pnpm audit --prod --audit-level=critical (the new CI gate) failed on vitest <3.2.6 (critical, arbitrary file read/execute via the UI server). Bump vitest + @vitest/coverage-v8 in-range across the workspace and add @vitest/coverage-v8 to every package that runs vitest but lacked it (core-audit, core-cms, core-eslint, core-testing, core-trpc, apps/cms, web-next, web-tanstack, turbo/generators) so 'pnpm test -- --coverage' works in every package. No compound test scripts exist, so the vitest-last pass-through concern does not apply. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
48 lines
1.2 KiB
JSON
48 lines
1.2 KiB
JSON
{
|
|
"name": "@repo/core-audit",
|
|
"version": "0.0.1",
|
|
"private": true,
|
|
"type": "module",
|
|
"exports": {
|
|
".": "./src/index.ts",
|
|
"./collection": "./src/audit-logs-collection.ts",
|
|
"./di": "./src/di/bind-audit.ts",
|
|
"./hooks": "./src/hooks/index.ts",
|
|
"./api": "./src/integrations/api/router.ts"
|
|
},
|
|
"scripts": {
|
|
"build": "tsc --noEmit",
|
|
"lint": "eslint .",
|
|
"typecheck": "tsc --noEmit",
|
|
"test": "vitest run"
|
|
},
|
|
"dependencies": {
|
|
"@repo/core-shared": "workspace:*",
|
|
"@trpc/server": "^11.0.0",
|
|
"zod": "^3.23.0"
|
|
},
|
|
"peerDependencies": {
|
|
"payload": "^3.0.0"
|
|
},
|
|
"peerDependenciesMeta": {
|
|
"payload": {
|
|
"optional": true
|
|
}
|
|
},
|
|
"devDependencies": {
|
|
"@opentelemetry/api": "^1.9.0",
|
|
"@opentelemetry/api-logs": "^0.55.0",
|
|
"@opentelemetry/context-async-hooks": "^1.28.0",
|
|
"@opentelemetry/sdk-trace-base": "^1.27.0",
|
|
"@repo/core-eslint": "workspace:*",
|
|
"@repo/core-testing": "workspace:*",
|
|
"@repo/core-typescript": "workspace:*",
|
|
"@vitest/coverage-v8": "^3.2.7",
|
|
"inversify": "^6.2.0",
|
|
"payload": "^3.14.0",
|
|
"reflect-metadata": "^0.2.2",
|
|
"typescript": "^5.8.0",
|
|
"vitest": "^3.2.7"
|
|
}
|
|
}
|