chore(deps): update dependency @vitest/ui to v2.1.9

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@vitest/ui (source)	2.1.5 → 2.1.9

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

vitest-dev/vitest (@​vitest/ui)

v2.1.9

Compare Source

This release includes security patches for:

• Browser mode serves arbitrary files | CVE-2025-24963
• Remote Code Execution when accessing a malicious website while Vitest API server is listening | CVE-2025-24964

   🐞 Bug Fixes

• backport #​7317 to v2 - by @​hi-ogawa in #​7318
• (backport #​7340 to v2) restrict served files from /__screenshot-error - by @​hi-ogawa in #​7343

    View changes on GitHub

v2.1.8

Compare Source

   🐞 Bug Fixes

• Support Node 21  -  by @​sheremet-va (92f7a)

    View changes on GitHub

v2.1.7

Compare Source

   🐞 Bug Fixes

• Revert support for Vite 6  -  by @​sheremet-va (fbe5c)
  • This introduced some breaking changes (#​6992). We will enable support for it later. In the meantime, you can still use pnpm.overrides or yarn resolutions to override the vite version in the vitest package - the APIs are compatible.

    View changes on GitHub

v2.1.6

Compare Source

🚀 Features

• Support Vite 6

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - "after 9am every weekday,before 5pm every weekday" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: apps/blueorange/package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm.
npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: blueorange@0.2.2
npm error Found: @vitest/ui@2.1.9
npm error node_modules/@vitest/ui
npm error   dev @vitest/ui@"2.1.9" from the root project
npm error
npm error Could not resolve dependency:
npm error peerOptional @vitest/ui@"2.1.5" from vitest@2.1.5
npm error node_modules/vitest
npm error   dev vitest@"2.1.5" from the root project
npm error   peer vitest@"2.1.5" from @vitest/browser@2.1.5
npm error   node_modules/@vitest/browser
npm error     peerOptional @vitest/browser@"2.1.5" from vitest@2.1.5
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-01-08T17_06_39_111Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-01-08T17_06_39_111Z-debug-0.log

[github-actions]

Run report for a589e578 (macos-latest, macOS, 0, 1, 1)

Total time: 30.4s | Comparison time: 4m 42s | Estimated savings: 4m 12s (89.3% faster)

	Action	Time	Status	Info
🟩	SyncWorkspace	8.4ms	Passed
🟩	SyncProject(vendir)	0.5ms	Passed
🟩	SyncProject(claude-code)	0.8ms	Passed
🟩	SyncProject(devenv)	0.4ms	Passed
🟦	RunTask(claude-code:build)	2.9s	Cached
🟦	RunTask(vendir:build)	29.9s	Cached
🟦	RunTask(devenv:test)	437.1ms	Cached

Environment

OS: macOS
Matrix:

os = macos-latest
name = macOS
index = 0
total = 1
job_number = 1

Variables:

MOON_TOOLCHAIN_FORCE_GLOBALS = true

Touched files

apps/blueorange/package.json

[github-actions]

Run report for a589e578 (ubuntu-latest, Linux, 1, 2, 2)

Total time: 5.5s | Comparison time: 16s | Estimated savings: 10.5s (65.5% faster)

	Action	Time	Status	Info
🟩	SyncWorkspace	8.9ms	Passed
🟩	SyncProject(escaperoom)	0.3ms	Passed
🟩	SyncProject(blueorange)	0.4ms	Passed
🟦	RunTask(escaperoom:test)	1.3s	Cached
🟥	RunTask(blueorange:install)	5.5s	Failed
⬛️	RunTask(blueorange:test)	0.1ms	Skipped
⬛️	RunTask(blueorange:build)	0.2ms	Skipped

Environment

OS: Linux
Matrix:

os = ubuntu-latest
name = Linux
index = 1
total = 2
job_number = 2

Variables:

MOON_TOOLCHAIN_FORCE_GLOBALS = true

Touched files

apps/blueorange/package.json

[github-actions]

Run report for a589e578 (ubuntu-latest, Linux, 0, 2, 1)

Total time: 8.8ms | Comparison time: 0s | Estimated loss: 8.8ms (100.0% slower)

	Action	Time	Status	Info
🟩	SyncWorkspace	8.7ms	Passed

Environment

OS: Linux
Matrix:

os = ubuntu-latest
name = Linux
index = 0
total = 2
job_number = 1

Variables:

MOON_TOOLCHAIN_FORCE_GLOBALS = true

Touched files

apps/blueorange/package.json