chore(deps): bump the npm group across 1 directory with 4 updates

[dependabot]

Bumps the npm group with 3 updates in the / directory: glob, @types/node and @vitest/coverage-v8.

Updates glob from 11.0.3 to 12.0.0

Changelog

Sourced from glob's changelog.

changeglob

12

• Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

GHSA-5j98-mcp5-4vw2

• Add the --shell option for the command line, with a warning that this is unsafe. (It will be removed in v12.)
• Add the --cmd-arg/-g as a way to safely add positional arguments to the command provided to the CLI tool.
• Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding shell:true execution.

11.0

• Drop support for node before v20

10.4

• Add includeChildMatches: false option
• Export the Ignore class

10.3

• Add --default -p flag to provide a default pattern
• exclude symbolic links to directories when follow and nodir are both set

10.2

• Add glob cli

10.1

• Return '.' instead of the empty string '' when the current working directory is returned as a match.
• Add posix: true option to return / delimited paths, even on Windows.

10.0.0

• No default exports, only named exports

... (truncated)

Commits

• 2b03cca 12.0.0
• d56203d prettier config
• bb521e5 Remove --shell option where unsafe to use
• 2551fb5 11.1.0
• 47473c0 bin: Do not expose filenames to shell expansion
• bc33fe1 skip tilde test on systems that lack tilde expansion
• 59bf9ca fix notes
• dde4fa6 docs(README): add #anchor and improve notes
• 0559b0e docs: add better links to path-scurry docs
• c9773c2 fix: correct typos in README.md
• Additional commits viewable in compare view

Updates @types/node from 20.19.24 to 20.19.25

Commits

• See full diff in compare view

Updates @vitest/coverage-v8 from 4.0.6 to 4.0.10

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.0.10

   🐞 Bug Fixes

• Remove onCancel when worker is terminated  -  by @​sheremet-va in vitest-dev/vitest#9033 (6d7f0)
• browser:
  • Don't scale the iframe if UI is disabled  -  by @​sheremet-va in vitest-dev/vitest#9018 (5406e)
  • Handle dependency stack traces with external source maps. Resolves: #9003  -  by @​iclectic in vitest-dev/vitest#9016 and vitest-dev/vitest#9003 (57ae5)
• bun:
  • Parsing of stack trace for bun runtime  -  by @​nazarhussain in vitest-dev/vitest#9032 (f3ec6)
• core:
  • Prevent starting new run when cancelling  -  by @​AriPerkkio in vitest-dev/vitest#8991 (eb98d)
• pool:
  • Prevent writing to closed worker  -  by @​AriPerkkio and @​sheremet-va in vitest-dev/vitest#9023 (042c6)
• reporters:
  • Report correct test run duration at the end  -  by @​sheremet-va in vitest-dev/vitest#8969 (bc3a6)
• ui:
  • Use execution time from ws reporter (onFinished)  -  by @​userquin in vitest-dev/vitest#8975 (f56dc)

    View changes on GitHub

v4.0.9

   🚀 Experimental Features

• expect: Add Set support to toBeOneOf  -  by @​tim-we and @​sheremet-va in vitest-dev/vitest#8906 (a415d)

   🐞 Bug Fixes

• browser: Add favicon icons to the browser mode ui  -  by @​userquin in vitest-dev/vitest#8972 (353ee)
• forks: Increase worker start timeout  -  by @​AriPerkkio in vitest-dev/vitest#9027 (5e750)
• jsdom: Cloned request is an instance of Request  -  by @​sheremet-va in vitest-dev/vitest#8985 (506a9)
• ui: Collect file/suite/test duration correctly  -  by @​userquin in vitest-dev/vitest#8976 (8016d)

    View changes on GitHub

v4.0.8

   🐞 Bug Fixes

• Workaround noExternal merging bug on Vite 6  -  by @​hi-ogawa in vitest-dev/vitest#8950 (bcb13)
• Missed context.d.ts file  -  by @​termorey in vitest-dev/vitest#8965 (9044d)
• Incorrect error message for non-awaited expect.element()  -  by @​StyleShit in vitest-dev/vitest#8954 (9638d)
• browser: Cleanup frame-ancestors from CSP header at coverage middleware  -  by @​userquin in vitest-dev/vitest#8941 (1f730)
• deps: Update all non-major dependencies  -  by @​sheremet-va in vitest-dev/vitest#8636 (da8b9)
• forks: Do not fail with Windows Defender enabled  -  by @​sheremet-va in vitest-dev/vitest#8967 (c79f4)
• runner: Properly encode Uint8Array body in annotations  -  by @​Livan-pro in vitest-dev/vitest#8951 (997ca)
• spy: Copy static properties if spy is initialised with vi.fn(), fix types for vi.spyOn(obj, class)  -  by @​sheremet-va in vitest-dev/vitest#8956 (75e7f)
• webdriverio: When no argument is passed to the .click interaction command, the webdriver command should also have no argument  -  by @​julienw in vitest-dev/vitest#8937 (069e6)

    View changes on GitHub

v4.0.7

... (truncated)

Commits

• 259a3d1 chore: release v4.0.10
• 62fab24 chore: release v4.0.9
• 46bfd09 chore: release v4.0.8
• da8b93a fix(deps): update all non-major dependencies (#8636)
• 1f5d9d2 chore: release v4.0.7
• See full diff in compare view

Updates vitest from 4.0.6 to 4.0.10

Release notes

Sourced from vitest's releases.

v4.0.10

   🐞 Bug Fixes

• Remove onCancel when worker is terminated  -  by @​sheremet-va in vitest-dev/vitest#9033 (6d7f0)
• browser:
  • Don't scale the iframe if UI is disabled  -  by @​sheremet-va in vitest-dev/vitest#9018 (5406e)
  • Handle dependency stack traces with external source maps. Resolves: #9003  -  by @​iclectic in vitest-dev/vitest#9016 and vitest-dev/vitest#9003 (57ae5)
• bun:
  • Parsing of stack trace for bun runtime  -  by @​nazarhussain in vitest-dev/vitest#9032 (f3ec6)
• core:
  • Prevent starting new run when cancelling  -  by @​AriPerkkio in vitest-dev/vitest#8991 (eb98d)
• pool:
  • Prevent writing to closed worker  -  by @​AriPerkkio and @​sheremet-va in vitest-dev/vitest#9023 (042c6)
• reporters:
  • Report correct test run duration at the end  -  by @​sheremet-va in vitest-dev/vitest#8969 (bc3a6)
• ui:
  • Use execution time from ws reporter (onFinished)  -  by @​userquin in vitest-dev/vitest#8975 (f56dc)

    View changes on GitHub

v4.0.9

   🚀 Experimental Features

• expect: Add Set support to toBeOneOf  -  by @​tim-we and @​sheremet-va in vitest-dev/vitest#8906 (a415d)

   🐞 Bug Fixes

• browser: Add favicon icons to the browser mode ui  -  by @​userquin in vitest-dev/vitest#8972 (353ee)
• forks: Increase worker start timeout  -  by @​AriPerkkio in vitest-dev/vitest#9027 (5e750)
• jsdom: Cloned request is an instance of Request  -  by @​sheremet-va in vitest-dev/vitest#8985 (506a9)
• ui: Collect file/suite/test duration correctly  -  by @​userquin in vitest-dev/vitest#8976 (8016d)

    View changes on GitHub

v4.0.8

   🐞 Bug Fixes

• Workaround noExternal merging bug on Vite 6  -  by @​hi-ogawa in vitest-dev/vitest#8950 (bcb13)
• Missed context.d.ts file  -  by @​termorey in vitest-dev/vitest#8965 (9044d)
• Incorrect error message for non-awaited expect.element()  -  by @​StyleShit in vitest-dev/vitest#8954 (9638d)
• browser: Cleanup frame-ancestors from CSP header at coverage middleware  -  by @​userquin in vitest-dev/vitest#8941 (1f730)
• deps: Update all non-major dependencies  -  by @​sheremet-va in vitest-dev/vitest#8636 (da8b9)
• forks: Do not fail with Windows Defender enabled  -  by @​sheremet-va in vitest-dev/vitest#8967 (c79f4)
• runner: Properly encode Uint8Array body in annotations  -  by @​Livan-pro in vitest-dev/vitest#8951 (997ca)
• spy: Copy static properties if spy is initialised with vi.fn(), fix types for vi.spyOn(obj, class)  -  by @​sheremet-va in vitest-dev/vitest#8956 (75e7f)
• webdriverio: When no argument is passed to the .click interaction command, the webdriver command should also have no argument  -  by @​julienw in vitest-dev/vitest#8937 (069e6)

    View changes on GitHub

v4.0.7

... (truncated)

Commits

• 259a3d1 chore: release v4.0.10
• bc3a692 fix(reporters): report correct test run duration at the end (#8969)
• f3ec6fc fix(bun): parsing of stack trace for bun runtime (#9032)
• 042c60c fix(pool): prevent writing to closed worker (#9023)
• 80f2bb6 chore(deps): update all non-major dependencies (#9037)
• eb98dd8 fix(core): prevent starting new run when cancelling (#8991)
• f509d2a chore(deps): update dependency @​types/node to v24 (#9038)
• 44dca5f chore: print a better error when browser orchestrator fails to run a test (#8...
• f56dc0c fix(ui): use execution time from ws reporter (onFinished) (#8975)
• 7c9edff refactor(forks): simplify IPC channel serialization (#8999)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.