Bump vitest from 2.1.1 to 2.1.9

[renovate-pagopa]

This PR contains the following updates:

Package	Type	Update	Change
vitest (source)	devDependencies	patch	2.1.1 -> 2.1.9

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

For further information on security, please refer to the Confluence page link

---

Release Notes

vitest-dev/vitest (vitest)

v2.1.9

Compare Source

This release includes security patches for:

• Browser mode serves arbitrary files | CVE-2025-24963
• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

   🐞 Bug Fixes

• backport https://github.com/vitest-dev/vitest/issues/7317 to v2 - by @​hi-ogawa in https://github.com/vitest-dev/vitest/pull/7318
• (backport #​7340 to v2) restrict served files from /__screenshot-error - by @​hi-ogawa in https://github.com/vitest-dev/vitest/pull/7343

    View changes on GitHub

v2.1.8

Compare Source

   🐞 Bug Fixes

• Support Node 21  -  by @​sheremet-va (92f7a)

    View changes on GitHub

v2.1.7

Compare Source

   🐞 Bug Fixes

• Revert support for Vite 6  -  by @​sheremet-va (fbe5c)
  • This introduced some breaking changes (https://github.com/vitest-dev/vitest/issues/6992). We will enable support for it later. In the meantime, you can still use pnpm.overrides or yarn resolutions to override the vite version in the vitest package - the APIs are compatible.

    View changes on GitHub

v2.1.6

Compare Source

🚀 Features

• Support Vite 6

    View changes on GitHub

v2.1.5

Compare Source

   🐞 Bug Fixes

• dangerouslyIgnoreUnhandledErrors without base reporter  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6808 (0bf0a)
• Capture unhandledRejection even when base reporter is not used  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6812 (8878b)
• Don't change the working directory when loading workspace projects  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6811 (f0aea)
• Remove sequence.concurrent from the RuntimeConfig type  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6880 (6af73)
• Stop the runner before restarting, restart on workspace config change  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6859 (b01df)
• Don't rerun on Esc or Ctrl-C during watch filter  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6895 (98f76)
• Print ssrTransform error  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6885 (4c96c)
• Throw an error and a warning if .poll, .element, .rejects/.resolves, and locator.* weren't awaited  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6877 (93b67)
• browser:
  • Don't process the default css styles  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6861 (0d67f)
  • Support non US key input  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6873 (5969d)
  • Stop the browser rpc when the pool is closed  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6858 (9a0c9)
  • Init browsers eagerly when tests are running  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6876 (417bd)
• coverage:
  • Report uncovered files when re-run by enter or 'a'  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6848 (487c8)
• ui:
  • Remove crossorigin attributes for same origin assets  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6883 (6e793)
• vite-node:
  • Improve esm check to decide external  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6816 (7e1fa)
  • Top-level throw in module is not reported properly  -  by @​vanaigr and @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6840 (cf0cb)
• vitest:
  • Use fetch() implementation from happy-dom  -  by @​capricorn86 in https://github.com/vitest-dev/vitest/issues/6879 (3c56f)

   🏎 Performance

• Limit workspace project concurrency to available cores  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6869 (f4c04)

    View changes on GitHub

v2.1.4

Compare Source

   🚀 Features

This patch release includes a non-breaking feature for the experimental Browser Mode that doesn't follow SemVer. If you want to avoid picking up releases like this, make sure to pin the Vitest version in your package.json. See npm's documentation about semver for more information.

• browser: Allow custom HTML path, respect plugins transformIndexHtml  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6725 (16902)

   🐞 Bug Fixes

• windows:
  • Don't normalize drive case letter in root  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6792 (b28cd)
• browser:
  • Fix default browser port  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6700 (9c518)
  • Optimize expect-type  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6713 (07918)
  • Don't polyfill process.env  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6718 (da6d2)
  • Increment browser port automatically if there are several projects with browser.enabled  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6717 (a9397)
  • Cleanup keyboard state  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6731 (19278)
  • Don't add v= queries to setup files imports  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6759 (b8258)
  • User event cleanup on retry  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6764 (bdd15)
  • Ignore non mocked msw requests  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6770 (9d9ba)
  • Initiate MSW in the same frame as tests  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6772 (2444f)
• deps:
  • Update dependency sirv to v3  -  in https://github.com/vitest-dev/vitest/issues/6701 (fde5d)
• expect:
  • Correct behavior of toThrowError with empty string parameter  -  by @​shulaoda in https://github.com/vitest-dev/vitest/issues/6710 (a6129)
• mocker:
  • Remove spy from peer dependencies  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6777 (3a8b5)
• vitest:
  • Clarify slowTestThreshold, print slow tests in non-TTY mode  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6715 (2e6aa)
  • Print warnings form Vite plugins  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6724 (121b1)
  • Don't fail if the working directory starts with a lowercase drive letter  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6779 (df6d7)
  • Silence import analysis warning  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6785 (39041)
• vitest,runner:
  • Simplify test.extend type exports  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6707 (e5c38)

   🏎 Performance

• Use hash to replace createHash  -  by @​btea in https://github.com/vitest-dev/vitest/issues/6703 (5d07b)

    View changes on GitHub

v2.1.3

Compare Source

   🐞 Bug Fixes

• Fix error diff of toBeNaN, toBeUndefined, toBeNull, toBeTruthy, toBeFalsy  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6697 (e0027)
• browser:
  • Provide aria role intellisense  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6629 (f36ea)
  • Not.toBeInTheDocument works with locators API  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6634 (8bef5)
  • Use /mockServiceWorker.js instead of /__vitest_msw__  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6687 (4b2ce)
  • Don't override the esbuild option in the browser mode  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6692 (d131f)
• expect:
  • Preserve prototype in toMatchObject diff  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6620 (d289e)
• mocker:
  • Specify correct spy dependency  -  by @​sheremet-va (7e958)
• runner:
  • Ensure sequential suite overrides sequence.concurrent  -  by @​dsyddall and @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6653 (5e6de)
• vitest:
  • Deprecate UserConfig in favor of ViteUserConfig  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6626 (496bd)
  • Don't hang with maxConcurrency 0  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6627 (946d8)
  • Deprecate old task types and node-reliant types  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6632 (00045)
  • Fix <empty line> logs when interleaving console.log/error  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6644 (9ece3)
  • Show rollup error details as test error  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6686 (47dde)
  • Always inline setup files  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6689 (19d64)
  • Use fast-glob instead of tinyglobby in Vitest  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6688 (70baa)
• web-worker:
  • Share mocker with main executor  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6623 (fe7b8)

   🏎 Performance

• Reuse full name in reported tasks, update generator types  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6666 (7a0de)

    View changes on GitHub

v2.1.2

Compare Source

   🐞 Bug Fixes

• Move Vitest.setServer to post configureServer hook to enable import analysis for workspace config loading  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6584 (e7f35)
• benchmark:
  • Clear BenchmarkResult.samples array to reduce memory usage  -  by @​hi-ogawa and @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6541 (a6407)
• browser:
  • Fix dynamic import inside worker  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6569 (ea2d4)
  • Fix browser mock factory event race condition  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6530 (f131f)
  • Serve ui assets as static  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6564 (adcda)
  • Update solidjs testing library lib  -  by @​CamilleTeruel in https://github.com/vitest-dev/vitest/issues/6548 (91442)
  • Use data: protocol on preview provider file upload  -  by @​userquin in https://github.com/vitest-dev/vitest/issues/6501 (e9821)
  • Fix base for client script  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6510 (f9528)
  • Throw an error if "@​vitest/browser/context" is imported outside of the browser mode  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6570 (383f1)
• coverage:
  • Remove empty coverage folder on test failure too  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6547 (1371c)
  • Include *.astro by default  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6565 (f8ff7)
  • cleanOnRerun: false to invalidate previous results  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6592 (88bde)
• expect:
  • Fix toBeDefined with expect.poll  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6562 (f7da6)
• forks:
  • Fix --cpu-prof and --heap-prof not working by default  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/pull/6555 (2e4d894)
• runner:
  • Mark tests as skipped when beforeAll failed  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6524 (fb797)
  • Support fixture parsing of lowered async syntax  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6531 (b553c)
  • Fix fixture parsing of lowered async syntax for non arrow functions  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6575 (3de00)
  • Guard test hook callback  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6604 (14971)
  • Run onTestFinished and onTestFailed during retry and repeats  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6609 (c5e29)
• ui:
  • List tests on ui when --standalone  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6577 (d0bf8)
• vite-node:
  • Fix esm false-detection inside comment  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6506 (91f85)
• vitest:
  • Install dependencies with the same version when prompted  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6611 (ed8b7)
  • Make env.SSR consistent between different pools  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6616 (8a8d3)
  • Don't start a websocket server if api is disabled  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6617 (82140)
• workspace:
  • Fix glob pattern detection  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6502 (7727c)
  • Ignore DS_Store by default  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6571 (d2a86)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.