v3.0.8

   🐞 Bug Fixes

• Fix fetch cache multiple writes  -  by @hi-ogawa in #7546 (1a8b4)
• Use browser.isolate instead of config.isolate  -  by @sheremet-va in #7560 (4b5ed)
• Remove vestigial spy stub, import directly from @vitest/spy  -  by @mrginglymus in #7575 (7f7ff)
• Correctly split the argv string  -  by @btea in #7533 (4325a)
• browser:
  • Remove @testing-library/dom from dependencies  -  by @sheremet-va in #7555 (5387a)
  • Improve source map handling for bundled files  -  by @sheremet-va in #7534 (e2c57)
  • Print related test file and potential test in unhandled errors  -  by @sheremet-va in #7564 (fee90)
• runner:
  • Fix beforeEach/All cleanup callback timeout  -  by @hi-ogawa in #7500 (0c292)
  • Fix and simplify Task.suite initialization  -  by @hi-ogawa in #7414 (ca9ff)
• snapshot:
  • Allow inline snapshot calls on same location with same snapshot  -  by @jycouet and @hi-ogawa in #7464 (d5cb8)
• vite-node:
  • Fix buildStart on Vite 6  -  by @hi-ogawa in #7480 (c0f47)

    View changes on GitHub

v3.0.7

   🐞 Bug Fixes

• browser: Support webdriverio 9  -  by @sheremet-va in #7553 (b1949)
• deps: Update all non-major dependencies  -  in #7543 (365ff)
• expect: Correct generic MatchersObject this type in expect.extend  -  by @Workingstiff-s in #7526 (d5765)
• mocker: Include more modules to prefix-only module list  -  by @btea in #7524 (a12ec)
• spy: Clear/reset/restore mocks in stack order  -  by @hi-ogawa in #7499 (f7100)

   🏎 Performance

• browser: Do wdio context switching only once per file  -  by @sheremet-va in #7549 (aaa58)

    View changes on GitHub

v3.0.6

   🐞 Bug Fixes

• Fix getMockedSystemTime for useFakeTimer  -  by @hi-ogawa in #7405 (03912)
• Compat for jest-image-snapshot  -  by @hi-ogawa in #7390 (9542b)
• Ensure project names are readable in dark terminals  -  by @rgrove in #7371 (bb94c)
• Exclude queueMicrotask from default fake timers to not break node fetch  -  by @hi-ogawa in #7505 (167a9)
• browser:
  • Fix mocking modules out of root  -  by @hi-ogawa in #7415 (d3acb)
  • Fix toHaveClass typing  -  by @hi-ogawa in #7383 (7ef23)
  • Relax locator selectors methods  -  by @sheremet-va in #7422 (1b8c5)
  • Resolve thread count from maxWorkers  -  by @AriPerkkio in #7483 (adbb2)
  • Cleanup timeout on resolve and give more information in the error  -  by @sheremet-va in #7487 (5a45a)
• coverage:
  • vite-node to pass correct execution wrapper offset  -  by @AriPerkkio in #7417 (1f2e5)
  • Preserve moduleExecutionInfo in non-isolated runs  -  by @AriPerkkio in #7486 (f31a0)
• deps:
  • Update all non-major dependencies  -  by @hi-ogawa in #7363 (e348b)
  • Update all non-major dependencies  -  by @hi-ogawa in #7507 (6cc40)
• init:
  • Invalid browser config  -  by @AriPerkkio in #7475 (8fe64)
• reporters:
  • Render tasks in tree when in TTY  -  by @AriPerkkio in #7503 (027ce)
• vite-node:
  • Remove fake first line mapping on Vite 6  -  by @hi-ogawa in #7124 (b9973)
• watch:
  • Properly remove cache after removing existing test files  -  by @soc221b in #7399 (01a59)
• workspace:
  • Forward inspect related cli options  -  by @AriPerkkio in #7373 (ed15b)

    View changes on GitHub

v3.0.5

This release includes security patches for:

• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

🚀 Features

• ui: Insert message "no tests found" in ui - by @DevJoaoLopes in #7366 (92da4)

🐞 Bug Fixes

• Validate websocket request - by @hi-ogawa and @AriPerkkio in #7317 (191ef)
• Don't toggle cli cursor on non-TTY - by @AriPerkkio in #7336 (3c805)
• vite-node: Differentiate file url with hash and query - by @hi-ogawa in #7365 (926ca)

View changes on GitHub

v2.1.9

This release includes security patches for:

• Browser mode serves arbitrary files | CVE-2025-24963
• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

   🐞 Bug Fixes

• backport #7317 to v2 - by @hi-ogawa in #7318
• (backport #7340 to v2) restrict served files from /__screenshot-error - by @hi-ogawa in #7343

    View changes on GitHub

v1.6.1

This release includes security patches for:

• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

   🐞 Bug Fixes

• backport #7317 to v1 - by @hi-ogawa in #7319

    View changes on GitHub

v3.0.4

This release includes security patches for:

• Browser mode serves arbitrary files | CVE-2025-24963

   🐞 Bug Fixes

• Filter projects eagerly during config resolution  -  by @sheremet-va and @AriPerkkio in #7313 (dff44)
• Apply development|production condition on Vites 6 by @hi-ogawa and @sheremet-va (#7301) (ef146)
• browser: Restrict served files from /__screenshot-error  -  by @hi-ogawa in #7340 (ed9ae)
• deps: Update all non-major dependencies  -  by @sheremet-va in #7297 (38ea8)
• runner: Timeout long sync hook  -  by @hi-ogawa in #7289 (c60ee)
• typechecking: Support typechecking parsing with Vite 6  -  by @sheremet-va in #7335 (bff70)
• types: Fix public types  -  by @mrginglymus and @sheremet-va in #7328 (ce6af)

    View changes on GitHub

v3.0.3

   🐞 Bug Fixes

• browser:
  • Don't throw a validation error if v8 coverage is used with filtered instances  -  by @sheremet-va in #7306 (fa463)
  • Don't fail when running --browser.headless if the browser projest is part of the workspace  -  by @sheremet-va in #7311 (e43a8)

   🏎 Performance

• reporters: Update summary only when needed  -  by @AriPerkkio in #7291 (7f36b)

    View changes on GitHub

v3.0.2

   🐞 Bug Fixes

• Don't await an empty timeout after every test  -  by @sheremet-va in #7281 (ef1aa)
• expect: Fix expect().resolves/rejects chain typings  -  by @hi-ogawa in #7273 (fa415)

    View changes on GitHub

v3.0.1

   🐞 Bug Fixes

• Revert "fix: re-apply default conditions if using vite 6 or later (#7071)"  -  by @sheremet-va in #7071 and #7271 (755ec)
• deps: Update all non-major dependencies  -  by @sheremet-va in #7147 (537fa)

    View changes on GitHub