feat(deps)!: Update dependency vite ( 5.4.21 → 8.3.3 ) [SECURITY] #14
Loading…
Reference in a new issue
No description provided.
Delete branch "renovate/npm-vite-vulnerability"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
^5.4.1→^8.0.0Vite Vulnerable to Path Traversal in Optimized Deps
.mapHandlingCVE-2026-39365 / GHSA-4w7w-66w2-5vf9
More information
Details
Summary
Any files ending with
.mapeven out side the project can be returned to the browser.Impact
Only apps that match the following conditions are affected:
--hostorserver.hostconfig option).mapand the path is predictableDetails
In Vite v7.3.1, the dev server’s handling of
.maprequests for optimized dependencies resolves file paths and callsreadFilewithout restricting../segments in the URL. As a result, it is possible to bypass theserver.fs.strictallow list and retrieve.mapfiles located outside the project root, provided they can be parsed as valid source map JSON.PoC
/@fsaccess is blocked bystrict(returns 403)../segments under the optimized deps.mapURL prefix to reach/tmp/poc.mapSeverity
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:NReferences
This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).
vite:
server.fs.denybypass on Windows alternate pathsCVE-2026-53571 / GHSA-fx2h-pf6j-xcff
More information
Details
Summary
The contents of files that are specified by
server.fs.denycan be returned to the browser on Windows.Impact
Only apps that match the following conditions are affected:
--hostorserver.hostconfig option)server.fs.allowDetails
Vite’s dev server denies direct access to sensitive files through
server.fs.deny, including entries such as.env,.env.*, and*.{crt,pem}. However, on Windows, the deny logic does not correctly normalize NTFS ADS path forms before access checks are applied.Because of this, requests such as
/.env::$DATA?raware treated as allowed paths, while Windows resolves them to the original file's default data stream.Similar to that, Windows allows accessing a file using a different name with the 8.3 short name compatibility feature. Vite did not reject accessing files via them.
PoC
Access via browser at

http://localhost:5173/.env::$DATA?rawExample expected result:
/.env::$DATA?rawreturns the contents of.env/tls.pem::$DATA?rawreturns the contents oftls.pemSeverity
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:NReferences
This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).
launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows
CVE-2026-53632 / GHSA-v6wh-96g9-6wx3
More information
Details
Summary
The
launch-editorNPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the user’s NTLMv2 password hash to be leaked to an attacker-controlled SMB server. This can result in credential compromise through offline hash cracking.Impact
If the following conditions are met, an attacker can get the NTLMv2 password hash on the computer that is using the
launch-editor:launch-editorlaunch-editoris runningThis would be a problem if the user password is too simple that it can be identified through offline hash cracking, potentially leading to further compromise of developer accounts or internal systems.
Details
launch-editoraccepts file paths without validating or restricting Windows UNC paths such as:On Windows systems, accessing a UNC path triggers an automatic NTLM authentication attempt to the remote SMB server. No user interaction or warning is required for this authentication attempt to occur.
If an attacker controls the SMB server referenced by the UNC path the victim’s NTLMv2 hash is transmitted to the attacker. The attacker can then capture the hash and perform offline password cracking. Successful cracking reveals the victim’s cleartext password.
The attacker could target a developer that uses a development server using
launch-editorto develop code locally, send them a link and grab their NTLMv2 hash.PoC
From the attacker side, we will setup an SMB server. I personally used Impacket's smbserver.py, but you could use something like Responder for this as well. For keeping it simple, we will use
smbserver.pyhere.First, let's create a directory to serve as an SMB share.
Then, start the SMB server.
Now, run any project that uses the launch-editor package. I have setup a simple "Hello world" project that uses Vite to do this. Then run the project locally (
vite).Now last, we will open a browser window and navigate to the URL used by the launch-editor package to trigger the NTLM authentication. Or we can use
curlto achieve the same.Note the IP address in the HTTP request, and make sure it connects to the IP address of the SMB server. Now we can look at the logs of
smbserver.pyand see the NTLMv2 hash coming in.Severity
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:HReferences
This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).
Release Notes
vitejs/vite (vite)
v8.3.3Compare Source
Bug Fixes
fs.servefor?vite-wasm-instance(#23655) (ba8b7ab)safeModulePathsrather than URLs (#23656) (c3e06f9)v8.3.2Compare Source
Bug Fixes
renderBuiltUrlreturns URLs with queries (#23611) (64e0a21)forwardConsole(#23565) (e64a587)build.rolldownOptions.output.minifycorrectly (#23536) (bba3bb8)renderBuiltUrl(#23586) (744269e)Performance Improvements
Documentation
Miscellaneous Chores
Code Refactoring
tinyexecinstead ofcross-spawn(#23583) (db915e5)Tests
v8.3.1Compare Source
Bug Fixes
server.ws: falsein mergeConfig (#23511) (f68c0d5)build.rolldownOptions.output.commentscorrectly (#23514) (4aba8d8)Miscellaneous Chores
optimizeDeps.includecomment (#23489) (6a84c72)Code Refactoring
findwithsome(#23554) (af7cdf6)v8.3.0Compare Source
Features
server.watch(#23133) (1b5cfe3)tsconfigoption (#23310) (93164c3)applyToEnvironmenthook (#23191) (fdef04f)import.meta.ROLLDOWN_FILE_URL_*for assets in JS (#22888) (4366ac4)import.meta.ROLLDOWN_FILE_URL_*for other plugins (#22894) (e38f29e)Bug Fixes
node_modulespath segments as dependencies (fix #17467) (#23437) (ef0dc17)resolveFileUrlhook (#23422) (e8d6a4d)import.meta.hot.invalidatein virtual module (#23171) (6162968)Performance Improvements
Miscellaneous Chores
@e18e/eslint-plugin(#23357) (f794133)PluginContainerOptions(#23382) (ee64401)sortImports(#23319) (97ad042)Code Refactoring
esbuildPlugin(#23381) (f40efef)__VITE_ASSET__(#22886) (a6c08e1)urlIdofimport.meta.ROLLDOWN_FILE_URLin wasm plugin (#22962) (92bd2a7)Tests
renderBuiltUrlchange changes hash (#23118) (0291408)Beta Changelogs
8.3.0-beta.1 (2026-09-07)
See 8.3.0-beta.1 changelog
8.3.0-beta.0 (2026-09-02)
See 8.3.0-beta.0 changelog
v8.2.4Compare Source
Please refer to CHANGELOG.md for details.
v8.2.2Compare Source
Features
@vitejs/devtoolspeer range to v0.5.0 (#23302) (495d9ff)Bug Fixes
resolve.preserveSymlinkswhen resolving root (fix #23197) (#23198) (8413052)Documentation
Miscellaneous Chores
Code Refactoring
Tests
Build System
v8.2.1Compare Source
Bug Fixes
sharedPlugins: true(#23184) (15f0307)input(#23135) (b4bf596)Performance Improvements
Documentation
@defaultfor build.minify (#23177) (ef02435)Miscellaneous Chores
Code Refactoring
Tests
v8.2.0Compare Source
Features
inputtoserver.fs.allow(#23035) (95a3cda)Bug Fixes
Object.prototypeis frozen (#23073) (599c5b0)Documentation
Tests
v8.1.6Compare Source
Please refer to CHANGELOG.md for details.
v8.1.5Compare Source
Bug Fixes
buildEnd(#22931) (8100320)Documentation
@defaultfor build.cssMinify (#22948) (c88c236)@defaultfor build.lib.formats (#22911) (369ed60)Tests
__tests__(#22912) (c961cae)v8.1.4Compare Source
Features
Bug Fixes
import.meta.urlin preload function as-is (#22839) (f1f90ed)Documentation
@defaultforserver.cors(#22859) (70435b2)Miscellaneous Chores
Code Refactoring
Tests
Build System
onwarnwithonLog(#22741) (c581b55)v8.1.3Compare Source
Bug Fixes
es-module-lexerto 2.3.0 (#22838) (7103c3a)v8.1.2Compare Source
Bug Fixes
v8.1.1Compare Source
Features
Bug Fixes
import.meta.hot.invalidate()(#22797) (709eb8e)@importurls with lightningcss (#22718) (9fa7ab4)esbuild.jsxSideEffectswhen converting tooxc.jsx.pure(#22809) (33895ba)ERR_CLOSED_SERVERin scanner (#22784) (085a0ab)inputfromroot(#22769) (9722b07)Miscellaneous Chores
Code Refactoring
Object.valuescalls (#22790) (1113acf)Tests
v8.1.0Compare Source
Features
server.fs.denylist with common files (#22707) (61ba8fd)~for Rolldown (#22693) (9928722)Bug Fixes
Code Refactoring
rolldownOptionsproperty for chunkImportMap (#22692) (8e8816c)v8.0.16Compare Source
Bug Fixes
v8.0.15Compare Source
Features
Bug Fixes
Miscellaneous Chores
Code Refactoring
collectAllModulesfunction (#22562) (6978a9c)v8.0.14Compare Source
Features
Bug Fixes
Miscellaneous Chores
Code Refactoring
Tests
v8.0.13Compare Source
Features
onEnd(#22357) (47071ce)Bug Fixes
write=false(#22328) (158e8ae)name/originalFileNamein syntheticassetFileNamescall (#22439) (8e59c97)isBundledper environment (#22257) (a576326)Miscellaneous Chores
v8.0.12Compare Source
Features
Bug Fixes
rolldownOptionsinstead of deprecatedrollupOptionsin messages (#22400) (b675c7b)build.targetto worker bundle (#22404) (3c93fde)Miscellaneous Chores
v8.0.11Compare Source
Features
Bug Fixes
Documentation
Miscellaneous Chores
Code Refactoring
Tests
v8.0.10Compare Source
Features
Bug Fixes
hmrClient.logger.debugandhmrClient.logger.errorlooked different from other HMR logs (#22147) (a4d828f).css?inline(#22292) (83f0a78)Code Refactoring
v8.0.9Compare Source
Features
Bug Fixes
watchChangehook (#22188) (fc08bda)?rawimports (#22148) (3ec9cda)Documentation
Miscellaneous Chores
v8.0.8Compare Source
Features
Bug Fixes
dns.getDefaultResultOrdertemporary (#22202) (15f1c15)v8.0.7Compare Source
Bug Fixes
v8.0.6Compare Source
Features
Bug Fixes
Performance Improvements
getLocalhostAddressIfDiffersFromDNSwhen DNS order isverbatim(#22151) (56ec256)Miscellaneous Chores
v8.0.5Compare Source
Bug Fixes
server.fsafter stripping query as well (#22160) (a9a3df2)v8.0.4Compare Source
Features
Bug Fixes
hasBothRollupOptionsAndRolldownOptionsshould returnfalsefor proxy case (#22043) (99897d2)vite/modulepreload-polyfill(#22126) (17330d2)#(#22038) (3460fc5)Documentation
environment.fetchModuledocumentation (#22035) (54229e7)Miscellaneous Chores
Code Refactoring
v8.0.3Compare Source
Features
Bug Fixes
metaidentifier insideimport.metawhen a binding namedmetaexists (#22019) (cff5f0c)Miscellaneous Chores
Tests
getCssFilesForChunk(#22016) (43fbbf9)v8.0.2Compare Source
Features
Bug Fixes
Miscellaneous Chores
v8.0.1Compare Source
Bug Fixes
v8.0.0Compare Source
Today, we're thrilled to announce the release of the next Vite major:
⚠ BREAKING CHANGES
import.meta.hot.acceptresolution fallback (#21382) (71d0797)rolldown-vitemerge (#21189) (4a7f8d4)Features
vite-tsconfig-pathsplugin is detected (#21781) (ada493e)VisitorandESTreefromrolldown/utils(#21664) (45de31e).wasm?init(#21102) (216a3b5)assetsfield for standalone CSS entry points (#21015) (f289b9b)envPrefixcontains spaces (#21292) (9fcde3c)ignoreOutdatedRequestsoption tooptimizeDeps(#21364) (b2e75aa)rolldown-vitemerge (#21189) (4a7f8d4)Bug Fixes
watch.watcherinstead ofwatch.notify(#21793) (88953b3)server.originto public file URLs in CSS (fix #18457) (#21697) (c967f48)ssrLoadModulewith non-runnable ssr env (#21739) (1fa736e)preserveSymlinksis enabled (#21720) (72165e0)sourcemapInterceptor: "prepareStackTrace"(#21562) (416c095)tsconfigoption when loading config (#21517) (5025c35)new URLpaths to correct relative file location (#21434) (ca96cbc)output.inlineDynamicImportoption (#21464) (471ce62)server.listencallback (#21451) (602d786)rolldownCjsExternalPluginforplatform: neutral(#21452) (d2fc4be)process.getBuiltinModuleinstead ofimport('node:module')(#21402) (6633bcb)new Worker(..., new URL(import.meta.url))with trailing comma (#21325) (4a47241)import.meta.resolvewhen formatted across multiple lines (#21312) (130e718)experimental.bundledDevis enabled (#21296) (e81c183)Performance Improvements
Documentation
build.dynamicImportVarsOptions(#21477) (54ce2ed)vitein IPA symbols (#21238) (9b1d4d6)Miscellaneous Chores
fdirand@rollup/plugin-commonjs(#21639) (5abffd5)customResolverdeprecation message to mentionenforce: 'pre'(#21576) (2ce34d5)Code Refactoring
optimization.inlineConst: { mode: 'smart' }as it's enabled by default (#21794) (22b3d11)legalCommentsoption (#21721) (e06496e)ESTreetypes fromrolldown/utils(#21719) (9239750)customResolverinresolve.alias(#21476) (81275c9)@rolldown/pluginutils(#21560) (c367b62)rolldown/utils(#21577) (e56103f)experimental.enableNativePlugin: 'resolver'(#21510) (f9d9213)import.meta.dirnameeverywhere (#21509) (7becf5f)rolldownCjsExternalPlugin(#21450) (ebda8fd)import.meta.hot.acceptresolution fallback (#21382) (71d0797)Tests
handleInvokewas called in server-worker-runner.invoke test (#21751) (b95ca22)defineConfig(#21698) (4fedbbd)Beta Changelogs
8.0.0-beta.18 (2026-03-09)
See 8.0.0-beta.18 changelog
8.0.0-beta.17 (2026-03-09)
See 8.0.0-beta.17 changelog
8.0.0-beta.16 (2026-02-27)
See 8.0.0-beta.16 changelog
8.0.0-beta.15 (2026-02-19)
See 8.0.0-beta.15 changelog
8.0.0-beta.14 (2026-02-12)
See 8.0.0-beta.14 changelog
8.0.0-beta.13 (2026-02-05)
See 8.0.0-beta.13 changelog
8.0.0-beta.12 (2026-02-03)
See 8.0.0-beta.12 changelog
8.0.0-beta.11 (2026-01-29)
See 8.0.0-beta.11 changelog
8.0.0-beta.10 (2026-01-24)
See 8.0.0-beta.10 changelog
8.0.0-beta.9 (2026-01-22)
See 8.0.0-beta.9 changelog
8.0.0-beta.8 (2026-01-15)
See 8.0.0-beta.8 changelog
8.0.0-beta.7 (2026-01-08)
See 8.0.0-beta.7 changelog
8.0.0-beta.6 (2026-01-07)
See 8.0.0-beta.6 changelog
8.0.0-beta.5 (2025-12-25)
See 8.0.0-beta.5 changelog
8.0.0-beta.4 (2025-12-22)
See 8.0.0-beta.4 changelog
8.0.0-beta.3 (2025-12-18)
See 8.0.0-beta.3 changelog
8.0.0-beta.2 (2025-12-12)
See 8.0.0-beta.2 changelog
8.0.0-beta.1 (2025-12-08)
See 8.0.0-beta.1 changelog
8.0.0-beta.0 (2025-12-03)
See 8.0.0-beta.0 changelog
Rolldown-Vite changelogs
See rolldown-vite changelog
v7.3.7Compare Source
Please refer to CHANGELOG.md for details.
v7.3.6Compare Source
Please refer to CHANGELOG.md for details.
v7.3.5Compare Source
Please refer to CHANGELOG.md for details.
v7.3.3Compare Source
Please refer to CHANGELOG.md for details.
v7.3.2Compare Source
Please refer to CHANGELOG.md for details.
v7.3.1Compare Source
Features
ignoreOutdatedRequestsoption tooptimizeDeps(#21364) (9d39d37)v7.3.0Compare Source
Features
v7.2.7Compare Source
Bug Fixes
v7.2.6Compare Source
7.2.6 (2025-12-01)
v7.2.4Compare Source
Today, we're thrilled to announce the release of the next Vite major:
⚠ BREAKING CHANGES
import.meta.hot.acceptresolution fallback (#21382) (71d0797)rolldown-vitemerge (#21189) (4a7f8d4)Features
vite-tsconfig-pathsplugin is detected (#21781) (ada493e)VisitorandESTreefromrolldown/utils(#21664) (45de31e).wasm?init(#21102) (216a3b5)assetsfield for standalone CSS entry points (#21015) (f289b9b)envPrefixcontains spaces (#21292) (9fcde3c)ignoreOutdatedRequestsoption tooptimizeDeps(#21364) (b2e75aa)rolldown-vitemerge (#21189) (4a7f8d4)Bug Fixes
watch.watcherinstead ofwatch.notify(#21793) (88953b3)server.originto public file URLs in CSS (fix #18457) (#21697) (c967f48)ssrLoadModulewith non-runnable ssr env (#21739) (1fa736e)preserveSymlinksis enabled (#21720) (72165e0)sourcemapInterceptor: "prepareStackTrace"(#21562) (416c095)tsconfigoption when loading config (#21517) (5025c35)new URLpaths to correct relative file location (#21434) (ca96cbc)output.inlineDynamicImportoption (#21464) (471ce62)server.listencallback (#21451) (602d786)rolldownCjsExternalPluginforplatform: neutral(#21452) (d2fc4be)process.getBuiltinModuleinstead ofimport('node:module')(#21402) (6633bcb)new Worker(..., new URL(import.meta.url))with trailing comma (#21325) (4a47241)import.meta.resolvewhen formatted across multiple lines (#21312) (130e718)experimental.bundledDevis enabled (#21296) (e81c183)Performance Improvements
Documentation
build.dynamicImportVarsOptions(#21477) (54ce2ed)vitein IPA symbols (#21238) (9b1d4d6)Miscellaneous Chores
fdirand@rollup/plugin-commonjs(#21639) (5abffd5)customResolverdeprecation message to mentionenforce: 'pre'(#21576) (2ce34d5)Code Refactoring
optimization.inlineConst: { mode: 'smart' }as it's enabled by default (#21794) (22b3d11)legalCommentsoption (#21721) (e06496e)ESTreetypes fromrolldown/utils(#21719) (9239750)customResolverinresolve.alias(#21476) (81275c9)@rolldown/pluginutils(#21560) (c367b62)rolldown/utils(#21577) (e56103f)experimental.enableNativePlugin: 'resolver'(#21510) (f9d9213)import.meta.dirnameeverywhere (#21509) (7becf5f)rolldownCjsExternalPlugin(#21450) (ebda8fd)import.meta.hot.acceptresolution fallback (#21382) (71d0797)Tests
handleInvokewas called in server-worker-runner.invoke test (#21751) (b95ca22)defineConfig(#21698) (4fedbbd)Beta Changelogs
8.0.0-beta.18 (2026-03-09)
See 8.0.0-beta.18 changelog
8.0.0-beta.17 (2026-03-09)
See 8.0.0-beta.17 changelog
8.0.0-beta.16 (2026-02-27)
See 8.0.0-beta.16 changelog
8.0.0-beta.15 (2026-02-19)
See 8.0.0-beta.15 changelog
8.0.0-beta.14 (2026-02-12)
See 8.0.0-beta.14 changelog
8.0.0-beta.13 (2026-02-05)
See 8.0.0-beta.13 changelog
8.0.0-beta.12 (2026-02-03)
See 8.0.0-beta.12 changelog
8.0.0-beta.11 (2026-01-29)
See 8.0.0-beta.11 changelog
8.0.0-beta.10 (2026-01-24)
See 8.0.0-beta.10 changelog
8.0.0-beta.9 (2026-01-22)
See 8.0.0-beta.9 changelog
8.0.0-beta.8 (2026-01-15)
See 8.0.0-beta.8 changelog
8.0.0-beta.7 (2026-01-08)
See 8.0.0-beta.7 changelog
8.0.0-beta.6 (2026-01-07)
See 8.0.0-beta.6 changelog
8.0.0-beta.5 (2025-12-25)
See 8.0.0-beta.5 changelog
8.0.0-beta.4 (2025-12-22)
See 8.0.0-beta.4 changelog
8.0.0-beta.3 (2025-12-18)
See 8.0.0-beta.3 changelog
8.0.0-beta.2 (2025-12-12)
See 8.0.0-beta.2 changelog
8.0.0-beta.1 (2025-12-08)
See 8.0.0-beta.1 changelog
8.0.0-beta.0 (2025-12-03)
See 8.0.0-beta.0 changelog
Rolldown-Vite changelogs
See rolldown-vite changelog
v7.2.3Compare Source
Bug Fixes
bindCLIShortcutscalls with shortcut merging (#21103) (5909efd)Performance Improvements
Miscellaneous Chores
v7.2.2Compare Source
Bug Fixes
v7.2.1Compare Source
Today, we're thrilled to announce the release of the next Vite major:
⚠ BREAKING CHANGES
import.meta.hot.acceptresolution fallback (#21382) (71d0797)rolldown-vitemerge (#21189) (4a7f8d4)Features
vite-tsconfig-pathsplugin is detected (#21781) (ada493e)VisitorandESTreefromrolldown/utils(#21664) (45de31e).wasm?init(#21102) (216a3b5)assetsfield for standalone CSS entry points (#21015) (f289b9b)envPrefixcontains spaces (#21292) (9fcde3c)ignoreOutdatedRequestsoption tooptimizeDeps(#21364) (b2e75aa)rolldown-vitemerge (#21189) (4a7f8d4)Bug Fixes
watch.watcherinstead ofwatch.notify(#21793) (88953b3)server.originto public file URLs in CSS (fix #18457) (#21697) (c967f48)ssrLoadModulewith non-runnable ssr env (#21739) (1fa736e)preserveSymlinksis enabled (#21720) (72165e0)sourcemapInterceptor: "prepareStackTrace"(#21562) (416c095)tsconfigoption when loading config (#21517) (5025c35)new URLpaths to correct relative file location (#21434) (ca96cbc)output.inlineDynamicImportoption (#21464) (471ce62)server.listencallback (#21451) (602d786)rolldownCjsExternalPluginforplatform: neutral(#21452) (d2fc4be)process.getBuiltinModuleinstead ofimport('node:module')(#21402) (6633bcb)new Worker(..., new URL(import.meta.url))with trailing comma (#21325) (4a47241)import.meta.resolvewhen formatted across multiple lines (#21312) (130e718)experimental.bundledDevis enabled (#21296) (e81c183)Performance Improvements
Documentation
build.dynamicImportVarsOptions(#21477) (54ce2ed)vitein IPA symbols (#21238) (9b1d4d6)Miscellaneous Chores
fdirand@rollup/plugin-commonjs(#21639) (5abffd5)customResolverdeprecation message to mentionenforce: 'pre'(#21576) (2ce34d5)Code Refactoring
optimization.inlineConst: { mode: 'smart' }as it's enabled by default (#21794) (22b3d11)legalCommentsoption (#21721) (e06496e)ESTreetypes fromrolldown/utils(#21719) (9239750)customResolverinresolve.alias(#21476) (81275c9)@rolldown/pluginutils(#21560) (c367b62)rolldown/utils(#21577) (e56103f)experimental.enableNativePlugin: 'resolver'(#21510) (f9d9213)import.meta.dirnameeverywhere (#21509) (7becf5f)rolldownCjsExternalPlugin(#21450) (ebda8fd)import.meta.hot.acceptresolution fallback (#21382) (71d0797)Tests
handleInvokewas called in server-worker-runner.invoke test (#21751) (b95ca22)defineConfig(#21698) (4fedbbd)Beta Changelogs
8.0.0-beta.18 (2026-03-09)
See 8.0.0-beta.18 changelog
8.0.0-beta.17 (2026-03-09)
See 8.0.0-beta.17 changelog
8.0.0-beta.16 (2026-02-27)
See 8.0.0-beta.16 changelog
8.0.0-beta.15 (2026-02-19)
See 8.0.0-beta.15 changelog
8.0.0-beta.14 (2026-02-12)
See 8.0.0-beta.14 changelog
8.0.0-beta.13 (2026-02-05)
See 8.0.0-beta.13 changelog
8.0.0-beta.12 (2026-02-03)
See 8.0.0-beta.12 changelog
8.0.0-beta.11 (2026-01-29)
See 8.0.0-beta.11 changelog
8.0.0-beta.10 (2026-01-24)
See 8.0.0-beta.10 changelog
8.0.0-beta.9 (2026-01-22)
See 8.0.0-beta.9 changelog
8.0.0-beta.8 (2026-01-15)
See 8.0.0-beta.8 changelog
8.0.0-beta.7 (2026-01-08)
See 8.0.0-beta.7 changelog
8.0.0-beta.6 (2026-01-07)
See 8.0.0-beta.6 changelog
8.0.0-beta.5 (2025-12-25)
See 8.0.0-beta.5 changelog
8.0.0-beta.4 (2025-12-22)
See 8.0.0-beta.4 changelog
8.0.0-beta.3 (2025-12-18)
See 8.0.0-beta.3 changelog
8.0.0-beta.2 (2025-12-12)
See 8.0.0-beta.2 changelog
8.0.0-beta.1 (2025-12-08)
See 8.0.0-beta.1 changelog
8.0.0-beta.0 (2025-12-03)
See 8.0.0-beta.0 changelog
Rolldown-Vite changelogs
See rolldown-vite changelog
v7.2.0Compare Source
Bug Fixes
getBuiltinsresponse JSON serializable (#21029) (ad5b3bf)Miscellaneous Chores
v7.1.12Compare Source
Please refer to CHANGELOG.md for details.
v7.1.11Compare Source
Bug Fixes
server.fs.denycheck (#20968) (f479cc5)Miscellaneous Chores
Code Refactoring
Build System
v7.1.10Compare Source
Bug Fixes
//(#20760) (b95fa2a)fileToBuiltUrl(#20898) (73b6d24)Documentation
WebSocketspelling (#20890) (29e98dc)Miscellaneous Chores
v7.1.9Compare Source
Reverts
v7.1.8Compare Source
Bug Fixes
Documentation
Miscellaneous Chores
create-react-applicense (#20865) (166a178)v7.1.7Compare Source
Bug Fixes
emitAssets: truewhensharedConfigBuild: true(#20787) (4c4583c)import.meta.hot.prunecallbacks to complete before running other HMRs (#20698) (98a3484)v7.1.6Compare Source
Bug Fixes
$variables correctly (#20761) (7e8e004)skipLibCheckisfalse(#20755) (cc54e29)Miscellaneous Chores
v7.1.5Compare Source
Bug Fixes
fs.strictcheck to HTML files (#20736) (14015d7)v7.1.4Compare Source
Bug Fixes
Miscellaneous Chores
Code Refactoring
minifyparameter fromfinalizeCss(#20701) (8099582)v7.1.3Compare Source
Features
generateCodeFrame(#20640) (1559577)Bug Fixes
Performance Improvements
resolveConfig(#20646) (f691f57)Miscellaneous Chores
Code Refactoring
importin worker threads (#20641) (530687a)Tests
checkNodeVersiontest (#20647) (731d3e6)v7.1.2Compare Source
Bug Fixes
[vite]prefixes to debug logs (#20595) (7cdef61)npm:prefix as a built-in module (#20558) (ab33803)Miscellaneous Chores
@jridgewell/remappingfrom@ampproject/remapping(#20577) (0a6048a)v7.1.1Compare Source
Bug Fixes
server.fs.denycheck (#20968) (f479cc5)Miscellaneous Chores
Code Refactoring
Build System
v7.1.0Compare Source
Features
generateCodeFrame(#20508) (e7d0b2a)import.meta.mainsupport in config (bundle config loader) (#20516) (5d3e3c2)import.meta.mainsupport for Node.js module runner (#20517) (794a8f2)future: 'warn'(#20473) (e6aaf17)removeServerPluginContainerfuture deprecation (#20437) (c1279e7)removeServerReloadModulefuture deprecation (#20436) (6970d17)server.warmupRequestto future deprecation (#20431) (8ad388a)ssrFixStacktrace/ssrRewriteStacktracetoremoveSsrLoadModulefuture deprecation (#20435) (8c8f587)this.fssupport (#20301) (0fe3f2f)defaultExternalConditions(#20279) (344d302)removePluginHookSsrArgumentfuture deprecation (#20433) (95927d9)removeServerHotfuture deprecation (#20434) (259f45d)resolve.externalConditionsand addmodule-syncto default external condition (#20409) (c669c52)import.meta.resolvein module runner (#20260) (62835f7)Bug Fixes
image-setcontaining__VITE_ASSET__(#20520) (f1a2635)entryCssAssetFileNamesas an empty Set (#20542) (6a46cda)new URL(, import.meta.url)(#20507) (1b211fd)noExternal: truecorrectly (#20502) (9ebe4a5)type: asset(#20391) (7eac8dd)resolvedUrls(#20496) (62b3e0d)Performance Improvements
Miscellaneous Chores
cssScopeTo(#19592) (ced1343)Code Refactoring
http-proxy-3(#20402) (26d9872)Tests
process.features(#20544) (856d3f0)Beta Changelogs
7.1.0-beta.1 (2025-08-05)
See 7.1.0-beta.1 changelog
7.1.0-beta.0 (2025-07-30)
See 7.1.0-beta.0 changelog
v7.0.8Compare Source
Please refer to CHANGELOG.md for details.
v7.0.7Compare Source
Please refer to CHANGELOG.md for details.
v7.0.6Compare Source
Features
generateCodeFrame(#20508) (e7d0b2a)import.meta.mainsupport in config (bundle config loader) (#20516) (5d3e3c2)import.meta.mainsupport for Node.js module runner (#20517) (794a8f2)future: 'warn'(#20473) (e6aaf17)removeServerPluginContainerfuture deprecation (#20437) (c1279e7)removeServerReloadModulefuture deprecation (#20436) (6970d17)server.warmupRequestto future deprecation (#20431) (8ad388a)ssrFixStacktrace/ssrRewriteStacktracetoremoveSsrLoadModulefuture deprecation (#20435) (8c8f587)this.fssupport (#20301) (0fe3f2f)defaultExternalConditions(#20279) (344d302)removePluginHookSsrArgumentfuture deprecation (#20433) (95927d9)removeServerHotfuture deprecation (#20434) (259f45d)resolve.externalConditionsand addmodule-syncto default external condition (#20409) (c669c52)import.meta.resolvein module runner (#20260) (62835f7)Bug Fixes
image-setcontaining__VITE_ASSET__(#20520) (f1a2635)entryCssAssetFileNamesas an empty Set (#20542) (6a46cda)new URL(, import.meta.url)(#20507) (1b211fd)noExternal: truecorrectly (#20502) (9ebe4a5)type: asset(#20391) (7eac8dd)resolvedUrls(#20496) (62b3e0d)Performance Improvements
Miscellaneous Chores
cssScopeTo(#19592) (ced1343)Code Refactoring
http-proxy-3(#20402) (26d9872)Tests
process.features(#20544) (856d3f0)Beta Changelogs
7.1.0-beta.1 (2025-08-05)
See 7.1.0-beta.1 changelog
7.1.0-beta.0 (2025-07-30)
See 7.1.0-beta.0 changelog
v7.0.5Compare Source
Bug Fixes
Accept: text/html(#20376) (c9614b9)new URL(, import.meta.url)(#20382) (6bc8bf6)Miscellaneous Chores
Code Refactoring
foo.endsWith("bar")instead of/bar$/.test(foo)(#20413) (862e192)v7.0.4Compare Source
Bug Fixes
Build System
@oxc-project/runtimedevDep (#20389) (5e29602)v7.0.3Compare Source
Bug Fixes
Miscellaneous Chores
n/prefer-node-protocolrule (#20368) (38bb268)Code Refactoring
v7.0.2Compare Source
Bug Fixes
v7.0.1Compare Source
Bug Fixes
Miscellaneous Chores
v7.0.0Compare Source
Today, we're excited to announce the release of the next Vite major:
⚠ BREAKING CHANGES
Objectvariable in ssr transformed code (#19996) (fceff60)experimental.skipSsrTransformoption (#20038) (6c3dd8e)HotBroadcaster(#19988) (cda8c94)build.targetand name itbaseline-widely-available(#20007) (4a8aa82)HotBroadcasterrelated types (#19987) (86b5e00)enforce/transformfromtransformIndexHtmlhook (#19349) (6198b9d)Features
configurePreviewServerhook (#20224) (b989c42)configureServerhook (#20222) (f5cc4c0)this.meta.viteVersion(#20088) (f55bf41)createServer(#19894) (c1ae9bd)build.targetand name itbaseline-widely-available(#20007) (4a8aa82)css.preprocessorMaxWorkersand default totrue(#19992) (70aee13)optimizeDeps.noDiscovery(#19984) (6d2dcb4)Bug Fixes
import.meta.urlin bundled Vite (#20235) (3bf3a8a)ssrExportNameKey(#20266) (ac302a7)normalizeModuleId(#20277) (9b98dcb).then(m => m.a)(#20117) (7b7410a)build.rollupOptions.inputresolution with rollup (#20080) (9759c29)Objectvariable in ssr transformed code (#19996) (fceff60)preprocessorOptions.sass(fix #20150) (#20166) (7db56be)cleanGlobalCLIOptions()clean--force(#19999) (d4a171a)environments.*.resolve.noExternalproperly (#20077) (daf4a25)server.allowedHosts: truecorrectly (#20138) (2ade756)computeEntriesfailed (#20079) (b742b46)optimizeDeps.entriesvalues as globs (#20045) (1422395)Performance Improvements
numberToPos(#20244) (3f46901)Documentation
Miscellaneous Chores
ResolvedConfig.createResolverand recommendcreateIdResolver(#20031) (d101d64)devEnvironmentOptions.moduleRunnerTransform(#20035) (338081d)patch-typesplugin for bundling vite (#20089) (c127955)Code Refactoring
src/node/publicUtils.tstosrc/node/index.ts(#20086) (999a1ed)experimental.skipSsrTransformoption (#20038) (6c3dd8e)HotBroadcaster(#19988) (cda8c94)options?.ssrsupport in clientInjectionsPlugin (#19589) (88e0076)HotBroadcasterrelated types (#19987) (86b5e00)enforce/transformfromtransformIndexHtmlhook (#19349) (6198b9d)legacy.proxySsrExternalModules(#20013) (a37ac83)hostValidationMiddleware(#20019) (83bf90e)mergeWithDefaultsfor experimental option (#20012) (98c5741)Tests
useDefineForClassFieldstest (#20143) (d90796e)Continuous Integration
Beta Changelogs
7.0.0-beta.2 (2025-06-17)
See 7.0.0-beta.2 changelog
7.0.0-beta.1 (2025-06-10)
See 7.0.0-beta.1 changelog
7.0.0-beta.0 (2025-06-02)
See 7.0.0-beta.0 changelog
v6.4.4Compare Source
Please refer to CHANGELOG.md for details.
v6.4.3Compare Source
Please refer to CHANGELOG.md for details.
v6.4.2Compare Source
Please refer to CHANGELOG.md for details.
v6.4.1Compare Source
Please refer to CHANGELOG.md for details.
v6.4.0Compare Source
Please refer to CHANGELOG.md for details.
v6.3.7Compare Source
Please refer to CHANGELOG.md for details.
v6.3.6Compare Source
Please refer to CHANGELOG.md for details.
v6.3.5Compare Source
Today, we're excited to announce the release of the next Vite major:
⚠ BREAKING CHANGES
Objectvariable in ssr transformed code (#19996) (fceff60)experimental.skipSsrTransformoption (#20038) (6c3dd8e)HotBroadcaster(#19988) (cda8c94)build.targetand name itbaseline-widely-available(#20007) (4a8aa82)HotBroadcasterrelated types (#19987) (86b5e00)enforce/transformfromtransformIndexHtmlhook (#19349) (6198b9d)Features
configurePreviewServerhook (#20224) (b989c42)configureServerhook (#20222) (f5cc4c0)this.meta.viteVersion(#20088) (f55bf41)createServer(#19894) (c1ae9bd)build.targetand name itbaseline-widely-available(#20007) (4a8aa82)css.preprocessorMaxWorkersand default totrue(#19992) (70aee13)optimizeDeps.noDiscovery(#19984) (6d2dcb4)Bug Fixes
import.meta.urlin bundled Vite (#20235) (3bf3a8a)ssrExportNameKey(#20266) (ac302a7)normalizeModuleId(#20277) (9b98dcb).then(m => m.a)(#20117) (7b7410a)build.rollupOptions.inputresolution with rollup (#20080) (9759c29)Objectvariable in ssr transformed code (#19996) (fceff60)preprocessorOptions.sass(fix #20150) (#20166) (7db56be)cleanGlobalCLIOptions()clean--force(#19999) (d4a171a)environments.*.resolve.noExternalproperly (#20077) (daf4a25)server.allowedHosts: truecorrectly (#20138) (2ade756)computeEntriesfailed (#20079) (b742b46)optimizeDeps.entriesvalues as globs (#20045) (1422395)Performance Improvements
numberToPos(#20244) (3f46901)Documentation
Miscellaneous Chores
ResolvedConfig.createResolverand recommendcreateIdResolver(#20031) (d101d64)devEnvironmentOptions.moduleRunnerTransform(#20035) (338081d)patch-typesplugin for bundling vite (#20089) (c127955)Code Refactoring
src/node/publicUtils.tstosrc/node/index.ts(#20086) (999a1ed)experimental.skipSsrTransformoption (#20038) (6c3dd8e)HotBroadcaster(#19988) (cda8c94)options?.ssrsupport in clientInjectionsPlugin (#19589) (88e0076)HotBroadcasterrelated types (#19987) (86b5e00)enforce/transformfromtransformIndexHtmlhook (#19349) (6198b9d)legacy.proxySsrExternalModules(#20013) (a37ac83)hostValidationMiddleware(#20019) (83bf90e)mergeWithDefaultsfor experimental option (#20012) (98c5741)Tests
useDefineForClassFieldstest (#20143) (d90796e)Continuous Integration
Beta Changelogs
7.0.0-beta.2 (2025-06-17)
See 7.0.0-beta.2 changelog
7.0.0-beta.1 (2025-06-10)
See 7.0.0-beta.1 changelog
7.0.0-beta.0 (2025-06-02)
See 7.0.0-beta.0 changelog
v6.3.4Compare Source
Bug Fixes
requireto import externals in optimized dependencies (#19940) (efc5eab)Code Refactoring
v6.3.3Compare Source
Bug Fixes
Performance Improvements
Tests
ssrTransformre-export deps and test stacktrace with first line (#19629) (9399cda)v6.3.2Compare Source
Features
Bug Fixes
css.lightningcssoption in css minification process (#19879) (b5055e0)v6.3.1Compare Source
Bug Fixes
Promise.allSettledin preload function (#19805) (35c7f35)transformcalls (#19878) (a152b7c)v6.3.0Compare Source
Features
CustomPluginOptionsVitetype (#19557) (15abc01)define['process.env']containspathkey with a value (#19517) (832b2c4)Bug Fixes
hot.invalidatein circular deps (#19870) (d4ee5e8)#in request-target (#19830) (175a839)keepProcessEnvfrom theDefaultEnvironmentOptionstype (#19796) (36935b5)fdirto fixcommonjsOptions.dynamicRequireTargets(#19791) (71227be).mtsto defaultresolve.extensions(#19701) (ae91bd0)Performance Improvements
renderedModules(#19775) (59d0b35)debug(#19715) (e435aae)Documentation
transformIndexHtmlhook (#19799) (a0e1a04)Miscellaneous Chores
Code Refactoring
[hookName].handlerin plugins (#19586) (9827df2)Tests
Beta Changelogs
6.3.0-beta.2 (2025-04-11)
See 6.3.0-beta.2 changelog
6.3.0-beta.1 (2025-04-03)
See 6.3.0-beta.1 changelog
6.3.0-beta.0 (2025-03-26)
See 6.3.0-beta.0 changelog
v6.2.7Compare Source
Please refer to CHANGELOG.md for details.
v6.2.6Compare Source
Please refer to CHANGELOG.md for details.
v6.2.5Compare Source
Please refer to CHANGELOG.md for details.
v6.2.4Compare Source
Please refer to CHANGELOG.md for details.
v6.2.3Compare Source
Please refer to CHANGELOG.md for details.
v6.2.2Compare Source
Features
CustomPluginOptionsVitetype (#19557) (15abc01)define['process.env']containspathkey with a value (#19517) (832b2c4)Bug Fixes
hot.invalidatein circular deps (#19870) (d4ee5e8)#in request-target (#19830) (175a839)keepProcessEnvfrom theDefaultEnvironmentOptionstype (#19796) (36935b5)fdirto fixcommonjsOptions.dynamicRequireTargets(#19791) (71227be).mtsto defaultresolve.extensions(#19701) (ae91bd0)Performance Improvements
renderedModules(#19775) (59d0b35)debug(#19715) (e435aae)Documentation
transformIndexHtmlhook (#19799) (a0e1a04)Miscellaneous Chores
Code Refactoring
[hookName].handlerin plugins (#19586) (9827df2)Tests
Beta Changelogs
6.3.0-beta.2 (2025-04-11)
See 6.3.0-beta.2 changelog
6.3.0-beta.1 (2025-04-03)
See 6.3.0-beta.1 changelog
6.3.0-beta.0 (2025-03-26)
See 6.3.0-beta.0 changelog
v6.2.1Compare Source
Features
*?url&no-inlinetype and warning for.json?inline/.json?no-inline(#19566) (c0d3667)Bug Fixes
Performance Improvements
Miscellaneous Chores
Code Refactoring
isBuildcheck from preAliasPlugin (#19587) (c9e086d)applyToEnvironmentin internal plugins (#19588) (f678442)Tests
v6.2.0Compare Source
Features
modeon server start and add env debugger (#18808) (c575b82)Bug Fixes
?.afterthis.getModuleInfoinvite:css-post(#19478) (12b0b8a)Miscellaneous Chores
Beta Changelogs
6.2.0-beta.1 (2025-02-21)
See 6.2.0-beta.1 changelog
6.2.0-beta.0 (2025-02-21)
See 6.2.0-beta.0 changelog
v6.1.6Compare Source
Please refer to CHANGELOG.md for details.
v6.1.5Compare Source
Please refer to CHANGELOG.md for details.
v6.1.4Compare Source
Please refer to CHANGELOG.md for details.
v6.1.3Compare Source
Please refer to CHANGELOG.md for details.
v6.1.2Compare Source
Please refer to CHANGELOG.md for details.
v6.1.1Compare Source
Features
modeon server start and add env debugger (#18808) (c575b82)Bug Fixes
?.afterthis.getModuleInfoinvite:css-post(#19478) (12b0b8a)Miscellaneous Chores
Beta Changelogs
6.2.0-beta.1 (2025-02-21)
See 6.2.0-beta.1 changelog
6.2.0-beta.0 (2025-02-21)
See 6.2.0-beta.0 changelog
v6.1.0Compare Source
Features
Bug Fixes
.[cm]?[tj]sx?static assets are JS mime (#19453) (e7ba55e)*.ipv4address in cert (#19416) (973283b)Miscellaneous Chores
Code Refactoring
v6.0.15Compare Source
Please refer to CHANGELOG.md for details.
v6.0.14Compare Source
Please refer to CHANGELOG.md for details.
v6.0.13Compare Source
Please refer to CHANGELOG.md for details.
v6.0.12Compare Source
Please refer to CHANGELOG.md for details.
v6.0.11Compare Source
Features
portin the logged error message after failed WS connection withEADDRINUSE(#19212) (14027b0).jxl(#18855) (57b397c)builtinsenvironmentresolve(#18584) (2c2d521)defaultAllowedOriginsfor user-land config and 3rd party plugins (#19259) (dc8946b)wasmto the compressible assets regex (#19085) (ce84142)Bug Fixes
resolveLibCssFilename(#19324) (f183bdf)[@plugin](https://github.com/plugin)imports of JS files treated as CSS and rebased (fix #19268) (#19269) (602b373)vite optimize(#19347) (19ffad0)resolve.builtinis empty (#19312) (b7aba0b)server.preTransformRequests(#19272) (12aaa58)ssrLoadModule(#19290) (353c467)nodeLikeBuiltinsforssr.target: 'webworker'withoutnoExternal: true(#19313) (9fc31b6)--forcework for all environments (#18901) (51a42c6)RegExpvalues withnew RegExpinstead ofstructuredClone(fix #19245, fix #18875) (#19247) (56ad2be)Performance Improvements
Documentation
build.manifestjsdocs (#19332) (4583781)Code Refactoring
vite optimizecommand (#19348) (6e0e3c0)Miscellaneous Chores
scanImportsnot being used in ssr (#19285) (fbbc6da)Beta Changelogs
6.1.0-beta.2 (2025-02-04)
See 6.1.0-beta.2 changelog
6.1.0-beta.1 (2025-02-04)
See 6.1.0-beta.1 changelog
6.1.0-beta.0 (2025-01-24)
See 6.1.0-beta.0 changelog
v6.0.10Compare Source
Bug Fixes
server.originURL (#19241) (2495022)v6.0.9Compare Source
⚠ BREAKING CHANGES
server.allowedHosts(bd896fb)server.cors: falseto disallow fetching from untrusted origins (b09572a)Bug Fixes
server.allowedHosts(bd896fb)server.cors: falseto disallow fetching from untrusted origins (b09572a)v6.0.8Compare Source
Bug Fixes
server.close()only called once (#19204) (db81c2d)defaultServerConditions(#19174) (ad75c56)ESBuildOptions.include / excludetype to allowreadonly (string | RegExp)[](#19146) (ea53e70)Miscellaneous Chores
v6.0.7Compare Source
Features
Bug Fixes
minifywhenbuilder.sharedPlugins: true(#19025) (f7b1964)vite-ignoreattribute for inline script (#19062) (a492253)Performance Improvements
v6.0.6Compare Source
Bug Fixes
fetchModule-side resolve (#18361) (9f10261)Reverts
Miscellaneous Chores
build.target(#19047) (0e9e81f)Tests
v6.0.5Compare Source
Bug Fixes
v6.0.4Compare Source
Bug Fixes
this.resolveskipSelf should not skip for differentidorimport(#18903) (4727320)url()when lightningcss is used (#18997) (3734f80)pluginContainer.getModuleInfo(#18895) (258cdd6)true(#18899) (8a6bb4e)Miscellaneous Chores
Code Refactoring
handleInvoke(#18902) (27f691b)Tests
ModuleRunnerTransportinvokeAPI (#18865) (e5f5301)v6.0.3Compare Source
Bug Fixes
ModuleRunnerTransport[#invoke](https://github.com/vitejs/vite/issues/invoke)more explicit (#18851) (a75fc31)environments.ssr.resolvewith rootssrconfig (#18857) (3104331)Miscellaneous Chores
Code Refactoring
v6.0.2Compare Source
Features
Bug Fixes
node_modulesif deno (#18823) (a20267b)style.cssas a key for the style file forcssCodesplit: false(#18820) (ec51115)externalby default (#18821) (2250ffa)ssr.target: 'webworker'defaults as fallback (#18827) (b39e696)Miscellaneous Chores
Code Refactoring
v6.0.1Compare Source
Features
portin the logged error message after failed WS connection withEADDRINUSE(#19212) (14027b0).jxl(#18855) (57b397c)builtinsenvironmentresolve(#18584) (2c2d521)defaultAllowedOriginsfor user-land config and 3rd party plugins (#19259) (dc8946b)wasmto the compressible assets regex (#19085) (ce84142)Bug Fixes
resolveLibCssFilename(#19324) (f183bdf)[@plugin](https://github.com/plugin)imports of JS files treated as CSS and rebased (fix #19268) (#19269) (602b373)vite optimize(#19347) (19ffad0)resolve.builtinis empty (#19312) (b7aba0b)server.preTransformRequests(#19272) (12aaa58)ssrLoadModule(#19290) (353c467)nodeLikeBuiltinsforssr.target: 'webworker'withoutnoExternal: true(#19313) (9fc31b6)--forcework for all environments (#18901) (51a42c6)RegExpvalues withnew RegExpinstead ofstructuredClone(fix #19245, fix #18875) (#19247) (56ad2be)Performance Improvements
Documentation
build.manifestjsdocs (#19332) (4583781)Code Refactoring
vite optimizecommand (#19348) (6e0e3c0)Miscellaneous Chores
scanImportsnot being used in ssr (#19285) (fbbc6da)Beta Changelogs
6.1.0-beta.2 (2025-02-04)
See 6.1.0-beta.2 changelog
6.1.0-beta.1 (2025-02-04)
See 6.1.0-beta.1 changelog
6.1.0-beta.0 (2025-01-24)
See 6.1.0-beta.0 changelog
v6.0.0Compare Source
Features
portin the logged error message after failed WS connection withEADDRINUSE(#19212) (14027b0).jxl(#18855) (57b397c)builtinsenvironmentresolve(#18584) (2c2d521)defaultAllowedOriginsfor user-land config and 3rd party plugins (#19259) (dc8946b)wasmto the compressible assets regex (#19085) (ce84142)Bug Fixes
resolveLibCssFilename(#19324) (f183bdf)[@plugin](https://github.com/plugin)imports of JS files treated as CSS and rebased (fix #19268) (#19269) (602b373)vite optimize(#19347) (19ffad0)resolve.builtinis empty (#19312) (b7aba0b)server.preTransformRequests(#19272) (12aaa58)ssrLoadModule(#19290) (353c467)nodeLikeBuiltinsforssr.target: 'webworker'withoutnoExternal: true(#19313) (9fc31b6)--forcework for all environments (#18901) (51a42c6)RegExpvalues withnew RegExpinstead ofstructuredClone(fix #19245, fix #18875) (#19247) (56ad2be)Performance Improvements
Documentation
build.manifestjsdocs (#19332) (4583781)Code Refactoring
vite optimizecommand (#19348) (6e0e3c0)Miscellaneous Chores
scanImportsnot being used in ssr (#19285) (fbbc6da)Beta Changelogs
6.1.0-beta.2 (2025-02-04)
See 6.1.0-beta.2 changelog
6.1.0-beta.1 (2025-02-04)
See 6.1.0-beta.1 changelog
6.1.0-beta.0 (2025-01-24)
See 6.1.0-beta.0 changelog
Configuration
📅 Schedule: (in timezone Australia/Melbourne)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.
feat(deps)!: Update dependency vite ( 5.4.21 → 8.3.0 ) [SECURITY]to feat(deps)!: Update dependency vite ( 5.4.21 → 8.3.1 ) [SECURITY]feat(deps)!: Update dependency vite ( 5.4.21 → 8.3.1 ) [SECURITY]to feat(deps)!: Update dependency vite ( 5.4.21 → 8.3.2 ) [SECURITY]feat(deps)!: Update dependency vite ( 5.4.21 → 8.3.2 ) [SECURITY]to feat(deps)!: Update dependency vite ( 5.4.21 → 8.3.3 ) [SECURITY]View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.Merge
Merge the changes and update on Forgejo.Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.