Skip to content

Bump vitest from 3.2.4 to 4.1.0#377

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/vitest-4.1.0
Closed

Bump vitest from 3.2.4 to 4.1.0#377
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/vitest-4.1.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Bumps vitest from 3.2.4 to 4.1.0.

Release notes

Sourced from vitest's releases.

v4.1.0

Vitest 4.1 is out!

This release page lists all changes made to the project during the 4.1 beta. To get a review of all the new features, read our blog post.

   🚀 Features

... (truncated)

Commits
  • 4150b91 chore: release v4.1.0
  • 1de0aa2 fix: correctly identify concurrent test during static analysis (#9846)
  • c3cac1c fix: use isAgent check, not just TTY, for watch mode (#9841)
  • eab68ba chore(deps): update all non-major dependencies (#9824)
  • 031f02a fix: allow catch/finally for async assertion (#9827)
  • 3e9e096 feat(reporters): add agent reporter to reduce ai agent token usage (#9779)
  • 0c2c013 chore: release v4.1.0-beta.6
  • 8181e06 fix: hideSkippedTests should not hide test.todo (fix #9562) (#9781)
  • a8216b0 fix: manual and redirect mock shouldn't load or transform original module...
  • 689a22a fix(browser): types of getCDPSession and cdp() (#9716)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vitest since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 3.2.4 to 4.1.0.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-version: 4.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added major skip-release Do not publish new release labels Mar 16, 2026
@dependabot dependabot bot requested review from a team, CarlosGamero, drdaemos and kibertoad as code owners March 16, 2026 11:57
@dependabot dependabot bot added major skip-release Do not publish new release labels Mar 16, 2026
@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Mar 16, 2026

📝 Walkthrough

Summary by CodeRabbit

  • Chores
    • Updated testing framework dependency to the latest version.

Walkthrough

A devDependency version for vitest in package.json is updated from ^3.2.4 to ^4.1.0. This represents a major version upgrade of the testing framework, including all minor and patch releases up to version 4.1.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The PR description is missing required sections from the template: 'Changes' section with description, and an incomplete 'Checklist' with no labels applied and task items unchecked. Add a 'Changes' section describing the update, apply the 'major' label (already visible in PR metadata), and complete the checklist items by checking the relevant boxes.
✅ Passed checks (2 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately and concisely describes the main change: bumping vitest from version 3.2.4 to 4.1.0.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch dependabot/npm_and_yarn/vitest-4.1.0
📝 Coding Plan
  • Generate coding plan for human review comments

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@package.json`:
- Line 86: The package.json currently upgrades vitest to ^4.1.0 but leaves
`@vitest/coverage-v8` at ^3.2.4; update the `@vitest/coverage-v8` devDependency to a
v4-compatible version (e.g. ^4.0.0 or the latest 4.x) so it matches Vitest 4's
peer dependency, then reinstall dependencies (npm/yarn/pnpm) and run your test
coverage command to verify coverage runs; target the "@vitest/coverage-v8" entry
in package.json and ensure the version string is updated to a 4.x range.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository: lokalise/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 51582b56-4c50-4109-b535-fd3747edfbe8

📥 Commits

Reviewing files that changed from the base of the PR and between e8c9c59 and 9bc5774.

📒 Files selected for processing (1)
  • package.json

"rimraf": "^6.0.1",
"typescript": "^5.9.3",
"vitest": "^3.2.4",
"vitest": "^4.1.0",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

python3 - <<'PY'
import json, urllib.request

def get_pkg(name, version):
    url = f"https://registry.npmjs.org/{name}/{version}"
    with urllib.request.urlopen(url) as r:
        return json.load(r)

cov = get_pkg("@vitest/coverage-v8", "3.2.4")
vit = get_pkg("vitest", "4.1.0")

print("@vitest/coverage-v8@3.2.4 peerDependencies:")
print(json.dumps(cov.get("peerDependencies", {}), indent=2))
print("\nvitest@4.1.0 version:", vit.get("version"))
PY

Repository: lokalise/fastify-extras

Length of output: 2685


🏁 Script executed:

cat -n package.json | sed -n '70,90p'

Repository: lokalise/fastify-extras

Length of output: 861


🌐 Web query:

vitest 4.1.0 @vitest/coverage-v8 compatibility peer dependencies

💡 Result:

For Vitest 4.1.0, the @vitest/coverage-v8 package you should use is @vitest/coverage-v8@4.1.0, because it declares exact-version peer deps:

  • @vitest/coverage-v8@4.1.0 peerDependencies:
    • vitest: 4.1.0
    • @vitest/browser: 4.1.0 (optional)[1]

So the compatible pairing is:

  • vitest@4.1.0 + @vitest/coverage-v8@4.1.0[1][2]

Install:

npm i -D vitest@4.1.0 `@vitest/coverage-v8`@4.1.0

Upgrade @vitest/coverage-v8 to major version 4 to match Vitest 4.

Line 86 upgrades vitest to ^4.1.0, but Line 74 keeps @vitest/coverage-v8 at ^3.2.4. The coverage plugin has exact peer dependency on vitest@4.1.0, making this combination incompatible and breaking coverage runs.

Suggested fix
-        "@vitest/coverage-v8": "^3.2.4",
+        "@vitest/coverage-v8": "^4.1.0",
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@package.json` at line 86, The package.json currently upgrades vitest to
^4.1.0 but leaves `@vitest/coverage-v8` at ^3.2.4; update the `@vitest/coverage-v8`
devDependency to a v4-compatible version (e.g. ^4.0.0 or the latest 4.x) so it
matches Vitest 4's peer dependency, then reinstall dependencies (npm/yarn/pnpm)
and run your test coverage command to verify coverage runs; target the
"@vitest/coverage-v8" entry in package.json and ensure the version string is
updated to a 4.x range.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 30, 2026

Superseded by #383.

@dependabot dependabot bot closed this Mar 30, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/vitest-4.1.0 branch March 30, 2026 12:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

major skip-release Do not publish new release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants