chore(deps): update dependency vite to v5

[renovate[bot]]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
vite (source)	4.5.3 -> 5.4.9

---

Release Notes

vitejs/vite (vite)

v5.4.9

Compare Source

Please refer to CHANGELOG.md for details.

v5.4.8

Compare Source

Please refer to CHANGELOG.md for details.

v5.4.7

Compare Source

Please refer to CHANGELOG.md for details.

v5.4.6

Compare Source

Please refer to CHANGELOG.md for details.

v5.4.5

Compare Source

Please refer to CHANGELOG.md for details.

v5.4.4

Compare Source

Please refer to CHANGELOG.md for details.

v5.4.3

Compare Source

• fix: allow getting URL of JS files in publicDir (#​17915) (943ece1), closes #​17915
• fix: cjs warning respect the logLevel flag (#​17993) (dc3c14f), closes #​17993
• fix: improve CJS warning trace information (#​17926) (5c5f82c), closes #​17926
• fix: only remove entry assets handled by Vite core (#​17916) (ebfaa7e), closes #​17916
• fix: waitForRequestIdle locked (#​17982) (ad13760), closes #​17982
• fix(css): fix directory index import in sass modern api (#​17960) (9b001ba), closes #​17960
• fix(css): fix sass file:// reference (#​17909) (561b940), closes #​17909
• fix(css): fix sass modern source map (#​17938) (d428e7e), closes #​17938
• fix(deps): bump tsconfck (#​17990) (8c661b2), closes #​17990
• fix(html): rewrite assets url in
• fix(preload): add crossorigin attribute in CSS link tags (#​17930) (15871c7), closes #​17930
• chore: reduce diffs with v6 branch (#​17942) (bf9065a), closes #​17942
• chore(deps): update all non-major dependencies (#​17945) (cfb621e), closes #​17945
• chore(deps): update all non-major dependencies (#​17991) (0ca53cf), closes #​17991

v5.4.2

Compare Source

• chore: remove stale TODOs (#​17866) (e012f29), closes #​17866
• refactor: remove redundant prepend/strip base (#​17887) (3b8f03d), closes #​17887
• fix: resolve relative URL generated by renderBuiltUrl passed to module preload (#​16084) (fac3a8e), closes #​16084
• feat: support originalFilename (#​17867) (7d8c0e2), closes #​17867

v5.4.1

Compare Source

• fix: build.modulePreload.resolveDependencies is optimizable (#​16083) (e961b31), closes #​16083
• fix: align CorsOptions.origin type with @​types/cors (#​17836) (1bda847), closes #​17836
• fix: typings for vite:preloadError (#​17868) (6700594), closes #​17868
• fix(build): avoid re-define __vite_import_meta_env__ (#​17876) (e686d74), closes #​17876
• fix(deps): update all non-major dependencies (#​17869) (d11711c), closes #​17869
• fix(lightningcss): search for assets with correct base path (#​17856) (4e5ce3c), closes #​17856
• fix(worker): handle self reference url worker in dependency for build (#​17846) (391bb49), closes #​17846
• chore: fix picocolors import for local dev (#​17884) (9018255), closes #​17884
• refactor: remove handleHotUpdate from watch-package-data plugin (#​17865) (e16bf1f), closes #​17865

v5.4.0

Compare Source

• fix(build): windows platform build output path error (#​17818) (6ae0615), closes #​17818
• fix(deps): update launch-editor to consume fix for windows paths (#​17828) (cf2f90d), closes #​17828
• fix(ssr): fix global variable name conflict (#​17809) (6aa2206), closes #​17809
• fix(worker): fix importScripts injection breaking iife code (#​17827) (bb4ba9f), closes #​17827
• chore: bump typescript-eslint to v8 (#​17624) (d1891fd), closes #​17624
• chore(deps): update all non-major dependencies (#​17820) (bb2f8bb), closes #​17820
• perf(ssr): do a single-pass over AST with node cache arrays (#​17812) (81327eb), closes #​17812

v5.3.6

Compare Source

Please refer to CHANGELOG.md for details.

v5.3.5

Compare Source

• refactor(asset): remove rollup 3 public file watch workaround (#​16331) (66bdb1d), closes #​16331
• fix: make server type less restrictive (fix #​17627) (#​17628) (b55c32f), closes #​17627 #​17628
• fix: show error if vite client cannot be loaded (#​17419) (db5ab1d), closes #​17419
• fix(build): env output is not stable (#​17748) (b240a83), closes #​17748
• fix(client): fix vite error path (#​17744) (3c1bde3), closes #​17744
• fix(css): resolve url aliases with fragments (fix: #​17690) (#​17691) (d906d3f)
• fix(deps): update all non-major dependencies (#​17629) (93281b0), closes #​17629
• fix(importMetaGlob): handle alias that starts with hash (#​17743) (b58b423), closes #​17743
• fix(ssrTransform): sourcemaps with multiple sources (#​17677) (f321fa8), closes #​17677
• chore: extend commit hash (#​17709) (4fc9b64), closes #​17709
• chore(deps): update all non-major dependencies (#​17734) (9983731), closes #​17734
• chore(deps): update typescript (#​17699) (df5ceb3), closes #​17699
• revert: fix(logger): truncate log over 5000 characters long (#​16581) (#​17729) (f4f488f), closes #​16581 #​17729

v5.3.4

Compare Source

• fix: update Terser type definitions (fix #​17668) (#​17669) (b723a75), closes #​17668 #​17669
• fix(build): skip preload treeshaking for nested braces (#​17687) (4be96b4), closes #​17687
• fix(css): include .css?url in assets field of manifest (#​17623) (1465b20), closes #​17623
• fix(worker): nested inlined worker always fallbacked to data URI worker instead of using blob worker (07bc489), closes #​17509
• refactor: replace includes with logical operations (#​17620) (c4a2227), closes #​17620
• chore: add callback to http-proxy.d.ts jsdoc (#​17646) (d8a5d70), closes #​17646

v5.3.3

Compare Source

• fix: lazily evaluate __vite__mapDeps files (#​17602) (dafff4a), closes #​17602
• fix(deps): update all non-major dependencies (#​17590) (012490c), closes #​17590
• fix(lib): remove pure CSS dynamic import (#​17601) (055f1c1), closes #​17601
• fix(proxy): replace changeOrigin changes in 5.3.0 with new rewriteWsOrigin option (#​17563) (14c3d49), closes #​17563

v5.3.2

Compare Source

• fix(client): uniform variable location (#​17528) (a8e2f6f), closes #​17528
• fix(deps): update all non-major dependencies (#​17494) (bf123f2), closes #​17494
• fix(typescript): correctly expand ${configDir} in tsconfig.json (#​17576) (24c799b), closes #​17576
• chore: fix some comments (#​17495) (ec16a5e), closes #​17495
• chore(deps): update all non-major dependencies (#​17553) (a33a97f), closes #​17553
• chore(deps): update dependency eslint to v9 (#​16661) (6c10662), closes #​16661
• chore(deps): update es-module-lexer to 1.5.4 (#​17555) (2d6672f), closes #​17555
• refactor(optimizer): use early continues (#​17551) (7c06ef0), closes #​17551

v5.3.1

Compare Source

• fix(build): handle preload treeshaking for braces (#​17479) (d355568), closes #​17479
• fix(build): handle preload treeshaking for commas (#​17472) (3e27071), closes #​17472
• fix(build): preload treeshaking ignore equal (#​17480) (6ced135), closes #​17480
• chore: consolidate changelog for 5.3 (#​17476) (1f09344), closes #​17476

v5.3.0

Compare Source

• fix: typo in client log (#​17363) (68aa9f8), closes #​17363
• fix(ssrTransform): handle arbitrary module namespace identifiers (#​17446) (0a76652), closes #​17446
• test: disable isolate for unit test (#​17448) (f16fae5), closes #​17448
• feat: asset type add bmp (#​17439) (ec287f8), closes #​17439

v5.2.14

Compare Source

Please refer to CHANGELOG.md for details.

v5.2.13

Compare Source

Please refer to CHANGELOG.md for details.

v5.2.12

Compare Source

• chore: move to eslint flat config (#​16743) (8f16765), closes #​16743
• chore(deps): remove unused deps (#​17329) (5a45745), closes #​17329
• chore(deps): update all non-major dependencies (#​16722) (b45922a), closes #​16722
• fix: mention build.rollupOptions.output.manualChunks instead of build.rollupOutput.manualChunks (89378c0), closes #​16721
• fix(build): make SystemJSWrapRE match lazy (#​16633) (6583ad2), closes #​16633
• fix(css): avoid generating empty JS files when JS files becomes empty but has CSS files imported (#​1 (95fe5a7), closes #​16078
• fix(css): handle lightningcss compiled css in Deno (#​17301) (8e4e932), closes #​17301
• fix(css): only use files the current bundle contains (#​16684) (15a6ebb), closes #​16684
• fix(css): page reload was not happening with .css?raw (#​16455) (8041846), closes #​16455
• fix(deps): update all non-major dependencies (#​16603) (6711553), closes #​16603
• fix(deps): update all non-major dependencies (#​16660) (bf2f014), closes #​16660
• fix(deps): update all non-major dependencies (#​17321) (4a89766), closes #​17321
• fix(error-logging): rollup errors weren't displaying id and codeframe (#​16540) (22dc196), closes #​16540
• fix(hmr): normalize the path info (#​14255) (6a085d0), closes #​14255
• fix(hmr): trigger page reload when calling invalidate on root module (#​16636) (2b61cc3), closes #​16636
• fix(logger): truncate log over 5000 characters long (#​16581) (b0b839a), closes #​16581
• fix(optimizer): log dependencies added by plugins (#​16729) (f0fb987), closes #​16729
• fix(sourcemap): improve sourcemap compatibility for vue2 (#​16594) (913c040), closes #​16594
• docs: correct proxy shorthand example (#​15938) (abf766e), closes #​15938
• docs: deprecate server.hot (#​16741) (e7d38ab), closes #​16741

v5.2.11

Compare Source

• feat: improve dynamic import variable failure error message (#​16519) (f8feeea), closes #​16519
• fix: dynamic-import-vars plugin normalize path issue (#​16518) (f71ba5b), closes #​16518
• fix: scripts and styles were missing from built HTML on Windows (#​16421) (0e93f58), closes #​16421
• fix(deps): update all non-major dependencies (#​16488) (2d50be2), closes #​16488
• fix(deps): update all non-major dependencies (#​16549) (2d6a13b), closes #​16549
• fix(dev): watch publicDir explicitly to include it outside the root (#​16502) (4d83eb5), closes #​16502
• fix(preload): skip preload for non-static urls (#​16556) (bb79c9b), closes #​16556
• fix(ssr): handle class declaration and expression name scoping (#​16569) (c071eb3), closes #​16569
• fix(ssr): handle function expression name scoping (#​16563) (02db947), closes #​16563

v5.2.10

Compare Source

• revert: perf: use workspace root for fs cache (#​15712) (#​16476) (77e7359), closes #​15712 #​16476
• fix: add base to virtual html (#​16442) (721f94d), closes #​16442
• fix: adjust esm syntax judgment logic (#​16436) (af72eab), closes #​16436
• fix: don't add outDirs to watch.ignored if emptyOutDir is false (#​16453) (6a127d6), closes #​16453
• fix(cspNonce): don't overwrite existing nonce values (#​16415) (b872635), closes #​16415
• feat: show warning if root is in build.outDir (#​16454) (11444dc), closes #​16454
• feat: write cspNonce to style tags (#​16419) (8e54bbd), closes #​16419
• chore(deps): update dependency eslint-plugin-n to v17 (#​16381) (6cccef7), closes #​16381

v5.2.9

Compare Source

• fix: fsp.rm removing files does not take effect (#​16032) (b05c405), closes #​16032
• fix: fix accumulated stacks in error overlay (#​16393) (102c2fd), closes #​16393
• fix(deps): update all non-major dependencies (#​16376) (58a2938), closes #​16376
• chore: update region comment (#​16380) (77562c3), closes #​16380
• perf: reduce size of injected __vite__mapDeps code (#​16184) (c0ec6be), closes #​16184
• perf(css): only replace empty chunk if imported (#​16349) (e2658ad), closes #​16349

v5.2.8

Compare Source

• fix: csp nonce injection when no closing tag (#​16281) (#​16282) (3c85c6b), closes #​16281 #​16282
• fix: do not access document in /@​vite/client when not defined (#​16318) (646319c), closes #​16318
• fix: fix sourcemap when using object as define value (#​15805) (445c4f2), closes #​15805
• fix(css): unknown file error happened with lightningcss (#​16306) (01af308), closes #​16306
• fix(hmr): multiple updates happened when invalidate is called while multiple tabs open (#​16307) (21cc10b), closes #​16307
• fix(scanner): duplicate modules for same id if glob is used in html-like types (#​16305) (eca68fa), closes #​16305
• chore(deps): update all non-major dependencies (#​16325) (a78e265), closes #​16325
• refactor: use types from sass instead of @​types/sass (#​16340) (4581e83), closes #​16340

v5.2.7

Compare Source

• chore: deprecate splitVendorChunkPlugin (#​16274) (45a06da), closes #​16274
• fix: skip injecting __vite__mapDeps when it's not used (#​16271) (890538a), closes #​16271
• fix(deps): update all non-major dependencies (#​16258) (7caef42), closes #​16258
• fix(hmr): don't mutate module graph when collecting modules (#​16302) (dfffea1), closes #​16302
• fix(hmr): trigger hmr for missing file import errored module after file creation (#​16303) (ffedc06), closes #​16303
• fix(sourcemap): don't warn even if the sourcesContent is an empty string (#​16273) (24e376a), closes #​16273
• feat(hmr): reload when HTML file is created/deleted (#​16288) (1f53796), closes #​16288

v5.2.6

Compare Source

• fix: fs.deny with globs with directories (#​16250) (ba5269c), closes #​16250

v5.2.5

Compare Source

• fix: avoid SSR requests in waitForRequestIdle (#​16246) (7093f77), closes #​16246
• docs: clarify enforce vs hook.order (#​16226) (3a73e48), closes #​16226

v5.2.4

Compare Source

• fix: dont resolve imports with malformed URI (#​16244) (fbf69d5), closes #​16244

v5.2.3

Compare Source

• fix: handle warmup request error correctly (#​16223) (d7c5256), closes #​16223
• fix: skip encode if is data uri (#​16233) (8617e76), closes #​16233
• fix(optimizer): fix optimizeDeps.include glob syntax for ./* exports (#​16230) (f184c80), closes #​16230
• fix(runtime): fix sourcemap with prepareStackTrace (#​16220) (dad7f4f), closes #​16220
• chore: utf8 replaced with utf-8 (#​16232) (9800c73), closes #​16232

v5.2.2

Compare Source

• fix(importAnalysis): skip encode in ssr (#​16213) (e4d2d60), closes #​16213

v5.2.1

Compare Source

• fix: encode path uri only (#​16212) (0b2e40b), closes #​16212

v5.2.0

Compare Source

• fix: update client.ts@cleanUrl to accomodate blob protocol (#​16182) (1a3b1d7), closes #​16182
• fix(assets): avoid splitting , inside query parameter of image URI in srcset property (#​16081) (50caf67), closes #​16081
• chore(deps): update all non-major dependencies (#​16186) (842643d), closes #​16186
• perf(transformRequest): fast-path watch and sourcemap handling (#​16170) (de60f1e), closes #​16170
• docs: add @shikiji/vitepress-twoslash (#​16168) (6f8a320), closes #​16168

v5.1.8

Compare Source

Please refer to CHANGELOG.md for details.

v5.1.7

Compare Source

Please refer to CHANGELOG.md for details.

v5.1.6

Compare Source

• chore(deps): update all non-major dependencies (#​16131) (a862ecb), closes #​16131
• fix: check for publicDir before checking if it is a parent directory (#​16046) (b6fb323), closes #​16046
• fix: escape single quote when relative base is used (#​16060) (8f74ce4), closes #​16060
• fix: handle function property extension in namespace import (#​16113) (f699194), closes #​16113
• fix: server middleware mode resolve (#​16122) (8403546), closes #​16122
• fix(esbuild): update tsconfck to fix bug that could cause a deadlock (#​16124) (fd9de04), closes #​16124
• fix(worker): hide "The emitted file overwrites" warning if the content is same (#​16094) (60dfa9e), closes #​16094
• fix(worker): throw error when circular worker import is detected and support self referencing worker (eef9da1), closes #​16103
• style(utils): remove null check (#​16112) (0d2df52), closes #​16112
• refactor(runtime): share more code between runtime and main bundle (#​16063) (93be84e), closes #​16063

v5.1.5

Compare Source

• fix: __vite__mapDeps code injection (#​15732) (aff54e1), closes #​15732
• fix: analysing build chunk without dependencies (#​15469) (bd52283), closes #​15469
• fix: import with query with imports field (#​16085) (ab823ab), closes #​16085
• fix: normalize literal-only entry pattern (#​16010) (1dccc37), closes #​16010
• fix: optimizeDeps.entries with literal-only pattern(s) (#​15853) (49300b3), closes #​15853
• fix: output correct error for empty import specifier (#​16055) (a9112eb), closes #​16055
• fix: upgrade esbuild to 0.20.x (#​16062) (899d9b1), closes #​16062
• fix(runtime): runtime HMR affects only imported files (#​15898) (57463fc), closes #​15898
• fix(scanner): respect experimentalDecorators: true (#​15206) (4144781), closes #​15206
• revert: "fix: upgrade esbuild to 0.20.x" (#​16072) (11cceea), closes #​16072
• refactor: share code with vite runtime (#​15907) (b20d542), closes #​15907
• refactor(runtime): use functions from pathe (#​16061) (aac2ef7), closes #​16061
• chore(deps): update all non-major dependencies (#​16028) (7cfe80d), closes #​16028

v5.1.4

Compare Source

• perf: remove unnecessary regex s modifier (#​15766) (8dc1b73), closes #​15766
• fix: fs cached checks disabled by default for yarn pnp (#​15920) (8b11fea), closes #​15920
• fix: resolve directory correctly when fs.cachedChecks: true (#​15983) (4fe971f), closes #​15983
• fix: srcSet with optional descriptor (#​15905) (81b3bd0), closes #​15905
• fix(deps): update all non-major dependencies (#​15959) (571a3fd), closes #​15959
• fix(watch): build watch fails when outDir is empty string ([#&#

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security[bot]]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher

View full report↗︎

[socket-security[bot]]

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report↗︎