Security patching of transitive dependencies

An open-ended security override handed vitest a Vite major it cannot run

The override forced a patched vite into the tree with no ceiling, so pnpm took 8.1.4, vitest evaluated all 71 files and registered no suites, and 845 tests stopped running behind an honest error message.