chore(deps): update dependency vitest to v5 by renovate[bot] · Pull Request #566 · boneskull/bupkis

renovate · 2026-09-06T13:05:58Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
vitest (source)	`4.1.11` → `5.0.5`

Release Notes

vitest-dev/vitest (vitest)

`v5.0.5`

Compare Source

🐞 Bug Fixes

Keep vite default fs.deny with api token file - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11578 (28dc1)
Handle quoted file names in --changed - by @sheremet-va in #11583 (14921)
Add data to the import.meta.hot stub - by @sheremet-va in #11590 (3a828)
Set skip in skipIf, ignore undefined options - by @sheremet-va in #11591 (d523a)
Skip builtin loading in async leak detector - by @sheremet-va in #11598 (fe86a)
Keep the import frame in native loader errors - by @sheremet-va in #11599 (9697b)
Run hook cleanups when a later hook fails - by @sheremet-va in #11605 (6c5a4)
Release mocks of finished test files - by @sheremet-va in #11607 (e9c3d)
Abort all running tests on cancel - by @sheremet-va in #11606 (6621a)
browser:
- Ignore synthetic pagehide events - by @sheremet-va in #11582 (ca081)
- Run plugin buildStart on server creation - by @sheremet-va in #11593 (ea611)
- Drop late connections of closed sessions - by @sheremet-va in #11600 (f161e)
- Wait 30s for the browser to close - by @sheremet-va in #11601 (6498b)
- Run global setup once with instances - by @sheremet-va in #11596 (8dd67)
reporter:
- End reason &#39;failed&#39; on worker crash - by @AriPerkkio in #11568 (6ae8e)

View changes on GitHub

`v5.0.4`

Compare Source

🚀 Features

experimental:
- Tag cache directories with CACHEDIR.TAG - by @lifeiscontent in #11461 (a8ea3)
- Support test.ui.theme option - by @sheremet-va in #11499 (1da66)
- Highlight selector multiple matches in trace view - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11489 (5abba)
- Print how many tests were affected and a total when running --changed - by @sheremet-va in #11424 (a2336)
- Add an option to cache dependencies instead of statically parsing them - by @sheremet-va in #11515 (c0601)
- Add fit and zoom controls to trace viewer - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11490 (f5dd9)

🐞 Bug Fixes

Fail the run on git and location filter errors - by @sheremet-va in #11430 (30d03)
Enable fsModuleCache by default - by @sheremet-va in #11435 (ad208)
Track project files and mocks with --changed - by @sheremet-va in #11432 (b0f2b)
Refactor caching, fix : in project and change the shape of results cache - by @sheremet-va in #11453 (9673c)
Keep full $ string values when taskTitleValueFormatTruncate is 0 - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11485 (4f7e1)
Resolve node builtins in client environments - by @sheremet-va in #11417 (56b31)
Fix module graph builtin externals after #11421 - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11491 and #11421 (008e1)
Wrap module mocks during in-source testing - by @sheremet-va in #11505 (36d19)
Handle line endings in snapshot - by @sheremet-va in #11522 (4c468)
Respect root in projects - by @sheremet-va in #11521 (26642)
Resolve mocks in directories with spaces - by @sheremet-va in #11539 (caaef)
api:
- Publish the api token atomically - by @umairnawaz333 in #11323 (6f990)
browser:
- Close the mock route interception race - by @cplieger and @sheremet-va in #8339 and #11083 (d6620)
- Allow toHaveTextContent without arguments - by @nomadical in #11425 (8ebcf)
- Apply API options without browser config - by @sheremet-va in #10852 (ad055)
- Preserve undefined command arguments - by @sheremet-va and @AriPerkkio in #11497 (1576d)
- Wait for setup mocks before importing a test file - by @kasperpeulen in #11520 (b61d1)
- Avoid extra scroll outside the iframe - by @sheremet-va in #11523 (662e8)
- Run browser instances as workers - by @sheremet-va in #11525 (bf04b)
  - ⚠️ This can degrade performance if you have a custom maxWorkers setting. Previously, it was applied incorrectly and could lead to Vitest using too many resources. For example, a lower number would still open too many browsers. Fixing it means Vitest opens less instances by default now.
- Open one cdp session per tester - by @sheremet-va in #11542 (69e63)
- Clean up unmocked and pending mocks - by @sheremet-va in #11537 (5c955)
coverage:
- V8 browser memory leak between test files - by @AriPerkkio in #11466 (2297d)
- allowExternal fails to include uncovered files - by @AriPerkkio in #11513 (4ef00)
- Filenames containing brackets incorrectly showing as uncovered - by @AriPerkkio in #11531 (0fa80)
- Istanbul coverage wrong when module transform warmups - by @AriPerkkio in #11529 (9f61d)
deps:
- Update all non-major dependencies - by @sheremet-va in #11167 (c74e0)
expect:
- Fix Map and Set deep equality in some assertions - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11402 (b4e79)
- Check value in chai-style returned - by @sheremet-va in #11500 (1aca0)
mocker:
- Fix native loader mocking edge cases - by @sheremet-va in #11540 (cd423)
pretty-format:
- Support boxed symbols - by @lehni in #11445 and #11446 (eba44)
reporters:
- Junit to strip ANSI sequences from all XML attributes - by @meganemura and Claude Opus 5.5 in #11407 (e1a73)
runner:
- Don't cache failed fixture setups - by @hamed-bavar in #11237 and #11238 (4ee66)
typecheck:
- Use typescript pool in toTestSpecification - by @sheremet-va in #11451 (5f273)
ui:
- Remove duplicate browser-open call opening two tabs - by @feastyr69 in #11356 and #11358 (d7e13)
- Simplify explorer filtering + fix nested tests when search matches a suite - by @hi-ogawa, Hiroshi Ogawa, Codex and Claude Opus 5.5 in #11262 (a627b)
- Store module graph once per environment - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11421 (af903)
- Mount index.html handler on the ui base path - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11517 (1bc24)
- Center split pane resize handle - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in #11506 (e658b)
vm:
- Bind this to module.exports - by @sheremet-va in #11504 (b618a)

🏎 Performance

Reuse fsModuleCache when filtering by source - by @sheremet-va in #11428 (7ebd9)
spy: Reset only mocks that were called or reconfigured - by @johan-gorter and Claude Opus 5.5 in #11197 (28ef9)

View changes on GitHub

`v5.0.3`

Compare Source

🐞 Bug Fixes

Isolate result.status between repeats runs - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in #11218 (5dbeb)
Don't print an interceptor warning in browser mode - by @sheremet-va in #11377 (15cc0)
Don't retry when test.fails expectedly failed - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in #11219 (b2458)
Scope cache key generators to projects - by @ecoyoung in #11281 and #11301 (92ba7)
browser:
- Delay server listen until tests start running - by @sheremet-va in #11366 (7d8ed)
- Check mock path boundaries - by @saryn17, Ryosei Sato and @sheremet-va in #11361 and #11362 (1c388)
- Keep config of browser-consumed environments - by @kasperpeulen and Claude in #11378 (aafc0)
- Ignore page crash while cancelling - by @sheremet-va in #11386 (7c367)
- toMatchScreenshot uses wrong reference on retried tests - by @macarie in #11393 (c22ab)
cache:
- Revalidate imports of cached modules - by @sheremet-va in #11381 (38f98)
deps:
- Pin why-is-node-running to 3.2.1 to avoid users running into ERR_PNPM_TRUST_DOWNGRADE - by @AriPerkkio in #11403 (f6c9a)
expect:
- Pass current equality testers to expect.extend asymmetric matchers - by @hi-ogawa, Hiroshi Ogawa and Claude in #11401 (3e794)
jsdom:
- Support Blob on jsdom 30.1 - by @sheremet-va in #11379 (6c49b)
pool:
- Preserve unique pool ids when groupOrder is set - by @mtorp in #11392 (50312)
ui:
- Split-pane handle overlapping iframe - by @macarie in #11221 (f91db)
vitest:
- Remove root temp dir on close - by @abhinav-phi in #11248 (7c711)
vm:
- Do not optimize deps from index.html - by @ezefernandezyf, Hiroshi Ogawa and Codex (GPT-6) in #11329 and #11360 (caf28)
- Don't reuse scripts across vite environments - by @MO2k4, Martin Oehlert and Claude in #11395 (346d3)

View changes on GitHub

`v5.0.2`

Compare Source

🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in #11343 (0b792)
detect-async-leaks:
- Ignore process.stdio handles - by @AriPerkkio in #11333 (0fd6b)
expect:
- Fix toMatchObject with asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in #11100 (42523)
jsdom:
- Fix Request with Blob body on jsdom 28+ - by @harshit-d3v in #11295 (d1c3e)
reporter:
- agent to respect --silent - by @Raj4478 and @AriPerkkio in #11271 (5b95e)
reporters:
- Handle concurrent createReport calls - by @7rulnik in #11278 (e8e55)
- hanging-process to use ESM entrypoint - by @AriPerkkio in #11316 (4e91e)
spy:
- Fix stack overflow when spying Set.prototype.add - by @fengmk2 in #11299 (a0a93)
ui:
- Persist authentication cookie beyond current browser session - by @hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #11066 (f8819)

View changes on GitHub

`v5.0.1`

Compare Source

🚀 Features

ui:
- Move trace attempts selector to viewer header - by @hi-ogawa, Hiroshi Ogawa and Codex in #11189 (5dc4b)
- Add focused trace view layout mode - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in #11190 (376dc)

🐞 Bug Fixes

Exit 1 when vitest list fails collection - by @hamed-bavar in #11145 and #11146 (6108b)
Keep parse error details in static collection - by @hamed-bavar in #11150 and #11151 (7c818)
Avoid recursive prototype in automocking - by @sheremet-va in #11195 (99fc5)
Prevent false Vitest import resolution - by @sheremet-va in #11196 (b426c)
Keep metadata file when clearing the cache - by @sheremet-va in #11199 (73614)
Correct typos in error message and comments - by @shinji00222 and Shinji in #11187 (115c3)
Resolve ResolvedConfig exactOptionalPropertyTypes errors - by @LukeAbby in #11175 (498fb)
Share the server on self-referencing extends - by @sheremet-va in #11034 (23dda)
Warn when deprecated deps.optimizer.web is used - by @im10furry in #11214 (2ce29)
browser:
- Avoid double quotes in config.define - by @sheremet-va in #11198 (972e2)
doctor:
- Measure vm pools for custom environments - by @sheremet-va in #11212 (91ab1)
expect:
- Correct return value in toMatchAriaSnapshot - by @sheremet-va in #11208 (c119b)
fakeTimers:
- Force queueMicrotask and nextTick in toNotFake - by @kingmakeruix, kingmakeruix, Hiroshi Ogawa, Codex and @hi-ogawa in #11261 (a47d7)
snapshot:
- Report obsolete keys next to skipped tests - by @hamed-bavar, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #11157 and #11158 (17e2b)
types:
- Make public declarations self-contained - by @ZoeySigel in #11141 (45546)
ui:
- Fix collapse/expand suite with file name search - by @hi-ogawa, Hiroshi Ogawa and Codex in #11260 (0a712)
- Fix explorer file summary count - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in #11125 (05982)
utils:
- Fix deepMerge to handle prototype - by @hi-ogawa, Hiroshi Ogawa and Codex in #11215 (4944c)

View changes on GitHub

`v5.0.0`

Compare Source

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

🚨 Breaking Changes

Replace loupe.inspect with pretty-format - by @hi-ogawa, Claude Opus 5 (1M context) and OpenAI Codex in #9609 (3f802)
Remove quotes from string values in test.for/each title $ variable (take 2) - by @hi-ogawa in #10170 (04d37)
Default attachmentsDir from .vitest-attachements/ to .vitest/attachments/ - by @MdSadiqMd in #10186 (1ba73)
Remove sequential test/suite options in favor of concurrent - by @hi-ogawa and OpenAI Codex in #10198 (9229f)
Represent locator as an object instead of a string - by @sheremet-va in #10212 (80f07)
Inline expect package - by @sheremet-va in #10221 (ad162)
Remove deprecated entry points - by @sheremet-va in #10222 (994c6)
Require Node.js 22 and Vite 6.4 - by @sheremet-va in #10178 (38762)
Fail expect.poll when function didn't resolve in time - by @hi-ogawa and OpenAI Codex in #10233 (4df04)
Throw an error if hoistable methods are outside the top level scope - by @sheremet-va in #10460 (d0b4f)
toHaveTextContent is strict, add toMatchTextContent as alternative - by @sheremet-va in #10473 (18f30)
Don't lookup config file from ancestor directories - by @hi-ogawa, OpenAI Codex and Hiroshi Ogawa in #10428 (945d9)
Inline @vitest/runner package, do not publish it anymore - by @sheremet-va in #10511 (6d6e4)
Allow mutating happy-dom/jsdom window object - by @hi-ogawa, Hiroshi Ogawa and OpenAI Codex in #10373 (206e8)
Expose concurrencyId/workerId on TestModule's diagnostics, make id 1-based - by @sheremet-va in #10516 (bdd98)
Add screenshotDirectory config to browser.expect.toMatchScreenshot - by @macarie in #10592 (a60de)
Update @sinonjs/fake-timers and support mocking Temporal - by @hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #10654 (f8b15)
Remove webdriverio package - by @sheremet-va in #10675 (5fed6)
Clear mocks by default before each test - by @sheremet-va in #10613 (0f646)
Don't emit localStorage warnings on Node 26, fail gracefully when worker fails to start - by @sheremet-va in #10293 (334ed)
Separate config resolution from the server creation - by @sheremet-va in #10554 (1c0ec)
Inline projects extend the root config by default - by @sheremet-va in #10750 (fec00)
Enable mocking Temporal without fake timers - by @fabon-f, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #10757 (ac2d4)
Support nested projects - by @sheremet-va in #10846 (ec367)
Use > as separator in -t, calculate only once - by @sheremet-va in #10686 (a0b20)
Fail the test when an asynchronous assertion is not awaited - by @sheremet-va in #10868 (86d4a)
Share the Vite server between inline projects - by @sheremet-va in #10848 (d87c9)
Parse files statically in vitest list by default - by @sheremet-va in #11088 (51e94)
benchmark:
- Rewrite the public API - by @sheremet-va in #10113 (19f6e)
browser:
- Iframe scale - by @macarie in #9745 (b6398)
- Enable locators.exact by default - by @sheremet-va in #10430 (e2032)
- Require sessionId for orchestrator html request - by @hi-ogawa, Hiroshi Ogawa and OpenAI Codex in #10522 (79b7d)
- Save failure screenshots in attachmentsDir - by @macarie in #10917 (3b5bb)
coverage:
- include/exclude globs too eager - by @AriPerkkio in #9818 (edacb)
- Allow thresholds.perFile to accept an object - by @vladlenskiy and @AriPerkkio in #10190 (13b78)
expect:
- Fix toThrow("") behavior by reverting #6710 - by @hi-ogawa in #9643 and #6710 (6c3e4)
mocker:
- Deserialize automock as automock - by @nami8824 in #10192 (2f892)
reporters:
- blob reporter and --merge-reports default to .vitest/blob/ - by @AriPerkkio in #10232 (d22b0)
- Write json and junit reporter output files to .vitest by default - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and @AriPerkkio in #10621 (58577)
spy:
- Preserve class mock prototype methods on instances - by @sheremet-va in #10910 (6093d)
types:
- Add better promise support in expects and matchers - by @samchungy and @sheremet-va in #8266 (41f55)
ui:
- Harden UI API access - by @hi-ogawa, Hiroshi Ogawa and OpenAI Codex in #10583 (4c26d)
- Change html reporter default output to .vitest - by @hi-ogawa and Hiroshi Ogawa in #10620 (29c36)

🚀 Features

Add createReport and .vitest report directory convention - by @AriPerkkio in #9993 (72a6d)
Expose default reporters through configDefaults.reporters - by @hi-ogawa and Claude Opus 5 (1M context) in #10219 (083f6)
Support merge reports for non-sharded multi-environment runs (take 2) - by @hi-ogawa, Claude Opus 5 (1M context), OpenAI Codex and @AriPerkkio in #10031 (e60b2)
Add logger.formatError - by @hi-ogawa and OpenAI Codex in #10268 (2c5f3)
Support typescript build mode - by @lishaduck in #9870 (106da)
Add toggable injectCjsGlobals option - by @sheremet-va in #10709 (82671)
Promote fsModuleCache to a top-level option - by @sheremet-va in #10734 (78ed7)
Support non-ascii characters in for/each title placeholders - by @k-yle in #10773 (15e0a)
Report the duration breakdown as percentages - by @sheremet-va and @AriPerkkio in #10820 (c67d2)
Promote parseSpecifications out of experimental - by @sheremet-va in #11087 (b628c)
Promote clearCache out of experimental - by @sheremet-va in #11086 (d4fe1)
api:
- Expose logs recorded during the test - by @sheremet-va in #10277 (cba20)
benchmark:
- Add pluggable benchmark provider API - by @GuillaumeLagrange and @sheremet-va in #10799 (86c70)
browser:
- Export aria tree utils - by @hi-ogawa in #10171 (c3423)
- Support dom snapshot trace view - by @hi-ogawa, Claude Opus 5 (1M context) and OpenAI Codex in #10102 (7eddd)
- Provide project reference in ToMatchScreenshotResolvePath - by @macarie and @sheremet-va in #10138 (16654)
- Show aria tree on locator element error - by @hi-ogawa and OpenAI Codex in #10257 (04f04)
- Support custom kind in page.mark - by @AriPerkkio in #10302 (053e8)
- Live update trace view on watch UI - by @hi-ogawa and OpenAI Codex in #10296 (78c11)
- Add context.mark for custom command tracing - by @AriPerkkio in #10329 (aa514)
- Show trace view steps in editor panel - by @hi-ogawa and OpenAI Codex in #10404 (8c4b6)
- Display nested mark trace in UI - by @hi-ogawa, Hiroshi Ogawa and OpenAI Codex in #10437 (86ffc)
cli:
- Add --repeats CLI option - by @todor-a in #10504 (ee48b)
- Support -p shorthand for --project - by @sheremet-va in #10826 [(1addd)](https://redirect.github

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-09-06T13:06:30Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	vitest@4.1.11 ⏵ 5.0.5			⁺¹

View full report

renovate Bot added the dependencies dep upgrades, adds, removals label Sep 6, 2026

renovate Bot requested a review from boneskull as a code owner September 6, 2026 13:05

github-actions Bot added the chore tooling & overhead label Sep 6, 2026

renovate Bot force-pushed the renovate/major-vitest-monorepo branch 2 times, most recently from 3129f52 to 065bb29 Compare September 9, 2026 16:48

renovate Bot force-pushed the renovate/major-vitest-monorepo branch 3 times, most recently from b75fd86 to 86f7c8d Compare September 21, 2026 21:45

renovate Bot force-pushed the renovate/major-vitest-monorepo branch 5 times, most recently from 2d4c1db to d2a52a4 Compare October 1, 2026 14:47

renovate Bot force-pushed the renovate/major-vitest-monorepo branch 2 times, most recently from a826a69 to f734015 Compare October 5, 2026 16:52

renovate Bot force-pushed the renovate/major-vitest-monorepo branch 2 times, most recently from ba269d4 to 19b10da Compare October 15, 2026 10:46

chore(deps): update dependency vitest to v5

2c7a3c6

renovate Bot force-pushed the renovate/major-vitest-monorepo branch from 19b10da to 2c7a3c6 Compare October 18, 2026 16:28

Navigation Menu

Repository navigation

chore(deps): update dependency vitest to v5 - #566

chore(deps): update dependency vitest to v5#566
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-vitest-monorepo

renovate Bot commented Sep 6, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 6, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Sep 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🚨 Breaking Changes

🚀 Features

Configuration

Uh oh!

socket-security Bot commented Sep 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Sep 6, 2026 •

edited

Loading

socket-security Bot commented Sep 6, 2026 •

edited

Loading