chore(deps): update vitest monorepo to v4.1.6

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@vitest/coverage-istanbul (source)	4.1.4 → 4.1.6
@vitest/coverage-v8 (source)	4.1.4 → 4.1.6
vitest (source)	4.1.4 → 4.1.6

---

Release Notes

vitest-dev/vitest (@​vitest/coverage-istanbul)

v4.1.6

Compare Source

   🐞 Bug Fixes

• browser: Provide project reference in ToMatchScreenshotResolvePath  -  by @​macarie and @​sheremet-va in #​10138 (31882)
• Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options  -  by @​hi-ogawa, Codex and @​sheremet-va in #​10196 (2847d)
• browser: Simplify orchestrator otel carrier  -  by @​hi-ogawa in #​10285 (18af9)

   🏎 Performance

• Stringify diff objects only once  -  by @​sheremet-va in #​10276 (9f7b1)

    View changes on GitHub

v4.1.5

Compare Source

   🚀 Experimental Features

• coverage: Istanbul to support instrumenter option  -  by @​BartWaardenburg and @​AriPerkkio in #​10119 (0e0ff)

   🐞 Bug Fixes

• --project negation excludes browser instances  -  by @​felamaslen in #​10131 (9423d)
• Project color label on html reporter  -  by @​hi-ogawa in #​10142 (596f7)
• Fix vi.defineHelper called as object method  -  by @​hi-ogawa in #​10163 (122c2)
• Alias agent reporter to minimal  -  by @​sheremet-va in #​10157 (663b9)
• Respect diff config options in soft assertions  -  by @​Copilot, sheremet-va and @​sheremet-va in #​8696 (9787d)
• Respect diff config options in soft assertions "  -  by @​sheremet-va in #​8696 (7dc6d)
• ast-collect: Recognize _vi_import prefix in static test discovery  -  by @​Yejneshwar in #​10129 (32546)
• coverage: Descriptive error message when reports directory is removed during test run  -  by @​DaveT1991 and @​AriPerkkio in #​10117 (14133)
• snapshot: Increase default snapshot max output length  -  by @​hi-ogawa and Codex in #​10150 (21e66)
• ui: Fix jsx/tsx syntax highlight  -  by @​hi-ogawa in #​10152 (f1b1f)
• web-worker: Support MessagePort objects referenced inside postMessage data  -  by @​whitphx and Claude Opus 4.6 (1M context) in #​9927 and #​10124 (7ad7d)
• api: Make test-specification options writable  -  by @​sheremet-va in #​10154 (6abd5)

    View changes on GitHub

---

Configuration

📅 Schedule: (in timezone Africa/Johannesburg)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​vitest/​coverage-v8@​4.1.4 ⏵ 4.1.6
	@​vitest/​coverage-istanbul@​4.1.4 ⏵ 4.1.6	+1		+1	+1

View full report

[github-actions]

📚 Docs preview deployed

https://scratchyjs-docs-pr-93.asjas.workers.dev

Updates automatically on every push to this PR.

[github-actions]

⚡ Benchmark Results

benchmarks/renderer/ring-buffer.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
SharedRingBuffer – small payload (64 B) — write 64 bytes	570.1 K	0.0018	0.0073	±1.08%	+5.0%
SharedRingBuffer – small payload (64 B) — write + read 64 bytes	512.8 K	0.0020	0.0077	±1.06%	-2.5%
SharedRingBuffer – medium payload (1 KB) — write 1 KB	313.5 K	0.0032	0.0121	±0.52%	-9.7%
SharedRingBuffer – medium payload (1 KB) — write + read 1 KB	280.8 K	0.0036	0.0142	±1.09%	+8.0%
SharedRingBuffer – large payload (16 KB) — write 16 KB	60.0 K	0.0167	0.0396	±0.78%	+3.0%
SharedRingBuffer – large payload (16 KB) — write + read 16 KB	76.9 K	0.0130	0.0374	±30.83%	~0%
SharedRingBuffer – sequential throughput (100 × 64 B) — 100 write + read cycles	41.5 K	0.0241	0.0390	±0.45%	+2.2%
SharedRingBuffer – introspection — availableToRead	14.81 M	0.0001	0.0001	±0.12%	~0%
SharedRingBuffer – introspection — isEmpty	14.92 M	0.0001	0.0001	±0.13%	+2.1%
SharedRingBuffer – introspection — isFull	14.75 M	0.0001	0.0001	±0.12%	+1.1%

benchmarks/renderer/shared-buffer.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
SharedBuffer – allocation — createSharedBuffer(4 KB)	656.8 K	0.0015	0.0064	±1.79%	-7.9%
SharedBuffer – allocation — createSharedBuffer(64 KB)	51.2 K	0.0195	0.0421	±0.76%	-9.2%
SharedBuffer – small payload round-trip — write small JSON	306.1 K	0.0033	0.0112	±0.70%	-14.8% ⚠️
SharedBuffer – small payload round-trip — write + read small JSON	228.9 K	0.0044	0.0144	±0.44%	-16.3% ⚠️
SharedBuffer – medium payload round-trip — write medium JSON (~2 KB)	94.6 K	0.0106	0.0266	±0.43%	+6.3%
SharedBuffer – medium payload round-trip — write + read medium JSON (~2 KB)	57.2 K	0.0175	0.0355	±0.42%	-2.0%
SharedBuffer – large payload round-trip — write large JSON (~10 KB)	15.3 K	0.0654	0.0965	±0.34%	~0%
SharedBuffer – large payload round-trip — write + read large JSON (~10 KB)	7.6 K	0.1318	0.1691	±0.40%	-2.9%

benchmarks/utils/ip-address.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
getClientIPAddress – no IP headers — no IP-related headers → null	2.62 M	0.0004	0.0008	±0.80%	~0%
getClientIPAddress – single header — cf-connecting-ip (Cloudflare)	1.65 M	0.0006	0.0012	±1.15%	-1.0%
getClientIPAddress – single header — x-forwarded-for (simple)	1.93 M	0.0005	0.0009	±0.37%	~0%
getClientIPAddress – single header — x-real-ip	1.49 M	0.0007	0.0012	±1.26%	~0%
getClientIPAddress – single header — true-client-ip (Akamai / Cloudflare Enterprise)	1.55 M	0.0006	0.0011	±1.27%	~0%
getClientIPAddress – x-forwarded-for multi-hop — 2-hop chain	1.87 M	0.0005	0.0008	±0.16%	+7.2%
getClientIPAddress – x-forwarded-for multi-hop — 4-hop chain	1.70 M	0.0006	0.0009	±0.29%	+1.8%
getClientIPAddress – Forwarded header (RFC 7239) — simple for= directive	1.01 M	0.0010	0.0013	±0.22%	~0%
getClientIPAddress – Forwarded header (RFC 7239) — for= with port	739.4 K	0.0014	0.0022	±0.42%	+1.4%
getClientIPAddress – Forwarded header (RFC 7239) — IPv6 literal	744.3 K	0.0013	0.0021	±0.37%	-2.2%
getClientIPAddress – Forwarded header (RFC 7239) — multi-hop Forwarded	810.0 K	0.0012	0.0022	±0.44%	-3.8%
getClientIPAddress – IPv6 addresses — x-forwarded-for IPv6	1.09 M	0.0009	0.0018	±2.58%	-4.7%

benchmarks/utils/promise.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
promiseHash – concurrent resolution — 2 already-resolved promises	832.9 K	0.0012	0.0029	±1.07%	-2.7%
promiseHash – concurrent resolution — 5 already-resolved promises	512.9 K	0.0019	0.0033	±1.49%	-2.1%
promiseHash – concurrent resolution — 10 already-resolved promises	289.5 K	0.0035	0.0081	±1.61%	+1.5%
promiseHash – concurrent resolution — 5 promises with object values	475.3 K	0.0021	0.0031	±1.37%	-2.2%
timeout – wrapping fast promises — timeout wrapping an already-resolved promise (1 s budget)	949.6 K	0.0011	0.0018	±1.27%	-1.9%
timeout – wrapping fast promises — timeout wrapping an already-resolved object (5 s budget)	920.4 K	0.0011	0.0018	±0.53%	-1.6%

benchmarks/utils/safe-redirect.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
safeRedirect – valid paths — root path /	7.03 M	0.0001	0.0002	±0.15%	+4.0%
safeRedirect – valid paths — simple path /dashboard	3.63 M	0.0003	0.0003	±0.27%	~0%
safeRedirect – valid paths — nested path /settings/profile	3.14 M	0.0003	0.0004	±0.27%	-1.9%
safeRedirect – valid paths — path with query string /search?q=hello	3.45 M	0.0003	0.0003	±0.29%	-1.1%
safeRedirect – valid paths — path with hash /docs#section	3.42 M	0.0003	0.0003	±0.35%	-4.8%
safeRedirect – rejected inputs — absolute URL https://evil.com	4.78 M	0.0002	0.0002	±0.14%	+3.7%
safeRedirect – rejected inputs — protocol-relative URL //evil.com	4.62 M	0.0002	0.0002	±0.24%	+2.5%
safeRedirect – rejected inputs — backslash-relative /\evil.com	4.44 M	0.0002	0.0002	±0.12%	-4.0%
safeRedirect – rejected inputs — path traversal /../etc/passwd	4.12 M	0.0002	0.0003	±0.16%	~0%
safeRedirect – rejected inputs — null input	15.47 M	0.0001	0.0001	±0.12%	-4.6%
safeRedirect – rejected inputs — undefined input	16.13 M	0.0001	0.0001	±0.12%	~0%
safeRedirect – rejected inputs — empty string	16.18 M	0.0001	0.0001	±0.11%	~0%
safeRedirect – percent-encoded bypass — percent-encoded // (%2F%2F)	4.75 M	0.0002	0.0002	±0.12%	~0%
safeRedirect – percent-encoded bypass — percent-encoded path traversal (%2e%2e)	4.73 M	0.0002	0.0002	±0.24%	~0%
safeRedirect – percent-encoded bypass — mixed percent-encoded absolute URL	4.47 M	0.0002	0.0003	±0.13%	-2.4%
safeRedirect – custom default redirect — valid path with custom default	3.51 M	0.0003	0.0003	±0.12%	-6.4%
safeRedirect – custom default redirect — invalid input with custom default	4.75 M	0.0002	0.0003	±0.12%	-1.1%

🔬 Compared against the latest benchmark run on main. ⚠️ = >10% slower · 🚀 = >10% faster.