chore(deps): update dependency vite to v8.0.13

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
vite (source)	8.0.8 → 8.0.13

---

Release Notes

vitejs/vite (vite)

v8.0.13

Compare Source

Features

• bundled-dev: add lazy bundling support (#​21406) (4f0949f)
• optimizer: improve the esbuild plugin converter to pass some properties of build result to onEnd (#​22357) (47071ce)
• update rolldown to 1.0.1 (#​22444) (8c766a6)

Bug Fixes

• build: copy public directory after building same environment with write=false (#​22328) (158e8ae)
• css: await sass/less/styl worker disposal on teardown (fix #​22274) (#​22275) (b7edcb7)
• css: keep deprecated name/originalFileName in synthetic assetFileNames call (#​22439) (8e59c97)
• make isBundled per environment (#​22257) (a576326)
• ssr: avoid rewriting labels that collide with imports (#​22451) (d9b18e0)

Miscellaneous Chores

• remove irrelevant commits from changelog (#​22430) (6ea3838)
• update changelog (#​22413) (fcdc87c)

v8.0.12

Compare Source

Features

• update rolldown to 1.0.0 (#​22401) (cf0ff41)

Bug Fixes

• create-vite: pass react framework to TanStack CLI (#​22397) (18f0f90)
• deps: update all non-major dependencies (#​22420) (2be6000)
• module-runner: prevent partial-exports race on concurrent imports of in-flight invalidated re-export chains (#​22369) (f5a22e6)
• refer to rolldownOptions instead of deprecated rollupOptions in messages (#​22400) (b675c7b)
• worker: apply build.target to worker bundle (#​22404) (3c93fde)
• worker: forward define to worker bundle transform (#​22408) (d4838a0)

Miscellaneous Chores

• deps: update dependency eslint-plugin-n to v18 (#​22423) (2fe7bd2)
• deps: update rolldown-related dependencies (#​22421) (66b9eb3)

v8.0.11

Compare Source

Features

• update rolldown to 1.0.0-rc.18 (#​22360) (3f80524)

Bug Fixes

• deps: update all non-major dependencies (#​22334) (672c962)
• deps: update all non-major dependencies (#​22382) (5c0cfcb)
• glob: align hmr matcher options with glob enumeration (#​22306) (30028f9)
• make separate object instance for each environment (#​22276) (7c2aa3b)

Documentation

• create-vite: list react-compiler templates in README (#​22347) (7c3a61f)
• explain mergeConfig skips null/undefined (#​22325) (2151f70)
• mention native config loader in CLI options (#​22348) (0420c5d)
• update evan's x handle (640202a)

Miscellaneous Chores

• deps: update dependency tsdown to ^0.21.10 (#​22333) (3b51e05)
• deps: update rolldown-related dependencies (#​22383) (555ff36)
• deps: update transitive packages to fix npm audit alerts (#​22316) (86aee62)

Code Refactoring

• devtools integration (#​22312) (3c8bf06)
• remove unnecessary async (#​22296) (b31fd35)
• show direct path type in bad character warning (#​22339) (0c162e9)

Tests

• create-vite: use short help alias (#​22389) (994ab66)

v8.0.10

Compare Source

Features

• update rolldown to 1.0.0-rc.17 (#​22299) (a4d06d9)

Bug Fixes

• hmrClient.logger.debug and hmrClient.logger.error looked different from other HMR logs (#​22147) (a4d828f)
• css: show filename in CSS minification warnings for .css?inline (#​22292) (83f0a78)
• optimizer: allow user transform.target to override default in optimizeDeps (#​22273) (5c7cec6)
• remove format sniffing module resolution from JS resolver (#​22297) (b8a21cc)

Code Refactoring

• enable some typecheck rules (#​22278) (9437518)
• typecheck client directory (#​22284) (40a0847)

v8.0.9

Compare Source

Features

• update rolldown to 1.0.0-rc.16 (#​22248) (2947edd)

Bug Fixes

• allow binding when strictPort is set but wildcard port is in use (#​22150) (dfc8aa5)
• build: emptyOutDir should happen for watch rebuilds (#​22207) (ee52267)
• bundled-dev: reject requests to HMR patch files in non potentially trustworthy origins (#​22269) (868f141)
• css: use unique key for cssEntriesMap to prevent same-basename collision (#​22039) (374bb5d)
• deps: update all non-major dependencies (#​22219) (4cd0d67)
• deps: update all non-major dependencies (#​22268) (c28e9c1)
• detect Deno workspace root (fix #​22237) (#​22238) (1b793c0)
• dev: handle errors in watchChange hook (#​22188) (fc08bda)
• optimizer: handle more chars that will be sanitized (#​22208) (3f24533)
• skip fallback sourcemap generation for ?raw imports (#​22148) (3ec9cda)

Documentation

• align the descriptions in READMEs (#​22231) (44c42b9)
• fix reuses wording in dev environment comment (#​22173) (9163412)
• fix wording in sass error comment (#​22214) (bc5c6a7)
• update build CLI defaults (#​22261) (605bb97)

Miscellaneous Chores

• deps: update dependency dotenv-expand to v13 (#​22271) (0a3887d)

---

Configuration

📅 Schedule: (in timezone Africa/Johannesburg)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

📚 Docs preview deployed

https://scratchyjs-docs-pr-88.asjas.workers.dev

Updates automatically on every push to this PR.

[github-actions]

⚡ Benchmark Results

benchmarks/renderer/ring-buffer.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
SharedRingBuffer – small payload (64 B) — write 64 bytes	625.1 K	0.0016	0.0063	±0.75%	+15.2% 🚀
SharedRingBuffer – small payload (64 B) — write + read 64 bytes	570.2 K	0.0018	0.0069	±1.04%	+8.4%
SharedRingBuffer – medium payload (1 KB) — write 1 KB	320.1 K	0.0031	0.0125	±0.49%	-7.8%
SharedRingBuffer – medium payload (1 KB) — write + read 1 KB	254.4 K	0.0039	0.0147	±0.97%	-2.2%
SharedRingBuffer – large payload (16 KB) — write 16 KB	47.3 K	0.0211	0.0456	±0.61%	-18.7% ⚠️
SharedRingBuffer – large payload (16 KB) — write + read 16 KB	97.1 K	0.0103	0.0371	±1.54%	+26.0% 🚀
SharedRingBuffer – sequential throughput (100 × 64 B) — 100 write + read cycles	41.1 K	0.0244	0.0378	±0.33%	+1.1%
SharedRingBuffer – introspection — availableToRead	14.49 M	0.0001	0.0001	±0.11%	-2.6%
SharedRingBuffer – introspection — isEmpty	14.90 M	0.0001	0.0001	±0.11%	+1.9%
SharedRingBuffer – introspection — isFull	14.76 M	0.0001	0.0001	±0.11%	+1.2%

benchmarks/renderer/shared-buffer.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
SharedBuffer – allocation — createSharedBuffer(4 KB)	630.6 K	0.0016	0.0066	±1.06%	-11.6% ⚠️
SharedBuffer – allocation — createSharedBuffer(64 KB)	56.4 K	0.0177	0.0392	±1.10%	~0%
SharedBuffer – small payload round-trip — write small JSON	340.1 K	0.0029	0.0108	±0.44%	-5.4%
SharedBuffer – small payload round-trip — write + read small JSON	253.1 K	0.0040	0.0142	±0.42%	-7.5%
SharedBuffer – medium payload round-trip — write medium JSON (~2 KB)	93.7 K	0.0107	0.0264	±5.95%	+5.3%
SharedBuffer – medium payload round-trip — write + read medium JSON (~2 KB)	58.5 K	0.0171	0.0368	±0.39%	~0%
SharedBuffer – large payload round-trip — write large JSON (~10 KB)	15.1 K	0.0662	0.1219	±0.41%	-2.1%
SharedBuffer – large payload round-trip — write + read large JSON (~10 KB)	7.7 K	0.1298	0.1664	±0.32%	-1.4%

benchmarks/utils/ip-address.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
getClientIPAddress – no IP headers — no IP-related headers → null	2.64 M	0.0004	0.0008	±0.19%	~0%
getClientIPAddress – single header — cf-connecting-ip (Cloudflare)	1.69 M	0.0006	0.0010	±0.30%	+1.4%
getClientIPAddress – single header — x-forwarded-for (simple)	1.94 M	0.0005	0.0009	±0.33%	~0%
getClientIPAddress – single header — x-real-ip	1.54 M	0.0006	0.0010	±0.27%	+2.9%
getClientIPAddress – single header — true-client-ip (Akamai / Cloudflare Enterprise)	1.57 M	0.0006	0.0009	±0.16%	+1.3%
getClientIPAddress – x-forwarded-for multi-hop — 2-hop chain	1.86 M	0.0005	0.0010	±0.15%	+6.2%
getClientIPAddress – x-forwarded-for multi-hop — 4-hop chain	1.70 M	0.0006	0.0009	±0.18%	+1.8%
getClientIPAddress – Forwarded header (RFC 7239) — simple for= directive	1.01 M	0.0010	0.0014	±0.20%	~0%
getClientIPAddress – Forwarded header (RFC 7239) — for= with port	749.4 K	0.0013	0.0018	±0.33%	+2.8%
getClientIPAddress – Forwarded header (RFC 7239) — IPv6 literal	752.5 K	0.0013	0.0021	±0.22%	-1.1%
getClientIPAddress – Forwarded header (RFC 7239) — multi-hop Forwarded	833.5 K	0.0012	0.0017	±0.32%	-1.0%
getClientIPAddress – IPv6 addresses — x-forwarded-for IPv6	1.23 M	0.0008	0.0011	±0.23%	+7.0%

benchmarks/utils/promise.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
promiseHash – concurrent resolution — 2 already-resolved promises	857.4 K	0.0012	0.0028	±0.97%	~0%
promiseHash – concurrent resolution — 5 already-resolved promises	520.6 K	0.0019	0.0033	±1.34%	~0%
promiseHash – concurrent resolution — 10 already-resolved promises	312.5 K	0.0032	0.0048	±1.19%	+9.6%
promiseHash – concurrent resolution — 5 promises with object values	482.1 K	0.0021	0.0027	±0.28%	~0%
timeout – wrapping fast promises — timeout wrapping an already-resolved promise (1 s budget)	965.9 K	0.0010	0.0019	±0.34%	~0%
timeout – wrapping fast promises — timeout wrapping an already-resolved object (5 s budget)	905.7 K	0.0011	0.0017	±1.64%	-3.1%

benchmarks/utils/safe-redirect.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
safeRedirect – valid paths — root path /	7.55 M	0.0001	0.0002	±0.14%	+11.6% 🚀
safeRedirect – valid paths — simple path /dashboard	3.64 M	0.0003	0.0003	±0.12%	~0%
safeRedirect – valid paths — nested path /settings/profile	3.15 M	0.0003	0.0003	±0.12%	-1.4%
safeRedirect – valid paths — path with query string /search?q=hello	3.52 M	0.0003	0.0003	±0.11%	~0%
safeRedirect – valid paths — path with hash /docs#section	3.46 M	0.0003	0.0003	±0.11%	-3.5%
safeRedirect – rejected inputs — absolute URL https://evil.com	4.81 M	0.0002	0.0002	±0.13%	+4.2%
safeRedirect – rejected inputs — protocol-relative URL //evil.com	4.78 M	0.0002	0.0002	±0.12%	+6.1%
safeRedirect – rejected inputs — backslash-relative /\evil.com	4.70 M	0.0002	0.0002	±0.11%	+1.6%
safeRedirect – rejected inputs — path traversal /../etc/passwd	4.10 M	0.0002	0.0003	±0.11%	~0%
safeRedirect – rejected inputs — null input	15.93 M	0.0001	0.0001	±0.11%	-1.8%
safeRedirect – rejected inputs — undefined input	15.91 M	0.0001	0.0001	±0.11%	-1.8%
safeRedirect – rejected inputs — empty string	15.95 M	0.0001	0.0001	±0.11%	-1.5%
safeRedirect – percent-encoded bypass — percent-encoded // (%2F%2F)	4.61 M	0.0002	0.0002	±0.12%	-3.1%
safeRedirect – percent-encoded bypass — percent-encoded path traversal (%2e%2e)	4.66 M	0.0002	0.0002	±0.11%	-1.8%
safeRedirect – percent-encoded bypass — mixed percent-encoded absolute URL	4.58 M	0.0002	0.0002	±0.11%	~0%
safeRedirect – custom default redirect — valid path with custom default	3.75 M	0.0003	0.0003	±0.12%	~0%
safeRedirect – custom default redirect — invalid input with custom default	4.79 M	0.0002	0.0002	±0.12%	~0%

🔬 Compared against the latest benchmark run on main. ⚠️ = >10% slower · 🚀 = >10% faster.