Skip to content

chore(deps-dev): bump vite from 8.0.12 to 8.0.13 - #20

Merged
qnbs merged 1 commit into
mainfrom
dependabot/npm_and_yarn/vite-8.0.12
May 16, 2026
Merged

chore(deps-dev): bump vite from 8.0.12 to 8.0.13#20
qnbs merged 1 commit into
mainfrom
dependabot/npm_and_yarn/vite-8.0.12

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubMay 12, 2026

Copy link
Copy Markdown
Contributor

Bumps vite from 8.0.12 to 8.0.13.

Release notes

Sourced from vite's releases.

v8.0.13

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.0.13 (2026-05-14)

Features

  • bundled-dev: add lazy bundling support (#21406) (4f0949f)
  • optimizer: improve the esbuild plugin converter to pass some properties of build result to onEnd (#22357) (47071ce)
  • update rolldown to 1.0.1 (#22444) (8c766a6)

Bug Fixes

  • build: copy public directory after building same environment with write=false (#22328) (158e8ae)
  • css: await sass/less/styl worker disposal on teardown (fix #22274) (#22275) (b7edcb7)
  • css: keep deprecated name/originalFileName in synthetic assetFileNames call (#22439) (8e59c97)
  • make isBundled per environment (#22257) (a576326)
  • ssr: avoid rewriting labels that collide with imports (#22451) (d9b18e0)

Miscellaneous Chores

Commits
  • a46f11a release: v8.0.13
  • d9b18e0 fix(ssr): avoid rewriting labels that collide with imports (#22451)
  • 4f0949f feat(bundled-dev): add lazy bundling support (#21406)
  • 158e8ae fix(build): copy public directory after building same environment with `write...
  • 47071ce feat(optimizer): improve the esbuild plugin converter to pass some properties...
  • 8e59c97 fix(css): keep deprecated name/originalFileName in synthetic `assetFileNa...
  • a576326 fix: make isBundled per environment (#22257)
  • 8c766a6 feat: update rolldown to 1.0.1 (#22444)
  • b7edcb7 fix(css): await sass/less/styl worker disposal on teardown (fix #22274) (#22275)
  • fcdc87c chore: update changelog (#22413)
  • Additional commits viewable in compare view

@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 12, 2026
@codeant-ai

Copy link
Copy Markdown

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

@qnbs

qnbs commented May 12, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/vite-8.0.12 branch from d50af0d to dd13c98CompareMay 12, 2026 18:59
qnbs
qnbs previously approved these changes May 16, 2026

@qnbsqnbs left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved: dependency update

@qnbs
qnbs enabled auto-merge (squash) May 16, 2026 06:28
qnbs added a commit that referenced this pull request May 16, 2026
#20–24
- @playwright/test: 1.59.1 → 1.60.0
- @storybook/{addon-a11y,react,react-vite}: 10.3.5 → 10.3.6
- storybook: 10.3.5 → 10.3.6
- vitest: 4.1.4 → 4.1.6
- @vitest/coverage-v8: 4.1.4 → 4.1.6
- vite: 8.0.8 → 8.0.12
- @tailwindcss/vite: 4.2.2 → 4.3.0
- @types/node: 25.6.0 → 25.7.0
- turbo: 2.9.9 → 2.9.12
- onnxruntime-web: 1.25.1 → 1.26.0
- ai: 6.0.177 → 6.0.178
- @tauri-apps/api: 2.10.1 → 2.11.0
- @tauri-apps/plugin-dialog: 2.7.0 → 2.7.1
- @tauri-apps/plugin-fs: 2.5.0 → 2.5.1
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.0.12 to 8.0.13.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.13/packages/vite)
---
updated-dependencies:
- dependency-name: vite
dependency-version: 8.0.12
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot changed the title chore(deps-dev): bump vite from 8.0.8 to 8.0.12chore(deps-dev): bump vite from 8.0.12 to 8.0.13May 16, 2026
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/vite-8.0.12 branch from dd13c98 to 40de41aCompareMay 16, 2026 06:33
@qnbs
qnbs merged commit 080d947 into mainMay 16, 2026
10 of 11 checks passed
@dependabot
dependabotBot deleted the dependabot/npm_and_yarn/vite-8.0.12 branch May 16, 2026 06:54
qnbs added a commit that referenced this pull request May 16, 2026
…zz (Scorecard) (#26)
* chore(deps): bump ai 6.0.183, vite 8.0.13, turbo 2.9.14, storybook 10.4.0, @types/node 25.8.0
Resolves Dependabot PRs #12#13#20#23#25.
Storybook 10.4.0 adds @types/react peer dep alignment.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
* chore(security): add CODEOWNERS + cargo-fuzz target (Scorecard Code-Review + Fuzzing)
- .github/CODEOWNERS: all PRs require review from @qnbs; enables
Scorecard Code-Review credit and require_code_owner_reviews branch protection
- src-tauri/fuzz/: cargo-fuzz setup with fuzz_file_name_sanitization target
fuzzes arbitrary UTF-8 input through path-sanitization logic; satisfies
Scorecard Fuzzing check with a recognized libFuzzer-based harness
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---------
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@qnbs