chore: bump vite, @vitejs/plugin-react, @vitest/coverage-v8 and vite-plugin-istanbul by dependabot[bot] · Pull Request #851 · signavio/react-stick

dependabot · 2026-04-07T10:33:48Z

Bumps vite, @vitejs/plugin-react, @vitest/coverage-v8 and vite-plugin-istanbul. These dependencies needed to be updated together.
Updates vite from 3.2.10 to 8.0.5

Release notes

Sourced from vite's releases.

v8.0.5

Please refer to CHANGELOG.md for details.

v8.0.4

Please refer to CHANGELOG.md for details.

create-vite@8.0.3

Please refer to CHANGELOG.md for details.

v8.0.3

Please refer to CHANGELOG.md for details.

create-vite@8.0.2

Please refer to CHANGELOG.md for details.

v8.0.2

Please refer to CHANGELOG.md for details.

create-vite@8.0.1

Please refer to CHANGELOG.md for details.

v8.0.1

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.1

Please refer to CHANGELOG.md for details.

create-vite@8.0.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0-beta.18

Please refer to CHANGELOG.md for details.

v8.0.0-beta.17

Please refer to CHANGELOG.md for details.

v8.0.0-beta.16

Please refer to CHANGELOG.md for details.

v8.0.0-beta.15

Please refer to CHANGELOG.md for details.

v8.0.0-beta.14

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.0.5 (2026-04-06)

Bug Fixes

apply server.fs check to env transport (#22159) (f02d9fd)

avoid path traversal with optimize deps sourcemap handler (#22161) (79f002f)

check server.fs after stripping query as well (#22160) (a9a3df2)

disallow referencing files outside the package from sourcemap (#22158) (f05f501)

8.0.4 (2026-04-06)

Features

allow esbuild 0.28 as peer deps (#22155) (b0da973)

hmr: truncate list of files on hmr update (#21535) (d00e806)

optimizer: log when dependency scanning or bundling takes over 1s (#21797) (f61a1ab)

Bug Fixes

hasBothRollupOptionsAndRolldownOptions should return false for proxy case (#22043) (99897d2)

add types for vite/modulepreload-polyfill (#22126) (17330d2)

deps: update all non-major dependencies (#22073) (6daa10f)

deps: update all non-major dependencies (#22143) (22b0166)

resolve: resolve tsconfig paths starting with # (#22038) (3460fc5)

ssr: use browser platform for webworker SSR builds (fix #21969) (#21963) (364c227)

Documentation

add environment.fetchModule documentation (#22035) (54229e7)

Miscellaneous Chores

deps: update rolldown-related dependencies (#21989) (0ded627)

Code Refactoring

upgrade to typescript 6 (#22110) (cc41398)

8.0.3 (2026-03-26)

Features

update rolldown to 1.0.0-rc.12 (#22024) (84164ef)

Bug Fixes

html: cache unfiltered CSS list to prevent missing styles across entries (#22017) (5464190)

module-runner: handle non-ascii characters in base64 sourcemaps (#21985) (77c95bf)

module-runner: skip re-import if the runner is closed (#22020) (ee2c2cd)

optimizer: scan is not resolving sub path import if used in a glob import (#22018) (ddfe20d)

ssr: ssrTransform incorrectly rewrites meta identifier inside import.meta when a binding named meta exists (#22019) (cff5f0c)

Miscellaneous Chores

... (truncated)

Commits

1a12d4c release: v8.0.5
79f002f fix: avoid path traversal with optimize deps sourcemap handler (#22161)
a9a3df2 fix: check server.fs after stripping query as well (#22160)
f02d9fd fix: apply server.fs check to env transport (#22159)
f05f501 fix: disallow referencing files outside the package from sourcemap (#22158)
7339bdc release: v8.0.4
54229e7 docs: add environment.fetchModule documentation (#22035)
b0da973 feat: allow esbuild 0.28 as peer deps (#22155)
22b0166 fix(deps): update all non-major dependencies (#22143)
17330d2 fix: add types for vite/modulepreload-polyfill (#22126)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite since your current version.

Updates @vitejs/plugin-react from 2.2.0 to 6.0.1

Release notes

Sourced from @vitejs/plugin-react's releases.

plugin-react@6.0.1

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

plugin-react@6.0.0

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:
 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})
For React compiler users, you can use reactCompilerPreset for easier setup with preconfigured filter to improve build performance:
 import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [

react({

 babel: {



   plugins: ['babel-plugin-react-compiler'],



 },


}),


react(),
babel({

 presets: [reactCompilerPreset()]



</tr></table>

... (truncated)

Changelog

Sourced from @vitejs/plugin-react's changelog.

6.0.1 (2026-03-13)

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

6.0.0 (2026-03-12)

6.0.0-beta.0 (2026-03-03)

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:
 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})
For React compiler users, you can use reactCompilerPreset for easier setup with preconfigured filter to improve build performance:
 import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [

react({

 babel: {



   plugins: ['babel-plugin-react-compiler'],



 },



</tr></table>

... (truncated)

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @vitejs/plugin-react since your current version.

Updates @vitest/coverage-v8 from 1.6.0 to 4.1.3

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.1.3

   🚀 Experimental Features

Add experimental.preParse flag - by @sheremet-va in vitest-dev/vitest#10070 (78273)

Support browser.locators.exact option - by @sheremet-va in vitest-dev/vitest#10013 (48799)

Add TestAttachment.bodyEncoding - by @hi-ogawa in vitest-dev/vitest#9969 (89ca0)

Support custom snapshot matcher - by @hi-ogawa, Claude Sonnet 4.6 and Codex in vitest-dev/vitest#9973 (59b0e)

   🐞 Bug Fixes

Advance fake timers with expect.poll interval - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10022 (3f5bf)

Add @vitest/coverage-v8 and @vitest/coverage-istanbul as optional dependency - by @alan-agius4 in vitest-dev/vitest#10025 (146d4)

Fix defineHelper for webkit async stack trace + update playwright 1.59.0 - by @hi-ogawa in vitest-dev/vitest#10036 (5a5fa)

Fix suite hook throwing errors for unused auto test-scoped fixture - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10035 (39865)

expect:

Remove JestExtendError.context from verbose error reporting - by @hi-ogawa in vitest-dev/vitest#9983 (66751)

Don't leak "runner" types - by @sheremet-va in vitest-dev/vitest#10004 (ec204)

snapshot:

Fix flagging obsolete snapshots for snapshot properties mismatch - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#9986 (6b869)

Export custom snapshot matcher helper from vitest - by @hi-ogawa and Codex in vitest-dev/vitest#10042 (691d3)

ui:

Don't leak vite types - by @sheremet-va in vitest-dev/vitest#10005 (fdff1)

vm:

Fix external module resolve error with deps optimizer query - by @hi-ogawa and Claude Sonnet 4.6 in vitest-dev/vitest#10024 (9dbf4)

    View changes on GitHub

v4.1.2

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (vitest-dev/vitest#9975).

   🐞 Bug Fixes

Don't resolve setupFiles from parent directory - by @hi-ogawa in vitest-dev/vitest#9960 (7aa93)

Ensure sequential mock/unmock resolution - by @hi-ogawa and Claude Opus 4.6 in vitest-dev/vitest#9830 (7c065)

browser: Take failure screenshot if toMatchScreenshot can't capture a stable screenshot - by @macarie in vitest-dev/vitest#9847 (faace)

coverage: Correct coverageConfigDefaults values and types - by @Arthie in vitest-dev/vitest#9940 (b3c99)

pretty-format: Fix output limit over counting - by @hi-ogawa in vitest-dev/vitest#9965 (d3b7a)

Disable colors if agent is detected - by @sheremet-va and @AriPerkkio in vitest-dev/vitest#9851 (6f97b)

    View changes on GitHub

v4.1.1

   🚀 Features

experimental:

Expose matchesTags to test if the current filter matches tags - by @sheremet-va in vitest-dev/vitest#9913 (eec53)

Introduce experimental.vcsProvider - by @sheremet-va in vitest-dev/vitest#9928 (56115)

   🐞 Bug Fixes

... (truncated)

Commits

2dc0d62 chore: release v4.1.3
fc6f482 chore: release v4.1.2
1f2d318 chore: release v4.1.1
aaf9f18 fix(coverage): simplify provider types (#9931)
4150b91 chore: release v4.1.0
0c2c013 chore: release v4.1.0-beta.6
689a22a fix(browser): types of getCDPSession and cdp() (#9716)
94eb73b chore(deps): update eslint packages (#9615)
8c96bb0 refator: update links to npmx (#9783)
aaf7758 chore: standardize packages README (#9776)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @vitest/coverage-v8 since your current version.

Updates vite-plugin-istanbul from 5.0.0 to 8.0.0

Release notes

Sourced from vite-plugin-istanbul's releases.

v8.0.0

8.0.0 (2026-03-10)

chore(deps)!: removed the upper range of vite peer (#396) (17df98d)

Features

update node v24.14.0 (#377) (c60c931)

BREAKING CHANGES

removed the upper range of the vite peer dependency.

chore(pnpm): updated lockfile

v7.2.1

7.2.1 (2025-11-08)

Bug Fixes

added @types/babel__generator to dependencies (#358) (e43eb8f)

v7.2.0

7.2.0 (2025-09-16)

Bug Fixes

build type dependencies (#351) (7c6a8b9)

Features

add onCover callback to IstanbulPluginOptions and expose fileCoverage in Instrumenter (#354) (9799fa3)

v7.1.0

7.1.0 (2025-07-10)

Bug Fixes

update vite peer dependency specifier to support version 7 (4dc0e9f)

Features

... (truncated)

Commits

b60f782 chore(package): corrected the repo urls (#398)
50ae367 chore: added agents file (#376)
56e6eee chore: refactored release config (#382)
70634d3 build(deps-dev): bump unbuild from 3.3.1 to 3.6.1 (#391)
8ae5387 build(deps): bump source-map from 0.7.4 to 0.7.6 (#392)
0a4f40c build(deps-dev): bump lint-staged from 15.4.3 to 16.3.2 (#389)
c87c595 build(deps-dev): bump @ianvs/prettier-plugin-sort-imports (#388)
0b6036b chore: updated package config for publishing to work (#397)
17df98d chore(deps)!: removed the upper range of vite peer (#396)
4612e18 Potential fix for code scanning alert no. 11: Workflow does not contain permi...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite-plugin-istanbul since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

…plugin-istanbul Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react), [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) and [vite-plugin-istanbul](https://github.com/iFaxity/vite-plugin-istanbul). These dependencies needed to be updated together. Updates `vite` from 3.2.10 to 8.0.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.0.5/packages/vite) Updates `@vitejs/plugin-react` from 2.2.0 to 6.0.1 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.1/packages/plugin-react) Updates `@vitest/coverage-v8` from 1.6.0 to 4.1.3 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.3/packages/coverage-v8) Updates `vite-plugin-istanbul` from 5.0.0 to 8.0.0 - [Release notes](https://github.com/iFaxity/vite-plugin-istanbul/releases) - [Changelog](https://github.com/iFaxity/vite-plugin-istanbul/blob/next/release.config.mjs) - [Commits](iFaxity/vite-plugin-istanbul@v5.0.0...v8.0.0) --- updated-dependencies: - dependency-name: vite dependency-version: 8.0.5 dependency-type: direct:development - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.1 dependency-type: direct:development - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.3 dependency-type: direct:development - dependency-name: vite-plugin-istanbul dependency-version: 8.0.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-04-15T12:14:23Z

Superseded by #854.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 7, 2026

dependabot Bot mentioned this pull request Apr 7, 2026

chore: bump vite #830

Closed

dependabot Bot closed this Apr 15, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/multi-aaaeb93adc branch April 15, 2026 12:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: bump vite, @vitejs/plugin-react, @vitest/coverage-v8 and vite-plugin-istanbul#851

chore: bump vite, @vitejs/plugin-react, @vitest/coverage-v8 and vite-plugin-istanbul#851
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-aaaeb93adc

dependabot Bot commented on behalf of github Apr 7, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Apr 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Apr 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v8.0.5

v8.0.4

create-vite@8.0.3

v8.0.3

create-vite@8.0.2

v8.0.2

create-vite@8.0.1

v8.0.1

plugin-legacy@8.0.1

create-vite@8.0.0

plugin-legacy@8.0.0

v8.0.0

v8.0.0-beta.18

v8.0.0-beta.17

v8.0.0-beta.16

v8.0.0-beta.15

v8.0.0-beta.14

8.0.5 (2026-04-06)

Bug Fixes

8.0.4 (2026-04-06)

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

8.0.3 (2026-03-26)

Features

Bug Fixes

Miscellaneous Chores

plugin-react@6.0.1

Expand @rolldown/plugin-babel peer dep range (#1146)

plugin-react@6.0.0

Remove Babel Related Features (#1123)

6.0.1 (2026-03-13)

Expand @rolldown/plugin-babel peer dep range (#1146)

6.0.0 (2026-03-12)

6.0.0-beta.0 (2026-03-03)

Remove Babel Related Features (#1123)

v4.1.3

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

v4.1.2

🐞 Bug Fixes

View changes on GitHub

v4.1.1

🚀 Features

🐞 Bug Fixes

v8.0.0

8.0.0 (2026-03-10)

Features

BREAKING CHANGES

v7.2.1

7.2.1 (2025-11-08)

Bug Fixes

v7.2.0

7.2.0 (2025-09-16)

Bug Fixes

Features

v7.1.0

7.1.0 (2025-07-10)

Bug Fixes

Features

Uh oh!

dependabot Bot commented on behalf of github Apr 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Apr 7, 2026 •

edited

Loading

Expand `@rolldown/plugin-babel` peer dep range (#1146)

Expand `@rolldown/plugin-babel` peer dep range (#1146)