Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 7, 2025

Bumps the packages group with 3 updates: vite, babel-plugin-jsx-dom-expressions and electron-to-chromium.

Updates vite from 7.0.6 to 7.1.0

Release notes

Sourced from vite's releases.

plugin-legacy@7.1.0

Please refer to CHANGELOG.md for details.

create-vite@7.1.0

Please refer to CHANGELOG.md for details.

v7.1.0

Please refer to CHANGELOG.md for details.

v7.1.0-beta.1

Please refer to CHANGELOG.md for details.

v7.1.0-beta.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.1.0 (2025-08-07)

Features

  • support files with more than 1000 lines by generateCodeFrame (#20508) (e7d0b2a)
  • add import.meta.main support in config (bundle config loader) (#20516) (5d3e3c2)
  • optimizer: improve dependency optimization error messages with esbuild formatMessages (#20525) (d17cfed)
  • ssr: add import.meta.main support for Node.js module runner (#20517) (794a8f2)
  • add future: 'warn' (#20473) (e6aaf17)
  • add removeServerPluginContainer future deprecation (#20437) (c1279e7)
  • add removeServerReloadModule future deprecation (#20436) (6970d17)
  • add server.warmupRequest to future deprecation (#20431) (8ad388a)
  • add ssrFixStacktrace / ssrRewriteStacktrace to removeSsrLoadModule future deprecation (#20435) (8c8f587)
  • client: ping from SharedWorker (#19057) (5c97c22)
  • dev: add this.fs support (#20301) (0fe3f2f)
  • export defaultExternalConditions (#20279) (344d302)
  • implement removePluginHookSsrArgument future deprecation (#20433) (95927d9)
  • implement removeServerHot future deprecation (#20434) (259f45d)
  • resolve server URLs before calling other listeners (#19981) (45f6443)
  • ssr: resolve externalized packages with resolve.externalConditions and add module-sync to default external condition (#20409) (c669c52)
  • ssr: support import.meta.resolve in module runner (#20260) (62835f7)

Bug Fixes

  • css: avoid warnings for image-set containing __VITE_ASSET__ (#20520) (f1a2635)
  • css: empty CSS entry points should generate CSS files, not JS files (#20518) (bac9f3e)
  • dev: denied request stalled when requested concurrently (#20503) (64a52e7)
  • manifest: initialize entryCssAssetFileNames as an empty Set (#20542) (6a46cda)
  • skip prepareOutDirPlugin in workers (#20556) (97d5111)
  • asset: only watch existing files for new URL(, import.meta.url) (#20507) (1b211fd)
  • client: keep ping on WS constructor error (#20512) (3676da5)
  • deps: update all non-major dependencies (#20537) (fc9a9d3)
  • don't resolve as relative for specifiers starting with a dot (#20528) (c5a10ec)
  • html: allow control character in input stream (#20483) (c12a4a7)
  • merge old and new noExternal: true correctly (#20502) (9ebe4a5)
  • deps: update all non-major dependencies (#20489) (f6aa04a)
  • dev: denied requests overly (#20410) (4be5270)
  • hmr: register css deps as type: asset (#20391) (7eac8dd)
  • optimizer: discover correct jsx runtime during scan (#20495) (10d48bb)
  • preview: set correct host for resolvedUrls (#20496) (62b3e0d)
  • worker: resolve WebKit compat with inline workers by deferring blob URL revocation (#20460) (8033e5b)

Performance Improvements

Miscellaneous Chores

... (truncated)

Commits
  • 931684e release: v7.1.0
  • 97d5111 fix: skip prepareOutDirPlugin in workers (#20556)
  • 1f23554 test: fix unimportant errors in test-unit (#20545)
  • 856d3f0 test: detect ts support via process.features (#20544)
  • f1a2635 fix(css): avoid warnings for image-set containing __VITE_ASSET__ (#20520)
  • 6a46cda fix(manifest): initialize entryCssAssetFileNames as an empty Set (#20542)
  • 64a52e7 fix(dev): denied request stalled when requested concurrently (#20503)
  • e7d0b2a feat: support files with more than 1000 lines by generateCodeFrame (#20508)
  • bac9f3e fix(css): empty CSS entry points should generate CSS files, not JS files (#20...
  • ddd76e0 release: v7.1.0-beta.1
  • Additional commits viewable in compare view

Updates babel-plugin-jsx-dom-expressions from 0.40.0 to 0.40.1

Commits

Updates electron-to-chromium from 1.5.198 to 1.5.199

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the packages group with 3 updates: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [babel-plugin-jsx-dom-expressions](https://github.com/ryansolid/dom-expressions) and [electron-to-chromium](https://github.com/kilian/electron-to-chromium).


Updates `vite` from 7.0.6 to 7.1.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@7.1.0/packages/vite)

Updates `babel-plugin-jsx-dom-expressions` from 0.40.0 to 0.40.1
- [Release notes](https://github.com/ryansolid/dom-expressions/releases)
- [Commits](ryansolid/dom-expressions@v0.40.0...v0.40.1)

Updates `electron-to-chromium` from 1.5.198 to 1.5.199
- [Changelog](https://github.com/Kilian/electron-to-chromium/blob/master/CHANGELOG.md)
- [Commits](Kilian/electron-to-chromium@v1.5.198...v1.5.199)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: packages
- dependency-name: babel-plugin-jsx-dom-expressions
  dependency-version: 0.40.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: packages
- dependency-name: electron-to-chromium
  dependency-version: 1.5.199
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot assigned poad Aug 7, 2025
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 7, 2025
@vercel
Copy link

vercel bot commented Aug 7, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
github-rest-api-executor ❌ Failed (Inspect) Aug 7, 2025 10:39pm

@amazon-q-developer
Copy link

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

@github-actions github-actions bot merged commit 8e257f2 into main Aug 7, 2025
4 of 5 checks passed
@github-actions github-actions bot deleted the dependabot/npm_and_yarn/packages-64ee6bc2e1 branch August 7, 2025 22:39
@amazon-q-developer
Copy link

✅ I finished the code review, and didn't find any security or code quality issues.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants