chore(deps): bump vitest from 3.2.4 to 3.2.6 in the npm_and_yarn group across 1 directory

[dependabot]

Bumps the npm_and_yarn group with 1 update in the / directory: vitest.

Updates vitest from 3.2.4 to 3.2.6

Release notes

Sourced from vitest's releases.

v3.2.6

   🐞 Bug Fixes

• Pin last supported vite-node version  -  by @​sheremet-va (16f12)

    View changes on GitHub

v3.2.5

   🚀 Features

• api: Add allowWrite and allowExec options to api [backport to v3]  -  by @​hi-ogawa and Codex in vitest-dev/vitest#10445 (af88b)

   🐞 Bug Fixes

• browser: Disable client cdp API when allowWrite/allowExec: false [backport to v3]  -  by @​hi-ogawa and Codex in vitest-dev/vitest#10456 (385a1)

    View changes on GitHub

Commits

• b6d56f8 chore: release v3.2.6
• 16f120d fix: pin last supported vite-node version
• 2cbad0a chore: release v3.2.5
• 385a1ae fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
• af88b1f feat(api): add allowWrite and allowExec options to api [backport to v3]...
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vitest since your current version.

[zjshen14]

Review: chore(deps): bump vitest from 3.2.4 to 4.1.8

What's good: This supersedes #176 (4.1.7) with the latest vitest 4.x point release, and Dependabot correctly groups it as npm_and_yarn.

---

Why CI is failing

"Typecheck, Lint, Test" fails for the same peer-dep reason flagged on #176: this PR bumps vitest to ^4.1.8 (vitest 4.x), but vitest 4.x declares @vitest/coverage-v8@4.x as a required peer dep while the project still carries @vitest/coverage-v8@^3.2.4 from un-merged #146. The install is in an unresolvable peer-dep conflict and the test runner fails at startup.

Relationship to open PRs

This PR supersedes #176 — if the migration is planned, #176 can be closed in favour of this one. The companion coverage PR is #146. Both must move together.

Recommendation

Not merging. The right path is a single coordinated upgrade PR that bumps both vitest and @vitest/coverage-v8 to 4.x (superseding this PR and #146), addresses any vitest 3→4 API breakage in tests/config, and passes CI green before merge.

---

Generated by Claude Code

[zjshen14]

Verified: all three CI checks pass (Typecheck/Lint/Test ✓, CodeQL ✓, Analyze ✓). This is a clean coordinated patch-level upgrade of the entire vitest 3.2.x ecosystem (vitest + all @vitest/* sub-packages, 3.2.4 → 3.2.6) via a single package-lock.json lockfile update. No API changes, no restricted files touched. Merging.

---

Generated by Claude Code