Oliver Kieselbach 8a53c6233f Web + MCP: vitest 4.1.12 closes the @vitest/mocker advisories (GHSA-qxg6-89mg-rqv8, GHSA-xp26-3454-mjgp) ...

Dev-only. Resolved with --before=2026-10-16 so the bump honours the 7-day
cooldown of dependabot.yml: vite stays 8.3.4 and rolldown 1.2.14, only the
vitest chain moves (plus chai 6.3.0, tinyrainbow 3.2.0, and in MCP
@jridgewell/sourcemap-codec 1.6.0). The libc fields Dependabot wrote for the
@next/swc-linux-* entries in #191 are kept; a local npm 11.8 drops them.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-23 12:09:29 +02:00

..

Agent

Bootstrap MSI 1.4: the action runs only the exact loader the package embeds (SHA-256 baked in at build time)

2026-10-23 02:09:56 +02:00

Backend

ConfigMgr Watcher: the ConfigMgr client check is opt-in per tenant (D-382)

2026-10-23 01:45:22 +02:00

McpServer

Web + MCP: vitest 4.1.12 closes the @vitest/mocker advisories (GHSA-qxg6-89mg-rqv8, GHSA-xp26-3454-mjgp)

2026-10-23 12:09:29 +02:00

Push

Web Push channel: alerts to paired phones without a third-party messenger (#177)

2026-10-08 13:48:42 +02:00

Shared

ConfigMgr Watcher: the ConfigMgr client check is opt-in per tenant (D-382)

2026-10-23 01:45:22 +02:00

Web

Web + MCP: vitest 4.1.12 closes the @vitest/mocker advisories (GHSA-qxg6-89mg-rqv8, GHSA-xp26-3454-mjgp)

2026-10-23 12:09:29 +02:00