chore: Update dependency vite to v8 by renovate[bot] · Pull Request #50 · excaliburjs/template-nwjs

renovate · 2026-03-12T19:01:17Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
vite (source)	`6.4.3` → `8.2.1`

Release Notes

vitejs/vite (vite)

`v8.2.1`

Compare Source

Bug Fixes

build: make client chunkImportMap work with sharedPlugins: true (#23184) (15f0307)
bundled-dev: inject client script tag before chunk scripts (#23161) (eac0cc8)
css: don't re-run lightningcss visitor during minify (fix #23146) (#23147) (de041a7)
deps: update all non-major dependencies (#23136) (14454fd)
deps: update rolldown-related dependencies (#23070) (7ac6f7f)
don't mutate the user config when resolving the lib entry from the top-level input (#23135) (b4bf596)
handle shebang ending with uncommon line terminators (#23038) (17f7b2f)
server: use a random port when port is 0 (#23158) (fddf4ea)

Performance Improvements

css: look up pure CSS chunks through a Set (#23114) (1331b0b)

Documentation

build: fix incomplete @default for build.minify (#23177) (ef02435)

Miscellaneous Chores

deps: update dependency rolldown-plugin-dts to ^0.28.0 (#23137) (4adc1e7)
deps: update dependency strip-literal to v4 (#23140) (9db65ce)

Code Refactoring

bundled-dev: avoid injecting server values in the bundle (#22967) (23b8a08)
bundled-dev: remove rolldown lazy stub module workaround (#23129) (e72036e)

Tests

bundled-dev: enable sourcemap playgrounds (#23080) (c2155fe)
reduce logs (#23138) (7673c02)

`v8.2.0`

Compare Source

Features

add input to server.fs.allow (#23035) (95a3cda)
bundled-dev: reload once after rebuild instead of via the fallback page (#23106) (b24381d)
bundled-dev: support worker file update accepted by HMR (#23068) (0d04351)
config: include column in config incompatibility location (#23064) (8a24572)
dev: resolve interface name for explicit host in network URLs (#22965) (3ac77d9)

Bug Fixes

bundledDev: print build errors to the terminal when an HMR update fails (#23024) (41c4658)
deps: update all non-major dependencies (#23069) (4c07b74)
hmr: preserve environment snapshot during server restart (#22992) (b1186c3)
importAnalysis: interop imports injected into optimized dep files by plugins (#23029) (8c2a87d)
module-runner: keep stack trace interception working when Object.prototype is frozen (#23073) (599c5b0)
server: strip base in indexHtml module graph lookup (#22932) (fa005d1)
support resolving top-level input option with plugins (#23101) (41df81a)

Documentation

config: correct cacheDir default fallback description (#23060) (aafa103)

Tests

config CJS module vars in ESM case (#23010) (d8cd388)

`v8.1.5`

Compare Source

Please refer to CHANGELOG.md for details.

`v8.1.4`

Compare Source

Features

legacy: prefer oxc as minifier (fix #21973) (#22468) (ab5dafa)

Bug Fixes

build: add workaround for building on stackblitz (#22840) (575c32c)
build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)
deps: update all non-major dependencies (#22865) (d4295a9)
deps: update rolldown-related dependencies (#22866) (7cf07e4)
html: avoid backtracking in import-only check (#22848) (b5868c0)
optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)
ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)
strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

fix incorrect @default for server.cors (#22859) (70435b2)

Miscellaneous Chores

deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

Code Refactoring

eliminate ineffectiveDynamicImport warn (#22876) (ea22fb3)

Tests

avoid warnings (#22851) (af21ab6)

Build System

remove the custom onLog function (#22878) (2c4a217)
replace deprecated onwarn with onLog (#22741) (c581b55)

`v8.1.3`

Compare Source

Bug Fixes

css: inject inlined CSS after the shebang line (#22717) (1534d36)
deps: bump es-module-lexer to 2.3.0 (#22838) (7103c3a)
preload css for nested dynamic imports (#22759) (2c53054)
ssr: correct stacktrace column position for first line (#22828) (c4acd69)

`v8.1.2`

Compare Source

Bug Fixes

deps: revert es-module-lexer to 2.1.0 (#22827) (0d3bd7c)
restore, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (#22825) (efb98cc)
revert, "fix: escape ids with multiple null bytes (#22687)" (cccef55)
revert, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (cf97711)

`v8.1.1`

Compare Source

Features

update dynamic import warning to link to Vite docs (#22823) (62bd7af)

Bug Fixes

bundled-dev: avoid stack overflow on import.meta.hot.invalidate() (#22797) (709eb8e)
bundled-dev: serve assets emitted during HMR/lazy compile (#22745) (5876b2c)
bundledDev: skip plugin transform hooks for rolldown-lazy stub modules (#22778) (8f925e2)
css: preserve dollar signs in external @import urls with lightningcss (#22718) (9fa7ab4)
css: resolve tsconfig paths in CSS and Sass @import (#22775) (ef0b891)
deps: update all non-major dependencies (#22734) (e635f49)
deps: update all non-major dependencies (#22804) (8837400)
deps: update rolldown-related dependencies (#22591) (2ce6677)
escape ids with multiple null bytes (#22687) (833fc30)
hide console window when running 'net use' on Windows (#22698) (92b63f2)
ignore bundled config temp dir (#22800) (043a810)
invert esbuild.jsxSideEffects when converting to oxc.jsx.pure (#22809) (33895ba)
optimize-deps: ignore ERR_CLOSED_SERVER in scanner (#22784) (085a0ab)
optimizer: scanner should resolve input from root (#22769) (9722b07)
resolve pnpm .modules.yaml from workspace root instead of cwd (#22757) (2531ac7)
return sourcemap field from some plugins that were lacking (#22782) (7e18bf8)
server: handle malformed URI in indexHtmlMiddleware (#22781) (84f5ccc)

Miscellaneous Chores

improve dependency optimizer messages (#22549) (092cb3b)

Code Refactoring

css: remove lightningcss null byte bug workaround (#22822) (2dafd3b)
use pre-defined environments variable to avoid duplicate Object.values calls (#22790) (1113acf)

Tests

enable "manual chunk path" test and remove "worker.format error" test (#22824) (c088511)

`v8.1.0`

Compare Source

Features

extend server.fs.deny list with common files (#22707) (61ba8fd)
update rolldown to 1.1.2 (#22695) (4f008a6)
use ~ for Rolldown (#22693) (9928722)

Bug Fixes

bundled-dev: errors should be kept when incremental build fails (#22617) (9a0dd48)
cache falsy values in perEnvironmentState (#22715) (0e91e79)
glob: respect caseSensitive option in hmr matcher (#22711) (65f525e)
html: omit nonce on import map when cspNonce is unset (#22713) (8340bb5)
optimizer: skip null-valued exports in expandGlobIds glob resolution (#22611) (8b9f5cd)
resolved build options should be kept as a getter (#22691) (3527191)
server: handle malformed URI in memory files middleware (#22714) (df9e0a5)
use literal envPrefix queries for Vite Task (#22706) (da72733)
warn on deprecated envFile (#22555) (ed7b283)

Code Refactoring

client: inline dev-id value in CSS selector (#22736) (57f59bc)
remove unused removeRawQuery util (#22724) (403cc60)
use rolldownOptions property for chunkImportMap (#22692) (8e8816c)

`v8.0.16`

Compare Source

Bug Fixes

deps: reject UNC paths for launch-editor-middleware (#22571) (50b9512)
reject windows alternate paths (#22572) (dc245c7)

`v8.0.15`

Compare Source

Features

send 408 on request timeout (#22476) (c85c9ee)
update rolldown to 1.0.3 (#22538) (646dbed)

Bug Fixes

capitalize error messages and remove spurious space in parse error (#22488) (85a0eff)
deps: update all non-major dependencies (#22511) (2686d7d)
dev: fix html-proxy cache key mismatch for /@fs/ HTML paths (#21762) (47c4213)
glob: error on relative glob in virtual module when no files match (#22497) (5c8e98f)
optimizer: close the rolldown bundle when write() rejects (#22528) (e3cfb9d)
resolve: provide onWarn for viteResolvePlugin in JS plugin containers (#22509) (40985f1)

Miscellaneous Chores

deps: update rolldown-related dependencies (#22566) (3052a67)

Code Refactoring

correct logic in collectAllModules function (#22562) (6978a9c)

`v8.0.14`

Compare Source

Features

update rolldown to 1.0.2 (#22484) (96efc88)

Bug Fixes

deps: update all non-major dependencies (#22471) (98b8163)
dev: handle errors when sending messages to vite server (#22450) (e8e9a34)
html: handle trailing slash paths in transformIndexHtml (#22480) (5d94d1b)
optimizer: pass oxc jsx options to transformSync in dependency scan (#22342) (b3132da)

Miscellaneous Chores

deps: update rolldown-related dependencies (#22470) (7cb728e)
remove irrelevant commits from changelog (2c69495)

Code Refactoring

glob: do not rewrite import path for absolute base (#22310) (0ae2844)

Tests

css: sass does not use main field (#22449) (ebf39a0)

`v8.0.13`

Compare Source

Features

bundled-dev: add lazy bundling support (#21406) (4f0949f)
optimizer: improve the esbuild plugin converter to pass some properties of build result to onEnd (#22357) (47071ce)
update rolldown to 1.0.1 (#22444) (8c766a6)

Bug Fixes

build: copy public directory after building same environment with write=false (#22328) (158e8ae)
css: await sass/less/styl worker disposal on teardown (fix #22274) (#22275) (b7edcb7)
css: keep deprecated name/originalFileName in synthetic assetFileNames call (#22439) (8e59c97)
make isBundled per environment (#22257) (a576326)
ssr: avoid rewriting labels that collide with imports (#22451) (d9b18e0)

Miscellaneous Chores

remove irrelevant commits from changelog (#22430) (6ea3838)
update changelog (#22413) (fcdc87c)

`v8.0.12`

Compare Source

Features

update rolldown to 1.0.0 (#22401) (cf0ff41)

Bug Fixes

create-vite: pass react framework to TanStack CLI (#22397) (18f0f90)
deps: update all non-major dependencies (#22420) (2be6000)
module-runner: prevent partial-exports race on concurrent imports of in-flight invalidated re-export chains (#22369) (f5a22e6)
refer to rolldownOptions instead of deprecated rollupOptions in messages (#22400) (b675c7b)
worker: apply build.target to worker bundle (#22404) (3c93fde)
worker: forward define to worker bundle transform (#22408) (d4838a0)

Miscellaneous Chores

deps: update dependency eslint-plugin-n to v18 (#22423) (2fe7bd2)
deps: update rolldown-related dependencies (#22421) (66b9eb3)

`v8.0.11`

Compare Source

Features

update rolldown to 1.0.0-rc.18 (#22360) (3f80524)

Bug Fixes

deps: update all non-major dependencies (#22334) (672c962)
deps: update all non-major dependencies (#22382) (5c0cfcb)
glob: align hmr matcher options with glob enumeration (#22306) (30028f9)
make separate object instance for each environment (#22276) (7c2aa3b)

Documentation

create-vite: list react-compiler templates in README (#22347) (7c3a61f)
explain mergeConfig skips null/undefined (#22325) (2151f70)
mention native config loader in CLI options (#22348) (0420c5d)
update evan's x handle (640202a)

Miscellaneous Chores

deps: update dependency tsdown to ^0.21.10 (#22333) (3b51e05)
deps: update rolldown-related dependencies (#22383) (555ff36)
deps: update transitive packages to fix npm audit alerts (#22316) (86aee62)

Code Refactoring

devtools integration (#22312) (3c8bf06)
remove unnecessary async (#22296) (b31fd35)
show direct path type in bad character warning (#22339) (0c162e9)

Tests

create-vite: use short help alias (#22389) (994ab66)

`v8.0.10`

Compare Source

Features

update rolldown to 1.0.0-rc.17 (#22299) (a4d06d9)

Bug Fixes

hmrClient.logger.debug and hmrClient.logger.error looked different from other HMR logs (#22147) (a4d828f)
css: show filename in CSS minification warnings for .css?inline (#22292) (83f0a78)
optimizer: allow user transform.target to override default in optimizeDeps (#22273) (5c7cec6)
remove format sniffing module resolution from JS resolver (#22297) (b8a21cc)

Code Refactoring

enable some typecheck rules (#22278) (9437518)
typecheck client directory (#22284) (40a0847)

`v8.0.9`

Compare Source

Features

update rolldown to 1.0.0-rc.16 (#22248) (2947edd)

Bug Fixes

allow binding when strictPort is set but wildcard port is in use (#22150) (dfc8aa5)
build: emptyOutDir should happen for watch rebuilds (#22207) (ee52267)
bundled-dev: reject requests to HMR patch files in non potentially trustworthy origins (#22269) (868f141)
css: use unique key for cssEntriesMap to prevent same-basename collision (#22039) (374bb5d)
deps: update all non-major dependencies (#22219) (4cd0d67)
deps: update all non-major dependencies (#22268) (c28e9c1)
detect Deno workspace root (fix #22237) (#22238) (1b793c0)
dev: handle errors in watchChange hook (#22188) (fc08bda)
optimizer: handle more chars that will be sanitized (#22208) (3f24533)
skip fallback sourcemap generation for ?raw imports (#22148) (3ec9cda)

Documentation

align the descriptions in READMEs (#22231) (44c42b9)
fix reuses wording in dev environment comment (#22173) (9163412)
fix wording in sass error comment (#22214) (bc5c6a7)
update build CLI defaults (#22261) (605bb97)

Miscellaneous Chores

deps: update dependency dotenv-expand to v13 (#22271) (0a3887d)

`v8.0.8`

Compare Source

Features

update rolldown to 1.0.0-rc.15 (#22201) (6baf587)

Bug Fixes

avoid dns.getDefaultResultOrder temporary (#22202) (15f1c15)
ssr: class property keys hoisting matching imports (#22199) (e137601)

`v8.0.7`

Compare Source

Bug Fixes

use sync dns.getDefaultResultOrder instead of dns.promises (#22185) (5c05b04)

`v8.0.6`

Compare Source

Features

update rolldown to 1.0.0-rc.13 (#22097) (51d3e48)

Bug Fixes

css: avoid mutating sass error multiple times (#22115) (d5081c2)
optimize-deps: hoist CJS interop assignment (#22156) (17a8f9e)

Performance Improvements

early return in getLocalhostAddressIfDiffersFromDNS when DNS order is verbatim (#22151) (56ec256)

Miscellaneous Chores

create-vite: remove unnecessary DOM.Iterable (#22168) (bdc53ab)
replace remaining prettier script (#22179) (af71fb2)

`v8.0.5`

Compare Source

Bug Fixes

apply server.fs check to env transport (#22159) (f02d9fd)
avoid path traversal with optimize deps sourcemap handler (#22161) (79f002f)
check server.fs after stripping query as well (#22160) (a9a3df2)
disallow referencing files outside the package from sourcemap (#22158) (f05f501)

`v8.0.4`

Compare Source

Features

allow esbuild 0.28 as peer deps (#22155) (b0da973)
hmr: truncate list of files on hmr update (#21535) (d00e806)
optimizer: log when dependency scanning or bundling takes over 1s (#21797) (f61a1ab)

Bug Fixes

hasBothRollupOptionsAndRolldownOptions should return false for proxy case (#22043) (99897d2)
add types for vite/modulepreload-polyfill (#22126) (17330d2)
deps: update all non-major dependencies (#22073) (6daa10f)
deps: update all non-major dependencies (#22143) (22b0166)
resolve: resolve tsconfig paths starting with # (#22038) (3460fc5)
ssr: use browser platform for webworker SSR builds (fix #21969) (#21963) (364c227)

Documentation

add environment.fetchModule documentation (#22035) (54229e7)

Miscellaneous Chores

deps: update rolldown-related dependencies (#21989) (0ded627)

Code Refactoring

upgrade to typescript 6 (#22110) (cc41398)

`v8.0.3`

Compare Source

Features

update rolldown to 1.0.0-rc.12 (#22024) (84164ef)

Bug Fixes

html: cache unfiltered CSS list to prevent missing styles across entries (#22017) (5464190)
module-runner: handle non-ascii characters in base64 sourcemaps (#21985) (77c95bf)
module-runner: skip re-import if the runner is closed (#22020) (ee2c2cd)
optimizer: scan is not resolving sub path import if used in a glob import (#22018) (ddfe20d)
ssr: ssrTransform incorrectly rewrites meta identifier inside import.meta when a binding named meta exists (#22019) (cff5f0c)

Miscellaneous Chores

deps: bump picomatch from 4.0.3 to 4.0.4 (#22027) (7e56003)

Tests

html: add tests for getCssFilesForChunk (#22016) (43fbbf9)

`v8.0.2`

Compare Source

Features

update rolldown to 1.0.0-rc.11 (#21998) (ff91c31)

Bug Fixes

deps: update all non-major dependencies (#21988) (9b7d150)

Miscellaneous Chores

deps: update dependency @vitejs/devtools to ^0.1.5 (#21992) (b2dd65b)

`v8.0.1`

Compare Source

Features

update rolldown to 1.0.0-rc.10 (#21932) (b3c067d)

Bug Fixes

bundled-dev: properly disable inlineConst optimization (#21865) (6d97142)
css: lightningcss minify failed when build.target: 'es6' (#21933) (5fcce46)
deps: update all non-major dependencies (#21878) (6dbbd7f)
dev: always use ESM Oxc runtime (#21829) (d323ed7)
dev: handle concurrent restarts in _createServer (#21810) (40bc729)
handle + symbol in package subpath exports during dep optimization (#21886) (86db93d)
improve no-cors request block error (#21902) (5ba688b)
use precise regexes for transform filter to avoid backtracking (#21800) (dbe41bd)
worker: require(json) result should not be wrapped (#21847) (0672fd2)
worker: make worker output consistent with client and SSR (#21871) (69454d7)

Miscellaneous Chores

add changelog rearrange script ([#21835](https://redirect.github.com/vitejs/v

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-03-12T19:01:55Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	vite@6.4.3 ⏵ 8.2.1	⁺⁸

View full report

socket-security · 2026-06-23T11:49:54Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

renovate Bot force-pushed the renovate/vite-8.x branch 2 times, most recently from 92eafc0 to e9b2045 Compare March 23, 2026 13:35

renovate Bot force-pushed the renovate/vite-8.x branch 2 times, most recently from 893b67b to d57c681 Compare April 1, 2026 18:19

renovate Bot force-pushed the renovate/vite-8.x branch 7 times, most recently from 2af953a to b516859 Compare April 9, 2026 05:25

renovate Bot force-pushed the renovate/vite-8.x branch 3 times, most recently from 2337664 to 7fe1c0d Compare April 25, 2026 20:25

renovate Bot force-pushed the renovate/vite-8.x branch from 7fe1c0d to 6f72b6e Compare April 29, 2026 12:40

renovate Bot force-pushed the renovate/vite-8.x branch 3 times, most recently from 122c93e to 296732f Compare May 12, 2026 09:31

renovate Bot force-pushed the renovate/vite-8.x branch 2 times, most recently from 8bc74fe to 6084e60 Compare May 21, 2026 08:35

renovate Bot force-pushed the renovate/vite-8.x branch 3 times, most recently from ce6a38a to 94b2c37 Compare June 2, 2026 02:12

renovate Bot force-pushed the renovate/vite-8.x branch from 94b2c37 to 2ed4044 Compare June 11, 2026 11:40

renovate Bot force-pushed the renovate/vite-8.x branch 2 times, most recently from aeb622e to eed92d2 Compare June 23, 2026 11:49

renovate Bot force-pushed the renovate/vite-8.x branch 2 times, most recently from 4e28636 to 0775f44 Compare June 30, 2026 19:39

renovate Bot force-pushed the renovate/vite-8.x branch 2 times, most recently from 672484a to df817f1 Compare July 9, 2026 05:52

renovate Bot force-pushed the renovate/vite-8.x branch 2 times, most recently from 60fb5e4 to 1a6ad2d Compare July 16, 2026 09:14

renovate Bot force-pushed the renovate/vite-8.x branch 2 times, most recently from ddd6790 to ea09e66 Compare July 24, 2026 18:45

renovate Bot force-pushed the renovate/vite-8.x branch 2 times, most recently from 3e2033c to fc9212f Compare August 6, 2026 17:09

renovate Bot force-pushed the renovate/vite-8.x branch from fc9212f to c5c6e79 Compare August 12, 2026 03:14

chore: Update dependency vite to v8

f60107e

renovate Bot force-pushed the renovate/vite-8.x branch from c5c6e79 to f60107e Compare August 14, 2026 18:31

Navigation Menu

Uh oh!

chore: Update dependency vite to v8 - #50

chore: Update dependency vite to v8#50
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/vite-8.x

renovate Bot commented Mar 12, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Mar 12, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 23, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Mar 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Features

Bug Fixes

Documentation

Tests

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Build System

Bug Fixes

Bug Fixes

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

Tests

Features

Bug Fixes

Code Refactoring

Bug Fixes

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

Tests

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Features

Bug Fixes

Code Refactoring

Features

Bug Fixes

Documentation

Miscellaneous Chores

Features

Bug Fixes

Bug Fixes

Features

Bug Fixes

Performance Improvements

Miscellaneous Chores

Bug Fixes

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Features

Bug Fixes

Miscellaneous Chores

Tests

Features

Bug Fixes

renovate Bot commented Mar 12, 2026 •

edited

Loading

socket-security Bot commented Mar 12, 2026 •

edited

Loading

socket-security Bot commented Jun 23, 2026 •

edited

Loading