Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 7, 2025

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps vite from 6.3.5 to 7.2.2.

Release notes

Sourced from vite's releases.

v7.2.2

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v7.2.1

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v7.2.0

Please refer to CHANGELOG.md for details.

v7.2.0-beta.1

Please refer to CHANGELOG.md for details.

v7.2.0-beta.0

Please refer to CHANGELOG.md for details.

v7.1.12

Please refer to CHANGELOG.md for details.

v7.1.11

Please refer to CHANGELOG.md for details.

v7.1.10

Please refer to CHANGELOG.md for details.

v7.1.9

Please refer to CHANGELOG.md for details.

v7.1.8

Please refer to CHANGELOG.md for details.

v7.1.7

Please refer to CHANGELOG.md for details.

v7.1.6

Please refer to CHANGELOG.md for details.

v7.1.5

Please refer to CHANGELOG.md for details.

v7.1.4

Please refer to CHANGELOG.md for details.

v7.1.3

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

7.2.2 (2025-11-07)

Bug Fixes

7.2.1 (2025-11-06)

Bug Fixes

Code Refactoring

  • build: rename indexOfMatchInSlice to findPreloadMarker (#21054) (f83264f)

7.2.0 (2025-11-05)

Bug Fixes

  • css: fallback to sass when sass-embedded platform binary is missing (#21002) (b1fd616)
  • module-runner: make getBuiltins response JSON serializable (#21029) (ad5b3bf)
  • types: add undefined to optional properties for exactOptionalProperties type compatibility (#21040) (2833c55)

Miscellaneous Chores

7.2.0-beta.1 (2025-10-29)

Bug Fixes

  • increase stream reset rate limit for HTTP2 (#21024) (4f44f22)
  • optimizer: externalize virtual modules for html like files (#21001) (e5af352)

Documentation

  • clarify the values are escaped automatically (#21017) (246df13)

Code Refactoring

7.2.0-beta.0 (2025-10-28)

Features

  • add import.meta.resolve support for ESM config (bundle config loader) (#20962) (f86789a)
  • add perEnvironmentWatchChangeDuringDev (#20996) (a5e98e6)
  • add vite client connect events (#20978) (543d87c)
  • build: emit license (#18546) (b42c3fb)
  • dev: support HTTP2 even if proxy feature is used (#20869) (fc21af7)
  • lib: enable minification but keep pure annotations for es output with terser (#20522) (df997d0)
  • optimizer: add rush lockfile support (#20833) (718ca2d)
  • utils: support multiple certificates in resolveServerUrls (#20707) (24513e5)

... (truncated)

Commits
  • 572aaca release: v7.2.2
  • 728c8ee fix: revert "refactor: use fs.cpSync (#21019)" (#21081)
  • a532e68 release: v7.2.1
  • 82d2d6c fix(worker): some worker asset was missing (#21074)
  • f83264f refactor(build): rename indexOfMatchInSlice to findPreloadMarker (#21054)
  • 8293de0 release: v7.2.0
  • 2833c55 fix(types): add undefined to optional properties for exactOptionalProperties ...
  • e3a6a83 chore(deps): update rolldown-related dependencies (#21047)
  • b1fd616 fix(css): fallback to sass when sass-embedded platform binary is missing (#21...
  • ad5b3bf fix(module-runner): make getBuiltins response JSON serializable (#21029)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

  • Chores
    • Updated build tooling to a newer version to improve build performance and compatibility.
    • No changes to public APIs or app behavior; runtime features remain unchanged.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 7, 2025
@dependabot dependabot bot requested a review from a team as a code owner November 7, 2025 12:13
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 7, 2025
@coderabbitai
Copy link

coderabbitai bot commented Nov 7, 2025

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)
Validation error: Unrecognized key(s) in object: 'tools'
⚙️ Configuration instructions
  • Please see the configuration documentation for more information.
  • You can also validate your configuration using the online YAML validator.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Walkthrough

Updated the development dependency vite in package.json from ^6.3.5 to ^7.2.2. No other files or public API declarations were changed.

Changes

Cohort / File(s) Summary
Dev dependency update
package.json
Bumped devDependency vite from ^6.3.5 to ^7.2.2

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

  • Check build and dev scripts in package.json still run with Vite v7.
  • Run local dev server and production build to confirm no runtime or config errors.

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately describes the main change: a dev dependency update of vite from version 6.3.5 to 7.2.2, which matches the package.json modification.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch dependabot/npm_and_yarn/vite-7.2.2

Comment @coderabbitai help to get the list of available commands and usage tips.

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.3.5 to 7.2.2.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.2.2/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.2.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/vite-7.2.2 branch from 4817989 to 9f53b09 Compare November 10, 2025 14:24
Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

📜 Review details

Configuration used: Repository: lokalise/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Pro

Disabled knowledge base sources:

  • Jira integration is disabled by default for public repositories

You can enable these sources in your CodeRabbit configuration.

📥 Commits

Reviewing files that changed from the base of the PR and between 4817989 and 9f53b09.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • package.json (1 hunks)

"semantic-release": "^25.0.2",
"typescript": "^5.9.3",
"vite": "^6.3.5",
"vite": "^7.2.2",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

Verify Vite 7 compatibility before merging.

This is a major version bump (6.x → 7.x). While the Dependabot PR is helpful, ensure that:

  1. CI/CD pipeline passes: Confirm that the build (vite build), linting, and tests (vitest run) all pass with vite 7.2.2.
  2. Custom vite config compatibility: The project uses @lokalise/package-vite-config@^4.0.0. Verify this package is compatible with vite 7.x, especially given vite's significant changes (e.g., import.meta.resolve for ESM config, HTTP2 support).
  3. Breaking changes: Vite 7 may have breaking changes. Review the Vite 7 migration guide or release notes to identify any required config updates.

To help identify potential breaking changes, please search for the official Vite 7 migration guide:

Alternatively, run the verification script below to check if the build completes successfully:


🏁 Script executed:

#!/bin/bash
# Description: Verify that the project builds and tests pass with vite 7.2.2

# Install dependencies (if needed)
npm install

# Run lint check
echo "Running lint..."
npm run lint

# Run build
echo "Running build..."
npm run build

# Run tests
echo "Running tests..."
npm run test

echo "All checks completed. If any step failed, review the error messages above."

Length of output: 4296


🌐 Web query:

Vite 7 major version breaking changes migration guide

💡 Result:

Here’s a concise migration checklist for upgrading projects from Vite 6 → Vite 7, with the main breaking changes and actionable steps.

Quick actions

  • Upgrade Node: require Node.js 20.19+ or 22.12+. Test CI/images accordingly. [1][2]
  • Bump Vite in package.json and reinstall. Test dev and build. [1]

Major breaking changes to address

  1. Node/CJS → ESM distribution: Vite is ESM-distributed and no longer ships a CJS build; require Node ≥20.19/22.12. Ensure any tooling or scripts that import Vite as CJS are updated to ESM or use dynamic import wrappers. [1][2]
  2. build.target default changed: default target moved from "modules" → "baseline-widely-available" (higher browser minimums: Chrome 107, Edge 107, Firefox 104, Safari 16). If you relied on older browser support, explicitly set build.target to the previous value or choose a custom target. Run compatibility tests. [1]
  3. Sass compiler API only: legacy Sass (old API) support removed — Vite now always uses the modern Sass compiler API. If you used the legacy Sass API or relied on deprecated behavior, update your Sass usage/plugins accordingly. [5]
  4. Removed splitVendorChunkPlugin: if you used splitVendorChunkPlugin, remove it or replace with a custom chunking strategy. [5]
  5. Removed deprecated HotBroadcaster and related types/hooks: update any custom HMR internals or plugins that referenced these. [5]
  6. Removed some deprecated hook-level options (enforce/transform on transformIndexHtml) and other no-op deprecated properties — review custom plugins for deprecated hook signatures and types. [5]
  7. SSR/transform changes: avoid relying on transformed code accessing the global Object in SSR; review SSR plugin transforms and disabled experimental options like experimental.skipSsrTransform which was removed. Test SSR bundle and server rendering paths. [5]
  8. Environment API additions: Vite 7 adds buildApp hook and evolves Environment API — if you build frameworks/plugins against the Environment API, read the new docs and update to the buildApp/ModuleRunner patterns where applicable. [1][4]

Testing & verification

  • Run full test suite (unit, integration, E2E) and CI under Node 20.19+/22.12+.
  • Test dev server HMR flows, build output, SSR (if used), and library outputs.
  • Audit third‑party plugins: update plugins to Vite 7–compatible versions (some plugin authors released updates at/after Vite 7). If a plugin is unmaintained, consider replacing or patching. [1][5]

Resources (read these before upgrading)

  • Vite 7 announcement and migration notes. [1]
  • Vite “Breaking Changes” / changes page for the full list. [2]
  • Vite 7 changelog / PR summary showing removed options and exact breaking PRs. [5]
  • Environment API / ModuleRunner docs if you use framework/plugin internals. [4]

References
[1] Vite — “Vite 7.0 is out!” (release announcement & migration notes).
[2] Vite — “Breaking Changes” (changes page).
[3] Vite migration/guide pages (background on Environment API & ModuleRunner).
[4] Vite — Environment API / ModuleRunner documentation.
[5] Vite changelog / PR summary for v7 (breakage list).

If you want, I can: (a) scan your package.json and plugin list for likely incompatibilities, or (b) produce a one-file migration checklist that patches common configs (node engines, build.target, remove splitVendorChunkPlugin). Which would you prefer?



---

🏁 Script executed:

```shell
#!/bin/bash
# Check npm registry for @lokalise/package-vite-config versions and vite peer dependencies
npm view @lokalise/package-vite-config versions --json | tail -20
echo "---"
npm view @lokalise/package-vite-config@latest peerDependencies --json

Length of output: 181


Revert vite upgrade to 6.x or update/replace the custom config package.

The vite 7.2.2 upgrade is incompatible with @lokalise/[email protected], which requires vite@^6.2.0. The npm install fails immediately with a peer dependency conflict:

Could not resolve dependency:
peer vite@"^6.2.0" from @lokalise/[email protected]

No vite-7-compatible version of @lokalise/package-vite-config exists in the npm registry (latest is 4.0.0, locked to vite 6.2.0).

Required action: Either revert vite to 6.x, or coordinate with the @lokalise/package-vite-config maintainer to release a vite-7-compatible version before merging this change. This PR will fail CI/CD as-is.

🤖 Prompt for AI Agents
In package.json around line 37, the upgrade to "vite": "^7.2.2" conflicts with
@lokalise/[email protected] which requires vite@^6.2.0; to fix, either
revert the vite entry to a 6.x range (e.g. ^6.2.0) and run npm install to
restore peer-compatibility, or replace/upgrade @lokalise/package-vite-config to
a vite-7-compatible alternative (or remove the custom config and inline a vite 7
config) and verify npm install and CI pass before merging.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant