[dependabot]

Bumps the patch group with 2 updates: @cldmv/fix-headers and @vitest/coverage-v8.

Updates @cldmv/fix-headers from 2.2.1 to 2.2.2

Release notes

Sourced from @​cldmv/fix-headers's releases.

v2.2.2

@cldmv/fix-headers v2.2.2 Changelog

Release Date: October 2026 Release Type: Patch Branch: release/2.2.2

---

Overview

Version 2.2.2 is a dependency refresh. Everything that changed is in package-lock.json: the package.json ranges are untouched, and the only change to package.json is the version number. The source, dist/, bin/, the generated types and the declared dependency ranges are exactly as in v2.2.1.

One runtime dependency moved inside its existing range: ignore 7.0.10 → 7.0.12. It is the only dependency fix-headers declares (^7.0.5), and it is kept external by the build, so it is not bundled into dist/. A consumer's install already resolves ignore from that range, so a published 2.2.2 gets a current 7.0.x either way; the lockfile change affects this repository's own development and CI. The rest of the lockfile movement is development tooling, including a chalk major version and a Node.js 22 floor on the test runner's own tree (see Dependencies).

---

🔧 Dependencies

Every entry is a lockfile-only update within the existing package.json range. The ranges still read ignore ^7.0.5, @cldmv/vitest-runner ^1.4.2, vitest ^5.0.0 and eslint ^10.11.0, and so on.

Runtime

• ignore 7.0.10 → 7.0.12 (#138). Upstream's two patch releases drop a pattern that normalizes to nothing, and make trimming and unescaping of pattern whitespace run in linear time. They also fix handling of trailing spaces in directory patterns. The range allowed these versions before, and engines.node for the package (>=22.12.0) is unchanged.

Development

• @cldmv/vitest-runner 1.5.1 → 1.5.3 (#138). This is the change with the widest effect. Version 1.5.2 moved the runner's own dependency chalk from 5.6.2 to 6.0.1, and 1.5.3 raised its engines.node from >=20.19.0 to >=22.12.0. In this lockfile chalk therefore moves from 5.6.2 to 6.0.1, a major version that requires Node.js 22 or later. fix-headers already requires Node.js >=22.12.0, so nothing here is newly excluded. Version 1.5.3 also fixes the runner's CommonJS entry, which now throws a clear ERR_REQUIRE_ESM error on a Node.js without require(esm), and relicenses the runner under Apache-2.0.
• vitest 5.0.2 → 5.0.3 (#134), with @vitest/coverage-v8, @vitest/mocker and @vitest/spy at 5.0.3. vite 8.3.1 → 8.3.2, rolldown 1.2.11 → 1.2.12 (and its platform bindings) and @oxc-project/types 0.151.0 → 0.152.0 moved with them in the lockfile.
• eslint 10.11.0 → 10.12.0 (#135).
• globals 17.12.0 → 17.13.0 (#137).
• @cldmv/eslint-plugin-jsonv 1.0.13 → 1.0.15, @cldmv/jsonv 1.1.1 → 1.1.3 and @cldmv/prettier-plugin-jsonv 1.1.0 → 1.1.3 (#138). These are the lint and format plugins for .jsonv files. The releases between these versions update test expectations and CI; this repository has no .jsonv files.
• @types/node 26.6.3 → 26.6.4 (#138).
• why-is-node-running 3.2.2 → 3.2.1, a transitive dependency of vitest. vitest 5.0.3 depends on exactly 3.2.1 where 5.0.2 allowed ^3.2.1, so the lockfile steps back to that version; it is a development-only package.

📚 Documentation

• NEW: docs/changelog/v2/v2.2.2.md: this changelog.
• README What's New promoted to v2.2.2.

---

Upgrade notes

• No breaking changes and no change to the fixHeaders API, the CLI, the header format or the declared dependency ranges: drop-in for v2.2.1.
• The published package differs from 2.2.1 only in its version field. Installs resolve ignore from ^7.0.5 as before.
• Contributors need Node.js 22.12 or later, which was already the repository's floor. Node.js 20 cannot install the development toolchain: @cldmv/vitest-runner 1.5.3 and chalk 6 both require Node.js 22.

---

... (truncated)

Commits

• 22e52e3 release: v2.2.2 - bump the patch group across 1 directory with 6 updates
• See full diff in compare view

Updates @vitest/coverage-v8 from 5.0.3 to 5.0.4

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.4

   🚀 Features

• experimental:
  • Tag cache directories with CACHEDIR.TAG  -  by @​lifeiscontent in vitest-dev/vitest#11461 (a8ea3)
  • Support test.ui.theme option  -  by @​sheremet-va in vitest-dev/vitest#11499 (1da66)
  • Highlight selector multiple matches in trace view  -  by @​hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11489 (5abba)
  • Print how many tests were affected and a total when running --changed  -  by @​sheremet-va in vitest-dev/vitest#11424 (a2336)
  • Add an option to cache dependencies instead of statically parsing them  -  by @​sheremet-va in vitest-dev/vitest#11515 (c0601)
  • Add fit and zoom controls to trace viewer  -  by @​hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11490 (f5dd9)

   🐞 Bug Fixes

• Fail the run on git and location filter errors  -  by @​sheremet-va in vitest-dev/vitest#11430 (30d03)
• Enable fsModuleCache by default  -  by @​sheremet-va in vitest-dev/vitest#11435 (ad208)
• Track project files and mocks with --changed  -  by @​sheremet-va in vitest-dev/vitest#11432 (b0f2b)
• Refactor caching, fix : in project and change the shape of results cache  -  by @​sheremet-va in vitest-dev/vitest#11453 (9673c)
• Keep full $ string values when taskTitleValueFormatTruncate is 0  -  by @​hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11485 (4f7e1)
• Resolve node builtins in client environments  -  by @​sheremet-va in vitest-dev/vitest#11417 (56b31)
• Fix module graph builtin externals after #11421  -  by @​hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11491 and vitest-dev/vitest#11421 (008e1)
• Wrap module mocks during in-source testing  -  by @​sheremet-va in vitest-dev/vitest#11505 (36d19)
• Handle line endings in snapshot  -  by @​sheremet-va in vitest-dev/vitest#11522 (4c468)
• Respect root in projects  -  by @​sheremet-va in vitest-dev/vitest#11521 (26642)
• Resolve mocks in directories with spaces  -  by @​sheremet-va in vitest-dev/vitest#11539 (caaef)
• api:
  • Publish the api token atomically  -  by @​umairnawaz333 in vitest-dev/vitest#11323 (6f990)
• browser:
  • Close the mock route interception race  -  by @​cplieger and @​sheremet-va in vitest-dev/vitest#8339 and vitest-dev/vitest#11083 (d6620)
  • Allow toHaveTextContent without arguments  -  by @​nomadical in vitest-dev/vitest#11425 (8ebcf)
  • Apply API options without browser config  -  by @​sheremet-va in vitest-dev/vitest#10852 (ad055)
  • Preserve undefined command arguments  -  by @​sheremet-va and @​AriPerkkio in vitest-dev/vitest#11497 (1576d)
  • Wait for setup mocks before importing a test file  -  by @​kasperpeulen in vitest-dev/vitest#11520 (b61d1)
  • Avoid extra scroll outside the iframe  -  by @​sheremet-va in vitest-dev/vitest#11523 (662e8)
  • Run browser instances as workers  -  by @​sheremet-va in vitest-dev/vitest#11525 (bf04b)
    • ⚠️ This can degrade performance if you have a custom maxWorkers setting. Previously, it was applied incorrectly and could lead to Vitest using too many resources. For example, a lower number would still open too many browsers. Fixing it means Vitest opens less instances by default now.
  • Open one cdp session per tester  -  by @​sheremet-va in vitest-dev/vitest#11542 (69e63)
  • Clean up unmocked and pending mocks  -  by @​sheremet-va in vitest-dev/vitest#11537 (5c955)
• coverage:
  • V8 browser memory leak between test files  -  by @​AriPerkkio in vitest-dev/vitest#11466 (2297d)
  • allowExternal fails to include uncovered files  -  by @​AriPerkkio in vitest-dev/vitest#11513 (4ef00)
  • Filenames containing brackets incorrectly showing as uncovered  -  by @​AriPerkkio in vitest-dev/vitest#11531 (0fa80)
  • Istanbul coverage wrong when module transform warmups  -  by @​AriPerkkio in vitest-dev/vitest#11529 (9f61d)
• deps:
  • Update all non-major dependencies  -  by @​sheremet-va in vitest-dev/vitest#11167 (c74e0)
• expect:
  • Fix Map and Set deep equality in some assertions  -  by @​hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11402 (b4e79)
  • Check value in chai-style returned  -  by @​sheremet-va in vitest-dev/vitest#11500 (1aca0)
• mocker:
  • Fix native loader mocking edge cases  -  by @​sheremet-va in vitest-dev/vitest#11540 (cd423)
• pretty-format:

... (truncated)

Commits

• 6a11cf6 chore: release v5.0.4 (#11554)
• 2297d93 fix(coverage): v8 browser memory leak between test files (#11466)
• c74e099 fix(deps): update all non-major dependencies (#11167)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.