[sabind]

Why

Dependabot's vitest 5 pull requests (#43, #44, then #47) each failed npm ci, for two reasons:

• @vitest/coverage-v8 must be exactly the same version as vitest.
• vitest 5 requires @types/node ^22.0.0 || >=24.0.0, and the repository had ^20.

Closing #44 also made Dependabot ignore @vitest/coverage-v8 5.0.5, so its group could not pick it up again. This pull request makes all three updates in one change.

What

The tests now run on vitest 5. The Node types move to 22, the oldest Node the package supports.

Changes

• package.json:

  • vitest goes from ^4.1.12 to ^5.0.5.
  • @vitest/coverage-v8 goes from ^4.1.12 to ^5.0.5.
  • @types/node goes from ^20.14.15 to ^22.20.5.

  No config change was needed.

Testing

• npx tsc --noEmit passes with the Node 22 types.
• npm run check passes: lint, build, all 181 tests under the 99/99 coverage gate, and the examples.
• npm run audit finds 0 vulnerabilities, and npm run test:package confirms the packed package installs and runs.
• npm run coverage:module reports 100% lines and branches for every module.
• npm run test:visual passes 9 of 9, after npx playwright install chromium fetched the browser that Bump the npm-minor-and-patch group with 2 updates #41's Playwright update needs.

Risk and rollout

None. These are development dependencies only, and npm pack contents are unchanged.

Notes for reviewers

• Close Bump vitest from 4.1.12 to 5.0.5 in the vitest group across 1 directory #47 (vitest only) and Bump @types/node from 20.19.42 to 20.19.43 in the npm-minor-and-patch group #48 (@types/node 20.19.43) after this merges, if Dependabot doesn't close them itself. Both are superseded.

🤖 Generated with Claude Code