Deps: bump vite from 7.3.2 to 8.0.14 by dependabot[bot] · Pull Request #5293 · greenbone/gsa

dependabot · 2026-05-15T03:25:22Z

Bumps vite from 7.3.2 to 8.0.14.

Release notes

v8.0.14

Please refer to CHANGELOG.md for details.

v8.0.13

Please refer to CHANGELOG.md for details.

v8.0.12

Please refer to CHANGELOG.md for details.

v8.0.11

Please refer to CHANGELOG.md for details.

v8.0.10

Please refer to CHANGELOG.md for details.

v8.0.9

Please refer to CHANGELOG.md for details.

v8.0.8

Please refer to CHANGELOG.md for details.

v8.0.7

Please refer to CHANGELOG.md for details.

v8.0.6

Please refer to CHANGELOG.md for details.

v8.0.5

Please refer to CHANGELOG.md for details.

v8.0.4

Please refer to CHANGELOG.md for details.

create-vite@8.0.3

Please refer to CHANGELOG.md for details.

v8.0.3

Please refer to CHANGELOG.md for details.

create-vite@8.0.2

Please refer to CHANGELOG.md for details.

v8.0.2

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.2

Please refer to CHANGELOG.md for details.

create-vite@8.0.1

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.0.14 (2026-05-21)

Features

update rolldown to 1.0.2 (#22484) (96efc88)

Bug Fixes

deps: update all non-major dependencies (#22471) (98b8163)

dev: handle errors when sending messages to vite server (#22450) (e8e9a34)

html: handle trailing slash paths in transformIndexHtml (#22480) (5d94d1b)

optimizer: pass oxc jsx options to transformSync in dependency scan (#22342) (b3132da)

Miscellaneous Chores

deps: update rolldown-related dependencies (#22470) (7cb728e)

remove irrelevant commits from changelog (2c69495)

Code Refactoring

glob: do not rewrite import path for absolute base (#22310) (0ae2844)

Tests

css: sass does not use main field (#22449) (ebf39a0)

8.0.13 (2026-05-14)

Features

bundled-dev: add lazy bundling support (#21406) (4f0949f)

optimizer: improve the esbuild plugin converter to pass some properties of build result to onEnd (#22357) (47071ce)

update rolldown to 1.0.1 (#22444) (8c766a6)

Bug Fixes

build: copy public directory after building same environment with write=false (#22328) (158e8ae)

css: await sass/less/styl worker disposal on teardown (fix #22274) (#22275) (b7edcb7)

css: keep deprecated name/originalFileName in synthetic assetFileNames call (#22439) (8e59c97)

make isBundled per environment (#22257) (a576326)

ssr: avoid rewriting labels that collide with imports (#22451) (d9b18e0)

Miscellaneous Chores

remove irrelevant commits from changelog (#22430) (6ea3838)

update changelog (#22413) (fcdc87c)

8.0.12 (2026-05-11)

Features

update rolldown to 1.0.0 (#22401) (cf0ff41)

... (truncated)

Commits

c917f1e release: v8.0.14
5d94d1b fix(html): handle trailing slash paths in transformIndexHtml (#22480)
98b8163 fix(deps): update all non-major dependencies (#22471)
96efc88 feat: update rolldown to 1.0.2 (#22484)
ebf39a0 test(css): sass does not use main field (#22449)
0ae2844 refactor(glob): do not rewrite import path for absolute base (#22310)
7cb728e chore(deps): update rolldown-related dependencies (#22470)
b3132da fix(optimizer): pass oxc jsx options to transformSync in dependency scan ...
e8e9a34 fix(dev): handle errors when sending messages to vite server (#22450)
2c69495 chore: remove irrelevant commits from changelog
Additional commits viewable in compare view

github-actions · 2026-05-15T03:25:38Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA ecf960c.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@emnapi/core

1.10.0

🟢 3.4

Details

Check	Score	Reason
Maintained	🟢 10	27 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@emnapi/runtime

1.10.0

🟢 3.4

Details

Check	Score	Reason
Maintained	🟢 10	27 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@emnapi/wasi-threads

1.2.1

🟢 3.4

Details

Check	Score	Reason
Maintained	🟢 10	27 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@napi-rs/wasm-runtime

1.1.4

🟢 5.3

Details

Check	Score	Reason
Code-Review	🟢 3	Found 7/18 approved changesets -- score normalized to 3
Security-Policy	🟢 10	security policy file detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Maintained	🟢 10	30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 10	no binaries found in the repo
Packaging	⚠️ -1	packaging workflow not detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 9	license file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@oxc-project/types

0.132.0

Unknown

npm/@rolldown/binding-android-arm64

1.0.2

Unknown

npm/@rolldown/binding-darwin-arm64

1.0.2

Unknown

npm/@rolldown/binding-darwin-x64

1.0.2

Unknown

npm/@rolldown/binding-freebsd-x64

1.0.2

Unknown

npm/@rolldown/binding-linux-arm-gnueabihf

1.0.2

Unknown

npm/@rolldown/binding-linux-arm64-gnu

1.0.2

Unknown

npm/@rolldown/binding-linux-arm64-musl

1.0.2

Unknown

npm/@rolldown/binding-linux-ppc64-gnu

1.0.2

Unknown

npm/@rolldown/binding-linux-s390x-gnu

1.0.2

Unknown

npm/@rolldown/binding-linux-x64-gnu

1.0.2

Unknown

npm/@rolldown/binding-linux-x64-musl

1.0.2

Unknown

npm/@rolldown/binding-openharmony-arm64

1.0.2

Unknown

npm/@rolldown/binding-wasm32-wasi

1.0.2

Unknown

npm/@rolldown/binding-win32-arm64-msvc

1.0.2

Unknown

npm/@rolldown/binding-win32-x64-msvc

1.0.2

Unknown

npm/@rolldown/pluginutils

1.0.1

Unknown

npm/@tybys/wasm-util

0.10.2

Unknown

npm/detect-libc

2.1.2

🟢 3.8

Details

Check	Score	Reason
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	⚠️ 2	Found 7/30 approved changesets -- score normalized to 2
Maintained	⚠️ 0	0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Binary-Artifacts	🟢 8	binaries present in source code
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/lightningcss

1.32.0

Unknown

npm/lightningcss-android-arm64

1.32.0

Unknown

npm/lightningcss-darwin-arm64

1.32.0

Unknown

npm/lightningcss-darwin-x64

1.32.0

Unknown

npm/lightningcss-freebsd-x64

1.32.0

Unknown

npm/lightningcss-linux-arm-gnueabihf

1.32.0

Unknown

npm/lightningcss-linux-arm64-gnu

1.32.0

Unknown

npm/lightningcss-linux-arm64-musl

1.32.0

Unknown

npm/lightningcss-linux-x64-gnu

1.32.0

Unknown

npm/lightningcss-linux-x64-musl

1.32.0

Unknown

npm/lightningcss-win32-arm64-msvc

1.32.0

Unknown

npm/lightningcss-win32-x64-msvc

1.32.0

Unknown

npm/rolldown

1.0.2

Unknown

npm/tinyglobby

0.2.16

Unknown

npm/vite

8.0.14

🟢 7

Details

Check	Score	Reason
Code-Review	🟢 7	Found 19/26 approved changesets -- score normalized to 7
Maintained	🟢 10	30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Token-Permissions	🟢 5	detected GitHub workflow tokens with excessive permissions
License	🟢 10	license file detected
Binary-Artifacts	🟢 5	binaries present in source code
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
SAST	🟢 7	SAST tool is not run on all commits -- score normalized to 7

Scanned Files

package-lock.json

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.2 to 8.0.14. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.0.14/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 8.0.13 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 15, 2026

dependabot Bot requested a review from a team as a code owner May 15, 2026 03:25

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 15, 2026

greenbonebot enabled auto-merge (rebase) May 15, 2026 03:25

dependabot Bot force-pushed the dependabot/npm_and_yarn/main/vite-8.0.13 branch 8 times, most recently from bdda927 to 0df551a Compare May 19, 2026 09:37

dependabot Bot changed the title ~~Deps: Bump vite from 7.3.2 to 8.0.13~~ Deps: bump vite from 7.3.2 to 8.0.14 May 26, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/main/vite-8.0.13 branch 2 times, most recently from 7c2adf8 to 2bae8aa Compare May 26, 2026 14:17

dependabot Bot force-pushed the dependabot/npm_and_yarn/main/vite-8.0.13 branch from 2bae8aa to ecf960c Compare May 28, 2026 10:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Deps: bump vite from 7.3.2 to 8.0.14#5293

Deps: bump vite from 7.3.2 to 8.0.14#5293
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/vite-8.0.13

dependabot Bot commented on behalf of github May 15, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented May 15, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v8.0.14

v8.0.13

v8.0.12

v8.0.11

v8.0.10

v8.0.9

v8.0.8

v8.0.7

v8.0.6

v8.0.5

v8.0.4

create-vite@8.0.3

v8.0.3

create-vite@8.0.2

v8.0.2

plugin-legacy@8.0.2

create-vite@8.0.1

8.0.14 (2026-05-21)

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

Tests

8.0.13 (2026-05-14)

Features

Bug Fixes

Miscellaneous Chores

8.0.12 (2026-05-11)

Features

Uh oh!

github-actions Bot commented May 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

Snapshot Warnings

OpenSSF Scorecard

Scanned Files

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 15, 2026 •

edited

Loading

github-actions Bot commented May 15, 2026 •

edited

Loading