fix(deps): update all major dependencies (major)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@commitlint/cli (source)	^20.5.0 → ^21.0.0
@commitlint/config-conventional (source)	^20.5.0 → ^21.0.0
@types/jsdom (source)	^28.0.1 → ^30.0.0
@vitest/coverage-v8 (source)	^4.1.0 → ^5.0.0
c8	^11.0.0 → ^12.0.0
jsdom	^29.0.1 → ^30.0.0
lint-staged	^16.4.0 → ^17.0.0
magic-string	^0.30.21 → ^1.0.0
npm-run-all2	^8.0.4 → ^9.0.0
pinia (source)	^3.0.4 → ^4.0.0
pnpm (source)	11.1.0 → 12.11.2
typescript (source)	^5.9.3 → ^7.0.0
vite-plugin-dts (source)	^4.5.4 → ^5.0.0
vite-plugin-pwa	^1.2.0 → ^2.0.0
vitest (source)	^4.1.0 → ^5.0.0

---

Release Notes

conventional-changelog/commitlint (@​commitlint/cli)

v21.2.3

Compare Source

Bug Fixes

• lint: trim trailing whitespace off the message handed to ignore matchers (#​4960) (a6f279b)

v21.2.2

Compare Source

Note: Version bump only for package @​commitlint/cli

v21.2.1

Compare Source

Note: Version bump only for package @​commitlint/cli

v21.2.0

Compare Source

Features

• resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#​4859) (fdb566f)

v21.1.0

Compare Source

Features

• cli: add --default-config flag to lint without a config file (#​4805) (7af27ba), closes #​3662

21.0.2 (2026-05-29)

Bug Fixes

• disallow same commit hash for --from and --to (#​4773) (121005e)

21.0.1 (2026-05-12)

Note: Version bump only for package @​commitlint/cli

v21.0.2

Compare Source

Bug Fixes

• disallow same commit hash for --from and --to (#​4773) (121005e)

v21.0.1

Compare Source

Note: Version bump only for package @​commitlint/cli

v21.0.0

Compare Source

• chore!: minimum node version v22 (#​4679) (ac2b3f4), closes #​4679

BREAKING CHANGES

• drop node v18 and v20 support

• Bump engines to >=v22 in all 39 package.json files
• Update @​types/node to ^22.0.0
• Update CI matrix to [22, 24]
• Update Ubuntu baseline job to ubuntu:26.04
• Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json
• Update pre-commit hook to use --ignore-engines
• Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com

20.5.3 (2026-04-30)

Note: Version bump only for package @​commitlint/cli

20.5.2 (2026-04-25)

Note: Version bump only for package @​commitlint/cli

v20.5.3

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.5.2

Compare Source

Note: Version bump only for package @​commitlint/cli

conventional-changelog/commitlint (@​commitlint/config-conventional)

v21.2.3

Compare Source

Bug Fixes

• rules: report the case that matched in case rule failure messages (#​4962) (9f5f7bc)

v21.2.2

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v21.2.0

Compare Source

Features

• resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#​4859) (fdb566f)

v21.1.0

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

21.0.2 (2026-05-29)

Note: Version bump only for package @​commitlint/config-conventional

21.0.1 (2026-05-12)

Note: Version bump only for package @​commitlint/config-conventional

v21.0.2

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v21.0.1

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v21.0.0

Compare Source

• chore!: minimum node version v22 (#​4679) (ac2b3f4), closes #​4679

BREAKING CHANGES

• drop node v18 and v20 support

• Bump engines to >=v22 in all 39 package.json files
• Update @​types/node to ^22.0.0
• Update CI matrix to [22, 24]
• Update Ubuntu baseline job to ubuntu:26.04
• Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json
• Update pre-commit hook to use --ignore-engines
• Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com

20.5.3 (2026-04-30)

Note: Version bump only for package @​commitlint/config-conventional

v20.5.3

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

vitest-dev/vitest (@​vitest/coverage-v8)

v5.0.3

Compare Source

   🐞 Bug Fixes

• Isolate result.status between repeats runs  -  by @​hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in #​11218 (5dbeb)
• Don't print an interceptor warning in browser mode  -  by @​sheremet-va in #​11377 (15cc0)
• Don't retry when test.fails expectedly failed  -  by @​hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in #​11219 (b2458)
• Scope cache key generators to projects  -  by @​ecoyoung in #​11281 and #​11301 (92ba7)
• browser:
  • Delay server listen until tests start running  -  by @​sheremet-va in #​11366 (7d8ed)
  • Check mock path boundaries  -  by @​saryn17, Ryosei Sato and @​sheremet-va in #​11361 and #​11362 (1c388)
  • Keep config of browser-consumed environments  -  by @​kasperpeulen and Claude in #​11378 (aafc0)
  • Ignore page crash while cancelling  -  by @​sheremet-va in #​11386 (7c367)
  • toMatchScreenshot uses wrong reference on retried tests  -  by @​macarie in #​11393 (c22ab)
• cache:
  • Revalidate imports of cached modules  -  by @​sheremet-va in #​11381 (38f98)
• deps:
  • Pin why-is-node-running to 3.2.1 to avoid users running into ERR_PNPM_TRUST_DOWNGRADE  -  by @​AriPerkkio in #​11403 (f6c9a)
• expect:
  • Pass current equality testers to expect.extend asymmetric matchers  -  by @​hi-ogawa, Hiroshi Ogawa and Claude in #​11401 (3e794)
• jsdom:
  • Support Blob on jsdom 30.1  -  by @​sheremet-va in #​11379 (6c49b)
• pool:
  • Preserve unique pool ids when groupOrder is set  -  by @​mtorp in #​11392 (50312)
• ui:
  • Split-pane handle overlapping iframe  -  by @​macarie in #​11221 (f91db)
• vitest:
  • Remove root temp dir on close  -  by @​abhinav-phi in #​11248 (7c711)
• vm:
  • Do not optimize deps from index.html  -  by @​ezefernandezyf, Hiroshi Ogawa and Codex (GPT-6) in #​11329 and #​11360 (caf28)
  • Don't reuse scripts across vite environments  -  by @​MO2k4, Martin Oehlert and Claude in #​11395 (346d3)

    View changes on GitHub

v5.0.2

Compare Source

   🐞 Bug Fixes

• Bind process in case global is overwritten  -  by @​AriPerkkio in #​11343 (0b792)
• detect-async-leaks:
  • Ignore process.stdio handles  -  by @​AriPerkkio in #​11333 (0fd6b)
• expect:
  • Fix toMatchObject with asymmetric matchers  -  by @​ShreeBohara, Claude Opus 5, @​hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in #​11100 (42523)
• jsdom:
  • Fix Request with Blob body on jsdom 28+  -  by @​harshit-d3v in #​11295 (d1c3e)
• reporter:
  • agent to respect --silent  -  by @​Raj4478 and @​AriPerkkio in #​11271 (5b95e)
• reporters:
  • Handle concurrent createReport calls  -  by @​7rulnik in #​11278 (e8e55)
  • hanging-process to use ESM entrypoint  -  by @​AriPerkkio in #​11316 (4e91e)
• spy:
  • Fix stack overflow when spying Set.prototype.add  -  by @​fengmk2 in #​11299 (a0a93)
• ui:
  • Persist authentication cookie beyond current browser session  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​11066 (f8819)

    View changes on GitHub

v5.0.1

Compare Source

   🚀 Features

• ui:
  • Move trace attempts selector to viewer header  -  by @​hi-ogawa, Hiroshi Ogawa and Codex in #​11189 (5dc4b)
  • Add focused trace view layout mode  -  by @​hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in #​11190 (376dc)

   🐞 Bug Fixes

• Exit 1 when vitest list fails collection  -  by @​hamed-bavar in #​11145 and #​11146 (6108b)
• Keep parse error details in static collection  -  by @​hamed-bavar in #​11150 and #​11151 (7c818)
• Avoid recursive prototype in automocking  -  by @​sheremet-va in #​11195 (99fc5)
• Prevent false Vitest import resolution  -  by @​sheremet-va in #​11196 (b426c)
• Keep metadata file when clearing the cache  -  by @​sheremet-va in #​11199 (73614)
• Correct typos in error message and comments  -  by @​shinji00222 and Shinji in #​11187 (115c3)
• Resolve ResolvedConfig exactOptionalPropertyTypes errors  -  by @​LukeAbby in #​11175 (498fb)
• Share the server on self-referencing extends  -  by @​sheremet-va in #​11034 (23dda)
• Warn when deprecated deps.optimizer.web is used  -  by @​im10furry in #​11214 (2ce29)
• browser:
  • Avoid double quotes in config.define  -  by @​sheremet-va in #​11198 (972e2)
• doctor:
  • Measure vm pools for custom environments  -  by @​sheremet-va in #​11212 (91ab1)
• expect:
  • Correct return value in toMatchAriaSnapshot  -  by @​sheremet-va in #​11208 (c119b)
• fakeTimers:
  • Force queueMicrotask and nextTick in toNotFake  -  by @​kingmakeruix, kingmakeruix, Hiroshi Ogawa, Codex and @​hi-ogawa in #​11261 (a47d7)
• snapshot:
  • Report obsolete keys next to skipped tests  -  by @​hamed-bavar, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​11157 and #​11158 (17e2b)
• types:
  • Make public declarations self-contained  -  by @​ZoeySigel in #​11141 (45546)
• ui:
  • Fix collapse/expand suite with file name search  -  by @​hi-ogawa, Hiroshi Ogawa and Codex in #​11260 (0a712)
  • Fix explorer file summary count  -  by @​hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in #​11125 (05982)
• utils:
  • Fix deepMerge to handle prototype  -  by @​hi-ogawa, Hiroshi Ogawa and Codex in #​11215 (4944c)

    View changes on GitHub

v5.0.0

Compare Source

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

   🚨 Breaking Changes

• Replace loupe.inspect with pretty-format  -  by @​hi-ogawa, Claude Opus 5 (1M context) and OpenAI Codex in #​9609 (3f802)
• Remove quotes from string values in test.for/each title $ variable (take 2)  -  by @​hi-ogawa in #​10170 (04d37)
• Default attachmentsDir from .vitest-attachements/ to .vitest/attachments/  -  by @​MdSadiqMd in #​10186 (1ba73)
• Remove sequential test/suite options in favor of concurrent  -  by @​hi-ogawa and OpenAI Codex in #​10198 (9229f)
• Represent locator as an object instead of a string  -  by @​sheremet-va in #​10212 (80f07)
• Inline expect package  -  by @​sheremet-va in #​10221 (ad162)
• Remove deprecated entry points  -  by @​sheremet-va in #​10222 (994c6)
• Require Node.js 22 and Vite 6.4  -  by @​sheremet-va in #​10178 (38762)
• Fail expect.poll when function didn't resolve in time  -  by @​hi-ogawa and OpenAI Codex in #​10233 (4df04)
• Throw an error if hoistable methods are outside the top level scope  -  by @​sheremet-va in #​10460 (d0b4f)
• toHaveTextContent is strict, add toMatchTextContent as alternative  -  by @​sheremet-va in #​10473 (18f30)
• Don't lookup config file from ancestor directories  -  by @​hi-ogawa, OpenAI Codex and Hiroshi Ogawa in #​10428 (945d9)
• Inline @vitest/runner package, do not publish it anymore  -  by @​sheremet-va in #​10511 (6d6e4)
• Allow mutating happy-dom/jsdom window object  -  by @​hi-ogawa, Hiroshi Ogawa and OpenAI Codex in #​10373 (206e8)
• Expose concurrencyId/workerId on TestModule's diagnostics, make id 1-based  -  by @​sheremet-va in #​10516 (bdd98)
• Add screenshotDirectory config to browser.expect.toMatchScreenshot  -  by @​macarie in #​10592 (a60de)
• Update @sinonjs/fake-timers and support mocking Temporal  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​10654 (f8b15)
• Remove webdriverio package  -  by @​sheremet-va in #​10675 (5fed6)
• Clear mocks by default before each test  -  by @​sheremet-va in #​10613 (0f646)
• Don't emit localStorage warnings on Node 26, fail gracefully when worker fails to start  -  by @​sheremet-va in #​10293 (334ed)
• Separate config resolution from the server creation  -  by @​sheremet-va in #​10554 (1c0ec)
• Inline projects extend the root config by default  -  by @​sheremet-va in #​10750 (fec00)
• Enable mocking Temporal without fake timers  -  by @​fabon-f, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​10757 (ac2d4)
• Support nested projects  -  by @​sheremet-va in #​10846 (ec367)
• Use > as separator in -t, calculate only once  -  by @​sheremet-va in #​10686 (a0b20)
• Fail the test when an asynchronous assertion is not awaited  -  by @​sheremet-va in #​10868 (86d4a)
• Share the Vite server between inline projects  -  by @​sheremet-va in #​10848 (d87c9)
• Parse files statically in vitest list by default  -  by @​sheremet-va in #​11088 (51e94)
• benchmark:
  • Rewrite the public API  -  by @​sheremet-va in #​10113 (19f6e)
• browser:
  • Iframe scale  -  by @​macarie in #​9745 (b6398)
  • Enable locators.exact by default  -  by @​sheremet-va in #​10430 (e2032)
  • Require sessionId for orchestrator html request  -  by @​hi-ogawa, Hiroshi Ogawa and OpenAI Codex in #​10522 (79b7d)
  • Save failure screenshots in attachmentsDir  -  by @​macarie in #​10917 (3b5bb)
• coverage:
  • include/exclude globs too eager  -  by @​AriPerkkio in #​9818 (edacb)
  • Allow thresholds.perFile to accept an object  -  by @​vladlenskiy and @​AriPerkkio in #​10190 (13b78)
• expect:
  • Fix toThrow("") behavior by reverting #​6710  -  by @​hi-ogawa in #​9643 and #​6710 (6c3e4)
• mocker:
  • Deserialize automock as automock  -  by @​nami8824 in #​10192 (2f892)
• reporters:
  • blob reporter and --merge-reports default to .vitest/blob/  -  by @​AriPerkkio in #​10232 (d22b0)
  • Write json and junit reporter output files to .vitest by default  -  by @​hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and @​AriPerkkio in #​10621 (58577)
• spy:
  • Preserve class mock prototype methods on instances  -  by @​sheremet-va in #​10910 (6093d)
• types:
  • Add better promise support in expects and matchers  -  by @​samchungy and @​sheremet-va in #​8266 (41f55)
• ui:
  • Harden UI API access  -  by @​hi-ogawa, Hiroshi Ogawa and OpenAI Codex in #​10583 (4c26d)
  • Change html reporter default output to .vitest  -  by @​hi-ogawa and Hiroshi Ogawa in #​10620 (29c36)

   🚀 Features

• Add createReport and .vitest report directory convention  -  by @​AriPerkkio in #​9993 (72a6d)
• Expose default reporters through configDefaults.reporters  -  by @​hi-ogawa and Claude Opus 5 (1M context) in #​10219 (083f6)
• Support merge reports for non-sharded multi-environment runs (take 2)  -  by @​hi-ogawa, Claude Opus 5 (1M context), OpenAI Codex and @​AriPerkkio in #​10031 (e60b2)
• Add logger.formatError  -  by @​hi-ogawa and OpenAI Codex in #​10268 (2c5f3)
• Support typescript build mode  -  by @​lishaduck in #​9870 (106da)
• Add toggable injectCjsGlobals option  -  by @​sheremet-va in #​10709 (82671)
• Promote fsModuleCache to a top-level option  -  by @​sheremet-va in #​10734 (78ed7)
• Support non-ascii characters in for/each title placeholders  -  by @​k-yle in #​10773 (15e0a)
• Report the duration breakdown as percentages  -  by @​sheremet-va and @​AriPerkkio in #​10820 (c67d2)
• Promote parseSpecifications out of experimental  -  by @​sheremet-va in #​11087 (b628c)
• Promote clearCache out of experimental  -  by @​sheremet-va in #​11086 (d4fe1)
• api:
  • Expose logs recorded during the test  -  by @​sheremet-va in #​10277 (cba20)
• benchmark:
  • Add pluggable benchmark provider API  -  by @​GuillaumeLagrange and @​sheremet-va in #​10799 (86c70)
• browser:
  • Export aria tree utils  -  by @​hi-ogawa in #​10171 (c3423)
  • Support dom snapshot trace view  -  by @​hi-ogawa, Claude Opus 5 (1M context) and OpenAI Codex in #​10102 (7eddd)
  • Provide project reference in ToMatchScreenshotResolvePath  -  by @​macarie and @​sheremet-va in #​10138 (16654)
  • Show aria tree on locator element error  -  by @​hi-ogawa and OpenAI Codex in #​10257 (04f04)
  • Support custom kind in page.mark  -  by @​AriPerkkio in #​10302 (053e8)
  • Live update trace view on watch UI  -  by @​hi-ogawa and OpenAI Codex in #​10296 (78c11)
  • Add context.mark for custom command tracing  -  by @​AriPerkkio in #​10329 (aa514)
  • Show trace view steps in editor panel  -  by @​hi-ogawa and OpenAI Codex in #​10404 (8c4b6)
  • Display nested mark trace in UI  -  by @​hi-ogawa, Hiroshi Ogawa and OpenAI Codex in #​10437 (86ffc)
• cli:
  • Add --repeats CLI option  -  by @​todor-a in #​10504 (ee48b)
  • Support -p shorthand for --project  -  by @​sheremet-va in #​10826 (1addd)
• coverage:
  • V8 to track node:child_process and node:worker_threads contexts  -  by @​AriPerkkio in #​9976 (9baa5)
  • thresholds.autoUpdate to receive previous threshold as argument  -  by @​wouterkroes in #​10495 (04f81)
  • Switch to @vitest/istanbuljs packages  -  by @​AriPerkkio in #​11053 (5f6a5)
• junit-reporter:
  • Add jest-junit-compatible naming options  -  by @​neumaennl, neumaennl, Martin Neumann and Copilot in #​10189 (27393)
• reporter:
  • Support html reporter single file output  -  by @​hi-ogawa, OpenAI Codex and Claude Opus 5 (1M context) in #​10235 (f757e)
  • Add custom GitHub Actions summary title  -  by @​heyJonBray and @​macarie in #​10891 (4363c)
• ui:
  • Highlight editor source locations  -  by @​sheremet-va, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​11004 (bce2d)
  • Navigate trace steps with keyboard and remove indirect editor focus  -  by @​sheremet-va, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​11005 (6816f)
  • Persist trace view selection in URL  -  b

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Error:   × installing dependencies
  ├─▶ Failed to resolve dependency tree: Failed to resolve dependency: High-
  │   risk trust downgrade for "@trickfilm400/rollup-plugin-off-main-
  │   thread@3.0.0-pre1" (possible package takeover)
  │   
  │   Failed to resolve @trickfilm400/rollup-plugin-off-main-thread@^3.0.0-
  │   pre1
  │   This error happened while installing the dependencies of workbox-
  │   build@7.4.1
  ╰─▶ Failed to resolve dependency: High-risk trust downgrade for
      "@trickfilm400/rollup-plugin-off-main-thread@3.0.0-pre1" (possible
      package takeover)