Skip to content

Bump vite from 7.3.5 to 8.2.0 - #27

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vite-8.2.0
Closed

Bump vite from 7.3.5 to 8.2.0#27
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vite-8.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor

Bumps vite from 7.3.5 to 8.2.0.

Release notes

Sourced from vite's releases.

create-vite@8.2.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.0.16

Please refer to CHANGELOG.md for details.

v8.0.15

Please refer to CHANGELOG.md for details.

v8.0.14

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.2.0 (2026-07-30)

Features

  • add input to server.fs.allow (#23035) (95a3cda)
  • bundled-dev: reload once after rebuild instead of via the fallback page (#23106) (b24381d)
  • bundled-dev: support worker file update accepted by HMR (#23068) (0d04351)
  • config: include column in config incompatibility location (#23064) (8a24572)
  • dev: resolve interface name for explicit host in network URLs (#22965) (3ac77d9)

Bug Fixes

  • bundledDev: print build errors to the terminal when an HMR update fails (#23024) (41c4658)
  • deps: update all non-major dependencies (#23069) (4c07b74)
  • hmr: preserve environment snapshot during server restart (#22992) (b1186c3)
  • importAnalysis: interop imports injected into optimized dep files by plugins (#23029) (8c2a87d)
  • module-runner: keep stack trace interception working when Object.prototype is frozen (#23073) (599c5b0)
  • server: strip base in indexHtml module graph lookup (#22932) (fa005d1)
  • support resolving top-level input option with plugins (#23101) (41df81a)

Documentation

  • config: correct cacheDir default fallback description (#23060) (aafa103)

Tests

8.2.0-beta.0 (2026-07-22)

Features

  • add input option (#22642) (9beae37)
  • config: warn features incompatible with native loader in bundle loader (#22850) (05302b0)
  • css: export PostCSS config type for type-safe configs (#22792) (302c755)
  • dev: label network URLs with their interface name (#22830) (78accc4)
  • optimizer: support aube lockfile (#22813) (6319827)
  • optimizer: support nub lockfile (#22891) (65d3604)
  • update rolldown-related dependencies and use client-side HMR in bundled-dev (#22961) (960e9ef)
  • wasm: expand test suite, unwrap WebAssembly.Global and enable js-string builtins (#22674) (9e79b51)

Bug Fixes

Performance Improvements

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 7, 2026
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.5 to 8.2.0.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.2.0/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/vite-8.2.0 branch from c243f63 to a86608b Compare August 10, 2026 06:22

Copy link
Copy Markdown
Contributor

Not merging — this bump is unsatisfiable on its own, and it needs two companion majors rather than one.

What CI shows. The ci check failed at the first step, npm ci, with ERESOLVE (run 31221235825) — nothing here was type-checked or tested.

Why. Two pinned packages cap their vite peer at v7. Read from a clean npm ci tree on main:

@vitejs/plugin-react 5.1.2  peer vite: "^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0"
electron-vite        5.0.0  peer vite: "^5.0.0 || ^6.0.0 || ^7.0.0"

vite@8.2.0 satisfies neither, so there is no valid resolution.

Consequence if forced through. electron-vite is the more serious of the two — it is the whole build pipeline (npm run buildelectron-vite build, which produces out/main, out/preload, out/renderer). Running it against an unsupported Vite major risks a build that still exits 0 while emitting a broken or incomplete bundle. Worth stressing that CI would not catch that: ci.yml runs only npm ci, tsc --noEmit and vitest, and never invokes npm run build. The first place a bad Vite major would surface is a tagged release.

What unblocks it. Both electron-vite and @vitejs/plugin-react need releases declaring vite: ^8 peer support, bumped together with Vite in one PR. Until electron-vite ships that, this PR cannot land.

I'll pick it up on a later run once the companions are available.


Generated by Claude Code

Copy link
Copy Markdown
Contributor

Blocked — not merged. npm ci cannot resolve the dependency tree with vite 8.

From this PR's own CI run (31361712366):

npm error Could not resolve dependency:
npm error peer vite@"^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0" from @vitejs/plugin-react@5.1.2
npm error Conflicting peer dependency: vite@7.3.6

@vitejs/plugin-react@^5.1.2 (in package.json) does not accept vite 8 in any 5.x release. vite-plugin-static-copy@4.1.1 is fine here — its peer range is already ^6.0.0 || ^7.0.0 || ^8.0.0. @vitejs/plugin-react is the sole blocker.

Consequence: merged as-is, npm ci exits 1. Nothing installs, so typecheck, tests, build and packaging all stop.

Fix: needs a companion bump to @vitejs/plugin-react@^6.0.0 — 6.0.0 is the first release declaring peer vite: ^8.0.0 (latest 6.0.5), verified against the npm registry. Dependabot will not pair these on its own, so this needs either a grouped update rule or a manual PR bumping both.

One further note for whoever picks this up: ci.yml runs npm ci, npm run typecheck and npm test, but never npm run build. So even once the tree installs, a vite major still needs a real build plus an out/ file-list diff against main before merging — cf. #16, where a green CI hid a silently dropped shipped artifact.


Generated by Claude Code

@dependabot @github

dependabot Bot commented on behalf of github Aug 14, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #32.

@dependabot dependabot Bot closed this Aug 14, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/vite-8.2.0 branch August 14, 2026 21:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant