Bump vite from 6.1.6 to 6.3.6 #15

dependabot · 2025-09-10T01:49:09Z

Bumps vite from 6.1.6 to 6.3.6.

Release notes

v6.3.6

Please refer to CHANGELOG.md for details.

v6.3.5

Please refer to CHANGELOG.md for details.

v6.3.4

Please refer to CHANGELOG.md for details.

v6.3.3

Please refer to CHANGELOG.md for details.

v6.3.2

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v6.3.1

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v6.3.0

Please refer to CHANGELOG.md for details.

v6.3.0-beta.2

Please refer to CHANGELOG.md for details.

v6.3.0-beta.1

Please refer to CHANGELOG.md for details.

v6.3.0-beta.0

Please refer to CHANGELOG.md for details.

v6.2.7

Please refer to CHANGELOG.md for details.

v6.2.6

Please refer to CHANGELOG.md for details.

v6.2.5

Please refer to CHANGELOG.md for details.

v6.2.4

Please refer to CHANGELOG.md for details.

v6.2.3

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

6.3.6 (2025-09-08)

fix: apply fs.strict check to HTML files (#20736) (0ab19ea), closes #20736

fix: upgrade sirv to 3.0.2 (#20735) (e11d240), closes #20735

test: detect ts support via process.features (#20544) (7d99229), closes #20544

6.3.5 (2025-05-05)

fix(ssr): handle uninitialized export access as undefined (#19959) (fd38d07), closes #19959

6.3.4 (2025-04-30)

fix: check static serve file inside sirv (#19965) (c22c43d), closes #19965

fix(optimizer): return plain object when using require to import externals in optimized dependenci (efc5eab), closes #19940

refactor: remove duplicate plugin context type (#19935) (d6d01c2), closes #19935

6.3.3 (2025-04-24)

fix: ignore malformed uris in tranform middleware (#19853) (e4d5201), closes #19853

fix(assets): ensure ?no-inline is not included in the asset url in the production environment (#1949 (16a73c0), closes #19496

fix(css): resolve relative imports in sass properly on Windows (#19920) (ffab442), closes #19920

fix(deps): update all non-major dependencies (#19899) (a4b500e), closes #19899

fix(ssr): fix execution order of re-export (#19841) (ed29dee), closes #19841

fix(ssr): fix live binding of default export declaration and hoist exports getter (#19842) (80a91ff), closes #19842

perf: skip sourcemap generation for renderChunk hook of import-analysis-build plugin (#19921) (55cfd04), closes #19921

test(ssr): test ssrTransform re-export deps and test stacktrace with first line (#19629) (9399cda), closes #19629

6.3.2 (2025-04-18)

fix: match default asserts case insensitive (#19852) (cbdab1d), closes #19852

fix: open first url if host does not match any urls (#19886) (6abbdce), closes #19886

fix(css): respect css.lightningcss option in css minification process (#19879) (b5055e0), closes #19879

fix(deps): update all non-major dependencies (#19698) (bab4cb9), closes #19698

feat(css): improve lightningcss messages (#19880) (c713f79), closes #19880

6.3.1 (2025-04-17)

fix: avoid using Promise.allSettled in preload function (#19805) (35c7f35), closes #19805

fix: backward compat for internal plugin transform calls (#19878) (a152b7c), closes #19878

... (truncated)

Commits

3f337c5 release: v6.3.6
e11d240 fix: upgrade sirv to 3.0.2 (#20735)
0ab19ea fix: apply fs.strict check to HTML files (#20736)
7d99229 test: detect ts support via process.features (#20544)
84e4647 release: v6.3.5
fd38d07 fix(ssr): handle uninitialized export access as undefined (#19959)
b040d54 release: v6.3.4
c22c43d fix: check static serve file inside sirv (#19965)
efc5eab fix(optimizer): return plain object when using require to import externals ...
d6d01c2 refactor: remove duplicate plugin context type (#19935)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.1.6 to 6.3.6. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v6.3.6/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.3.6/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 6.3.6 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]>

fossabot · 2025-09-10T01:49:19Z

✓ Safe to upgrade

I recommend merging this update because the dependencies caused no impact for this update.

I analyzed usage patterns across 1 file
I researched dependency changes and release notes

What I analyzed

✓ Found all breaking changes in the upgraded dependencies
✓ Analyzed 1 usage pattern across 1 file
✓ Assessed impact on your specific usage patterns
✓ Confirmed no action required

Dependency Usage

Vite serves as the primary build tool and development server for this React-TypeScript application. The configuration includes React support, SVG component functionality, HTTPS-enabled development with hot module replacement, and a production build pipeline that outputs to a build/ directory.

vite at vite.config.ts:1: This Vite configuration file is setting up a React project with plugins, specifically adding React support and enabling SVG import as React components using the @vitejs/plugin-react and vite-plugin-svgr plugins.

Changes Summary

Found 1 important update

View all changes

vite (6.1.6 → 6.3.6)
Important for you: There are no obvious breaking changes, security fixes, or deprecations.
Interesting changes: The changes from Vite 6.1.6 to 6.3.6 are documented in the project's changelog file. No specific new features or bug fixes are highlighted in this summary, with details available in the official changelog.

fossabot analyzed this PR using static analysis and dependency research.

robszumski · 2025-09-23T18:51:49Z

@fossa-robszumski analyze

fossa-robszumski · 2025-09-23T18:51:51Z

You have no credits left. Reach out to autoupdates@fossa.com and we'll top you up.

Credits are consumed when dependency updates are reviewed or proposed.

Re-run with @fossabot analyze.

dependabot · 2025-10-21T03:08:30Z

Superseded by #19.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 10, 2025

dependabot bot mentioned this pull request Sep 10, 2025

Bump vite from 5.4.11 to 6.3.5 #13

Closed

dependabot bot closed this Oct 21, 2025

dependabot bot deleted the dependabot/npm_and_yarn/vite-6.3.6 branch October 21, 2025 03:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump vite from 6.1.6 to 6.3.6 #15

Bump vite from 6.1.6 to 6.3.6 #15

Uh oh!

dependabot bot commented on behalf of github Sep 10, 2025

Uh oh!

fossabot bot commented Sep 10, 2025 •

edited

Loading

Uh oh!

robszumski commented Sep 23, 2025

Uh oh!

fossa-robszumski bot commented Sep 23, 2025

Uh oh!

dependabot bot commented on behalf of github Oct 21, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump vite from 6.1.6 to 6.3.6 #15

Bump vite from 6.1.6 to 6.3.6 #15

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 10, 2025

v6.3.6

v6.3.5

v6.3.4

v6.3.3

v6.3.2

[email protected]

v6.3.1

[email protected]

v6.3.0

v6.3.0-beta.2

v6.3.0-beta.1

v6.3.0-beta.0

v6.2.7

v6.2.6

v6.2.5

v6.2.4

v6.2.3

6.3.6 (2025-09-08)

6.3.5 (2025-05-05)

6.3.4 (2025-04-30)

6.3.3 (2025-04-24)

6.3.2 (2025-04-18)

6.3.1 (2025-04-17)

Uh oh!

fossabot bot commented Sep 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✓ Safe to upgrade

What I analyzed

Dependency Usage

Changes Summary

Uh oh!

robszumski commented Sep 23, 2025

Uh oh!

fossa-robszumski bot commented Sep 23, 2025

Uh oh!

dependabot bot commented on behalf of github Oct 21, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

fossabot bot commented Sep 10, 2025 •

edited

Loading