release: v1.5.4 - bump @cldmv/fix-headers to 2.1.4

[cldmv-bot]

vitest-runner v1.5.4 Changelog

Release Date: October 2026
Release Type: Patch
Branch: next → master

---

Overview

A dev-tooling dependency release with no change to the published package. Two development dependencies move forward, @cldmv/fix-headers (the tool that maintains the comment headers at the top of source, test, config and workflow files) and @cldmv/configs (the shared lint, format and header configuration), and the dev-only transitive brace-expansion is patched to 5.0.12.

Nothing under src/, tests/, bin/ or the build configuration changed, so dist/ and the CLI, the run() API and the CommonJS entry are identical to v1.5.3. The runtime dependency and peer ranges are untouched, and the only lockfile entries that moved are the three below. No file headers were restamped: both fix-headers steps and the configs bump re-ran fix:headers and changed no file.

---

🔧 Dependencies

All dev-only; none of them is installed by consumers of the package.

• @cldmv/fix-headers ^2.1.2 → ^2.2.0 (locked 2.1.2 to 2.2.0), in two steps: 2.1.4 (#74) and 2.2.0 (#78). Version 2.1.4 never adds a JS comment header to JSON, Markdown or extension-less files and never walks into dependency folders. From 2.2.0 the @Last modified by tag follows content edits only, so a header-only rewrite keeps the recorded editor.
• @cldmv/configs ^1.2.1 → ^1.2.4 (locked 1.2.1 to 1.2.4) (#78). The older shared fix-headers.json forced forceAuthorUpdate and forceLastModifiedAuthorUpdate on; version 1.2.4 sets both to false, so @Author is never rewritten and @Last modified by changes only on real content edits.
• brace-expansion 5.0.9 → 5.0.12, an indirect dev dependency (pulled in through minimatch), updated by Dependabot's npm_and_yarn group (#76). Lockfile only; package.json does not list it.

📚 Documentation

• NEW: docs/changelog/v1/v1.5.4.md: this changelog.
• README What's New promoted to v1.5.4.

---

Upgrade notes

• No breaking changes and no change to what the package ships: a drop-in replacement for v1.5.3. The Node.js 22.12 floor introduced in v1.5.3 is unchanged.

👥 Contributors

• @Shinrai

---

Metric	Coverage
Statements	99.4%
Branches	99.6%
Functions	100.0%
Lines	99.3%

Avg: 99.5% · 37726c2 · Node lts/*

Co-authored-by: Shinrai Shinrai@users.noreply.github.com

[cldmv-bot]

🔒 Dependency Review

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses
• ✅ 0 denied package(s)
• ✅ 0 package(s) with OpenSSF Scorecard score < 3

Full job summary

[cldmv-bot]

📦 Bundle size unchanged

File	Raw	Δ Raw	Gzipped	Δ Gzipped
bin/vitest-runner.mjs	31.6 kB	—	11.0 kB	—
dist/index.cjs	1.9 kB	—	1.1 kB	—
dist/index.mjs	25.7 kB	—	9.1 kB	—
Total	59.2 kB	±0 B	21.1 kB	±0 B

_{📊 Generated by bundle-size. Brotli sizes also measured but omitted from the table for brevity.}