[dependabot]

Bumps vite from 8.3.2 to 8.3.3.

Release notes

Sourced from vite's releases.

v8.3.3

Bug Fixes

• deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
• html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
• server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
• server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

Changelog

Sourced from vite's changelog.

8.3.3 (2026-10-06)

Bug Fixes

• deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
• html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
• server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
• server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

Commits

• fea5b21 release: v8.3.3 (#23657)
• c3e06f9 fix(server): store ids to safeModulePaths rather than URLs (#23656)
• ba8b7ab fix(server): check fs.serve for ?vite-wasm-instance (#23655)
• 22fd1d5 fix(deps): update launch-editor to v2.14.2 (#23654)
• 7dafd8e fix(html): filename passed to transformIndexHtml should not include queries (...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 7401f08f-30b2-4b4f-8002-b99a9e48d6b7

📥 Commits

Reviewing files that changed from the base of the PR and between d0f2e69 and ffd22ce.

⛔ Files ignored due to path filters: 1

• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing: 1

• package.json

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 8 remain after this review.

📜 Recent review details

⏰ Context from checks skipped due to timeout: 6

• GitHub Check: Socket Security: Pull Request Alerts
• GitHub Check: Workflow security (zizmor)
• GitHub Check: Test (Node 24)
• GitHub Check: Test (Node 22)
• GitHub Check: Action self-check
• GitHub Check: Analyze (javascript-typescript)

⚠️ CI failures not shown inline: 2

GitHub Actions: CI / 3_Action self-check.txt: chore(deps-dev): bump vite from 8.3.2 to 8.3.3

Conclusion: failure

View job details

##[group]Run node "$GITHUB_ACTION_PATH/action/check.mjs" "$RUNNER_TEMP/go-tokenless-plan.json" "$MODE"
 �[36;1mnode "$GITHUB_ACTION_PATH/action/check.mjs" "$RUNNER_TEMP/go-tokenless-plan.json" "$MODE"�[0m
 shell: /usr/bin/bash --noprofile --norc -e -o pipefail {0}
 env:
   MODE: check
 ##[endgroup]
 ##[warning]go-tokenless: normalise repository.url to git+https://github.com/continuous-actions/go-tokenless.git
 ❌ npm publishing still depends on a stored token. Run `npx go-tokenless apply` to fix it.
 ##[error]Process completed with exit code 1.

GitHub Actions: CI / Action self-check: chore(deps-dev): bump vite from 8.3.2 to 8.3.3

Conclusion: failure

View job details

##[group]Run node "$GITHUB_ACTION_PATH/action/check.mjs" "$RUNNER_TEMP/go-tokenless-plan.json" "$MODE"
 �[36;1mnode "$GITHUB_ACTION_PATH/action/check.mjs" "$RUNNER_TEMP/go-tokenless-plan.json" "$MODE"�[0m
 shell: /usr/bin/bash --noprofile --norc -e -o pipefail {0}
 env:
   MODE: check
 ##[endgroup]
 ##[warning]go-tokenless: normalise repository.url to git+https://github.com/continuous-actions/go-tokenless.git
 ❌ npm publishing still depends on a stored token. Run `npx go-tokenless apply` to fix it.
 ##[error]Process completed with exit code 1.

🔇 Additional comments: 1

package.json: 1

36-36: LGTM!

📝 Summary

Summary by CodeRabbit

• Chores
  • Updated the Vite development tooling to version 8.3.3.

The development dependency vite was updated from version 8.3.2 to 8.3.3.

Changes: Vite Dependency Update

Layer / File(s)	Summary
Update Vite version package.json	The vite development dependency changed from version 8.3.2 to 8.3.3.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~5 minutes

Change: Other

Suggested reviewers: markalex1234

Merge Risk: ⚪ Minimal · up to ffd22

No actionable merge-blocking risk is identified.

Architecture risk: 🔵 Low · up to ffd22

The change affects 1 system.

Changed systems: package.json

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — package.json (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

• observed — Modified behavior in package.json: Updated the vite development dependency from version 8.3.2 to 8.3.3.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title clearly identifies the development dependency and the exact version update from Vite 8.3.2 to 8.3.3.
Description check		The description directly explains the Vite dependency update and lists the fixes included in the new version.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches: 💡 1

🛠️ Fix failing CI checks: 💡

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	vite@​8.3.2 ⏵ 8.3.3	+1	+19	+1

View full report

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.