chore(deps): bump the npm-weekly group with 6 updates

[dependabot]

Bumps the npm-weekly group with 6 updates:

Package	From	To
@ast-grep/cli	0.40.5	0.44.0
@biomejs/biome	2.4.11	2.5.0
@changesets/cli	2.30.0	2.31.0
tsx	4.21.0	4.22.4
vite	8.0.8	8.0.16
vitest	4.1.4	4.1.9

Updates @ast-grep/cli from 0.40.5 to 0.44.0

Release notes

Sourced from @​ast-grep/cli's releases.

0.44.0

• chore: move outline docs and benchmarks out of repo [#2763](https://github.com/ast-grep/ast-grep/issues/2763)
• chore(deps): update dependency smol-toml to v1.7.0 [#2762](https://github.com/ast-grep/ast-grep/issues/2762)
• Add JavaScript outline rules and stream JSON files [#2761](https://github.com/ast-grep/ast-grep/issues/2761)
• fix: reject root multi-metavariable patterns [#2727](https://github.com/ast-grep/ast-grep/issues/2727)
• fix: don't leak metavar bindings across siblings in nthChild ofRule [#2677](https://github.com/ast-grep/ast-grep/issues/2677)
• fix: extract python from-import modules in outline [#2758](https://github.com/ast-grep/ast-grep/issues/2758)
• fix: match go outline types by declaration [#2759](https://github.com/ast-grep/ast-grep/issues/2759)
• fix: skip empty files in outline [#2757](https://github.com/ast-grep/ast-grep/issues/2757)
• feat: mark duplicate outline names [#2756](https://github.com/ast-grep/ast-grep/issues/2756)
• refactor: inline outline member kind lookup [#2755](https://github.com/ast-grep/ast-grep/issues/2755)
• refactor: make outline extract return iterator [#2754](https://github.com/ast-grep/ast-grep/issues/2754)
• refactor: stream outline extraction items [#2753](https://github.com/ast-grep/ast-grep/issues/2753)
• perf: use single traversal for outline extraction [#2751](https://github.com/ast-grep/ast-grep/issues/2751)
• perf: cache transform replace regexes [#2750](https://github.com/ast-grep/ast-grep/issues/2750)
• fix: don't leak metavar bindings from a negated not rule [#2676](https://github.com/ast-grep/ast-grep/issues/2676)
• refactor: fold outline extract options into extractors [#2749](https://github.com/ast-grep/ast-grep/issues/2749)
• refactor: split outline extract options and style [#2748](https://github.com/ast-grep/ast-grep/issues/2748)
• refactor: map outline cli to core options [#2747](https://github.com/ast-grep/ast-grep/issues/2747)
• feat: apply outline extractor options [#2746](https://github.com/ast-grep/ast-grep/issues/2746)
• feat: add outline extractor options [#2745](https://github.com/ast-grep/ast-grep/issues/2745)
• fix: simplify some code [#2744](https://github.com/ast-grep/ast-grep/issues/2744)
• fix: trailing ast-grep-ignore on a multi-line statement suppresses it [#2678](https://github.com/ast-grep/ast-grep/issues/2678)
• chore(deps): update actions/checkout action to v7 [#2731](https://github.com/ast-grep/ast-grep/issues/2731)
• fix: cover async rust outline rules [#2743](https://github.com/ast-grep/ast-grep/issues/2743)
• feat: add bundled outline rules for more languages [#2739](https://github.com/ast-grep/ast-grep/issues/2739)
• feat: add outline CLI command [#2738](https://github.com/ast-grep/ast-grep/issues/2738)
• perf: use cursor-backed outline traversal [#2737](https://github.com/ast-grep/ast-grep/issues/2737)
• feat: run outline extractors [#2729](https://github.com/ast-grep/ast-grep/issues/2729)
• chore(deps): update oxlint monorepo to v1.70.0 [#2726](https://github.com/ast-grep/ast-grep/issues/2726)
• refactor: split fixer variable validation [#2724](https://github.com/ast-grep/ast-grep/issues/2724)
• refactor: validate rule core directly [#2723](https://github.com/ast-grep/ast-grep/issues/2723)
• test: move matcher tests to rule core [#2722](https://github.com/ast-grep/ast-grep/issues/2722)
• refactor: wrap rewriter config errors [#2721](https://github.com/ast-grep/ast-grep/issues/2721)
• test: validate global rule fix vars via rule config [#2719](https://github.com/ast-grep/ast-grep/issues/2719)
• fix: check undefined meta var in fix [#2718](https://github.com/ast-grep/ast-grep/issues/2718)
• Breaking change: fix: remove fix from SerializableCore [#2717](https://github.com/ast-grep/ast-grep/issues/2717)
• fix: preserve unused suppression fixer [#2716](https://github.com/ast-grep/ast-grep/issues/2716)
• Breaking change: refactor: move optional fixer to RuleConfig [#2715](https://github.com/ast-grep/ast-grep/issues/2715)
• fix: add fixer var check [#2714](https://github.com/ast-grep/ast-grep/issues/2714)
• Refactor rule config [#2713](https://github.com/ast-grep/ast-grep/issues/2713)
• Breaking change: refactor: mvoe rewriters into SerializableRuleCore [#2711](https://github.com/ast-grep/ast-grep/issues/2711)
• refactor: move rewriter out [#2712](https://github.com/ast-grep/ast-grep/issues/2712)
• feat: add outline rule schema [#2710](https://github.com/ast-grep/ast-grep/issues/2710)
• docs: remove outline target alias fields [#2709](https://github.com/ast-grep/ast-grep/issues/2709)
• chore(deps): update rust crate smallvec to v1.15.2 [#2701](https://github.com/ast-grep/ast-grep/issues/2701)
• fix(deps): update rust-wasm-bindgen monorepo [#2704](https://github.com/ast-grep/ast-grep/issues/2704)
• fix: remove unused trait/methods [#2708](https://github.com/ast-grep/ast-grep/issues/2708)
• feat: add outline entry model [#2703](https://github.com/ast-grep/ast-grep/issues/2703)
• refactor: remove legacy outline placeholders [#2702](https://github.com/ast-grep/ast-grep/issues/2702)

... (truncated)

Changelog

Sourced from @​ast-grep/cli's changelog.

0.44.0

• chore: move outline docs and benchmarks out of repo [#2763](https://github.com/ast-grep/ast-grep/issues/2763)
• chore(deps): update dependency smol-toml to v1.7.0 [#2762](https://github.com/ast-grep/ast-grep/issues/2762)
• Add JavaScript outline rules and stream JSON files [#2761](https://github.com/ast-grep/ast-grep/issues/2761)
• fix: reject root multi-metavariable patterns [#2727](https://github.com/ast-grep/ast-grep/issues/2727)
• fix: don't leak metavar bindings across siblings in nthChild ofRule [#2677](https://github.com/ast-grep/ast-grep/issues/2677)
• fix: extract python from-import modules in outline [#2758](https://github.com/ast-grep/ast-grep/issues/2758)
• fix: match go outline types by declaration [#2759](https://github.com/ast-grep/ast-grep/issues/2759)
• fix: skip empty files in outline [#2757](https://github.com/ast-grep/ast-grep/issues/2757)
• feat: mark duplicate outline names [#2756](https://github.com/ast-grep/ast-grep/issues/2756)
• refactor: inline outline member kind lookup [#2755](https://github.com/ast-grep/ast-grep/issues/2755)
• refactor: make outline extract return iterator [#2754](https://github.com/ast-grep/ast-grep/issues/2754)
• refactor: stream outline extraction items [#2753](https://github.com/ast-grep/ast-grep/issues/2753)
• perf: use single traversal for outline extraction [#2751](https://github.com/ast-grep/ast-grep/issues/2751)
• perf: cache transform replace regexes [#2750](https://github.com/ast-grep/ast-grep/issues/2750)
• fix: don't leak metavar bindings from a negated not rule [#2676](https://github.com/ast-grep/ast-grep/issues/2676)
• refactor: fold outline extract options into extractors [#2749](https://github.com/ast-grep/ast-grep/issues/2749)
• refactor: split outline extract options and style [#2748](https://github.com/ast-grep/ast-grep/issues/2748)
• refactor: map outline cli to core options [#2747](https://github.com/ast-grep/ast-grep/issues/2747)
• feat: apply outline extractor options [#2746](https://github.com/ast-grep/ast-grep/issues/2746)
• feat: add outline extractor options [#2745](https://github.com/ast-grep/ast-grep/issues/2745)
• fix: simplify some code [#2744](https://github.com/ast-grep/ast-grep/issues/2744)
• fix: trailing ast-grep-ignore on a multi-line statement suppresses it [#2678](https://github.com/ast-grep/ast-grep/issues/2678)
• chore(deps): update actions/checkout action to v7 [#2731](https://github.com/ast-grep/ast-grep/issues/2731)
• fix: cover async rust outline rules [#2743](https://github.com/ast-grep/ast-grep/issues/2743)
• feat: add bundled outline rules for more languages [#2739](https://github.com/ast-grep/ast-grep/issues/2739)
• feat: add outline CLI command [#2738](https://github.com/ast-grep/ast-grep/issues/2738)
• perf: use cursor-backed outline traversal [#2737](https://github.com/ast-grep/ast-grep/issues/2737)
• feat: run outline extractors [#2729](https://github.com/ast-grep/ast-grep/issues/2729)
• chore(deps): update oxlint monorepo to v1.70.0 [#2726](https://github.com/ast-grep/ast-grep/issues/2726)
• refactor: split fixer variable validation [#2724](https://github.com/ast-grep/ast-grep/issues/2724)
• refactor: validate rule core directly [#2723](https://github.com/ast-grep/ast-grep/issues/2723)
• test: move matcher tests to rule core [#2722](https://github.com/ast-grep/ast-grep/issues/2722)
• refactor: wrap rewriter config errors [#2721](https://github.com/ast-grep/ast-grep/issues/2721)
• test: validate global rule fix vars via rule config [#2719](https://github.com/ast-grep/ast-grep/issues/2719)
• fix: check undefined meta var in fix [#2718](https://github.com/ast-grep/ast-grep/issues/2718)
• Breaking change: fix: remove fix from SerializableCore [#2717](https://github.com/ast-grep/ast-grep/issues/2717)
• fix: preserve unused suppression fixer [#2716](https://github.com/ast-grep/ast-grep/issues/2716)
• Breaking change: refactor: move optional fixer to RuleConfig [#2715](https://github.com/ast-grep/ast-grep/issues/2715)
• fix: add fixer var check [#2714](https://github.com/ast-grep/ast-grep/issues/2714)
• Refactor rule config [#2713](https://github.com/ast-grep/ast-grep/issues/2713)
• Breaking change: refactor: mvoe rewriters into SerializableRuleCore [#2711](https://github.com/ast-grep/ast-grep/issues/2711)
• refactor: move rewriter out [#2712](https://github.com/ast-grep/ast-grep/issues/2712)
• feat: add outline rule schema [#2710](https://github.com/ast-grep/ast-grep/issues/2710)
• docs: remove outline target alias fields [#2709](https://github.com/ast-grep/ast-grep/issues/2709)
• chore(deps): update rust crate smallvec to v1.15.2 [#2701](https://github.com/ast-grep/ast-grep/issues/2701)
• fix(deps): update rust-wasm-bindgen monorepo [#2704](https://github.com/ast-grep/ast-grep/issues/2704)
• fix: remove unused trait/methods [#2708](https://github.com/ast-grep/ast-grep/issues/2708)
• feat: add outline entry model [#2703](https://github.com/ast-grep/ast-grep/issues/2703)

... (truncated)

Commits

• e34ce66 0.44.0
• e27fc74 chore: move outline docs and benchmarks out of repo (#2763)
• 8a0be7e chore(deps): update dependency smol-toml to v1.7.0 (#2762)
• 6213351 Add JavaScript outline rules and stream JSON files (#2761)
• 01f05a1 fix: update edge case fallback behavior
• b8f220c fix: improve root multi meta var error
• a8b7061 fix: reject root multi-metavariable patterns (#2727)
• 58efe19 fix: don't leak metavar bindings across siblings in nthChild ofRule (#2677)
• d5ee2c2 fix: extract python from-import modules in outline (#2758)
• af979e6 fix: match go outline types by declaration (#2759)
• Additional commits viewable in compare view

Updates @biomejs/biome from 2.4.11 to 2.5.0

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.0

2.5.0

Minor Changes

• #9539 f0615fd Thanks @​ematipico! - Added a new reporter called concise. When --reporter=concise is passed the commands format, lint, check and ci, the diagnostics are printed in a compact manner:

  ! index.ts:2:10: lint/correctness/noUnusedImports: Several of these imports are unused.
  ! main.ts:9:7: lint/correctness/noUnusedVariables: This variable f is unused.
  × index.ts:8:5: lint/suspicious/noImplicitAnyLet: This variable implicitly has the any type.
  × main.ts:2:10: lint/suspicious/noRedeclare: Shouldn't redeclare 'z'. Consider to delete it or rename it.
  

• #9495 2056b23 Thanks @​aviraldua93! - Added the useKeyWithClickEvents a11y lint rule for HTML files (.html, .vue, .svelte, .astro). This is a port of the existing JSX rule. The rule enforces that elements with an onclick handler also have at least one keyboard event handler (onkeydown, onkeyup, or onkeypress) to ensure keyboard accessibility.

  Inherently keyboard-accessible elements (<a>, <button>, <input>, <select>, <textarea>, <option>) are excluded, as are elements hidden from assistive technologies (aria-hidden) or with role="presentation" / role="none".

  <!-- Invalid: no keyboard handler -->
  <div onclick="handleClick()">Click me</div>
  <!-- Valid: has keyboard handler -->
  <div onclick="handleClick()" onkeydown="handleKeyDown()">Click me</div>
  <!-- Valid: inherently keyboard-accessible -->
  <button onclick="handleClick()">Submit</button>

• #9152 9ec8500 Thanks @​ematipico! - Added new nursery lint rule noUndeclaredClasses for HTML, JSX, and SFC files (Vue, Astro, Svelte). The rule detects CSS class names used in class="..." (or className) attributes that are not defined in any <style> block or linked stylesheet reachable from the file.

  <!-- .typo is used but never defined -->
  <html>
    <head>
      <style>
        .button {
          color: blue;
        }
      </style>
    </head>
    <body>
      <div class="button typo"></div>
    </body>
  </html>

• #9152 9ec8500 Thanks @​ematipico! - Added new nursery lint rule noUnusedClasses for CSS. The rule detects CSS class selectors that are never referenced in any HTML or JSX file that imports the stylesheet. This is a project-domain rule that requires the module graph.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.0

Minor Changes

• #9539 f0615fd Thanks @​ematipico! - Added a new reporter called concise. When --reporter=concise is passed the commands format, lint, check and ci, the diagnostics are printed in a compact manner:

  ! index.ts:2:10: lint/correctness/noUnusedImports: Several of these imports are unused.
  ! main.ts:9:7: lint/correctness/noUnusedVariables: This variable f is unused.
  × index.ts:8:5: lint/suspicious/noImplicitAnyLet: This variable implicitly has the any type.
  × main.ts:2:10: lint/suspicious/noRedeclare: Shouldn't redeclare 'z'. Consider to delete it or rename it.
  

• #9495 2056b23 Thanks @​aviraldua93! - Added the useKeyWithClickEvents a11y lint rule for HTML files (.html, .vue, .svelte, .astro). This is a port of the existing JSX rule. The rule enforces that elements with an onclick handler also have at least one keyboard event handler (onkeydown, onkeyup, or onkeypress) to ensure keyboard accessibility.

  Inherently keyboard-accessible elements (<a>, <button>, <input>, <select>, <textarea>, <option>) are excluded, as are elements hidden from assistive technologies (aria-hidden) or with role="presentation" / role="none".

  <!-- Invalid: no keyboard handler -->
  <div onclick="handleClick()">Click me</div>
  <!-- Valid: has keyboard handler -->
  <div onclick="handleClick()" onkeydown="handleKeyDown()">Click me</div>
  <!-- Valid: inherently keyboard-accessible -->
  <button onclick="handleClick()">Submit</button>

• #9152 9ec8500 Thanks @​ematipico! - Added new nursery lint rule noUndeclaredClasses for HTML, JSX, and SFC files (Vue, Astro, Svelte). The rule detects CSS class names used in class="..." (or className) attributes that are not defined in any <style> block or linked stylesheet reachable from the file.

  <!-- .typo is used but never defined -->
  <html>
    <head>
      <style>
        .button {
          color: blue;
        }
      </style>
    </head>
    <body>
      <div class="button typo"></div>
    </body>
  </html>

• #9152 9ec8500 Thanks @​ematipico! - Added new nursery lint rule noUnusedClasses for CSS. The rule detects CSS class selectors that are never referenced in any HTML or JSX file that imports the stylesheet. This is a project-domain rule that requires the module graph.

  /* styles.css — .ghost is never used in any importing file */

... (truncated)

Commits

• c0b9832 ci: release (#10499)
• 995c1ff feat(lint): add useFunctionComponentDefinition rule (#10498)
• 311c2b2 fix(biome_configuration): avoid Markdown links in JSON schema descriptions (#...
• 04c3f19 fix: docs and readme (#10584)
• 961f41c refactor(useExportType): improve docs and code (#10569)
• 78075b7 feat(useExportType): add style option (#10561)
• 6642895 feat: rule promotion for v2.5 (#10562)
• 9a5855e feat: noRestrictedDependencies (#10467)
• 608a62f Merge branch 'main' into chore/merge-main-into-next
• 0f29b83 feat(linter): implement useIncludes rule (#10516)
• Additional commits viewable in compare view

Updates @changesets/cli from 2.30.0 to 2.31.0

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.0

Minor Changes

• #1889 96ca062 Thanks @​mixelburg! - Error on unsupported flags for individual CLI commands and print the matching command usage to make mistakes easier to spot.

• #1873 42943b7 Thanks @​mixelburg! - Respond to --help on all subcommands. Previously, --help was only handled when it was the sole argument; passing it alongside a subcommand (e.g. changeset version --help) would silently execute the command instead. Now --help always exits early and prints per-command usage when a known subcommand is provided, or the general help text otherwise.

Patch Changes

• d2121dc Thanks @​Andarist! - Fix npm auth for path-based registries during publish by preserving configured registry URLs instead of normalizing them.

• #1888 036fdd4 Thanks @​mixelburg! - Fix several changeset version issues with workspace protocol dependencies. Valid explicit workspace: ranges and aliases are no longer rewritten unnecessarily, and workspace path references are handled correctly during versioning.

• #1903 5c4731f Thanks @​Andarist! - Gracefully handle stale npm info data leading to duplicate publish attempts.

• #1867 f61e716 Thanks @​Andarist! - Improved detection for published state of prerelease-only packages without latest dist-tag on GitHub Packages registry.

• Updated dependencies [036fdd4, 036fdd4, 036fdd4]:

  • @​changesets/assemble-release-plan@​6.0.10
  • @​changesets/get-dependents-graph@​2.1.4
  • @​changesets/apply-release-plan@​7.1.1
  • @​changesets/get-release-plan@​4.0.16
  • @​changesets/config@​3.1.4

Commits

• 9cce6db Version Packages (#1897)
• d2121dc Fix npm auth for path-based registries during publish by preserving configure...
• 036fdd4 Fix several changeset version issues with workspace protocol dependencies (...
• 5c4731f Gracefully handle stale npm info data leading to duplicate publish attempts...
• 96ca062 Error on unsupported flags for individual CLI commands (#1889)
• 42943b7 fix(cli): respond to --help on all subcommands (#1873)
• f61e716 Improved detection for published state of prerelease-only packages without ...
• See full diff in compare view

Updates tsx from 4.21.0 to 4.22.4

Release notes

Sourced from tsx's releases.

v4.22.4

4.22.4 (2026-05-31)

Bug Fixes

• resolve CommonJS directory requires inside dependencies (#803) (1ce8463)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.3

4.22.3 (2026-05-19)

Bug Fixes

• decode typed loader source (dce02fc)
• preserve entrypoint with TypeScript preload hooks (68f72f3)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.2

4.22.2 (2026-05-18)

Bug Fixes

• preserve CJS JSON require in ESM hooks (35b700b)
• preserve named exports from CommonJS TypeScript (11de737)
• support module.exports require(esm) interop (cf8f199)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.1

4.22.1 (2026-05-17)

Bug Fixes

• resolve tsconfig path aliases containing a colon (#780) (6979f28)

---

This release is also available on:

• npm package (@​latest dist-tag)

... (truncated)

Commits

• 1ce8463 fix: resolve CommonJS directory requires inside dependencies (#803)
• dce02fc fix: decode typed loader source
• 68f72f3 fix: preserve entrypoint with TypeScript preload hooks
• 69455cf test: cover package exports for ambiguous ESM reexports
• 35b700b fix: preserve CJS JSON require in ESM hooks
• ef807db chore: update testing dependencies
• 3917090 test: document compatibility test taxonomy
• de8113f refactor: centralize Node capability facts
• c1f62db test: consolidate tsconfig path edge coverage
• 4e08174 test: consolidate loader hook coverage
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tsx since your current version.

Updates vite from 8.0.8 to 8.0.16

Release notes

Sourced from vite's releases.

v8.0.16

Please refer to CHANGELOG.md for details.

v8.0.15

Please refer to CHANGELOG.md for details.

v8.0.14

Please refer to CHANGELOG.md for details.

v8.0.13

Please refer to CHANGELOG.md for details.

v8.0.12

Please refer to CHANGELOG.md for details.

v8.0.11

Please refer to CHANGELOG.md for details.

v8.0.10

Please refer to CHANGELOG.md for details.

v8.0.9

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.0.16 (2026-06-01)

Bug Fixes

• deps: reject UNC paths for launch-editor-middleware (#22571) (50b9512)
• reject windows alternate paths (#22572) (dc245c7)

8.0.15 (2026-06-01)

Features

• send 408 on request timeout (#22476) (c85c9ee)
• update rolldown to 1.0.3 (#22538) (646dbed)

Bug Fixes

• capitalize error messages and remove spurious space in parse error (#22488) (85a0eff)
• deps: update all non-major dependencies (#22511) (2686d7d)
• dev: fix html-proxy cache key mismatch for /@fs/ HTML paths (#21762) (47c4213)
• glob: error on relative glob in virtual module when no files match (#22497) (5c8e98f)
• optimizer: close the rolldown bundle when write() rejects (#22528) (e3cfb9d)
• resolve: provide onWarn for viteResolvePlugin in JS plugin containers (#22509) (40985f1)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#22566) (3052a67)

Code Refactoring

• correct logic in collectAllModules function (#22562) (6978a9c)

8.0.14 (2026-05-21)

Features

• update rolldown to 1.0.2 (#22484) (96efc88)

Bug Fixes

• deps: update all non-major dependencies (#22471) (98b8163)
• dev: handle errors when sending messages to vite server (#22450) (e8e9a34)
• html: handle trailing slash paths in transformIndexHtml (#22480) (5d94d1b)
• optimizer: pass oxc jsx options to transformSync in dependency scan (#22342) (b3132da)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#22470) (7cb728e)
• remove irrelevant commits from changelog (2c69495)

Code Refactoring

• glob: do not rewrite import path for absolute base (#22310) (0ae2844)

... (truncated)

Commits

• f94df87 release: v8.0.16
• dc245c7 fix: reject windows alternate paths (#22572)
• 50b9512 fix(deps): reject UNC paths for launch-editor-middleware (#22571)
• 8d1b019 release: v8.0.15
• 2686d7d fix(deps): update all non-major dependencies (#22511)
• 3052a67 chore(deps): update rolldown-related dependencies (#22566)
• e3cfb9d fix(optimizer): close the rolldown bundle when write() rejects (#22528)
• 6978a9c refactor: correct logic in collectAllModules function (#22562)
• 646dbed feat: update rolldown to 1.0.3 (#22538)
• 85a0eff fix: capitalize error messages and remove spurious space in parse error (#22488)
• Additional commits viewable in compare view

Updates vitest from 4.1.4 to 4.1.9

Release notes

Sourced from vitest's releases.

v4.1.9

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)
• browser:
  • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)
  • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)
• mocker:
  • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)
• pool:
  • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

• runner: Limit concurrency per task branch in addition to per leaf callbacks (backport)  -  by @​hi-ogawa in vitest-dev/vitest#10384 (4f0f2)

    View changes on GitHub

v4.1.6

   🐞 Bug Fixes

• browser: Provide project reference in ToMatchScreenshotResolvePath  -  by @​macarie and @​sheremet-va in vitest-dev/vitest#10138 (31882)
• Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options  -  by @​hi-ogawa, Codex and @​sheremet-va in vitest-dev/vitest#10196 (2847d)
• browser: Simplify orchestrator otel carrier  -  by @​hi-ogawa in vitest-dev/vitest#10285 (18af9)

   🏎 Performance

• Stringify diff objects only once  -  by @​sheremet-va in vitest-dev/vitest#10276 (9f7b1)

    View changes on GitHub

v4.1.5

   🚀 Experimental Features

• coverage: Istanbul to support instrumenter option  -  by @​BartWaardenburg and @​AriPerkkio in vitest-dev/vitest#10119 (0e0ff)

   🐞 Bug Fixes

... (truncated)

Commits

• a7a61e7 chore: release v4.1.9 (#10598)
• 934b0f5 fix(pool): prevent test run hang on worker crash (#10543) [backport to v4] (#...
• 7fb2965 fix(browser): wait for orchestrator readiness before resolving browser sessio...
• a518019 fix: fix importOriginal with optimizer and query import [backport to v4] (#...
• e61f2dd chore: release v4.1.8
• e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
• a09d472 chore: release v4.1.7
• a8fd24c chore: release v4.1.6
• 18af98c fix(browser): simplify orchestrator otel carrier (#10285)
• 3188260 feat(browser): provide project reference in ToMatchScreenshotResolvePath (#...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• `@dep...

Description has been truncated

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​ast-grep/​cli@​0.44.0
	vitest@​4.1.9
	tsx@​4.22.4
	vite@​8.0.16
	@​changesets/​cli@​2.31.0
	@​biomejs/​biome@​2.5.0

View full report