chore(deps): update dependency vite to v5

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
vite (source)	^4.5.2 -> ^5.1.6

---

Release Notes

vitejs/vite (vite)

v5.1.6

Compare Source

• chore(deps): update all non-major dependencies (#​16131) (a862ecb), closes #​16131
• fix: check for publicDir before checking if it is a parent directory (#​16046) (b6fb323), closes #​16046
• fix: escape single quote when relative base is used (#​16060) (8f74ce4), closes #​16060
• fix: handle function property extension in namespace import (#​16113) (f699194), closes #​16113
• fix: server middleware mode resolve (#​16122) (8403546), closes #​16122
• fix(esbuild): update tsconfck to fix bug that could cause a deadlock (#​16124) (fd9de04), closes #​16124
• fix(worker): hide "The emitted file overwrites" warning if the content is same (#​16094) (60dfa9e), closes #​16094
• fix(worker): throw error when circular worker import is detected and support self referencing worker (eef9da1), closes #​16103
• style(utils): remove null check (#​16112) (0d2df52), closes #​16112
• refactor(runtime): share more code between runtime and main bundle (#​16063) (93be84e), closes #​16063

v5.1.5

Compare Source

• fix: __vite__mapDeps code injection (#​15732) (aff54e1), closes #​15732
• fix: analysing build chunk without dependencies (#​15469) (bd52283), closes #​15469
• fix: import with query with imports field (#​16085) (ab823ab), closes #​16085
• fix: normalize literal-only entry pattern (#​16010) (1dccc37), closes #​16010
• fix: optimizeDeps.entries with literal-only pattern(s) (#​15853) (49300b3), closes #​15853
• fix: output correct error for empty import specifier (#​16055) (a9112eb), closes #​16055
• fix: upgrade esbuild to 0.20.x (#​16062) (899d9b1), closes #​16062
• fix(runtime): runtime HMR affects only imported files (#​15898) (57463fc), closes #​15898
• fix(scanner): respect experimentalDecorators: true (#​15206) (4144781), closes #​15206
• revert: "fix: upgrade esbuild to 0.20.x" (#​16072) (11cceea), closes #​16072
• refactor: share code with vite runtime (#​15907) (b20d542), closes #​15907
• refactor(runtime): use functions from pathe (#​16061) (aac2ef7), closes #​16061
• chore(deps): update all non-major dependencies (#​16028) (7cfe80d), closes #​16028

v5.1.4

Compare Source

• perf: remove unnecessary regex s modifier (#​15766) (8dc1b73), closes #​15766
• fix: fs cached checks disabled by default for yarn pnp (#​15920) (8b11fea), closes #​15920
• fix: resolve directory correctly when fs.cachedChecks: true (#​15983) (4fe971f), closes #​15983
• fix: srcSet with optional descriptor (#​15905) (81b3bd0), closes #​15905
• fix(deps): update all non-major dependencies (#​15959) (571a3fd), closes #​15959
• fix(watch): build watch fails when outDir is empty string (#​15979) (1d263d3), closes #​15979

v5.1.3

Compare Source

• fix: cachedTransformMiddleware for direct css requests (#​15919) (5099028), closes #​15919
• refactor(runtime): minor tweaks (#​15904) (63a39c2), closes #​15904
• refactor(runtime): seal ES module namespace object instead of feezing (#​15914) (4172f02), closes #​15914

v5.1.2

Compare Source

• fix: normalize import file path info (#​15772) (306df44), closes #​15772
• fix(build): do not output build time when build fails (#​15711) (added3e), closes #​15711
• fix(runtime): pass path instead of fileURL to isFilePathESM (#​15908) (7b15607), closes #​15908
• fix(worker): support UTF-8 encoding in inline workers (fixes #​12117) (#​15866) (570e0f1), closes #​12117 #​15866
• chore: update license file (#​15885) (d9adf18), closes #​15885
• chore(deps): update all non-major dependencies (#​15874) (d16ce5d), closes #​15874
• chore(deps): update dependency dotenv-expand to v11 (#​15875) (642d528), closes #​15875

v5.1.1

• fix: empty CSS file was output when only .css?url is used (#​15846) (b2873ac), closes #​15846
• fix: skip not only .js but also .mjs manifest entries (#​15841) (3d860e7), closes #​15841
• chore: post 5.1 release edits (#​15840) (9da6502), closes #​15840

v5.1.0

• chore: revert #​15746 (#​15839) (ed875f8), closes #​15746 #​15839
• fix: pass customLogger to loadConfigFromFile (fix #​15824) (#​15831) (55a3427), closes #​15824 #​15831
• fix(deps): update all non-major dependencies (#​15803) (e0a6ef2), closes #​15803
• refactor: remove vite build --force (#​15837) (f1a4242), closes #​15837

v5.0.12

Compare Source

Please refer to CHANGELOG.md for details.

v5.0.11

Compare Source

• fix: don't pretransform classic script links (#​15361) (19e3c9a), closes #​15361
• fix: inject __vite__mapDeps code before sourcemap file comment (#​15483) (d2aa096), closes #​15483
• fix(assets): avoid splitting , inside base64 value of srcset attribute (#​15422) (8de7bd2), closes #​15422
• fix(html): handle offset magic-string slice error (#​15435) (5ea9edb), closes #​15435
• chore(deps): update dependency strip-literal to v2 (#​15475) (49d21fe), closes #​15475
• chore(deps): update tj-actions/changed-files action to v41 (#​15476) (2a540ee), closes #​15476

v5.0.10

Compare Source

• fix: omit protocol does not require pre-transform (#​15355) (d9ae1b2), closes #​15355
• fix(build): use base64 for inline SVG if it contains both single and double quotes (#​15271) (1bbff16), closes #​15271

v5.0.9

Compare Source

• fix: htmlFallbackMiddleware for favicon (#​15301) (c902545), closes #​15301
• fix: more stable hash calculation for depsOptimize (#​15337) (2b39fe6), closes #​15337
• fix(scanner): catch all external files for glob imports (#​15286) (129d0d0), closes #​15286
• fix(server): avoid chokidar throttling on startup (#​15347) (56a5740), closes #​15347
• fix(worker): replace import.meta correctly for IIFE worker (#​15321) (08d093c), closes #​15321
• feat: log re-optimization reasons (#​15339) (b1a6c84), closes #​15339
• chore: temporary typo (#​15329) (7b71854), closes #​15329
• perf: avoid computing paths on each request (#​15318) (0506812), closes #​15318
• perf: temporary hack to avoid fs checks for /@​react-refresh (#​15299) (b1d6211), closes #​15299

v5.0.8

Compare Source

• perf: cached fs utils (#​15279) (c9b61c4), closes #​15279
• fix: missing warmupRequest in transformIndexHtml (#​15303) (103820f), closes #​15303
• fix: public files map will be updated on add/unlink in windows (#​15317) (921ca41), closes #​15317
• fix(build): decode urls in CSS files (fix #​15109) (#​15246) (ea6a7a6), closes #​15109 #​15246
• fix(deps): update all non-major dependencies (#​15304) (bb07f60), closes #​15304
• fix(ssr): check esm file with normal file path (#​15307) (1597170), closes #​15307

v5.0.7

Compare Source

• fix: suppress terser warning if minify disabled (#​15275) (3e42611), closes #​15275
• fix: symbolic links in public dir (#​15264) (ef2a024), closes #​15264
• fix(html): skip inlining icon and manifest links (#​14958) (8ad81b4), closes #​14958
• chore: remove unneeded condition in getRealPath (#​15267) (8e4655c), closes #​15267
• perf: cache empty optimizer result (#​15245) (8409b66), closes #​15245

v5.0.6

Compare Source

• perf: in-memory public files check (#​15195) (0f9e1bf), closes #​15195
• chore: remove unneccessary eslint-disable-next-line regexp/no-unused-capturing-group (#​15247) (35a5bcf), closes #​15247

v5.0.5

Compare Source

• fix: emit vite:preloadError for chunks without deps (#​15203) (d8001c5), closes #​15203
• fix: esbuild glob import resolve error (#​15140) (676804d), closes #​15140
• fix: json error with position (#​15225) (14be75f), closes #​15225
• fix: proxy html path should be encoded (#​15223) (5b85040), closes #​15223
• fix(deps): update all non-major dependencies (#​15233) (ad3adda), closes #​15233
• fix(hmr): don't consider CSS dep as a circular dep (#​15229) (5f2cdec), closes #​15229
• feat: add '*.mov' to client.d.ts (#​15189) (d93a211), closes #​15189
• feat(server): allow disabling built-in shortcuts (#​15218) (7fd7c6c), closes #​15218
• chore: replace 'some' with 'includes' in resolveEnvPrefix (#​15220) (ee12f30), closes #​15220
• chore: update the website url for homepage in package.json (#​15181) (282bd8f), closes #​15181
• chore: update vitest to 1.0.0-beta.6 (#​15194) (2fce647), closes #​15194
• refactor: make HMR agnostic to environment (#​15179) (0571b7c), closes #​15179
• refactor: use dedicated regex methods (#​15228) (0348137), closes #​15228
• perf: remove debug only prettifyUrl call (#​15204) (73e971f), closes #​15204
• perf: skip computing sourceRoot in injectSourcesContent (#​15207) (1df1fd1), closes #​15207

v5.0.4

Compare Source

• fix: bindCLIShortcuts to proper server (#​15162) (67ac572), closes #​15162
• fix: revert "fix: js fallback sourcemap content should be using original content (#​15135)" (#​15178) (d2a2493), closes #​15135 #​15178
• fix(define): allow define process.env (#​15173) (ec401da), closes #​15173
• fix(resolve): respect order of browser in mainFields when resolving (#​15137) (4a111aa), closes #​15137
• feat: preserve vite.middlewares connect instance after restarts (#​15166) (9474c4b), closes #​15166
• refactor: align with Promise.withResolvers() (#​15171) (642f9bc), closes #​15171

v5.0.3

Compare Source

• fix: generateCodeFrame infinite loop (#​15093) (6619de7), closes #​15093
• fix: js fallback sourcemap content should be using original content (#​15135) (227d56d), closes #​15135
• fix(css): render correct asset url when CSS chunk name is nested (#​15154) (ef403c0), closes #​15154
• fix(css): use non-nested chunk name if facadeModule is not CSS file (#​15155) (811e392), closes #​15155
• fix(dev): bind plugin context functions (#​14569) (cb3243c), closes #​14569
• chore(deps): update all non-major dependencies (#​15145) (7ff2c0a), closes #​15145
• build: handle latest json-stable-stringify replacement (#​15049) (bcc4a61), closes #​15049

v5.0.2

Compare Source

• fix: make htmlFallback more permissive (#​15059) (6fcceeb), closes #​15059

v5.0.1

• test: avoid read check when running as root (#​14884) (1d9516c), closes #​14884
• perf(hmr): skip traversed modules when checking circular imports (#​15034) (41e437f), closes #​15034
• fix: run htmlFallbackMiddleware for no accept header requests (#​15025) (b93dfe3), closes #​15025
• fix: update type CSSModulesOptions interface (#​14987) (d0b2153), closes #​14987
• fix(legacy): error in build with --watch and manifest enabled (#​14450) (b9ee620), closes #​14450
• chore: add comment about crossorigin attribute for script module (#​15040) (03c371e), closes #​15040
• chore: cleanup v5 beta changelog (#​14694) (531d3cb), closes #​14694

v5.0.0

---

Configuration

📅 Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate using a curated preset maintained by . View repository job log here

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/vite@5.1.6	environment, eval, filesystem, network, shell, unsafe	+8	10.2 MB	vitebot

🚮 Removed packages: npm/vite@4.5.2, npm/vitest@0.34.6

View full report↗︎