Skip to content

build(deps-dev): bump vite from 7.3.1 to 8.0.1 in /frontend#199

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/frontend/vite-8.0.1
Closed

build(deps-dev): bump vite from 7.3.1 to 8.0.1 in /frontend#199
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/frontend/vite-8.0.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 19, 2026

Bumps vite from 7.3.1 to 8.0.1.

Release notes

Sourced from vite's releases.

create-vite@8.0.1

Please refer to CHANGELOG.md for details.

v8.0.1

Please refer to CHANGELOG.md for details.

create-vite@8.0.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0-beta.18

Please refer to CHANGELOG.md for details.

v8.0.0-beta.17

Please refer to CHANGELOG.md for details.

v8.0.0-beta.16

Please refer to CHANGELOG.md for details.

v8.0.0-beta.15

Please refer to CHANGELOG.md for details.

v8.0.0-beta.14

Please refer to CHANGELOG.md for details.

v8.0.0-beta.13

Please refer to CHANGELOG.md for details.

v8.0.0-beta.12

Please refer to CHANGELOG.md for details.

v8.0.0-beta.11

Please refer to CHANGELOG.md for details.

v8.0.0-beta.10

Please refer to CHANGELOG.md for details.

v8.0.0-beta.9

Please refer to CHANGELOG.md for details.

v8.0.0-beta.8

Please refer to CHANGELOG.md for details.

v8.0.0-beta.7

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.0.1 (2026-03-19)

Features

Bug Fixes

  • bundled-dev: properly disable inlineConst optimization (#21865) (6d97142)
  • css: lightningcss minify failed when build.target: 'es6' (#21933) (5fcce46)
  • deps: update all non-major dependencies (#21878) (6dbbd7f)
  • dev: always use ESM Oxc runtime (#21829) (d323ed7)
  • dev: handle concurrent restarts in _createServer (#21810) (40bc729)
  • handle + symbol in package subpath exports during dep optimization (#21886) (86db93d)
  • improve no-cors request block error (#21902) (5ba688b)
  • use precise regexes for transform filter to avoid backtracking (#21800) (dbe41bd)
  • worker: require(json) result should not be wrapped (#21847) (0672fd2)
  • worker: make worker output consistent with client and SSR (#21871) (69454d7)

Miscellaneous Chores

8.0.0 (2026-03-12)

Vite 8 is here!

Today, we're thrilled to announce the release of the next Vite major:

⚠ BREAKING CHANGES

  • remove import.meta.hot.accept resolution fallback (#21382)
  • update default browser target (#21193)
  • the epic rolldown-vite merge (#21189)

Features

... (truncated)

Commits
  • ea68a88 chore(deps): update rolldown-related dependencies (#20810)
  • 693d255 release: v7.1.7
  • 98a3484 fix(hmr): wait for import.meta.hot.prune callbacks to complete before runni...
  • 9f32b1d fix(hmr): trigger prune event when import is removed from non hmr module (#20...
  • 9f2247c fix(deps): update all non-major dependencies (#20811)
  • 105abe8 fix(glob): handle glob imports from folders starting with dot (#20800)
  • 4c4583c fix(build): fix ssr environment emitAssets: true when `sharedConfigBuild: t...
  • 9bc9d12 fix(client): use CSP nonce when rendering error overlay (#20791)
  • 54377f7 release: v7.1.6
  • 88af2ae fix(deps): update all non-major dependencies (#20773)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.1 to 8.0.1.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.0.1/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 19, 2026
@roborev-ci
Copy link
Copy Markdown

roborev-ci Bot commented Mar 19, 2026

roborev: Combined Review (6dc1a23)

Summary: The PR introduces a high-severity peer-dependency conflict by bumping
Vite without updating its corresponding Svelte plugin.

High

  • Location: frontend/package.json:31
  • Problem: This bumps vite to 8.0.1 while the project still pins @sveltejs/vite-plugin-svelte to 6.2. 4. The Svelte plugin’s 6.x line declares support for Vite ^6.3.0 || ^7.0.0, so a fresh install will hit a peer-dependency conflict or run an unsupported toolchain.
  • Fix: Upgrade @sveltejs/vite-plugin- svelte to its Vite 8-compatible major (7.x) in the same change, and then address any required Vite 8 migration adjustments before merging. If that migration is not ready, keep Vite on 7.x.

Synthesized from 3 reviews (agents: codex, gemini | types: default, security)

wesm added a commit that referenced this pull request Mar 19, 2026
…to 7.0.0

Vite 8.0.1 requires @sveltejs/vite-plugin-svelte 7.0.0 (peer dep
changed from ^6.3.0 || ^7.0.0 to ^8.0.0). Both upgraded together.

Closes #199.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
wesm added a commit that referenced this pull request Mar 19, 2026
## Summary

Batch of all 9 dependabot PRs from 2026-03-19:

- #191 — codecov/codecov-action 5.5.2 → 5.5.3
- #192 — softprops/action-gh-release 2.5.0 → 2.6.1
- #193 — github.com/jackc/pgx/v5 5.7.4 → 5.8.0
- #195 — github.com/mattn/go-sqlite3 1.14.34 → 1.14.37
- #194 — svelte 5.53.11 → 5.54.0
- #196 — @tanstack/virtual-core 3.13.21 → 3.13.23
- #197 — vitest 4.0.18 → 4.1.0
- #198 — jsdom 28.1.0 → 29.0.0
- #199 — vite 7.3.1 → 8.0.1 (with @sveltejs/vite-plugin-svelte 6.2.4 →
7.0.0)

## Test plan

- [ ] CI passes (Go tests, frontend build, lint, e2e)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Mar 19, 2026

Looks like vite is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Mar 19, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/frontend/vite-8.0.1 branch March 19, 2026 17:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants