chore(deps): update vitest monorepo to v2.1.9

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@vitest/browser (source)	2.1.3 -> 2.1.9
vitest (source)	2.1.3 -> 2.1.9

---

Release Notes

vitest-dev/vitest (@​vitest/browser)

v2.1.9

Compare Source

This release includes security patches for:

• Browser mode serves arbitrary files | CVE-2025-24963
• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

   🐞 Bug Fixes

• backport https://github.com/vitest-dev/vitest/issues/7317 to v2 - by @​hi-ogawa in https://github.com/vitest-dev/vitest/pull/7318
• (backport #​7340 to v2) restrict served files from /__screenshot-error - by @​hi-ogawa in https://github.com/vitest-dev/vitest/pull/7343

    View changes on GitHub

v2.1.8

Compare Source

   🐞 Bug Fixes

• Support Node 21  -  by @​sheremet-va (92f7a)

    View changes on GitHub

v2.1.7

Compare Source

   🐞 Bug Fixes

• Revert support for Vite 6  -  by @​sheremet-va (fbe5c)
  • This introduced some breaking changes (https://github.com/vitest-dev/vitest/issues/6992). We will enable support for it later. In the meantime, you can still use pnpm.overrides or yarn resolutions to override the vite version in the vitest package - the APIs are compatible.

    View changes on GitHub

v2.1.6

Compare Source

🚀 Features

• Support Vite 6

    View changes on GitHub

v2.1.5

Compare Source

   🐞 Bug Fixes

• dangerouslyIgnoreUnhandledErrors without base reporter  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6808 (0bf0a)
• Capture unhandledRejection even when base reporter is not used  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6812 (8878b)
• Don't change the working directory when loading workspace projects  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6811 (f0aea)
• Remove sequence.concurrent from the RuntimeConfig type  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6880 (6af73)
• Stop the runner before restarting, restart on workspace config change  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6859 (b01df)
• Don't rerun on Esc or Ctrl-C during watch filter  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6895 (98f76)
• Print ssrTransform error  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6885 (4c96c)
• Throw an error and a warning if .poll, .element, .rejects/.resolves, and locator.* weren't awaited  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6877 (93b67)
• browser:
  • Don't process the default css styles  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6861 (0d67f)
  • Support non US key input  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6873 (5969d)
  • Stop the browser rpc when the pool is closed  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6858 (9a0c9)
  • Init browsers eagerly when tests are running  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6876 (417bd)
• coverage:
  • Report uncovered files when re-run by enter or 'a'  -  by @​AriPerkkio in https://github.com/vitest-dev/vitest/issues/6848 (487c8)
• ui:
  • Remove crossorigin attributes for same origin assets  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6883 (6e793)
• vite-node:
  • Improve esm check to decide external  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6816 (7e1fa)
  • Top-level throw in module is not reported properly  -  by @​vanaigr and @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6840 (cf0cb)
• vitest:
  • Use fetch() implementation from happy-dom  -  by @​capricorn86 in https://github.com/vitest-dev/vitest/issues/6879 (3c56f)

   🏎 Performance

• Limit workspace project concurrency to available cores  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6869 (f4c04)

    View changes on GitHub

v2.1.4

Compare Source

   🚀 Features

This patch release includes a non-breaking feature for the experimental Browser Mode that doesn't follow SemVer. If you want to avoid picking up releases like this, make sure to pin the Vitest version in your package.json. See npm's documentation about semver for more information.

• browser: Allow custom HTML path, respect plugins transformIndexHtml  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6725 (16902)

   🐞 Bug Fixes

• windows:
  • Don't normalize drive case letter in root  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6792 (b28cd)
• browser:
  • Fix default browser port  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6700 (9c518)
  • Optimize expect-type  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6713 (07918)
  • Don't polyfill process.env  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6718 (da6d2)
  • Increment browser port automatically if there are several projects with browser.enabled  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6717 (a9397)
  • Cleanup keyboard state  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6731 (19278)
  • Don't add v= queries to setup files imports  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6759 (b8258)
  • User event cleanup on retry  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6764 (bdd15)
  • Ignore non mocked msw requests  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6770 (9d9ba)
  • Initiate MSW in the same frame as tests  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6772 (2444f)
• deps:
  • Update dependency sirv to v3  -  in https://github.com/vitest-dev/vitest/issues/6701 (fde5d)
• expect:
  • Correct behavior of toThrowError with empty string parameter  -  by @​shulaoda in https://github.com/vitest-dev/vitest/issues/6710 (a6129)
• mocker:
  • Remove spy from peer dependencies  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6777 (3a8b5)
• vitest:
  • Clarify slowTestThreshold, print slow tests in non-TTY mode  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6715 (2e6aa)
  • Print warnings form Vite plugins  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6724 (121b1)
  • Don't fail if the working directory starts with a lowercase drive letter  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/6779 (df6d7)
  • Silence import analysis warning  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6785 (39041)
• vitest,runner:
  • Simplify test.extend type exports  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/6707 (e5c38)

   🏎 Performance

• Use hash to replace createHash  -  by @​btea in https://github.com/vitest-dev/vitest/issues/6703 (5d07b)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.