Skip to content

chore(dev-deps): bump vite from 8.0.10 to 8.1.6 - #473

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/vite-8.1.6
Open

dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/vite-8.1.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor

Bumps vite from 8.0.10 to 8.1.6.

Release notes

Sourced from vite's releases.

v8.1.6

Please refer to CHANGELOG.md for details.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.0.16

Please refer to CHANGELOG.md for details.

v8.0.15

Please refer to CHANGELOG.md for details.

v8.0.14

Please refer to CHANGELOG.md for details.

v8.0.13

Please refer to CHANGELOG.md for details.

v8.0.12

Please refer to CHANGELOG.md for details.

v8.0.11

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.6 (2026-10-06)

Bug Fixes

  • deps: update launch-editor to v2.14.2 (#23654) (e46fc9c)
  • html: filename passed to transformIndexHtml should not include queries (#23653) (4ff2522)
  • server: store ids to safeModulePaths rather than URLs (#23656) (170b927)

8.1.5 (2026-07-16)

Bug Fixes

  • bundled-dev: avoid duplicated buildEnd (#22931) (8100320)
  • client: overlay error message format align rolldown (#22869) (5a72b87)
  • deps: update all non-major dependencies (#22921) (fef682d)
  • deps: update rolldown-related dependencies (#22922) (3c345e4)
  • module-runner: don't crash stack-trace source mapping when globalThis.Buffer is absent (#22945) (f8b38e3)
  • optimizer: respect importer module format for dynamic import interop with CJS deps (#22951) (6c08c39)
  • ssr: scope switch-case declarations to the switch, not the function (#22893) (b59a73f)

Documentation

  • build: fix incorrect @default for build.cssMinify (#22948) (c88c236)
  • build: fix incorrect @default for build.lib.formats (#22911) (369ed60)

Tests

  • avoid scanner scanning all files under __tests__ (#22912) (c961cae)

8.1.4 (2026-07-09)

Features

Bug Fixes

  • build: add workaround for building on stackblitz (#22840) (575c32c)
  • build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)
  • deps: update all non-major dependencies (#22865) (d4295a9)
  • deps: update rolldown-related dependencies (#22866) (7cf07e4)
  • html: avoid backtracking in import-only check (#22848) (b5868c0)
  • optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)
  • ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)
  • strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

Miscellaneous Chores

  • deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

... (truncated)

Commits
  • dade886 release: v8.1.6
  • 170b927 fix(server): store ids to safeModulePaths rather than URLs (#23656)
  • e46fc9c fix(deps): update launch-editor to v2.14.2 (#23654)
  • 4ff2522 fix(html): filename passed to transformIndexHtml should not include queries (...
  • 5e7fe12 release: v8.1.5
  • 6c08c39 fix(optimizer): respect importer module format for dynamic import interop wit...
  • 5a72b87 fix(client): overlay error message format align rolldown (#22869)
  • f8b38e3 fix(module-runner): don't crash stack-trace source mapping when globalThis.Bu...
  • 8100320 fix(bundled-dev): avoid duplicated buildEnd (#22931)
  • c88c236 docs(build): fix incorrect @default for build.cssMinify (#22948)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.0.10 to 8.1.6.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v8.1.6/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.6/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.1.6
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
cli-web-cli Ready Ready Preview Oct 21, 2026 3:07am UTC

Request Review

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 21, 2026
@ci-lockfile-regen

Copy link
Copy Markdown

Dependabot Fix Assessment

Package: `vite` `8.0.10` → `8.1.6` (minor)
Scope: devDependency
Workspace: packages/react-web-cli (and transitively examples/web-cli via `^8.0.11`)

What changed upstream

  • Vite 8.0.10 → 8.1.6: patch/minor releases with bug fixes (no breaking API changes)
  • The new lockfile generated by Dependabot introduced overrides entries in `pnpm-lock.yaml` that did not match the `pnpm.overrides` section in the root `package.json`, triggering pnpm's `ERR_PNPM_LOCKFILE_CONFIG_MISMATCH` error on frozen installs

Migration concerns checked

  • Peer dependencies: OK — no peer dep conflicts introduced
  • Type changes: OK — minor bump, no type-level breakage
  • Config files: OK — no vite config changes needed
  • Module format: OK — ESM project, vite 8.1.x still ESM-compatible
  • React compatibility: OK — no duplicate React instances introduced
  • Monorepo impact: OK — both `packages/react-web-cli` and `examples/web-cli` resolve to compatible versions

What broke

  • All three CI workflows (Run Tests, E2E Tests, Web CLI E2E Tests): ERR_PNPM_LOCKFILE_CONFIG_MISMATCH — the `overrides` section recorded in the lockfile didn't match `pnpm.overrides` in root `package.json` at the time Dependabot generated the lockfile.

What was fixed

  • The prior commit (89e66189 fix(deps): regenerate pnpm-lock.yaml) regenerated the lockfile via pnpm install --no-frozen-lockfile, synchronising the lockfile's overrides section with the current pnpm.overrides in package.json. No source code changes were required.

Verification

  • Install (frozen): ✅ — pnpm install --frozen-lockfile succeeds with no changes
  • Build: ✅ — pnpm run build succeeds
  • Lint: ✅ — pnpm exec eslint . reports 0 errors
  • Unit tests: ✅ — 188 test files passed, 2644 tests passed
  • Web CLI tests: ✅ — pnpm --filter @ably/react-web-cli test 57 passed

CI status after lockfile fix: test ✅, setup ✅, auth-tests ✅, session-tests ✅, ui-tests ✅, audit ✅ — e2e-cli still running.

Notes for reviewer

  • The pre-existing flaky unit tests (spaces/locations/get and spaces/members/enter) surfaced in the first local run but passed cleanly on a second run and when run individually — this is a known test-isolation issue unrelated to the vite bump.
  • No source code changes were needed; the fix is purely a lockfile regeneration.

This branch was successfully deployed

1 active deployment
Preview — 89e66189 Deployed Oct 21, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Development

Successfully merging this pull request may close these issues.

0 participants