chore: bump vitest from 4.1.11 to 5.0.3 in /backend/api

[dependabot]

Bumps vitest [link removed for security] from 4.1.11 to 5.0.3.

Release notes

Sourced from vitest's releases [link removed for security].

v5.0.3

   🐞 Bug Fixes

• Isolate result.status between repeats runs  -  by @​hi-ogawa [link removed for security], Hiroshi Ogawa and Codex (GPT-6) in fix: isolate result.status between repeats runs vitest-dev/vitest#11218 [link removed for security] (5dbeb) [link removed for security]
• Don't print an interceptor warning in browser mode  -  by @​sheremet-va [link removed for security] in fix: don't print an interceptor warning in browser mode vitest-dev/vitest#11377 [link removed for security] (15cc0) [link removed for security]
• Don't retry when test.fails expectedly failed  -  by @​hi-ogawa [link removed for security], Hiroshi Ogawa and Codex (GPT-6) in fix: don't retry when test.fails expectedly failed vitest-dev/vitest#11219 [link removed for security] (b2458) [link removed for security]
• Scope cache key generators to projects  -  by @​ecoyoung [link removed for security] in defineCacheKeyGenerator not distinguishing common files that a plugin process differently in two projects vitest-dev/vitest#11281 [link removed for security] and fix: scope cache key generators to projects (fix #11281) vitest-dev/vitest#11301 [link removed for security] (92ba7) [link removed for security]
• browser:
  • Delay server listen until tests start running  -  by @​sheremet-va [link removed for security] in fix(browser): delay server listen until tests start running vitest-dev/vitest#11366 [link removed for security] (7d8ed) [link removed for security]
  • Check mock path boundaries  -  by @​saryn17 [link removed for security], Ryosei Sato and @​sheremet-va [link removed for security] in Browser mode: vi.mock has no effect on packages/app-utils when the root is packages/app vitest-dev/vitest#11361 [link removed for security] and fix(browser): check mock path boundaries (fix #11361) vitest-dev/vitest#11362 [link removed for security] (1c388) [link removed for security]
  • Keep config of browser-consumed environments  -  by @​kasperpeulen [link removed for security] and Claude in fix(browser): keep config of browser-consumed environments vitest-dev/vitest#11378 [link removed for security] (aafc0) [link removed for security]
  • Ignore page crash while cancelling  -  by @​sheremet-va [link removed for security] in fix(browser): ignore page crash while cancelling vitest-dev/vitest#11386 [link removed for security] (7c367) [link removed for security]
  • toMatchScreenshot uses wrong reference on retried tests  -  by @​macarie [link removed for security] in fix(browser): toMatchScreenshot uses wrong reference on retried tests vitest-dev/vitest#11393 [link removed for security] (c22ab) [link removed for security]
• cache:
  • Revalidate imports of cached modules  -  by @​sheremet-va [link removed for security] in fix(cache): revalidate imports of cached modules vitest-dev/vitest#11381 [link removed for security] (38f98) [link removed for security]
• deps:
  • Pin why-is-node-running to 3.2.1 to avoid users running into ERR_PNPM_TRUST_DOWNGRADE  -  by @​AriPerkkio [link removed for security] in fix(deps): pin why-is-node-running to 3.2.1 to avoid users running into ERR_PNPM_TRUST_DOWNGRADE vitest-dev/vitest#11403 [link removed for security] (f6c9a) [link removed for security]
• expect:
  • Pass current equality testers to expect.extend asymmetric matchers  -  by @​hi-ogawa [link removed for security], Hiroshi Ogawa and Claude in fix(expect): pass current equality testers to expect.extend asymmetric matchers vitest-dev/vitest#11401 [link removed for security] (3e794) [link removed for security]
• jsdom:
  • Support Blob on jsdom 30.1  -  by @​sheremet-va [link removed for security] in fix(jsdom): support Blob on jsdom 30.1 vitest-dev/vitest#11379 [link removed for security] (6c49b) [link removed for security]
• pool:
  • Preserve unique pool ids when groupOrder is set  -  by @​mtorp [link removed for security] in fix(pool): preserve unique pool ids when groupOrder is set vitest-dev/vitest#11392 [link removed for security] (50312) [link removed for security]
• ui:
  • Split-pane handle overlapping iframe  -  by @​macarie [link removed for security] in fix(ui): split-pane handle overlapping iframe vitest-dev/vitest#11221 [link removed for security] (f91db) [link removed for security]
• vitest:
  • Remove root temp dir on close  -  by @​abhinav-phi [link removed for security] in fix(vitest): remove root temp dir on close vitest-dev/vitest#11248 [link removed for security] (7c711) [link removed for security]
• vm:
  • Do not optimize deps from index.html  -  by @​ezefernandezyf [link removed for security], Hiroshi Ogawa and Codex (GPT-6) in vm pools run Vite's dependency optimizer over index.html; an unbundlable dependency aborts the run (exit 1) though all tests pass vitest-dev/vitest#11329 [link removed for security] and fix(vm): do not optimize deps from index.html (fix #11329) vitest-dev/vitest#11360 [link removed for security] (caf28) [link removed for security]
  • Don't reuse scripts across vite environments  -  by @​MO2k4 [link removed for security], Martin Oehlert and Claude in fix(vm): don't reuse scripts across vite environments vitest-dev/vitest#11395 [link removed for security] (346d3) [link removed for security]

    View changes on GitHub [link removed for security]

v5.0.2

   🐞 Bug Fixes

• Bind process in case global is overwritten  -  by @​AriPerkkio [link removed for security] in fix: bind process in case global is overwritten vitest-dev/vitest#11343 [link removed for security] (0b792) [link removed for security]
• detect-async-leaks:
  • Ignore process.stdio handles  -  by @​AriPerkkio [link removed for security] in fix(detect-async-leaks): ignore process.stdio handles vitest-dev/vitest#11333 [link removed for security] (0fd6b) [link removed for security]
• expect:
  • Fix toMatchObject with asymmetric matchers  -  by @​ShreeBohara [link removed for security], Claude Opus 5, @​hi-ogawa [link removed for security], Hiroshi Ogawa and Codex (GPT-5) in fix(expect): fix toMatchObject with asymmetric matchers vitest-dev/vitest#11100 [link removed for security] (42523) [link removed for security]
• jsdom:
  • Fix Request with Blob body on jsdom 28+  -  by @​harshit-d3v [link removed for security] in fix(jsdom): fix Request with Blob body on jsdom 28+ vitest-dev/vitest#11295 [link removed for security] (d1c3e) [link removed for security]
• reporter:
  • agent to respect --silent  -  by @​Raj4478 [link removed for security] and @​AriPerkkio [link removed for security] in fix(reporter): agent to respect --silent vitest-dev/vitest#11271 [link removed for security] (5b95e) [link removed for security]
• reporters:
  • Handle concurrent createReport calls  -  by @​7rulnik [link removed for security] in fix(reporters): handle concurrent createReport calls vitest-dev/vitest#11278 [link removed for security] (e8e55) [link removed for security]
  • hanging-process to use ESM entrypoint  -  by @​AriPerkkio [link removed for security] in fix(reporters): hanging-process to use ESM entrypoint vitest-dev/vitest#11316 [link removed for security] (4e91e) [link removed for security]
• spy:
  • Fix stack overflow when spying Set.prototype.add  -  by @​fengmk2 [link removed for security] in fix(spy): fix stack overflow when spying Set.prototype.add vitest-dev/vitest#11299 [link removed for security] (a0a93) [link removed for security]

... (truncated)

Commits

• 33cadea [link removed for security] chore: release v5.0.3 (#11409 [link removed for security])
• 346d389 [link removed for security] fix(vm): don't reuse scripts across vite environments (#11395 [link removed for security])
• f6c9a49 [link removed for security] fix(deps): pin why-is-node-running to 3.2.1 to avoid users running into `...
• 062c75d [link removed for security] chore: fix standalone docs build, update exports maps (#11394 [link removed for security])
• caf2887 [link removed for security] fix(vm): do not optimize deps from index.html (fix #11329 [link removed for security]) (#11360 [link removed for security])
• 50312eb [link removed for security] fix(pool): preserve unique pool ids when groupOrder is set (#11392 [link removed for security])
• 7c36748 [link removed for security] fix(browser): ignore page crash while cancelling (#11386 [link removed for security])
• 92ba7fc [link removed for security] fix: scope cache key generators to projects (fix #11281 [link removed for security]) (#11301 [link removed for security])
• 38f9885 [link removed for security] fix(cache): revalidate imports of cached modules (#11381 [link removed for security])
• b24585f [link removed for security] fix: don't retry when test.fails expectedly failed (#11219 [link removed for security])
• Additional commits viewable in compare view [link removed for security]

![Dependabot compatibility score [link removed for security]]([link removed for security])

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

⚠️ Security Notice: Links posted by non-contributors have been automatically removed.

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🎉 Thank you for your contribution! Your pull request has been received and will be reviewed shortly.

If you enjoy the project, please consider giving the repository a ⭐. You can also follow my GitHub profile to stay updated on future open-source projects.

Thanks for being part of the community! 🚀