chore(deps): update pnpm-lock

[ST-DDT]

This PR hopefully fixes the irrelevant warning during push:
https://github.com/faker-js/faker/security/dependabot/16

- vite: 5.0.11(@types/[email protected])
+ vite: 5.0.12(@types/[email protected])

For the future we should let renovate do this, but I just want the warning gone.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (793730a) 99.57% compared to head (a1db63b) 99.56%.

Additional details and impacted files

@@            Coverage Diff             @@
##             next    #2631      +/-   ##
==========================================
- Coverage   99.57%   99.56%   -0.01%     
==========================================
  Files        2807     2807              
  Lines      250452   250452              
  Branches     1152     1147       -5     
==========================================
- Hits       249390   249372      -18     
- Misses       1034     1052      +18     
  Partials       28       28              

see 1 file with indirect coverage changes

[xDivisionByZerox]

For the future we should let renovate do this, but I just want the warning gone.

Isn't u/dependabot the bot that usually creates security auto fix PR's?

[ST-DDT]

I'm not sure why exactly but this is either because it is not a direct dependency, or because we have at least two major versions of that dependency in the lock file.

[Shinigami92]

I'm not sure why exactly but this is either because it is not a direct dependency, or because we have at least two major versions of that dependency in the lock file.

That could be right 🤔
We definitely have one from Vitest and one from VitePress

Normally in that case de-duplication takes place if possible.
I cannot look right now into the change because of mobile screen

---

Edit:

We do have v5 and v4 in our dependency-tree. I'm not totally sure what you are referring to now. Maybe lets talk later on Discord to show and clarify what the problems are.

[ST-DDT]

I'm not totally sure what you are referring to now. Maybe lets talk later on Discord to show and clarify what the problems are.

The issue is that dependabot does not create a fix PR itself and I had to do that myself.

There is no problem with this PR itself.