build(deps-dev): update dependency vite to v8

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
vite (source)	7.3.2 → 8.0.8

---

Release Notes

vitejs/vite (vite)

v8.0.8

Compare Source

Features

• update rolldown to 1.0.0-rc.15 (#​22201) (6baf587)

Bug Fixes

• avoid dns.getDefaultResultOrder temporary (#​22202) (15f1c15)
• ssr: class property keys hoisting matching imports (#​22199) (e137601)

v8.0.7

Compare Source

Bug Fixes

• use sync dns.getDefaultResultOrder instead of dns.promises (#​22185) (5c05b04)

v8.0.6

Compare Source

Features

• update rolldown to 1.0.0-rc.13 (#​22097) (51d3e48)

Bug Fixes

• css: avoid mutating sass error multiple times (#​22115) (d5081c2)
• optimize-deps: hoist CJS interop assignment (#​22156) (17a8f9e)

Performance Improvements

• early return in getLocalhostAddressIfDiffersFromDNS when DNS order is verbatim (#​22151) (56ec256)

Miscellaneous Chores

• create-vite: remove unnecessary DOM.Iterable (#​22168) (bdc53ab)
• replace remaining prettier script (#​22179) (af71fb2)

v8.0.5

Compare Source

Bug Fixes

• apply server.fs check to env transport (#​22159) (f02d9fd)
• avoid path traversal with optimize deps sourcemap handler (#​22161) (79f002f)
• check server.fs after stripping query as well (#​22160) (a9a3df2)
• disallow referencing files outside the package from sourcemap (#​22158) (f05f501)

v8.0.4

Compare Source

Features

• allow esbuild 0.28 as peer deps (#​22155) (b0da973)
• hmr: truncate list of files on hmr update (#​21535) (d00e806)
• optimizer: log when dependency scanning or bundling takes over 1s (#​21797) (f61a1ab)

Bug Fixes

• hasBothRollupOptionsAndRolldownOptions should return false for proxy case (#​22043) (99897d2)
• add types for vite/modulepreload-polyfill (#​22126) (17330d2)
• deps: update all non-major dependencies (#​22073) (6daa10f)
• deps: update all non-major dependencies (#​22143) (22b0166)
• resolve: resolve tsconfig paths starting with # (#​22038) (3460fc5)
• ssr: use browser platform for webworker SSR builds (fix #​21969) (#​21963) (364c227)

Documentation

• add environment.fetchModule documentation (#​22035) (54229e7)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​21989) (0ded627)

Code Refactoring

• upgrade to typescript 6 (#​22110) (cc41398)

v8.0.3

Compare Source

Features

• update rolldown to 1.0.0-rc.12 (#​22024) (84164ef)

Bug Fixes

• html: cache unfiltered CSS list to prevent missing styles across entries (#​22017) (5464190)
• module-runner: handle non-ascii characters in base64 sourcemaps (#​21985) (77c95bf)
• module-runner: skip re-import if the runner is closed (#​22020) (ee2c2cd)
• optimizer: scan is not resolving sub path import if used in a glob import (#​22018) (ddfe20d)
• ssr: ssrTransform incorrectly rewrites meta identifier inside import.meta when a binding named meta exists (#​22019) (cff5f0c)

Miscellaneous Chores

• deps: bump picomatch from 4.0.3 to 4.0.4 (#​22027) (7e56003)

Tests

• html: add tests for getCssFilesForChunk (#​22016) (43fbbf9)

v8.0.2

Compare Source

Features

• update rolldown to 1.0.0-rc.11 (#​21998) (ff91c31)

Bug Fixes

• deps: update all non-major dependencies (#​21988) (9b7d150)

Miscellaneous Chores

• deps: update dependency @​vitejs/devtools to ^0.1.5 (#​21992) (b2dd65b)

v8.0.1

Compare Source

Features

• update rolldown to 1.0.0-rc.10 (#​21932) (b3c067d)

Bug Fixes

• bundled-dev: properly disable inlineConst optimization (#​21865) (6d97142)
• css: lightningcss minify failed when build.target: 'es6' (#​21933) (5fcce46)
• deps: update all non-major dependencies (#​21878) (6dbbd7f)
• dev: always use ESM Oxc runtime (#​21829) (d323ed7)
• dev: handle concurrent restarts in _createServer (#​21810) (40bc729)
• handle + symbol in package subpath exports during dep optimization (#​21886) (86db93d)
• improve no-cors request block error (#​21902) (5ba688b)
• use precise regexes for transform filter to avoid backtracking (#​21800) (dbe41bd)
• worker: require(json) result should not be wrapped (#​21847) (0672fd2)
• worker: make worker output consistent with client and SSR (#​21871) (69454d7)

Miscellaneous Chores

• add changelog rearrange script (#​21835) (efef073)
• deps: bump required @vitejs/devtools version to 0.1+ (#​21925) (12932f5)
• deps: update rolldown-related dependencies (#​21787) (1af1d3a)
• rearrange 8.0 changelog (8e05b61)
• rearrange 8.0 changelog (#​21834) (86edeee)

v8.0.0

Compare Source

Features

• update rolldown to 1.0.0-rc.9 (#​21813) (f05be0e)
• warn when vite-tsconfig-paths plugin is detected (#​21781) (ada493e)

Bug Fixes

• deps: update all non-major dependencies (#​21786) (eaa4352)

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

Renovateによるviteの^7.3.2から^8.0.0へのメジャーバージョン更新を確認しました。devDependencyのみの変更でソースコードへの影響はなく、engines.node: ">=20.20.0"はvite 8の要求(^20.19.0 || >=22.12.0)を満たしています。CIもnix-fast-buildを含めて通過しているため、機能的な問題はありません。過去のRenovateのdevDependency更新PR (#174, #168等)と同様にplugin.jsonのバージョン更新は行われておらず、リポジトリの慣習に沿っています。

一点、vitest@3.2.4のvite peerDependencyは^5.0.0 || ^6.0.0 || ^7.0.0-0であり、vite 8をまだ含んでいません。package-lock.jsonを見ると、npmはトップレベルにvite@8.0.10、vitest/vite-node配下にネストしてvite@7.3.2を別途インストールしてpeerDep制約を満たしています。これは動作上は問題ありませんが、vite build(本体のCLIバンドル)はvite 8、vitest(テスト)はvite 7という二重インストール状態が継続します。今後vite 8対応のvitestがリリースされた段階で重複が解消されるはずなので、追従を推奨します。

Review metadata

• Reviewed commit: ff3e579
• PR: #186
• kyosei: 3.2.1
• kyosei-action: unknown
• Claude Code: 2.1.119
• Model: claude-opus-4-7
• Execution: GitHub Actions (run)

[claude]

Renovateによるviteの7.3.2から8.0.8への更新を再確認しました。devDependencyのみの変更で、engines.node: ">=20.20.0"はvite 8の要求(^20.19.0 || >=22.12.0)を満たし、vite build/vitestいずれも問題なく動作する状態です。

vite 8系で導入されたrolldownバンドラやesbuild 0.28許容、server.fs/optimize-depsのパストラバーサル修正(8.0.5)などのセキュリティ改善も含まれており、追従するメリットがあります。

既知のvitest@3.2.4peerDep制約に伴うvite 7のネスト二重インストールは前回レビューおよび既存のreviewThread(outdated済み、resolved未)で指摘済みのためここでは重複コメントは行いません。vitestのvite 8対応版がリリースされ次第追従してください。

本PRに新規の指摘はありません。承認します。

Review metadata

• Reviewed commit: bae98a8
• PR: #186
• kyosei: 3.2.1
• kyosei-action: unknown
• Claude Code: 2.1.119
• Model: claude-opus-4-7
• Execution: GitHub Actions (run)

[ncaq]

ん、CI通ってなくないか。

[ncaq]

CI通らないし一回閉じるか。
まあ脆弱性あっても完全に静的にビルドしてるから基本は関係ないでしょう。
サーバーサイドレンダリングするならともかく。

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 8.x releases. But if you manually upgrade to 8.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.