Impact Score: 5/10
Vitest v3.0.4 — Release Notes & Engineering Impact
Source available — automated, not human-reviewed
Component: vitest · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
Vitest v3.0.4. Source highlight: This release includes security patches for:
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
🔧 Bug Fixes & Patches (6)
- Filter projects eagerly during config resolution - by @sheremet-va and @AriPerkkio in https://github.com/vitest-dev/vitest/issues/7313 <samp>(dff44)</samp>
- Apply `development|production` condition on Vites 6 by @hi-ogawa and @sheremet-va (#7301) <samp>(ef146)</samp>
- **browser**: Restrict served files from `/__screenshot-error` - by @hi-ogawa in https://github.com/vitest-dev/vitest/issues/7340 <samp>(ed9ae)</samp>
- **deps**: Update all non-major dependencies - by @sheremet-va in https://github.com/vitest-dev/vitest/issues/7297 <samp>(38ea8)</samp>
- **runner**: Timeout long sync hook - by @hi-ogawa in https://github.com/vitest-dev/vitest/issues/7289 <samp>(c60ee)</samp>
- **typechecking**: Support typechecking parsing with Vite 6 - by @sheremet-va in https://github.com/vitest-dev/vitest/issues/7335 <samp>(bff70)</samp>
📄 View Raw Release Notes (Original Developer Log)
This release includes security patches for:
- [Browser mode serves arbitrary files | CVE-2025-24963](https://github.com/vitest-dev/vitest/security/advisories/GHSA-8gvc-j273-4wm5)
### 🐞 Bug Fixes
- Filter projects eagerly during config resolution - by @sheremet-va and @AriPerkkio in https://github.com/vitest-dev/vitest/issues/7313 [<samp>(dff44)</samp>](https://github.com/vitest-dev/vitest/commit/dff4406d)
- Apply `development|production` condition on Vites 6 by @hi-ogawa and @sheremet-va (#7301) [<samp>(ef146)</samp>](https://github.com/vitest-dev/vitest/commit/ef1464fc7b101709bfbf7b040e5bad62998c2ff9)
- **browser**: Restrict served files from `/__screenshot-error` - by @hi-ogawa in https://github.com/vitest-dev/vitest/issues/7340 [<samp>(ed9ae)</samp>](https://github.com/vitest-dev/vitest/commit/ed9aeba2)
- **deps**: Update all non-major dependencies - by @sheremet-va in https://github.com/vitest-dev/vitest/issues/7297 [<samp>(38ea8)</samp>](https://github.com/vitest-dev/vitest/commit/38ea8eae)
- **runner**: Timeout long sync hook - by @hi-ogawa in https://github.com/vitest-dev/vitest/issues/7289 [<samp>(c60ee)</samp>](https://github.com/vitest-dev/vitest/commit/c60ee27c)
- **typechecking**: Support typechecking parsing with Vite 6 - by @sheremet-va in https://github.com/vitest-dev/vitest/issues/7335 [<samp>(bff70)</samp>](https://github.com/vitest-dev/vitest/commit/bff70be9)
- **types**: Fix public types - by @mrginglymus and @sheremet-va in https://github.com/vitest-dev/vitest/issues/7328 [<samp>(ce6af)</samp>](https://github.com/vitest-dev/vitest/commit/ce6af70c)
##### [View changes on GitHub](https://github.com/vitest-dev/vitest/compare/v3.0.3...v3.0.4)