Skip to content

Bump vite from 6.4.1 to 8.0.3 - #12

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vite-8.0.3
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vite-8.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps vite from 6.4.1 to 8.0.3.

Release notes

Sourced from vite's releases.

create-vite@8.0.3

Please refer to CHANGELOG.md for details.

v8.0.3

Please refer to CHANGELOG.md for details.

create-vite@8.0.2

Please refer to CHANGELOG.md for details.

v8.0.2

Please refer to CHANGELOG.md for details.

create-vite@8.0.1

Please refer to CHANGELOG.md for details.

v8.0.1

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.1

Please refer to CHANGELOG.md for details.

create-vite@8.0.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0-beta.18

Please refer to CHANGELOG.md for details.

v8.0.0-beta.17

Please refer to CHANGELOG.md for details.

v8.0.0-beta.16

Please refer to CHANGELOG.md for details.

v8.0.0-beta.15

Please refer to CHANGELOG.md for details.

v8.0.0-beta.14

Please refer to CHANGELOG.md for details.

v8.0.0-beta.13

Please refer to CHANGELOG.md for details.

v8.0.0-beta.12

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.0.3 (2026-03-26)

Features

Bug Fixes

  • html: cache unfiltered CSS list to prevent missing styles across entries (#22017) (5464190)
  • module-runner: handle non-ascii characters in base64 sourcemaps (#21985) (77c95bf)
  • module-runner: skip re-import if the runner is closed (#22020) (ee2c2cd)
  • optimizer: scan is not resolving sub path import if used in a glob import (#22018) (ddfe20d)
  • ssr: ssrTransform incorrectly rewrites meta identifier inside import.meta when a binding named meta exists (#22019) (cff5f0c)

Miscellaneous Chores

Tests

8.0.2 (2026-03-23)

Features

Bug Fixes

Miscellaneous Chores

  • deps: update dependency @​vitejs/devtools to ^0.1.5 (#21992) (b2dd65b)

8.0.1 (2026-03-19)

Features

Bug Fixes

  • bundled-dev: properly disable inlineConst optimization (#21865) (6d97142)
  • css: lightningcss minify failed when build.target: 'es6' (#21933) (5fcce46)
  • deps: update all non-major dependencies (#21878) (6dbbd7f)
  • dev: always use ESM Oxc runtime (#21829) (d323ed7)
  • dev: handle concurrent restarts in _createServer (#21810) (40bc729)
  • handle + symbol in package subpath exports during dep optimization (#21886) (86db93d)
  • improve no-cors request block error (#21902) (5ba688b)
  • use precise regexes for transform filter to avoid backtracking (#21800) (dbe41bd)
  • worker: require(json) result should not be wrapped (#21847) (0672fd2)

... (truncated)

Commits
  • 6a34ac3 fix(deps): update all non-major dependencies (#21096)
  • 02ceaec chore(deps): update dependency @​rollup/plugin-commonjs to v29 (#21099)
  • 572aaca release: v7.2.2
  • 728c8ee fix: revert "refactor: use fs.cpSync (#21019)" (#21081)
  • a532e68 release: v7.2.1
  • 82d2d6c fix(worker): some worker asset was missing (#21074)
  • f83264f refactor(build): rename indexOfMatchInSlice to findPreloadMarker (#21054)
  • 8293de0 release: v7.2.0
  • 2833c55 fix(types): add undefined to optional properties for exactOptionalProperties ...
  • e3a6a83 chore(deps): update rolldown-related dependencies (#21047)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.4.1 to 8.0.3.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.0.3/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency updates label Apr 1, 2026
@dependabot
dependabot Bot requested a review from Varnasr as a code owner April 1, 2026 05:41
@dependabot dependabot Bot added the dependencies Dependency updates label Apr 1, 2026
Varnasr added a commit that referenced this pull request Sep 23, 2026
#13, #12, #11) (#17)

## What does this PR do?

Dependabot opened these three as separate pull requests and two of them
failed CI, which reads as "these majors are unsafe". They are not.
**`@vitejs/plugin-react` 4 does not support Vite 8**, so each bump fails
without the other and passes with it. Taken together they build:
verified on this machine, 2,462 modules transformed, build clean, output
650 kB JS and 46 kB CSS.

That is why #12 and #11 are red and #13 is green, and why merging them
one at a time would have broken `main`.

**The build also surfaced a defect that is invisible in the source.**
`src/index.css` opened with `@import "tailwindcss"` and put the Google
Fonts import on the line after it. Tailwind's import expands to rules,
and an `@import` that follows a rule is invalid and is dropped — so
Inter and Poppins never loaded and the site rendered in a system
fallback. Vite 8's CSS optimizer says so out loud where Vite 6 did not.
The font import is first now, and the compiled stylesheet grows by
exactly the rule that used to be discarded.

Supersedes #13, #12 and #11.

## Type of change

- [x] Bug fix
- [x] Documentation

## Checklist

- [x] `npm install` then `npm run build` clean on Node 22.22.2
- [x] Font import verified present in the built CSS, which it was not
before

🤖 Generated with [Claude Code](https://claude.com/claude-code)

https://claude.ai/code/session_01MrvR2NXsJFVRCeJZFCPuNL

---
_Generated by [Claude
Code](https://claude.ai/code/session_01MrvR2NXsJFVRCeJZFCPuNL)_

Co-authored-by: Claude <noreply@anthropic.com>
@Varnasr Varnasr closed this Sep 23, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 23, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/vite-8.0.3 branch September 23, 2026 18:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant