chore(deps): update dependency vite to v8.3.4 by renovate[bot] · Pull Request #806 · freeCodeCamp/ui

renovate · 2026-10-18T18:32:45Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
vite (source)	`8.0.1` → `8.3.4`

Release Notes

vitejs/vite (vite)

`v8.3.4`

Compare Source

Features

bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
client: skip rewriting unchanged adopted styles (#23697) (fa71469)
css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
deps: update all non-major dependencies (#23648) (8a4c19c)
deps: update rolldown-related dependencies (#23649) (794516d)
dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
don't treat modules ending with js-like query as js (#23687) (fcb6f12)
html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
optimizer: scan deep imports with custom extensions (#23678) (8579189)
remove input option unescaping for now (#23694) (facc2fb)
server: match static aliases on path boundaries (#23643) (b28db28)
watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

`v8.3.3`

Compare Source

Bug Fixes

deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

`v8.3.2`

Compare Source

Bug Fixes

build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)
bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)
bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)
deps: update all non-major dependencies (#23601) (9944fa6)
deps: update rolldown-related dependencies (#23602) (88c1741)
html: resolve percent-encoded srcset urls (#23609) (53f1ce7)
limit size of object and array printing via forwardConsole (#23565) (e64a587)
merge build.rolldownOptions.output.minify correctly (#23536) (bba3bb8)
optimize-deps: avoid "unsupported" warnings for browser:false mappings (#23590) (5e4b9ca)
optimizer: preserve excluded optional peer require fallbacks (#23600) (a2bd6fa)
pass queries to renderBuiltUrl (#23586) (744269e)
server: handle file watcher errors without crashing (#23503) (6894f5c)
server: release previous environments after initialization (#23499) (5a3a010)
ssr: encode whitespace in module runner sourceURL (#23513) (bbc8812)
worker: align worker urls in client and server when using terser (#23614) (24bd331)

Performance Improvements

avoid encoding intermediate source maps (#23461) (89574f6)
build: avoid quadratic link scan in the preload helper (#23510) (cf5c028)
only register time middleware when debug logging is enabled (#23621) (94d0080)

Documentation

fix dead og-image PNG links in vite6/vite7 changelog entries (#23594) (1929b4c)

Miscellaneous Chores

deps: update vitest monorepo to v5 (#23604) (24339f4)

Code Refactoring

use tinyexec instead of cross-spawn (#23583) (db915e5)

Tests

bundled-dev: accept a rolldown dev runtime with no helper imports (#23606) (634745d)

`v8.3.1`

Compare Source

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)
deps: update all non-major dependencies (#23537) (e8990c4)
deps: update rolldown-related dependencies (#23483) (9aecbbf)
handle server.ws: false in mergeConfig (#23511) (f68c0d5)
merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)
optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)
optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)
server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)
sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

merge prereleases in changelog (#23466) (99bd9d1)
optimizer: add debug log when waiting for dep before init (#23566) (63567c7)
update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

assets regexp use non-capture (#23491) (f4b4431)
remove duplicate configurations (#23532) (9abd99b)
replace find with some (#23554) (af7cdf6)

`v8.3.0`

Compare Source

Features

build: avoid settling seen preload dependencies for performance (#23446) (e6f6b3e)
devtools: enable dev server integration (#23333) (68aeb8a)
accept Rolldown watch options in server.watch (#23133) (1b5cfe3)
add closeServer and closePreviewServer hooks (#23110) (e17d2d5)
add top-level tsconfig option (#23310) (93164c3)
add warning for unsupported hooks in plugin returned from applyToEnvironment hook (#23191) (fdef04f)
cli: support naming the CPU profile via --profile [name] (#23042) (a500dee)
config: warn on named imports from JSON modules (#23378) (472385e)
css: minify style tag (#23183) (8156684)
searched params attached to workers are now preserved (#22280) (517b97f)
support subpath imports in dynamic import statements (#23185) (b78e2f1)
use import.meta.ROLLDOWN_FILE_URL_* for assets in JS (#22888) (4366ac4)
use import.meta.ROLLDOWN_FILE_URL_* for other plugins (#22894) (e38f29e)
worker: remove worker chunk if it's detected that it's not referenced (#22473) (924997a)

Bug Fixes

handle CRLF line endings in code frame positions (#23219) (9913672)
only treat whole node_modules path segments as dependencies (fix #17467) (#23437) (ef0dc17)
build: keep hash placeholders as-is in resolveFileUrl hook (#23422) (e8d6a4d)
bundled-dev: mark payload delivered on client report (#23373) (a6d43bc)
deps: update all non-major dependencies (#23445) (fc7c104)
html: don't inline preload link targets (fix #13355) (#23387) (12e709c)
resolve the actual package root in findNearestMainPackageData for nested package.json (#23356) (8492422)
shortcuts extend error (#23447) (4ec58d1)
config: close bundles when generation fails (#23256) (6bacc95)
css: keep newline-separated srcset candidates intact (#23265) (4f9d2f4)
deps: update all non-major dependencies (#23337) (d550815)
deps: update all non-major dependencies (#23404) (238ad81)
deps: update rolldown-related dependencies (#23338) (76e8082)
deps: update rolldown-related dependencies (#23405) (b882566)
dev: run closeBundle after buildEnd failure (#23165) (8cb872e)
hmr: handle import.meta.hot.invalidate in virtual module (#23171) (6162968)
utils: handle dot in srcset density descriptor (#23346) (b50e1b4)
utils: match timestamp query parameter with proper delimiters (#23364) (41f3c6f)

Performance Improvements

proxy: pre-compile context matchers at server creation (#23263) (8abf700)

Miscellaneous Chores

introducing @e18e/eslint-plugin (#23357) (f794133)
remove unnecessary comment (#23448) (b919a1a)
delete unused PluginContainerOptions (#23382) (ee64401)
use oxfmt sortImports (#23319) (97ad042)

Code Refactoring

delete unused esbuildPlugin (#23381) (f40efef)
exclude postfix from __VITE_ASSET__ (#22886) (a6c08e1)
remove HmrUrl concept (#23172) (67a6807)
use urlId of import.meta.ROLLDOWN_FILE_URL in wasm plugin (#22962) (92bd2a7)

Tests

add renderBuiltUrl change changes hash (#23118) (0291408)

Beta Changelogs

Please refer to CHANGELOG.md for details.

`v8.2.2`

Compare Source

Features

build: avoid settling seen preload dependencies for performance (#23446) (e6f6b3e)
devtools: enable dev server integration (#23333) (68aeb8a)
accept Rolldown watch options in server.watch (#23133) (1b5cfe3)
add closeServer and closePreviewServer hooks (#23110) (e17d2d5)
add top-level tsconfig option (#23310) (93164c3)
add warning for unsupported hooks in plugin returned from applyToEnvironment hook (#23191) (fdef04f)
cli: support naming the CPU profile via --profile [name] (#23042) (a500dee)
config: warn on named imports from JSON modules (#23378) (472385e)
css: minify style tag (#23183) (8156684)
searched params attached to workers are now preserved (#22280) (517b97f)
support subpath imports in dynamic import statements (#23185) (b78e2f1)
use import.meta.ROLLDOWN_FILE_URL_* for assets in JS (#22888) (4366ac4)
use import.meta.ROLLDOWN_FILE_URL_* for other plugins (#22894) (e38f29e)
worker: remove worker chunk if it's detected that it's not referenced (#22473) (924997a)

Bug Fixes

handle CRLF line endings in code frame positions (#23219) (9913672)
only treat whole node_modules path segments as dependencies (fix #17467) (#23437) (ef0dc17)
build: keep hash placeholders as-is in resolveFileUrl hook (#23422) (e8d6a4d)
bundled-dev: mark payload delivered on client report (#23373) (a6d43bc)
deps: update all non-major dependencies (#23445) (fc7c104)
html: don't inline preload link targets (fix #13355) (#23387) (12e709c)
resolve the actual package root in findNearestMainPackageData for nested package.json (#23356) (8492422)
shortcuts extend error (#23447) (4ec58d1)
config: close bundles when generation fails (#23256) (6bacc95)
css: keep newline-separated srcset candidates intact (#23265) (4f9d2f4)
deps: update all non-major dependencies (#23337) (d550815)
deps: update all non-major dependencies (#23404) (238ad81)
deps: update rolldown-related dependencies (#23338) (76e8082)
deps: update rolldown-related dependencies (#23405) (b882566)
dev: run closeBundle after buildEnd failure (#23165) (8cb872e)
hmr: handle import.meta.hot.invalidate in virtual module (#23171) (6162968)
utils: handle dot in srcset density descriptor (#23346) (b50e1b4)
utils: match timestamp query parameter with proper delimiters (#23364) (41f3c6f)

Performance Improvements

proxy: pre-compile context matchers at server creation (#23263) (8abf700)

Miscellaneous Chores

introducing @e18e/eslint-plugin (#23357) (f794133)
remove unnecessary comment (#23448) (b919a1a)
delete unused PluginContainerOptions (#23382) (ee64401)
use oxfmt sortImports (#23319) (97ad042)

Code Refactoring

delete unused esbuildPlugin (#23381) (f40efef)
exclude postfix from __VITE_ASSET__ (#22886) (a6c08e1)
remove HmrUrl concept (#23172) (67a6807)
use urlId of import.meta.ROLLDOWN_FILE_URL in wasm plugin (#22962) (92bd2a7)

Tests

add renderBuiltUrl change changes hash (#23118) (0291408)

Beta Changelogs

8.3.0-beta.1 (2026-09-07)

See 8.3.0-beta.1 changelog

8.3.0-beta.0 (2026-09-02)

See 8.3.0-beta.0 changelog

`v8.2.1`

Compare Source

Bug Fixes

build: make client chunkImportMap work with sharedPlugins: true (#23184) (15f0307)
bundled-dev: inject client script tag before chunk scripts (#23161) (eac0cc8)
css: don't re-run lightningcss visitor during minify (fix #23146) (#23147) (de041a7)
deps: update all non-major dependencies (#23136) (14454fd)
deps: update rolldown-related dependencies (#23070) (7ac6f7f)
don't mutate the user config when resolving the lib entry from the top-level input (#23135) (b4bf596)
handle shebang ending with uncommon line terminators (#23038) (17f7b2f)
server: use a random port when port is 0 (#23158) (fddf4ea)

Performance Improvements

css: look up pure CSS chunks through a Set (#23114) (1331b0b)

Documentation

build: fix incomplete @default for build.minify (#23177) (ef02435)

Miscellaneous Chores

deps: update dependency rolldown-plugin-dts to ^0.28.0 (#23137) (4adc1e7)
deps: update dependency strip-literal to v4 (#23140) (9db65ce)

Code Refactoring

bundled-dev: avoid injecting server values in the bundle (#22967) (23b8a08)
bundled-dev: remove rolldown lazy stub module workaround (#23129) (e72036e)

Tests

bundled-dev: enable sourcemap playgrounds (#23080) (c2155fe)
reduce logs (#23138) (7673c02)

`v8.2.0`

Compare Source

Features

add input to server.fs.allow (#23035) (95a3cda)
bundled-dev: reload once after rebuild instead of via the fallback page (#23106) (b24381d)
bundled-dev: support worker file update accepted by HMR (#23068) (0d04351)
config: include column in config incompatibility location (#23064) (8a24572)
dev: resolve interface name for explicit host in network URLs (#22965) (3ac77d9)
add input option (#22642) (9beae37)
config: warn features incompatible with native loader in bundle loader (#22850) (05302b0)
css: export PostCSS config type for type-safe configs (#22792) (302c755)
dev: label network URLs with their interface name (#22830) (78accc4)
optimizer: support aube lockfile (#22813) (6319827)
optimizer: support nub lockfile (#22891) (65d3604)
update rolldown-related dependencies and use client-side HMR in bundled-dev (#22961) (960e9ef)
wasm: expand test suite, unwrap WebAssembly.Global and enable js-string builtins (#22674) (9e79b51)

Bug Fixes

bundledDev: print build errors to the terminal when an HMR update fails (#23024) (41c4658)
deps: update all non-major dependencies (#23069) (4c07b74)
hmr: preserve environment snapshot during server restart (#22992) (b1186c3)
importAnalysis: interop imports injected into optimized dep files by plugins (#23029) (8c2a87d)
module-runner: keep stack trace interception working when Object.prototype is frozen (#23073) (599c5b0)
server: strip base in indexHtml module graph lookup (#22932) (fa005d1)
support resolving top-level input option with plugins (#23101) (41df81a)
build: map CSS chunks in chunk import maps (fix #22946) (#22947) (e16ff3a)
config: exclude virtual modules from native config compat check (#22979) (2ced1fe)
css: rewrite urls in OnceExit-injected content (#22983) (abb793e)
deps: update all non-major dependencies (#22985) (04f345b)
deps: update dependency magic-string to v1 (#22998) (c60b4d7)
hmr: remove hot data after prune (#23002) (be96316)
resolve root to real path (#22832) (55bba7b)

Performance Improvements

config: skip native config compat check when warning is ignored (#23000) (18535d1)
optimizer: check popular package manager lockfiles first (#22909) (14fcb66)

Documentation

config: correct cacheDir default fallback description (#23060) (aafa103)
remove @experimental from resolve.tsconfigPaths JSDoc (#23006) (961643a)

Miscellaneous Chores

fix ts erros in test cases (#22972) (f654769)

Tests

config CJS module vars in ESM case (#23010) (d8cd388)

Beta Changelogs

8.2.0-beta.0 (2026-07-22)

See 8.2.0-beta.0 changelog

`v8.1.6`

Compare Source

Please refer to CHANGELOG.md for details.

`v8.1.5`

Compare Source

Features

add input to server.fs.allow (#23035) (95a3cda)
bundled-dev: reload once after rebuild instead of via the fallback page (#23106) (b24381d)
bundled-dev: support worker file update accepted by HMR (#23068) (0d04351)
config: include column in config incompatibility location (#23064) (8a24572)
dev: resolve interface name for explicit host in network URLs (#22965) (3ac77d9)
add input option (#22642) (9beae37)
config: warn features incompatible with native loader in bundle loader (#22850) (05302b0)
css: export PostCSS config type for type-safe configs (#22792) (302c755)
dev: label network URLs with their interface name (#22830) (78accc4)
optimizer: support aube lockfile (#22813) (6319827)
optimizer: support nub lockfile (#22891) (65d3604)
update rolldown-related dependencies and use client-side HMR in bundled-dev (#22961) (960e9ef)
wasm: expand test suite, unwrap WebAssembly.Global and enable js-string builtins (#22674) (9e79b51)

Bug Fixes

bundledDev: print build errors to the terminal when an HMR update fails (#23024) (41c4658)
deps: update all non-major dependencies (#23069) (4c07b74)
hmr: preserve environment snapshot during server restart (#22992) (b1186c3)
importAnalysis: interop imports injected into optimized dep files by plugins (#23029) (8c2a87d)
module-runner: keep stack trace interception working when Object.prototype is frozen (#23073) (599c5b0)
server: strip base in indexHtml module graph lookup (#22932) (fa005d1)
support resolving top-level input option with plugins (#23101) (41df81a)
build: map CSS chunks in chunk import maps (fix #22946) (#22947) (e16ff3a)
config: exclude virtual modules from native config compat check (#22979) (2ced1fe)
css: rewrite urls in OnceExit-injected content (#22983) (abb793e)
deps: update all non-major dependencies (#22985) (04f345b)
deps: update dependency magic-string to v1 (#22998) (c60b4d7)
hmr: remove hot data after prune (#23002) (be96316)
resolve root to real path (#22832) (55bba7b)

Performance Improvements

config: skip native config compat check when warning is ignored (#23000) (18535d1)
optimizer: check popular package manager lockfiles first (#22909) (14fcb66)

Documentation

config: correct cacheDir default fallback description (#23060) (aafa103)
remove @experimental from resolve.tsconfigPaths JSDoc (#23006) (961643a)

Miscellaneous Chores

fix ts erros in test cases ([#

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-10-18T18:33:11Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	vite@8.0.1 ⏵ 8.3.4		⁺³¹		^-1

View full report

chore(deps): update dependency vite to v8.3.4

5774d36

renovate Bot requested a review from a team as a code owner October 18, 2026 18:32

renovate Bot added the renovate label Oct 18, 2026

renovate Bot enabled auto-merge (squash) October 18, 2026 18:32

renovate-approve-2 Bot approved these changes Oct 18, 2026

View reviewed changes

renovate-approve Bot approved these changes Oct 18, 2026

View reviewed changes

renovate Bot merged commit 853b9ba into main Oct 18, 2026
8 checks passed

renovate Bot deleted the renovate/vite-8.x branch October 18, 2026 22:27

Navigation Menu

Repository navigation

chore(deps): update dependency vite to v8.3.4 - #806

chore(deps): update dependency vite to v8.3.4#806
renovate[bot] merged 1 commit into
mainfrom
renovate/vite-8.x

renovate Bot commented Oct 18, 2026

Uh oh!

socket-security Bot commented Oct 18, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Oct 18, 2026

Release Notes

Features

Bug Fixes

Performance Improvements

Code Refactoring

Bug Fixes

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Bug Fixes

Miscellaneous Chores

Code Refactoring

Features

Bug Fixes

Performance Improvements

Miscellaneous Chores

Code Refactoring

Tests

Beta Changelogs

8.3.0-beta.1 (2026-09-07)

8.3.0-beta.0 (2026-09-02)

Features

Bug Fixes

Performance Improvements

Miscellaneous Chores

Code Refactoring

Tests

Beta Changelogs

8.3.0-beta.1 (2026-09-07)

8.3.0-beta.0 (2026-09-02)

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Features

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

Tests

Beta Changelogs

8.2.0-beta.0 (2026-07-22)

Features

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

Configuration

Uh oh!

socket-security Bot commented Oct 18, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants