Skip to content

build(deps-dev): bump vite from 6.4.3 to 6.4.4 - #325

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vite-6.4.4
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vite-6.4.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Bumps vite from 6.4.3 to 6.4.4.

Release notes

Sourced from vite's releases.

v6.4.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.4 (2026-10-06)

Commits
  • 5f0d9a4 release: v6.4.4
  • eec6464 fix(server): check resolved ids for transform access (#20410)
  • e570d8d fix(server): store ids to safeModulePaths rather than URLs (#23656)
  • 8afec69 fix(deps): update launch-editor to v2.14.2 (#23654)
  • 19902cf fix(html): filename passed to transformIndexHtml should not include queries (...
  • See full diff in compare view

Copilot AI balanced review requested due to automatic review settings October 21, 2026 02:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The manifests and lockfile are consistent, with no blocking defects identified.

No open issues 🎉

1 file not reviewed
  • pnpm-lock.yaml: Generated file
What changed in this PR

Updates Vite from 6.4.3 to 6.4.4 for the web and documentation apps.

Changes:

  • Raises both apps’ Vite requirement to ^6.4.4.
  • Refreshes lockfile resolutions, peer references, and related transitive dependencies.
File Description
pnpm-lock.yaml Updates Vite and related dependency resolutions.
apps/​web/​package.json Raises the web app’s Vite requirement.
apps/​docs/​package.json Raises the documentation app’s Vite requirement.

Review effort: Balanced

Copilot AI balanced review requested due to automatic review settings October 21, 2026 03:32
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vite-6.4.4 branch from c09a549 to 3aef2c2 Compare October 21, 2026 03:32

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The server’s major-version downgrade needs reversal or explicit justification and validation.

1 open issue
1 file not reviewed
  • pnpm-lock.yaml: Generated file

Review effort: Balanced

Comment thread apps/server/package.json
"tsx": "^4.0.0",
"typescript": "^6.0.3",
"vite": "^7.0.0",
"vite": "^6.4.4",
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vite-6.4.4 branch from 3aef2c2 to a2ef9bb Compare October 26, 2026 10:25
Copilot AI balanced review requested due to automatic review settings October 26, 2026 10:25

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

The server’s major-version downgrade should be removed from this patch update or separately justified and validated.

1 open issue
1 file not reviewed
  • pnpm-lock.yaml: Generated file

Review effort: Balanced

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.4.3 to 6.4.4.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.4/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.4/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 6.4.4
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vite-6.4.4 branch from a2ef9bb to 633b0e0 Compare October 28, 2026 08:14
Copilot AI balanced review requested due to automatic review settings October 28, 2026 08:14

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

The change downgrades the server from Vite 7.3.5 to 6.4.4 and alters its esbuild dependency graph, exceeding the advertised patch-update scope without separate justification and validation.

1 open issue
1 file not reviewed
  • pnpm-lock.yaml: Generated file

Review effort: Balanced

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant