chore(deps): Update npm-server (major)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@types/better-sqlite3 (source)	^7.6.13 → ^9.0.0
@vitest/coverage-v8 (source)	^4.1.11 → ^5.0.0
better-sqlite3	^12.10.0 → ^13.0.0
typescript (source)	^6.0.2 → ^7.0.0
vitest (source)	^4.1.11 → ^5.0.0

---

Release Notes

vitest-dev/vitest (@​vitest/coverage-v8)

v5.0.0

Compare Source

   🚨 Breaking Changes

• Replace loupe.inspect with pretty-format  -  by @​hi-ogawa, Claude Opus 5 (1M context) and OpenAI Codex in #​9609 (3f802)
• Remove quotes from string values in test.for/each title $ variable (take 2)  -  by @​hi-ogawa in #​10170 (04d37)
• Default attachmentsDir from .vitest-attachements/ to .vitest/attachments/  -  by @​MdSadiqMd in #​10186 (1ba73)
• Remove sequential test/suite options in favor of concurrent  -  by @​hi-ogawa and OpenAI Codex in #​10198 (9229f)
• Represent locator as an object instead of a string  -  by @​sheremet-va in #​10212 (80f07)
• Inline expect package  -  by @​sheremet-va in #​10221 (ad162)
• Remove deprecated entry points  -  by @​sheremet-va in #​10222 (994c6)
• Require Node.js 22 and Vite 6.4  -  by @​sheremet-va in #​10178 (38762)
• Fail expect.poll when function didn't resolve in time  -  by @​hi-ogawa and OpenAI Codex in #​10233 (4df04)
• Throw an error if hoistable methods are outside the top level scope  -  by @​sheremet-va in #​10460 (d0b4f)
• toHaveTextContent is strict, add toMatchTextContent as alternative  -  by @​sheremet-va in #​10473 (18f30)
• Don't lookup config file from ancestor directories  -  by @​hi-ogawa, OpenAI Codex and Hiroshi Ogawa in #​10428 (945d9)
• Inline @vitest/runner package, do not publish it anymore  -  by @​sheremet-va in #​10511 (6d6e4)
• Allow mutating happy-dom/jsdom window object  -  by @​hi-ogawa, Hiroshi Ogawa and OpenAI Codex in #​10373 (206e8)
• Expose concurrencyId/workerId on TestModule's diagnostics, make id 1-based  -  by @​sheremet-va in #​10516 (bdd98)
• Add screenshotDirectory config to browser.expect.toMatchScreenshot  -  by @​macarie in #​10592 (a60de)
• Update @sinonjs/fake-timers and support mocking Temporal  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​10654 (f8b15)
• Remove webdriverio package  -  by @​sheremet-va in #​10675 (5fed6)
• Clear mocks by default before each test  -  by @​sheremet-va in #​10613 (0f646)
• Don't emit localStorage warnings on Node 26, fail gracefully when worker fails to start  -  by @​sheremet-va in #​10293 (334ed)
• Separate config resolution from the server creation  -  by @​sheremet-va in #​10554 (1c0ec)
• Inline projects extend the root config by default  -  by @​sheremet-va in #​10750 (fec00)
• Enable mocking Temporal without fake timers  -  by @​fabon-f, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​10757 (ac2d4)
• Support nested projects  -  by @​sheremet-va in #​10846 (ec367)
• Use > as separator in -t, calculate only once  -  by @​sheremet-va in #​10686 (a0b20)
• Fail the test when an asynchronous assertion is not awaited  -  by @​sheremet-va in #​10868 (86d4a)
• Share the Vite server between inline projects  -  by @​sheremet-va in #​10848 (d87c9)
• Parse files statically in vitest list by default  -  by @​sheremet-va in #​11088 (51e94)
• benchmark:
  • Rewrite the public API  -  by @​sheremet-va in #​10113 (19f6e)
• browser:
  • Iframe scale  -  by @​macarie in #​9745 (b6398)
  • Enable locators.exact by default  -  by @​sheremet-va in #​10430 (e2032)
  • Require sessionId for orchestrator html request  -  by @​hi-ogawa, Hiroshi Ogawa and OpenAI Codex in #​10522 (79b7d)
  • Save failure screenshots in attachmentsDir  -  by @​macarie in #​10917 (3b5bb)
• coverage:
  • include/exclude globs too eager  -  by @​AriPerkkio in #​9818 (edacb)
  • Allow thresholds.perFile to accept an object  -  by @​vladlenskiy and @​AriPerkkio in #​10190 (13b78)
• expect:
  • Fix toThrow("") behavior by reverting #​6710  -  by @​hi-ogawa in #​9643 and #​6710 (6c3e4)
• mocker:
  • Deserialize automock as automock  -  by @​nami8824 in #​10192 (2f892)
• reporters:
  • blob reporter and --merge-reports default to .vitest/blob/  -  by @​AriPerkkio in #​10232 (d22b0)
  • Write json and junit reporter output files to .vitest by default  -  by @​hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and @​AriPerkkio in #​10621 (58577)
• spy:
  • Preserve class mock prototype methods on instances  -  by @​sheremet-va in #​10910 (6093d)
• types:
  • Add better promise support in expects and matchers  -  by @​samchungy and @​sheremet-va in #​8266 (41f55)
• ui:
  • Harden UI API access  -  by @​hi-ogawa, Hiroshi Ogawa and OpenAI Codex in #​10583 (4c26d)
  • Change html reporter default output to .vitest  -  by @​hi-ogawa and Hiroshi Ogawa in #​10620 (29c36)

   🚀 Features

• Add createReport and .vitest report directory convention  -  by @​AriPerkkio in #​9993 (72a6d)
• Expose default reporters through configDefaults.reporters  -  by @​hi-ogawa and Claude Opus 5 (1M context) in #​10219 (083f6)
• Support merge reports for non-sharded multi-environment runs (take 2)  -  by @​hi-ogawa, Claude Opus 5 (1M context), OpenAI Codex and @​AriPerkkio in #​10031 (e60b2)
• Add logger.formatError  -  by @​hi-ogawa and OpenAI Codex in #​10268 (2c5f3)
• Support typescript build mode  -  by @​lishaduck in #​9870 (106da)
• Add toggable injectCjsGlobals option  -  by @​sheremet-va in #​10709 (82671)
• Promote fsModuleCache to a top-level option  -  by @​sheremet-va in #​10734 (78ed7)
• Support non-ascii characters in for/each title placeholders  -  by @​k-yle in #​10773 (15e0a)
• Report the duration breakdown as percentages  -  by @​sheremet-va and @​AriPerkkio in #​10820 (c67d2)
• Promote parseSpecifications out of experimental  -  by @​sheremet-va in #​11087 (b628c)
• Promote clearCache out of experimental  -  by @​sheremet-va in #​11086 (d4fe1)
• api:
  • Expose logs recorded during the test  -  by @​sheremet-va in #​10277 (cba20)
• benchmark:
  • Add pluggable benchmark provider API  -  by @​GuillaumeLagrange and @​sheremet-va in #​10799 (86c70)
• browser:
  • Export aria tree utils  -  by @​hi-ogawa in #​10171 (c3423)
  • Support dom snapshot trace view  -  by @​hi-ogawa, Claude Opus 5 (1M context) and OpenAI Codex in #​10102 (7eddd)
  • Provide project reference in ToMatchScreenshotResolvePath  -  by @​macarie and @​sheremet-va in #​10138 (16654)
  • Show aria tree on locator element error  -  by @​hi-ogawa and OpenAI Codex in #​10257 (04f04)
  • Support custom kind in page.mark  -  by @​AriPerkkio in #​10302 (053e8)
  • Live update trace view on watch UI  -  by @​hi-ogawa and OpenAI Codex in #​10296 (78c11)
  • Add context.mark for custom command tracing  -  by @​AriPerkkio in #​10329 (aa514)
  • Show trace view steps in editor panel  -  by @​hi-ogawa and OpenAI Codex in #​10404 (8c4b6)
  • Display nested mark trace in UI  -  by @​hi-ogawa, Hiroshi Ogawa and OpenAI Codex in #​10437 (86ffc)
• cli:
  • Add --repeats CLI option  -  by @​todor-a in #​10504 (ee48b)
  • Support -p shorthand for --project  -  by @​sheremet-va in #​10826 (1addd)
• coverage:
  • V8 to track node:child_process and node:worker_threads contexts  -  by @​AriPerkkio in #​9976 (9baa5)
  • thresholds.autoUpdate to receive previous threshold as argument  -  by @​wouterkroes in #​10495 (04f81)
  • Switch to @vitest/istanbuljs packages  -  by @​AriPerkkio in #​11053 (5f6a5)
• junit-reporter:
  • Add jest-junit-compatible naming options  -  by @​neumaennl, neumaennl, Martin Neumann and Copilot in #​10189 (27393)
• reporter:
  • Support html reporter single file output  -  by @​hi-ogawa, OpenAI Codex and Claude Opus 5 (1M context) in #​10235 (f757e)
  • Add custom GitHub Actions summary title  -  by @​heyJonBray and @​macarie in #​10891 (4363c)
• ui:
  • Highlight editor source locations  -  by @​sheremet-va, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​11004 (bce2d)
  • Navigate trace steps with keyboard and remove indirect editor focus  -  by @​sheremet-va, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​11005 (6816f)
  • Persist trace view selection in URL  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​10981 (3069e)
  • Toggle trace target highlight  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​11049 (cd63e)
  • Add link to open playwright trace  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​11059 (58f02)
• vitest:
  • Create vi.when()  -  by @​macarie in #​10174 (3900e)
• vm:
  • Support require(esm) in vm pools  -  by @​sheremet-va in #​10829 (01298)

   🐞 Bug Fixes

• Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options  -  by @​hi-ogawa, OpenAI Codex and @​sheremet-va in #​10194 (9387f)
• Test tags options should overwrite inherited suite options + inherit suite options in task API  -  by @​hi-ogawa and OpenAI Codex in #​10216 (457db)
• Udpate optimize deps config  -  by @​sheremet-va in #​10223 (95dc6)
• Shell injection safety via github.ref_name in publish workflow  -  by @​lloyd-c137 and lloyd-c137 in #​10327 (dd020)
• Make attachmentsDir root only config  -  by @​hi-ogawa and OpenAI Codex in #​10334 (fab1b)
• Apply cjs interop for truthy __esModule  -  by @​hi-ogawa in #​10363 (2b135)
• Preserve vi.defineHelper callsite for async error stack  -  by @​macayu17 and @​hi-ogawa in #​10415 (ac697)
• Respect disableConsoleIntercept in browser mode  -  by @​Copilot, Hiroshi Ogawa, @​hi-ogawa and OpenAI Codex in #​10391 (66110)
• ForceRerunTriggers uses directory globs against files  -  by @​Patrick-Clausen and Patrick Clausen in #​10421 and #​10420 (4fee2)
• Unify typechecking and ast collection  -  by @​sheremet-va in #​10449 (af993)
• Don't print typecheck warning more than once  -  by @​sheremet-va in #​10461 (15275)
• Correct collumn when parsing tests  -  by @​sheremet-va in #​10467 (7c2fc)
• Fix mixed stdout/stderr log timestamps in onUserConsoleLog  -  by @​Copilot, Hiroshi Ogawa, @​hi-ogawa and @​sheremet-va in #​10308 (62756)
• Fix importOriginal with optimizer and query import  -  by @​davidxharris, David Harris, @​hi-ogawa, Hiroshi Ogawa and OpenAI Codex in #​10469 (6a3bb)
• Correct transform time calculation in merged report  -  by @​potatomatoooo and @​hi-ogawa in #​10570 and #​10578 (b7897)
• Fix setImmediate await in detect-async-leak  -  by @​hi-ogawa and Hiroshi Ogawa in #​10608 (dd62b)
• Fix per-project sequence config  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​10659 (40cdc)
• Add handshake timeout to iframe communication  -  by @​sheremet-va in #​10656 (3545f)
• Don't print column in test names when includeTaskLocation is enabled  -  by @​sheremet-va in #​10681 (bd9cc)
• Disable server HMR before plugins read it in their config hook  -  by @​sheremet-va in #​10731 (e060b)
• Close the pool before the Vite servers  -  by @​sheremet-va in #​10725 (96fa6)
• Remove listeners in the typecheck worker's off  -  by @​sheremet-va in #​10741 (d758b)
• Keep per-file isolation in vm pools when maxWorkers is 1  -  by @​sheremet-va in #​10743 (83ab9)
• Node.js 20 deprecation warning for ci.yml  -  by @​hirehamir in #​10759 (2127f)
• Prevent node builtins double prefix  -  by @​malobre in #​10630 and #​10767 (22d35)
• Set non-zero exit code when teardown throws during close  -  by @​zakcutner and @​AriPerkkio in #​10794 (22116)
• Don't race the typechecker spawn grace period on windows  -  by @​xevrion in #​10814 (b19e5)
• Coalesce concurrent watch-mode restarts, deflake the pool stderr fixture  -  by @​sheremet-va in #​10822 (a31f8)
• Prevent vitest --typecheck from reporting a false success when the tsc process crashes  -  by @​hitenkalda and Hiten Kalda in #​10705 (a1b05)
• Collect in-source tests when the module is cached  -  by @​koutaro-masaki in #​10577 and #​10589 (a7bf2)
• Swap replace() arguments so timeout error stack shows the real message  -  by @​lazerg in #​10875 (aba0f)
• Stale mock metadata breaks automocking with isolate:false  -  by @​kade-robertson in #​10145 and #​10541 (8e210)
• Don't lose worker output on teardown, deflake timing-sensitive tests  -  by @​sheremet-va in #​10842 (1216b)
• Revive global concurrency limit for test lifecycle  -  by @​hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and @​sheremet-va in #​10928 (cf917)
• Own the post-restart rerun, keep process.exit disabled in workers  -  by @​sheremet-va in #​10963 (5e69a)
• Preserve correct root during resolve config  -  by @​AriPerkkio and @​sheremet-va in #​10909 (210ba)
• Combine multiple --project filters correctly  -  by @​sheremet-va in #​10988 (66c1c)
• Fix recordArtifact location with vi.defineHelper  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​11047 (c2186)
• Invalidate resolved setup files  -  by @​sheremet-va in #​11073 and #​11081 (488c0)
• Accept awaited value in vi.when thenResolve  -  by @​sheremet-va in #​11084 (c10a1)
• Ignore computed member calls in static collection  -  by @​sheremet-va in #​11085 (130f7)
• Don't duplicte oxc.target if user provides a custom array  -  by @​sheremet-va in #​11095 (848d7)
• Propagate --maxWorkers to projects  -  by @​Gaurav1112 in #​11102 (2122f)
• Apply queued mocks from doMock() in queue order  -  by @​juliandescottes and Claude Opus 5 (1M context) in #​10706 and #​11127 (f08ce)
• Add a warning if inline project has duplicate plugins due to unexpected extends: true  -  by @​sheremet-va in #​11120 (584cf)
• Treat test.describe as a suite during static collection  -  by @​sheremet-va in #​11128 (d46a7)
• browser:
  • Fix trace highlight of shadow dom on webdriverio  -  by @​hi-ogawa in #​10227 (b01af)
  • Simplify orchestrator otel carrier  -  by @​hi-ogawa in #​10283 (3514f)
  • Remove orphaned Playwright route when same module is mocked via multiple ids  -  by @​Zelys-DFKH in #​9957 and #​10267 (41db6)
  • Skip wrapDynamicImport transform on ssr environment  -  by @​hi-ogawa in #​10355 (d3c96)
  • Fix stale source map on watch mode  -  by @​hi-ogawa in #​10389 (6d772)
  • Escape inline orchestrator scripts  -  by @​hi-ogawa and OpenAI Codex in #​10412 (c22cf)
  • Disable client cdp API when allowWrite/allowExec: false  -  by @​hi-ogawa and OpenAI Codex in #​10444 (63e3b)
  • Wait for orchestrator readiness before resolving browser sessions  -  by @​soconnor-seeq in #​10397 (fe5ed)
  • Wait for iframe tester readiness before preparing  -  by @​soconnor-seeq in #​10497 (f2655)
  • Encode iframeId in tester iframe URL  -  by @​Pduhard, Pduhard and Claude Opus 5 (1M context) in #​10520 and #​10521 (c8bf1)
  • Always derive a positive locator action timeout  -  by @​sheremet-va in #​10626 (5b864)
  • Resize the browser ui only if it's not headless  -  by @​sheremet-va in #​10662 (b5c61)
  • Check fs access in builtin commands  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​10674 (33f96)
  • Preserve pre-transform request defaults  -  by @​sheremet-va in #​10748 (b6060)
  • Fix error stacktrace location off-by-one  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​10724 (62b8d)
  • Inlined awaited import should not trigger syntax error after transform  -  by @​smeng9, Shaoyu Meng and Claude Opus 5 (1M context) in #​10784 (51acd)
  • Mock window.print to avoid hanging  -  by @​aaravjaichand in #​7375 and #​10798 (66d95)
  • Ignore channel events in a tester opened as a top-level window  -  by @​simshanith in #​9379 and #​9381 (46a3c)
  • Resolve connectTimeout from the project config  -  by @​lazerg in #​10879 and #​10880 (62c79)
  • Prebundle vite module runner with vitest  -  by @​lebovvskii and @​sheremet-va in #​10836 and #​10856 (37c24)
  • Restore dependency reload warning  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​10913 (90d69)
  • Configure internal optimizer dependencies  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​10915 (a72f4)
  • Trigger playwright/chromium gc on lower disk availability  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​10912 (032d3)
  • Disallow filter-only options in getBy* locators  -  by Arjun in #​10295 and #​10933 (9b4df)
  • Fail instead of hanging when the browser stops responding  -  by @​sheremet-va in #​10956 (c496c)
  • Exit gracefully when the browser disconnects during cancellation  -  by @​sheremet-va in #​10962 (67e84)
  • Don't redirect vitest in client environment  -  by @​sheremet-va in #​10975 (aeb67)
  • Don't hang when ui: true in projects  -  by @​AriPerkkio in #​10994 (9f710)
  • Preserve trace popover state  -  by @​liuluochen6-af, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and @​hi-ogawa in #​10906 and #​11021 (1bbc2)
  • Report the action error when a task times out  -  by @​sheremet-va in #​11101 (dc10f)
• cache:
  • Improve fsModuleCache resiliency during external modifications  -  by @​jszumski in #​10869 (5eb35)
• cli:
  • Respect FORCE_COLOR over agent detection  -  by @​dokson in #​10272 (7e66b)
  • Exit on CTRL+c even when globalSetup runs blocked code  -  by @​AriPerkkio in #​10863 (d568f)
• coverage:
  • exclude to not inherit negation globs from test.include  -  by @​AriPerkkio in #​10299 (28685)
  • Avoid matching sibling project roots  -  by @​innoprej, Shin JaeHee and @​AriPerkkio in #​10311 (e30dd)
  • Non-awaited module imports cause wrong offsets  -  by @​AriPerkkio in #​10643 (c4090)
  • Fail fast when coverage.reportsDirectory conflicts between concurrent runs  -  by @​jgamaraalv and @​AriPerkkio in #​10466 (833f0)
  • V8 to ignore Vite SSR's generated import bindings  -  by @​AriPerkkio in #​11023 (c6174)
  • Prevent crash on /@fs/ prepended virtual files  -  by @​AriPerkkio in #​11119 (c4473)
• deps:
  • Update ivya to fix empty aria tree snapshot  -  by @​hi-ogawa in #​10218 (f7822)
  • Update fake-timers to 15.3.2. support toNotFake  -  by @​BPScott, @​hi-ogawa and OpenAI Codex in #​10043 (bbf2f)
  • Update all non-major dependencies  -  by @​sheremet-va in #​9958 (7faa7)
  • Update all non-major dependencies  -  by @​sheremet-va in #​10861 (0188c)
  • Update all non-major dependencies  -  by @​sheremet-va in #​10898 (61c4b)
  • Update all non-major dependencies  -  in #​10966 (65263)
  • Update all non-major dependencies  -  in #​11043 (732df)
• expect:
  • Allow readonly arrays and sets in toBeOneOf  -  by @​YBJ0000 in #​10264 and #​10374 [(fed11)](https://redirect.gith

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[thewrz]

This was written agentically; verify its assertions:

Closing as superseded by #157 (merged as 7b0dc34), which lands typescript 7.0.2, better-sqlite3 13.0.3 and @types/better-sqlite3 9.6.0 on the current main. Not carried over: @vitest/coverage-v8 5.x (requires vitest 5; vitest stays on 4.1.x). The puppeteer 25 and @fastify/rate-limit 11 majors landed earlier in #153 with the security fixes. This branch conflicted with the lockfile after #153/#155.

🤖 Co-authored by Claude Fable 5.1.