Skip to content

chore(deps)(deps-dev): bump vite from 5.4.21 to 8.0.11#86

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vite-8.0.10
Closed

chore(deps)(deps-dev): bump vite from 5.4.21 to 8.0.11#86
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vite-8.0.10

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps vite from 5.4.21 to 8.0.11.

Release notes

Sourced from vite's releases.

v8.0.11

Please refer to CHANGELOG.md for details.

v8.0.10

Please refer to CHANGELOG.md for details.

v8.0.9

Please refer to CHANGELOG.md for details.

v8.0.8

Please refer to CHANGELOG.md for details.

v8.0.7

Please refer to CHANGELOG.md for details.

v8.0.6

Please refer to CHANGELOG.md for details.

v8.0.5

Please refer to CHANGELOG.md for details.

v8.0.4

Please refer to CHANGELOG.md for details.

create-vite@8.0.3

Please refer to CHANGELOG.md for details.

v8.0.3

Please refer to CHANGELOG.md for details.

create-vite@8.0.2

Please refer to CHANGELOG.md for details.

v8.0.2

Please refer to CHANGELOG.md for details.

create-vite@8.0.1

Please refer to CHANGELOG.md for details.

v8.0.1

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.1

Please refer to CHANGELOG.md for details.

create-vite@8.0.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.0

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.0.11 (2026-05-07)

Features

Bug Fixes

  • deps: update all non-major dependencies (#22334) (672c962)
  • deps: update all non-major dependencies (#22382) (5c0cfcb)
  • glob: align hmr matcher options with glob enumeration (#22306) (30028f9)
  • make separate object instance for each environment (#22276) (7c2aa3b)

Documentation

Miscellaneous Chores

  • deps: update dependency tsdown to ^0.21.10 (#22333) (3b51e05)
  • deps: update rolldown-related dependencies (#22383) (555ff36)
  • deps: update transitive packages to fix npm audit alerts (#22316) (86aee62)

Code Refactoring

Tests

8.0.10 (2026-04-23)

Features

Bug Fixes

  • hmrClient.logger.debug and hmrClient.logger.error looked different from other HMR logs (#22147) (a4d828f)
  • css: show filename in CSS minification warnings for .css?inline (#22292) (83f0a78)
  • optimizer: allow user transform.target to override default in optimizeDeps (#22273) (5c7cec6)
  • remove format sniffing module resolution from JS resolver (#22297) (b8a21cc)

Code Refactoring

... (truncated)

Commits

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 4, 2026

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented May 4, 2026

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review

Warning

.coderabbit.yaml has a parsing error

The CodeRabbit configuration file in this repository has a parsing error and default settings were used instead. Please fix the error(s) in the configuration file. You can initialize chat with CodeRabbit to get help with the configuration file.

💥 Parsing errors (1)
Validation error: String must contain at most 250 character(s) at "tone_instructions"
⚙️ Configuration instructions
  • Please see the configuration documentation for more information.
  • You can also validate your configuration using the online YAML validator.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
📝 Walkthrough

Walkthrough

The vite devDependency in package.json was updated from ^5.4.19 to ^8.0.10, switching the repository's local dev/build/preview tooling to a newer major Vite release.

Changes

Dependency Update

Layer / File(s) Summary
DevDependency Pin
package.json
Bumped devDependencies.vite from ^5.4.19 to ^8.0.10.
Wiring / Scripts
package.json
Existing npm scripts (e.g., dev, build, preview, build:dev) remain unchanged in this diff but will execute using Vite v8 when run.
Tests / CI (implicit)
.github/... (no files changed)
No CI or test files were modified in this PR; pipeline verification against Vite v8 is not included here.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐰 I nudged a version, light and quick,

From five to eight with a gentle click.
Builds may dance in a brighter hue,
A tiny hop — the code says "new".

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning A descrição do PR não segue o template obrigatório do repositório. Está em inglês, falta a seção de descrição em português, tipo de mudança, issue relacionada, checklist de validação e informações sobre como testar. Reformule a descrição seguindo o template português obrigatório: adicione 📝 Descrição, 🎯 Tipo de mudança (marque ⚡ Performance ou 💥 Breaking change), 🔗 Issue relacionada, ✅ Checklist completo, 🧪 Como testar e ⚠️ Notas para o reviewer.
✅ Passed checks (4 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Title check ✅ Passed O título descreve claramente a mudança principal: atualização da dependência Vite de versão 5.4.21 para 8.0.11.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown
Contributor

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@package.json`:
- Line 179: The package.json upgrade to "vite": "^8.0.10" requires bumping the
companion dependencies that currently reject Vite 8: update
"@vitejs/plugin-react-swc" (the package name in package.json) to a version that
lists Vite ^8 support (e.g., ^3.11.x → ^3.11.0+ or latest that includes ^8
peerDep) and update "vitest" to a version that supports Vite 8 (e.g., bump
"vitest" to ^3.2.4→ a 3.x release compatible with Vite 8 or the latest 3.x that
declares Vite ^8), then run npm install to ensure no peer dependency conflicts;
also add an "engines": { "node": ">=16" } (or your required minimum) field to
package.json to guard CI/local Node versions.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 634406a6-5bfb-4f2f-8a94-3a3a12b9b53e

📥 Commits

Reviewing files that changed from the base of the PR and between 47d3a0b and b917685.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • package.json

Comment thread package.json Outdated
"tailwindcss-animate": "^1.0.7",
"typescript": "^5.5.3",
"vite": "^5.4.19"
"vite": "^8.0.10"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== Current package.json entries =="
node -e 'const p=require("./package.json"); console.log({
  vite: p.devDependencies?.vite,
  pluginReactSwc: p.devDependencies?.["@vitejs/plugin-react-swc"],
  vitest: p.dependencies?.vitest ?? p.devDependencies?.vitest,
  enginesNode: p.engines?.node ?? "<missing>"
})'

echo
echo "== Published metadata =="
npm view vite@8.0.10 engines --json
npm view `@vitejs/plugin-react-swc`@3.11.0 peerDependencies --json
npm view `@vitejs/plugin-react-swc`@latest version peerDependencies --json
npm view vitest@3.2.4 dependencies.vite peerDependencies --json

echo
echo "== Lockfile presence and resolved entries =="
fd -HI '^(package-lock\.json|pnpm-lock\.yaml|yarn\.lock)$' .
rg -n --iglob '*lock*' '"vite"|@vitejs/plugin-react-swc|vitest@|vite@' || true

Repository: adm01-debug/Promo_Gifts

Length of output: 4698


🌐 Web query:

vitest vite 8 compatibility supported versions

💡 Result:

Vitest (latest version 4.1.5 as of 2026-05-04) is fully compatible with Vite 8. It supports Vite versions ^6.0.0 || ^7.0.0 || ^8.0.0, as specified in its peerDependencies. This range includes the stable Vite 8 (released March 2026), with explicit support added via GitHub issues #9587 (support Vite 8 beta, Feb 2026) and #9862 (drop beta support after Vite 8.0.0 stable, March 2026). Vitest 4.0 requires Vite >=6.0.0 minimum (per migration guide), and Vitest 4.1 includes "full Vite 8 support" (InfoQ announcement). Vite's supported versions (8.0 regular patches, 7.3 important fixes) align within Vitest's range. Some edge cases like coverage with third-party plugins exist but do not affect core compatibility.

Citations:


Align Vite and companion dependencies for this major upgrade.

Upgrading to vite@^8.0.10 requires updating both @vitejs/plugin-react-swc@^3.11.0 (Line 173) and vitest@^3.2.4. The current versions explicitly reject Vite 8:

  • @vitejs/plugin-react-swc@3.11.0 peer dep: vite ^4 || ^5 || ^6 || ^7 (no ^8 support)
  • vitest@3.2.4 dependency: vite ^5.0.0 || ^6.0.0 || ^7.0.0 (no ^8 support)

Without upgrading both, npm install will fail. Also, add engines.node to prevent unsupported Node versions in CI/local usage.

Proposed manifest adjustment
   "devDependencies": {
     "@vitejs/plugin-react-swc": "^4.0.1",
     "vite": "^8.0.10",
-    "vitest": "^3.2.4"
+    "vitest": "^4.0.0"
   },
+  "engines": {
+    "node": ">=20.19.0 || >=22.12.0"
+  }
 }

Verify: npm install should resolve cleanly without peer dependency conflicts.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@package.json` at line 179, The package.json upgrade to "vite": "^8.0.10"
requires bumping the companion dependencies that currently reject Vite 8: update
"@vitejs/plugin-react-swc" (the package name in package.json) to a version that
lists Vite ^8 support (e.g., ^3.11.x → ^3.11.0+ or latest that includes ^8
peerDep) and update "vitest" to a version that supports Vite 8 (e.g., bump
"vitest" to ^3.2.4→ a 3.x release compatible with Vite 8 or the latest 3.x that
declares Vite ^8), then run npm install to ensure no peer dependency conflicts;
also add an "engines": { "node": ">=16" } (or your required minimum) field to
package.json to guard CI/local Node versions.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/vite-8.0.10 branch 3 times, most recently from 0f93250 to 234c585 Compare May 6, 2026 21:43
Copy link
Copy Markdown
Contributor

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

♻️ Duplicate comments (1)
package.json (1)

179-179: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Align Vite companion packages with the Vite 8 bump.

Line 179 upgrades Vite to ^8.0.10, but Lines 173/164/118 keep older @vitejs/plugin-react-swc and Vitest 3.x packages. That combination is likely to produce peer-resolution conflicts or inconsistent tooling behavior. Please bump the companion packages together (plugin + vitest + coverage) to versions that explicitly support Vite 8, and ensure engines.node matches Vite 8 requirements.

#!/bin/bash
set -euo pipefail

echo "== Local manifest versions =="
node -e 'const p=require("./package.json"); console.log({
  vite: p.devDependencies?.vite,
  pluginReactSwc: p.devDependencies?.["@vitejs/plugin-react-swc"],
  vitest: p.dependencies?.vitest ?? p.devDependencies?.vitest,
  coverageV8: p.dependencies?.["@vitest/coverage-v8"] ?? p.devDependencies?.["@vitest/coverage-v8"],
  enginesNode: p.engines?.node ?? "<missing>"
})'

echo
echo "== Published compatibility metadata =="
npm view 'vite@8.0.10' engines --json
npm view '@vitejs/plugin-react-swc@3.11.0' peerDependencies --json
npm view 'vitest@3.2.4' peerDependencies dependencies.vite --json
npm view '@vitest/coverage-v8@3.2.4' peerDependencies --json
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@package.json` at line 179, Update companion devDependencies to versions that
explicitly support Vite 8: bump `@vitejs/plugin-react-swc`, vitest, and
`@vitest/coverage-v8` to releases that list Vite 8 in their peerDependencies
(e.g., plugin-react-swc ~3.11.x and vitest/@vitest/coverage-v8 ~3.2.x), and
update the package.json "engines.node" field to the Node range required by Vite
8; ensure all three dependency names (`@vitejs/plugin-react-swc`, vitest,
`@vitest/coverage-v8`) and "engines.node" are changed together so peer-resolution
is consistent.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Duplicate comments:
In `@package.json`:
- Line 179: Update companion devDependencies to versions that explicitly support
Vite 8: bump `@vitejs/plugin-react-swc`, vitest, and `@vitest/coverage-v8` to
releases that list Vite 8 in their peerDependencies (e.g., plugin-react-swc
~3.11.x and vitest/@vitest/coverage-v8 ~3.2.x), and update the package.json
"engines.node" field to the Node range required by Vite 8; ensure all three
dependency names (`@vitejs/plugin-react-swc`, vitest, `@vitest/coverage-v8`) and
"engines.node" are changed together so peer-resolution is consistent.

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 9087a200-9961-4bab-9d38-eace1338bc8f

📥 Commits

Reviewing files that changed from the base of the PR and between 0f93250 and 234c585.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • package.json

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/vite-8.0.10 branch 4 times, most recently from d5f4b9e to 93e7625 Compare May 6, 2026 22:51
Copy link
Copy Markdown
Owner

@coderabbitai full review


Generated by Claude Code

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented May 6, 2026

Tip

For best results, initiate chat on the files or code changes.

@adm01-debug Sure! I'll perform a full review of this PR now.

[full_review]

@adm01-debug
Copy link
Copy Markdown
Owner

🔴 Parecer técnico — SEGURAR. NÃO mergear

Tipo: Build tool MEGA major (5.4.19 → 8.0.10) — pula 2 majors inteiros (v6 e v7)
Risco: Muito Alto
Categoria: Vite core — afeta build, dev server, HMR, plugins

Saltar de Vite 5 → 8 é uma das migrações de maior risco possíveis em frontend tooling. Cada major do Vite trouxe:

  • v6: Environment API (mudou plugin contract), process.env removido
  • v7: Default target ES2022, Rolldown experimental
  • v8: (release recente, ainda em estabilização provável)

Plugins afetados (quase certo precisarão upgrade junto):

Para o PromoGifts especificamente:

  • O projeto já tem tooling pesado e fluxo de Lovable em descontinuação na Fase 3 — adicionar migração de bundler em paralelo é receita pra desastre
  • Não há ganho funcional crítico em Vite 8 vs 5 ainda

Recomendação: fechar este PR como will not adopt now e configurar Dependabot pra ignorar majors do Vite ecosystem:

# .github/dependabot.yml
ignore:
  - dependency-name: vite
    update-types: [version-update:semver-major]
  - dependency-name: "@vitejs/*"
    update-types: [version-update:semver-major]

Reabrir manualmente Q3/Q4 2026, em PR único orquestrado (vite + plugins + vitest juntos).

— Claude (housekeeping de PRs, 08/05/2026)

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.4.21 to 8.0.11.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.11/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.0.10
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps)(deps-dev): bump vite from 5.4.19 to 8.0.10 chore(deps)(deps-dev): bump vite from 5.4.21 to 8.0.11 May 9, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/vite-8.0.10 branch from 6067fb4 to 4f0ca04 Compare May 9, 2026 12:31
@dependabot dependabot Bot requested a review from adm01-debug as a code owner May 9, 2026 12:31
@vercel
Copy link
Copy Markdown

vercel Bot commented May 9, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
promo-gifts Error Error May 9, 2026 0:31am

@adm01-debug
Copy link
Copy Markdown
Owner

Fechando — vite 5→8 é major bump grande (+5102/-3335 linhas em package-lock, 5 checks falhando) e arrisca conflitar com a faxina em curso (Fases 1-7 do plano de cleanup).

Vamos retomar este bump após Fase 6 da faxina (qualidade/lint), quando o repo estiver mais estável e tivermos largura de banda pra debugar potenciais breaking changes do Vite 8 (ex: change em SSR, plugins, build config).

Por enquanto vite@5.4.x continua atendendo bem o projeto.

@adm01-debug adm01-debug closed this May 9, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 9, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/vite-8.0.10 branch May 9, 2026 14:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant