Bump vite from 7.3.5 to 8.2.1

[dependabot]

Bumps vite from 7.3.5 to 8.2.1.

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.1

Please refer to CHANGELOG.md for details.

v8.2.1

Please refer to CHANGELOG.md for details.

create-vite@8.2.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.0.16

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.2.1 (2026-08-06)

Bug Fixes

• build: make client chunkImportMap work with sharedPlugins: true (#23184) (15f0307)
• bundled-dev: inject client script tag before chunk scripts (#23161) (eac0cc8)
• css: don't re-run lightningcss visitor during minify (fix #23146) (#23147) (de041a7)
• deps: update all non-major dependencies (#23136) (14454fd)
• deps: update rolldown-related dependencies (#23070) (7ac6f7f)
• don't mutate the user config when resolving the lib entry from the top-level input (#23135) (b4bf596)
• handle shebang ending with uncommon line terminators (#23038) (17f7b2f)
• server: use a random port when port is 0 (#23158) (fddf4ea)

Performance Improvements

• css: look up pure CSS chunks through a Set (#23114) (1331b0b)

Documentation

• build: fix incomplete @default for build.minify (#23177) (ef02435)

Miscellaneous Chores

• deps: update dependency rolldown-plugin-dts to ^0.28.0 (#23137) (4adc1e7)
• deps: update dependency strip-literal to v4 (#23140) (9db65ce)

Code Refactoring

• bundled-dev: avoid injecting server values in the bundle (#22967) (23b8a08)
• bundled-dev: remove rolldown lazy stub module workaround (#23129) (e72036e)

Tests

• bundled-dev: enable sourcemap playgrounds (#23080) (c2155fe)
• reduce logs (#23138) (7673c02)

8.2.0 (2026-07-30)

Features

• add input to server.fs.allow (#23035) (95a3cda)
• bundled-dev: reload once after rebuild instead of via the fallback page (#23106) (b24381d)
• bundled-dev: support worker file update accepted by HMR (#23068) (0d04351)
• config: include column in config incompatibility location (#23064) (8a24572)
• dev: resolve interface name for explicit host in network URLs (#22965) (3ac77d9)

Bug Fixes

• bundledDev: print build errors to the terminal when an HMR update fails (#23024) (41c4658)
• deps: update all non-major dependencies (#23069) (4c07b74)
• hmr: preserve environment snapshot during server restart (#22992) (b1186c3)
• importAnalysis: interop imports injected into optimized dep files by plugins (#23029) (8c2a87d)

... (truncated)

Commits

• 4216158 release: v8.2.1
• fddf4ea fix(server): use a random port when port is 0 (#23158)
• de041a7 fix(css): don't re-run lightningcss visitor during minify (fix #23146) (#23147)
• 15f0307 fix(build): make client chunkImportMap work with sharedPlugins: true (#23184)
• c2155fe test(bundled-dev): enable sourcemap playgrounds (#23080)
• ef02435 docs(build): fix incomplete @default for build.minify (#23177)
• eac0cc8 fix(bundled-dev): inject client script tag before chunk scripts (#23161)
• 23b8a08 refactor(bundled-dev): avoid injecting server values in the bundle (#22967)
• e72036e refactor(bundled-dev): remove rolldown lazy stub module workaround (#23129)
• 14454fd fix(deps): update all non-major dependencies (#23136)
• Additional commits viewable in compare view

[BernardJen]

Blocked upstream — needs a coordinated bump that Dependabot cannot do on its own.

CI fails at npm ci with ERESOLVE. Re-resolving the tree from scratch (no lockfile) shows the real blocker is electron-vite, not the plugin named in the CI log:

$ # package.json with vite bumped to ^8.2.1, no package-lock.json
$ npm install --package-lock-only --ignore-scripts
npm error While resolving: slidecue@0.7.4
npm error Found: vite@8.2.1
npm error Could not resolve dependency:
npm error peer vite@"^5.0.0 || ^6.0.0 || ^7.0.0" from electron-vite@5.0.0

Two separate caps have to lift before Vite 8 can land:

Package	Manifest range	Latest published	Accepts vite 8?
@vitejs/plugin-react	^5.1.2	6.0.5	only from 6.0.0 — outside the ^5 range
electron-vite	^5.0.0	5.0.0 (6.0.0-beta.1 is prerelease)	no stable release yet

I verified that bumping @vitejs/plugin-react to ^6.0.5 alone does not fix it — electron-vite@5.0.0 still rejects vite 8, and electron-vite is this app's actual build tool. The only stable-channel option today would be a prerelease (electron-vite@6.0.0-beta.1), which is not something to put on main.

Recommend leaving this open until electron-vite 6 ships stable, then landing vite 8 + @vitejs/plugin-react 6 + electron-vite 6 together in one PR. ·@·d·ependabot r·ebase will not resolve it.

Also flagging, since it bit us on #16: ci.yml never runs npm run build, so CI is blind to electron-vite behaviour. Whenever this bump does land, it needs a real npm run build plus an out/ file-list comparison against main before merging — a build that exits 0 can still silently drop shipped artifacts.

---

Generated by Claude Code

[BernardJen]

Not merging — this is a real peer-dependency break, not a flaky check.

npm ci fails outright on this branch (run 31938946534):

npm error code ERESOLVE
npm error Found: vite@8.2.1
npm error Could not resolve dependency:
npm error peer vite@"^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0" from @vitejs/plugin-react@5.1.2
npm error Conflicting peer dependency: vite@7.3.6

Consequence: @vitejs/plugin-react@5.1.2 does not declare support for vite 8, so the install cannot resolve. Nothing downstream runs — no typecheck, no tests, no build. ci.yml on main is green at e9384d21, so this failure belongs to the bump, not to a pre-existing condition.

Worth noting vite-plugin-static-copy@4.1.1 already allows ^8.0.0, so @vitejs/plugin-react is the sole blocker. This unblocks once it ships a release whose peer range includes vite 8; bumping the two together in one PR would then be the way through.

Leaving open rather than closing, since it becomes mergeable on its own once upstream catches up.

---

Generated by Claude Code