[PR #3341] [CLOSED] Bump vite from 4.5.3 to 5.0.13 #3896

New issue

Closed

opened 2026-02-27 01:54:11 +03:00 by kerem · 0 comments

kerem commented

2026-02-27 01:54:11 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/electerm/electerm/pull/3341
Author: @dependabot[bot]
Created: 4/5/2024
Status: ❌ Closed

Base: master ← Head: dependabot/npm_and_yarn/vite-5.0.13

📝 Commits (1)

ffe3a4b Bump vite from 4.5.3 to 5.0.13

📊 Changes

2 files changed (+457 additions, -705 deletions)

View changed files

📝 package-lock.json (+456 -704)
📝 package.json (+1 -1)

📄 Description

Bumps vite from 4.5.3 to 5.0.13.

Release notes

Sourced from vite's releases.

create-vite@5.0.0

Please refer to CHANGELOG.md for details.

create-vite@5.0.0-beta.1

Please refer to CHANGELOG.md for details.

create-vite@5.0.0-beta.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

5.0.13 (2024-03-24)

fix: fs.deny with globs with directories (#16250) (d2db33f), closes #16250

5.0.12 (2024-01-19)

fix: await configResolved hooks of worker plugins (#15597) (#15605) (ef89f80), closes #15597 #15605

fix: fs deny for case insensitive systems (#15653) (91641c4), closes #15653

5.0.11 (2024-01-05)

fix: don't pretransform classic script links (#15361) (19e3c9a), closes #15361

fix: inject __vite__mapDeps code before sourcemap file comment (#15483) (d2aa096), closes #15483

fix(assets): avoid splitting , inside base64 value of srcset attribute (#15422) (8de7bd2), closes #15422

fix(html): handle offset magic-string slice error (#15435) (5ea9edb), closes #15435

chore(deps): update dependency strip-literal to v2 (#15475) (49d21fe), closes #15475

chore(deps): update tj-actions/changed-files action to v41 (#15476) (2a540ee), closes #15476

5.0.10 (2023-12-15)

fix: omit protocol does not require pre-transform (#15355) (d9ae1b2), closes #15355

fix(build): use base64 for inline SVG if it contains both single and double quotes (#15271) (1bbff16), closes #15271

5.0.9 (2023-12-14)

fix: htmlFallbackMiddleware for favicon (#15301) (c902545), closes #15301

fix: more stable hash calculation for depsOptimize (#15337) (2b39fe6), closes #15337

fix(scanner): catch all external files for glob imports (#15286) (129d0d0), closes #15286

fix(server): avoid chokidar throttling on startup (#15347) (56a5740), closes #15347

fix(worker): replace import.meta correctly for IIFE worker (#15321) (08d093c), closes #15321

feat: log re-optimization reasons (#15339) (b1a6c84), closes #15339

chore: temporary typo (#15329) (7b71854), closes #15329

perf: avoid computing paths on each request (#15318) (0506812), closes #15318

perf: temporary hack to avoid fs checks for /@react-refresh (#15299) (b1d6211), closes #15299

5.0.8 (2023-12-12)

perf: cached fs utils (#15279) (c9b61c4), closes #15279

fix: missing warmupRequest in transformIndexHtml (#15303) (103820f), closes #15303

fix: public files map will be updated on add/unlink in windows (#15317) (921ca41), closes #15317

... (truncated)

Commits

80b1b07 release: v5.0.13
d2db33f fix: fs.deny with globs with directories (#16250)
ee81e19 release: v5.0.12
91641c4 fix: fs deny for case insensitive systems (#15653)
ef89f80 fix: await configResolved hooks of worker plugins (#15597) (#15605)
b44c493 release: v5.0.11
d2aa096 fix: inject __vite__mapDeps code before sourcemap file comment (#15483)
2a540ee chore(deps): update tj-actions/changed-files action to v41 (#15476)
5ea9edb fix(html): handle offset magic-string slice error (#15435)
49d21fe chore(deps): update dependency strip-literal to v2 (#15475)
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Note

Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/electerm/electerm/pull/3341 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 4/5/2024 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/npm_and_yarn/vite-5.0.13` --- ### 📝 Commits (1) - [`ffe3a4b`](https://github.com/electerm/electerm/commit/ffe3a4b2c5e178584283ed659eae3fbfa0823e6b) Bump vite from 4.5.3 to 5.0.13 ### 📊 Changes **2 files changed** (+457 additions, -705 deletions) <details> <summary>View changed files</summary> 📝 `package-lock.json` (+456 -704) 📝 `package.json` (+1 -1) </details> ### 📄 Description Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 4.5.3 to 5.0.13. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>create-vite@5.0.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@5.0.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>create-vite@5.0.0-beta.1</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@5.0.0-beta.1/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>create-vite@5.0.0-beta.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@5.0.0-beta.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/v5.0.13/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2>5.0.13 (2024-03-24)</h2> <ul> <li>fix: <code>fs.deny</code> with globs with directories (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16250">#16250</a>) (<a href="https://github.com/vitejs/vite/commit/d2db33f">d2db33f</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16250">#16250</a></li> </ul> <h2>5.0.12 (2024-01-19)</h2> <ul> <li>fix: await <code>configResolved</code> hooks of worker plugins (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15597">#15597</a>) (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15605">#15605</a>) (<a href="https://github.com/vitejs/vite/commit/ef89f80">ef89f80</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15597">#15597</a> <a href="https://redirect.github.com/vitejs/vite/issues/15605">#15605</a></li> <li>fix: fs deny for case insensitive systems (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15653">#15653</a>) (<a href="https://github.com/vitejs/vite/commit/91641c4">91641c4</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15653">#15653</a></li> </ul> <h2>5.0.11 (2024-01-05)</h2> <ul> <li>fix: don't pretransform classic script links (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15361">#15361</a>) (<a href="https://github.com/vitejs/vite/commit/19e3c9a">19e3c9a</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15361">#15361</a></li> <li>fix: inject <code>__vite__mapDeps</code> code before sourcemap file comment (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15483">#15483</a>) (<a href="https://github.com/vitejs/vite/commit/d2aa096">d2aa096</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15483">#15483</a></li> <li>fix(assets): avoid splitting <code>,</code> inside base64 value of <code>srcset</code> attribute (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15422">#15422</a>) (<a href="https://github.com/vitejs/vite/commit/8de7bd2">8de7bd2</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15422">#15422</a></li> <li>fix(html): handle offset magic-string slice error (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15435">#15435</a>) (<a href="https://github.com/vitejs/vite/commit/5ea9edb">5ea9edb</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15435">#15435</a></li> <li>chore(deps): update dependency strip-literal to v2 (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15475">#15475</a>) (<a href="https://github.com/vitejs/vite/commit/49d21fe">49d21fe</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15475">#15475</a></li> <li>chore(deps): update tj-actions/changed-files action to v41 (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15476">#15476</a>) (<a href="https://github.com/vitejs/vite/commit/2a540ee">2a540ee</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15476">#15476</a></li> </ul> <h2>5.0.10 (2023-12-15)</h2> <ul> <li>fix: omit protocol does not require pre-transform (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15355">#15355</a>) (<a href="https://github.com/vitejs/vite/commit/d9ae1b2">d9ae1b2</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15355">#15355</a></li> <li>fix(build): use base64 for inline SVG if it contains both single and double quotes (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15271">#15271</a>) (<a href="https://github.com/vitejs/vite/commit/1bbff16">1bbff16</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15271">#15271</a></li> </ul> <h2>5.0.9 (2023-12-14)</h2> <ul> <li>fix: htmlFallbackMiddleware for favicon (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15301">#15301</a>) (<a href="https://github.com/vitejs/vite/commit/c902545">c902545</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15301">#15301</a></li> <li>fix: more stable hash calculation for depsOptimize (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15337">#15337</a>) (<a href="https://github.com/vitejs/vite/commit/2b39fe6">2b39fe6</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15337">#15337</a></li> <li>fix(scanner): catch all external files for glob imports (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15286">#15286</a>) (<a href="https://github.com/vitejs/vite/commit/129d0d0">129d0d0</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15286">#15286</a></li> <li>fix(server): avoid chokidar throttling on startup (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15347">#15347</a>) (<a href="https://github.com/vitejs/vite/commit/56a5740">56a5740</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15347">#15347</a></li> <li>fix(worker): replace <code>import.meta</code> correctly for IIFE worker (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15321">#15321</a>) (<a href="https://github.com/vitejs/vite/commit/08d093c">08d093c</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15321">#15321</a></li> <li>feat: log re-optimization reasons (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15339">#15339</a>) (<a href="https://github.com/vitejs/vite/commit/b1a6c84">b1a6c84</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15339">#15339</a></li> <li>chore: temporary typo (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15329">#15329</a>) (<a href="https://github.com/vitejs/vite/commit/7b71854">7b71854</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15329">#15329</a></li> <li>perf: avoid computing paths on each request (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15318">#15318</a>) (<a href="https://github.com/vitejs/vite/commit/0506812">0506812</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15318">#15318</a></li> <li>perf: temporary hack to avoid fs checks for /<a href="https://github.com/react-refresh"><code>@react-refresh</code></a> (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15299">#15299</a>) (<a href="https://github.com/vitejs/vite/commit/b1d6211">b1d6211</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15299">#15299</a></li> </ul> <h2>5.0.8 (2023-12-12)</h2> <ul> <li>perf: cached fs utils (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15279">#15279</a>) (<a href="https://github.com/vitejs/vite/commit/c9b61c4">c9b61c4</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15279">#15279</a></li> <li>fix: missing warmupRequest in transformIndexHtml (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15303">#15303</a>) (<a href="https://github.com/vitejs/vite/commit/103820f">103820f</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15303">#15303</a></li> <li>fix: public files map will be updated on add/unlink in windows (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15317">#15317</a>) (<a href="https://github.com/vitejs/vite/commit/921ca41">921ca41</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15317">#15317</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/80b1b07915295a32a7251df543509f8f667c5771"><code>80b1b07</code></a> release: v5.0.13</li> <li><a href="https://github.com/vitejs/vite/commit/d2db33f7d4b96750b35370c70dd2c35ec3b9b649"><code>d2db33f</code></a> fix: <code>fs.deny</code> with globs with directories (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16250">#16250</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/ee81e196769c102a6b1bf30f8444ccde236e71d5"><code>ee81e19</code></a> release: v5.0.12</li> <li><a href="https://github.com/vitejs/vite/commit/91641c4da0a011d4c5352e88fc68389d4e1289a5"><code>91641c4</code></a> fix: fs deny for case insensitive systems (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15653">#15653</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/ef89f8092f0eb1d8fd7d21256e6af8c4e64fe9b2"><code>ef89f80</code></a> fix: await <code>configResolved</code> hooks of worker plugins (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15597">#15597</a>) (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15605">#15605</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/b44c49302ffbf0c82f984f6219ed6376d1e4552a"><code>b44c493</code></a> release: v5.0.11</li> <li><a href="https://github.com/vitejs/vite/commit/d2aa0969ee316000d3b957d7e879f001e85e369e"><code>d2aa096</code></a> fix: inject <code>__vite__mapDeps</code> code before sourcemap file comment (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15483">#15483</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/2a540eee82f9a31deff8215bdbdccfa46d494a06"><code>2a540ee</code></a> chore(deps): update tj-actions/changed-files action to v41 (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15476">#15476</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/5ea9edbc9ceb991e85f893fe62d68ed028677451"><code>5ea9edb</code></a> fix(html): handle offset magic-string slice error (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15435">#15435</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/49d21fe1feaac30dee0196bd484480a8000a4363"><code>49d21fe</code></a> chore(deps): update dependency strip-literal to v2 (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15475">#15475</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/vite/commits/v5.0.13/packages/vite">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=vite&package-manager=npm_and_yarn&previous-version=4.5.3&new-version=5.0.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/electerm/electerm/network/alerts). </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>