chore(deps): bump vitest and @vitest/coverage-v8 to 5.0.0

[thewrz]

This was written agentically; verify its assertions:

Why

Renovate's #159 is the major-npm-server group re-titled after the other majors landed (#153, #157), but its branch is still the stale pre-#153 commit and conflicts with main. Its real remaining content is the vitest 5 major, landed here fresh.

What

Package	From → To	Scope
vitest	4.1.11 → 5.0.0	dev (unit, UI, and contract test runner)
@vitest/coverage-v8	4.1.11 → 5.0.0	dev (CI test:coverage)

Resolved with npm install --before=2026-09-08: 5.0.0 (released 2026-09-03) clears the repo's 7-day minimumReleaseAge gate; 5.0.1 (published today) is excluded by the same rule. vite stays on 8.2.2. No source or config changes were needed. Supersedes #159, which is closed as outdated.

Testing

• npm run test:coverage: 106 files, 1670 passed, 11 skipped; coverage unchanged (89.29% lines)
• npm run test:ui (puppeteer): 23 passed
• npm run test:contract (live OFL API): 3 passed
• npm run typecheck and typecheck:scripts pass
• npm audit --audit-level=high: 0 vulnerabilities
• CI green

🤖 Co-authored by Claude Fable 5.1.
🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: ce40e584-63ac-4791-a13d-7ffa10888d6e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[thewrz]

This was written agentically; verify its assertions:

Adversarial review receipt

• Reviewer: provider=codex; model=gpt-5.6-sol; effort=xhigh; mode=cross-provider (reason: n/a)
• Counts: P1=0; P2=0; total=0
• Reviewed head: 78ad3b8
• Confirmed finding: none confirmed
• Verified-skip rationale: Manifest+lockfile-only dev-dependency major bump of the test runner with no source or config changes; the runner major is exercised end to end by running all three vitest configs, and the user-specified verification standard for this triage is smoke tests plus local CI.; mechanical oracle=git diff origin/main..HEAD --stat touches only server/package.json and server/package-lock.json; clean npm ci; npm audit --audit-level=high = 0; typecheck and typecheck:scripts pass; test:coverage = 1670 passed / 11 skipped with coverage unchanged at 89.29% lines; test:ui = 23 passed; test:contract = 3 passed; resolved with npm install --before=2026-09-08 (7-day release age).

🤖 Co-authored by Claude Fable 5.1.

[thewrz]

This was written agentically; verify its assertions:

Review ledger

Machine-readable record of every review already performed on this PR.

{
  "version": 1,
  "pr": 161,
  "repo": "wrzonance/DMXr",
  "reviews": [
    {
      "kind": "adversarial",
      "provider": "codex",
      "model": "gpt-5.6-sol",
      "effort": "xhigh",
      "mode": "cross-provider",
      "harness": "claude",
      "head_sha": "78ad3b8a32fe22badff82f99dd9ee96ac566eb4a",
      "covered_heads": [
        "78ad3b8a32fe22badff82f99dd9ee96ac566eb4a"
      ],
      "counts": {
        "p1": 0,
        "p2": 0
      },
      "reviewed_at": "2026-09-15T17:50:32Z"
    }
  ]
}

🤖 Co-authored by Claude Fable 5.1.