Update vitest to v1.6.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
vitest (source)	1.5.0 -> 1.6.1

---

Release Notes

vitest-dev/vitest (vitest)

v1.6.1

Compare Source

This release includes security patches for:

• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

   🐞 Bug Fixes

• backport #​7317 to v1 - by @​hi-ogawa in #​7319

    View changes on GitHub

v1.6.0

Compare Source

   🚀 Features

• Support standalone mode  -  by @​sheremet-va in #​5565 (bdce0)
• Custom "snapshotEnvironment" option  -  by @​sheremet-va in #​5449 (30f72)
• benchmark: Support comparing benchmark result  -  by @​hi-ogawa and @​sheremet-va in #​5398 (f8d3d)
• browser: Allow injecting scripts  -  by @​sheremet-va in #​5656 (21e58)
• reporter: Support includeConsoleOutput and addFileAttribute in junit  -  by @​hi-ogawa in #​5659 (2f913)
• ui: Sort items by file name  -  by @​btea in #​5652 (1f726)

   🐞 Bug Fixes

• Keep order of arguments for .each in custom task collectors  -  by @​sheremet-va in #​5640 (7d57c)
• Call resolveId('vitest') after buildStart  -  by @​hi-ogawa in #​5646 (f5faf)
• Hash the name of the file when caching  -  by @​sheremet-va in #​5654 (c9e68)
• Don't panic on empty files in node_modules  -  by @​sheremet-va (40c29)
• Use toJSON for error serialization  -  by @​hi-ogawa in #​5526 (19a21)
• coverage:
  • Exclude *.test-d.* by default  -  by @​MindfulPol in #​5634 (bfe8a)
  • Apply vite-node's wrapper only to executed files  -  by @​AriPerkkio in #​5642 (c9883)
• vm:
  • Support network imports  -  by @​sheremet-va in #​5610 (103a6)

   🏎 Performance

• Improve performance of forks pool  -  by @​sheremet-va in #​5592 (d8304)
• Unnecessary rpc call when coverage is disabled  -  by @​AriPerkkio in #​5658 (c5712)

    View changes on GitHub

v1.5.3

Compare Source

   🐞 Bug Fixes

• Use package.json name for a workspace project if not provided  -  by @​sheremet-va in #​5608 (48fba)
• Backport jest iterable equality within object  -  by @​sukovanej in #​5621 (30e5d)
• browser: Support benchmark  -  by @​hi-ogawa in #​5622 (becab)
• reporter: Use default error formatter for JUnit  -  by @​hi-ogawa in #​5629 (20060)

    View changes on GitHub

v1.5.2

Compare Source

   🐞 Bug Fixes

• Check for null before storing in weakmap  -  by @​sheremet-va (ce368)

    View changes on GitHub

v1.5.1

Compare Source

   🚀 Features

• api: startVitest() to accept stdout and stdin  -  by @​AriPerkkio in #​5493 (780b1)
  • This is listed as a feature, but it doesn't increase the minor version because startVitest API is experimental and doesn't follow semver.

   🐞 Bug Fixes

• Close vite servers on all resolved projects  -  by @​surc54 in #​5544 (413ec)
• Fix default import.meta.env.PROD: false  -  by @​hi-ogawa in #​5561 (9c649)
• Resolve cwd correctly when initiating projects  -  by @​sheremet-va in #​5582 (ec9d7)
• Always run onTestFinished in reverse order  -  by @​sheremet-va in #​5598 (23f29)
• browser:
  • Disable fileParallelism by default on browser pool  -  by @​hi-ogawa in #​5528 (5c69f)
  • Dispose tester iframe on done  -  by @​hi-ogawa in #​5595 (b2135)
• coverage:
  • Fix bundling of v8-to-istanbul  -  by @​AriPerkkio in #​5549 (df6a4)
  • Prevent crash when cleanOnRerun is disabled  -  by @​AriPerkkio in #​5540 (ea3c1)
  • thresholds to compare files relative to root  -  by @​AriPerkkio in #​5574 (80265)
• expect:
  • Fix toEqual and toMatchObject with circular references  -  by @​hi-ogawa in #​5535 (9e641)
• vitest:
  • Fix false positive file filter match with leading slash  -  by @​hi-ogawa in #​5578 (316eb)
  • Watch the output directory correctly  -  by @​sheremet-va in #​5584 (e40f9)
  • StubEnv casts boolean on PROD/SSR/DEV  -  by @​sheremet-va in #​5590 (4da88)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 785fd90

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR