``` </details> > Learn more about managing compliance <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#configuration-options'>generic rules</a> or creating your own <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#custom-compliance'>custom rules</a> </details></td></tr> <tr><td><details> <summary>Generic: Secure Logging Practices</summary> **Objective:** To ensure logs are useful for debugging and auditing without exposing sensitive information like PII, PHI, or cardholder data. **Status:** <a href='https://github.com/carverauto/serviceradar/pull/1851/files#diff-f11bfba22b3604b3a7b52e44e10f4eae265b030b5682714833ba689eda12a27bR2885-R2891'>No logging changes</a>: There are no new or modified application logging statements in this dependency bump; secure logging practices cannot be evaluated from the provided diff. <details open><summary>Referred Code</summary> ```yaml '@babel/types': 7.28.4 '@jridgewell/remapping': 2.3.5 convert-source-map: 2.0.0 debug: 4.4.3 gensync: 1.0.0-beta.2 json5: 2.2.3 semver: 6.3.1 ``` </details> > Learn more about managing compliance <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#configuration-options'>generic rules</a> or creating your own <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#custom-compliance'>custom rules</a> </details></td></tr> <tr><td><details> <summary>Generic: Security-First Input Validation and Data Handling</summary> **Objective:** Ensure all data inputs are validated, sanitized, and handled securely to prevent vulnerabilities **Status:** <a href='https://github.com/carverauto/serviceradar/pull/1851/files#diff-b861012a5dd72b8a9f3281b7cf09f5a779c98569d040b1bbc1db50f1b15e7cceR38-R42'>Dependencies only</a>: The PR updates dev/build/test dependencies and does not alter input handling or data paths; no assessment of validation/sanitization is possible from this diff. <details open><summary>Referred Code</summary> ```json "postcss": "8.5.6", "tailwindcss": "^3.4.1", "typescript": "5.8.3", "vitest": "^4.0.1" }, ``` </details> > Learn more about managing compliance <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#configuration-options'>generic rules</a> or creating your own <a href='https://qodo-merge-docs.qodo.ai/tools/compliance/#custom-compliance'>custom rules</a> </details></td></tr> <tr><td align="center" colspan="2">   </td></tr></tbody></table> <details><summary>Compliance status legend</summary> 🟢 - Fully Compliant 🟡 - Partial Compliant 🔴 - Not Compliant ⚪ - Requires Further Human Verification 🏷️ - Compliance label </details>