chore(deps-dev): bump vite from 8.0.10 to 8.1.3 in /ui by dependabot[bot] · Pull Request #122 · RandomCodeSpace/docsiq

dependabot · 2026-07-04T06:10:34Z

Bumps vite from 8.0.10 to 8.1.3.

Release notes

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.0.16

Please refer to CHANGELOG.md for details.

v8.0.15

Please refer to CHANGELOG.md for details.

v8.0.14

Please refer to CHANGELOG.md for details.

v8.0.13

Please refer to CHANGELOG.md for details.

v8.0.12

Please refer to CHANGELOG.md for details.

v8.0.11

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.3 (2026-07-02)

Bug Fixes

css: inject inlined CSS after the shebang line (#22717) (1534d36)

deps: bump es-module-lexer to 2.3.0 (#22838) (7103c3a)

preload css for nested dynamic imports (#22759) (2c53054)

ssr: correct stacktrace column position for first line (#22828) (c4acd69)

8.1.2 (2026-06-30)

Bug Fixes

deps: revert es-module-lexer to 2.1.0 (#22827) (0d3bd7c)

restore, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (#22825) (efb98cc)

revert, "fix: escape ids with multiple null bytes (#22687)" (cccef55)

revert, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (cf97711)

8.1.1 (2026-06-30)

Features

update dynamic import warning to link to Vite docs (#22823) (62bd7af)

Bug Fixes

bundled-dev: avoid stack overflow on import.meta.hot.invalidate() (#22797) (709eb8e)

bundled-dev: serve assets emitted during HMR/lazy compile (#22745) (5876b2c)

bundledDev: skip plugin transform hooks for rolldown-lazy stub modules (#22778) (8f925e2)

css: preserve dollar signs in external @import urls with lightningcss (#22718) (9fa7ab4)

css: resolve tsconfig paths in CSS and Sass @import (#22775) (ef0b891)

deps: update all non-major dependencies (#22734) (e635f49)

deps: update all non-major dependencies (#22804) (8837400)

deps: update rolldown-related dependencies (#22591) (2ce6677)

escape ids with multiple null bytes (#22687) (833fc30)

hide console window when running 'net use' on Windows (#22698) (92b63f2)

ignore bundled config temp dir (#22800) (043a810)

invert esbuild.jsxSideEffects when converting to oxc.jsx.pure (#22809) (33895ba)

optimize-deps: ignore ERR_CLOSED_SERVER in scanner (#22784) (085a0ab)

optimizer: scanner should resolve input from root (#22769) (9722b07)

resolve pnpm .modules.yaml from workspace root instead of cwd (#22757) (2531ac7)

return sourcemap field from some plugins that were lacking (#22782) (7e18bf8)

server: handle malformed URI in indexHtmlMiddleware (#22781) (84f5ccc)

Miscellaneous Chores

improve dependency optimizer messages (#22549) (092cb3b)

Code Refactoring

css: remove lightningcss null byte bug workaround (#22822) (2dafd3b)

use pre-defined environments variable to avoid duplicate Object.values calls (#22790) (1113acf)

... (truncated)

Commits

578ffb8 release: v8.1.3
7103c3a fix(deps): bump es-module-lexer to 2.3.0 (#22838)
1534d36 fix(css): inject inlined CSS after the shebang line (#22717)
c4acd69 fix(ssr): correct stacktrace column position for first line (#22828)
2c53054 fix: preload css for nested dynamic imports (#22759)
ba31193 release: v8.1.2
0d3bd7c fix(deps): revert es-module-lexer to 2.1.0 (#22827)
efb98cc fix: restore, "fix: resolve pnpm .modules.yaml from workspace root instead of...
cf97711 fix: revert, "fix: resolve pnpm .modules.yaml from workspace root instead of ...
cccef55 fix: revert, "fix: escape ids with multiple null bytes (#22687)"
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.0.10 to 8.1.3. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.1.3/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 8.1.3 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-04T06:10:35Z

Labels

The following labels could not be found: javascript. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

socket-security · 2026-07-04T06:11:09Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/vite@8.0.10 ⏵ 8.1.3		⁺¹⁸	⁺¹	⁺¹

View full report

socket-security · 2026-07-04T06:11:12Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@emnapi/runtime` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: ui/package-lock.json → `npm/@tailwindcss/vite@4.2.4` → `npm/vite@8.1.3` → `npm/sharp@0.34.5` → `npm/@emnapi/runtime@1.11.1` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@emnapi/runtime@1.11.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

sonarqubecloud · 2026-07-04T06:11:31Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 4, 2026

dependabot Bot requested a review from aksOps as a code owner July 4, 2026 06:10

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 4, 2026

dependabot Bot mentioned this pull request Jul 4, 2026

chore(deps-dev): bump vite from 8.0.10 to 8.0.16 in /ui #117

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump vite from 8.0.10 to 8.1.3 in /ui#122

chore(deps-dev): bump vite from 8.0.10 to 8.1.3 in /ui#122
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ui/vite-8.1.3

dependabot Bot commented on behalf of github Jul 4, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 4, 2026

Uh oh!

socket-security Bot commented Jul 4, 2026

Uh oh!

socket-security Bot commented Jul 4, 2026

Uh oh!

sonarqubecloud Bot commented Jul 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 4, 2026

v8.1.3

v8.1.2

v8.1.1

create-vite@8.1.0

plugin-legacy@8.1.0

v8.1.0

plugin-legacy@8.1.0-beta.0

v8.1.0-beta.0

v8.0.16

v8.0.15

v8.0.14

v8.0.13

v8.0.12

v8.0.11

8.1.3 (2026-07-02)

Bug Fixes

8.1.2 (2026-06-30)

Bug Fixes

8.1.1 (2026-06-30)

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

Uh oh!

dependabot Bot commented on behalf of github Jul 4, 2026

Labels

Uh oh!

socket-security Bot commented Jul 4, 2026

Uh oh!

socket-security Bot commented Jul 4, 2026

Uh oh!

sonarqubecloud Bot commented Jul 4, 2026

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants