Skip to content

build(deps): bump esbuild, vite, electron-vite and vitest#8

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-41248a7557
Open

build(deps): bump esbuild, vite, electron-vite and vitest#8
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-41248a7557

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 22, 2026

Removes esbuild. It's no longer used after updating ancestor dependencies esbuild, vite, electron-vite and vitest. These dependencies need to be updated together.

Removes esbuild

Updates vite from 5.4.21 to 8.0.9

Release notes

Sourced from vite's releases.

v8.0.9

Please refer to CHANGELOG.md for details.

v8.0.8

Please refer to CHANGELOG.md for details.

v8.0.7

Please refer to CHANGELOG.md for details.

v8.0.6

Please refer to CHANGELOG.md for details.

v8.0.5

Please refer to CHANGELOG.md for details.

v8.0.4

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v8.0.3

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v8.0.2

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v8.0.1

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0-beta.18

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.0.9 (2026-04-20)

Features

Bug Fixes

  • allow binding when strictPort is set but wildcard port is in use (#22150) (dfc8aa5)
  • build: emptyOutDir should happen for watch rebuilds (#22207) (ee52267)
  • bundled-dev: reject requests to HMR patch files in non potentially trustworthy origins (#22269) (868f141)
  • css: use unique key for cssEntriesMap to prevent same-basename collision (#22039) (374bb5d)
  • deps: update all non-major dependencies (#22219) (4cd0d67)
  • deps: update all non-major dependencies (#22268) (c28e9c1)
  • detect Deno workspace root (fix #22237) (#22238) (1b793c0)
  • dev: handle errors in watchChange hook (#22188) (fc08bda)
  • optimizer: handle more chars that will be sanitized (#22208) (3f24533)
  • skip fallback sourcemap generation for ?raw imports (#22148) (3ec9cda)

Documentation

Miscellaneous Chores

  • deps: update dependency dotenv-expand to v13 (#22271) (0a3887d)

8.0.8 (2026-04-09)

Features

Bug Fixes

  • avoid dns.getDefaultResultOrder temporary (#22202) (15f1c15)
  • ssr: class property keys hoisting matching imports (#22199) (e137601)

8.0.7 (2026-04-07)

Bug Fixes

  • use sync dns.getDefaultResultOrder instead of dns.promises (#22185) (5c05b04)

8.0.6 (2026-04-07)

Features

Bug Fixes

... (truncated)

Commits
  • ce729f5 release: v8.0.9
  • 605bb97 docs: update build CLI defaults (#22261)
  • c28e9c1 fix(deps): update all non-major dependencies (#22268)
  • 0a3887d chore(deps): update dependency dotenv-expand to v13 (#22271)
  • 868f141 fix(bundled-dev): reject requests to HMR patch files in non potentially trust...
  • 3ec9cda fix: skip fallback sourcemap generation for ?raw imports (#22148)
  • 3f24533 fix(optimizer): handle more chars that will be sanitized (#22208)
  • 1b793c0 fix: detect Deno workspace root (fix #22237) (#22238)
  • fc08bda fix(dev): handle errors in watchChange hook (#22188)
  • 374bb5d fix(css): use unique key for cssEntriesMap to prevent same-basename collision...
  • Additional commits viewable in compare view

Updates electron-vite from 2.3.0 to 5.0.0

Release notes

Sourced from electron-vite's releases.

v5.0.0

Please refer to CHANGELOG.md for details.

v5.0.0-beta.3

Please refer to CHANGELOG.md for details.

v5.0.0-beta.2

Please refer to CHANGELOG.md for details.

v5.0.0-beta.1

Please refer to CHANGELOG.md for details.

v5.0.0-beta.0

Please refer to CHANGELOG.md for details.

v4.0.1

Please refer to CHANGELOG.md for details.

v4.0.0

Please refer to CHANGELOG.md for details.

v4.0.0-beta.0

Please refer to CHANGELOG.md for details.

v3.1.0

Please refer to CHANGELOG.md for details.

v3.1.0-beta.0

Please refer to CHANGELOG.md for details.

v3.0.0

Please refer to CHANGELOG.md for details.

v3.0.0-beta.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from electron-vite's changelog.

v5.0.0 (2025-12-07)

  • feat(config): add build.externalizeDeps and build.bytecode config options to replace externalizeDepsPlugin and bytecodePlugin
  • feat: reporter plugin for isolated builds
  • feat: enhanced string protection
  • feat: add isolatedEntries option for preload and renderer to build entries as standalone bundles #154
  • refactor(config): move the isolateEntries options to the build option
  • refactor: deprecated externalizeDepsPlugin and bytecodePlugin
  • refactor(config)!: remove function resolution for nested config fields
  • refactor(asset): remove redundant path normalization
  • refactor: split electron plugin into preset and validator plugins
  • refactor(config)!: restructure Electron Vite config interfaces
  • refactor(build): simplify build logic
  • refactor: replace JSON.parse/stringify with manual deep clone
  • refactor(bytecodePlugin): improved bytecode bundle generation and made a new string protection plugin
  • refactor(modulePath): better support for tree-shaking and code-splitting
  • refactor: remove Electron 18, 19, 20, 21 build compatilibity target
  • perf(buildReport): exclude node_modules from watch list
  • perf(isolateEntries): transform log
  • perf(isolateEntries): optimize entries transformation
  • perf: build compatibility target for Electron 39
  • perf(plugin): more efficient module filtering via regular expressions
  • perf(plugin): no need to cache sourcemap option
  • perf(plugin): lazily initialize MagicString and remove the redundant pre-check
  • perf(bytecodePlugin): better way to count bytecode chunks
  • perf(plugin): enhance path resolution using import.meta.dirname for ES modules
  • fix(modulePath): rewrite the build input instead of merging
  • fix(asset): normalize imported public asset chunk path
  • fix: avoid duplicate chunk emission
  • fix(modulePath): prevent duplicate asset emission
  • fix(modulePath): support watch mode
  • chore: fix jsdoc
  • chore: improve logging message clarity and consistency
  • chore(deps): update all non-major dependencies
  • chore: update eslint config
  • chore: replace tseslint.config with defineConfig
  • chore: remove redundant external id
  • chore: rename the file esm to esmShim
  • docs: update

v5.0.0-beta.3 (2025-11-01)

See v5.0.0-beta.3 changelog

v5.0.0-beta.2 (2025-10-30)

See v5.0.0-beta.2 changelog

v5.0.0-beta.1 (2025-10-29)

... (truncated)

Commits
  • 91368b6 release: v5.0.0
  • b1fd596 docs: update
  • 438e9e7 chore: fix jsdoc
  • 9eba4df release: v5.0.0-beta.3
  • 465690a refactor(config)!: remove function resolution for nested config fields
  • 6aae378 perf(buildReport): exclude node_modules from watch list
  • 9152dfc fix(modulePath): rewrite the build input instead of merging
  • 0276407 refactor: deprecated externalizeDepsPlugin and bytecodePlugin
  • fe7e631 refactor(config): move the isolateEntries options to the build option
  • 08be346 feat(config): add build.externalizeDeps and build.bytecode config options...
  • Additional commits viewable in compare view

Updates vitest from 2.1.9 to 4.1.5

Release notes

Sourced from vitest's releases.

v4.1.5

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub

v4.1.4

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub

v4.1.3

   🚀 Experimental Features

... (truncated)

Commits
  • e399846 chore: release v4.1.5
  • 7dc6d54 Revert "fix: respect diff config options in soft assertions (#8696)"
  • 9787ded fix: respect diff config options in soft assertions (#8696)
  • 325463a fix(ast-collect): recognize _vi_import prefix in static test discovery (#10...
  • 0e0ff41 feat(coverage): istanbul to support instrumenter option (#10119)
  • 663b99f fix: alias agent reporter to minimal (#10157)
  • 122c25b fix: fix vi.defineHelper called as object method (#10163)
  • 6abd557 feat(api): make test-specification options writable (#10154)
  • 596f739 fix: project color label on html reporter (#10142)
  • 9423dc0 fix: --project negation excludes browser instances (#10131)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vitest since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [esbuild](https://github.com/evanw/esbuild). It's no longer used after updating ancestor dependencies [esbuild](https://github.com/evanw/esbuild), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [electron-vite](https://github.com/alex8088/electron-vite) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). These dependencies need to be updated together.


Removes `esbuild`

Updates `vite` from 5.4.21 to 8.0.9
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.9/packages/vite)

Updates `electron-vite` from 2.3.0 to 5.0.0
- [Release notes](https://github.com/alex8088/electron-vite/releases)
- [Changelog](https://github.com/alex8088/electron-vite/blob/master/CHANGELOG.md)
- [Commits](alex8088/electron-vite@v2.3.0...v5.0.0)

Updates `vitest` from 2.1.9 to 4.1.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 
  dependency-type: indirect
- dependency-name: vite
  dependency-version: 8.0.9
  dependency-type: direct:development
- dependency-name: electron-vite
  dependency-version: 5.0.0
  dependency-type: direct:development
- dependency-name: vitest
  dependency-version: 4.1.5
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants