fix(deps): update vite to v8.3.5 by renovate[bot] · Pull Request #1254 · anolilab/javascript-style-guide

renovate · 2026-10-24T01:41:50Z

This PR contains the following updates:

Package	Change	Age	Confidence
vite (source)	`8.2.0` → `8.3.5`
vite@>=8.0.0 <=8.0.15 (source)	[`>=8.2.0` → `>=8.3.5`](https://renovatebot.com/diffs/npm/vite@>=8.0.0 <=8.0.15/8.2.0/8.3.5)

⚠️ Renovate does not enforce Minimum Release Age for bump, lockfileUpdate, or rollback updates, so these are raised without a Minimum Release Age check. You will need to manually validate the Minimum Release Age for these package(s).

Release Notes

vitejs/vite (vite)

`v8.3.5`

Compare Source

Bug Fixes

build: handle missing chunk import maps (#23777) (8d7623d)
build: include preload dependencies to chunk import map hashing (#23793) (4d16e7c)
bundled-dev: apply server.origin to asset URLs (#23683) (52ba877)
bundled-dev: declare utf-8 charset in fallback page (#23846) (197daf6)
bundled-dev: ignore build.chunkImportMap (#23685) (cfe917d)
bundled-dev: include user import.meta.env.* defines in the import.meta.env object (#23713) (6019aa7)
bundled-dev: map forwarded error stacks through the bundle source maps (#23741) (11fe1e4)
bundled-dev: normalize served output files (#23684) (df4e02c)
bundled-dev: stop hmr propagation at modules that are no longer imported (#23839) (7471e8c)
css: don't fail on a literal % in url() (#23676) (50b382d)
deps: update all non-major dependencies (#23731) (cf80aa5)
deps: update all non-major dependencies (#23826) (77d8373)
deps: update rolldown-related dependencies (#23733) (43f0d05)
deps: update rolldown-related dependencies (#23827) (c2e0418)
optimizer: fall back to yarn.lock for lockfile hash (#23667) (f206096)
optimizer: scan oxc.jsxInject imports (#23758) (38f3cb4)
optimizer: skip patches dir check for yarn.lock fallback (#23725) (8e890e1)
optimizer: skip patches dir hash for nub lockfile (#23761) (a7d5696)
resolve: support subpath imports with multiple # (#23631) (0d86b34)
resolve: update resolve.exports to 2.0.4 (#23739) (4ea708a)
server: handle socket errors on upgrade requests not taken by the HMR server (#23728) (c2c9ef4)
server: only strip base when path matches a full segment (#23641) (3dfde87)

Performance Improvements

ssr: extract inline source maps without a regexp (#23775) (6a02780)

Miscellaneous Chores

migrate to Oxlint (#23746) (5b73935)

Code Refactoring

deps: replace @vercel/detect-agent with std-env (#23744) (ce4293f)
dev: consolidate moduleURL to file path utilities (#23828) (df7b40e)
dev: separate import resolution from URL conversion (#23791) (6116689)
dev: share ModuleURL and BrowserURL conversions (#23790) (446954c)
dev: use ModuleURLs throughout HTML transforms (#23815) (a162990)

`v8.3.4`

Compare Source

Features

bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
client: skip rewriting unchanged adopted styles (#23697) (fa71469)
css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
deps: update all non-major dependencies (#23648) (8a4c19c)
deps: update rolldown-related dependencies (#23649) (794516d)
dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
don't treat modules ending with js-like query as js (#23687) (fcb6f12)
html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
optimizer: scan deep imports with custom extensions (#23678) (8579189)
remove input option unescaping for now (#23694) (facc2fb)
server: match static aliases on path boundaries (#23643) (b28db28)
watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

`v8.3.3`

Compare Source

Bug Fixes

deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

`v8.3.2`

Compare Source

Bug Fixes

build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)
bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)
bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)
deps: update all non-major dependencies (#23601) (9944fa6)
deps: update rolldown-related dependencies (#23602) (88c1741)
html: resolve percent-encoded srcset urls (#23609) (53f1ce7)
limit size of object and array printing via forwardConsole (#23565) (e64a587)
merge build.rolldownOptions.output.minify correctly (#23536) (bba3bb8)
optimize-deps: avoid "unsupported" warnings for browser:false mappings (#23590) (5e4b9ca)
optimizer: preserve excluded optional peer require fallbacks (#23600) (a2bd6fa)
pass queries to renderBuiltUrl (#23586) (744269e)
server: handle file watcher errors without crashing (#23503) (6894f5c)
server: release previous environments after initialization (#23499) (5a3a010)
ssr: encode whitespace in module runner sourceURL (#23513) (bbc8812)
worker: align worker urls in client and server when using terser (#23614) (24bd331)

Performance Improvements

avoid encoding intermediate source maps (#23461) (89574f6)
build: avoid quadratic link scan in the preload helper (#23510) (cf5c028)
only register time middleware when debug logging is enabled (#23621) (94d0080)

Documentation

fix dead og-image PNG links in vite6/vite7 changelog entries (#23594) (1929b4c)

Miscellaneous Chores

deps: update vitest monorepo to v5 (#23604) (24339f4)

Code Refactoring

use tinyexec instead of cross-spawn (#23583) (db915e5)

Tests

bundled-dev: accept a rolldown dev runtime with no helper imports (#23606) (634745d)

`v8.3.1`

Compare Source

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)
deps: update all non-major dependencies (#23537) (e8990c4)
deps: update rolldown-related dependencies (#23483) (9aecbbf)
handle server.ws: false in mergeConfig (#23511) (f68c0d5)
merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)
optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)
optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)
server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)
sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

merge prereleases in changelog (#23466) (99bd9d1)
optimizer: add debug log when waiting for dep before init (#23566) (63567c7)
update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

assets regexp use non-capture (#23491) (f4b4431)
remove duplicate configurations (#23532) (9abd99b)
replace find with some (#23554) (af7cdf6)

`v8.3.0`

Compare Source

Features

build: avoid settling seen preload dependencies for performance (#23446) (e6f6b3e)
devtools: enable dev server integration (#23333) (68aeb8a)
accept Rolldown watch options in server.watch (#23133) (1b5cfe3)
add closeServer and closePreviewServer hooks (#23110) (e17d2d5)
add top-level tsconfig option (#23310) (93164c3)
add warning for unsupported hooks in plugin returned from applyToEnvironment hook (#23191) (fdef04f)
cli: support naming the CPU profile via --profile [name] (#23042) (a500dee)
config: warn on named imports from JSON modules (#23378) (472385e)
css: minify style tag (#23183) (8156684)
searched params attached to workers are now preserved (#22280) (517b97f)
support subpath imports in dynamic import statements (#23185) (b78e2f1)
use import.meta.ROLLDOWN_FILE_URL_* for assets in JS (#22888) (4366ac4)
use import.meta.ROLLDOWN_FILE_URL_* for other plugins (#22894) (e38f29e)
worker: remove worker chunk if it's detected that it's not referenced (#22473) (924997a)

Bug Fixes

handle CRLF line endings in code frame positions (#23219) (9913672)
only treat whole node_modules path segments as dependencies (fix #17467) (#23437) (ef0dc17)
build: keep hash placeholders as-is in resolveFileUrl hook (#23422) (e8d6a4d)
bundled-dev: mark payload delivered on client report (#23373) (a6d43bc)
deps: update all non-major dependencies (#23445) (fc7c104)
html: don't inline preload link targets (fix #13355) (#23387) (12e709c)
resolve the actual package root in findNearestMainPackageData for nested package.json (#23356) (8492422)
shortcuts extend error (#23447) (4ec58d1)
config: close bundles when generation fails (#23256) (6bacc95)
css: keep newline-separated srcset candidates intact (#23265) (4f9d2f4)
deps: update all non-major dependencies (#23337) (d550815)
deps: update all non-major dependencies (#23404) (238ad81)
deps: update rolldown-related dependencies (#23338) (76e8082)
deps: update rolldown-related dependencies (#23405) (b882566)
dev: run closeBundle after buildEnd failure (#23165) (8cb872e)
hmr: handle import.meta.hot.invalidate in virtual module (#23171) (6162968)
utils: handle dot in srcset density descriptor (#23346) (b50e1b4)
utils: match timestamp query parameter with proper delimiters (#23364) (41f3c6f)

Performance Improvements

proxy: pre-compile context matchers at server creation (#23263) (8abf700)

Miscellaneous Chores

introducing @e18e/eslint-plugin (#23357) (f794133)
remove unnecessary comment (#23448) (b919a1a)
delete unused PluginContainerOptions (#23382) (ee64401)
use oxfmt sortImports (#23319) (97ad042)

Code Refactoring

delete unused esbuildPlugin (#23381) (f40efef)
exclude postfix from __VITE_ASSET__ (#22886) (a6c08e1)
remove HmrUrl concept (#23172) (67a6807)
use urlId of import.meta.ROLLDOWN_FILE_URL in wasm plugin (#22962) (92bd2a7)

Tests

add renderBuiltUrl change changes hash (#23118) (0291408)

Beta Changelogs

Please refer to CHANGELOG.md for details.

`v8.2.2`

Compare Source

Features

build: avoid settling seen preload dependencies for performance (#23446) (e6f6b3e)
devtools: enable dev server integration (#23333) (68aeb8a)
accept Rolldown watch options in server.watch (#23133) (1b5cfe3)
add closeServer and closePreviewServer hooks (#23110) (e17d2d5)
add top-level tsconfig option (#23310) (93164c3)
add warning for unsupported hooks in plugin returned from applyToEnvironment hook (#23191) (fdef04f)
cli: support naming the CPU profile via --profile [name] (#23042) (a500dee)
config: warn on named imports from JSON modules (#23378) (472385e)
css: minify style tag (#23183) (8156684)
searched params attached to workers are now preserved (#22280) (517b97f)
support subpath imports in dynamic import statements (#23185) (b78e2f1)
use import.meta.ROLLDOWN_FILE_URL_* for assets in JS (#22888) (4366ac4)
use import.meta.ROLLDOWN_FILE_URL_* for other plugins (#22894) (e38f29e)
worker: remove worker chunk if it's detected that it's not referenced (#22473) (924997a)

Bug Fixes

handle CRLF line endings in code frame positions (#23219) (9913672)
only treat whole node_modules path segments as dependencies (fix #17467) (#23437) (ef0dc17)
build: keep hash placeholders as-is in resolveFileUrl hook (#23422) (e8d6a4d)
bundled-dev: mark payload delivered on client report (#23373) (a6d43bc)
deps: update all non-major dependencies (#23445) (fc7c104)
html: don't inline preload link targets (fix #13355) (#23387) (12e709c)
resolve the actual package root in findNearestMainPackageData for nested package.json (#23356) (8492422)
shortcuts extend error (#23447) (4ec58d1)
config: close bundles when generation fails (#23256) (6bacc95)
css: keep newline-separated srcset candidates intact (#23265) (4f9d2f4)
deps: update all non-major dependencies (#23337) (d550815)
deps: update all non-major dependencies (#23404) (238ad81)
deps: update rolldown-related dependencies (#23338) (76e8082)
deps: update rolldown-related dependencies (#23405) (b882566)
dev: run closeBundle after buildEnd failure (#23165) (8cb872e)
hmr: handle import.meta.hot.invalidate in virtual module (#23171) (6162968)
utils: handle dot in srcset density descriptor (#23346) (b50e1b4)
utils: match timestamp query parameter with proper delimiters (#23364) (41f3c6f)

Performance Improvements

proxy: pre-compile context matchers at server creation (#23263) (8abf700)

Miscellaneous Chores

introducing @e18e/eslint-plugin (#23357) (f794133)
remove unnecessary comment (#23448) (b919a1a)
delete unused PluginContainerOptions (#23382) (ee64401)
use oxfmt sortImports (#23319) (97ad042)

Code Refactoring

delete unused esbuildPlugin (#23381) (f40efef)
exclude postfix from __VITE_ASSET__ (#22886) (a6c08e1)
remove HmrUrl concept (#23172) (67a6807)
use urlId of import.meta.ROLLDOWN_FILE_URL in wasm plugin (#22962) (92bd2a7)

Tests

add renderBuiltUrl change changes hash (#23118) (0291408)

Beta Changelogs

8.3.0-beta.1 (2026-09-07)

See 8.3.0-beta.1 changelog

8.3.0-beta.0 (2026-09-02)

See 8.3.0-beta.0 changelog

`v8.2.1`

Compare Source

Bug Fixes

build: make client chunkImportMap work with sharedPlugins: true (#23184) (15f0307)
bundled-dev: inject client script tag before chunk scripts (#23161) (eac0cc8)
css: don't re-run lightningcss visitor during minify (fix #23146) (#23147) (de041a7)
deps: update all non-major dependencies (#23136) (14454fd)
deps: update rolldown-related dependencies (#23070) (7ac6f7f)
don't mutate the user config when resolving the lib entry from the top-level input (#23135) (b4bf596)
handle shebang ending with uncommon line terminators (#23038) (17f7b2f)
server: use a random port when port is 0 (#23158) (fddf4ea)

Performance Improvements

css: look up pure CSS chunks through a Set (#23114) (1331b0b)

Documentation

build: fix incomplete @default for build.minify (#23177) (ef02435)

Miscellaneous Chores

deps: update dependency rolldown-plugin-dts to ^0.28.0 (#23137) (4adc1e7)
deps: update dependency strip-literal to v4 (#23140) (9db65ce)

Code Refactoring

bundled-dev: avoid injecting server values in the bundle (#22967) (23b8a08)
bundled-dev: remove rolldown lazy stub module workaround (#23129) (e72036e)

Tests

bundled-dev: enable sourcemap playgrounds (#23080) (c2155fe)
reduce logs (#23138) (7673c02)

Configuration

📅 Schedule: (in timezone Europe/Berlin)

Branch creation
- "after 1am and before 5am every weekend"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-10-24T01:42:10Z

Thank you for following the naming conventions! 🙏

coderabbitai · 2026-10-24T01:42:22Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

Source mode: Auto
Repository: Unavailable
Branch: Unavailable
File: No configuration file from this repository applied
Commit: Unavailable
Layers: defaults
Review profile: CHILL
Plan: Advanced
Run ID: 4b0c5eda-3ff9-4037-9b8a-55122fa9d566

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

Signed-off-by: Renovate Bot <bot@renovateapp.com>

renovate Bot requested a review from prisis as a code owner October 24, 2026 01:41

renovate Bot added the c: dependencies Pull requests that adds/updates a dependency label Oct 24, 2026

github-actions Bot added size:XS Size of the change, tests and generated files excluded. vouch:trusted PR author is a collaborator, a bot or on the VOUCHED list. labels Oct 24, 2026

prisis mentioned this pull request Oct 24, 2026

chore(deps): combine open Renovate updates (9 PRs) #1255

Open

fix(deps): update vite to v8.3.5

95f5584

Signed-off-by: Renovate Bot <bot@renovateapp.com>

renovate Bot force-pushed the renovate/vite branch from b9852c2 to 95f5584 Compare October 25, 2026 02:00

renovate Bot changed the title ~~fix(deps): update vite to v8.3.4~~ fix(deps): update vite to v8.3.5 Oct 25, 2026

Navigation Menu

Repository navigation

fix(deps): update vite to v8.3.5 - #1254

fix(deps): update vite to v8.3.5#1254
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/vite

renovate Bot commented Oct 24, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 24, 2026

Uh oh!

coderabbitai Bot commented Oct 24, 2026 •

edited

Loading

Review skipped

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Oct 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Performance Improvements

Miscellaneous Chores

Code Refactoring

Features

Bug Fixes

Performance Improvements

Code Refactoring

Bug Fixes

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Bug Fixes

Miscellaneous Chores

Code Refactoring

Features

Bug Fixes

Performance Improvements

Miscellaneous Chores

Code Refactoring

Tests

Beta Changelogs

8.3.0-beta.1 (2026-09-07)

8.3.0-beta.0 (2026-09-02)

Features

Bug Fixes

Performance Improvements

Miscellaneous Chores

Code Refactoring

Tests

Beta Changelogs

8.3.0-beta.1 (2026-09-07)

8.3.0-beta.0 (2026-09-02)

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Configuration

Uh oh!

github-actions Bot commented Oct 24, 2026

Uh oh!

coderabbitai Bot commented Oct 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Oct 24, 2026 •

edited

Loading

coderabbitai Bot commented Oct 24, 2026 •

edited

Loading