feat(deps): bump vite from 5.4.21 to 6.4.2#20111
feat(deps): bump vite from 5.4.21 to 6.4.2#20111dependabot[bot] wants to merge 1 commit intodevelopfrom
Conversation
dependabot
bot
added
dependencies
Semver Impact of This PR🟡 Minor (new features) 📋 Changelog PreviewThis is how your changes will appear in the changelog. New Features ✨Core
Deps
Other
Bug Fixes 🐛Core
Other
Internal Changes 🔧Core
Deps
Other
🤖 This preview updates automatically when you update the PR. |
Semver Impact of This PR🟡 Minor (new features) 📋 Changelog PreviewThis is how your changes will appear in the changelog. New Features ✨Deps
Other
Bug Fixes 🐛
Internal Changes 🔧Core
Deps
Other
🤖 This preview updates automatically when you update the PR. |
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 982246b. Configure here.
| "@testing-library/svelte": "^3.2.1", | ||
| "svelte": "3.59.2", | ||
| "vite": "^5.4.21" | ||
| "vite": "^6.4.2" |
There was a problem hiding this comment.
Vite 6 incompatible with svelte plugin 1.4.0
High Severity
Bumping vite to ^6.4.2 without updating companion plugins breaks compatibility. @sveltejs/vite-plugin-svelte@1.4.0 (pinned in packages/svelte) requires vite ^3.0.0, and @sveltejs/vite-plugin-svelte@^3.0.0 (resolving to 3.1.2 in packages/sveltekit) requires vite ^5.0.0. Since packages/svelte/vite.config.ts directly imports and uses the svelte plugin, the test suite for @sentry/svelte will break. Similarly, packages/sveltekit tests are affected.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 982246b. Configure here.
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/vite-6.4.2
branch
from
982246b to
cadc72b
Compare
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.4.21 to 6.4.2. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v6.4.2/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.4.2/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 6.4.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/vite-6.4.2
branch
from
cadc72b to
8ad4ef1
Compare
|
We shouldn't merge this. All bumped dependencies are either test package dependencies or dev dependencies of our packages. Nothing gets shipped to users. Bumping vite majors without adapting some of the tests/frameworks in there is not a good idea. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps vite from 5.4.21 to 6.4.2.
Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
... (truncated)
Commits
6b3fad0release: v6.4.2ca4da5dfix: avoid path traversal with optimize deps sourcemap handler (#22161)fe28e47fix: apply server.fs check to env transport (#22159) (#22163)5487f4frelease: v6.4.11114b5dfix(dev): trim trailing slash beforeserver.fs.denycheck (#20968) (#20969)f12697crelease: v6.4.0ca6455efeat: allow passing down resolved config to vite's createServer (#20932)0e173d8release: v6.3.7c59a222fix(esbuild): inject esbuild helpers correctly for esbuild 0.25.9+ (#20940)3f337c5release: v6.3.6