pnpm audit --prod --audit-level=critical (the new CI gate) failed on vitest <3.2.6 (critical, arbitrary file read/execute via the UI server). Bump vitest + @vitest/coverage-v8 in-range across the workspace and add @vitest/coverage-v8 to every package that runs vitest but lacked it (core-audit, core-cms, core-eslint, core-testing, core-trpc, apps/cms, web-next, web-tanstack, turbo/generators) so 'pnpm test -- --coverage' works in every package. No compound test scripts exist, so the vitest-last pass-through concern does not apply. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
32 lines
795 B
JSON
32 lines
795 B
JSON
{
|
|
"name": "@repo/core-eslint",
|
|
"private": true,
|
|
"version": "0.0.0",
|
|
"type": "module",
|
|
"exports": {
|
|
"./base": "./base.js",
|
|
"./next": "./next.js",
|
|
"./react-internal": "./react-internal.js",
|
|
"./plugin": "./plugin.js"
|
|
},
|
|
"scripts": {
|
|
"test": "vitest run --passWithNoTests"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/js": "^9.20.0",
|
|
"@typescript-eslint/eslint-plugin": "^8.25.0",
|
|
"@typescript-eslint/parser": "^8.25.0",
|
|
"@vitest/coverage-v8": "^3.2.7",
|
|
"eslint": "^9.20.0",
|
|
"eslint-config-prettier": "^10.1.0",
|
|
"eslint-plugin-boundaries": "^4.2.2",
|
|
"eslint-plugin-react-hooks": "^5.2.0",
|
|
"eslint-plugin-turbo": "^2.4.0",
|
|
"typescript-eslint": "^8.25.0",
|
|
"vitest": "^3.2.7"
|
|
},
|
|
"dependencies": {
|
|
"globals": "^17.6.0"
|
|
}
|
|
}
|