chore(deps): update dependency vite to v8.0.14

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
vite (source)	8.0.8 → 8.0.14

---

Release Notes

vitejs/vite (vite)

v8.0.14

Compare Source

Features

• update rolldown to 1.0.2 (#​22484) (96efc88)

Bug Fixes

• deps: update all non-major dependencies (#​22471) (98b8163)
• dev: handle errors when sending messages to vite server (#​22450) (e8e9a34)
• html: handle trailing slash paths in transformIndexHtml (#​22480) (5d94d1b)
• optimizer: pass oxc jsx options to transformSync in dependency scan (#​22342) (b3132da)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​22470) (7cb728e)
• remove irrelevant commits from changelog (2c69495)

Code Refactoring

• glob: do not rewrite import path for absolute base (#​22310) (0ae2844)

Tests

• css: sass does not use main field (#​22449) (ebf39a0)

v8.0.13

Compare Source

Features

• bundled-dev: add lazy bundling support (#​21406) (4f0949f)
• optimizer: improve the esbuild plugin converter to pass some properties of build result to onEnd (#​22357) (47071ce)
• update rolldown to 1.0.1 (#​22444) (8c766a6)

Bug Fixes

• build: copy public directory after building same environment with write=false (#​22328) (158e8ae)
• css: await sass/less/styl worker disposal on teardown (fix #​22274) (#​22275) (b7edcb7)
• css: keep deprecated name/originalFileName in synthetic assetFileNames call (#​22439) (8e59c97)
• make isBundled per environment (#​22257) (a576326)
• ssr: avoid rewriting labels that collide with imports (#​22451) (d9b18e0)

Miscellaneous Chores

• remove irrelevant commits from changelog (#​22430) (6ea3838)
• update changelog (#​22413) (fcdc87c)

v8.0.12

Compare Source

Features

• update rolldown to 1.0.0 (#​22401) (cf0ff41)

Bug Fixes

• create-vite: pass react framework to TanStack CLI (#​22397) (18f0f90)
• deps: update all non-major dependencies (#​22420) (2be6000)
• module-runner: prevent partial-exports race on concurrent imports of in-flight invalidated re-export chains (#​22369) (f5a22e6)
• refer to rolldownOptions instead of deprecated rollupOptions in messages (#​22400) (b675c7b)
• worker: apply build.target to worker bundle (#​22404) (3c93fde)
• worker: forward define to worker bundle transform (#​22408) (d4838a0)

Miscellaneous Chores

• deps: update dependency eslint-plugin-n to v18 (#​22423) (2fe7bd2)
• deps: update rolldown-related dependencies (#​22421) (66b9eb3)

v8.0.11

Compare Source

Features

• update rolldown to 1.0.0-rc.18 (#​22360) (3f80524)

Bug Fixes

• deps: update all non-major dependencies (#​22334) (672c962)
• deps: update all non-major dependencies (#​22382) (5c0cfcb)
• glob: align hmr matcher options with glob enumeration (#​22306) (30028f9)
• make separate object instance for each environment (#​22276) (7c2aa3b)

Documentation

• create-vite: list react-compiler templates in README (#​22347) (7c3a61f)
• explain mergeConfig skips null/undefined (#​22325) (2151f70)
• mention native config loader in CLI options (#​22348) (0420c5d)
• update evan's x handle (640202a)

Miscellaneous Chores

• deps: update dependency tsdown to ^0.21.10 (#​22333) (3b51e05)
• deps: update rolldown-related dependencies (#​22383) (555ff36)
• deps: update transitive packages to fix npm audit alerts (#​22316) (86aee62)

Code Refactoring

• devtools integration (#​22312) (3c8bf06)
• remove unnecessary async (#​22296) (b31fd35)
• show direct path type in bad character warning (#​22339) (0c162e9)

Tests

• create-vite: use short help alias (#​22389) (994ab66)

v8.0.10

Compare Source

Features

• update rolldown to 1.0.0-rc.17 (#​22299) (a4d06d9)

Bug Fixes

• hmrClient.logger.debug and hmrClient.logger.error looked different from other HMR logs (#​22147) (a4d828f)
• css: show filename in CSS minification warnings for .css?inline (#​22292) (83f0a78)
• optimizer: allow user transform.target to override default in optimizeDeps (#​22273) (5c7cec6)
• remove format sniffing module resolution from JS resolver (#​22297) (b8a21cc)

Code Refactoring

• enable some typecheck rules (#​22278) (9437518)
• typecheck client directory (#​22284) (40a0847)

v8.0.9

Compare Source

Features

• update rolldown to 1.0.0-rc.16 (#​22248) (2947edd)

Bug Fixes

• allow binding when strictPort is set but wildcard port is in use (#​22150) (dfc8aa5)
• build: emptyOutDir should happen for watch rebuilds (#​22207) (ee52267)
• bundled-dev: reject requests to HMR patch files in non potentially trustworthy origins (#​22269) (868f141)
• css: use unique key for cssEntriesMap to prevent same-basename collision (#​22039) (374bb5d)
• deps: update all non-major dependencies (#​22219) (4cd0d67)
• deps: update all non-major dependencies (#​22268) (c28e9c1)
• detect Deno workspace root (fix #​22237) (#​22238) (1b793c0)
• dev: handle errors in watchChange hook (#​22188) (fc08bda)
• optimizer: handle more chars that will be sanitized (#​22208) (3f24533)
• skip fallback sourcemap generation for ?raw imports (#​22148) (3ec9cda)

Documentation

• align the descriptions in READMEs (#​22231) (44c42b9)
• fix reuses wording in dev environment comment (#​22173) (9163412)
• fix wording in sass error comment (#​22214) (bc5c6a7)
• update build CLI defaults (#​22261) (605bb97)

Miscellaneous Chores

• deps: update dependency dotenv-expand to v13 (#​22271) (0a3887d)

---

Configuration

📅 Schedule: (in timezone Africa/Johannesburg)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

📚 Docs preview deployed

https://scratchyjs-docs-pr-88.asjas.workers.dev

Updates automatically on every push to this PR.

[github-actions]

⚡ Benchmark Results

benchmarks/renderer/ring-buffer.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
SharedRingBuffer – small payload (64 B) — write 64 bytes	575.7 K	0.0017	0.0061	±1.40%	+6.1%
SharedRingBuffer – small payload (64 B) — write + read 64 bytes	454.7 K	0.0022	0.0073	±1.88%	-13.6% ⚠️
SharedRingBuffer – medium payload (1 KB) — write 1 KB	293.3 K	0.0034	0.0129	±0.61%	-15.5% ⚠️
SharedRingBuffer – medium payload (1 KB) — write + read 1 KB	250.7 K	0.0040	0.0154	±0.48%	-3.6%
SharedRingBuffer – large payload (16 KB) — write 16 KB	36.7 K	0.0273	0.0481	±0.60%	-37.0% ⚠️
SharedRingBuffer – large payload (16 KB) — write + read 16 KB	107.2 K	0.0093	0.0453	±3.08%	+39.2% 🚀
SharedRingBuffer – sequential throughput (100 × 64 B) — 100 write + read cycles	45.2 K	0.0221	0.0370	±1.42%	+11.3% 🚀
SharedRingBuffer – introspection — availableToRead	14.95 M	0.0001	0.0001	±0.11%	~0%
SharedRingBuffer – introspection — isEmpty	14.73 M	0.0001	0.0001	±0.11%	~0%
SharedRingBuffer – introspection — isFull	14.62 M	0.0001	0.0001	±0.11%	~0%

benchmarks/renderer/shared-buffer.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
SharedBuffer – allocation — createSharedBuffer(4 KB)	624.6 K	0.0016	0.0062	±0.96%	-12.4% ⚠️
SharedBuffer – allocation — createSharedBuffer(64 KB)	39.5 K	0.0253	0.0459	±14.74%	-30.0% ⚠️
SharedBuffer – small payload round-trip — write small JSON	333.9 K	0.0030	0.0099	±0.40%	-7.1%
SharedBuffer – small payload round-trip — write + read small JSON	245.7 K	0.0041	0.0112	±0.43%	-10.2% ⚠️
SharedBuffer – medium payload round-trip — write medium JSON (~2 KB)	99.3 K	0.0101	0.0261	±1.17%	+11.6% 🚀
SharedBuffer – medium payload round-trip — write + read medium JSON (~2 KB)	58.6 K	0.0171	0.0365	±0.40%	~0%
SharedBuffer – large payload round-trip — write large JSON (~10 KB)	15.1 K	0.0662	0.1790	±0.81%	-2.2%
SharedBuffer – large payload round-trip — write + read large JSON (~10 KB)	7.9 K	0.1268	0.1705	±0.56%	~0%

benchmarks/utils/ip-address.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
getClientIPAddress – no IP headers — no IP-related headers → null	2.66 M	0.0004	0.0007	±1.18%	~0%
getClientIPAddress – single header — cf-connecting-ip (Cloudflare)	1.59 M	0.0006	0.0011	±1.13%	-4.8%
getClientIPAddress – single header — x-forwarded-for (simple)	1.89 M	0.0005	0.0009	±0.34%	-2.1%
getClientIPAddress – single header — x-real-ip	1.44 M	0.0007	0.0012	±1.28%	-3.5%
getClientIPAddress – single header — true-client-ip (Akamai / Cloudflare Enterprise)	1.54 M	0.0006	0.0009	±1.16%	~0%
getClientIPAddress – x-forwarded-for multi-hop — 2-hop chain	1.72 M	0.0006	0.0009	±0.11%	-1.3%
getClientIPAddress – x-forwarded-for multi-hop — 4-hop chain	1.57 M	0.0006	0.0011	±0.33%	-5.9%
getClientIPAddress – Forwarded header (RFC 7239) — simple for= directive	925.5 K	0.0011	0.0020	±1.53%	-8.7%
getClientIPAddress – Forwarded header (RFC 7239) — for= with port	724.4 K	0.0014	0.0021	±0.38%	~0%
getClientIPAddress – Forwarded header (RFC 7239) — IPv6 literal	700.4 K	0.0014	0.0023	±2.01%	-7.9%
getClientIPAddress – Forwarded header (RFC 7239) — multi-hop Forwarded	781.7 K	0.0013	0.0023	±2.52%	-7.2%
getClientIPAddress – IPv6 addresses — x-forwarded-for IPv6	1.14 M	0.0009	0.0013	±0.36%	~0%

benchmarks/utils/promise.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
promiseHash – concurrent resolution — 2 already-resolved promises	830.9 K	0.0012	0.0034	±1.17%	-2.9%
promiseHash – concurrent resolution — 5 already-resolved promises	488.3 K	0.0020	0.0030	±1.44%	-6.8%
promiseHash – concurrent resolution — 10 already-resolved promises	265.7 K	0.0038	0.0093	±1.68%	-6.8%
promiseHash – concurrent resolution — 5 promises with object values	403.4 K	0.0025	0.0060	±1.51%	-17.0% ⚠️
timeout – wrapping fast promises — timeout wrapping an already-resolved promise (1 s budget)	898.0 K	0.0011	0.0019	±0.52%	-7.3%
timeout – wrapping fast promises — timeout wrapping an already-resolved object (5 s budget)	830.2 K	0.0012	0.0021	±1.62%	-11.2% ⚠️

benchmarks/utils/safe-redirect.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
safeRedirect – valid paths — root path /	7.40 M	0.0001	0.0002	±0.24%	+9.3%
safeRedirect – valid paths — simple path /dashboard	3.86 M	0.0003	0.0003	±0.12%	+6.7%
safeRedirect – valid paths — nested path /settings/profile	3.27 M	0.0003	0.0005	±0.25%	+2.3%
safeRedirect – valid paths — path with query string /search?q=hello	3.53 M	0.0003	0.0004	±0.13%	+1.1%
safeRedirect – valid paths — path with hash /docs#section	3.65 M	0.0003	0.0004	±0.26%	+1.5%
safeRedirect – rejected inputs — absolute URL https://evil.com	4.86 M	0.0002	0.0003	±0.12%	+5.3%
safeRedirect – rejected inputs — protocol-relative URL //evil.com	5.11 M	0.0002	0.0002	±0.12%	+13.4% 🚀
safeRedirect – rejected inputs — backslash-relative /\evil.com	4.98 M	0.0002	0.0003	±0.12%	+7.6%
safeRedirect – rejected inputs — path traversal /../etc/passwd	4.55 M	0.0002	0.0003	±0.11%	+10.7% 🚀
safeRedirect – rejected inputs — null input	16.17 M	0.0001	0.0001	±0.11%	~0%
safeRedirect – rejected inputs — undefined input	16.19 M	0.0001	0.0001	±0.11%	~0%
safeRedirect – rejected inputs — empty string	16.18 M	0.0001	0.0001	±0.11%	~0%
safeRedirect – percent-encoded bypass — percent-encoded // (%2F%2F)	4.91 M	0.0002	0.0002	±0.38%	+3.2%
safeRedirect – percent-encoded bypass — percent-encoded path traversal (%2e%2e)	4.80 M	0.0002	0.0003	±0.11%	~0%
safeRedirect – percent-encoded bypass — mixed percent-encoded absolute URL	4.75 M	0.0002	0.0003	±0.29%	+3.8%
safeRedirect – custom default redirect — valid path with custom default	3.89 M	0.0003	0.0003	±0.11%	+3.8%
safeRedirect – custom default redirect — invalid input with custom default	4.87 M	0.0002	0.0003	±0.24%	+1.4%

🔬 Compared against the latest benchmark run on main. ⚠️ = >10% slower · 🚀 = >10% faster.