Skip to content

Fix CVE-2026-47429 by updating vitest to patched version#750

Draft
sbouchet wants to merge 4 commits into
che-incubator:mainfrom
sbouchet:CVE-2026-47429
Draft

Fix CVE-2026-47429 by updating vitest to patched version#750
sbouchet wants to merge 4 commits into
che-incubator:mainfrom
sbouchet:CVE-2026-47429

Conversation

@sbouchet

@sbouchet sbouchet commented Jul 8, 2026

Copy link
Copy Markdown
Collaborator

What does this PR do?

This PR fixes CVE-2026-47429.
vitest version is updated to 3.2.6

What issues does this PR fix?

https://redhat.atlassian.net/browse/CRW-11671

How to test this PR?

Does this PR contain changes that override default upstream Code-OSS behavior?

  • the PR contains changes in the code folder (you can skip it if your changes are placed in a che extension )
  • the corresponding items were added to the CHANGELOG.md file
  • rules for automatic git rebase were added to the .rebase folder

sbouchet and others added 4 commits July 6, 2026 16:17
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Stephane Bouchet <sbouchet@redhat.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Stephane Bouchet <sbouchet@redhat.com>
Signed-off-by: Stephane Bouchet <sbouchet@redhat.com>
Move vitest version pins from .rebase/replace/ (text replacement) to
.rebase/override/ (JSON merge) under the correct devDependencies
section. This follows the convention that package.json version changes
should use the JSON merge mechanism, not text replacement.

Signed-off-by: Stephane Bouchet <sbouchet@redhat.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@github-actions

github-actions Bot commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

Click here to review and test in web IDE: Contribute

@tolusha

tolusha commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

Hi! I'm che-ai-assistant — I help with your pull requests.

Available commands:

  • /che-ai-assistant generate-che-doc — Generate a documentation PR based on this PR's changes
  • /che-ai-assistant ok-pr-review — Run a comprehensive PR review (summary, code review, deep review, impact analysis)
  • /che-ai-assistant check-pr-test-failures — Analyze failing CI checks, identify root causes, and suggest fixes
  • /che-ai-assistant help — Show this help message

@github-actions

github-actions Bot commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants