[Snyk] Upgrade vitest from 1.6.1 to 3.0.9 #105
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade vitest from 1.6.1 to 3.0.9.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 51 versions ahead of your current version.
The recommended version was released 22 days ago.
Release notes
Package name: vitest
-
3.0.9 - 2025-03-17
- Typings of
- Cleanup vitest in public
- Fix
- Race condition in RPC filesystem cache. - by @ dts in #7531 (b7f55)
- Fix
- Support custom toString method in %s format - by @ pengooseDev in #7637 (46d93)
- browser:
- Fail playwright timeouts earlier than a test timeout - by @ sheremet-va and @ hi-ogawa in #7565 (5eb4c)
- Remove @ testing-library/dom from dependencies #7555)" - by @ sheremet-va in #7628 and #7555 (94b27)
- coverage:
- Browser mode +
- runner:
- Show stacktrace on hook timeout error - by @ hi-ogawa in #7502 (268a1)
- vite-node:
- Fix source map of inlined node_modules - by @ hi-ogawa in #7557 (34aa3)
- Fix missing
- web-worker:
- Ensure
-
3.0.8 - 2025-03-06
- Fix fetch cache multiple writes - by @ hi-ogawa in #7546 (1a8b4)
- Use browser.isolate instead of config.isolate - by @ sheremet-va in #7560 (4b5ed)
- Remove vestigial spy stub, import directly from
- Correctly split the argv string - by @ btea in #7533 (4325a)
- browser:
- Remove @ testing-library/dom from dependencies - by @ sheremet-va in #7555 (5387a)
- Improve source map handling for bundled files - by @ sheremet-va in #7534 (e2c57)
- Print related test file and potential test in unhandled errors - by @ sheremet-va in #7564 (fee90)
- runner:
- Fix
- Fix and simplify
- snapshot:
- Allow inline snapshot calls on same location with same snapshot - by @ jycouet and @ hi-ogawa in #7464 (d5cb8)
- vite-node:
- Fix
-
3.0.7 - 2025-02-24
- browser: Support webdriverio 9 - by @ sheremet-va in #7553 (b1949)
- deps: Update all non-major dependencies - in #7543 (365ff)
- expect: Correct generic MatchersObject this type in expect.extend - by @ Workingstiff-s in #7526 (d5765)
- mocker: Include more modules to prefix-only module list - by @ btea in #7524 (a12ec)
- spy: Clear/reset/restore mocks in stack order - by @ hi-ogawa in #7499 (f7100)
- browser: Do wdio context switching only once per file - by @ sheremet-va in #7549 (aaa58)
-
3.0.6 - 2025-02-18
- Fix
- Compat for jest-image-snapshot - by @ hi-ogawa in #7390 (9542b)
- Ensure project names are readable in dark terminals - by @ rgrove in #7371 (bb94c)
- Exclude
- Use
- browser:
- Fix mocking modules out of root - by @ hi-ogawa in #7415 (d3acb)
- Fix
- Relax locator selectors methods - by @ sheremet-va in #7422 (1b8c5)
- Resolve thread count from
- Cleanup timeout on resolve and give more information in the error - by @ sheremet-va in #7487 (5a45a)
- coverage:
- Preserve moduleExecutionInfo in non-isolated runs - by @ AriPerkkio in #7486 (f31a0)
- deps:
- Update all non-major dependencies - by @ hi-ogawa in #7363 (e348b)
- Update all non-major dependencies - by @ hi-ogawa in #7507 (6cc40)
- init:
- Invalid browser config - by @ AriPerkkio in #7475 (8fe64)
- reporters:
- Render tasks in tree when in TTY - by @ AriPerkkio in #7503 (027ce)
- vite-node:
- Remove fake first line mapping on Vite 6 - by @ hi-ogawa in #7124 (b9973)
- watch:
- Properly remove cache after removing existing test files - by @ soc221b in #7399 (01a59)
- workspace:
- Forward
-
3.0.5 - 2025-02-03
- Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964
- ui: Insert message "no tests found" in ui - by @ DevJoaoLopes in #7366 (92da4)
- Validate websocket request - by @ hi-ogawa and @ AriPerkkio in #7317 (191ef)
- Don't toggle cli cursor on non-TTY - by @ AriPerkkio in #7336 (3c805)
- vite-node: Differentiate file url with hash and query - by @ hi-ogawa in #7365 (926ca)
-
3.0.4 - 2025-01-23
- Browser mode serves arbitrary files | CVE-2025-24963
- Filter projects eagerly during config resolution - by @ sheremet-va and @ AriPerkkio in #7313 (dff44)
- Apply
- browser: Restrict served files from
- deps: Update all non-major dependencies - by @ sheremet-va in #7297 (38ea8)
- runner: Timeout long sync hook - by @ hi-ogawa in #7289 (c60ee)
- typechecking: Support typechecking parsing with Vite 6 - by @ sheremet-va in #7335 (bff70)
- types: Fix public types - by @ mrginglymus and @ sheremet-va in #7328 (ce6af)
-
3.0.3 - 2025-01-21
- browser:
- Don't throw a validation error if v8 coverage is used with filtered instances - by @ sheremet-va in #7306 (fa463)
- Don't fail when running --browser.headless if the browser projest is part of the workspace - by @ sheremet-va in #7311 (e43a8)
- reporters: Update summary only when needed - by @ AriPerkkio in #7291 (7f36b)
-
3.0.2 - 2025-01-17
- Don't await an empty timeout after every test - by @ sheremet-va in #7281 (ef1aa)
- expect: Fix
-
3.0.1 - 2025-01-16
-
3.0.0 - 2025-01-16
-
3.0.0-beta.4 - 2025-01-08
-
3.0.0-beta.3 - 2024-12-20
-
3.0.0-beta.2 - 2024-12-10
-
3.0.0-beta.1 - 2024-12-05
-
2.2.0-beta.2 - 2024-11-18
-
2.2.0-beta.1 - 2024-11-13
-
2.1.9 - 2025-02-03
- Browser mode serves arbitrary files | CVE-2025-24963
- Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964
- backport #7317 to v2 - by @ hi-ogawa in #7318
- (backport #7340 to v2) restrict served files from
-
2.1.8 - 2024-12-02
-
2.1.7 - 2024-12-02
-
2.1.6 - 2024-11-26
-
2.1.5 - 2024-11-13
-
2.1.4 - 2024-10-28
-
2.1.3 - 2024-10-14
-
2.1.2 - 2024-10-02
-
2.1.1 - 2024-09-13
-
2.1.0 - 2024-09-12
-
2.1.0-beta.7 - 2024-09-09
-
2.1.0-beta.6 - 2024-08-20
-
2.1.0-beta.5 - 2024-08-12
-
2.1.0-beta.4 - 2024-08-07
-
2.1.0-beta.3 - 2024-08-07
-
2.1.0-beta.2 - 2024-08-07
-
2.1.0-beta.1 - 2024-08-07
-
2.0.5 - 2024-07-31
-
2.0.4 - 2024-07-22
-
2.0.3 - 2024-07-15
-
2.0.2 - 2024-07-10
-
2.0.1 - 2024-07-08
-
2.0.0 - 2024-07-08
-
2.0.0-beta.13 - 2024-07-04
-
2.0.0-beta.12 - 2024-06-25
-
2.0.0-beta.11 - 2024-06-19
-
2.0.0-beta.10 - 2024-06-12
-
2.0.0-beta.9 - 2024-06-05
-
2.0.0-beta.8 - 2024-06-04
-
2.0.0-beta.7 - 2024-06-03
-
2.0.0-beta.6 - 2024-06-02
-
2.0.0-beta.5 - 2024-06-02
-
2.0.0-beta.3 - 2024-05-14
-
2.0.0-beta.2 - 2024-05-09
-
2.0.0-beta.1 - 2024-05-09
-
1.6.1 - 2025-02-03
- Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964
- backport #7317 to v1 - by @ hi-ogawa in #7319
from vitest GitHub release notes🐞 Bug Fixes
ctx.skip()asnever- by @ sirlancelot in #7608 (09f35)resolveConfigAPI - by @ hi-ogawa in #7623 (db14a)toHaveBeenCalledWith(asymmetricMatcher)withundefinedarguments - by @ hi-ogawa in #7624 (0fb21)getState().testPathduring collection with no isolation - by @ hi-ogawa in #7640 (3fb3f)coverage.all- by @ AriPerkkio in #7597 (422ba)buildStart- by @ hi-ogawa in #7652 (29f5a)removeEventListeneris bound to worker - by @ joelgallant in #7631 (ff42b)View changes on GitHub
🐞 Bug Fixes
@ vitest/spy- by @ mrginglymus in #7575 (7f7ff)beforeEach/Allcleanup callback timeout - by @ hi-ogawa in #7500 (0c292)Task.suiteinitialization - by @ hi-ogawa in #7414 (ca9ff)buildStarton Vite 6 - by @ hi-ogawa in #7480 (c0f47)View changes on GitHub
🐞 Bug Fixes
🏎 Performance
View changes on GitHub
🐞 Bug Fixes
getMockedSystemTimeforuseFakeTimer- by @ hi-ogawa in #7405 (03912)queueMicrotaskfrom default fake timers to not break node fetch - by @ hi-ogawa in #7505 (167a9)tinyglobbyinstead offast-glob- by @ benmccann in #7504 (b62ac)toHaveClasstyping - by @ hi-ogawa in #7383 (7ef23)maxWorkers- by @ AriPerkkio in #7483 (adbb2)vite-nodeto pass correct execution wrapper offset - by @ AriPerkkio in #7417 (1f2e5)inspectrelated cli options - by @ AriPerkkio in #7373 (ed15b)View changes on GitHub
This release includes security patches for:
🚀 Features
🐞 Bug Fixes
View changes on GitHub
This release includes security patches for:
🐞 Bug Fixes
development|productioncondition on Vites 6 by @ hi-ogawa and @ sheremet-va (#7301) (ef146)/__screenshot-error- by @ hi-ogawa in #7340 (ed9ae)View changes on GitHub
🐞 Bug Fixes
🏎 Performance
View changes on GitHub
🐞 Bug Fixes
expect().resolves/rejectschain typings - by @ hi-ogawa in #7273 (fa415)View changes on GitHub
This release includes security patches for:
🐞 Bug Fixes
/__screenshot-error- by @ hi-ogawa in #7343View changes on GitHub
This release includes security patches for:
🐞 Bug Fixes
View changes on GitHub
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
Summary by Sourcery
Upgrade vitest from version 1.6.0 to 3.0.9
New Features:
Bug Fixes:
Enhancements: