chore(deps): update vitest monorepo to v4.0.17 (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@vitest/coverage-v8 (source)	4.0.16 → 4.0.17
@vitest/ui (source)	4.0.16 → 4.0.17
vitest (source)	4.0.16 → 4.0.17

---

Release Notes

vitest-dev/vitest (@​vitest/coverage-v8)

v4.0.17

   🚀 Features

• Support openTelemetry for browser mode  -  by @​hi-ogawa in #​9180 (1ec3a)
• Support TRACEPARENT and TRACESTATE environment variables for OpenTelemetry context propagation  -  by @​Copilot, hi-ogawa and @​hi-ogawa in #​9295 (876cb)

   🐞 Bug Fixes

• Improve asymmetric matcher diff readability by unwrapping container matchers  -  by @​Copilot, sheremet-va, hi-ogawa and @​hi-ogawa in #​9330 (b2ec7)
• Improve runner error when importing outside of test context  -  by @​sheremet-va in #​9335 (2dd3d)
• Replace crypto.randomUUID to allow insecure environments (fix #​9…  -  by @​plusgut in #​9339 and #​9 (e6a3f)
• Handle null options in addEventHandler #​9371  -  by @​ThibautMarechal in #​9372 and #​9371 (40841)
• Typo in browser.provider error  -  by @​deammer in #​9394 (4b67f)
• browser:
  • Fix process.env and import.meta.env defines in inline project  -  by @​hi-ogawa in #​9239 (b70c9)
  • Fix upload File instance  -  by @​hi-ogawa in #​9294 (b6778)
  • Fix invalid project token for artifacts assets  -  by @​hi-ogawa in #​9321 (caa7d)
  • Log ErrorEvent.message when unhandled ErrorEvent.error is null  -  by @​hi-ogawa in #​9322 (5d84e)
  • Support fileParallelism on an instance  -  by @​sheremet-va in #​9328 (15006)
• coverage:
  • Remove unnecessary istanbul-lib-source-maps usage  -  by @​AriPerkkio in #​9344 (b0940)
  • Apply patch from istanbuljs/istanbuljs#837  -  by @​AriPerkkio and sapphi-red in #​9413 and #​837 (e05ce)
• fsModuleCache:
  • Don't store importers in cache  -  by @​sheremet-va in #​9422 (75136)
  • Add importers alongside importedModules  -  by @​sheremet-va in #​9423 (59f92)
• mocker:
  • Fix mock transform with class  -  by @​hi-ogawa in #​9421 (d390e)
• pool:
  • Validate environment options when reusing the worker  -  by @​sheremet-va in #​9349 (a8a88)
  • Handle worker start failures gracefully  -  by @​AriPerkkio in #​9337 (200da)
• reporter:
  • Report test module if it failed to run  -  by @​sheremet-va in #​9272 (c7888)
• runner:
  • Respect nested test.only within describe.only  -  by @​Ujjwaljain16 in #​9021 and #​9213 (55d5d)
• typecheck:
  • Improve error message when tsc outputs help text  -  by @​Ujjwaljain16 in #​9214 (7b10a)
• ui:
  • Detect gzip by magic numbers instead of Content-Type header in html reporter  -  by @​Copilot, hi-ogawa and @​hi-ogawa in #​9278 (dd033)
• webdriverio:
  • Fall back to WebDriver Classic #​9244  -  by @​JustasMonkev in #​9373 and #​9244 (c23dd)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[railway-app]

🚅 Deployed to the simon.dev-pr-1504 environment in simon.dev

Service	Status	Web	Updated (UTC)
simon.dev	🕒 Building (View Logs)	Web	Jan 12, 2026 at 12:44 pm

[claude]

Claude finished @renovate[bot]'s task in 1m 30s —— View job

---

Code Review Complete ✅

Reviewed vitest monorepo update from v4.0.16 to v4.0.17.

Tasks

• Read changed files
• Check CI status
• Review release notes for breaking changes
• Analyze dependency update impact
• Provide comprehensive review feedback

---

Review Summary

This is a safe and recommended patch update for the vitest monorepo packages. All CI checks have passed successfully.

1. Code Quality ✅

Changes:

• package.json:55-56, 72: Updated @vitest/coverage-v8, @vitest/ui, and vitest from 4.0.16 → 4.0.17
• pnpm-lock.yaml: Lock file updates reflecting the new versions

Assessment:

• Clean dependency update following semantic versioning (patch version)
• No code changes required - purely dependency version bumps
• Renovate bot configuration is properly set up with automerge enabled

2. Security ✅

No security concerns identified:

• This is a patch release from the official vitest repository
• The v4.0.17 release includes several security-related improvements:
  • Better error handling for invalid project tokens (browser mode)
  • Improved handling of null options in event handlers
  • Enhanced worker start failure handling

3. Performance ✅

Performance improvements in v4.0.17:

• Coverage optimization: Removed unnecessary istanbul-lib-source-maps usage (see #9344)
• fsModuleCache improvements: Better cache management with importer tracking fixes (#9422, #9423)
• Pool management: Enhanced worker reuse validation and graceful failure handling

4. Testing ✅

CI Status: All checks passed ✅

• CI workflow: ✅ Success
• PR workflow: ✅ Success
• Tests are passing with the new vitest version

Relevant bug fixes for testing:

• Fixed mock transform with class (#9421)
• Improved asymmetric matcher diff readability (#9330)
• Fixed nested test.only within describe.only (#9021)
• Better error messages for test module failures

5. Documentation ✅

No documentation changes needed:

• This is a patch update with no breaking changes
• All changes are backward compatible
• No API changes that would affect the project

Key Bug Fixes in v4.0.17

The release includes 18 bug fixes, with notable improvements for:

• Browser mode stability and error handling
• Coverage reporting accuracy
• Test runner behavior with .only modifiers
• OpenTelemetry support enhancements

Recommendations

1. ✅ Approve and merge - This is a safe patch update
2. ✅ CI passing - All tests pass with the new version
3. ✅ Automerge enabled - The PR will merge automatically once approved
4. ✅ No breaking changes - Fully backward compatible

Additional Notes

• The update aligns with the project's dependency management strategy (automated via Renovate)
• Lock file changes are consistent with the package.json updates
• No conflicts with other dependencies detected

---

Verdict: This PR is ready to merge. The vitest v4.0.17 patch release includes important bug fixes and performance improvements with no breaking changes.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.76%. Comparing base (44b5e98) to head (0eebba9).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1504   +/-   ##
=======================================
  Coverage   97.76%   97.76%           
=======================================
  Files          49       49           
  Lines         896      896           
  Branches      156      156           
=======================================
  Hits          876      876           
  Misses          8        8           
  Partials       12       12           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.