chore(deps): bump vite, @vitejs/plugin-react, @sveltejs/vite-plugin-svelte, @vitejs/plugin-vue and @vitejs/plugin-basic-ssl

[dependabot]

Bumps vite, @vitejs/plugin-react, @sveltejs/vite-plugin-svelte, @vitejs/plugin-vue and @vitejs/plugin-basic-ssl. These dependencies needed to be updated together.
Updates vite from 6.4.1 to 8.1.0

Release notes

Sourced from vite's releases.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.0.16

Please refer to CHANGELOG.md for details.

v8.0.15

Please refer to CHANGELOG.md for details.

v8.0.14

Please refer to CHANGELOG.md for details.

v8.0.13

Please refer to CHANGELOG.md for details.

v8.0.12

Please refer to CHANGELOG.md for details.

v8.0.11

Please refer to CHANGELOG.md for details.

v8.0.10

Please refer to CHANGELOG.md for details.

v8.0.9

Please refer to CHANGELOG.md for details.

v8.0.8

Please refer to CHANGELOG.md for details.

v8.0.7

Please refer to CHANGELOG.md for details.

v8.0.6

Please refer to CHANGELOG.md for details.

v8.0.5

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.1.0 (2026-06-23)

Features

• extend server.fs.deny list with common files (#22707) (61ba8fd)
• update rolldown to 1.1.2 (#22695) (4f008a6)
• use ~ for Rolldown (#22693) (9928722)

Bug Fixes

• bundled-dev: errors should be kept when incremental build fails (#22617) (9a0dd48)
• cache falsy values in perEnvironmentState (#22715) (0e91e79)
• glob: respect caseSensitive option in hmr matcher (#22711) (65f525e)
• html: omit nonce on import map when cspNonce is unset (#22713) (8340bb5)
• optimizer: skip null-valued exports in expandGlobIds glob resolution (#22611) (8b9f5cd)
• resolved build options should be kept as a getter (#22691) (3527191)
• server: handle malformed URI in memory files middleware (#22714) (df9e0a5)
• use literal envPrefix queries for Vite Task (#22706) (da72733)
• warn on deprecated envFile (#22555) (ed7b283)

Code Refactoring

• client: inline dev-id value in CSS selector (#22736) (57f59bc)
• remove unused removeRawQuery util (#22724) (403cc60)
• use rolldownOptions property for chunkImportMap (#22692) (8e8816c)

8.1.0-beta.0 (2026-06-15)

Features

• import.meta.glob support caseSensitive option (#21707) (2ad6737)
• add warning to discourage Vite with yarn pnp (#21906) (3fbb55a)
• build: chunk importmap (#21580) (e180312)
• css: support lightningcss plugin dependency (#21748) (0b7aaed)
• deps: bump @​vitejs/devtools peer dependency version (#22542) (d2c2bc0)
• html: add html.additionalAssetSources option (#21412) (a41404b)
• integrate with Vite Task for zero-config build caching (#22453) (f8d75f7)
• rename server.hmr options to server.ws options (#21357) (9ce3036)
• server: support multiple hosts in __VITE_ADDITIONAL_SERVER_ALLOWED_HOSTS (#21501) (735f9a1)
• track dependencies when loading config with native (#22602) (a7e2da8)
• types: add more precise typing for known query types to match known as types (#21863) (cc39e55)
• update rolldown to 1.1.1 (#22593) (8a13d63)
• wasm: direct .wasm imports (WASM ESM Integration) (#21779) (c23d85b)

Bug Fixes

• apply correct fs restrictions for pnpm gvs (#22415) (092320b)
• css: support external CSS with lightningcss (#18389) (d64a1a5)
• deps: update all non-major dependencies (#22637) (44bb9d9)
• deps: update all non-major dependencies (#22681) (f4f0633)
• html: insert import map before modulepreload that is not self-close tag (#21409) (e399c89)
• optimizer: preserve sourcemaps for transformed optimized deps with follow-up transforms (#22428) (1298951)

... (truncated)

Commits

• 5909efd fix: allow multiple bindCLIShortcuts calls with shortcut merging (#21103)
• 39a0a15 chore(deps): update rolldown-related dependencies (#21095)
• 6a34ac3 fix(deps): update all non-major dependencies (#21096)
• 02ceaec chore(deps): update dependency @​rollup/plugin-commonjs to v29 (#21099)
• 572aaca release: v7.2.2
• 728c8ee fix: revert "refactor: use fs.cpSync (#21019)" (#21081)
• a532e68 release: v7.2.1
• 82d2d6c fix(worker): some worker asset was missing (#21074)
• f83264f refactor(build): rename indexOfMatchInSlice to findPreloadMarker (#21054)
• 8293de0 release: v7.2.0
• Additional commits viewable in compare view

Updates @vitejs/plugin-react from 4.7.0 to 6.0.3

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.0.3

No release notes provided.

plugin-react@6.0.2

Allow all options in reactCompilerPreset (#1189)

This is a type only change. Only compilationMode and target options were available for reactCompilerPreset.

plugin-react@6.0.1

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

plugin-react@6.0.0

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:

 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})

For React compiler users, you can use reactCompilerPreset for easier setup with preconfigured filter to improve build performance:

 import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [
</tr></table>

... (truncated)

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.0.3 (2026-06-23)

6.0.2 (2026-05-14)

Allow all options in reactCompilerPreset (#1189)

This is a type only change. Only compilationMode and target options were available for reactCompilerPreset.

6.0.1 (2026-03-13)

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

6.0.0 (2026-03-12)

6.0.0-beta.0 (2026-03-03)

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:

 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})

For React compiler users, you can use reactCompilerPreset for easier setup with preconfigured filter to improve build performance:

 import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
</tr></table> 

... (truncated)

Commits

• 640fd35 release: plugin-react@6.0.3
• 889efb0 fix(deps): update all non-major dependencies (#1249)
• 6c57dd4 fix(plugin-react): use '/' base in bundledDev preamble to fix non-root base p...
• 3cc33a7 fix(deps): update react-related dependencies (#1245)
• c0f7c7f docs: mention the Biome rule in the "Consistent components exports" section (...
• cd80f0f fix(deps): update all non-major dependencies (#1241)
• e38acca fix(deps): update all non-major dependencies (#1227)
• 9a9bb26 perf(react): improve react compiler preset so that slightly more modules are ...
• 6535b55 release: plugin-react@6.0.2
• bf0e43b feat(react): whitelist debugging-options (#1189)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​vitejs/plugin-react since your current version.

Updates @sveltejs/vite-plugin-svelte from 5.1.1 to 7.1.2

Release notes

Sourced from @​sveltejs/vite-plugin-svelte's releases.

@​sveltejs/vite-plugin-svelte@​7.1.2

Patch Changes

• fix: correctly resolve compiled CSS on the server for dependencies with Svelte files (#1342)

@​sveltejs/vite-plugin-svelte@​7.1.1

Patch Changes

• fix: pass typescript.onlyRemoveTypeImports to transformWithOxc in vitePreprocess so that value imports are not dropped when they are only referenced in Svelte template markup (#1326)

• fix: correctly resolve compiled CSS for optimised Svelte dependencies on the server (#1336)

@​sveltejs/vite-plugin-svelte@​7.1.0

Minor Changes

• feat: enable optimizer for server environments during dev (#1328)

@​sveltejs/vite-plugin-svelte@​7.0.0

Major Changes

• breaking(deps): require vite 8 (#1266)

• breaking(options): remove deprecated options (#1274)

  • vitePlugin.hot in svelte.config.js use compilerOptions.hmr instead
  • vitePlugin.ignorePluginPreprocessors in svelte.config.js no longer needed
  • api.idFilter of vite-plugin-svelte:api use api.filter instead
  • plugin.api.sveltePreprocess of other vite plugins Update affected plugins to a newer version or remove them. See docs for more information.

• breaking(dev): no longer overrides compilerOptions.cssHash because Svelte now produces a stable css hash by itself (#1271)

• breaking(inspector): integrate vite-plugin-svelte-inspector into vite-plugin-svelte to avoid circular dependency (#1270)

• breaking(deps): require svelte 5.46.4 or later (#1271)

Patch Changes

• chore: upgrade vitefu to compatible peer dependency range (#1286)

• remove author field from package.json (#1281)

... (truncated)

Changelog

Sourced from @​sveltejs/vite-plugin-svelte's changelog.

7.1.2

Patch Changes

• fix: correctly resolve compiled CSS on the server for dependencies with Svelte files (#1342)

7.1.1

Patch Changes

• fix: pass typescript.onlyRemoveTypeImports to transformWithOxc in vitePreprocess so that value imports are not dropped when they are only referenced in Svelte template markup (#1326)

• fix: correctly resolve compiled CSS for optimised Svelte dependencies on the server (#1336)

7.1.0

Minor Changes

• feat: enable optimizer for server environments during dev (#1328)

7.0.0

Major Changes

• breaking(deps): require vite 8 (#1266)

• breaking(options): remove deprecated options (#1274)

  • vitePlugin.hot in svelte.config.js use compilerOptions.hmr instead
  • vitePlugin.ignorePluginPreprocessors in svelte.config.js no longer needed
  • api.idFilter of vite-plugin-svelte:api use api.filter instead
  • plugin.api.sveltePreprocess of other vite plugins Update affected plugins to a newer version or remove them. See docs for more information.

• breaking(dev): no longer overrides compilerOptions.cssHash because Svelte now produces a stable css hash by itself (#1271)

• breaking(inspector): integrate vite-plugin-svelte-inspector into vite-plugin-svelte to avoid circular dependency (#1270)

• breaking(deps): require svelte 5.46.4 or later (#1271)

Patch Changes

... (truncated)

Commits

• 471f822 Version Packages (#1344)
• 1a9bc08 fix: always retrieve CSS using component filename first (#1342)
• 508d91b Version Packages (#1339)
• 990e58c fix: correctly resolve Svelte CSS on the server during development (#1336)
• d5458a9 fix: restore value imports stripped by oxc in script preprocessing (#1326)
• 1c85126 Version Packages (#1331)
• 1a4d225 feat: enable optimizer for server environments during dev (#1328)
• d91be5f fix: use correct pnpm catalog syntax
• 4d3afb4 chore: fix audit CI (#1327)
• 8b3687b use modern JSDoc imports (#1309)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​sveltejs/vite-plugin-svelte since your current version.

Updates @vitejs/plugin-vue from 5.2.4 to 6.0.7

Release notes

Sourced from @​vitejs/plugin-vue's releases.

plugin-vue@6.0.7

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.6

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.5

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.4

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.3

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.2

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.1

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.0

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.0-beta.2

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.0-beta.1

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.0-beta.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​vitejs/plugin-vue's changelog.

6.0.7 (2026-05-15)

Features

• use carets for @rolldown/pluginutils version (#776) (941b651)

Bug Fixes

• deps: update all non-major dependencies (#762) (9e825b8)
• deps: update all non-major dependencies (#774) (77dc8bc)

6.0.6 (2026-04-13)

Features

• plugin-vue: propagate multiRoot for template-only vapor components (#745) (9e07ae9)

Bug Fixes

• deps: update all non-major dependencies (#738) (050c996)

Miscellaneous Chores

• deps: update dependency rollup to ^4.59.0 (#749) (a0e1ef8)
• remove unused deps (#760) (6d834d8)

6.0.5 (2026-03-12)

Miscellaneous Chores

• remove Vite 8 beta from supported range (#746) (b3f23e4)

6.0.4 (2026-02-02)

Bug Fixes

• deps: update all non-major dependencies (#709) (924b28e)
• deps: update all non-major dependencies (#722) (8a95809)
• deps: update all non-major dependencies (#726) (e69d751)

Miscellaneous Chores

• add metadata for vite-plugin-registry (#730) (239eb6a)
• deps: update dependency rollup to ^4.57.1 (#733) (cd0c8a8)
• deps: update upstream (#727) (fa3ea0e)

6.0.3 (2025-12-12)

Features

• add Vite 8 support (2080d41)

Bug Fixes

• deps: update all non-major dependencies (#707) (799f419)

... (truncated)

Commits

• f93aceb release: plugin-vue@6.0.7
• 941b651 feat: use carets for @rolldown/pluginutils version (#776)
• 77dc8bc fix(deps): update all non-major dependencies (#774)
• 9e825b8 fix(deps): update all non-major dependencies (#762)
• 51dbf4b release: plugin-vue@6.0.6
• 9e07ae9 feat(plugin-vue): propagate multiRoot for template-only vapor components (#745)
• 050c996 fix(deps): update all non-major dependencies (#738)
• 6d834d8 chore: remove unused deps (#760)
• a0e1ef8 chore(deps): update dependency rollup to ^4.59.0 (#749)
• 6ad6cc1 release: plugin-vue@6.0.5
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​vitejs/plugin-vue since your current version.

Updates @vitejs/plugin-basic-ssl from 1.2.0 to 2.3.0

Release notes

Sourced from @​vitejs/plugin-basic-ssl's releases.

v2.3.0

Please refer to CHANGELOG.md for details.

v2.2.0

Please refer to CHANGELOG.md for details.

v2.1.4

Please refer to CHANGELOG.md for details.

v2.1.3

Please refer to CHANGELOG.md for details.

v2.1.2

Please refer to CHANGELOG.md for details.

v2.1.1

Please refer to CHANGELOG.md for details.

v2.1.0

Please refer to CHANGELOG.md for details.

v2.0.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​vitejs/plugin-basic-ssl's changelog.

2.3.0 (2026-03-24)

Features

• add optional ttlDays parameter (#98) (eb373f0)

Miscellaneous Chores

• deps: update all non-major dependencies (#100) (34ef8a0)
• deps: update all non-major dependencies (#96) (acb0779)
• deps: update dependency vite to v8 (#99) (987fb1a)
• deps: update pnpm/action-setup action to v5 (#101) (4b9d639)

Build System

• refactor post-build code (#102) (2499cce)

2.2.0 (2026-03-12)

Features

• add Vite v8 to peer dependency (dfe789d)

Miscellaneous Chores

• deps: update all non-major dependencies (#94) (3b57894)

2.1.4 (2026-01-20)

Miscellaneous Chores

• add metadata for vite-plugin-registry (#93) (c0cd669)
• deps: update all non-major dependencies (#92) (2c68bf6)

2.1.3 (2026-01-08)

Continuous Integration

• build file was missing (c5be1a1)

2.1.2 (2026-01-08)

Miscellaneous Chores

• add "type": "module" and fix publishing (135a6c2)

2.1.1 (2026-01-08)

Miscellaneous Chores

• add description and keywords field to package.json (#90) (20a8d50)
• deps: update actions/checkout action to v5 (#77) (3bca592)
• deps: update actions/checkout action to v6 (#87) (481d3d6)
• deps: update actions/setup-node action to v5 (#79) (c07b128)
• deps: update actions/setup-node action to v6 (#81) (9dc145c)
• deps: update all non-major dependencies (#75) (851240a)

... (truncated)

Commits

• ab892e4 release: v2.3.0
• 2499cce build: refactor post-build code (#102)
• eb373f0 feat: add optional ttlDays parameter (#98)
• 4b9d639 chore(deps): update pnpm/action-setup action to v5 (#101)
• 34ef8a0 chore(deps): update all non-major dependencies (#100)
• acb0779 chore(deps): update all non-major dependencies (#96)
• 987fb1a chore(deps): update dependency vite to v8 (#99)
• 182b09d release: v2.2.0
• dfe789d feat: add Vite v8 to peer dependency
• 3b57894 chore(deps): update all non-major dependencies (#94)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​vitejs/plugin-basic-ssl since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.