Skip to content

chore(deps): bump vitest from 4.1.10 to 5.0.0 - #634

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vitest-5.0.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vitest-5.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps vitest from 4.1.10 to 5.0.0.

Release notes

Sourced from vitest's releases.

v5.0.0

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

   🚨 Breaking Changes

... (truncated)

Commits
  • f441c6f chore: release v5.0.0 (#11130)
  • d46a747 fix: treat test.describe as a suite during static collection (#11128)
  • 584cf30 fix: add a warning if inline project has duplicate plugins due to unexpected ...
  • f08ce4b fix: apply queued mocks from doMock() in queue order (fixes #10706) (#11127)
  • 897f51f chore: release v5.0.0-rc.4 (#11107)
  • 1339b06 chore(deps): update all non-major dependencies (#11104)
  • 51e9494 feat!: parse files statically in vitest list by default (#11088)
  • 2122ffd fix: propagate --maxWorkers to projects (#11102)
  • dc10f5f fix(browser): report the action error when a task times out (#11101)
  • d4fe198 feat: promote clearCache out of experimental (#11086)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

RetriggerConfidence Score: 3/5

This PR is not yet safe to merge because it creates an unsupported Vitest/coverage-provider pairing and drops part of the repository's declared Node 22 support.

Findings

  1. P1 Coverage Versions No Longer Match ▶
  2. P1 Node Support Contract Narrows ▶

Summary

  • Updates Vitest and its transitive test-tooling dependency graph.
  • Leaves the v8 coverage provider on the incompatible 4.1.10 major.
  • Adopts Vitest 5's narrower Node runtime requirement without updating the repository's stated Node floor.

Reviews (1) · Last reviewed commit: "chore(deps): bump vitest from 4.1.10 to ..."

Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.1.10 to 5.0.0.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.0/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-version: 5.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the area:dependencies Updating dependencies label Sep 13, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Standing release PR: #614 · v0.42.0 queued (4 packages) · open 42d 19h 29m · ✅ ready to merge

Release Preview — v0.41.2 → v0.41.3

Note: Labels on this PR are advisory in standing-pr mode. Bumps come from conventional commits in the standing PR; override by editing labels on the standing PR itself. Add release:immediate to bypass the standing PR and release this PR directly.

These changes will be added to the release PR (#614) when merged:

Changelog

monorepo 0.41.2 → 0.41.3

Changed

  • bump vitest from 4.1.10 to 5.0.0 (deps)

All packages → 0.41.3 (sync versioning)

  • @releasekit/version
  • @releasekit/notes
  • @releasekit/publish
  • @releasekit/release

After merge — predicted release

No version escalation — this PR's changes will be included in the queued release without affecting the projected versions.

Package Standing PR This PR After merge
monorepo 0.42.0 0.41.3 0.42.0

Updated automatically by ReleaseKit

Comment thread pnpm-workspace.yaml
tsx: ^4.23.1
typescript: ^5.9.3
vitest: ^4.1.10
vitest: ^5.0.0

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Coverage Versions No Longer Match

Upgrading Vitest alone leaves every coverage-enabled test run on an unsupported mixed-major pair. The catalog still installs @vitest/coverage-v8@4.1.10, which requires Vitest 4.1.10, while Vitest 5.0.0 requires coverage-v8 5.0.0. The shared configuration enables the v8 provider, so coverage runs now emit a version-mismatch warning and use an unsupported provider contract. Please upgrade the coverage provider in lockstep with Vitest.

Comment thread pnpm-workspace.yaml
tsx: ^4.23.1
typescript: ^5.9.3
vitest: ^4.1.10
vitest: ^5.0.0

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Node Support Contract Narrows

Vitest 5 requires Node ^22.12.0 || ^24.0.0 || >=26.0.0, but this repository still declares and documents Node 22 generally as supported. Developers using Node 22.0–22.11 therefore meet the repository's stated requirement but cannot run the upgraded test toolchain. Please raise the Node 22 minimum to 22.12 or retain a compatible Vitest version.

@dependabot @github

dependabot Bot commented on behalf of github Oct 3, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #641.

@dependabot dependabot Bot closed this Oct 3, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/vitest-5.0.0 branch October 3, 2026 01:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:dependencies Updating dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants