Skip to content

deps: bump the vite group across 1 directory with 2 updates - #24

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/vite-76f7ed7ab3
Closed

deps: bump the vite group across 1 directory with 2 updates#24
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/vite-76f7ed7ab3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the vite group with 2 updates in the / directory: vite and vite-plugin-svgr.

Updates vite from 6.4.3 to 8.1.5

Release notes

Sourced from vite's releases.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.0.16

Please refer to CHANGELOG.md for details.

v8.0.15

Please refer to CHANGELOG.md for details.

v8.0.14

Please refer to CHANGELOG.md for details.

v8.0.13

Please refer to CHANGELOG.md for details.

v8.0.12

Please refer to CHANGELOG.md for details.

v8.0.11

Please refer to CHANGELOG.md for details.

v8.0.10

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.1.5 (2026-07-16)

Bug Fixes

  • bundled-dev: avoid duplicated buildEnd (#22931) (8100320)
  • client: overlay error message format align rolldown (#22869) (5a72b87)
  • deps: update all non-major dependencies (#22921) (fef682d)
  • deps: update rolldown-related dependencies (#22922) (3c345e4)
  • module-runner: don't crash stack-trace source mapping when globalThis.Buffer is absent (#22945) (f8b38e3)
  • optimizer: respect importer module format for dynamic import interop with CJS deps (#22951) (6c08c39)
  • ssr: scope switch-case declarations to the switch, not the function (#22893) (b59a73f)

Documentation

  • build: fix incorrect @default for build.cssMinify (#22948) (c88c236)
  • build: fix incorrect @default for build.lib.formats (#22911) (369ed60)

Tests

  • avoid scanner scanning all files under __tests__ (#22912) (c961cae)

8.1.4 (2026-07-09)

Features

Bug Fixes

  • build: add workaround for building on stackblitz (#22840) (575c32c)
  • build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)
  • deps: update all non-major dependencies (#22865) (d4295a9)
  • deps: update rolldown-related dependencies (#22866) (7cf07e4)
  • html: avoid backtracking in import-only check (#22848) (b5868c0)
  • optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)
  • ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)
  • strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

Miscellaneous Chores

  • deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

Code Refactoring

Tests

... (truncated)

Commits
  • 5e7fe12 release: v8.1.5
  • 6c08c39 fix(optimizer): respect importer module format for dynamic import interop wit...
  • 5a72b87 fix(client): overlay error message format align rolldown (#22869)
  • f8b38e3 fix(module-runner): don't crash stack-trace source mapping when globalThis.Bu...
  • 8100320 fix(bundled-dev): avoid duplicated buildEnd (#22931)
  • c88c236 docs(build): fix incorrect @default for build.cssMinify (#22948)
  • b59a73f fix(ssr): scope switch-case declarations to the switch, not the function (#22...
  • fef682d fix(deps): update all non-major dependencies (#22921)
  • 3c345e4 fix(deps): update rolldown-related dependencies (#22922)
  • 369ed60 docs(build): fix incorrect @default for build.lib.formats (#22911)
  • Additional commits viewable in compare view

Updates vite-plugin-svgr from 4.5.0 to 5.2.0

Release notes

Sourced from vite-plugin-svgr's releases.

v5.2.0

No significant changes

    View changes on GitHub

v5.1.0

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v5.0.0

   🚨 Breaking Changes

    View changes on GitHub
Commits
  • 8ff69f4 5.2.0
  • dfbcb3b build: export cjs entry as callable default
  • 127eea3 chore: upgrade toolchain dependencies
  • 765a674 build: make TypeScript root dirs explicit
  • 9c0bdca ci: add publint workflow
  • 1b19812 build: switch to tsdown for dual-module output
  • 0605cf7 5.1.0
  • f598866 test: fix TypeScript typings
  • 8aadc43 perf: lazy load SVGR dependencies
  • 0ca4f6b fix: correct OxcTransformOptions type to expose jsx options (#144)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 19, 2026
@NAME-ASHWANIYADAV

NAME-ASHWANIYADAV commented Jun 20, 2026

Copy link
Copy Markdown
Contributor

@markmandel, I suggest we try rebasing this branch to see if it clears the issue. If the problem persists, we can explore alternative solutions

@dependabot dependabot Bot changed the title deps: bump the vite group with 2 updates deps: bump the vite group across 1 directory with 2 updates Jun 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vite-76f7ed7ab3 branch 2 times, most recently from fb1ef46 to d53fad1 Compare June 26, 2026 14:37
@markmandel

markmandel commented Jun 26, 2026

Copy link
Copy Markdown
Member

@markmandel, I suggest we try rebasing this branch to see if it clears the issue. If the problem persists, we can explore alternative solutions

Looks like it's already up to date - not sure there is more to rebase against? 🤔

@NAME-ASHWANIYADAV

NAME-ASHWANIYADAV commented Jun 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

I have go through this in detail and i think the CI is failing because package-lock.json is out of sync with package.json -
the lockfile has stale intermediate dependency versions (e.g., vite@7.3.6, esbuild@0.28.1) that don't match what's expected.
This happened because main has moved ahead significantly since this PR was first created (PRs #12, #25, and several Dependabot security bumps have merged), and the lockfile wasn't properly regenerated during the force-push rebases

@markmandel I suggest to run the command @dependabot recreate

@dependabot @github

dependabot Bot commented on behalf of github Jun 27, 2026

Copy link
Copy Markdown
Contributor Author

Sorry, only users with push access can use that command.

1 similar comment
@dependabot @github

dependabot Bot commented on behalf of github Jun 27, 2026

Copy link
Copy Markdown
Contributor Author

Sorry, only users with push access can use that command.

@markmandel

markmandel commented Jun 28, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vite-76f7ed7ab3 branch from d53fad1 to d587b99 Compare June 28, 2026 20:48
@NAME-ASHWANIYADAV

NAME-ASHWANIYADAV commented Jun 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

I do suggest we should close this pr because @kinvolk/headlamp-plugin@0.14.x has transitive dependencies
(vite-plugin-node-polyfills, @storybook/react-vite, @vitejs/plugin-react, etc.) that don't declare vite 8 in theirpeerDependencies. We need to wait for the headlamp plugin SDK to add vite 8 support before we can bump.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vite-76f7ed7ab3 branch 3 times, most recently from ddcb356 to ec09820 Compare July 15, 2026 18:45
@dependabot
deps: bump the vite group across 1 directory with 2 updates
c5ff6e8 
Bumps the vite group with 2 updates in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [vite-plugin-svgr](https://github.com/pd4d10/vite-plugin-svgr).


Updates `vite` from 6.4.3 to 8.1.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.5/packages/vite)

Updates `vite-plugin-svgr` from 4.5.0 to 5.2.0
- [Release notes](https://github.com/pd4d10/vite-plugin-svgr/releases)
- [Commits](pd4d10/vite-plugin-svgr@v4.5.0...v5.2.0)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.0.16
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: vite
- dependency-name: vite-plugin-svgr
  dependency-version: 5.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: vite
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vite-76f7ed7ab3 branch from ec09820 to c5ff6e8 Compare July 31, 2026 09:44
@markmandel

markmandel commented Aug 2, 2026

Copy link
Copy Markdown
Member

Trust your judgement, and closing then 😄

@markmandel markmandel closed this Aug 2, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 2, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/vite-76f7ed7ab3 branch August 2, 2026 21:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@NAME-ASHWANIYADAV @markmandel