chore(deps-dev): bump vite from 6.3.2 to 6.3.4 in the npm_and_yarn group #6909

dependabot · 2025-05-01T10:43:47Z

Bumps the npm_and_yarn group with 1 update: vite.

Updates vite from 6.3.2 to 6.3.4

Release notes

v6.3.4

Please refer to CHANGELOG.md for details.

v6.3.3

Please refer to CHANGELOG.md for details.

Changelog

6.3.4 (2025-04-30)

fix: check static serve file inside sirv (#19965) (c22c43d), closes #19965

fix(optimizer): return plain object when using require to import externals in optimized dependenci (efc5eab), closes #19940

refactor: remove duplicate plugin context type (#19935) (d6d01c2), closes #19935

6.3.3 (2025-04-24)

fix: ignore malformed uris in tranform middleware (#19853) (e4d5201), closes #19853

fix(assets): ensure ?no-inline is not included in the asset url in the production environment (#1949 (16a73c0), closes #19496

fix(css): resolve relative imports in sass properly on Windows (#19920) (ffab442), closes #19920

fix(deps): update all non-major dependencies (#19899) (a4b500e), closes #19899

fix(ssr): fix execution order of re-export (#19841) (ed29dee), closes #19841

fix(ssr): fix live binding of default export declaration and hoist exports getter (#19842) (80a91ff), closes #19842

perf: skip sourcemap generation for renderChunk hook of import-analysis-build plugin (#19921) (55cfd04), closes #19921

test(ssr): test ssrTransform re-export deps and test stacktrace with first line (#19629) (9399cda), closes #19629

Commits

b040d54 release: v6.3.4
c22c43d fix: check static serve file inside sirv (#19965)
efc5eab fix(optimizer): return plain object when using require to import externals ...
d6d01c2 refactor: remove duplicate plugin context type (#19935)
db9eb97 release: v6.3.3
e4d5201 fix: ignore malformed uris in tranform middleware (#19853)
55cfd04 perf: skip sourcemap generation for renderChunk hook of import-analysis-build...
ffab442 fix(css): resolve relative imports in sass properly on Windows (#19920)
16a73c0 fix(assets): ensure ?no-inline is not included in the asset url in the produc...
9399cda test(ssr): test ssrTransform re-export deps and test stacktrace with first ...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

PR-Codex overview

This PR focuses on updating dependencies in the package.json and pnpm-lock.yaml files, including version upgrades for various packages.

Detailed summary

Updated vite from 6.3.2 to 6.3.4 in package.json.
Updated several package versions in pnpm-lock.yaml, including:
- @babel/core from 7.26.10 to 7.27.1
- @babel/preset-typescript from 7.27.0 to 7.27.1
- @babel/plugin-syntax-decorators from 7.25.9 to 7.27.1
- Added new versions for multiple @babel packages, all updated to 7.27.1.
- Updated @ethereumjs/util from 9.1.0 to 10.0.0.
- Updated @expo/osascript from 2.1.6 to 2.2.4.
- Updated @expo/package-manager from 1.7.2 to 1.8.4.
- Added new versions for @rollup packages, all updated to 4.40.1.

The following files were skipped due to too many changes: pnpm-lock.yaml

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

Bumps the npm_and_yarn group with 1 update: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `vite` from 6.3.2 to 6.3.4 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.3.4/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 6.3.4 dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

changeset-bot · 2025-05-01T10:43:51Z

⚠️ No Changeset found

Latest commit: 9553f67

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

vercel · 2025-05-01T10:43:52Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
docs-v2	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	May 1, 2025 10:56am
login	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	May 1, 2025 10:56am
thirdweb_playground	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	May 1, 2025 10:56am
thirdweb-www	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	May 1, 2025 10:56am
wallet-ui	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	May 1, 2025 10:56am

graphite-app · 2025-05-01T10:43:53Z

How to use the Graphite Merge Queue

Add either label to this PR to merge it via the merge queue:

merge-queue - adds this PR to the back of the merge queue
hotfix - for urgent hot fixes, skip the queue and merge this PR next

You must have a Graphite account in order to use the merge queue. Sign up using this link.

_{An organization admin has enabled the Graphite Merge Queue in this repository.} _{Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.}

socket-security · 2025-05-01T10:44:30Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	vite@6.3.4

View full report

dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 1, 2025

dependabot bot requested review from a team as code owners May 1, 2025 10:43

github-actions bot added packages SDK Involves changes to the thirdweb SDK labels May 1, 2025

vercel bot deployed to Preview – thirdweb-www May 1, 2025 10:51 View deployment

vercel bot deployed to Preview – wallet-ui May 1, 2025 10:51 View deployment

vercel bot deployed to Preview – thirdweb_playground May 1, 2025 10:51 View deployment

vercel bot deployed to Preview – login May 1, 2025 10:53 View deployment

vercel bot deployed to Preview – docs-v2 May 1, 2025 10:56 View deployment

joaquim-verges merged commit 6e87370 into main May 1, 2025
21 checks passed

joaquim-verges deleted the dependabot/npm_and_yarn/npm_and_yarn-de653eece3 branch May 1, 2025 23:41

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump vite from 6.3.2 to 6.3.4 in the npm_and_yarn group #6909

chore(deps-dev): bump vite from 6.3.2 to 6.3.4 in the npm_and_yarn group #6909

Uh oh!

dependabot bot commented on behalf of github May 1, 2025 •

edited by pr-codex bot

Loading

Uh oh!

changeset-bot bot commented May 1, 2025

Uh oh!

vercel bot commented May 1, 2025 •

edited

Loading

Uh oh!

graphite-app bot commented May 1, 2025

Uh oh!

socket-security bot commented May 1, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps-dev): bump vite from 6.3.2 to 6.3.4 in the npm_and_yarn group #6909

chore(deps-dev): bump vite from 6.3.2 to 6.3.4 in the npm_and_yarn group #6909

Uh oh!

Conversation

dependabot bot commented on behalf of github May 1, 2025 • edited by pr-codex bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v6.3.4

v6.3.3

6.3.4 (2025-04-30)

6.3.3 (2025-04-24)

PR-Codex overview

Detailed summary

Uh oh!

changeset-bot bot commented May 1, 2025

⚠️ No Changeset found

Uh oh!

vercel bot commented May 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

graphite-app bot commented May 1, 2025

How to use the Graphite Merge Queue

Uh oh!

socket-security bot commented May 1, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github May 1, 2025 •

edited by pr-codex bot

Loading

vercel bot commented May 1, 2025 •

edited

Loading