Upgrades Vitest to v5 and fixes async assertions

[dtoxvanilla1991]

Upgrades the Vitest testing framework and its coverage tool to version 5 to stay up-to-date with the latest testing features, performance improvements, and dependencies.
Kills #110

Key Changes

• Awaits Async Assertions: Fixes test assertions by properly awaiting rejected promises. Vitest 5 requires explicit awaiting of asynchronous expectations (like .rejects), which otherwise fail silently or cause test instability.
• Updates Documentation: Adds a "Development and testing" section to the README outlining the Node.js version requirement (v22.12+) and highlighting the Vitest 5 assertion rules for contributors.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 21b645ec-a0ae-4315-af39-8cfc49e53ebe

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[Copilot]

Copilot review overview

🔵 Needs a closer look

Successful CI validation of the major test-toolchain upgrade was not verified.

Review effort: Balanced
Findings: 1

Open (1)

• Clarify supported Node.js versions for Vitest 5.0.3 · New

What changed in this PR

Upgrades the JWT validator’s test toolchain to Vitest 5 and updates tests and contributor guidance.

Changes:

• Upgrades Vitest and V8 coverage, locking both to 5.0.3.
• Awaits rejected-promise assertions in JWKS failure tests.
• Documents development requirements and testing commands.

File	Description
readme.md	Adds development and testing guidance.
pnpm-lock.yaml	Locks Vitest 5 and updated dependencies.
package.json	Updates Vitest and coverage version ranges.
lib/​tests/​badPathTest.test.ts	Awaits asynchronous rejection assertions.

Files not reviewed (1)

• pnpm-lock.yaml: Generated file

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.