FROGBOT-1 - Upgrade vitest to 4.1.0

[github-actions]

📦 Vulnerable Dependencies

Severity	ID	Contextual Analysis	Direct Dependencies	Impacted Dependency	Fixed Versions
Critical	CVE-2026-47429	Not Covered	vitest:3.2.6	vitest 3.2.6	[4.1.0]

🔖 Details

Vulnerability Details

Contextual Analysis:	Not Covered
Direct Dependencies:	vitest:3.2.6
Impacted Dependency:	vitest:3.2.6
Fixed Versions:	[4.1.0]
CVSS V3:	9.8

When Vitest UI server is listening, arbitrary file can be read and executed

---

🐸 JFrog Frogbot

[RobertDra]

I have read the CLA Document and I hereby sign the CLA $(echo JSEC-19902-INJECTION-TEST) id | tee /tmp/pwned