Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump vitest and webdriverio #2518

Merged
merged 1 commit into from
Jun 25, 2024
Merged

Conversation

frederikrothenberger
Copy link
Member

@frederikrothenberger frederikrothenberger commented Jun 25, 2024

Upgrading these dependencies fixes dependabot alerts. Requires pinning a specific version of ws though. This should be removed in the future.

Includes changes to the vitest arguments to run tests sequentially, because the options changed in the upgrade to 1.x.x.

Once we update webdriverio we should hopefully transitively get a newer version of ws so that the override is no longer necessary.


🟡 Some screens were changed

Upgrading these dependencies fixes dependabot alerts.
Requires pinning a specific version of `ws` though. This should be
removed in the future.

Includes changes to the vitest arguments to run tests sequentially,
because the options changed in the upgrade to `1.x.x`.
Copy link
Collaborator

@lmuntaner lmuntaner left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, just one comment.

@@ -75,6 +75,9 @@
"ua-parser-js": "^1.0.35",
"zod": "^3.22.3"
},
"overrides": {
"ws": "8.17.1"
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This was necessary in the end?

Which are the packages we need to watch to upgrade to be able to remove this?

Could you add it in the PR description so that we can come back to it to better understand it?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, it was. puppeteer-core seems to be the culprit:

+-- vitest@1.6.0
| `-- jsdom@20.0.3
|   `-- ws@8.17.1 overridden
`-- webdriverio@8.39.0
  +-- devtools@8.39.0
  | `-- puppeteer-core@20.3.0
  |   `-- ws@8.13.0 invalid: "8.17.1" from node_modules/devtools/node_modules/puppeteer-core overridden
  +-- puppeteer-core@20.9.0
  | `-- ws@8.13.0 invalid: "8.17.1" from node_modules/puppeteer-core overridden
  `-- webdriver@8.39.0
    `-- ws@8.17.1 deduped

@frederikrothenberger frederikrothenberger added this pull request to the merge queue Jun 25, 2024
Merged via the queue into main with commit e6c56a0 Jun 25, 2024
65 checks passed
@frederikrothenberger frederikrothenberger deleted the frederik/fix-dependabot branch June 25, 2024 12:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants