Skip to content

chore(deps): update vitest (major) - #291

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-vitest
Open

chore(deps): update vitest (major)#291
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-vitest

Conversation

@renovate

@renovate renovate Bot commented Apr 4, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@vitejs/plugin-react (source) ^4.7.0^6.0.0 age confidence
@vitest/browser (source) ^3.2.4^4.0.0 age confidence
@vitest/coverage-istanbul (source) 3.2.44.1.9 age confidence
@vitest/coverage-v8 (source) ^3.2.4^4.0.0 age confidence
vite (source) ^7.1.12^8.0.0 age confidence
vite (source) ^7.3.1^8.0.0 age confidence
vitest (source) ^3.2.4^4.0.0 age confidence

Release Notes

vitejs/vite-plugin-react (@​vitejs/plugin-react)

v6.0.3

Compare Source

v6.0.2

Compare Source

Allow all options in reactCompilerPreset (#​1189)

This is a type only change. Only compilationMode and target options were available for reactCompilerPreset.

v6.0.1

Compare Source

Expand @rolldown/plugin-babel peer dep range (#​1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

v6.0.0

Compare Source

v5.2.0

Compare Source

v5.1.4

Compare Source

Fix canSkipBabel not accounting for babel.overrides (#​1098)

When configuring babel.overrides without top-level plugins or presets, Babel was incorrectly skipped. The canSkipBabel function now checks for overrides.length to ensure override configurations are processed.

v5.1.3

Compare Source

v5.1.2

Compare Source

v5.1.1

Compare Source

Update code to support newer rolldown-vite (#​976)

rolldown-vite will remove optimizeDeps.rollupOptions in favor of optimizeDeps.rolldownOptions soon. This plugin now uses optimizeDeps.rolldownOptions to support newer rolldown-vite. Please update rolldown-vite to the latest version if you are using an older version.

v5.1.0

Compare Source

Add @vitejs/plugin-react/preamble virtual module for SSR HMR (#​890)

SSR applications can now initialize HMR runtime by importing @vitejs/plugin-react/preamble at the top of their client entry instead of manually calling transformIndexHtml. This simplifies SSR setup for applications that don't use the transformIndexHtml API.

Fix raw Rolldown support for Rolldown 1.0.0-beta.44+ (#​930)

Rolldown 1.0.0-beta.44+ removed the top-level jsx option in favor of transform.jsx. This plugin now uses the transform.jsx option to support Rolldown 1.0.0-beta.44+.

v5.0.4

Compare Source

Perf: use native refresh wrapper plugin in rolldown-vite (#​881)

v5.0.3

Compare Source

HMR did not work for components imported with queries with rolldown-vite (#​872)
Perf: simplify refresh wrapper generation (#​835)

v5.0.2

Compare Source

Skip transform hook completely in rolldown-vite in dev if possible (#​783)

v5.0.1

Compare Source

Set optimizeDeps.rollupOptions.transform.jsx instead of optimizeDeps.rollupOptions.jsx for rolldown-vite (#​735)

optimizeDeps.rollupOptions.jsx is going to be deprecated in favor of optimizeDeps.rollupOptions.transform.jsx.

Perf: skip babel-plugin-react-compiler if code has no "use memo" when { compilationMode: "annotation" } (#​734)
Respect tsconfig jsxImportSource (#​726)
Fix reactRefreshHost option on rolldown-vite (#​716)
Fix RefreshRuntime being injected twice for class components on rolldown-vite (#​708)
Skip babel-plugin-react-compiler on non client environment (689)

v5.0.0

Compare Source

vitest-dev/vitest (@​vitest/browser)

v4.1.9

Compare Source

🐞 Bug Fixes
  • Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in #​10546 (a5180)
  • browser:
    • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in #​10555 (7fb29)
    • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in #​10497 and #​10556 (fbc62)
  • mocker:
    • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in #​10548 (2c955)
  • pool:
    • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in #​10543 and #​10564 (934b0)
View changes on GitHub

v4.1.8

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v4.1.7

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v4.1.6

Compare Source

   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub

v4.1.5

Compare Source

   🚀 Experimental Features
   🐞 Bug Fixes
    View changes on GitHub

v4.1.4

Compare Source

   🚀 Experimental Features
   🐞 Bug Fixes
    View changes on GitHub

v4.1.3

Compare Source

   🚀 Experimental Features
   🐞 Bug Fixes
    View changes on GitHub

v4.1.2

Compare Source

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (#​9975).

   🐞 Bug Fixes
    View changes on GitHub

v4.1.1

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v4.1.0

Compare Source

Vitest 4.1 is out!

This release page lists all changes made to the project during the 4.1 beta. To get a review of all the new features, read our blog post.

   🚀 Features
   🐞 Bug Fixes

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Summary by CodeRabbit

  • Chores
    • Updated development and testing tool versions across the project.
    • Brought the build system and test-related packages to newer major releases, which may improve compatibility and stability.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Apr 4, 2026
@renovate
renovate Bot requested a review from Zeryther as a code owner April 4, 2026 04:32
@changeset-bot

changeset-bot Bot commented Apr 4, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: c029df0

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@vercel

vercel Bot commented Apr 4, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
sdk-harmony Ready Ready Preview, Comment Jul 9, 2026 10:23pm

Request Review

@socket-security

socket-security Bot commented Apr 4, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​vitest/​browser@​4.1.10991007898100
Added@​vitest/​coverage-v8@​4.1.10991007999100
Added@​vitest/​coverage-istanbul@​4.1.9991008298100
Addedvite@​8.1.4971008296100
Added@​vitejs/​plugin-react@​6.0.310010010093100

View full report

@socket-security

socket-security Bot commented Apr 4, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @emnapi/runtime is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yamlnpm/[email protected]npm/@emnapi/[email protected]

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@emnapi/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate
renovate Bot force-pushed the renovate/major-vitest branch from 7202179 to 8a7b0e0 Compare April 6, 2026 08:32
@renovate
renovate Bot force-pushed the renovate/major-vitest branch from 8a7b0e0 to c535937 Compare April 6, 2026 12:34
@renovate
renovate Bot force-pushed the renovate/major-vitest branch from c535937 to 2bdac89 Compare April 7, 2026 12:54
@renovate
renovate Bot force-pushed the renovate/major-vitest branch from 2bdac89 to 5552679 Compare April 7, 2026 17:21
@renovate
renovate Bot force-pushed the renovate/major-vitest branch from 5552679 to 6ea1c14 Compare April 9, 2026 05:21
@renovate
renovate Bot force-pushed the renovate/major-vitest branch from 6ea1c14 to a912c42 Compare April 9, 2026 10:46
@renovate
renovate Bot force-pushed the renovate/major-vitest branch from a912c42 to af3a044 Compare April 20, 2026 05:13
@renovate
renovate Bot force-pushed the renovate/major-vitest branch from af3a044 to a3f56b4 Compare April 21, 2026 13:55
@renovate
renovate Bot force-pushed the renovate/major-vitest branch from a3f56b4 to 5c36c50 Compare April 23, 2026 05:57
@renovate
renovate Bot force-pushed the renovate/major-vitest branch from 5c36c50 to c21598b Compare April 29, 2026 15:54
@renovate
renovate Bot force-pushed the renovate/major-vitest branch from c21598b to 865cd5a Compare May 7, 2026 10:45
@renovate
renovate Bot force-pushed the renovate/major-vitest branch from 865cd5a to 7af2191 Compare May 11, 2026 10:09
@Zeryther
Zeryther force-pushed the renovate/major-vitest branch from c0cf228 to c029df0 Compare July 9, 2026 22:04
@coderabbitai

coderabbitai Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 1eaa4bd1-5bc3-49c7-9b83-b526054e9b22

📥 Commits

Reviewing files that changed from the base of the PR and between 219b481 and c029df0.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (2)
  • package.json
  • packages/harmony/package.json

📝 Walkthrough

Walkthrough

Development dependency versions for Vite, Vitest, coverage tooling, browser testing, and the React Vite plugin are updated in the root and Harmony package manifests.

Changes

Workspace tooling dependency updates

Layer / File(s) Summary
Workspace tooling version alignment
package.json, packages/harmony/package.json
Vite, Vitest, coverage providers, browser testing, and the React Vite plugin are upgraded to newer versions.

Estimated code review effort: 2 (Simple) | ~10 minutes

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately reflects the main dependency update and the major Vitest version bump.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch renovate/major-vitest

Comment @coderabbitai help to get the list of available commands.

@Zeryther

Copy link
Copy Markdown
Member

Holding this one — not merging with the batch. After rebasing onto current main (which now includes the #314 sidebar test), the vitest 4 / vite 8 upgrade breaks pnpm test:

FAIL packages/harmony/src/components/ui/sidebar.test.tsx
Error: Failed to resolve import "@/components/ui/button" from "packages/harmony/src/components/ui/sidebar.tsx"

The harmony suite passes in isolation (npx vitest run inside packages/harmony → 7/7), so the component and alias are fine — the failure is that under vitest 4 + vite 8, harmony's vite.config.ts resolve.alias (@./src) isn't applied in workspace mode. vitest 4 also deprecated vitest.workspace.ts in favor of test.projects. That's a real vitest-4 migration (workspace config + alias), not a mechanical lockfile rebase.

Left open for a deliberate migration. Under the new Renovate policy (#316) vitest is grouped and manual-review anyway, so it won't automerge.

@renovate

renovate Bot commented Jul 18, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant