chore(deps-dev): Bump vite from 5.4.21 to 6.4.3

[dependabot]

Bumps vite from 5.4.21 to 6.4.3.

Release notes

Sourced from vite's releases.

v6.4.3

Please refer to CHANGELOG.md for details.

v6.4.2

Please refer to CHANGELOG.md for details.

v6.4.1

Please refer to CHANGELOG.md for details.

v6.4.0

Please refer to CHANGELOG.md for details.

v6.3.7

Please refer to CHANGELOG.md for details.

v6.3.6

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.3 (2026-06-01)

• fix: backport #22572, reject windows alternate paths (#22576) (96b0c10), closes #22572 #22576
• fix(deps): backport #22571, reject UNC paths for launch-editor-middleware (#22575) (8fed5cf), closes #22571 #22575

6.4.2 (2026-04-06)

• fix: apply server.fs check to env transport (#22159) (#22163) (fe28e47), closes #22159 #22163
• fix: avoid path traversal with optimize deps sourcemap handler (#22161) (ca4da5d), closes #22161

6.4.1 (2025-10-20)

• fix(dev): trim trailing slash before server.fs.deny check (#20968) (#20969) (1114b5d), closes #20968 #20969

6.4.0 (2025-10-15)

• feat: allow passing down resolved config to vite's createServer (#20932) (ca6455e), closes #20932

6.3.7 (2025-10-14)

• fix(esbuild): inject esbuild helpers correctly for esbuild 0.25.9+ (#20940) (c59a222), closes #20940

6.3.6 (2025-09-08)

• fix: apply fs.strict check to HTML files (#20736) (0ab19ea), closes #20736
• fix: upgrade sirv to 3.0.2 (#20735) (e11d240), closes #20735
• test: detect ts support via process.features (#20544) (7d99229), closes #20544

6.3.5 (2025-05-05)

• fix(ssr): handle uninitialized export access as undefined (#19959) (fd38d07), closes #19959

6.3.4 (2025-04-30)

• fix: check static serve file inside sirv (#19965) (c22c43d), closes #19965
• fix(optimizer): return plain object when using require to import externals in optimized dependenci (efc5eab), closes #19940

... (truncated)

Commits

• 6c2c881 release: v6.4.3
• 96b0c10 fix: backport #22572, reject windows alternate paths (#22576)
• 8fed5cf fix(deps): backport #22571, reject UNC paths for launch-editor-middleware (#2...
• 6b3fad0 release: v6.4.2
• ca4da5d fix: avoid path traversal with optimize deps sourcemap handler (#22161)
• fe28e47 fix: apply server.fs check to env transport (#22159) (#22163)
• 5487f4f release: v6.4.1
• 1114b5d fix(dev): trim trailing slash before server.fs.deny check (#20968) (#20969)
• f12697c release: v6.4.0
• ca6455e feat: allow passing down resolved config to vite's createServer (#20932)
• Additional commits viewable in compare view

[cypress]

Workday/canvas-kit    Run #11048

Run Properties:   Failed #11048  •  25ce8a0b73 ℹ️: Merge dca5d881ec61c481e67bd1ff94145f4dd560afc0 into 2362189b5670ccfe54d7f301cc9b...

Project	Workday/canvas-kit
Branch Review	dependabot/npm_and_yarn/vite-7.3.5
Run status	Failed #11048
Run duration	01m 51s
Commit	25ce8a0b73 ℹ️: Merge dca5d881ec61c481e67bd1ff94145f4dd560afc0 into 2362189b5670ccfe54d7f301cc9b...
Committer	dependabot[bot]
View all properties for this run ↗︎

---

Test results
Failures	12
Flaky	0
Pending	0
Skipped	123
Passing	0
View all changes introduced in this branch ↗︎

---

Warning

Partial Report: The results for the Application Quality reports may be incomplete.

---

Warning

No Report: Something went wrong and we could not generate a report for the Application Quality products.

---

Tests for review

  Modal.spec.tsx • 11 failed tests

View Output

Test		Artifacts
Modal > given the Basic example is rendered > should not have any axe errors		Test Replay Screenshots
given the FormModal example is rendered > when Create New User is clicked > should open the New User dialog		Test Replay Screenshots
given the ReturnFocus example is rendered > should open the delete confirmation dialog		Test Replay Screenshots
given the [Testing/Popups/Modal, With Tooltips] story is rendered > when the modal is open > should open the modal		Test Replay Screenshots
given the [Testing/Popups/Modal, With Radio buttons] story is rendered > should not have any axe errors		Test Replay Screenshots
given the [Components/Popups/Modal, Without close icon] story is rendered > should not have any axe errors		Test Replay Screenshots
given the [Components/Popups/Modal, Custom focus] story is rendered > when button is focused > should be the focused item on the page		Test Replay Screenshots
given the [Testing/Popups/Modal, StackedModals] story is rendered > when both modals are opened > should open the second modal		Test Replay Screenshots
given the [Testing/Popups/Modal, ModalWithPopup] story is rendered > when both modal and popup are opened > should open the second modal		Test Replay Screenshots
given the [Components/Popups/Modal, CustomTarget] example is rendered > when the "Open" button is clicked > should show the modal		Test Replay Screenshots
The first 10 failed tests are shown, see all 11 tests in Cypress Cloud.

  Autocomplete.spec.tsx • 1 failed test

View Output

Test		Artifacts
Autocomplete > given the 'Autocomplete' story is rendered > should have aria-haspopup set to listbox		Test Replay Screenshots

  Tabs.spec.tsx • 0 failed tests

View Output

Test		Artifacts

  Select.spec.tsx • 0 failed tests

View Output

Test		Artifacts

  Popup.spec.tsx • 0 failed tests

View Output

Test		Artifacts

The first 5 failed specs are shown, see all 32 specs in Cypress Cloud.