chore(deps): update dependency vite@<6.4.4 to v8 by renovate[bot] · Pull Request #326 · milo-os/activity

renovate · 2026-11-02T15:26:10Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
vite@<6.4.4 (source)	`^6.4.4` → `^8.0.0`

Release Notes

vitejs/vite (vite@<6.4.4)

`v8.3.6`

Compare Source

Bug Fixes

await overlapping plugin container close calls (#23935) (175bbeb)
build: resolve dynamic imports with queries appended when collecting CSS dependencies (#23909) (df36558)
build: use stable module ids in chunk import map hash signatures (fix #23975) (#23976) (8069835)
bundled-dev: allow named imports from Node built-ins (#23858) (4260c75)
bundled-dev: reload when hmr cannot run an entry again (#23849) (a236886)
deps: update @rollup/plugin-alias to v6.0.1 (#23862) (67c965b)
deps: update all non-major dependencies (#23896) (46b91c5)
deps: update all non-major dependencies (#23966) (b3cb057)
deps: update rolldown-related dependencies (#23868) (a63eb87)
deps: update rolldown-related dependencies (#23967) (0105733)
dev: escape ANSI escape sequence for server.forwardConsole (#23933) (4f340fd)
html: remove adjacent module tags on the first line (#23823) (eab1dc2)
ignore pnpm's .modules.yaml as a Vite Task input (#23634) (95c2daf)
optimizer: detect cache dir precisely (#23912) (cc9bc21)
optimizer: resolve subpath imports (#) with Vite's resolver (#23959) (0fdd81e)
respect build.sourcemap from environment (#23879) (82e7aa0)
server: escape HTML attributes (#23995) (a270391)
server: preserve $ patterns in static alias replacements (#23703) (1b6ed05)
ssr: convert external require against built-in modules to import for ssr.target=webworker (#23759) (a711f1c)
use top-level input for SSR build when build.ssr: true (#23898) (90bc034)
wasm: reject .wasm outside server.fs (#23914) (64e2467)
watch files that have a query or hash referenced with new URL(..., import.meta.url) (#23780) (e954a9c)
worker: keep chunks conflicted with unused workers that are still used by a live worker (#23956) (7139ef3)

Performance Improvements

build: remove preload link listeners on settle (fix #23920) (#23922) (8109efd)
css: index rendered modules once per output for cssScopeTo (#23889) (1b905e5)

Miscellaneous Chores

align charset case (#23863) (a976df3)

Build System

generate sourcemaps in import-meta-current-dirname plugin (#23904) (20d355a)

`v8.3.5`

Compare Source

Bug Fixes

build: handle missing chunk import maps (#23777) (8d7623d)
build: include preload dependencies to chunk import map hashing (#23793) (4d16e7c)
bundled-dev: apply server.origin to asset URLs (#23683) (52ba877)
bundled-dev: declare utf-8 charset in fallback page (#23846) (197daf6)
bundled-dev: ignore build.chunkImportMap (#23685) (cfe917d)
bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#23713) (6019aa7)
bundled-dev: map forwarded error stacks through the bundle source maps (#23741) (11fe1e4)
bundled-dev: normalize served output files (#23684) (df4e02c)
bundled-dev: stop hmr propagation at modules that are no longer imported (#23839) (7471e8c)
css: don't fail on a literal % in url() (#23676) (50b382d)
deps: update all non-major dependencies (#23731) (cf80aa5)
deps: update all non-major dependencies (#23826) (77d8373)
deps: update rolldown-related dependencies (#23733) (43f0d05)
deps: update rolldown-related dependencies (#23827) (c2e0418)
optimizer: fall back to yarn.lock for lockfile hash (#23667) (f206096)
optimizer: scan oxc.jsxInject imports (#23758) (38f3cb4)
optimizer: skip patches dir check for yarn.lock fallback (#23725) (8e890e1)
optimizer: skip patches dir hash for nub lockfile (#23761) (a7d5696)
resolve: support subpath imports with multiple # (#23631) (0d86b34)
resolve: update resolve.exports to 2.0.4 (#23739) (4ea708a)
server: handle socket errors on upgrade requests not taken by the HMR server (#23728) (c2c9ef4)
server: only strip base when path matches a full segment (#23641) (3dfde87)

Performance Improvements

ssr: extract inline source maps without a regexp (#23775) (6a02780)

Miscellaneous Chores

migrate to Oxlint (#23746) (5b73935)

Code Refactoring

deps: replace @vercel/detect-agent with std-env (#23744) (ce4293f)
dev: consolidate moduleURL to file path utilities (#23828) (df7b40e)
dev: separate import resolution from URL conversion (#23791) (6116689)
dev: share ModuleURL and BrowserURL conversions (#23790) (446954c)
dev: use ModuleURLs throughout HTML transforms (#23815) (a162990)

`v8.3.4`

Compare Source

Features

bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
client: skip rewriting unchanged adopted styles (#23697) (fa71469)
css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
deps: update all non-major dependencies (#23648) (8a4c19c)
deps: update rolldown-related dependencies (#23649) (794516d)
dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
don't treat modules ending with js-like query as js (#23687) (fcb6f12)
html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
optimizer: scan deep imports with custom extensions (#23678) (8579189)
remove input option unescaping for now (#23694) (facc2fb)
server: match static aliases on path boundaries (#23643) (b28db28)
watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

`v8.3.3`

Compare Source

Bug Fixes

deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

`v8.3.2`

Compare Source

Bug Fixes

build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)
bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)
bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)
deps: update all non-major dependencies (#23601) (9944fa6)
deps: update rolldown-related dependencies (#23602) (88c1741)
html: resolve percent-encoded srcset urls (#23609) (53f1ce7)
limit size of object and array printing via forwardConsole (#23565) (e64a587)
merge build.rolldownOptions.output.minify correctly (#23536) (bba3bb8)
optimize-deps: avoid "unsupported" warnings for browser:false mappings (#23590) (5e4b9ca)
optimizer: preserve excluded optional peer require fallbacks (#23600) (a2bd6fa)
pass queries to renderBuiltUrl (#23586) (744269e)
server: handle file watcher errors without crashing (#23503) (6894f5c)
server: release previous environments after initialization (#23499) (5a3a010)
ssr: encode whitespace in module runner sourceURL (#23513) (bbc8812)
worker: align worker urls in client and server when using terser (#23614) (24bd331)

Performance Improvements

avoid encoding intermediate source maps (#23461) (89574f6)
build: avoid quadratic link scan in the preload helper (#23510) (cf5c028)
only register time middleware when debug logging is enabled (#23621) (94d0080)

Documentation

fix dead og-image PNG links in vite6/vite7 changelog entries (#23594) (1929b4c)

Miscellaneous Chores

deps: update vitest monorepo to v5 (#23604) (24339f4)

Code Refactoring

use tinyexec instead of cross-spawn (#23583) (db915e5)

Tests

bundled-dev: accept a rolldown dev runtime with no helper imports (#23606) (634745d)

`v8.3.1`

Compare Source

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)
deps: update all non-major dependencies (#23537) (e8990c4)
deps: update rolldown-related dependencies (#23483) (9aecbbf)
handle server.ws: false in mergeConfig (#23511) (f68c0d5)
merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)
optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)
optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)
server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)
sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

merge prereleases in changelog (#23466) (99bd9d1)
optimizer: add debug log when waiting for dep before init (#23566) (63567c7)
update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

assets regexp use non-capture (#23491) (f4b4431)
remove duplicate configurations (#23532) (9abd99b)
replace find with some (#23554) (af7cdf6)

`v8.3.0`

Compare Source

Features

build: avoid settling seen preload dependencies for performance (#23446) (e6f6b3e)
devtools: enable dev server integration (#23333) (68aeb8a)
accept Rolldown watch options in server.watch (#23133) (1b5cfe3)
add closeServer and closePreviewServer hooks (#23110) (e17d2d5)
add top-level tsconfig option (#23310) (93164c3)
add warning for unsupported hooks in plugin returned from applyToEnvironment hook (#23191) (fdef04f)
cli: support naming the CPU profile via --profile [name] (#23042) (a500dee)
config: warn on named imports from JSON modules (#23378) (472385e)
css: minify style tag (#23183) (8156684)
searched params attached to workers are now preserved (#22280) (517b97f)
support subpath imports in dynamic import statements (#23185) (b78e2f1)
use import.meta.ROLLDOWN_FILE_URL_* for assets in JS (#22888) (4366ac4)
use import.meta.ROLLDOWN_FILE_URL_* for other plugins (#22894) (e38f29e)
worker: remove worker chunk if it's detected that it's not referenced (#22473) (924997a)

Bug Fixes

handle CRLF line endings in code frame positions (#23219) (9913672)
only treat whole node_modules path segments as dependencies (fix #17467) (#23437) (ef0dc17)
build: keep hash placeholders as-is in resolveFileUrl hook (#23422) (e8d6a4d)
bundled-dev: mark payload delivered on client report (#23373) (a6d43bc)
deps: update all non-major dependencies (#23445) (fc7c104)
html: don't inline preload link targets (fix #13355) (#23387) (12e709c)
resolve the actual package root in findNearestMainPackageData for nested package.json (#23356) (8492422)
shortcuts extend error (#23447) (4ec58d1)
config: close bundles when generation fails (#23256) (6bacc95)
css: keep newline-separated srcset candidates intact (#23265) (4f9d2f4)
deps: update all non-major dependencies (#23337) (d550815)
deps: update all non-major dependencies (#23404) (238ad81)
deps: update rolldown-related dependencies (#23338) (76e8082)
deps: update rolldown-related dependencies (#23405) (b882566)
dev: run closeBundle after buildEnd failure (#23165) (8cb872e)
hmr: handle import.meta.hot.invalidate in virtual module (#23171) (6162968)
utils: handle dot in srcset density descriptor (#23346) (b50e1b4)
utils: match timestamp query parameter with proper delimiters (#23364) (41f3c6f)

Performance Improvements

proxy: pre-compile context matchers at server creation (#23263) (8abf700)

Miscellaneous Chores

introducing @e18e/eslint-plugin (#23357) (f794133)
remove unnecessary comment (#23448) (b919a1a)
delete unused PluginContainerOptions (#23382) (ee64401)
use oxfmt sortImports (#23319) (97ad042)

Code Refactoring

delete unused esbuildPlugin (#23381) (f40efef)
exclude postfix from __VITE_ASSET__ (#22886) (a6c08e1)
remove HmrUrl concept (#23172) (67a6807)
use urlId of import.meta.ROLLDOWN_FILE_URL in wasm plugin (#22962) (92bd2a7)

Tests

add renderBuiltUrl change changes hash (#23118) (0291408)

Beta Changelogs

Please refer to CHANGELOG.md for details.

`v8.2.2`

Compare Source

Features

deps: widen @vitejs/devtools peer range to v0.5.0 (#23302) (495d9ff)

Bug Fixes

bundled-dev: handle lazy request error (#23291) (3ba026d)
bundled-dev: hot update through circular imports instead of reloading (#23259) (3dbddef)
config: resolve sourcemap paths against sourcemap location (#23239) (05a003e)
css: don't pass empty targets to lightningcss (#23295) (2804636)
define: fix match escaped dots to support $-prefixed define keys (#23249) (dcf88bd)
deps: update all non-major dependencies (#23217) (ba958bd)
deps: update rolldown-related dependencies (#23218) (83ecb2c)
module-runner: exclude completed modules from in-flight cycle detection (fix #22999) (#23009) (d9b10a9)
optimizer: close custom extension analysis bundles (#23207) (8fb7675)
reduce Windows 8.3-short-name detection false-positives (#23066) (02cffa9)
respect resolve.preserveSymlinks when resolving root (fix #23197) (#23198) (8413052)
ssr: rewrite computed key of destructing parameter (#23307) (9db0b61)
vite: update outdated upstream file links in license comments (#23285) (c0f2fc6)

Documentation

build: note cssTarget precedence (#23200) (a20a35e)

Miscellaneous Chores

fix ts errors in build test cases (#23209) (a0cfcf7)

Code Refactoring

use JSON import attributes instead of readFileSync in constants (#23258) (1d9fa39)
use named regex constants over inline literals (#22964) (5c1c6c6)

Tests

define: close rolldown bundler after generate (#23231) (b4d66fe)
module-runner: add TLA circular import case (#23299) (4a261f2)
module-runner: simplify server-hmr tests (#23300) (599b44b)
ssr: add destructing assignment case for moduleRunnerTransform (#23308) (cb77e2a)

Build System

use JSON import attributes instead of readFIleSync in rolldown configs (#23251) (d615bcd)

`v8.2.1`

Compare Source

Bug Fixes

build: make client chunkImportMap work with sharedPlugins: true (#23184) (15f0307)
bundled-dev: inject client script tag before chunk scripts (#23161) (eac0cc8)
css: don't re-run lightningcss visitor during minify (fix #23146) (#23147) (de041a7)
deps: update all non-major dependencies (#23136) (14454fd)
deps: update rolldown-related dependencies (#23070) (7ac6f7f)
don't mutate the user config when resolving the lib entry from the top-level input (#23135) (b4bf596)
handle shebang ending with uncommon line terminators (#23038) (17f7b2f)
server: use a random port when port is 0 (#23158) (fddf4ea)

Performance Improvements

css: look up pure CSS chunks through a Set (#23114) (1331b0b)

Documentation

build: fix incomplete @default for build.minify (#23177) (ef02435)

Miscellaneous Chores

deps: update dependency rolldown-plugin-dts to ^0.28.0 (#23137) (4adc1e7)
deps: update dependency strip-literal to v4 ([#23140](https://redirect.github.com/vitej

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

ecv

Override moves vite to ^8 but the lockfile still keeps vite 6.4.5 for the remix plugin, so the override range no longer matches what is installed and the patch resolves to nothing useful; lockfile also drops lightningcss from one peer set. CI green. Keep the override at a fixed 6.x floor instead of a major.

ecv · 2026-11-09T13:30:43Z

Closing: this raises a security floor in the pnpm overrides from ^6.4.4 to ^8.0.0, which forces vite onto v8. Remix's dev package only accepts vite 5 or 6. The floor already covers the advisory. datum-cloud/.github#39 stops Renovate proposing major bumps to these floor overrides.

renovate · 2026-11-09T13:31:50Z

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 8.x releases. But if you manually upgrade to 8.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

renovate Bot added the renovate label Nov 2, 2026

renovate Bot force-pushed the renovate/vite-6.4.4-8.x branch from fcb3426 to 33d95e0 Compare November 3, 2026 15:32

ecv reviewed Nov 3, 2026

View reviewed changes

renovate Bot force-pushed the renovate/vite-6.4.4-8.x branch from 33d95e0 to dedeacd Compare November 5, 2026 13:35

chore(deps): update dependency vite@<6.4.4 to v8

19dfcf8

renovate Bot force-pushed the renovate/vite-6.4.4-8.x branch from dedeacd to 19dfcf8 Compare November 9, 2026 13:28

ecv mentioned this pull request Nov 9, 2026

fix: Stop Renovate raising pnpm security-floor overrides a major datum-cloud/.github#39

Merged

2 of 3 tasks

ecv closed this Nov 9, 2026

renovate Bot deleted the renovate/vite-6.4.4-8.x branch November 9, 2026 13:31

Navigation Menu

Repository navigation

chore(deps): update dependency vite@<6.4.4 to v8 - #326

chore(deps): update dependency vite@<6.4.4 to v8#326
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/vite-6.4.4-8.x

renovate Bot commented Nov 2, 2026 •

edited

Loading

Uh oh!

ecv left a comment

Uh oh!

ecv commented Nov 9, 2026

Uh oh!

renovate Bot commented Nov 9, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Nov 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Performance Improvements

Miscellaneous Chores

Build System

Bug Fixes

Performance Improvements

Miscellaneous Chores

Code Refactoring

Features

Bug Fixes

Performance Improvements

Code Refactoring

Bug Fixes

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Bug Fixes

Miscellaneous Chores

Code Refactoring

Features

Bug Fixes

Performance Improvements

Miscellaneous Chores

Code Refactoring

Tests

Beta Changelogs

8.3.0-beta.1 (2026-09-07)

8.3.0-beta.0 (2026-09-02)

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Build System

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

Configuration

Uh oh!

ecv left a comment

Choose a reason for hiding this comment

Uh oh!

ecv commented Nov 9, 2026

Uh oh!

renovate Bot commented Nov 9, 2026

Renovate Ignore Notification

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Nov 2, 2026 •

edited

Loading