chore(deps-dev): bump the minor group across 1 directory with 3 updates

[dependabot]

Bumps the minor group with 2 updates in the / directory: @vitest/coverage-v8 and marko.

Updates @vitest/coverage-v8 from 4.1.9 to 4.1.10

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• See full diff in compare view

Updates marko from 6.2.1 to 6.2.3

Changelog

Sourced from marko's changelog.

6.2.3

Patch Changes

• #3329 98ea020 Thanks @​DylanPiercey! - Fix a batch of runtime and translator bugs:
  • Fix an array-pattern rest element in a tag param or nested destructure (e.g. <for|[first, ...rest] of rows|>) being aliased to a sibling binding, which produced wrong values for the rest and its siblings.
  • Fix ${...} interpolation that includes a template literal (e.g. a <textarea> body) losing escape sequences by using the cooked instead of raw quasi value.
  • Fix a run of adjacent static-text placeholders with no intervening text node (e.g. <div>${"a"}${"b"}${dynamic}</div>) dropping a DOM walk step, and two static texts separated only by a static placeholder or comment (e.g. a${"x"}b) over-counting it — either of which misaligned a following dynamic node.
  • Fix a typed-array view that starts at offset 0 but doesn't span its whole buffer serializing a truncated buffer, breaking a later view that shares the buffer.
  • Fix a registered/resumable object or class method with a computed key losing its computed (and static) flag during SSR translation, changing the property name.
  • Reject a string by key on <for in>/<for to>/<for until> at compile time with a helpful error instead of crashing at render (string by is only supported on <for of>).

6.2.2

Patch Changes

• #3327 d298ff1 Thanks @​DylanPiercey! - Only treat a non-page template as an embed (with a randomized, non-idempotent render id) when the linkAssets compiler option is configured. Without it — as in most test and SSR-only setups — every template keeps a deterministic render id, so server integration tests that render templates directly stay idempotent.

Commits

• 2f400f4 [ci] release
• 98ea020 fix(runtime-tags): bug bash runtime & translator fixes
• c042f25 [ci] release
• d298ff1 fix(runtime-tags): only mark templates as embeds when linkAssets is configured
• 2425259 perf(tests): add parallel test runner to fan the suite across CPU cores
• c07bfa2 [ci] release
• 2329b2c perf(runtime-tags): size/perf pass over dynamic style placeholders
• eea2ffb fix(runtime-tags): separate placeholder text at the edge of a \<show> body
• 33f21ae perf(runtime-tags): skip importing and calling empty child template setups
• 62c17be fix(runtime-tags): avoid merging an expression's references into itself
• Additional commits viewable in compare view

Updates vitest from 4.1.9 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[changeset-bot]

⚠️ No Changeset found

Latest commit: f0e2397

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.