Bump vitest from 1.6.1 to 3.1.2

[dependabot]

Bumps vitest from 1.6.1 to 3.1.2.

Release notes

Sourced from vitest's releases.

v3.1.2

   🐞 Bug Fixes

• Add global chai variable in vitest/globals (fix: #7474)  -  by @​Jay-Karia in vitest-dev/vitest#7771 and vitest-dev/vitest#7474 (d9297)
• Prevent modifying test.exclude when same object passed in coverage.exclude  -  by @​AriPerkkio in vitest-dev/vitest#7774 (c3751)
• Fix already hoisted mock  -  by @​hi-ogawa in vitest-dev/vitest#7815 (773b1)
• Fix test.scoped inheritance  -  by @​hi-ogawa in vitest-dev/vitest#7814 (db6c3)
• Remove pointer-events-none after resizing the left panel  -  by @​alexprudhomme in vitest-dev/vitest#7811 (a7e77)
• Default to run mode when stdin is not a TTY  -  by @​kentonv, @​hi-ogawa and @​sheremet-va in vitest-dev/vitest#7673 (6358f)
• Use happy-dom/jsdom types for envionmentOptions  -  by @​hi-ogawa in vitest-dev/vitest#7795 (67430)
• browser:
  • Fix transform error before browser server initialization  -  by @​hi-ogawa in vitest-dev/vitest#7783 (5f762)
  • Fix mocking from outside of root  -  by @​hi-ogawa in vitest-dev/vitest#7789 (03f55)
  • Scale iframe for non ui case  -  by @​hi-ogawa in vitest-dev/vitest#6512 (c3374)
• coverage:
  • await profiler calls  -  by @​AriPerkkio in vitest-dev/vitest#7763 (795a6)
  • Expose profiling timers  -  by @​AriPerkkio in vitest-dev/vitest#7820 (5652b)
• deps:
  • Update all non-major dependencies  -  in vitest-dev/vitest#7765 (7c3df)
  • Update all non-major dependencies  -  in vitest-dev/vitest#7831 (15701)
• runner:
  • Correctly call test hooks and teardown functions  -  by @​sheremet-va in vitest-dev/vitest#7775 (3c00c)
  • Show stacktrace on test timeout error  -  by @​hi-ogawa in vitest-dev/vitest#7799 (df33b)
• ui:
  • Load panel sizes from storage on initial load  -  by @​userquin in vitest-dev/vitest#7265 (6555d)
• vite-node:
  • Named export should overwrite export all  -  by @​hi-ogawa in vitest-dev/vitest#7846 (5ba0d)
  • Add ERR_MODULE_NOT_FOUND code error if module cannot be loaded  -  by @​sheremet-va in vitest-dev/vitest#7776 (f9eac)

   🏎 Performance

• browser: Improve browser parallelisation  -  by @​sheremet-va in vitest-dev/vitest#7665 (816a5)

    View changes on GitHub

v3.1.1

   🐞 Bug Fixes

• reporter:
  • Report tests in correct order  -  by @​sheremet-va in vitest-dev/vitest#7752 (b166e)
  • Print test only once in the verbose mode  -  by @​sheremet-va in vitest-dev/vitest#7738 (69ca4)

    View changes on GitHub

v3.1.0

🚀 Features

• Introduce %$ option to add number of the test to its title - by @​kemuridama in vitest-dev/vitest#7412 (df347)
• Add diff.maxDepth option and set non-Infinity value as a default to reduce crash - by @​hi-ogawa in vitest-dev/vitest#7481 (eacab)
• Allow array element for test.each/for title formatting - by @​hi-ogawa in vitest-dev/vitest#7522 (ea3d6)

... (truncated)

Commits

• 5a0afd1 chore: release v3.1.2
• b70a6f1 chore(deps): unbundle tinyglobby and update (#7864)
• f9eacbc fix(vite-node): add ERR_MODULE_NOT_FOUND code error if module cannot be loade...
• 3102986 docs: browser.provider link (#7851)
• 816a5c5 perf(browser): improve browser parallelisation (#7665)
• 6743008 fix: use happy-dom/jsdom types for envionmentOptions (#7795)
• 6358f21 fix: default to run mode when stdin is not a TTY (#7673)
• 15701f5 fix(deps): update all non-major dependencies (#7831)
• 5652bf9 fix(coverage): expose profiling timers (#7820)
• 29084f1 chore(deps): update all non-major dependencies (#7802)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	vitest@​1.6.1 ⏵ 3.1.2	+3		+24	+2

View full report

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

[socket-security]

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Action	Severity	Alert (click for details)
Block		tinyexec@0.3.2 has Shell access. Module: child_process Location: Package overview Source: package-lock.json Source: package.json ℹ Read more on: This package | This alert | What is shell access? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/tinyexec@0.3.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[dependabot]

Superseded by #41.