Danijel Martinek 5f38a3efce build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere ...

pnpm audit --prod --audit-level=critical (the new CI gate) failed on
vitest <3.2.6 (critical, arbitrary file read/execute via the UI
server). Bump vitest + @vitest/coverage-v8 in-range across the
workspace and add @vitest/coverage-v8 to every package that runs
vitest but lacked it (core-audit, core-cms, core-eslint, core-testing,
core-trpc, apps/cms, web-next, web-tanstack, turbo/generators) so
'pnpm test -- --coverage' works in every package. No compound test
scripts exist, so the vitest-last pass-through concern does not apply.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-10 16:44:48 +02:00

..

e2e

test(web-next): add Playwright config + smoke specs (home, about, blog 404)

2026-05-05 09:25:42 +02:00

src

fix(web-next): correct idempotency test to use bindAll not bindAllProduction

2026-05-28 22:41:10 +02:00

test-results

test(web-next): add Playwright config + smoke specs (home, about, blog 404)

2026-05-05 09:25:42 +02:00

AGENTS.md

docs: ui now optional — prerequisite notes + conditional HTML

2026-05-09 14:23:24 +02:00

eslint.config.js

refactor: rename eslint-config + typescript-config to core-eslint + core-typescript

2026-05-05 10:37:07 +02:00

instrumentation-client.ts

feat(web-next): wire security headers middleware and nonce threading

2026-05-20 10:10:12 +00:00

instrumentation.ts

fix(otel): consolidate to single OTel SDK init at instrumentation.register hook

2026-05-11 12:38:17 +02:00

middleware.ts

feat(web-next): wire security headers middleware and nonce threading

2026-05-20 10:10:12 +00:00

next-env.d.ts

test(web-next): add Playwright config + smoke specs (home, about, blog 404)

2026-05-05 09:25:42 +02:00

next.config.mjs

feat(core-trpc): scaffold tRPC client with React Query providers

2026-05-26 14:11:27 +02:00

package.json

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

playwright.config.ts

test(web-next): add Playwright config + smoke specs (home, about, blog 404)

2026-05-05 09:25:42 +02:00

postcss.config.mjs

feat(web-next): wire Tailwind CSS v4 via PostCSS

2026-05-26 14:12:57 +02:00

server.ts

refactor: remove core-realtime from main (scaffoldable via gen core-package realtime)

2026-05-09 13:45:52 +02:00

tsconfig.json

chore(tsconfig): migrate off deprecated baseUrl

2026-05-08 09:44:00 +02:00

tsconfig.tsbuildinfo

feat(auth): migrate anonymous consent on signUp when cc_consent cookie present

2026-05-19 21:52:08 +00:00

turbo.json

build(turbo): add boundaries enforcement matching ESLint dependency graph

2026-05-05 11:59:44 +02:00

vitest.config.ts

feat(apps): add unit tests for providers + bind-production + cms config

2026-05-05 16:34:19 +02:00