chore(deps): update vitest monorepo to v4 (major) by renovate[bot] · Pull Request #765 · Kong/spec-renderer

renovate · 2025-12-07T06:45:47Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@vitest/ui (source)	`^3.2.4` → `^4.0.18`
vitest (source)	`3.2.4` → `4.0.18`

Release Notes

vitest-dev/vitest (@vitest/ui)

`v4.0.18`

Compare Source

🚀 Experimental Features

experimental: Add onModuleRunner hook to worker.init - by @sheremet-va in #9286 (ea837)

🐞 Bug Fixes

Use meta.url in createRequire - by @sheremet-va in #9441 (e0572)
browser: Hide injected data-testid attributes - by @sheremet-va in #9503 (f8989)
ui: Process artifact attachments when generating HTML reporter - by @macarie in #9472 (22543)

View changes on GitHub

`v4.0.17`

Compare Source

🚀 Experimental Features

Support openTelemetry for browser mode - by @hi-ogawa in #9180 (1ec3a)
Support TRACEPARENT and TRACESTATE environment variables for OpenTelemetry context propagation - by @Copilot, hi-ogawa and @hi-ogawa in #9295 (876cb)

🐞 Bug Fixes

Improve asymmetric matcher diff readability by unwrapping container matchers - by @Copilot, sheremet-va, hi-ogawa and @hi-ogawa in #9330 (b2ec7)
Improve runner error when importing outside of test context - by @sheremet-va in #9335 (2dd3d)
Replace crypto.randomUUID to allow insecure environments (fix #9… - by @plusgut in #9339 and #9 (e6a3f)
Handle null options in addEventHandler #9371 - by @ThibautMarechal in #9372 and #9371 (40841)
Typo in browser.provider error - by @deammer in #9394 (4b67f)
browser:
- Fix process.env and import.meta.env defines in inline project - by @hi-ogawa in #9239 (b70c9)
- Fix upload File instance - by @hi-ogawa in #9294 (b6778)
- Fix invalid project token for artifacts assets - by @hi-ogawa in #9321 (caa7d)
- Log ErrorEvent.message when unhandled ErrorEvent.error is null - by @hi-ogawa in #9322 (5d84e)
- Support fileParallelism on an instance - by @sheremet-va in #9328 (15006)
coverage:
- Remove unnecessary istanbul-lib-source-maps usage - by @AriPerkkio in #9344 (b0940)
- Apply patch from istanbuljs/istanbuljs#837 - by @AriPerkkio and sapphi-red in #9413 and #837 (e05ce)
fsModuleCache:
- Don't store importers in cache - by @sheremet-va in #9422 (75136)
- Add importers alongside importedModules - by @sheremet-va in #9423 (59f92)
mocker:
- Fix mock transform with class - by @hi-ogawa in #9421 (d390e)
pool:
- Validate environment options when reusing the worker - by @sheremet-va in #9349 (a8a88)
- Handle worker start failures gracefully - by @AriPerkkio in #9337 (200da)
reporter:
- Report test module if it failed to run - by @sheremet-va in #9272 (c7888)
runner:
- Respect nested test.only within describe.only - by @Ujjwaljain16 in #9021 and #9213 (55d5d)
typecheck:
- Improve error message when tsc outputs help text - by @Ujjwaljain16 in #9214 (7b10a)
ui:
- Detect gzip by magic numbers instead of Content-Type header in html reporter - by @Copilot, hi-ogawa and @hi-ogawa in #9278 (dd033)
webdriverio:
- Fall back to WebDriver Classic #9244 - by @JustasMonkev in #9373 and #9244 (c23dd)

View changes on GitHub

`v4.0.16`

Compare Source

🐞 Bug Fixes

Fix browser mode default testTimeout back to 15 seconds - by @hi-ogawa in #9167 (da0ad)
Avoid crashing on process.versions stub - by @AriPerkkio in #9174 (78cfb)
Reject calling suite function inside test - by @hi-ogawa in #9198 (1a259)
Allow inlining fully dynamic import - by @hi-ogawa in #9137 (56851)
Fix module graph UI on html reporter with headless browser mode - by @hi-ogawa in #9219 (60642)
Log deprecated test.poolOptions if it's set - by @sheremet-va in #9226 (f7f6a)
browser:
- Import recordArtifact from the vitest package - by @macarie in #9186 (01c56)
- Fix import.meta.env define - by @hi-ogawa in #9205 (01a9a)
- String formatting bug when including placeholders in console.log - by @michael-debs and @hi-ogawa in #9030 and #9131 (84a30)
coverage:
- Istanbul untested files source maps are off - by @AriPerkkio in #9208 (372e8)
experimental:
- Export setupEnvironment for custom pools - by @AriPerkkio in #9187 (5d26b)

View changes on GitHub

`v4.0.15`

Compare Source

🚀 Experimental Features

cache: Add opt-out on a plugin level, fix internal root cache - by @sheremet-va in #9154 (a68f7)
reporters: Print import duration breakdown - by @sheremet-va in #9105 (122ff)

🐞 Bug Fixes

Keep built-in id as is in bun and deno - by @sheremet-va in #9117 (075ab)
Use optimizeDeps.rolldownOptions to fix depreated warning + fix ssr.external: true - by @hi-ogawa in #9121 (fd8bd)
Fix external behavior with deps.optimizer - by @hi-ogawa in #9125 (4c754)
Very minor typo in "Chrome DevTools Protocol" - by @HowToTestFrontend in #9146 (20997)
browser: Run toMatchScreenshot only once when used with expect.element - by @macarie in #9132 (0d2e7)
coverage: Istanbul provider to not break source maps - by @AriPerkkio in #9040 (e4ca9)
deps: Update dependency tinyexec to v1 - in #9122 (fd786)
docs: Remove --browser.provider from docs - by @sheremet-va in #9115 (120b3)
expect: Preserve currentTestName in extended matchers - by @macarie in #9106 (e4345)
pool: Terminate workers on CTRL+c forceful exits - by @AriPerkkio in #9140 (d57d8)
reporters: Show project in github reporter - by @sheremet-va in #9138 (bb65e)
spy: Do not mock overriden method, if parent was automocked - by @sheremet-va in #9116 (1a246)
web-worker: MessagePort objects passed to Worker.postMessage work when clone === "native" - by @whitphx in #9118 (deee8)

View changes on GitHub

`v4.0.14`

Compare Source

🚀 Experimental Features

browser: Expose utils.configurePrettyDOM - by @sheremet-va in #9103 (2cc34)
runner: Add full names to tasks - by @macarie in #9087 (821aa)
ui: Add tabbed failure view for toMatchScreenshot with comparison slider - by @macarie in #8813 (c37c2)

🐞 Bug Fixes

Externalize before caching - by @sheremet-va in #9077 (e1b2e)
Collect the duration of external imports - by @sheremet-va in #9097 (3326c)
Rename collect to import, remove prepare - by @sheremet-va in #9091 (1256b)
browser:
- Unsubscribe onCancel on rpc destroy - by @AriPerkkio in #9088 (f5b72)
- Revert the viewport scaling in non-ui mode #9018 - by @sheremet-va in #9072 and #9018 (64502)
coverage:
- Invalidate circular modules correctly on rerun with coverage - by @aicest in #9096 (6f22c)
expect:
- Allow function as standard schema - by @hi-ogawa in #9099 (ed8a2)
jsdom:
- Reuse abort signals if possible - by @sheremet-va in #9090 (2c468)
pool:
- Init VITEST_POOL_ID + VITEST_WORKER_ID before environment setup - by @AriPerkkio in #9085 (37918)
web-worker:
- postMessage to send ports to workers - by @whitphx and @AriPerkkio in #9078 (9d176)

🏎 Performance

Replace debug with obug - by @sxzz and @AriPerkkio in #9057 (acc51)

View changes on GitHub

`v4.0.13`

Compare Source

🐞 Bug Fixes

types:
- Don't use type from Vite 7.1 - by @sheremet-va in #9071 (6356b)
- Don't import node.js dependent types in vitest/browser - by @sheremet-va in #9068 (332af)

🏎 Performance

Avoid fetchModule roundtrip if the module is cached - by @sheremet-va in #9075 (b27e0)
experimental: If fsCacheModule is enabled, read from the memory when possible - by @sheremet-va in #9076 (6b9a1)

View changes on GitHub

`v4.0.12`

Compare Source

🐞 Bug Fixes

Inherit fsModuleCachePath by default - by @sheremet-va in #9063 (9a8bc)
Don't import from @opentelemetry/api in public types - by @sheremet-va in #9066 (e944a)

View changes on GitHub

`v4.0.11`

Compare Source

🚀 Experimental Features

api: Add extensible test artifact API - by @macarie in #8987 (77292)
- See more at https://vitest.dev/api/advanced/artifacts
expect: Provide task in MatchState - by @macarie in #9022 (afd1f)
experimental: Support OpenTelemetry traces - by @sheremet-va in #8994 (d6d33)
- See more at https://vitest.dev/guide/open-telemetry

🏎 Performance

experimental: Add file system cache - by @sheremet-va in #9026 (1b147)
- See more at https://vitest.dev/config/experimental#experimental-fsmodulecache

View changes on GitHub

`v4.0.10`

Compare Source

🐞 Bug Fixes

Remove onCancel when worker is terminated - by @sheremet-va in #9033 (6d7f0)
browser:
- Don't scale the iframe if UI is disabled - by @sheremet-va in #9018 (5406e)
- Handle dependency stack traces with external source maps. Resolves: #9003 - by @iclectic in #9016 and #9003 (57ae5)
bun:
- Parsing of stack trace for bun runtime - by @nazarhussain in #9032 (f3ec6)
core:
- Prevent starting new run when cancelling - by @AriPerkkio in #8991 (eb98d)
pool:
- Prevent writing to closed worker - by @AriPerkkio and @sheremet-va in #9023 (042c6)
reporters:
- Report correct test run duration at the end - by @sheremet-va in #8969 (bc3a6)
ui:
- Use execution time from ws reporter (onFinished) - by @userquin in #8975 (f56dc)

View changes on GitHub

`v4.0.9`

Compare Source

🚀 Experimental Features

expect: Add Set support to toBeOneOf - by @tim-we and @sheremet-va in #8906 (a415d)

🐞 Bug Fixes

browser: Add favicon icons to the browser mode ui - by @userquin in #8972 (353ee)
forks: Increase worker start timeout - by @AriPerkkio in #9027 (5e750)
jsdom: Cloned request is an instance of Request - by @sheremet-va in #8985 (506a9)
ui: Collect file/suite/test duration correctly - by @userquin in #8976 (8016d)

View changes on GitHub

`v4.0.8`

Compare Source

🐞 Bug Fixes

Workaround noExternal merging bug on Vite 6 - by @hi-ogawa in #8950 (bcb13)
Missed context.d.ts file - by @termorey in #8965 (9044d)
Incorrect error message for non-awaited expect.element() - by @StyleShit in #8954 (9638d)
browser: Cleanup frame-ancestors from CSP header at coverage middleware - by @userquin in #8941 (1f730)
deps: Update all non-major dependencies - by @sheremet-va in #8636 (da8b9)
forks: Do not fail with Windows Defender enabled - by @sheremet-va in #8967 (c79f4)
runner: Properly encode Uint8Array body in annotations - by @Livan-pro in #8951 (997ca)
spy: Copy static properties if spy is initialised with vi.fn(), fix types for vi.spyOn(obj, class) - by @sheremet-va in #8956 (75e7f)
webdriverio: When no argument is passed to the .click interaction command, the webdriver command should also have no argument - by @julienw in #8937 (069e6)

View changes on GitHub

`v4.0.7`

Compare Source

🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in #8916 (6240d)
Create environment once per worker with isolate: false - by @sheremet-va in #8915 (c9078)
Add Locator as a possible element type in toContainElement() matcher - by @vitalybaev in #8910 and #8927 (35a27)
browser: Inherit isolate option, deprecate browser.isolate/browser.fileParallelism - by @sheremet-va in #8890 (9d2b4)
cli: Parse --execArgv as array - by @AriPerkkio in #8924 (751c3)
jsdom: Support URL.createObjectURL, FormData.set(prop, blob) - by @sheremet-va in #8935 (a1b73)
pool: Avoid --require argument when running in deno - by @pi0 in #8897 (d41fa)
typecheck: Handle re-runs outside tsc - by @AriPerkkio in #8920 (fdb2e)

🏎 Performance

pool:
- Sort test files by project by default - by @AriPerkkio in #8914 (680a6)
reporters:
- Optimize getting the tests stats - by @Connormiha in #8908 (06d62)
- Remove unnecessary Array.from call - by @Connormiha in #8907 (b6014)

View changes on GitHub

`v4.0.6`

Compare Source

🐞 Bug Fixes

Don't merge errors with different diffs for reporting - by @hi-ogawa in #8871 (3e19f)
Do not throw when importing a type from an external package - by @sheremet-va in #8875 (7e6c3)
Improve spying types - by @sheremet-va in #8878 (ca041)
Reuse the same environment when isolate and fileParallelism are false - by @sheremet-va in #8889 (31706)
browser:
- Support module tracking - by @sheremet-va in #8877 (9e24a)
- Ensure setup files are re-evaluated on each test run - by @yjaaidi in #8883 and #8884 (f50ea)
coverage:
- Prevent filtering out virtual files before remapping to sources - by @AriPerkkio in #8860 (e3b77)
happy-dom:
- Properly teardown additional keys - by @sheremet-va in #8888 (10a06)
jsdom:
- Pass down Node.js FormData to Request - by @sheremet-va in #8880 (197ca)

View changes on GitHub

`v4.0.5`

Compare Source

🐞 Bug Fixes

Respect ssr.noExternal when externalizing dependencies - by @sheremet-va in #8862 (a4f86)
Allow module in --config - by @sheremet-va in #8864 (b9521)
browser: Allow Locator type in selectOptions element parameter - by @rzzf and @sheremet-va in #8848 (7ee28)
module-runner: Don't return node builtins for getBuiltins unconditionally - by @sapphi-red in #8863 (0e858)
pool: Rename groupId to groupOrder in error message - by @Yohannfra in #8856 (b9aab)

🏎 Performance

Pass testfiles at once when --no-isolate --maxWorkers=1 - by @AriPerkkio in #8835 (584aa)
expect: Optimize checking the input type - by @Connormiha in #8840 (06968)

View changes on GitHub

`v4.0.4`

Compare Source

🐞 Bug Fixes

browser:
- Correct typo - by @benmccann in #8796 (ede1f)
- Publish a missing context file for webdriverio - by @sheremet-va in #8824 (7c7b6)
mocker:
- Support mocking builtins without node: prefix - by @sheremet-va in #8829 (06208)
pool:
- Runner's error listener causing MaxListenersExceededWarning - by @AriPerkkio in #8820 (d1bff)
- Capture workers stdio to logger - by @AriPerkkio in #8809 (fb95f)
spy:
- Allow classes in vi.mocked utility - by @sheremet-va in #8839 (f8756)
worker:
- Rpc listener leak when isolate: false - by @AriPerkkio in #8821 (573dc)

🏎 Performance

utils: Optimized reducer to avoid creating new objects - by @Connormiha in #8818 (d19ce)

View changes on GitHub

`v4.0.3`

Compare Source

🐞 Bug Fixes

Preserve reporter options from config when CLI reporters override them - by @Copilot and sheremet-va in #8794 (15552)
browser: More stable in-source testing validation - by @sheremet-va in #8793 (62297)
happy-dom: Support fetch globals - by @sheremet-va in #8791 (0fb74)
init: Use correct jsx/tsx extension - by @sheremet-va in #8792 (abc04)

View changes on GitHub

`v4.0.2`

Compare Source

🐞 Bug Fixes

browser:
- Don't print the deprecation notice in node_modules - by @sheremet-va in #8779 (588f7)
pool:
- Assign envs before running tests to keep in sync with process.env - by @sheremet-va in #8769 (26ce8)
spy:
- Properly inherit implementation's length - by @sheremet-va in #8778 (d4c2b)
- Reset spies if both restoreMocks and mockReset is set in the config - by @sheremet-va in #8781 (2eedb)

View changes on GitHub

`v4.0.1`

Compare Source

🐞 Bug Fixes

Move the getBuiltins check - by @sheremet-va in #8765 (81000)
pool: Don't teardown the communication channel too soon if something is running after the test - by @sheremet-va in #8767 (3fae7)

View changes on GitHub

`v4.0.0`

Compare Source

🚨 Breaking Changes

Remove 'basic' reporter - by @AriPerkkio in #7884 (82fcf)
Simplify default exclude pattern - by @sheremet-va in #6287 (14c50)
Remove deprecated getSourceMap - by @sheremet-va in #8194 (ff934)
Replace deprecated ErrorWithDiff with TestError - by @sheremet-va in #8195 (da59e)
Remove UserConfig type in favor of ViteUserConfig - by @sheremet-va in #8196 (22f7f)
Remove deprecated coverage options in favor of vitest/node exports - by @sheremet-va in #8197 (dc848)
Remove deprecated internal helpers and environment exports - by @sheremet-va in #8198 (4703c)
Remove deprecated typecheck and runner types - by @sheremet-va in #8199 (89a1c)
Remove Node types from the main entry point, use vitest/node instead - by @sheremet-va in #8200 (1e60c)
Remove support for Vite 5 - by @sheremet-va in #8202 (cb8b0)
Remove deprecated types - by @sheremet-va in #8203 (66bee)
Remove deprecated environmentMatchGlobs and poolMatchGlobs - by @sheremet-va in #8205 (be11d)
Remove deprecated workspace option in favor of projects - by @sheremet-va in #8218 (76fb7)
Ignore --standalone when CLI filename filter is used - by @AriPerkkio in #8262 (013bf)
Use module-runner instead of vite-node - by @sheremet-va and @AriPerkkio in #8208 (9be01)
Rewrite spying implementation to make module mocking more intuitive - by @sheremet-va in #8363 (9e412)
Remove deprecated APIs - by @sheremet-va in #8428 (a1cb9)
Remove minWorkers and set it automatically to 0 in non watch mode - by @sheremet-va in #8454 (2c2d1)
Verbose reporter prints tests in a list, introduce tree reporter - by @sheremet-va and @AriPerkkio in #8500 (25fd3)
Include shadow root contents in pretty-format output - by @wkillerud in #8545 (9e722)
Remove deprecated order from test() API - by [@sheremet-va](https://red

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) in timezone America/New_York, Automerge - Monday through Friday ( * * * * 1-5 ) in timezone America/New_York.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

kongponents-bot · 2026-01-03T14:29:34Z

🔴 PR audit failed. 🔴

🔥 PNPM Audit issues detected.

┌─────────────────────┬────────────────────────────────────────────────────────┐
│ high                │ qs's arrayLimit bypass in its bracket notation allows  │
│                     │ DoS via memory exhaustion                              │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ Package             │ qs                                                     │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ Vulnerable versions │ <6.14.1                                                │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ Patched versions    │ >=6.14.1                                               │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ Paths               │ .>vite-plugin-node-polyfills>node-stdlib-              │
│                     │ browser>url>qs                                         │
├─────────────────────┼────────────────────────────────────────────────────────┤
│ More info           │ https://github.com/advisories/GHSA-6rw7-vpxm-498p      │
└─────────────────────┴────────────────────────────────────────────────────────┘
1 vulnerabilities found
Severity: 1 high

PR with those issues cannot be merged.

How to resolve:

Check open renovate PRs for updates to the dependencies mentioned in the audit report
try to update dependencies listed in the audit report to the latest versions
use pnpm audit --fix to automatically fix issues

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate · 2026-03-03T08:11:43Z

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 4.x releases. But if you manually upgrade to 4.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

renovate bot added dependencies renovate-bot labels Dec 7, 2025

renovate bot requested review from a team, DariaYeremina, ValeryG, adamdehaven, jillztom and kongponents-bot as code owners December 7, 2025 06:45

renovate bot force-pushed the renovate/major-vitest-monorepo branch 3 times, most recently from 4324fdc to 1286e46 Compare December 23, 2025 06:38

renovate bot force-pushed the renovate/major-vitest-monorepo branch 4 times, most recently from e203c70 to 6f058ca Compare January 3, 2026 06:47

ValeryG previously approved these changes Jan 3, 2026

View reviewed changes

renovate bot dismissed ValeryG’s stale review via fe2f454 January 3, 2026 14:33

renovate bot force-pushed the renovate/major-vitest-monorepo branch 4 times, most recently from fb0b29a to b740f23 Compare January 9, 2026 06:30

renovate bot force-pushed the renovate/major-vitest-monorepo branch from b740f23 to c8de22c Compare January 16, 2026 07:40

renovate bot force-pushed the renovate/major-vitest-monorepo branch 5 times, most recently from b49a181 to 3fd26f8 Compare January 29, 2026 06:41

renovate bot force-pushed the renovate/major-vitest-monorepo branch 2 times, most recently from a766057 to b3b3899 Compare February 6, 2026 07:23

renovate bot force-pushed the renovate/major-vitest-monorepo branch 2 times, most recently from 6e1f8b6 to 8e94342 Compare February 12, 2026 07:16

renovate bot force-pushed the renovate/major-vitest-monorepo branch 4 times, most recently from 5e63b20 to aea1217 Compare February 23, 2026 05:30

chore(deps): update vitest monorepo to v4

c0851f3

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/major-vitest-monorepo branch from aea1217 to c0851f3 Compare February 26, 2026 07:57

sharmaadityaHQ closed this Mar 3, 2026

renovate bot deleted the renovate/major-vitest-monorepo branch March 3, 2026 08:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update vitest monorepo to v4 (major)#765

chore(deps): update vitest monorepo to v4 (major)#765
renovate[bot] wants to merge 1 commit intomainfrom
renovate/major-vitest-monorepo

renovate bot commented Dec 7, 2025 •

edited

Loading

Uh oh!

kongponents-bot commented Jan 3, 2026

Uh oh!

renovate bot commented Mar 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

renovate bot commented Dec 7, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

🚀 Experimental Features

🐞 Bug Fixes

🚀 Experimental Features

🐞 Bug Fixes

🐞 Bug Fixes

🚀 Experimental Features

🐞 Bug Fixes

🚀 Experimental Features

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

🚀 Experimental Features

🏎 Performance

🐞 Bug Fixes

🚀 Experimental Features

🐞 Bug Fixes

🐞 Bug Fixes

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

🐞 Bug Fixes

🐞 Bug Fixes

🚨 Breaking Changes

Configuration

Uh oh!

kongponents-bot commented Jan 3, 2026

🔴 PR audit failed. 🔴

🔥 PNPM Audit issues detected.

Uh oh!

renovate bot commented Mar 3, 2026

Renovate Ignore Notification

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

renovate bot commented Dec 7, 2025 •

edited

Loading