chore(deps-dev): bump @vitest/coverage-v8 from 4.1.9 to 4.1.10

[dependabot]

Bumps @vitest/coverage-v8 from 4.1.9 to 4.1.10.

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cubehouse]

Holding off on this one — root-caused the CI failure, it's not something wrong in this repo.

This bump pulls vite 8.0.16 → 8.1.3 in transitively. Every test file that imports a decorated class (@config, @cache, @http, @inject, @destinationController — used throughout src/parks/) fails with SyntaxError: Invalid or unexpected token. Isolated it to a minimal repro (a bare class with one class decorator and one property decorator, no factories, no parameters) — fails identically, so it's not anything unusual in how this codebase uses decorators.

Ruled out esbuild itself: it's pinned to the exact same version (0.28.1) on both sides of this bump, and tested directly — it parses the same decorator syntax fine, both with and without experimentalDecorators explicitly set. So the break isn't in esbuild's TS/decorator handling.

That points at es-module-lexer, the lightweight scanner Vite runs ahead of the esbuild transform to find imports/exports. Its version churned hard in exactly this Vite range — vite's own changelog: bumped to 2.0.0 in 8.1.0-beta, reverted to 2.1.0 in 8.1.2, bumped again to 2.3.0 in 8.1.3. Two other confirmed regressions already came out of that same window in the same code path (vitejs/vite#22750 — the scanner mistaking a class method literally named import for a dynamic import() call and corrupting the output; es-module-lexer#214 — a separate large-input parsing regression). No existing report matches decorators specifically, so this looks like an unreported gap in the same family rather than a known, tracked bug.

Leaving this open rather than closing it — a future vite/es-module-lexer patch may fix it and dependabot will pick that up automatically. Not merging until then. Backlogged: maybe file this upstream with the minimal repro if it's still broken next time we look.