chore(deps): bump vitest to 5.0.0 across all workspaces

CHANGELOG.md

@@ -17,6 +17,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
+- dev tooling: vitest 4.1.11 → 5.0.0 (with `@vitest/ui` and
+  `@vitest/coverage-v8`) across cod-server, cod-client-astro, and theme01 in
+  one coordinated bump — the single root Vite pin is unchanged (one
+  vite@8.2.2); supersedes the per-package dependabot PRs and folds in the
+  fast-uri 3.1.5 → 3.1.7 transitive bump
 - no production URLs or account identifiers in committed files: theme01's
   `COD_SERVER_URL` defaults to localhost (production deploys pass the real URL
   via `wrangler deploy --var`), security scripts default to localhost, test

cod-astro/theme01/package.json

@@ -26,12 +26,12 @@
   "devDependencies": {
     "@astrojs/check": "^0.9.10",
     "@tailwindcss/vite": "^4.3.3",
-    "@vitest/ui": "^4.1.11",
+    "@vitest/ui": "^5.0.0",
     "fast-check": "^4.6.0",
     "happy-dom": "^20.9.0",
     "tailwindcss": "^4.0.0",
     "typescript": "^7.0.2",
-    "vitest": "^4.1.11",
+    "vitest": "^5.0.0",
     "wrangler": "^4.125.0"
   }
 }

cod-client-astro/package.json

@@ -41,7 +41,7 @@
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
     "typescript": "^7.0.2",
-    "vitest": "^4.1.11",
+    "vitest": "^5.0.0",
     "wrangler": "^4.125.0"
   }
 }

cod-server/package.json

@@ -46,14 +46,14 @@
     "@hono/zod-openapi": "^1.6.1",
     "@types/better-sqlite3": "^9.6.0",
     "@types/node": "^26.2.0",
-    "@vitest/coverage-v8": "^4.1.11",
-    "@vitest/ui": "^4.1.11",
+    "@vitest/coverage-v8": "^5.0.0",
+    "@vitest/ui": "^5.0.0",
     "better-sqlite3": "^13.0.3",
     "drizzle-kit": "^0.31.10",
     "fast-check": "^4.9.0",
     "miniflare": "^4.20260730.0",
     "typescript": "^7.0.2",
-    "vitest": "^4.1.11",
+    "vitest": "^5.0.0",
     "vitest-environment-miniflare": "^2.14.4",
     "wrangler": "^4.125.0"
   }