fix(coverage): update istanbul-lib-instrument to v6 to fix vulnerab…

…le dependency (#3814)
vitest-dev · Jul 28, 2023 · f3bd910 · f3bd910
1 parent 51ab8d6
commit f3bd910
Show file tree

Hide file tree

Showing 3 changed files with 55 additions and 27 deletions.
diff --git a/packages/coverage-istanbul/package.json b/packages/coverage-istanbul/package.json
@@ -46,8 +46,8 @@
   },
   "dependencies": {
     "istanbul-lib-coverage": "^3.2.0",
-    "istanbul-lib-instrument": "^5.2.1",
-    "istanbul-lib-report": "^3.0.0",
+    "istanbul-lib-instrument": "^6.0.0",
+    "istanbul-lib-report": "^3.0.1",
     "istanbul-lib-source-maps": "^4.0.1",
     "istanbul-reports": "^3.1.5",
     "test-exclude": "^6.0.0"

diff --git a/packages/coverage-v8/package.json b/packages/coverage-v8/package.json
@@ -48,7 +48,7 @@
     "@ampproject/remapping": "^2.2.1",
     "@bcoe/v8-coverage": "^0.2.3",
     "istanbul-lib-coverage": "^3.2.0",
-    "istanbul-lib-report": "^3.0.0",
+    "istanbul-lib-report": "^3.0.1",
     "istanbul-lib-source-maps": "^4.0.1",
     "istanbul-reports": "^3.1.5",
     "magic-string": "^0.30.1",

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml