vitest 5.0.0-beta.5 → 5.0.0-beta.6

package/dist/chunks/{cli-api.SMst4llK.js → cli-api.cZcvaUFI.js}

@@ -7,24 +7,25 @@ import { unique, createDefer, slash, cleanUrl, withTrailingSlash, wrapId, isExte
 import { i as isPackageExists, r as resolveModule } from './index.CesbTg1C.js';
 import * as vite from 'vite';
 import { parseAst, searchForWorkspaceRoot, fetchModule, version, createServer, isFileLoadingAllowed, normalizePath as normalizePath$1, isRunnableDevEnvironment, mergeConfig } from 'vite';
-import { h as hash, b as resolveCoverageReporters, R as RandomSequencer, c as isBrowserEnabled, r as resolveConfig$1, a as resolveApiServerConfig, f as findConfigFile, p as prompt } from './index.6dZyLbho.js';
+import { h as hash, b as resolveCoverageReporters, A as API_TOKEN_FILE, c as isBrowserEnabled, r as resolveConfig$1, R as RandomSequencer, a as resolveApiServerConfig, f as findConfigFile, p as prompt } from './index.Djaij2xr.js';
 import * as nodeos from 'node:os';
 import nodeos__default, { tmpdir, hostname } from 'node:os';
 import { serializeValue } from '@vitest/utils/serialize';
-import { v as version$1 } from './cac.DYQRhgb-.js';
+import { v as version$1 } from './cac.DKrA6qEB.js';
 import { distDir, rootDir } from '../path.js';
-import { w as validateTags, x as limitConcurrency, y as createTagsFilter } from './artifact.C0OHWdod.js';
+import { w as validateTags, x as limitConcurrency, y as createTagsFilter } from './artifact.BNnEI1sJ.js';
 import { N as NativeModuleRunner } from './nativeModuleRunner.WlMdOB52.js';
 import { createFileTask as createFileTask$1, createTaskName, calculateSuiteHash, convertTasksToEvents, hasFailed, generateFileHash, getTestName, hasFailedSnapshot, getTests, getSuites, getTasks, getFullName, someTasksAreOnly, interpretTaskModes } from '../task-utils.js';
 import { Traces } from '../traces.js';
 import { createDebug } from 'obug';
 import { rm, readFile, writeFile, rename, stat, unlink, mkdir, readdir, copyFile } from 'node:fs/promises';
 import c from 'tinyrainbow';
+import crypto, { createHash } from 'node:crypto';
 import module$1, { createRequire, builtinModules, isBuiltin as isBuiltin$1 } from 'node:module';
 import url, { fileURLToPath, pathToFileURL } from 'node:url';
 import pm from 'picomatch';
 import { glob, isDynamicPattern } from 'tinyglobby';
-import { a as coverageConfigDefaults, c as configDefaults } from './defaults.CUUnbOrq.js';
+import { a as coverageConfigDefaults, c as configDefaults } from './defaults.B_pFOTYy.js';
 import { VitestModuleEvaluator } from '#module-evaluator';
 import { ModuleRunner } from 'vite/module-runner';
 import { Console } from 'node:console';
@@ -39,7 +40,6 @@ import { defaultStackIgnorePatterns, parseErrorStacktrace, parseStacktrace } fro
 import { t as truncateString, e as errorBanner, F as F_POINTER, d as divider, f as formatProjectName, w as withLabel, a as formatTimeString, b as taskFail, s as separator, c as F_CHECK, g as F_DOWN_RIGHT, h as getStateSymbol, r as renderSnapshotSummary, p as padSummaryTitle, i as getStateString$1, j as formatTime, k as countTestErrors, l as F_TREE_NODE_END, m as F_TREE_NODE_MIDDLE, n as noun, o as F_RIGHT } from './utils.DKODp04v.js';
 import { a as isTTY, b as isWindows, i as isForceColor } from './env.BKKtU2WC.js';
 import { isatty } from 'node:tty';
-import crypto, { createHash } from 'node:crypto';
 import EventEmitter$1, { EventEmitter } from 'node:events';
 import { c as createBirpc } from './index.Chj8NDwU.js';
 import { i as isBuiltin, t as toBuiltin } from './modules.BJuCwlRJ.js';
@@ -47,7 +47,7 @@ import { fork } from 'node:child_process';
 import { Worker } from 'node:worker_threads';
 import require$$0$3 from 'events';
 import require$$1$1 from 'https';
-import require$$2 from 'http';
+import require$$2$1 from 'http';
 import require$$3 from 'net';
 import require$$4 from 'tls';
 import require$$1 from 'crypto';
@@ -55,6 +55,7 @@ import require$$0$2 from 'stream';
 import require$$7 from 'url';
 import require$$0 from 'zlib';
 import require$$0$1 from 'buffer';
+import require$$2 from 'util';
 import { A as API_PATH, c as configFiles, d as defaultBrowserPort, a as defaultPort } from './constants.-juJ8b_4.js';
 import { isAgent } from 'std-env';
 import MagicString from 'magic-string';
@@ -2117,6 +2118,7 @@ class BaseCoverageProvider {
 	coverageFiles = /* @__PURE__ */ new Map();
 	pendingPromises = [];
 	coverageFilesDirectory;
+	reportsDirectoryLock;
 	roots = [];
 	changedFiles;
 	_initialize(ctx) {
@@ -2142,6 +2144,7 @@ Update your dependencies and make sure the versions match.`));
 		const shard = this.ctx.config.shard;
 		const tempDirectory = `.tmp${shard ? `-${shard.index}-${shard.count}` : ""}`;
 		this.coverageFilesDirectory = resolve$1(this.options.reportsDirectory, tempDirectory);
+		this.reportsDirectoryLock = new ReportsDirectoryLock(resolve$1(this.options.reportsDirectory));
 		// If --project filter is set pick only roots of resolved projects
 		this.roots = ctx.config.project?.length ? [...new Set(ctx.projects.map((project) => project.config.root))] : [ctx.config.root];
 	}
@@ -2205,6 +2208,7 @@ Update your dependencies and make sure the versions match.`));
 		return this.options;
 	}
 	async clean(clean = true) {
+		await this.reportsDirectoryLock.acquire();
 		if (clean && existsSync(this.options.reportsDirectory)) await promises.rm(this.options.reportsDirectory, {
 			recursive: true,
 			force: true,
@@ -2264,10 +2268,14 @@ Update your dependencies and make sure the versions match.`));
 		}
 	}
 	async cleanAfterRun() {
-		this.coverageFiles = /* @__PURE__ */ new Map();
-		await promises.rm(this.coverageFilesDirectory, { recursive: true });
-		// Remove empty reports directory, e.g. when only text-reporter is used
-		if (readdirSync(this.options.reportsDirectory).length === 0) await promises.rm(this.options.reportsDirectory, { recursive: true });
+		try {
+			this.coverageFiles = /* @__PURE__ */ new Map();
+			await promises.rm(this.coverageFilesDirectory, { recursive: true });
+			// Remove empty reports directory, e.g. when only text-reporter is used
+			if (readdirSync(this.options.reportsDirectory).length === 0) await promises.rm(this.options.reportsDirectory, { recursive: true });
+		} finally {
+			await this.reportsDirectoryLock.release();
+		}
 	}
 	async onTestRunStart() {
 		if (this.options.changed) try {
@@ -2615,6 +2623,65 @@ function resolveMergeConfig(mod) {
 		if (config) return config;
 	}
 }
+class ReportsDirectoryLock {
+	lockFile;
+	constructor(reportsDirectory) {
+		this.reportsDirectory = reportsDirectory;
+		const hash = createHash("sha256").update(reportsDirectory).digest("hex").slice(0, 16);
+		this.lockFile = resolve$1(tmpdir(), `vitest-coverage-${hash}.lock`);
+	}
+	async acquire() {
+		if (await this.tryWrite()) return;
+		const owner = await this.readOwner();
+		// We already hold the lock for this directory (e.g. watch-mode reruns).
+		if (owner?.pid === process.pid) return;
+		// Another running Vitest owns this directory.
+		if (owner && isProcessAlive(owner.pid)) throw this.inUseError(owner);
+		// The lock was left behind by a process that no longer exists. Reclaim it.
+		await promises.rm(this.lockFile, { force: true });
+		if (!await this.tryWrite()) throw this.inUseError(await this.readOwner());
+	}
+	async release() {
+		if ((await this.readOwner())?.pid === process.pid) await promises.rm(this.lockFile, { force: true });
+	}
+	async tryWrite() {
+		const payload = JSON.stringify({
+			pid: process.pid,
+			reportsDirectory: this.reportsDirectory
+		});
+		try {
+			// `wx` fails with EEXIST if the file already exists, so only one process wins.
+			await promises.writeFile(this.lockFile, payload, { flag: "wx" });
+			return true;
+		} catch (error) {
+			if (error.code === "EEXIST") return false;
+			throw error;
+		}
+	}
+	async readOwner() {
+		try {
+			const owner = JSON.parse(await promises.readFile(this.lockFile, "utf-8"));
+			return typeof owner?.pid === "number" ? owner : null;
+		} catch {
+			return null;
+		}
+	}
+	inUseError(owner) {
+		return /* @__PURE__ */ new Error(`The coverage report directory "${this.reportsDirectory}" is already in use by another Vitest process${owner ? ` (pid ${owner.pid})` : ""}. Running coverage for multiple Vitest processes in the same directory at the same time is not supported, because they would delete each other's reports.\nGive each run its own "coverage.reportsDirectory" (e.g. --coverage.reportsDirectory=coverage-${process.pid}) or run them sequentially.`);
+	}
+}
+function isProcessAlive(pid) {
+	try {
+		// Sending signal 0 checks if the process exists without actually killing it:
+		// https://nodejs.org/api/process.html#processkillpid-signal
+		process.kill(pid, 0);
+		return true;
+	} catch (error) {
+		// ESRCH means the process is gone. Treat anything else (e.g. EPERM) as alive
+		// so we never reclaim a lock from a process that is still running.
+		return error.code !== "ESRCH";
+	}
+}
 
 // this is copy pasted from vite
 function normalizeResolvedIdToUrl(environment, resolvedId) {
@@ -4297,13 +4364,14 @@ class Logger {
 		const color = this.ctx.config.watch ? "blue" : "cyan";
 		const mode = this.ctx.config.watch ? "DEV" : "RUN";
 		this.log(withLabel(color, mode, `v${this.ctx.version} `) + c.gray(this.ctx.config.root));
-		// Log seed if either files (RandomSequencer) or tests are shuffled
-		if (this.ctx.config.sequence.sequencer === RandomSequencer || this.ctx.config.sequence.shuffle) this.log(PAD + c.gray(`Running tests with seed "${this.ctx.config.sequence.seed}"`));
+		const seed = this.ctx.getSeed();
+		if (seed != null) this.log(PAD + c.gray(`Running tests with seed "${seed}"`));
 		if (this.ctx.config.ui) {
 			const host = this.ctx.config.api?.host || "localhost";
 			const port = this.ctx.vite.config.server.port;
-			const base = this.ctx.config.uiBase;
-			this.log(PAD + c.dim(c.green(`UI started at http://${host}:${c.bold(port)}${base}`)));
+			const url = new URL(this.ctx.config.uiBase, `http://${host}:${port}`);
+			url.searchParams.set("token", this.ctx.config.api.token);
+			this.log(PAD + c.dim(c.green(`UI started at ${url}`)));
 		} else if (this.ctx.config.api?.port) {
 			const resolvedUrls = this.ctx.vite.resolvedUrls;
 			// workaround for https://github.com/vitejs/vite/issues/15438, it was fixed in vite 5.1
@@ -4632,7 +4700,7 @@ class VitestPackageInstaller {
 		if (/* @__PURE__ */ isPackageExists(dependency, { paths: [root, __dirname$1] })) return true;
 		process.stderr.write(withLabel("red", "MISSING DEPENDENCY", `Cannot find dependency '${dependency}'\n\n`));
 		if (!isTTY) return false;
-		const { install } = await (await import('./index.6dZyLbho.js').then(function (n) { return n.i; })).default({
+		const { install } = await (await import('./index.Djaij2xr.js').then(function (n) { return n.i; })).default({
 			type: "confirm",
 			name: "install",
 			message: c.reset(`Do you want to install ${c.green(dependency)}?`)
@@ -4744,7 +4812,7 @@ function createBrowserPool(vitest) {
 		vitest.onCancel(() => {
 			isCancelled = true;
 		});
-		const initialisedPools = await Promise.all([...groupedFiles.entries()].map(async ([project, files]) => {
+		const initialisedPools = await Promise.all(Array.from(groupedFiles.entries(), async ([project, files]) => {
 			await project._initBrowserProvider();
 			if (!project.browser) throw new TypeError(`The browser server was not initialized${project.name ? ` for the "${project.name}" project` : ""}. This is a bug in Vitest. Please, open a new issue with reproduction.`);
 			if (isCancelled) return;
@@ -4783,7 +4851,7 @@ function createBrowserPool(vitest) {
 	return {
 		name: "browser",
 		async close() {
-			await Promise.all([...providers].map((provider) => provider.close()));
+			await Promise.all(Array.from(providers, (provider) => provider.close()));
 			vitest._browserSessions.sessionIds.clear();
 			providers.clear();
 			vitest.projects.forEach((project) => {
@@ -5126,6 +5194,7 @@ class PoolRunner {
 	poolId = void 0;
 	project;
 	environment;
+	_lastTestFiles;
 	_state = RunnerState.IDLE;
 	_operationLock = null;
 	_terminatePromise = createDefer();
@@ -5148,6 +5217,7 @@ class PoolRunner {
 		this.project = options.project;
 		this.environment = options.environment;
 		const vitest = this.project.vitest;
+		this._lastTestFiles = [];
 		this._traces = vitest._traces;
 		if (this._traces.isEnabled()) {
 			const { span: workerSpan, context } = this._traces.startContextSpan("vitest.worker");
@@ -5201,7 +5271,8 @@ class PoolRunner {
 		return span;
 	}
 	request(method, context) {
-		this._otel?.files.push(...context.files.map((f) => f.filepath));
+		this._lastTestFiles = context.files.map((f) => f.filepath);
+		this._otel?.files.push(...this._lastTestFiles);
 		return this.postMessage({
 			__vitest_worker_request__: true,
 			type: method,
@@ -5321,6 +5392,7 @@ class PoolRunner {
 			this._state = RunnerState.STOPPED;
 			throw error;
 		} finally {
+			this._lastTestFiles = [];
 			this._operationLock.resolve();
 			this._operationLock = null;
 			this._otel?.span.end();
@@ -5346,21 +5418,36 @@ class PoolRunner {
 			this._eventEmitter.emit("error", error);
 		}
 	};
-	emitUnexpectedExit = () => {
-		const error = /* @__PURE__ */ new Error(`Worker exited unexpectedly during ${this._state} state`);
+	emitUnexpectedExit = (code, signal) => {
+		const hasCode = typeof code === "number";
+		const errorDetails = hasCode || signal ? `with ${hasCode ? `exit code ${code} ` : ""}${signal ? `signal ${signal} ` : ""}` : "";
+		const testFileDetails = this._lastTestFiles.length ? ` while running test file${this._lastTestFiles.length === 1 ? "" : "s"} ${this._lastTestFiles.join(", ")}` : "";
+		const error = /* @__PURE__ */ new Error(`Worker exited unexpectedly ${errorDetails}during ${this._state} state${testFileDetails}`);
 		this._state = RunnerState.STOPPED;
 		this._eventEmitter.emit("error", error);
 	};
 	waitForStart() {
 		return new Promise((resolve, reject) => {
-			const onStart = (message) => {
+			const cleanup = () => {
+				this.off("message", onStart);
+				this.off("error", onError);
+			};
+			function onStart(message) {
 				if (message.type === "started") {
-					this.off("message", onStart);
+					cleanup();
 					if (message.error) reject(message.error);
 					else resolve();
 				}
-			};
+			}
+			// The worker can die before it ever reports back (e.g. an invalid
+			// `execArgv` makes Node exit immediately). Reject as soon as that
+			// happens instead of waiting for the start timeout to elapse.
+			function onError(error) {
+				cleanup();
+				reject(error);
+			}
 			this.on("message", onStart);
+			this.on("error", onError);
 		});
 	}
 	withTimeout(promise, timeout) {
@@ -5924,7 +6011,7 @@ function deepEqual$1(obj1, obj2) {
 	const keys1 = Object.keys(obj1);
 	const keys2 = Object.keys(obj2);
 	if (keys1.length !== keys2.length) return false;
-	for (const key of keys1) if (!Object.prototype.hasOwnProperty.call(obj2, key) || !deepEqual$1(obj1[key], obj2[key])) return false;
+	for (const key of keys1) if (!Object.hasOwn(obj2, key) || !deepEqual$1(obj1[key], obj2[key])) return false;
 	return true;
 }
 
@@ -6450,6 +6537,9 @@ function requirePermessageDeflate () {
 	   *     acknowledge disabling of client context takeover
 	   * @param {Number} [options.concurrencyLimit=10] The number of concurrent
 	   *     calls to zlib
+	   * @param {Boolean} [options.isServer=false] Create the instance in either
+	   *     server or client mode
+	   * @param {Number} [options.maxPayload=0] The maximum allowed message length
 	   * @param {(Boolean|Number)} [options.serverMaxWindowBits] Request/confirm the
 	   *     use of a custom server window size
 	   * @param {Boolean} [options.serverNoContextTakeover=false] Request/accept
@@ -6460,16 +6550,13 @@ function requirePermessageDeflate () {
 	   *     deflate
 	   * @param {Object} [options.zlibInflateOptions] Options to pass to zlib on
 	   *     inflate
-	   * @param {Boolean} [isServer=false] Create the instance in either server or
-	   *     client mode
-	   * @param {Number} [maxPayload=0] The maximum allowed message length
 	   */
-	  constructor(options, isServer, maxPayload) {
-	    this._maxPayload = maxPayload | 0;
+	  constructor(options) {
 	    this._options = options || {};
 	    this._threshold =
 	      this._options.threshold !== undefined ? this._options.threshold : 1024;
-	    this._isServer = !!isServer;
+	    this._maxPayload = this._options.maxPayload | 0;
+	    this._isServer = !!this._options.isServer;
 	    this._deflate = null;
 	    this._inflate = null;
 
@@ -7150,6 +7237,10 @@ function requireReceiver () {
 	   *     extensions
 	   * @param {Boolean} [options.isServer=false] Specifies whether to operate in
 	   *     client or server mode
+	   * @param {Number} [options.maxBufferedChunks=0] The maximum number of
+	   *     buffered data chunks
+	   * @param {Number} [options.maxFragments=0] The maximum number of message
+	   *     fragments
 	   * @param {Number} [options.maxPayload=0] The maximum allowed message length
 	   * @param {Boolean} [options.skipUTF8Validation=false] Specifies whether or
 	   *     not to skip UTF-8 validation for text and close messages
@@ -7164,6 +7255,8 @@ function requireReceiver () {
 	    this._binaryType = options.binaryType || BINARY_TYPES[0];
 	    this._extensions = options.extensions || {};
 	    this._isServer = !!options.isServer;
+	    this._maxBufferedChunks = options.maxBufferedChunks | 0;
+	    this._maxFragments = options.maxFragments | 0;
 	    this._maxPayload = options.maxPayload | 0;
 	    this._skipUTF8Validation = !!options.skipUTF8Validation;
 	    this[kWebSocket] = undefined;
@@ -7199,6 +7292,22 @@ function requireReceiver () {
 	  _write(chunk, encoding, cb) {
 	    if (this._opcode === 0x08 && this._state == GET_INFO) return cb();
 
+	    if (
+	      this._maxBufferedChunks > 0 &&
+	      this._buffers.length >= this._maxBufferedChunks
+	    ) {
+	      cb(
+	        this.createError(
+	          RangeError,
+	          'Too many buffered chunks',
+	          false,
+	          1008,
+	          'WS_ERR_TOO_MANY_BUFFERED_PARTS'
+	        )
+	      );
+	      return;
+	    }
+
 	    this._bufferedBytes += chunk.length;
 	    this._buffers.push(chunk);
 	    this.startLoop(cb);
@@ -7595,6 +7704,22 @@ function requireReceiver () {
 	    }
 
 	    if (data.length) {
+	      if (
+	        this._maxFragments > 0 &&
+	        this._fragments.length >= this._maxFragments
+	      ) {
+	        const error = this.createError(
+	          RangeError,
+	          'Too many message fragments',
+	          false,
+	          1008,
+	          'WS_ERR_TOO_MANY_BUFFERED_PARTS'
+	        );
+
+	        cb(error);
+	        return;
+	      }
+
 	      //
 	      // This message is not compressed so its length is the sum of the payload
 	      // length of all fragments.
@@ -7634,6 +7759,22 @@ function requireReceiver () {
 	          return;
 	        }
 
+	        if (
+	          this._maxFragments > 0 &&
+	          this._fragments.length >= this._maxFragments
+	        ) {
+	          const error = this.createError(
+	            RangeError,
+	            'Too many message fragments',
+	            false,
+	            1008,
+	            'WS_ERR_TOO_MANY_BUFFERED_PARTS'
+	          );
+
+	          cb(error);
+	          return;
+	        }
+
 	        this._fragments.push(buf);
 	      }
 
@@ -7828,6 +7969,9 @@ function requireSender () {
 
 	const { Duplex } = require$$0$2;
 	const { randomFillSync } = require$$1;
+	const {
+	  types: { isUint8Array }
+	} = require$$2;
 
 	const PerMessageDeflate = requirePermessageDeflate();
 	const { EMPTY_BUFFER, kWebSocket, NOOP } = requireConstants();
@@ -8024,8 +8168,10 @@ function requireSender () {
 
 	      if (typeof data === 'string') {
 	        buf.write(data, 2);
-	      } else {
+	      } else if (isUint8Array(data)) {
 	        buf.set(data, 2);
+	      } else {
+	        throw new TypeError('Second argument must be a string or a Uint8Array');
 	      }
 	    }
 
@@ -8949,7 +9095,7 @@ function requireWebsocket () {
 
 	const EventEmitter = require$$0$3;
 	const https = require$$1$1;
-	const http = require$$2;
+	const http = require$$2$1;
 	const net = require$$3;
 	const tls = require$$4;
 	const { randomBytes, createHash } = require$$1;
@@ -9146,6 +9292,10 @@ function requireWebsocket () {
 	   *     multiple times in the same tick
 	   * @param {Function} [options.generateMask] The function used to generate the
 	   *     masking key
+	   * @param {Number} [options.maxBufferedChunks=0] The maximum number of
+	   *     buffered data chunks
+	   * @param {Number} [options.maxFragments=0] The maximum number of message
+	   *     fragments
 	   * @param {Number} [options.maxPayload=0] The maximum allowed message size
 	   * @param {Boolean} [options.skipUTF8Validation=false] Specifies whether or
 	   *     not to skip UTF-8 validation for text and close messages
@@ -9157,6 +9307,8 @@ function requireWebsocket () {
 	      binaryType: this.binaryType,
 	      extensions: this._extensions,
 	      isServer: this._isServer,
+	      maxBufferedChunks: options.maxBufferedChunks,
+	      maxFragments: options.maxFragments,
 	      maxPayload: options.maxPayload,
 	      skipUTF8Validation: options.skipUTF8Validation
 	    });
@@ -9585,6 +9737,10 @@ function requireWebsocket () {
 	 *     masking key
 	 * @param {Number} [options.handshakeTimeout] Timeout in milliseconds for the
 	 *     handshake request
+	 * @param {Number} [options.maxBufferedChunks=1048576] The maximum number of
+	 *     buffered data chunks
+	 * @param {Number} [options.maxFragments=131072] The maximum number of message
+	 *     fragments
 	 * @param {Number} [options.maxPayload=104857600] The maximum allowed message
 	 *     size
 	 * @param {Number} [options.maxRedirects=10] The maximum number of redirects
@@ -9605,6 +9761,8 @@ function requireWebsocket () {
 	    autoPong: true,
 	    closeTimeout: CLOSE_TIMEOUT,
 	    protocolVersion: protocolVersions[1],
+	    maxBufferedChunks: 1024 * 1024,
+	    maxFragments: 128 * 1024,
 	    maxPayload: 100 * 1024 * 1024,
 	    skipUTF8Validation: false,
 	    perMessageDeflate: true,
@@ -9638,7 +9796,7 @@ function requireWebsocket () {
 	  } else {
 	    try {
 	      parsedUrl = new URL(address);
-	    } catch (e) {
+	    } catch {
 	      throw new SyntaxError(`Invalid URL: ${address}`);
 	    }
 	  }
@@ -9700,11 +9858,11 @@ function requireWebsocket () {
 	  opts.timeout = opts.handshakeTimeout;
 
 	  if (opts.perMessageDeflate) {
-	    perMessageDeflate = new PerMessageDeflate(
-	      opts.perMessageDeflate !== true ? opts.perMessageDeflate : {},
-	      false,
-	      opts.maxPayload
-	    );
+	    perMessageDeflate = new PerMessageDeflate({
+	      ...opts.perMessageDeflate,
+	      isServer: false,
+	      maxPayload: opts.maxPayload
+	    });
 	    opts.headers['Sec-WebSocket-Extensions'] = format({
 	      [PerMessageDeflate.extensionName]: perMessageDeflate.offer()
 	    });
@@ -9962,6 +10120,8 @@ function requireWebsocket () {
 	    websocket.setSocket(socket, head, {
 	      allowSynchronousEvents: opts.allowSynchronousEvents,
 	      generateMask: opts.generateMask,
+	      maxBufferedChunks: opts.maxBufferedChunks,
+	      maxFragments: opts.maxFragments,
 	      maxPayload: opts.maxPayload,
 	      skipUTF8Validation: opts.skipUTF8Validation
 	    });
@@ -10511,12 +10671,14 @@ function requireStream () {
 
 requireStream();
 
+requireExtension();
+
+requirePermessageDeflate();
+
 requireReceiver();
 
 requireSender();
 
-requireWebsocket();
-
 var subprotocol;
 var hasRequiredSubprotocol;
 
@@ -10587,6 +10749,10 @@ function requireSubprotocol () {
 	return subprotocol;
 }
 
+requireSubprotocol();
+
+requireWebsocket();
+
 /* eslint no-unused-vars: ["error", { "varsIgnorePattern": "^Duplex$", "caughtErrors": "none" }] */
 
 var websocketServer;
@@ -10597,7 +10763,7 @@ function requireWebsocketServer () {
 	hasRequiredWebsocketServer = 1;
 
 	const EventEmitter = require$$0$3;
-	const http = require$$2;
+	const http = require$$2$1;
 	const { Duplex } = require$$0$2;
 	const { createHash } = require$$1;
 
@@ -10637,6 +10803,10 @@ function requireWebsocketServer () {
 	   *     called
 	   * @param {Function} [options.handleProtocols] A hook to handle protocols
 	   * @param {String} [options.host] The hostname where to bind the server
+	   * @param {Number} [options.maxBufferedChunks=1048576] The maximum number of
+	   *     buffered data chunks
+	   * @param {Number} [options.maxFragments=131072] The maximum number of message
+	   *     fragments
 	   * @param {Number} [options.maxPayload=104857600] The maximum allowed message
 	   *     size
 	   * @param {Boolean} [options.noServer=false] Enable no server mode
@@ -10659,6 +10829,8 @@ function requireWebsocketServer () {
 	    options = {
 	      allowSynchronousEvents: true,
 	      autoPong: true,
+	      maxBufferedChunks: 1024 * 1024,
+	      maxFragments: 128 * 1024,
 	      maxPayload: 100 * 1024 * 1024,
 	      skipUTF8Validation: false,
 	      perMessageDeflate: false,
@@ -10887,11 +11059,11 @@ function requireWebsocketServer () {
 	      this.options.perMessageDeflate &&
 	      secWebSocketExtensions !== undefined
 	    ) {
-	      const perMessageDeflate = new PerMessageDeflate(
-	        this.options.perMessageDeflate,
-	        true,
-	        this.options.maxPayload
-	      );
+	      const perMessageDeflate = new PerMessageDeflate({
+	        ...this.options.perMessageDeflate,
+	        isServer: true,
+	        maxPayload: this.options.maxPayload
+	      });
 
 	      try {
 	        const offers = extension.parse(secWebSocketExtensions);
@@ -11018,6 +11190,8 @@ function requireWebsocketServer () {
 
 	    ws.setSocket(socket, head, {
 	      allowSynchronousEvents: this.options.allowSynchronousEvents,
+	      maxBufferedChunks: this.options.maxBufferedChunks,
+	      maxFragments: this.options.maxFragments,
 	      maxPayload: this.options.maxPayload,
 	      skipUTF8Validation: this.options.skipUTF8Validation
 	    });
@@ -11629,11 +11803,11 @@ function serializeConfig(project) {
 			expand: config.snapshotOptions.expand ?? globalConfig.snapshotOptions.expand
 		},
 		sequence: {
-			shuffle: globalConfig.sequence.shuffle,
-			concurrent: globalConfig.sequence.concurrent,
+			shuffle: config.sequence.shuffle,
+			concurrent: config.sequence.concurrent,
 			seed: globalConfig.sequence.seed,
-			hooks: globalConfig.sequence.hooks,
-			setupFiles: globalConfig.sequence.setupFiles
+			hooks: config.sequence.hooks,
+			setupFiles: config.sequence.setupFiles
 		},
 		inspect: globalConfig.inspect,
 		inspectBrk: globalConfig.inspectBrk,
@@ -12797,7 +12971,10 @@ function WorkspaceVitestPlugin(project, options) {
 						ws: false,
 						preTransformRequests: false,
 						middlewareMode: true,
-						fs: { allow: resolveFsAllow(project.vitest.config.root, project.vitest.vite.config.configFile) }
+						fs: {
+							allow: resolveFsAllow(project.vitest.config.root, project.vitest.vite.config.configFile),
+							deny: [API_TOKEN_FILE]
+						}
 					},
 					environments: { ssr: { resolve: resolveOptions } },
 					test: {}
@@ -12911,7 +13088,7 @@ const defaultInline = [
 ];
 const depsExternal = [/\/node_modules\/.*\.cjs\.js$/, /\/node_modules\/.*\.mjs$/];
 function guessCJSversion(id) {
-	if (id.match(ESM_EXT_RE)) {
+	if (ESM_EXT_RE.test(id)) {
 		for (const i of [
 			id.replace(ESM_EXT_RE, ".mjs"),
 			id.replace(ESM_EXT_RE, ".umd.js"),
@@ -12919,7 +13096,7 @@ function guessCJSversion(id) {
 			id.replace(ESM_EXT_RE, ".js")
 		]) if (existsSync(i)) return i;
 	}
-	if (id.match(ESM_FOLDER_RE)) {
+	if (ESM_FOLDER_RE.test(id)) {
 		for (const i of [
 			id.replace(ESM_FOLDER_RE, "/umd/$1"),
 			id.replace(ESM_FOLDER_RE, "/cjs/$1"),
@@ -14313,7 +14490,7 @@ class BaseReporter {
 	getFullName(test, separator) {
 		if (test === test.file) return test.name;
 		let name = test.file.name;
-		if (test.location) name += c.dim(`:${test.location.line}:${test.location.column}`);
+		if (test.location) name += c.dim(`:${test.location.line}`);
 		name += separator;
 		name += getTestName(test, separator);
 		return name;
@@ -14744,7 +14921,7 @@ function deepEqual(a, b) {
 	const keysA = Object.keys(a);
 	const keysB = Object.keys(b);
 	if (keysA.length !== keysB.length) return false;
-	for (const key of keysA) if (!Object.prototype.hasOwnProperty.call(b, key) || !deepEqual(a[key], b[key])) return false;
+	for (const key of keysA) if (!Object.hasOwn(b, key) || !deepEqual(a[key], b[key])) return false;
 	return true;
 }
 function sum(items, cb) {
@@ -15673,22 +15850,20 @@ class JsonReporter {
 			testResults,
 			coverageMap: this.coverageMap
 		};
-		await this.writeReport(JSON.stringify(result));
-	}
-	/**
-	* Writes the report to an output file if specified in the config,
-	* or logs it to the console otherwise.
-	* @param report
-	*/
-	async writeReport(report) {
+		const resultString = JSON.stringify(result);
 		const outputFile = this.options.outputFile ?? getOutputFile(this.ctx.config, "json");
 		if (outputFile) {
 			const reportFile = resolve$1(this.ctx.config.root, outputFile);
 			const outputDirectory = dirname(reportFile);
 			if (!existsSync(outputDirectory)) await promises.mkdir(outputDirectory, { recursive: true });
-			await promises.writeFile(reportFile, report, "utf-8");
+			await promises.writeFile(reportFile, resultString, "utf-8");
 			this.ctx.logger.log(`JSON report written to ${reportFile}`);
-		} else this.ctx.logger.log(report);
+		} else if (this.options.stdout) this.ctx.logger.log(resultString);
+		else {
+			const report = this.ctx.createReport("json");
+			await report.writeFile("output.json", resultString);
+			this.ctx.logger.log(`JSON report written to ${resolve$1(report.root, "output.json")}`);
+		}
 	}
 }
 
@@ -15772,6 +15947,8 @@ class JUnitReporter {
 			this.reportFile = resolve$1(this.ctx.config.root, outputFile);
 			const outputDirectory = dirname(this.reportFile);
 			if (!existsSync(outputDirectory)) await promises.mkdir(outputDirectory, { recursive: true });
+		} else if (!this.options.stdout) this.reportFile = resolve$1(this.ctx.createReport("junit").root, "output.xml");
+		if (this.reportFile) {
 			this.fileFd = await promises.open(this.reportFile, "w+");
 			this.baseLog = async (text) => {
 				if (!this.fileFd) this.fileFd = await promises.open(this.reportFile, "w+");
@@ -16151,7 +16328,7 @@ class VerboseReporter extends DefaultReporter {
 		if (this.ctx.config.hideSkippedTests && testResult.state === "skipped" && test.options.mode !== "todo") return;
 		let title = ` ${this.getEntityPrefix(test)} `;
 		title += test.module.task.name;
-		if (test.location) title += c.dim(`:${test.location.line}:${test.location.column}`);
+		if (test.location) title += c.dim(`:${test.location.line}`);
 		title += separator;
 		title += getTestName(test.task, separator);
 		title += this.getTestCaseSuffix(test);
@@ -16215,11 +16392,11 @@ function parseFilter(filter) {
 	const colonIndex = filter.lastIndexOf(":");
 	if (colonIndex === -1) return { filename: filter };
 	const [parsedFilename, lineNumber] = [filter.substring(0, colonIndex), filter.substring(colonIndex + 1)];
-	if (lineNumber.match(/^\d+$/)) return {
+	if (/^\d+$/.test(lineNumber)) return {
 		filename: parsedFilename,
 		lineNumber: Number.parseInt(lineNumber)
 	};
-	else if (lineNumber.match(/^\d+-\d+$/)) throw new RangeLocationFilterProvidedError(filter);
+	else if (/^\d+-\d+$/.test(lineNumber)) throw new RangeLocationFilterProvidedError(filter);
 	else return { filename: filter };
 }
 function groupFilters(filters) {
@@ -16647,7 +16824,7 @@ class TestSuite extends SuiteImplementation {
 	*/
 	toTestSpecification() {
 		const isTypecheck = this.task.meta.typecheck === true;
-		const testIds = [...this.children.allTests()].map((test) => test.id);
+		const testIds = Array.from(this.children.allTests(), (test) => test.id);
 		return this.project.createSpecification(this.module.moduleId, { testIds }, isTypecheck ? "typecheck" : void 0);
 	}
 	/**
@@ -18219,7 +18396,7 @@ class Vitest {
 	* Returns the seed, if tests are running in a random order.
 	*/
 	getSeed() {
-		return this.config.sequence.seed ?? null;
+		return this.config.sequence.sequencer === RandomSequencer || !!this.config.sequence.shuffle || this.projects.some((p) => !!p.config.sequence.shuffle) ? this.config.sequence.seed : null;
 	}
 	/** @internal */
 	async _reportFileTask(file) {
@@ -18582,7 +18759,7 @@ class Vitest {
 	*/
 	async cancelCurrentRun(reason) {
 		this.isCancelling = true;
-		this.cancelPromise = Promise.all([...this._onCancelListeners].map((listener) => listener(reason)));
+		this.cancelPromise = Promise.all(Array.from(this._onCancelListeners, (listener) => listener(reason)));
 		await this.cancelPromise.finally(() => this.cancelPromise = void 0);
 		await this.runningPromise;
 	}
@@ -18950,8 +19127,6 @@ async function VitestPlugin(options = {}, vitest = new Vitest(deepClone(options)
 				const defines = deleteDefineConfig(viteConfig);
 				options.defines = defines;
 				options.viteDefine = originalDefine;
-				let open = false;
-				if (testConfig.ui && testConfig.open) open = testConfig.uiBase ?? "/__vitest__/";
 				const resolveOptions = getDefaultResolveOptions();
 				let config = {
 					base: "/",
@@ -18963,11 +19138,14 @@ async function VitestPlugin(options = {}, vitest = new Vitest(deepClone(options)
 					},
 					server: {
 						...testConfig.api,
-						open,
+						open: false,
 						hmr: false,
 						ws: testConfig.api?.middlewareMode ? false : void 0,
 						preTransformRequests: false,
-						fs: { allow: resolveFsAllow(options.root || process.cwd(), testConfig.config) }
+						fs: {
+							allow: resolveFsAllow(options.root || process.cwd(), testConfig.config),
+							deny: [API_TOKEN_FILE]
+						}
 					},
 					build: {
 						outDir: "dummy-non-existing-folder",
@@ -19093,7 +19271,33 @@ async function createVitest(modeOrOptions, optionsOrViteOverrides = {}, viteOver
 	};
 	try {
 		const server = await createViteServer(mergeConfig(config, mergeConfig(viteOverrides, { root: options.root })));
-		if (ctx.config.api?.port) await server.listen();
+		if (ctx.config.api?.port) {
+			await server.listen();
+			if (ctx.config.ui && ctx.config.open) {
+				// Note: `tokenCreated` is only an approximation of "the browser is not
+				// authenticated yet". If the user clears cookies while the token file
+				// persists, the clean URL will block until they re-open the `?token=`
+				// URL printed in the terminal.
+				if (ctx.config.api.tokenCreated) {
+					// First run that generated the token: no browser holds the auth
+					// cookie yet, so open the authenticated URL to set it. A new tab
+					// here is fine since no clean-URL tab exists to reuse.
+					const url = new URL(ctx.config.uiBase, "http://localhost");
+					url.searchParams.set("token", ctx.config.api.token);
+					server.config.server.open = `${url.pathname}${url.search}`;
+				} else
+ // Subsequent runs: open the clean UI base URL (without `?token=`)
+				// rather than the authenticated URL printed by the logger. On macOS,
+				// `openBrowser` reuses an existing tab whose URL matches via substring
+				// and reloads it (Vite's `bin/openChrome.js`). Since the 302 redirect
+				// strips the token, an already-authenticated tab lives at the clean
+				// URL, so opening the clean URL matches and reloads it; opening the
+				// token URL would never match and would spawn a new tab on every
+				// restart.
+				server.config.server.open = ctx.config.uiBase;
+				server.openBrowser();
+			}
+		}
 		return ctx;
 	} 
 	// Vitest can fail at any point inside "setServer" or inside a custom plugin