Skip to content

Bump vitest from 3.2.4 to 4.1.0#265

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/vitest-4.1.0
Open

Bump vitest from 3.2.4 to 4.1.0#265
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/vitest-4.1.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Bumps vitest from 3.2.4 to 4.1.0.

Release notes

Sourced from vitest's releases.

v4.1.0

Vitest 4.1 is out!

This release page lists all changes made to the project during the 4.1 beta. To get a review of all the new features, read our blog post.

   🚀 Features

... (truncated)

Commits
  • 4150b91 chore: release v4.1.0
  • 1de0aa2 fix: correctly identify concurrent test during static analysis (#9846)
  • c3cac1c fix: use isAgent check, not just TTY, for watch mode (#9841)
  • eab68ba chore(deps): update all non-major dependencies (#9824)
  • 031f02a fix: allow catch/finally for async assertion (#9827)
  • 3e9e096 feat(reporters): add agent reporter to reduce ai agent token usage (#9779)
  • 0c2c013 chore: release v4.1.0-beta.6
  • 8181e06 fix: hideSkippedTests should not hide test.todo (fix #9562) (#9781)
  • a8216b0 fix: manual and redirect mock shouldn't load or transform original module...
  • 689a22a fix(browser): types of getCDPSession and cdp() (#9716)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vitest since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@coderabbitai
Copy link

coderabbitai bot commented Mar 16, 2026

📝 Walkthrough

Walkthrough

The pull request updates the vitest development dependency in package.json from version ^3.2.4 to ^4.1.0. This is a minor version bump within the major version 4 range, making the latest compatible patches available to the project.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The PR description lacks required sections from the template: no explicit 'Changes' description, no checklist items completed, and no labels applied beyond what's noted. Add a 'Changes' section describing the update, complete the checklist items (apply label, confirm documentation/test updates), and verify all template sections are addressed.
✅ Passed checks (2 passed)
Check name Status Explanation
Title check ✅ Passed The title 'Bump vitest from 3.2.4 to 4.1.0' directly and clearly describes the main change in the PR.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
  • 📝 Generate docstrings (stacked PR)
  • 📝 Generate docstrings (commit on current branch)
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch dependabot/npm_and_yarn/vitest-4.1.0
📝 Coding Plan
  • Generate coding plan for human review comments

Comment @coderabbitai help to get the list of available commands and usage tips.

Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 3.2.4 to 4.1.0.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-version: 4.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/vitest-4.1.0 branch from 01dfa14 to da83d0f Compare March 16, 2026 17:02
Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@package.json`:
- Line 58: The `@vitest/coverage-v8` dependency is pinned to ^3.2.4 while vitest
is ^4.1.0, causing a version mismatch that breaks test:coverage; update the
`@vitest/coverage-v8` entry in package.json to ^4.1.0 to match vitest (symbol:
`@vitest/coverage-v8`) and then run your package manager to reinstall (npm install
/ pnpm install / yarn) and verify by running npm run test:coverage.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository: lokalise/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: a367c140-5464-405a-87e0-0d05109daaf3

📥 Commits

Reviewing files that changed from the base of the PR and between 6750dc1 and 01dfa14.

📒 Files selected for processing (1)
  • package.json

"tsup": "^8.5.0",
"typescript": "^5.9.2",
"vitest": "^3.2.4",
"vitest": "^4.1.0",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "Local package.json versions:"
jq -r '.devDependencies | {vitest: .vitest, coverage_v8: .["@vitest/coverage-v8"]}' package.json

VITEST_RANGE=$(jq -r '.devDependencies.vitest' package.json)
COV_RANGE=$(jq -r '.devDependencies["@vitest/coverage-v8"]' package.json)

VITEST_MAJOR=$(echo "$VITEST_RANGE" | sed -E 's/^[^0-9]*([0-9]+).*/\1/')
COV_MAJOR=$(echo "$COV_RANGE" | sed -E 's/^[^0-9]*([0-9]+).*/\1/')

echo "Detected majors -> vitest: $VITEST_MAJOR, `@vitest/coverage-v8`: $COV_MAJOR"
if [ "$VITEST_MAJOR" != "$COV_MAJOR" ]; then
  echo "WARNING: major versions are misaligned."
fi

echo
echo "Registry metadata (for compatibility verification):"
curl -s https://registry.npmjs.org/vitest/4.1.0 | jq '{name, version, peerDependencies}'
curl -s https://registry.npmjs.org/@vitest/coverage-v8/latest | jq '{name, version, peerDependencies}'

Repository: lokalise/node-core

Length of output: 858


Update @vitest/coverage-v8 to ^4.1.0 to match vitest major version.

vitest is now ^4.1.0 but @vitest/coverage-v8 remains at ^3.2.4. The registry confirms that @vitest/coverage-v8@4.1.0 requires vitest@4.1.0 exactly. This mismatch will break npm run test:coverage.

Suggested fix
-        "@vitest/coverage-v8": "^3.2.4",
+        "@vitest/coverage-v8": "^4.1.0",
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@package.json` at line 58, The `@vitest/coverage-v8` dependency is pinned to
^3.2.4 while vitest is ^4.1.0, causing a version mismatch that breaks
test:coverage; update the `@vitest/coverage-v8` entry in package.json to ^4.1.0 to
match vitest (symbol: `@vitest/coverage-v8`) and then run your package manager to
reinstall (npm install / pnpm install / yarn) and verify by running npm run
test:coverage.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants