Skip to content

Conversation

@anantham
Copy link
Owner

Summary

Security-focused dependency bumps for Vitest/Vite tooling and key runtime libs, plus lockfile refresh.

Changes

  • package.json: bump vitest/@vitest/*, vite, happy-dom, @google/genai
  • index.html: update @google/genai importmap pin
  • package-lock.json: refresh (includes patched glob/path chain)
  • tests: OpenAI mocks use a constructible class under Vitest 4
  • docs/WORKLOG.md: add entry

Testing

  • npm audit (0 vulnerabilities)
  • npx tsc --noEmit
  • npm test -- --run

Context: security bump for vuln chain deps (glob/path).

Changes: update Vitest 4 + Vite + Happy DOM + @google/genai, refresh importmap pin, regenerate lockfile; make OpenAI test mocks constructible under Vitest 4.

Tests: npm audit; npx tsc --noEmit; npm test -- --run

Docs: docs/WORKLOG.md
@vercel
Copy link

vercel bot commented Dec 22, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Review Updated (UTC)
lexicon-forge Ready Ready Preview, Comment Dec 22, 2025 3:02am

@anantham anantham merged commit f1c0476 into main Dec 22, 2025
3 checks passed
@anantham anantham deleted the chore/security-deps-2025-12-22 branch December 22, 2025 03:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants