build(deps): update vite to v6 (major) #923

renovate · 2025-08-02T01:52:16Z

This PR contains the following updates:

Package	Change	Age	Confidence
vite@>=5.0.0 <5.4.15 (source)	[`>=5.4.15` -> `>=6.3.5`](https://renovatebot.com/diffs/npm/vite@>=5.0.0 <5.4.15/5.4.15/6.3.5)
vite@>=5.0.0 <5.4.16 (source)	[`>=5.4.16` -> `>=6.3.5`](https://renovatebot.com/diffs/npm/vite@>=5.0.0 <5.4.16/5.4.16/6.3.5)
vite@>=5.0.0 <5.4.17 (source)	[`>=5.4.17` -> `>=6.3.5`](https://renovatebot.com/diffs/npm/vite@>=5.0.0 <5.4.17/5.4.17/6.3.5)
vite@>=5.0.0 <5.4.18 (source)	[`>=5.4.18` -> `>=6.3.5`](https://renovatebot.com/diffs/npm/vite@>=5.0.0 <5.4.18/5.4.18/6.3.5)
vite@>=5.0.0 <=5.4.11 (source)	[`>=5.4.12` -> `>=6.3.5`](https://renovatebot.com/diffs/npm/vite@>=5.0.0 <=5.4.11/5.4.12/6.3.5)
vite@>=5.0.0 <=5.4.18 (source)	[`>=5.4.19` -> `>=6.3.5`](https://renovatebot.com/diffs/npm/vite@>=5.0.0 <=5.4.18/5.4.19/6.3.5)

Release Notes

vitejs/vite (vite@>=5.0.0 <5.4.15)

`v6.3.5`

Compare Source

fix(ssr): handle uninitialized export access as undefined (#19959) (fd38d07), closes #19959

`v6.3.4`

Compare Source

fix: check static serve file inside sirv (#19965) (c22c43d), closes #19965
fix(optimizer): return plain object when using require to import externals in optimized dependenci (efc5eab), closes #19940
refactor: remove duplicate plugin context type (#19935) (d6d01c2), closes #19935

`v6.3.3`

Compare Source

fix: ignore malformed uris in tranform middleware (#19853) (e4d5201), closes #19853
fix(assets): ensure ?no-inline is not included in the asset url in the production environment (#1949 (16a73c0), closes #19496
fix(css): resolve relative imports in sass properly on Windows (#19920) (ffab442), closes #19920
fix(deps): update all non-major dependencies (#19899) (a4b500e), closes #19899
fix(ssr): fix execution order of re-export (#19841) (ed29dee), closes #19841
fix(ssr): fix live binding of default export declaration and hoist exports getter (#19842) (80a91ff), closes #19842
perf: skip sourcemap generation for renderChunk hook of import-analysis-build plugin (#19921) (55cfd04), closes #19921
test(ssr): test ssrTransform re-export deps and test stacktrace with first line (#19629) (9399cda), closes #19629

`v6.3.2`

Compare Source

fix: match default asserts case insensitive (#19852) (cbdab1d), closes #19852
fix: open first url if host does not match any urls (#19886) (6abbdce), closes #19886
fix(css): respect css.lightningcss option in css minification process (#19879) (b5055e0), closes #19879
fix(deps): update all non-major dependencies (#19698) (bab4cb9), closes #19698
feat(css): improve lightningcss messages (#19880) (c713f79), closes #19880

`v6.3.1`

Compare Source

fix: avoid using Promise.allSettled in preload function (#19805) (35c7f35), closes #19805
fix: backward compat for internal plugin transform calls (#19878) (a152b7c), closes #19878

`v6.3.0`

Compare Source

fix(hmr): avoid infinite loop happening with hot.invalidate in circular deps (#19870) (d4ee5e8), closes #19870
fix(preview): use host url to open browser (#19836) (5003434), closes #19836

`v6.2.7`

Compare Source

Please refer to CHANGELOG.md for details.

`v6.2.6`

Compare Source

Please refer to CHANGELOG.md for details.

`v6.2.5`

Compare Source

Please refer to CHANGELOG.md for details.

`v6.2.4`

Compare Source

Please refer to CHANGELOG.md for details.

`v6.2.3`

Compare Source

Please refer to CHANGELOG.md for details.

`v6.2.2`

Compare Source

fix: await client buildStart on top level buildStart (#19624) (b31faab), closes #19624
fix(css): inline css correctly for double quote use strict (#19590) (d0aa833), closes #19590
fix(deps): update all non-major dependencies (#19613) (363d691), closes #19613
fix(indexHtml): ensure correct URL when querying module graph (#19601) (dc5395a), closes #19601
fix(preview): use preview https config, not server (#19633) (98b3160), closes #19633
fix(ssr): use optional chaining to prevent "undefined is not an object" happening in `ssrRewriteStac (4309755), closes #19612
feat: show friendly error for malformed base (#19616) (2476391), closes #19616
feat(worker): show asset filename conflict warning (#19591) (367d968), closes #19591
chore: extend commit hash correctly when ambigious with a non-commit object (#19600) (89a6287), closes #19600

`v6.2.1`

Compare Source

refactor: remove isBuild check from preAliasPlugin (#19587) (c9e086d), closes #19587
refactor: restore endsWith usage (#19554) (6113a96), closes #19554
refactor: use applyToEnvironment in internal plugins (#19588) (f678442), closes #19588
fix(css): stabilize css module hashes with lightningcss in dev mode (#19481) (92125b4), closes #19481
fix(deps): update all non-major dependencies (#19555) (f612e0f), closes #19555
fix(reporter): fix incorrect bundle size calculation with non-ASCII characters (#19561) (437c0ed), closes #19561
fix(sourcemap): combine sourcemaps with multiple sources without matched source (#18971) (e3f6ae1), closes #18971
fix(ssr): named export should overwrite export all (#19534) (2fd2fc1), closes #19534
feat: add *?url&no-inline type and warning for .json?inline / .json?no-inline (#19566) (c0d3667), closes #19566
test: add glob import test case (#19516) (aa1d807), closes #19516
test: convert config playground to unit tests (#19568) (c0e68da), closes #19568
test: convert resolve-config playground to unit tests (#19567) (db5fb48), closes #19567
perf: flush compile cache after 10s (#19537) (6c8a5a2), closes #19537
chore(css): move environment destructuring after condition check (#19492) (c9eda23), closes #19492
chore(html): remove unnecessary value check (#19491) (797959f), closes #19491

`v6.2.0`

Compare Source

fix(deps): update all non-major dependencies (#19501) (c94c9e0), closes #19501
fix(worker): string interpolation in dynamic worker options (#19476) (07091a1), closes #19476
chore: use unicode cross icon instead of x (#19497) (5c70296), closes #19497

`v6.1.6`

Compare Source

Please refer to CHANGELOG.md for details.

`v6.1.5`

Compare Source

Please refer to CHANGELOG.md for details.

`v6.1.4`

Compare Source

Please refer to CHANGELOG.md for details.

`v6.1.3`

Compare Source

Please refer to CHANGELOG.md for details.

`v6.1.2`

Compare Source

Please refer to CHANGELOG.md for details.

`v6.1.1`

Compare Source

fix: ensure .[cm]?[tj]sx? static assets are JS mime (#19453) (e7ba55e), closes #19453
fix: ignore *.ipv4 address in cert (#19416) (973283b), closes #19416
fix(css): run rewrite plugin if postcss plugin exists (#19371) (bcdb51a), closes #19371
fix(deps): bump tsconfck (#19375) (746a583), closes #19375
fix(deps): update all non-major dependencies (#19392) (60456a5), closes #19392
fix(deps): update all non-major dependencies (#19440) (ccac73d), closes #19440
fix(html): ignore malformed src attrs (#19397) (aff7812), closes #19397
fix(worker): fix web worker type detection (#19462) (edc65ea), closes #19462
refactor: remove custom .jxl mime (#19457) (0c85464), closes #19457
feat: add support for injecting debug IDs (#18763) (0ff556a), closes #18763
chore: update 6.1.0 changelog (#19363) (fa7c211), closes #19363

`v6.1.0`

Compare Source

Features

add support for injecting debug IDs (#18763) (0ff556a)

Bug Fixes

css: run rewrite plugin if postcss plugin exists (#19371) (bcdb51a)
deps: bump tsconfck (#19375) (746a583)
deps: update all non-major dependencies (#19392) (60456a5)
deps: update all non-major dependencies (#19440) (ccac73d)
ensure .[cm]?[tj]sx? static assets are JS mime (#19453) (e7ba55e)
html: ignore malformed src attrs (#19397) (aff7812)
ignore *.ipv4 address in cert (#19416) (973283b)
worker: fix web worker type detection (#19462) (edc65ea)

Miscellaneous Chores

update 6.1.0 changelog (#19363) (fa7c211)

Code Refactoring

remove custom .jxl mime (#19457) (0c85464)

`v6.0.15`

Compare Source

Please refer to CHANGELOG.md for details.

`v6.0.14`

Compare Source

Please refer to CHANGELOG.md for details.

`v6.0.13`

Compare Source

Please refer to CHANGELOG.md for details.

`v6.0.12`

Compare Source

Please refer to CHANGELOG.md for details.

`v6.0.11`

Compare Source

Features

show hosts in cert in CLI (#19317) (a5e306f)
support for env var for defining allowed hosts (#19325) (4d88f6c)
use native runtime to import the config (#19178) (7c2a794)
print port in the logged error message after failed WS connection with EADDRINUSE (#19212) (14027b0)
add support for .jxl (#18855) (57b397c)
add the builtins environment resolve (#18584) (2c2d521)
call Logger for plugin logs in build (#13757) (bf3e410)
css: add friendly errors for IE hacks that are not supported by lightningcss (#19072) (caad985)
export defaultAllowedOrigins for user-land config and 3rd party plugins (#19259) (dc8946b)
expose createServerModuleRunnerTransport (#18730) (8c24ee4)
optimizer: support bun text lockfile (#18403) (05b005f)
reporter: add wasm to the compressible assets regex (#19085) (ce84142)
support async for proxy.bypass (#18940) (a6b9587)
support log related functions in dev (#18922) (3766004)
use module runner to import the config (#18637) (b7e0e42)
worker: support dynamic worker option fields (#19010) (d0c3523)

Bug Fixes

avoid builtStart during vite optimize (#19356) (fdb36e0)
build: fix stale build manifest on watch rebuild (#19361) (fcd5785)
allow expanding env vars in reverse order (#19352) (3f5f2bd)
avoid packageJson without name in resolveLibCssFilename (#19324) (f183bdf)
html: fix css disorder when building multiple entry html (#19143) (e7b4ba3)
css: less [@plugin](https://redirect.github.com/plugin) imports of JS files treated as CSS and rebased (fix #19268) (#19269) (602b373)
deps: update all non-major dependencies (#19296) (2bea7ce)
don't call buildStart hooks for vite optimize (#19347) (19ffad0)
don't call next middleware if user sent response in proxy.bypass (#19318) (7e6364d)
resolve: preserve hash/search of file url (#19300) (d1e1b24)
resolve: warn if node-like builtin was imported when resolve.builtin is empty (#19312) (b7aba0b)
respect top-level server.preTransformRequests (#19272) (12aaa58)
ssr: fix transform error due to export all id scope (#19331) (e28bce2)
ssr: pretty print plugin error in ssrLoadModule (#19290) (353c467)
use nodeLikeBuiltins for ssr.target: 'webworker' without noExternal: true (#19313) (9fc31b6)
change ResolvedConfig type to interface to allow extending it (#19210) (bc851e3)
correctly resolve hmr dep ids and fallback to url (#18840) (b84498b)
deps: update all non-major dependencies (#19190) (f2c07db)
hmr: register inlined assets as a dependency of CSS file (#18979) (eb22a74)
make --force work for all environments (#18901) (51a42c6)
resolve: support resolving TS files by JS extension specifiers in JS files (#18889) (612332b)
ssr: combine empty source mappings (#19226) (ba03da2)
use loc.file from rollup errors if available (#19222) (ce3fe23)
utils: clone RegExp values with new RegExp instead of structuredClone (fix #19245, fix #18875) (#19247) (56ad2be)

Performance Improvements

css: only run postcss when needed (#19061) (30194fa)

Documentation

rephrase browser range and features relation (#19286) (97569ef)
update build.manifest jsdocs (#19332) (4583781)

Code Refactoring

deprecate vite optimize command (#19348) (6e0e3c0)

Miscellaneous Chores

update deprecate links domain (#19353) (2b2299c)
deps: update dependency strip-literal to v3 (#19231) (1172d65)
remove outdated code comment about scanImports not being used in ssr (#19285) (fbbc6da)
unneeded name in lockfileFormats (#19275) (96092cb)

Beta Changelogs

fix: try parse server.origin URL (#19241) (2495022), closes #19241

`v6.0.9`

Compare Source

⚠ BREAKING CHANGES

check host header to prevent DNS rebinding attacks and introduce server.allowedHosts
default server.cors: false to disallow fetching from untrusted origins

Bug Fixes

check host header to prevent DNS rebinding attacks and introduce server.allowedHosts (bd896fb)
default server.cors: false to disallow fetching from untrusted origins (b09572a)
verify token for HMR WebSocket connection (029dcd6)

`v6.0.8`

Compare Source

Bug Fixes

avoid SSR HMR for HTML files (#19193) (3bd55bc)
build time display 7m 60s (#19108) (cf0d2c8)
deps: update all non-major dependencies (#19098) (8639538)
don't resolve URL starting with double slash (#19059) (35942cd)
ensure server.close() only called once (#19204) (db81c2d)
optimizer: use correct default install state path for yarn PnP (#19119) (e690d8b)
resolve.conditions in ResolvedConfig was defaultServerConditions (#19174) (ad75c56)
tree shake stringified JSON imports (#19189) (f2aed62)
types: improve ESBuildOptions.include / exclude type to allow readonly (string | RegExp)[] (#19146) (ea53e70)
use shared sigterm callback (#19203) (47039f4)

Miscellaneous Chores

deps: update dependency pathe to v2 (#19139) (71506f0)

`v6.0.7`

Compare Source

Features

css: show lightningcss warnings (#19076) (b07c036)

Bug Fixes

fix minify when builder.sharedPlugins: true (#19025) (f7b1964)
html: error while removing vite-ignore attribute for inline script (#19062) (a492253)
skip the plugin if it has been called before with the same id and importer (#19016) (b178c90)
ssr: fix semicolon injection by ssr transform (#19097) (1c102d5)

Performance Improvements

skip globbing for static path in warmup (#19107) (677508b)

`v6.0.6`

Compare Source

Bug Fixes

css: resolve style tags in HTML files correctly for lightningcss (#19001) (afff05c)
css: show correct error when unknown placeholder is used for CSS modules pattern in lightningcss (#19070) (9290d85)
replace runner-side path normalization with fetchModule-side resolve (#18361) (9f10261)
resolve: handle package.json with UTF-8 BOM (#19000) (902567a)
ssrTransform: preserve line offset when transforming imports (#19004) (1aa434e)

Reverts

unpin esbuild version (#19043) (8bfe247)

Miscellaneous Chores

fix typo in comment (#19067) (eb06ec3)
update comment about build.target (#19047) (0e9e81f)

Tests

ssr: test virtual module with query (#19044) (a1f4b46)

`v6.0.5`

Compare Source

Bug Fixes

esbuild regression (pin to 0.24.0) (#19027) (4359e0d)

`v6.0.4`

Compare Source

Bug Fixes

this.resolve skipSelf should not skip for different id or import (#18903) (4727320)
css: escape double quotes in url() when lightningcss is used (#18997) (3734f80)
css: root relative import in sass modern API on Windows (#18945) (c4b532c)
css: skip non css in custom sass importer (#18970) (21680bd)
deps: update all non-major dependencies (#18967) (d88d000)
deps: update all non-major dependencies (#18996) (2b4f115)
fallback terser to main thread when function options are used (#18987) (12b612d)
merge client and ssr values for pluginContainer.getModuleInfo (#18895) (258cdd6)
optimizer: keep NODE_ENV as-is when keepProcessEnv is true (#18899) (8a6bb4e)
ssr: recreate ssrCompatModuleRunner on restart (#18973) (7d6dd5d)

Miscellaneous Chores

better validation error message for dts build (#18948) (63b82f1)
deps: update all non-major dependencies (#18916) (ef7a6a3)
deps: update dependency @rollup/plugin-node-resolve to v16 (#18968) (62fad6d)

Code Refactoring

make internal invoke event to use the same interface with handleInvoke (#18902) (27f691b)
simplify manifest plugin code (#18890) (1bfe21b)

Tests

test ModuleRunnerTransport invoke API (#18865) (e5f5301)
test output hash changes (#18898) (bfbb130)

`v6.0.3`

Compare Source

Bug Fixes

config: bundle files referenced with imports field (#18887) (2b5926a)
config: make stacktrace path correct when sourcemap is enabled (#18833) (20fdf21)
css: rewrite url when image-set and url exist at the same time (#18868) (d59efd8)
deps: update all non-major dependencies (#18853) (5c02236)
handle postcss load unhandled rejections (#18886) (d5fb653)
html: allow unexpected question mark in tag name (#18852) (1b54e50)
make handleInvoke interface compatible with invoke (#18876) (a1dd396)
make result interfaces for ModuleRunnerTransport[#invoke](https://redirect.github.com/vitejs/vite/issues/invoke) more explicit (#18851) (a75fc31)
merge environments.ssr.resolve with root ssr config (#18857) (3104331)
module-runner: decode uri for file url passed to import (#18837) (88e49aa)
no permission to create vite config file (#18844) (ff47778)
remove CSS import in CJS correctly in some cases (#18885) (690a36f)

Miscellaneous Chores

fix duplicate attributes issue number in comment (#18860) (ffee618)

Code Refactoring

fix logic errors found by no-unnecessary-condition rule (#18891) (ea802f8)

`v6.0.2`

Compare Source

Fea

Configuration

📅 Schedule: Branch creation - "after 1am and before 5am every weekend" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

coderabbitai · 2025-08-02T01:52:26Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

Review comments: Directly reply to a review comment made by CodeRabbit. Example:
- I pushed a fix in commit <commit_id>, please review it.
- Explain this complex logic.
- Open a follow-up GitHub issue for this discussion.
Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
- @coderabbitai explain this code block.
PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
- @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
- @coderabbitai read src/utils.ts and explain its main purpose.
- @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Join our Discord community for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR comments)

@coderabbitai pause to pause the reviews on a PR.
@coderabbitai resume to resume the paused reviews.
@coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
@coderabbitai full review to do a full review from scratch and review all the files again.
@coderabbitai summary to regenerate the summary of the PR.
@coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
@coderabbitai resolve resolve all the CodeRabbit review comments.
@coderabbitai configuration to show the current CodeRabbit configuration for the repository.
@coderabbitai help to get help.

Other keywords and placeholders

Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (`.coderabbit.yaml`)

You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
Please see the configuration documentation for more information.
If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

Visit our Documentation for detailed information on how to use CodeRabbit.
Join our Discord Community to get help, request features, and share feedback.
Follow us on X/Twitter for updates and announcements.

github-actions · 2025-08-02T01:52:32Z

Thank you for following the naming conventions! 🙏

BREAKING CHANGE: updated dependencies to major versions

renovate bot added the c: dependencies Pull requests that adds/updates a dependency label Aug 2, 2025

renovate bot requested a review from prisis as a code owner August 2, 2025 01:52

renovate bot added the c: dependencies Pull requests that adds/updates a dependency label Aug 2, 2025

build(deps): update vite to v6

356dcfe

BREAKING CHANGE: updated dependencies to major versions

renovate bot force-pushed the renovate/major-6-vite branch from e4efc78 to 356dcfe Compare August 9, 2025 01:20

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

build(deps): update vite to v6 (major) #923

build(deps): update vite to v6 (major) #923

Uh oh!

renovate bot commented Aug 2, 2025 •

edited

Loading

Uh oh!

coderabbitai bot commented Aug 2, 2025 •

edited

Loading

Review skipped

Chat

Support

CodeRabbit Commands (Invoked using PR comments)

Other keywords and placeholders

CodeRabbit Configuration File (`.coderabbit.yaml`)

Documentation and Community

Uh oh!

github-actions bot commented Aug 2, 2025 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

build(deps): update vite to v6 (major) #923

Are you sure you want to change the base?

build(deps): update vite to v6 (major) #923

Uh oh!

Conversation

renovate bot commented Aug 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

Features

Bug Fixes

Performance Improvements

Documentation

Code Refactoring

Miscellaneous Chores

Beta Changelogs

6.1.0-beta.2 (2025-02-04)

6.1.0-beta.1 (2025-02-04)

6.1.0-beta.0 (2025-01-24)

⚠ BREAKING CHANGES

Bug Fixes

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Performance Improvements

Bug Fixes

Reverts

Miscellaneous Chores

Tests

Bug Fixes

Bug Fixes

Miscellaneous Chores

Code Refactoring

Tests

Bug Fixes

Miscellaneous Chores

Code Refactoring

Fea

Configuration

Uh oh!

coderabbitai bot commented Aug 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Chat

Support

CodeRabbit Commands (Invoked using PR comments)

Other keywords and placeholders

CodeRabbit Configuration File (.coderabbit.yaml)

Documentation and Community

Uh oh!

github-actions bot commented Aug 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

renovate bot commented Aug 2, 2025 •

edited

Loading

coderabbitai bot commented Aug 2, 2025 •

edited

Loading

CodeRabbit Configuration File (`.coderabbit.yaml`)

github-actions bot commented Aug 2, 2025 •

edited

Loading