chore(deps): update npm packages

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@vitest/browser-playwright (source)	5.0.1 → 5.0.3
lucide-react (source)	1.48.0 → 1.49.0
vitest (source)	5.0.1 → 5.0.3

---

Release Notes

vitest-dev/vitest (@​vitest/browser-playwright)

v5.0.3

Compare Source

   🐞 Bug Fixes

• Isolate result.status between repeats runs  -  by @​hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in #​11218 (5dbeb)
• Don't print an interceptor warning in browser mode  -  by @​sheremet-va in #​11377 (15cc0)
• Don't retry when test.fails expectedly failed  -  by @​hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in #​11219 (b2458)
• Scope cache key generators to projects  -  by @​ecoyoung in #​11281 and #​11301 (92ba7)
• browser:
  • Delay server listen until tests start running  -  by @​sheremet-va in #​11366 (7d8ed)
  • Check mock path boundaries  -  by @​saryn17, Ryosei Sato and @​sheremet-va in #​11361 and #​11362 (1c388)
  • Keep config of browser-consumed environments  -  by @​kasperpeulen and Claude in #​11378 (aafc0)
  • Ignore page crash while cancelling  -  by @​sheremet-va in #​11386 (7c367)
  • toMatchScreenshot uses wrong reference on retried tests  -  by @​macarie in #​11393 (c22ab)
• cache:
  • Revalidate imports of cached modules  -  by @​sheremet-va in #​11381 (38f98)
• deps:
  • Pin why-is-node-running to 3.2.1 to avoid users running into ERR_PNPM_TRUST_DOWNGRADE  -  by @​AriPerkkio in #​11403 (f6c9a)
• expect:
  • Pass current equality testers to expect.extend asymmetric matchers  -  by @​hi-ogawa, Hiroshi Ogawa and Claude in #​11401 (3e794)
• jsdom:
  • Support Blob on jsdom 30.1  -  by @​sheremet-va in #​11379 (6c49b)
• pool:
  • Preserve unique pool ids when groupOrder is set  -  by @​mtorp in #​11392 (50312)
• ui:
  • Split-pane handle overlapping iframe  -  by @​macarie in #​11221 (f91db)
• vitest:
  • Remove root temp dir on close  -  by @​abhinav-phi in #​11248 (7c711)
• vm:
  • Do not optimize deps from index.html  -  by @​ezefernandezyf, Hiroshi Ogawa and Codex (GPT-6) in #​11329 and #​11360 (caf28)
  • Don't reuse scripts across vite environments  -  by @​MO2k4, Martin Oehlert and Claude in #​11395 (346d3)

    View changes on GitHub

v5.0.2

Compare Source

   🐞 Bug Fixes

• Bind process in case global is overwritten  -  by @​AriPerkkio in #​11343 (0b792)
• detect-async-leaks:
  • Ignore process.stdio handles  -  by @​AriPerkkio in #​11333 (0fd6b)
• expect:
  • Fix toMatchObject with asymmetric matchers  -  by @​ShreeBohara, Claude Opus 5, @​hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in #​11100 (42523)
• jsdom:
  • Fix Request with Blob body on jsdom 28+  -  by @​harshit-d3v in #​11295 (d1c3e)
• reporter:
  • agent to respect --silent  -  by @​Raj4478 and @​AriPerkkio in #​11271 (5b95e)
• reporters:
  • Handle concurrent createReport calls  -  by @​7rulnik in #​11278 (e8e55)
  • hanging-process to use ESM entrypoint  -  by @​AriPerkkio in #​11316 (4e91e)
• spy:
  • Fix stack overflow when spying Set.prototype.add  -  by @​fengmk2 in #​11299 (a0a93)
• ui:
  • Persist authentication cookie beyond current browser session  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in #​11066 (f8819)

    View changes on GitHub

lucide-icons/lucide (lucide-react)

v1.49.0: Version 1.49.0

Compare Source

What's Changed

• feat(icons): added letters icon by @​karsa-mistmere in #​4779
• fix(packages): declare @types/react as an optional peer dependency by @​unrevised6419 in #​4892
• feat(icons): added bangladeshi-taka icon by @​TanvirMahin24 in #​4869
• feat(icons): added printer-3d icon by @​Azuzula in #​4414

New Contributors

• @​unrevised6419 made their first contribution in #​4892
• @​TanvirMahin24 made their first contribution in #​4869
• @​Azuzula made their first contribution in #​4414

Full Changelog: lucide-icons/lucide@1.48.0...1.49.0

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • "before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	vitest@​5.0.3
	lucide-react@​1.48.0 ⏵ 1.51.0			+1	+1
	@​vitest/​browser-playwright@​5.0.3

View full report