chore(deps): update dependency vite to v8 by renovate[bot] · Pull Request #336 · unplugin/unplugin-swc

renovate · 2026-03-13T18:43:28Z

This PR contains the following updates:

Package	Change	Age	Confidence
vite (source)	`^7.2.4` → `^8.1.3`

Release Notes

vitejs/vite (vite)

`v8.1.3`

Compare Source

Bug Fixes

css: inject inlined CSS after the shebang line (#22717) (1534d36)
deps: bump es-module-lexer to 2.3.0 (#22838) (7103c3a)
preload css for nested dynamic imports (#22759) (2c53054)
ssr: correct stacktrace column position for first line (#22828) (c4acd69)

`v8.1.2`

Compare Source

Bug Fixes

deps: revert es-module-lexer to 2.1.0 (#22827) (0d3bd7c)
restore, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (#22825) (efb98cc)
revert, "fix: escape ids with multiple null bytes (#22687)" (cccef55)
revert, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (cf97711)

`v8.1.1`

Compare Source

Features

update dynamic import warning to link to Vite docs (#22823) (62bd7af)

Bug Fixes

bundled-dev: avoid stack overflow on import.meta.hot.invalidate() (#22797) (709eb8e)
bundled-dev: serve assets emitted during HMR/lazy compile (#22745) (5876b2c)
bundledDev: skip plugin transform hooks for rolldown-lazy stub modules (#22778) (8f925e2)
css: preserve dollar signs in external @import urls with lightningcss (#22718) (9fa7ab4)
css: resolve tsconfig paths in CSS and Sass @import (#22775) (ef0b891)
deps: update all non-major dependencies (#22734) (e635f49)
deps: update all non-major dependencies (#22804) (8837400)
deps: update rolldown-related dependencies (#22591) (2ce6677)
escape ids with multiple null bytes (#22687) (833fc30)
hide console window when running 'net use' on Windows (#22698) (92b63f2)
ignore bundled config temp dir (#22800) (043a810)
invert esbuild.jsxSideEffects when converting to oxc.jsx.pure (#22809) (33895ba)
optimize-deps: ignore ERR_CLOSED_SERVER in scanner (#22784) (085a0ab)
optimizer: scanner should resolve input from root (#22769) (9722b07)
resolve pnpm .modules.yaml from workspace root instead of cwd (#22757) (2531ac7)
return sourcemap field from some plugins that were lacking (#22782) (7e18bf8)
server: handle malformed URI in indexHtmlMiddleware (#22781) (84f5ccc)

Miscellaneous Chores

improve dependency optimizer messages (#22549) (092cb3b)

Code Refactoring

css: remove lightningcss null byte bug workaround (#22822) (2dafd3b)
use pre-defined environments variable to avoid duplicate Object.values calls (#22790) (1113acf)

Tests

enable "manual chunk path" test and remove "worker.format error" test (#22824) (c088511)

`v8.1.0`

Compare Source

Features

extend server.fs.deny list with common files (#22707) (61ba8fd)
update rolldown to 1.1.2 (#22695) (4f008a6)
use ~ for Rolldown (#22693) (9928722)

Bug Fixes

bundled-dev: errors should be kept when incremental build fails (#22617) (9a0dd48)
cache falsy values in perEnvironmentState (#22715) (0e91e79)
glob: respect caseSensitive option in hmr matcher (#22711) (65f525e)
html: omit nonce on import map when cspNonce is unset (#22713) (8340bb5)
optimizer: skip null-valued exports in expandGlobIds glob resolution (#22611) (8b9f5cd)
resolved build options should be kept as a getter (#22691) (3527191)
server: handle malformed URI in memory files middleware (#22714) (df9e0a5)
use literal envPrefix queries for Vite Task (#22706) (da72733)
warn on deprecated envFile (#22555) (ed7b283)

Code Refactoring

client: inline dev-id value in CSS selector (#22736) (57f59bc)
remove unused removeRawQuery util (#22724) (403cc60)
use rolldownOptions property for chunkImportMap (#22692) (8e8816c)

`v8.0.16`

Compare Source

Bug Fixes

deps: reject UNC paths for launch-editor-middleware (#22571) (50b9512)
reject windows alternate paths (#22572) (dc245c7)

`v8.0.15`

Compare Source

Features

send 408 on request timeout (#22476) (c85c9ee)
update rolldown to 1.0.3 (#22538) (646dbed)

Bug Fixes

capitalize error messages and remove spurious space in parse error (#22488) (85a0eff)
deps: update all non-major dependencies (#22511) (2686d7d)
dev: fix html-proxy cache key mismatch for /@fs/ HTML paths (#21762) (47c4213)
glob: error on relative glob in virtual module when no files match (#22497) (5c8e98f)
optimizer: close the rolldown bundle when write() rejects (#22528) (e3cfb9d)
resolve: provide onWarn for viteResolvePlugin in JS plugin containers (#22509) (40985f1)

Miscellaneous Chores

deps: update rolldown-related dependencies (#22566) (3052a67)

Code Refactoring

correct logic in collectAllModules function (#22562) (6978a9c)

`v8.0.14`

Compare Source

Features

update rolldown to 1.0.2 (#22484) (96efc88)

Bug Fixes

deps: update all non-major dependencies (#22471) (98b8163)
dev: handle errors when sending messages to vite server (#22450) (e8e9a34)
html: handle trailing slash paths in transformIndexHtml (#22480) (5d94d1b)
optimizer: pass oxc jsx options to transformSync in dependency scan (#22342) (b3132da)

Miscellaneous Chores

deps: update rolldown-related dependencies (#22470) (7cb728e)
remove irrelevant commits from changelog (2c69495)

Code Refactoring

glob: do not rewrite import path for absolute base (#22310) (0ae2844)

Tests

css: sass does not use main field (#22449) (ebf39a0)

`v8.0.13`

Compare Source

Features

bundled-dev: add lazy bundling support (#21406) (4f0949f)
optimizer: improve the esbuild plugin converter to pass some properties of build result to onEnd (#22357) (47071ce)
update rolldown to 1.0.1 (#22444) (8c766a6)

Bug Fixes

build: copy public directory after building same environment with write=false (#22328) (158e8ae)
css: await sass/less/styl worker disposal on teardown (fix #22274) (#22275) (b7edcb7)
css: keep deprecated name/originalFileName in synthetic assetFileNames call (#22439) (8e59c97)
make isBundled per environment (#22257) (a576326)
ssr: avoid rewriting labels that collide with imports (#22451) (d9b18e0)

Miscellaneous Chores

remove irrelevant commits from changelog (#22430) (6ea3838)
update changelog (#22413) (fcdc87c)

`v8.0.12`

Compare Source

Features

update rolldown to 1.0.0 (#22401) (cf0ff41)

Bug Fixes

create-vite: pass react framework to TanStack CLI (#22397) (18f0f90)
deps: update all non-major dependencies (#22420) (2be6000)
module-runner: prevent partial-exports race on concurrent imports of in-flight invalidated re-export chains (#22369) (f5a22e6)
refer to rolldownOptions instead of deprecated rollupOptions in messages (#22400) (b675c7b)
worker: apply build.target to worker bundle (#22404) (3c93fde)
worker: forward define to worker bundle transform (#22408) (d4838a0)

Miscellaneous Chores

deps: update dependency eslint-plugin-n to v18 (#22423) (2fe7bd2)
deps: update rolldown-related dependencies (#22421) (66b9eb3)

`v8.0.11`

Compare Source

Features

update rolldown to 1.0.0-rc.18 (#22360) (3f80524)

Bug Fixes

deps: update all non-major dependencies (#22334) (672c962)
deps: update all non-major dependencies (#22382) (5c0cfcb)
glob: align hmr matcher options with glob enumeration (#22306) (30028f9)
make separate object instance for each environment (#22276) (7c2aa3b)

Documentation

create-vite: list react-compiler templates in README (#22347) (7c3a61f)
explain mergeConfig skips null/undefined (#22325) (2151f70)
mention native config loader in CLI options (#22348) (0420c5d)
update evan's x handle (640202a)

Miscellaneous Chores

deps: update dependency tsdown to ^0.21.10 (#22333) (3b51e05)
deps: update rolldown-related dependencies (#22383) (555ff36)
deps: update transitive packages to fix npm audit alerts (#22316) (86aee62)

Code Refactoring

devtools integration (#22312) (3c8bf06)
remove unnecessary async (#22296) (b31fd35)
show direct path type in bad character warning (#22339) (0c162e9)

Tests

create-vite: use short help alias (#22389) (994ab66)

`v8.0.10`

Compare Source

Features

update rolldown to 1.0.0-rc.17 (#22299) (a4d06d9)

Bug Fixes

hmrClient.logger.debug and hmrClient.logger.error looked different from other HMR logs (#22147) (a4d828f)
css: show filename in CSS minification warnings for .css?inline (#22292) (83f0a78)
optimizer: allow user transform.target to override default in optimizeDeps (#22273) (5c7cec6)
remove format sniffing module resolution from JS resolver (#22297) (b8a21cc)

Code Refactoring

enable some typecheck rules (#22278) (9437518)
typecheck client directory (#22284) (40a0847)

`v8.0.9`

Compare Source

Features

update rolldown to 1.0.0-rc.16 (#22248) (2947edd)

Bug Fixes

allow binding when strictPort is set but wildcard port is in use (#22150) (dfc8aa5)
build: emptyOutDir should happen for watch rebuilds (#22207) (ee52267)
bundled-dev: reject requests to HMR patch files in non potentially trustworthy origins (#22269) (868f141)
css: use unique key for cssEntriesMap to prevent same-basename collision (#22039) (374bb5d)
deps: update all non-major dependencies (#22219) (4cd0d67)
deps: update all non-major dependencies (#22268) (c28e9c1)
detect Deno workspace root (fix #22237) (#22238) (1b793c0)
dev: handle errors in watchChange hook (#22188) (fc08bda)
optimizer: handle more chars that will be sanitized (#22208) (3f24533)
skip fallback sourcemap generation for ?raw imports (#22148) (3ec9cda)

Documentation

align the descriptions in READMEs (#22231) (44c42b9)
fix reuses wording in dev environment comment (#22173) (9163412)
fix wording in sass error comment (#22214) (bc5c6a7)
update build CLI defaults (#22261) (605bb97)

Miscellaneous Chores

deps: update dependency dotenv-expand to v13 (#22271) (0a3887d)

`v8.0.8`

Compare Source

Features

update rolldown to 1.0.0-rc.15 (#22201) (6baf587)

Bug Fixes

avoid dns.getDefaultResultOrder temporary (#22202) (15f1c15)
ssr: class property keys hoisting matching imports (#22199) (e137601)

`v8.0.7`

Compare Source

Bug Fixes

use sync dns.getDefaultResultOrder instead of dns.promises (#22185) (5c05b04)

`v8.0.6`

Compare Source

Features

update rolldown to 1.0.0-rc.13 (#22097) (51d3e48)

Bug Fixes

css: avoid mutating sass error multiple times (#22115) (d5081c2)
optimize-deps: hoist CJS interop assignment (#22156) (17a8f9e)

Performance Improvements

early return in getLocalhostAddressIfDiffersFromDNS when DNS order is verbatim (#22151) (56ec256)

Miscellaneous Chores

create-vite: remove unnecessary DOM.Iterable (#22168) (bdc53ab)
replace remaining prettier script (#22179) (af71fb2)

`v8.0.5`

Compare Source

Bug Fixes

apply server.fs check to env transport (#22159) (f02d9fd)
avoid path traversal with optimize deps sourcemap handler (#22161) (79f002f)
check server.fs after stripping query as well (#22160) (a9a3df2)
disallow referencing files outside the package from sourcemap (#22158) (f05f501)

`v8.0.4`

Compare Source

Features

allow esbuild 0.28 as peer deps (#22155) (b0da973)
hmr: truncate list of files on hmr update (#21535) (d00e806)
optimizer: log when dependency scanning or bundling takes over 1s (#21797) (f61a1ab)

Bug Fixes

hasBothRollupOptionsAndRolldownOptions should return false for proxy case (#22043) (99897d2)
add types for vite/modulepreload-polyfill (#22126) (17330d2)
deps: update all non-major dependencies (#22073) (6daa10f)
deps: update all non-major dependencies (#22143) (22b0166)
resolve: resolve tsconfig paths starting with # (#22038) (3460fc5)
ssr: use browser platform for webworker SSR builds (fix #21969) (#21963) (364c227)

Documentation

add environment.fetchModule documentation (#22035) (54229e7)

Miscellaneous Chores

deps: update rolldown-related dependencies (#21989) (0ded627)

Code Refactoring

upgrade to typescript 6 (#22110) (cc41398)

`v8.0.3`

Compare Source

Features

update rolldown to 1.0.0-rc.12 (#22024) (84164ef)

Bug Fixes

html: cache unfiltered CSS list to prevent missing styles across entries (#22017) (5464190)
module-runner: handle non-ascii characters in base64 sourcemaps (#21985) (77c95bf)
module-runner: skip re-import if the runner is closed (#22020) (ee2c2cd)
optimizer: scan is not resolving sub path import if used in a glob import (#22018) (ddfe20d)
ssr: ssrTransform incorrectly rewrites meta identifier inside import.meta when a binding named meta exists (#22019) (cff5f0c)

Miscellaneous Chores

deps: bump picomatch from 4.0.3 to 4.0.4 (#22027) (7e56003)

Tests

html: add tests for getCssFilesForChunk (#22016) (43fbbf9)

`v8.0.2`

Compare Source

Features

update rolldown to 1.0.0-rc.11 (#21998) (ff91c31)

Bug Fixes

deps: update all non-major dependencies (#21988) (9b7d150)

Miscellaneous Chores

deps: update dependency @vitejs/devtools to ^0.1.5 (#21992) (b2dd65b)

`v8.0.1`

Compare Source

Features

update rolldown to 1.0.0-rc.10 (#21932) (b3c067d)

Bug Fixes

bundled-dev: properly disable inlineConst optimization (#21865) (6d97142)
css: lightningcss minify failed when build.target: 'es6' (#21933) (5fcce46)
deps: update all non-major dependencies (#21878) (6dbbd7f)
dev: always use ESM Oxc runtime (#21829) (d323ed7)
dev: handle concurrent restarts in _createServer (#21810) (40bc729)
handle + symbol in package subpath exports during dep optimization (#21886) (86db93d)
improve no-cors request block error (#21902) (5ba688b)
use precise regexes for transform filter to avoid backtracking (#21800) (dbe41bd)
worker: require(json) result should not be wrapped (#21847) (0672fd2)
worker: make worker output consistent with client and SSR (#21871) (69454d7)

Miscellaneous Chores

add changelog rearrange script (#21835) (efef073)
deps: bump required @vitejs/devtools version to 0.1+ (#21925) (12932f5)
deps: update rolldown-related dependencies (#21787) (1af1d3a)
rearrange 8.0 changelog (8e05b61)
rearrange 8.0 changelog (#21834) (86edeee)

`v8.0.0`

Compare Source

Features

update rolldown to 1.0.0-rc.9 (#21813) (f05be0e)
warn when vite-tsconfig-paths plugin is detected (#21781) (ada493e)

Bug Fixes

deps: update all non-major dependencies (#21786) (eaa4352)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

bolt-new-by-stackblitz · 2026-03-13T18:43:32Z

Run & review this pull request in StackBlitz Codeflow.

socket-security · 2026-03-13T18:44:06Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	vite@8.1.3

View full report

socket-security · 2026-03-13T18:44:07Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@emnapi/runtime` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → `npm/vite@8.1.3` → `npm/@emnapi/runtime@1.11.1` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@emnapi/runtime@1.11.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

renovate Bot added the dependencies label Mar 13, 2026

renovate Bot force-pushed the renovate/vite-8.x branch 2 times, most recently from 08b9634 to fd9c1db Compare March 19, 2026 05:24

renovate Bot force-pushed the renovate/vite-8.x branch 6 times, most recently from ae34b5c to 6b36648 Compare March 28, 2026 01:49

renovate Bot force-pushed the renovate/vite-8.x branch 5 times, most recently from f5be443 to d654e01 Compare April 6, 2026 13:22

renovate Bot changed the title ~~chore(deps): update dependency vite to v8~~ chore(deps): update dependency vite to v8 - autoclosed Apr 6, 2026

renovate Bot closed this Apr 6, 2026

renovate Bot deleted the renovate/vite-8.x branch April 6, 2026 21:10

renovate Bot changed the title ~~chore(deps): update dependency vite to v8 - autoclosed~~ chore(deps): update dependency vite to v8 Apr 10, 2026

renovate Bot reopened this Apr 10, 2026

renovate Bot force-pushed the renovate/vite-8.x branch 6 times, most recently from 8a197ed to 579bd27 Compare April 16, 2026 22:55

renovate Bot force-pushed the renovate/vite-8.x branch 2 times, most recently from bf676ec to 7adde91 Compare April 20, 2026 15:34

renovate Bot force-pushed the renovate/vite-8.x branch 2 times, most recently from 7b98b5c to d76d3c1 Compare May 4, 2026 02:29

renovate Bot force-pushed the renovate/vite-8.x branch 3 times, most recently from 7c15b4f to 97f7a65 Compare May 12, 2026 21:43

renovate Bot force-pushed the renovate/vite-8.x branch 2 times, most recently from b4298b7 to 5696d99 Compare May 21, 2026 08:48

renovate Bot force-pushed the renovate/vite-8.x branch 2 times, most recently from c218a7c to 20d2eb5 Compare May 24, 2026 21:15

renovate Bot force-pushed the renovate/vite-8.x branch 2 times, most recently from e62fb96 to 894afaa Compare June 2, 2026 23:00

renovate Bot force-pushed the renovate/vite-8.x branch 3 times, most recently from 2f2a66a to 47a04e5 Compare June 16, 2026 04:51

renovate Bot changed the title ~~chore(deps): update dependency vite to v8~~ chore(deps): update dependency vite to v8 - autoclosed Jun 16, 2026

renovate Bot closed this Jun 16, 2026

renovate Bot changed the title ~~chore(deps): update dependency vite to v8 - autoclosed~~ chore(deps): update dependency vite to v8 Jun 18, 2026

renovate Bot reopened this Jun 18, 2026

renovate Bot force-pushed the renovate/vite-8.x branch 5 times, most recently from dc89ce3 to 6590688 Compare June 24, 2026 00:54

renovate Bot force-pushed the renovate/vite-8.x branch 5 times, most recently from 80f2311 to 7b07a98 Compare July 2, 2026 06:15

chore(deps): update dependency vite to v8

8e0aeb2

renovate Bot force-pushed the renovate/vite-8.x branch from 7b07a98 to 8e0aeb2 Compare July 2, 2026 10:34

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update dependency vite to v8#336

chore(deps): update dependency vite to v8#336
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/vite-8.x

renovate Bot commented Mar 13, 2026 •

edited

Loading

Uh oh!

bolt-new-by-stackblitz Bot commented Mar 13, 2026

Uh oh!

socket-security Bot commented Mar 13, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Mar 13, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Mar 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

Tests

Features

Bug Fixes

Code Refactoring

Bug Fixes

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

Tests

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Features

Bug Fixes

Code Refactoring

Features

Bug Fixes

Documentation

Miscellaneous Chores

Features

Bug Fixes

Bug Fixes

Features

Bug Fixes

Performance Improvements

Miscellaneous Chores

Bug Fixes

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Features

Bug Fixes

Miscellaneous Chores

Tests

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Configuration

Uh oh!

bolt-new-by-stackblitz Bot commented Mar 13, 2026

Uh oh!

socket-security Bot commented Mar 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Mar 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

renovate Bot commented Mar 13, 2026 •

edited

Loading

socket-security Bot commented Mar 13, 2026 •

edited

Loading

socket-security Bot commented Mar 13, 2026 •

edited

Loading