chore(deps-dev): bump vitest from 4.1.11 to 5.0.0 #28

	name: Dependabot Lockfile Fix

	on:
	pull_request_target:
	branches: [main]
	types: [opened, synchronize]

	permissions:
	contents: write
	pull-requests: read

	jobs:
	fix-lockfile:
	if: github.actor == 'dependabot[bot]'
	runs-on: ubuntu-latest
	steps:
	- name: Generate App token
	id: app-token
	uses: actions/create-github-app-token@v3
	with:
	app-id: ${{ secrets.APP_ID }}
	private-key: ${{ secrets.APP_PRIVATE_KEY }}

	- name: Checkout PR branch
	uses: actions/checkout@v7
	with:
	ref: ${{ github.head_ref }}
	token: ${{ steps.app-token.outputs.token }}

	- name: Setup Node.js
	uses: actions/setup-node@v7
	with:
	node-version: '22'

	- name: Regenerate lockfile
	run: npm install --package-lock-only --ignore-scripts

	- name: Commit updated lockfile
	run: \|
	git diff --quiet package-lock.json && exit 0
	git config user.name "github-actions[bot]"
	git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
	git add package-lock.json
	git commit -m "fix: regenerate package-lock.json for consistent resolution"
	git push

Navigation Menu