Skip to content

chore(deps-dev): bump vitest from 3.2.7 to 5.0.1 - #139

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/vitest-5.0.1
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/vitest-5.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps vitest from 3.2.7 to 5.0.1.

Release notes

Sourced from vitest's releases.

v5.0.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v5.0.0

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

   🚨 Breaking Changes

... (truncated)

Commits
  • 03630a5 chore: release v5.0.1 (#11275)
  • a47d790 fix(fakeTimers): force queueMicrotask and nextTick in toNotFake (#11261)
  • 2ce29d5 fix: warn when deprecated deps.optimizer.web is used (#11214)
  • ccd6d05 docs: fix typecheck exclude default in documentation (#11223)
  • 91ab158 fix(doctor): measure vm pools for custom environments (#11212)
  • 23dda73 fix: share the server on self-referencing extends (#11034)
  • 498fbe9 fix: resolve ResolvedConfig exactOptionalPropertyTypes errors (#11175)
  • 115c3f6 fix: correct typos in error message and comments (#11187)
  • 7361465 fix: keep metadata file when clearing the cache (#11199)
  • 972e24b fix(browser): avoid double quotes in config.define (#11198)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vitest-5.0.1 branch from 8729dfd to 4eeb453 Compare September 21, 2026 14:21
alperhankendi added a commit that referenced this pull request Sep 21, 2026
vitest and @vitest/coverage-v8 must move together: #139 bumped vitest alone
and left coverage-v8 at 3.2.7, which resolves `vitest/coverage` - a subpath
vitest 5 no longer exports - and crashed every unit run with
ERR_PACKAGE_PATH_NOT_EXPORTED. #142 is the same split in reverse.

One real breaking change surfaced: cli-router mocks UpdateCommand with an
arrow function, but cli-router.ts calls `new UpdateCommand(...)`. Arrow
functions have no [[Construct]] slot; vitest 3 tolerated this, vitest 5 does
not. Swapped in a regular function so the mock stays constructible.

Local run on Windows: 1219/1219 unit tests pass, typecheck clean across all
six packages. The one remaining full-suite failure is privacy-zero-leakage
hitting EPERM while unlinking its Windows temp dir - it passes in isolation
and is platform cleanup, not a vitest regression. Pushing to confirm on Linux.
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 3.2.7 to 5.0.1.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vitest-5.0.1 branch from 4eeb453 to 2f361ad Compare September 21, 2026 14:34
alperhankendi added a commit that referenced this pull request Sep 21, 2026
* test(deps): move workspace to vitest 5

vitest and @vitest/coverage-v8 must move together: #139 bumped vitest alone
and left coverage-v8 at 3.2.7, which resolves `vitest/coverage` - a subpath
vitest 5 no longer exports - and crashed every unit run with
ERR_PACKAGE_PATH_NOT_EXPORTED. #142 is the same split in reverse.

One real breaking change surfaced: cli-router mocks UpdateCommand with an
arrow function, but cli-router.ts calls `new UpdateCommand(...)`. Arrow
functions have no [[Construct]] slot; vitest 3 tolerated this, vitest 5 does
not. Swapped in a regular function so the mock stays constructible.

Local run on Windows: 1219/1219 unit tests pass, typecheck clean across all
six packages. The one remaining full-suite failure is privacy-zero-leakage
hitting EPERM while unlinking its Windows temp dir - it passes in isolation
and is platform cleanup, not a vitest regression. Pushing to confirm on Linux.

* test(coverage): recalibrate src/core thresholds for coverage-v8 5

The v8 provider changed how it maps ranges to branches between 3.x and 5.x.
Same source, same 1219 tests, different denominators for src/core:

  vitest 3   branches 1163/1300 = 89.46%   statements 3155/3234 = 97.56%
  vitest 5   branches 1031/1198 = 86.06%   statements 1814/1908 = 95.07%

Per-file the shift is unmistakably measurement rather than lost coverage:
masking-pipeline goes 12/12 -> 5/5, cluster-label-masker 21/21 -> 9/10,
intent-filter 19/19 -> 11/12. Files that were fully covered still are; the
provider just counts fewer branches and marks one of them uncovered. Writing
tests to chase the old 88 would be aiming at an artifact.

Branches drops to 85, preserving roughly the slack the old 88 gave against
the 3.x baseline. Statements, functions and lines go 88/90/88 -> 92, since
the actual 5.x numbers (95.07 / 95.80 / 96.89) clear that comfortably - so
this is a recalibration, not a blanket loosening.

Verified: threshold rejects at 87 (86.06% < 87%) and passes at 85, so the
gate still enforces rather than trivially passing.
@alperhankendi

Copy link
Copy Markdown
Owner

Kapatılıyor: #144 bu yükseltmeyi kapsıyor ve master'a merge edildi (338431c).

vitest ile @vitest/coverage-v8 birlikte hareket etmek zorunda; ayrı bump edildiklerinde eski coverage provider vitest 5'in artık export etmediği vitest/coverage subpath'ini arıyor ve her unit run ERR_PACKAGE_PATH_NOT_EXPORTED ile tek test çalışmadan ölüyor. #144 ikisini birlikte 5.0.1'e taşıdı, constructor mock'unu vitest 5'e uyarladı ve coverage eşiklerini yeni v8 ölçüm tabanına göre kalibre etti.

@dependabot @github

dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/vitest-5.0.1 branch September 21, 2026 14:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant