chore(deps): update dependency vite to v8 by renovate[bot] · Pull Request #6 · developer-friendly/deploy-pages-source

renovate · 2026-03-14T08:44:12Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
vite (source)	`^6.1.0` → `^8.0.0`

Release Notes

vitejs/vite (vite)

`v8.1.2`

Compare Source

Bug Fixes

deps: revert es-module-lexer to 2.1.0 (#22827) (0d3bd7c)
restore, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (#22825) (efb98cc)
revert, "fix: escape ids with multiple null bytes (#22687)" (cccef55)
revert, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (cf97711)

`v8.1.1`

Compare Source

Features

update dynamic import warning to link to Vite docs (#22823) (62bd7af)

Bug Fixes

bundled-dev: avoid stack overflow on import.meta.hot.invalidate() (#22797) (709eb8e)
bundled-dev: serve assets emitted during HMR/lazy compile (#22745) (5876b2c)
bundledDev: skip plugin transform hooks for rolldown-lazy stub modules (#22778) (8f925e2)
css: preserve dollar signs in external @import urls with lightningcss (#22718) (9fa7ab4)
css: resolve tsconfig paths in CSS and Sass @import (#22775) (ef0b891)
deps: update all non-major dependencies (#22734) (e635f49)
deps: update all non-major dependencies (#22804) (8837400)
deps: update rolldown-related dependencies (#22591) (2ce6677)
escape ids with multiple null bytes (#22687) (833fc30)
hide console window when running 'net use' on Windows (#22698) (92b63f2)
ignore bundled config temp dir (#22800) (043a810)
invert esbuild.jsxSideEffects when converting to oxc.jsx.pure (#22809) (33895ba)
optimize-deps: ignore ERR_CLOSED_SERVER in scanner (#22784) (085a0ab)
optimizer: scanner should resolve input from root (#22769) (9722b07)
resolve pnpm .modules.yaml from workspace root instead of cwd (#22757) (2531ac7)
return sourcemap field from some plugins that were lacking (#22782) (7e18bf8)
server: handle malformed URI in indexHtmlMiddleware (#22781) (84f5ccc)

Miscellaneous Chores

improve dependency optimizer messages (#22549) (092cb3b)

Code Refactoring

css: remove lightningcss null byte bug workaround (#22822) (2dafd3b)
use pre-defined environments variable to avoid duplicate Object.values calls (#22790) (1113acf)

Tests

enable "manual chunk path" test and remove "worker.format error" test (#22824) (c088511)

`v8.1.0`

Compare Source

Features

extend server.fs.deny list with common files (#22707) (61ba8fd)
update rolldown to 1.1.2 (#22695) (4f008a6)
use ~ for Rolldown (#22693) (9928722)

Bug Fixes

bundled-dev: errors should be kept when incremental build fails (#22617) (9a0dd48)
cache falsy values in perEnvironmentState (#22715) (0e91e79)
glob: respect caseSensitive option in hmr matcher (#22711) (65f525e)
html: omit nonce on import map when cspNonce is unset (#22713) (8340bb5)
optimizer: skip null-valued exports in expandGlobIds glob resolution (#22611) (8b9f5cd)
resolved build options should be kept as a getter (#22691) (3527191)
server: handle malformed URI in memory files middleware (#22714) (df9e0a5)
use literal envPrefix queries for Vite Task (#22706) (da72733)
warn on deprecated envFile (#22555) (ed7b283)

Code Refactoring

client: inline dev-id value in CSS selector (#22736) (57f59bc)
remove unused removeRawQuery util (#22724) (403cc60)
use rolldownOptions property for chunkImportMap (#22692) (8e8816c)

`v8.0.16`

Compare Source

Bug Fixes

deps: reject UNC paths for launch-editor-middleware (#22571) (50b9512)
reject windows alternate paths (#22572) (dc245c7)

`v8.0.15`

Compare Source

Features

send 408 on request timeout (#22476) (c85c9ee)
update rolldown to 1.0.3 (#22538) (646dbed)

Bug Fixes

capitalize error messages and remove spurious space in parse error (#22488) (85a0eff)
deps: update all non-major dependencies (#22511) (2686d7d)
dev: fix html-proxy cache key mismatch for /@fs/ HTML paths (#21762) (47c4213)
glob: error on relative glob in virtual module when no files match (#22497) (5c8e98f)
optimizer: close the rolldown bundle when write() rejects (#22528) (e3cfb9d)
resolve: provide onWarn for viteResolvePlugin in JS plugin containers (#22509) (40985f1)

Miscellaneous Chores

deps: update rolldown-related dependencies (#22566) (3052a67)

Code Refactoring

correct logic in collectAllModules function (#22562) (6978a9c)

`v8.0.14`

Compare Source

Features

update rolldown to 1.0.2 (#22484) (96efc88)

Bug Fixes

deps: update all non-major dependencies (#22471) (98b8163)
dev: handle errors when sending messages to vite server (#22450) (e8e9a34)
html: handle trailing slash paths in transformIndexHtml (#22480) (5d94d1b)
optimizer: pass oxc jsx options to transformSync in dependency scan (#22342) (b3132da)

Miscellaneous Chores

deps: update rolldown-related dependencies (#22470) (7cb728e)
remove irrelevant commits from changelog (2c69495)

Code Refactoring

glob: do not rewrite import path for absolute base (#22310) (0ae2844)

Tests

css: sass does not use main field (#22449) (ebf39a0)

`v8.0.13`

Compare Source

Features

bundled-dev: add lazy bundling support (#21406) (4f0949f)
optimizer: improve the esbuild plugin converter to pass some properties of build result to onEnd (#22357) (47071ce)
update rolldown to 1.0.1 (#22444) (8c766a6)

Bug Fixes

build: copy public directory after building same environment with write=false (#22328) (158e8ae)
css: await sass/less/styl worker disposal on teardown (fix #22274) (#22275) (b7edcb7)
css: keep deprecated name/originalFileName in synthetic assetFileNames call (#22439) (8e59c97)
make isBundled per environment (#22257) (a576326)
ssr: avoid rewriting labels that collide with imports (#22451) (d9b18e0)

Miscellaneous Chores

remove irrelevant commits from changelog (#22430) (6ea3838)
update changelog (#22413) (fcdc87c)

`v8.0.12`

Compare Source

Features

update rolldown to 1.0.0 (#22401) (cf0ff41)

Bug Fixes

create-vite: pass react framework to TanStack CLI (#22397) (18f0f90)
deps: update all non-major dependencies (#22420) (2be6000)
module-runner: prevent partial-exports race on concurrent imports of in-flight invalidated re-export chains (#22369) (f5a22e6)
refer to rolldownOptions instead of deprecated rollupOptions in messages (#22400) (b675c7b)
worker: apply build.target to worker bundle (#22404) (3c93fde)
worker: forward define to worker bundle transform (#22408) (d4838a0)

Miscellaneous Chores

deps: update dependency eslint-plugin-n to v18 (#22423) (2fe7bd2)
deps: update rolldown-related dependencies (#22421) (66b9eb3)

`v8.0.11`

Compare Source

Features

update rolldown to 1.0.0-rc.18 (#22360) (3f80524)

Bug Fixes

deps: update all non-major dependencies (#22334) (672c962)
deps: update all non-major dependencies (#22382) (5c0cfcb)
glob: align hmr matcher options with glob enumeration (#22306) (30028f9)
make separate object instance for each environment (#22276) (7c2aa3b)

Documentation

create-vite: list react-compiler templates in README (#22347) (7c3a61f)
explain mergeConfig skips null/undefined (#22325) (2151f70)
mention native config loader in CLI options (#22348) (0420c5d)
update evan's x handle (640202a)

Miscellaneous Chores

deps: update dependency tsdown to ^0.21.10 (#22333) (3b51e05)
deps: update rolldown-related dependencies (#22383) (555ff36)
deps: update transitive packages to fix npm audit alerts (#22316) (86aee62)

Code Refactoring

devtools integration (#22312) (3c8bf06)
remove unnecessary async (#22296) (b31fd35)
show direct path type in bad character warning (#22339) (0c162e9)

Tests

create-vite: use short help alias (#22389) (994ab66)

`v8.0.10`

Compare Source

Features

update rolldown to 1.0.0-rc.17 (#22299) (a4d06d9)

Bug Fixes

hmrClient.logger.debug and hmrClient.logger.error looked different from other HMR logs (#22147) (a4d828f)
css: show filename in CSS minification warnings for .css?inline (#22292) (83f0a78)
optimizer: allow user transform.target to override default in optimizeDeps (#22273) (5c7cec6)
remove format sniffing module resolution from JS resolver (#22297) (b8a21cc)

Code Refactoring

enable some typecheck rules (#22278) (9437518)
typecheck client directory (#22284) (40a0847)

`v8.0.9`

Compare Source

Features

update rolldown to 1.0.0-rc.16 (#22248) (2947edd)

Bug Fixes

allow binding when strictPort is set but wildcard port is in use (#22150) (dfc8aa5)
build: emptyOutDir should happen for watch rebuilds (#22207) (ee52267)
bundled-dev: reject requests to HMR patch files in non potentially trustworthy origins (#22269) (868f141)
css: use unique key for cssEntriesMap to prevent same-basename collision (#22039) (374bb5d)
deps: update all non-major dependencies (#22219) (4cd0d67)
deps: update all non-major dependencies (#22268) (c28e9c1)
detect Deno workspace root (fix #22237) (#22238) (1b793c0)
dev: handle errors in watchChange hook (#22188) (fc08bda)
optimizer: handle more chars that will be sanitized (#22208) (3f24533)
skip fallback sourcemap generation for ?raw imports (#22148) (3ec9cda)

Documentation

align the descriptions in READMEs (#22231) (44c42b9)
fix reuses wording in dev environment comment (#22173) (9163412)
fix wording in sass error comment (#22214) (bc5c6a7)
update build CLI defaults (#22261) (605bb97)

Miscellaneous Chores

deps: update dependency dotenv-expand to v13 (#22271) (0a3887d)

`v8.0.8`

Compare Source

Features

update rolldown to 1.0.0-rc.15 (#22201) (6baf587)

Bug Fixes

avoid dns.getDefaultResultOrder temporary (#22202) (15f1c15)
ssr: class property keys hoisting matching imports (#22199) (e137601)

`v8.0.7`

Compare Source

Bug Fixes

use sync dns.getDefaultResultOrder instead of dns.promises (#22185) (5c05b04)

`v8.0.6`

Compare Source

Features

update rolldown to 1.0.0-rc.13 (#22097) (51d3e48)

Bug Fixes

css: avoid mutating sass error multiple times (#22115) (d5081c2)
optimize-deps: hoist CJS interop assignment (#22156) (17a8f9e)

Performance Improvements

early return in getLocalhostAddressIfDiffersFromDNS when DNS order is verbatim (#22151) (56ec256)

Miscellaneous Chores

create-vite: remove unnecessary DOM.Iterable (#22168) (bdc53ab)
replace remaining prettier script (#22179) (af71fb2)

`v8.0.5`

Compare Source

Bug Fixes

apply server.fs check to env transport (#22159) (f02d9fd)
avoid path traversal with optimize deps sourcemap handler (#22161) (79f002f)
check server.fs after stripping query as well (#22160) (a9a3df2)
disallow referencing files outside the package from sourcemap (#22158) (f05f501)

`v8.0.4`

Compare Source

Features

allow esbuild 0.28 as peer deps (#22155) (b0da973)
hmr: truncate list of files on hmr update (#21535) (d00e806)
optimizer: log when dependency scanning or bundling takes over 1s (#21797) (f61a1ab)

Bug Fixes

hasBothRollupOptionsAndRolldownOptions should return false for proxy case (#22043) (99897d2)
add types for vite/modulepreload-polyfill (#22126) (17330d2)
deps: update all non-major dependencies (#22073) (6daa10f)
deps: update all non-major dependencies (#22143) (22b0166)
resolve: resolve tsconfig paths starting with # (#22038) (3460fc5)
ssr: use browser platform for webworker SSR builds (fix #21969) (#21963) (364c227)

Documentation

add environment.fetchModule documentation (#22035) (54229e7)

Miscellaneous Chores

deps: update rolldown-related dependencies (#21989) (0ded627)

Code Refactoring

upgrade to typescript 6 (#22110) (cc41398)

`v8.0.3`

Compare Source

Features

update rolldown to 1.0.0-rc.12 (#22024) (84164ef)

Bug Fixes

html: cache unfiltered CSS list to prevent missing styles across entries (#22017) (5464190)
module-runner: handle non-ascii characters in base64 sourcemaps (#21985) (77c95bf)
module-runner: skip re-import if the runner is closed (#22020) (ee2c2cd)
optimizer: scan is not resolving sub path import if used in a glob import (#22018) (ddfe20d)
ssr: ssrTransform incorrectly rewrites meta identifier inside import.meta when a binding named meta exists (#22019) (cff5f0c)

Miscellaneous Chores

deps: bump picomatch from 4.0.3 to 4.0.4 (#22027) (7e56003)

Tests

html: add tests for getCssFilesForChunk (#22016) (43fbbf9)

`v8.0.2`

Compare Source

Features

update rolldown to 1.0.0-rc.11 (#21998) (ff91c31)

Bug Fixes

deps: update all non-major dependencies (#21988) (9b7d150)

Miscellaneous Chores

deps: update dependency @vitejs/devtools to ^0.1.5 (#21992) (b2dd65b)

`v8.0.1`

Compare Source

Features

update rolldown to 1.0.0-rc.10 (#21932) (b3c067d)

Bug Fixes

bundled-dev: properly disable inlineConst optimization (#21865) (6d97142)
css: lightningcss minify failed when build.target: 'es6' (#21933) (5fcce46)
deps: update all non-major dependencies (#21878) (6dbbd7f)
dev: always use ESM Oxc runtime (#21829) (d323ed7)
dev: handle concurrent restarts in _createServer (#21810) (40bc729)
handle + symbol in package subpath exports during dep optimization (#21886) (86db93d)
improve no-cors request block error (#21902) (5ba688b)
use precise regexes for transform filter to avoid backtracking (#21800) (dbe41bd)
worker: require(json) result should not be wrapped (#21847) (0672fd2)
worker: make worker output consistent with client and SSR (#21871) (69454d7)

Miscellaneous Chores

add changelog rearrange script (#21835) (efef073)
deps: bump required @vitejs/devtools version to 0.1+ (#21925) (12932f5)
deps: update rolldown-related dependencies (#21787) (1af1d3a)
rearrange 8.0 changelog (8e05b61)
rearrange 8.0 changelog (#21834) (86edeee)

`v8.0.0`

Compare Source

Features

update rolldown to 1.0.0-rc.9 (#21813) (f05be0e)
warn when vite-tsconfig-paths plugin is detected (#21781) (ada493e)

Bug Fixes

deps: update all non-major dependencies (#21786) (eaa4352)

`v7.3.6`

Compare Source

Please refer to CHANGELOG.md for details.

`v7.3.5`

Compare Source

Please refer to CHANGELOG.md for details.

`v7.3.3`

Compare Source

Please refer to CHANGELOG.md for details.

`v7.3.2`

Compare Source

Please refer to CHANGELOG.md for details.

`v7.3.1`

Compare Source

Please refer to CHANGELOG.md for details.

`v7.3.0`

Compare Source

Please refer to CHANGELOG.md for details.

`v7.2.7`

Compare Source

`v7.2.6`

Compare Source

7.2.6 (2025-12-01)

`v7.2.4`

Compare Source

Bug Fixes

revert "perf(deps): replace debug with obug (#21107)" (2d66b7b)

`v7.2.3`

Compare Source

Bug Fixes

allow multiple bindCLIShortcuts calls with shortcut merging (#21103) (5909efd)
deps: update all non-major dependencies (#21096) (6a34ac3)
deps: update all non-major dependencies (#21128) (4f8171e)

Performance Improvements

deps: replace debug with obug (#21107) (acfe939)

Miscellaneous Chores

deps: update dependency @rollup/plugin-commonjs to v29 (#21099) (02ceaec)
deps: update rolldown-related dependencies (#21095) (39a0a15)
deps: update rolldown-related dependencies (#21127) (5029720)

`v7.2.2`

Compare Source

Bug Fixes

revert "refactor: use fs.cpSync (#21019)" (#21081) (728c8ee)

`v7.2.1`

Compare Source

Bug Fixes

worker: some worker asset was missing (#21074) (82d2d6c)

Code Refactoring

build: rename indexOfMatchInSlice to findPreloadMarker (#21054) (f83264f)

`v7.2.0`

Compare Source

Bug Fixes

css: fallback to sass when sass-embedded platform binary is missing (#21002) (b1fd616)
module-runner: make getBuiltins response JSON serializable (#21029) (ad5b3bf)
types: add undefined to optional properties for exactOptionalProperties type compatibility (#21040) (2833c55)

Miscellaneous Chores

deps: update rolldown-related dependencies (#21047) (e3a6a83)

`v7.1.12`

Compare Source

Please refer to CHANGELOG.md for details.

`v7.1.11`

Compare Source

Bug Fixes

dev: trim trailing slash before server.fs.deny check (#20968) (f479cc5)

Miscellaneous Chores

deps: update all non-major dependencies (#20966) (6fb41a2)

Code Refactoring

use subpath imports for types module reference (#20921) (d0094af)

Build System

remove cjs reference in files field (#20945) (ef411ce)
remove hash from built filenames (#20946) (a817307)

`v7.1.10`

Compare Source

Bug Fixes

css: avoid duplicate style for server rendered stylesheet link and client inline style during dev (#20767) (3a92bc7)
css: respect emitAssets when cssCodeSplit=false (#20883) (d3e7eee)
deps: update all non-major dependencies (879de86)
deps: update all non-major dependencies (#20894) (3213f90)
dev: allow aliases starting with // (#20760) (b95fa2a)
dev: remove timestamp query consistently (#20887) (6537d15)
esbuild: inject esbuild helpers correctly for esbuild 0.25.9+ (#20906) (446eb38)
normalize path before calling fileToBuiltUrl (#20898) (73b6d24)
preserve original sourcemap file field when comb

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-05-22T03:44:46Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	vite@6.1.0 ⏵ 8.1.3	⁺⁵	⁺³²		⁺¹

View full report

socket-security · 2026-06-24T16:06:54Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@emnapi/runtime` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `npm/vite@8.1.3` → `npm/@emnapi/runtime@1.11.1` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@emnapi/runtime@1.11.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

renovate Bot force-pushed the renovate/vite-8.x branch from 2992d31 to 2b8d779 Compare March 31, 2026 16:06

renovate Bot force-pushed the renovate/vite-8.x branch from 2b8d779 to d62c4d8 Compare April 15, 2026 18:18

renovate Bot force-pushed the renovate/vite-8.x branch from d62c4d8 to fedb9b3 Compare April 30, 2026 01:15

renovate Bot force-pushed the renovate/vite-8.x branch 3 times, most recently from a88ad4d to fde0c71 Compare May 14, 2026 11:27

renovate Bot force-pushed the renovate/vite-8.x branch from fde0c71 to e2805b4 Compare May 22, 2026 03:44

renovate Bot force-pushed the renovate/vite-8.x branch from e2805b4 to e342564 Compare June 3, 2026 00:02

renovate Bot force-pushed the renovate/vite-8.x branch from e342564 to 8dd1e0e Compare June 24, 2026 15:51

renovate Bot force-pushed the renovate/vite-8.x branch from 8dd1e0e to 9a1341f Compare July 1, 2026 07:40

chore(deps): update dependency vite to v8

9774090

renovate Bot force-pushed the renovate/vite-8.x branch from 9a1341f to 9774090 Compare July 4, 2026 07:29

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update dependency vite to v8#6

chore(deps): update dependency vite to v8#6
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/vite-8.x

renovate Bot commented Mar 14, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented May 22, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 24, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Mar 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

Tests

Features

Bug Fixes

Code Refactoring

Bug Fixes

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

Tests

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Features

Bug Fixes

Code Refactoring

Features

Bug Fixes

Documentation

Miscellaneous Chores

Features

Bug Fixes

Bug Fixes

Features

Bug Fixes

Performance Improvements

Miscellaneous Chores

Bug Fixes

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Features

Bug Fixes

Miscellaneous Chores

Tests

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

7.2.6 (2025-12-01)

Bug Fixes

Bug Fixes

Performance Improvements

Miscellaneous Chores

Bug Fixes

Bug Fixes

Code Refactoring

Bug Fixes

Miscellaneous Chores

Bug Fixes

Miscellaneous Chores

renovate Bot commented Mar 14, 2026 •

edited

Loading

socket-security Bot commented May 22, 2026 •

edited

Loading

socket-security Bot commented Jun 24, 2026 •

edited

Loading