mirror of
https://github.com/toeverything/AFFiNE.git
synced 2026-02-04 08:38:34 +00:00
This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [vite](https://vite.dev) ([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite)) | [`^6.1.0` -> `^7.0.0`](https://renovatebot.com/diffs/npm/vite/6.3.6/7.1.11) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [vite](https://vite.dev) ([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite)) | [`^6.0.3` -> `^7.0.0`](https://renovatebot.com/diffs/npm/vite/6.3.6/7.1.11) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | ### GitHub Vulnerability Alerts #### [CVE-2025-62522](https://redirect.github.com/vitejs/vite/security/advisories/GHSA-93m4-6634-74q7) ### Summary Files denied by [`server.fs.deny`](https://vitejs.dev/config/server-options.html#server-fs-deny) were sent if the URL ended with `\` when the dev server is running on Windows. ### Impact Only apps that match the following conditions are affected: - explicitly exposes the Vite dev server to the network (using --host or [`server.host` config option](https://vitejs.dev/config/server-options.html#server-host)) - running the dev server on Windows ### Details `server.fs.deny` can contain patterns matching against files (by default it includes `.env`, `.env.*`, `*.{crt,pem}` as such patterns). These patterns were able to bypass by using a back slash(`\`). The root cause is that `fs.readFile('/foo.png/')` loads `/foo.png`. ### PoC ```shell npm create vite@latest cd vite-project/ cat "secret" > .env npm install npm run dev curl --request-target /.env\ http://localhost:5173 ``` <img width="1593" height="616" alt="image" src="https://github.com/user-attachments/assets/36212f4e-1d3c-4686-b16f-16b35ca9e175" /> --- ### Release Notes <details> <summary>vitejs/vite (vite)</summary> ### [`v7.1.11`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-7111-2025-10-20-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.1.10...v7.1.11) ##### Bug Fixes - **dev:** trim trailing slash before `server.fs.deny` check ([#​20968](https://redirect.github.com/vitejs/vite/issues/20968)) ([f479cc5](f479cc57c4)) ##### Miscellaneous Chores - **deps:** update all non-major dependencies ([#​20966](https://redirect.github.com/vitejs/vite/issues/20966)) ([6fb41a2](6fb41a260b)) ##### Code Refactoring - use subpath imports for types module reference ([#​20921](https://redirect.github.com/vitejs/vite/issues/20921)) ([d0094af](d0094af639)) ##### Build System - remove cjs reference in files field ([#​20945](https://redirect.github.com/vitejs/vite/issues/20945)) ([ef411ce](ef411cee26)) - remove hash from built filenames ([#​20946](https://redirect.github.com/vitejs/vite/issues/20946)) ([a817307](a81730754d)) ### [`v7.1.10`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-7110-2025-10-14-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.1.9...v7.1.10) ##### Bug Fixes - **css:** avoid duplicate style for server rendered stylesheet link and client inline style during dev ([#​20767](https://redirect.github.com/vitejs/vite/issues/20767)) ([3a92bc7](3a92bc79b3)) - **css:** respect emitAssets when cssCodeSplit=false ([#​20883](https://redirect.github.com/vitejs/vite/issues/20883)) ([d3e7eee](d3e7eeefa9)) - **deps:** update all non-major dependencies ([879de86](879de86935)) - **deps:** update all non-major dependencies ([#​20894](https://redirect.github.com/vitejs/vite/issues/20894)) ([3213f90](3213f90ff0)) - **dev:** allow aliases starting with `//` ([#​20760](https://redirect.github.com/vitejs/vite/issues/20760)) ([b95fa2a](b95fa2aa75)) - **dev:** remove timestamp query consistently ([#​20887](https://redirect.github.com/vitejs/vite/issues/20887)) ([6537d15](6537d15591)) - **esbuild:** inject esbuild helpers correctly for esbuild 0.25.9+ ([#​20906](https://redirect.github.com/vitejs/vite/issues/20906)) ([446eb38](446eb38632)) - normalize path before calling `fileToBuiltUrl` ([#​20898](https://redirect.github.com/vitejs/vite/issues/20898)) ([73b6d24](73b6d243e0)) - preserve original sourcemap file field when combining sourcemaps ([#​20926](https://redirect.github.com/vitejs/vite/issues/20926)) ([c714776](c714776aa1)) ##### Documentation - correct `WebSocket` spelling ([#​20890](https://redirect.github.com/vitejs/vite/issues/20890)) ([29e98dc](29e98dc3ef)) ##### Miscellaneous Chores - **deps:** update rolldown-related dependencies ([#​20923](https://redirect.github.com/vitejs/vite/issues/20923)) ([a5e3b06](a5e3b064fa)) ### [`v7.1.9`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-719-2025-10-03-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.1.8...v7.1.9) ##### Reverts - **server:** drain stdin when not interactive ([#​20885](https://redirect.github.com/vitejs/vite/issues/20885)) ([12d72b0](12d72b0538)) ### [`v7.1.8`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-718-2025-10-02-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.1.7...v7.1.8) ##### Bug Fixes - **css:** improve url escape characters handling ([#​20847](https://redirect.github.com/vitejs/vite/issues/20847)) ([24a61a3](24a61a3f54)) - **deps:** update all non-major dependencies ([#​20855](https://redirect.github.com/vitejs/vite/issues/20855)) ([788a183](788a183afc)) - **deps:** update artichokie to 0.4.2 ([#​20864](https://redirect.github.com/vitejs/vite/issues/20864)) ([e670799](e670799e12)) - **dev:** skip JS responses for document requests ([#​20866](https://redirect.github.com/vitejs/vite/issues/20866)) ([6bc6c4d](6bc6c4dbc2)) - **glob:** fix HMR for array patterns with exclusions ([#​20872](https://redirect.github.com/vitejs/vite/issues/20872)) ([63e040f](63e040f1ca)) - keep ids for virtual modules as-is ([#​20808](https://redirect.github.com/vitejs/vite/issues/20808)) ([d4eca98](d4eca986d6)) - **server:** drain stdin when not interactive ([#​20837](https://redirect.github.com/vitejs/vite/issues/20837)) ([bb950e9](bb950e92b3)) - **server:** improve malformed URL handling in middlewares ([#​20830](https://redirect.github.com/vitejs/vite/issues/20830)) ([d65a983](d65a9831c9)) ##### Documentation - **create-vite:** provide deno example ([#​20747](https://redirect.github.com/vitejs/vite/issues/20747)) ([fdb758a](fdb758a517)) ##### Miscellaneous Chores - **deps:** update rolldown-related dependencies ([#​20810](https://redirect.github.com/vitejs/vite/issues/20810)) ([ea68a88](ea68a8868c)) - **deps:** update rolldown-related dependencies ([#​20854](https://redirect.github.com/vitejs/vite/issues/20854)) ([4dd06fd](4dd06fdc8d)) - update url of `create-react-app` license ([#​20865](https://redirect.github.com/vitejs/vite/issues/20865)) ([166a178](166a178f45)) ### [`v7.1.7`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-717-2025-09-22-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.1.6...v7.1.7) ##### Bug Fixes - **build:** fix ssr environment `emitAssets: true` when `sharedConfigBuild: true` ([#​20787](https://redirect.github.com/vitejs/vite/issues/20787)) ([4c4583c](4c4583ce7a)) - **client:** use CSP nonce when rendering error overlay ([#​20791](https://redirect.github.com/vitejs/vite/issues/20791)) ([9bc9d12](9bc9d1258f)) - **deps:** update all non-major dependencies ([#​20811](https://redirect.github.com/vitejs/vite/issues/20811)) ([9f2247c](9f2247c066)) - **glob:** handle glob imports from folders starting with dot ([#​20800](https://redirect.github.com/vitejs/vite/issues/20800)) ([105abe8](105abe87c4)) - **hmr:** trigger prune event when import is removed from non hmr module ([#​20768](https://redirect.github.com/vitejs/vite/issues/20768)) ([9f32b1d](9f32b1dc71)) - **hmr:** wait for `import.meta.hot.prune` callbacks to complete before running other HMRs ([#​20698](https://redirect.github.com/vitejs/vite/issues/20698)) ([98a3484](98a3484733)) ### [`v7.1.6`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-716-2025-09-18-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.1.5...v7.1.6) ##### Bug Fixes - **deps:** update all non-major dependencies ([#​20773](https://redirect.github.com/vitejs/vite/issues/20773)) ([88af2ae](88af2ae7df)) - **esbuild:** inject esbuild helper functions with minified `$` variables correctly ([#​20761](https://redirect.github.com/vitejs/vite/issues/20761)) ([7e8e004](7e8e0043d6)) - fallback terser to main thread when nameCache is provided ([#​20750](https://redirect.github.com/vitejs/vite/issues/20750)) ([a679a64](a679a64340)) - **types:** strict env typings fail when `skipLibCheck` is `false` ([#​20755](https://redirect.github.com/vitejs/vite/issues/20755)) ([cc54e29](cc54e29474)) ##### Miscellaneous Chores - **deps:** update rolldown-related dependencies ([#​20675](https://redirect.github.com/vitejs/vite/issues/20675)) ([a67bb5f](a67bb5fbec)) - **deps:** update rolldown-related dependencies ([#​20772](https://redirect.github.com/vitejs/vite/issues/20772)) ([d785e72](d785e72f2e)) ### [`v7.1.5`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-715-2025-09-08-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.1.4...v7.1.5) ##### Bug Fixes - apply `fs.strict` check to HTML files ([#​20736](https://redirect.github.com/vitejs/vite/issues/20736)) ([14015d7](14015d794f)) - **deps:** update all non-major dependencies ([#​20732](https://redirect.github.com/vitejs/vite/issues/20732)) ([122bfba](122bfbabeb)) - upgrade sirv to 3.0.2 ([#​20735](https://redirect.github.com/vitejs/vite/issues/20735)) ([09f2b52](09f2b52e8d)) ### [`v7.1.4`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-714-2025-09-01-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.1.3...v7.1.4) ##### Bug Fixes - add missing awaits ([#​20697](https://redirect.github.com/vitejs/vite/issues/20697)) ([79d10ed](79d10ed634)) - **deps:** update all non-major dependencies ([#​20676](https://redirect.github.com/vitejs/vite/issues/20676)) ([5a274b2](5a274b29df)) - **deps:** update all non-major dependencies ([#​20709](https://redirect.github.com/vitejs/vite/issues/20709)) ([0401feb](0401feba17)) - pass rollup watch options when building in watch mode ([#​20674](https://redirect.github.com/vitejs/vite/issues/20674)) ([f367453](f367453ca2)) ##### Miscellaneous Chores - remove unused constants entry from rolldown.config.ts ([#​20710](https://redirect.github.com/vitejs/vite/issues/20710)) ([537fcf9](537fcf9186)) ##### Code Refactoring - remove unnecessary `minify` parameter from `finalizeCss` ([#​20701](https://redirect.github.com/vitejs/vite/issues/20701)) ([8099582](8099582e53)) ### [`v7.1.3`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-713-2025-08-19-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.1.2...v7.1.3) ##### Features - **cli:** add Node.js version warning for unsupported versions ([#​20638](https://redirect.github.com/vitejs/vite/issues/20638)) ([a1be1bf](a1be1bf090)) - generate code frame for parse errors thrown by terser ([#​20642](https://redirect.github.com/vitejs/vite/issues/20642)) ([a9ba017](a9ba0174a5)) - support long lines in `generateCodeFrame` ([#​20640](https://redirect.github.com/vitejs/vite/issues/20640)) ([1559577](1559577317)) ##### Bug Fixes - **deps:** update all non-major dependencies ([#​20634](https://redirect.github.com/vitejs/vite/issues/20634)) ([4851cab](4851cab3ba)) - **optimizer:** incorrect incompatible error ([#​20439](https://redirect.github.com/vitejs/vite/issues/20439)) ([446fe83](446fe83033)) - support multiline new URL(..., import.meta.url) expressions ([#​20644](https://redirect.github.com/vitejs/vite/issues/20644)) ([9ccf142](9ccf142764)) ##### Performance Improvements - **cli:** dynamically import `resolveConfig` ([#​20646](https://redirect.github.com/vitejs/vite/issues/20646)) ([f691f57](f691f57e46)) ##### Miscellaneous Chores - **deps:** update rolldown-related dependencies ([#​20633](https://redirect.github.com/vitejs/vite/issues/20633)) ([98b92e8](98b92e8c4b)) ##### Code Refactoring - replace startsWith with strict equality ([#​20603](https://redirect.github.com/vitejs/vite/issues/20603)) ([42816de](42816dee0e)) - use `import` in worker threads ([#​20641](https://redirect.github.com/vitejs/vite/issues/20641)) ([530687a](530687a344)) ##### Tests - remove `checkNodeVersion` test ([#​20647](https://redirect.github.com/vitejs/vite/issues/20647)) ([731d3e6](731d3e61f4)) ### [`v7.1.2`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-712-2025-08-12-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.1.1...v7.1.2) ##### Bug Fixes - **client:** add `[vite]` prefixes to debug logs ([#​20595](https://redirect.github.com/vitejs/vite/issues/20595)) ([7cdef61](7cdef612a6)) - **config:** make debugger work with bundle loader ([#​20573](https://redirect.github.com/vitejs/vite/issues/20573)) ([c583927](c583927bee)) - **deps:** update all non-major dependencies ([#​20587](https://redirect.github.com/vitejs/vite/issues/20587)) ([20d4817](20d48172a0)) - don't consider ids with `npm:` prefix as a built-in module ([#​20558](https://redirect.github.com/vitejs/vite/issues/20558)) ([ab33803](ab33803f2c)) - **hmr:** watch non-inlined assets referenced by CSS ([#​20581](https://redirect.github.com/vitejs/vite/issues/20581)) ([b7d494b](b7d494bf60)) - **module-runner:** prevent crash when sourceMappingURL pattern appears in string literals ([#​20554](https://redirect.github.com/vitejs/vite/issues/20554)) ([2770478](2770478d1c)) ##### Miscellaneous Chores - **deps:** migrate to `@jridgewell/remapping` from `@ampproject/remapping` ([#​20577](https://redirect.github.com/vitejs/vite/issues/20577)) ([0a6048a](0a6048aba4)) - **deps:** update rolldown-related dependencies ([#​20586](https://redirect.github.com/vitejs/vite/issues/20586)) ([77632c5](77632c55db)) ### [`v7.1.1`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-7111-2025-10-20-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.1.0...v7.1.1) ##### Bug Fixes - **dev:** trim trailing slash before `server.fs.deny` check ([#​20968](https://redirect.github.com/vitejs/vite/issues/20968)) ([f479cc5](f479cc57c4)) ##### Miscellaneous Chores - **deps:** update all non-major dependencies ([#​20966](https://redirect.github.com/vitejs/vite/issues/20966)) ([6fb41a2](6fb41a260b)) ##### Code Refactoring - use subpath imports for types module reference ([#​20921](https://redirect.github.com/vitejs/vite/issues/20921)) ([d0094af](d0094af639)) ##### Build System - remove cjs reference in files field ([#​20945](https://redirect.github.com/vitejs/vite/issues/20945)) ([ef411ce](ef411cee26)) - remove hash from built filenames ([#​20946](https://redirect.github.com/vitejs/vite/issues/20946)) ([a817307](a81730754d)) ### [`v7.1.0`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#710-2025-08-07) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.0.8...v7.1.0) ##### Features - support files with more than 1000 lines by `generateCodeFrame` ([#​20508](https://redirect.github.com/vitejs/vite/issues/20508)) ([e7d0b2a](e7d0b2afa5)) - add `import.meta.main` support in config (bundle config loader) ([#​20516](https://redirect.github.com/vitejs/vite/issues/20516)) ([5d3e3c2](5d3e3c2ae5)) - **optimizer:** improve dependency optimization error messages with esbuild formatMessages ([#​20525](https://redirect.github.com/vitejs/vite/issues/20525)) ([d17cfed](d17cfeda07)) - **ssr:** add `import.meta.main` support for Node.js module runner ([#​20517](https://redirect.github.com/vitejs/vite/issues/20517)) ([794a8f2](794a8f2302)) - add `future: 'warn'` ([#​20473](https://redirect.github.com/vitejs/vite/issues/20473)) ([e6aaf17](e6aaf17ca2)) - add `removeServerPluginContainer` future deprecation ([#​20437](https://redirect.github.com/vitejs/vite/issues/20437)) ([c1279e7](c1279e7540)) - add `removeServerReloadModule` future deprecation ([#​20436](https://redirect.github.com/vitejs/vite/issues/20436)) ([6970d17](6970d1740c)) - add `server.warmupRequest` to future deprecation ([#​20431](https://redirect.github.com/vitejs/vite/issues/20431)) ([8ad388a](8ad388aeab)) - add `ssrFixStacktrace` / `ssrRewriteStacktrace` to `removeSsrLoadModule` future deprecation ([#​20435](https://redirect.github.com/vitejs/vite/issues/20435)) ([8c8f587](8c8f5879ea)) - **client:** ping from SharedWorker ([#​19057](https://redirect.github.com/vitejs/vite/issues/19057)) ([5c97c22](5c97c22548)) - **dev:** add `this.fs` support ([#​20301](https://redirect.github.com/vitejs/vite/issues/20301)) ([0fe3f2f](0fe3f2f7c3)) - export `defaultExternalConditions` ([#​20279](https://redirect.github.com/vitejs/vite/issues/20279)) ([344d302](344d30243b)) - implement `removePluginHookSsrArgument` future deprecation ([#​20433](https://redirect.github.com/vitejs/vite/issues/20433)) ([95927d9](95927d9c0b)) - implement `removeServerHot` future deprecation ([#​20434](https://redirect.github.com/vitejs/vite/issues/20434)) ([259f45d](259f45d069)) - resolve server URLs before calling other listeners ([#​19981](https://redirect.github.com/vitejs/vite/issues/19981)) ([45f6443](45f6443a93)) - **ssr:** resolve externalized packages with `resolve.externalConditions` and add `module-sync` to default external condition ([#​20409](https://redirect.github.com/vitejs/vite/issues/20409)) ([c669c52](c669c524e6)) - **ssr:** support `import.meta.resolve` in module runner ([#​20260](https://redirect.github.com/vitejs/vite/issues/20260)) ([62835f7](62835f7c06)) ##### Bug Fixes - **css:** avoid warnings for `image-set` containing `__VITE_ASSET__` ([#​20520](https://redirect.github.com/vitejs/vite/issues/20520)) ([f1a2635](f1a2635e69)) - **css:** empty CSS entry points should generate CSS files, not JS files ([#​20518](https://redirect.github.com/vitejs/vite/issues/20518)) ([bac9f3e](bac9f3ecf8)) - **dev:** denied request stalled when requested concurrently ([#​20503](https://redirect.github.com/vitejs/vite/issues/20503)) ([64a52e7](64a52e70d9)) - **manifest:** initialize `entryCssAssetFileNames` as an empty Set ([#​20542](https://redirect.github.com/vitejs/vite/issues/20542)) ([6a46cda](6a46cdac5d)) - skip prepareOutDirPlugin in workers ([#​20556](https://redirect.github.com/vitejs/vite/issues/20556)) ([97d5111](97d5111645)) - **asset:** only watch existing files for `new URL(, import.meta.url)` ([#​20507](https://redirect.github.com/vitejs/vite/issues/20507)) ([1b211fd](1b211fd1be)) - **client:** keep ping on WS constructor error ([#​20512](https://redirect.github.com/vitejs/vite/issues/20512)) ([3676da5](3676da5bc5)) - **deps:** update all non-major dependencies ([#​20537](https://redirect.github.com/vitejs/vite/issues/20537)) ([fc9a9d3](fc9a9d3f14)) - don't resolve as relative for specifiers starting with a dot ([#​20528](https://redirect.github.com/vitejs/vite/issues/20528)) ([c5a10ec](c5a10ec004)) - **html:** allow control character in input stream ([#​20483](https://redirect.github.com/vitejs/vite/issues/20483)) ([c12a4a7](c12a4a76a2)) - merge old and new `noExternal: true` correctly ([#​20502](https://redirect.github.com/vitejs/vite/issues/20502)) ([9ebe4a5](9ebe4a514a)) - **deps:** update all non-major dependencies ([#​20489](https://redirect.github.com/vitejs/vite/issues/20489)) ([f6aa04a](f6aa04a52d)) - **dev:** denied requests overly ([#​20410](https://redirect.github.com/vitejs/vite/issues/20410)) ([4be5270](4be5270b27)) - **hmr:** register css deps as `type: asset` ([#​20391](https://redirect.github.com/vitejs/vite/issues/20391)) ([7eac8dd](7eac8ddb65)) - **optimizer:** discover correct jsx runtime during scan ([#​20495](https://redirect.github.com/vitejs/vite/issues/20495)) ([10d48bb](10d48bb2e3)) - **preview:** set correct host for `resolvedUrls` ([#​20496](https://redirect.github.com/vitejs/vite/issues/20496)) ([62b3e0d](62b3e0d95c)) - **worker:** resolve WebKit compat with inline workers by deferring blob URL revocation ([#​20460](https://redirect.github.com/vitejs/vite/issues/20460)) ([8033e5b](8033e5bf8d)) ##### Performance Improvements - **client:** reduce reload debounce ([#​20429](https://redirect.github.com/vitejs/vite/issues/20429)) ([22ad43b](22ad43b4bf)) ##### Miscellaneous Chores - **deps:** update rolldown-related dependencies ([#​20536](https://redirect.github.com/vitejs/vite/issues/20536)) ([8be2787](8be278748a)) - **deps:** update dependency parse5 to v8 ([#​20490](https://redirect.github.com/vitejs/vite/issues/20490)) ([744582d](744582d018)) - format ([f20addc](f20addc536)) - stablize `cssScopeTo` ([#​19592](https://redirect.github.com/vitejs/vite/issues/19592)) ([ced1343](ced13433fb)) ##### Code Refactoring - use hook filters in the worker plugin ([#​20527](https://redirect.github.com/vitejs/vite/issues/20527)) ([958cdf2](958cdf24f8)) - extract prepareOutDir as a plugin ([#​20373](https://redirect.github.com/vitejs/vite/issues/20373)) ([2c4af1f](2c4af1f90b)) - extract resolve rollup options ([#​20375](https://redirect.github.com/vitejs/vite/issues/20375)) ([61a9778](61a97780e6)) - rewrite openchrome.applescript to JXA ([#​20424](https://redirect.github.com/vitejs/vite/issues/20424)) ([7979f9d](7979f9da55)) - use `http-proxy-3` ([#​20402](https://redirect.github.com/vitejs/vite/issues/20402)) ([26d9872](26d987232a)) - use hook filters in internal plugins ([#​20358](https://redirect.github.com/vitejs/vite/issues/20358)) ([f19c4d7](f19c4d72de)) - use hook filters in internal resolve plugin ([#​20480](https://redirect.github.com/vitejs/vite/issues/20480)) ([acd2a13](acd2a13c2d)) ##### Tests - detect ts support via `process.features` ([#​20544](https://redirect.github.com/vitejs/vite/issues/20544)) ([856d3f0](856d3f06e6)) - fix unimportant errors in test-unit ([#​20545](https://redirect.github.com/vitejs/vite/issues/20545)) ([1f23554](1f235545b1)) ##### Beta Changelogs ##### [7.1.0-beta.1](https://redirect.github.com/vitejs/vite/compare/v7.1.0-beta.0...v7.1.0-beta.1) (2025-08-05) See [7.1.0-beta.1 changelog](https://redirect.github.com/vitejs/vite/blob/v7.1.0-beta.1/packages/vite/CHANGELOG.md) ##### [7.1.0-beta.0](https://redirect.github.com/vitejs/vite/compare/v7.0.6...v7.1.0-beta.0) (2025-07-30) See [7.1.0-beta.0 changelog](https://redirect.github.com/vitejs/vite/blob/v7.1.0-beta.0/packages/vite/CHANGELOG.md) ### [`v7.0.8`](https://redirect.github.com/vitejs/vite/releases/tag/v7.0.8) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.0.7...v7.0.8) Please refer to [CHANGELOG.md](https://redirect.github.com/vitejs/vite/blob/v7.0.8/packages/vite/CHANGELOG.md) for details. ### [`v7.0.7`](https://redirect.github.com/vitejs/vite/releases/tag/v7.0.7) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.0.6...v7.0.7) Please refer to [CHANGELOG.md](https://redirect.github.com/vitejs/vite/blob/v7.0.7/packages/vite/CHANGELOG.md) for details. ### [`v7.0.6`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#710-2025-08-07) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.0.5...v7.0.6) ##### Features - support files with more than 1000 lines by `generateCodeFrame` ([#​20508](https://redirect.github.com/vitejs/vite/issues/20508)) ([e7d0b2a](e7d0b2afa5)) - add `import.meta.main` support in config (bundle config loader) ([#​20516](https://redirect.github.com/vitejs/vite/issues/20516)) ([5d3e3c2](5d3e3c2ae5)) - **optimizer:** improve dependency optimization error messages with esbuild formatMessages ([#​20525](https://redirect.github.com/vitejs/vite/issues/20525)) ([d17cfed](d17cfeda07)) - **ssr:** add `import.meta.main` support for Node.js module runner ([#​20517](https://redirect.github.com/vitejs/vite/issues/20517)) ([794a8f2](794a8f2302)) - add `future: 'warn'` ([#​20473](https://redirect.github.com/vitejs/vite/issues/20473)) ([e6aaf17](e6aaf17ca2)) - add `removeServerPluginContainer` future deprecation ([#​20437](https://redirect.github.com/vitejs/vite/issues/20437)) ([c1279e7](c1279e7540)) - add `removeServerReloadModule` future deprecation ([#​20436](https://redirect.github.com/vitejs/vite/issues/20436)) ([6970d17](6970d1740c)) - add `server.warmupRequest` to future deprecation ([#​20431](https://redirect.github.com/vitejs/vite/issues/20431)) ([8ad388a](8ad388aeab)) - add `ssrFixStacktrace` / `ssrRewriteStacktrace` to `removeSsrLoadModule` future deprecation ([#​20435](https://redirect.github.com/vitejs/vite/issues/20435)) ([8c8f587](8c8f5879ea)) - **client:** ping from SharedWorker ([#​19057](https://redirect.github.com/vitejs/vite/issues/19057)) ([5c97c22](5c97c22548)) - **dev:** add `this.fs` support ([#​20301](https://redirect.github.com/vitejs/vite/issues/20301)) ([0fe3f2f](0fe3f2f7c3)) - export `defaultExternalConditions` ([#​20279](https://redirect.github.com/vitejs/vite/issues/20279)) ([344d302](344d30243b)) - implement `removePluginHookSsrArgument` future deprecation ([#​20433](https://redirect.github.com/vitejs/vite/issues/20433)) ([95927d9](95927d9c0b)) - implement `removeServerHot` future deprecation ([#​20434](https://redirect.github.com/vitejs/vite/issues/20434)) ([259f45d](259f45d069)) - resolve server URLs before calling other listeners ([#​19981](https://redirect.github.com/vitejs/vite/issues/19981)) ([45f6443](45f6443a93)) - **ssr:** resolve externalized packages with `resolve.externalConditions` and add `module-sync` to default external condition ([#​20409](https://redirect.github.com/vitejs/vite/issues/20409)) ([c669c52](c669c524e6)) - **ssr:** support `import.meta.resolve` in module runner ([#​20260](https://redirect.github.com/vitejs/vite/issues/20260)) ([62835f7](62835f7c06)) ##### Bug Fixes - **css:** avoid warnings for `image-set` containing `__VITE_ASSET__` ([#​20520](https://redirect.github.com/vitejs/vite/issues/20520)) ([f1a2635](f1a2635e69)) - **css:** empty CSS entry points should generate CSS files, not JS files ([#​20518](https://redirect.github.com/vitejs/vite/issues/20518)) ([bac9f3e](bac9f3ecf8)) - **dev:** denied request stalled when requested concurrently ([#​20503](https://redirect.github.com/vitejs/vite/issues/20503)) ([64a52e7](64a52e70d9)) - **manifest:** initialize `entryCssAssetFileNames` as an empty Set ([#​20542](https://redirect.github.com/vitejs/vite/issues/20542)) ([6a46cda](6a46cdac5d)) - skip prepareOutDirPlugin in workers ([#​20556](https://redirect.github.com/vitejs/vite/issues/20556)) ([97d5111](97d5111645)) - **asset:** only watch existing files for `new URL(, import.meta.url)` ([#​20507](https://redirect.github.com/vitejs/vite/issues/20507)) ([1b211fd](1b211fd1be)) - **client:** keep ping on WS constructor error ([#​20512](https://redirect.github.com/vitejs/vite/issues/20512)) ([3676da5](3676da5bc5)) - **deps:** update all non-major dependencies ([#​20537](https://redirect.github.com/vitejs/vite/issues/20537)) ([fc9a9d3](fc9a9d3f14)) - don't resolve as relative for specifiers starting with a dot ([#​20528](https://redirect.github.com/vitejs/vite/issues/20528)) ([c5a10ec](c5a10ec004)) - **html:** allow control character in input stream ([#​20483](https://redirect.github.com/vitejs/vite/issues/20483)) ([c12a4a7](c12a4a76a2)) - merge old and new `noExternal: true` correctly ([#​20502](https://redirect.github.com/vitejs/vite/issues/20502)) ([9ebe4a5](9ebe4a514a)) - **deps:** update all non-major dependencies ([#​20489](https://redirect.github.com/vitejs/vite/issues/20489)) ([f6aa04a](f6aa04a52d)) - **dev:** denied requests overly ([#​20410](https://redirect.github.com/vitejs/vite/issues/20410)) ([4be5270](4be5270b27)) - **hmr:** register css deps as `type: asset` ([#​20391](https://redirect.github.com/vitejs/vite/issues/20391)) ([7eac8dd](7eac8ddb65)) - **optimizer:** discover correct jsx runtime during scan ([#​20495](https://redirect.github.com/vitejs/vite/issues/20495)) ([10d48bb](10d48bb2e3)) - **preview:** set correct host for `resolvedUrls` ([#​20496](https://redirect.github.com/vitejs/vite/issues/20496)) ([62b3e0d](62b3e0d95c)) - **worker:** resolve WebKit compat with inline workers by deferring blob URL revocation ([#​20460](https://redirect.github.com/vitejs/vite/issues/20460)) ([8033e5b](8033e5bf8d)) ##### Performance Improvements - **client:** reduce reload debounce ([#​20429](https://redirect.github.com/vitejs/vite/issues/20429)) ([22ad43b](22ad43b4bf)) ##### Miscellaneous Chores - **deps:** update rolldown-related dependencies ([#​20536](https://redirect.github.com/vitejs/vite/issues/20536)) ([8be2787](8be278748a)) - **deps:** update dependency parse5 to v8 ([#​20490](https://redirect.github.com/vitejs/vite/issues/20490)) ([744582d](744582d018)) - format ([f20addc](f20addc536)) - stablize `cssScopeTo` ([#​19592](https://redirect.github.com/vitejs/vite/issues/19592)) ([ced1343](ced13433fb)) ##### Code Refactoring - use hook filters in the worker plugin ([#​20527](https://redirect.github.com/vitejs/vite/issues/20527)) ([958cdf2](958cdf24f8)) - extract prepareOutDir as a plugin ([#​20373](https://redirect.github.com/vitejs/vite/issues/20373)) ([2c4af1f](2c4af1f90b)) - extract resolve rollup options ([#​20375](https://redirect.github.com/vitejs/vite/issues/20375)) ([61a9778](61a97780e6)) - rewrite openchrome.applescript to JXA ([#​20424](https://redirect.github.com/vitejs/vite/issues/20424)) ([7979f9d](7979f9da55)) - use `http-proxy-3` ([#​20402](https://redirect.github.com/vitejs/vite/issues/20402)) ([26d9872](26d987232a)) - use hook filters in internal plugins ([#​20358](https://redirect.github.com/vitejs/vite/issues/20358)) ([f19c4d7](f19c4d72de)) - use hook filters in internal resolve plugin ([#​20480](https://redirect.github.com/vitejs/vite/issues/20480)) ([acd2a13](acd2a13c2d)) ##### Tests - detect ts support via `process.features` ([#​20544](https://redirect.github.com/vitejs/vite/issues/20544)) ([856d3f0](856d3f06e6)) - fix unimportant errors in test-unit ([#​20545](https://redirect.github.com/vitejs/vite/issues/20545)) ([1f23554](1f235545b1)) ##### Beta Changelogs ##### [7.1.0-beta.1](https://redirect.github.com/vitejs/vite/compare/v7.1.0-beta.0...v7.1.0-beta.1) (2025-08-05) See [7.1.0-beta.1 changelog](https://redirect.github.com/vitejs/vite/blob/v7.1.0-beta.1/packages/vite/CHANGELOG.md) ##### [7.1.0-beta.0](https://redirect.github.com/vitejs/vite/compare/v7.0.6...v7.1.0-beta.0) (2025-07-30) See [7.1.0-beta.0 changelog](https://redirect.github.com/vitejs/vite/blob/v7.1.0-beta.0/packages/vite/CHANGELOG.md) ### [`v7.0.5`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-705-2025-07-17-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.0.4...v7.0.5) ##### Bug Fixes - **deps:** update all non-major dependencies ([#​20406](https://redirect.github.com/vitejs/vite/issues/20406)) ([1a1cc8a](1a1cc8a435)) - remove special handling for `Accept: text/html` ([#​20376](https://redirect.github.com/vitejs/vite/issues/20376)) ([c9614b9](c9614b9c37)) - watch assets referenced by `new URL(, import.meta.url)` ([#​20382](https://redirect.github.com/vitejs/vite/issues/20382)) ([6bc8bf6](6bc8bf634d)) ##### Miscellaneous Chores - **deps:** update dependency rolldown to ^1.0.0-beta.27 ([#​20405](https://redirect.github.com/vitejs/vite/issues/20405)) ([1165667](1165667b27)) ##### Code Refactoring - use `foo.endsWith("bar")` instead of `/bar$/.test(foo)` ([#​20413](https://redirect.github.com/vitejs/vite/issues/20413)) ([862e192](862e192d21)) ### [`v7.0.4`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-704-2025-07-10-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.0.3...v7.0.4) ##### Bug Fixes - allow resolving bare specifiers to relative paths for entries ([#​20379](https://redirect.github.com/vitejs/vite/issues/20379)) ([324669c](324669c2d8)) ##### Build System - remove `@oxc-project/runtime` devDep ([#​20389](https://redirect.github.com/vitejs/vite/issues/20389)) ([5e29602](5e29602f6f)) ### [`v7.0.3`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-703-2025-07-08-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.0.2...v7.0.3) ##### Bug Fixes - **client:** protect against window being defined but addEv undefined ([#​20359](https://redirect.github.com/vitejs/vite/issues/20359)) ([31d1467](31d1467cf0)) - **define:** replace optional values ([#​20338](https://redirect.github.com/vitejs/vite/issues/20338)) ([9465ae1](9465ae1378)) - **deps:** update all non-major dependencies ([#​20366](https://redirect.github.com/vitejs/vite/issues/20366)) ([43ac73d](43ac73da27)) ##### Miscellaneous Chores - **deps:** update dependency dotenv to v17 ([#​20325](https://redirect.github.com/vitejs/vite/issues/20325)) ([45040d4](45040d4807)) - **deps:** update dependency rolldown to ^1.0.0-beta.24 ([#​20365](https://redirect.github.com/vitejs/vite/issues/20365)) ([5ab25e7](5ab25e73a2)) - use `n/prefer-node-protocol` rule ([#​20368](https://redirect.github.com/vitejs/vite/issues/20368)) ([38bb268](38bb268cde)) ##### Code Refactoring - minor changes to reduce diff between normal Vite and rolldown-vite ([#​20354](https://redirect.github.com/vitejs/vite/issues/20354)) ([2e8050e](2e8050e4cd)) ### [`v7.0.2`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-702-2025-07-04-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.0.1...v7.0.2) ##### Bug Fixes - **css:** resolve relative paths in sass, revert [#​20300](https://redirect.github.com/vitejs/vite/issues/20300) ([#​20349](https://redirect.github.com/vitejs/vite/issues/20349)) ([db8bd41](db8bd412a8)) ### [`v7.0.1`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-701-2025-07-03-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v7.0.0...v7.0.1) ##### Bug Fixes - **css:** skip resolving resolved paths in sass ([#​20300](https://redirect.github.com/vitejs/vite/issues/20300)) ([ac528a4](ac528a44c3)) - **deps:** update all non-major dependencies ([#​20324](https://redirect.github.com/vitejs/vite/issues/20324)) ([3e81af3](3e81af38a8)) - **types:** add a global interface for Worker ([#​20243](https://redirect.github.com/vitejs/vite/issues/20243)) ([37bdfc1](37bdfc18f4)) ##### Miscellaneous Chores - **deps:** update rolldown-related dependencies ([#​20323](https://redirect.github.com/vitejs/vite/issues/20323)) ([30d2f1b](30d2f1b38c)) - fix typos and grammatical errors across documentation and comments ([#​20337](https://redirect.github.com/vitejs/vite/issues/20337)) ([c1c951d](c1c951dcc3)) - group commits by category in changelog ([#​20310](https://redirect.github.com/vitejs/vite/issues/20310)) ([41e83f6](41e83f62b1)) - rearrange 7.0 changelog ([#​20280](https://redirect.github.com/vitejs/vite/issues/20280)) ([eafd28a](eafd28ac88)) ### [`v7.0.0`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#700-2025-06-24) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v6.4.1...v7.0.0)  Today, we're excited to announce the release of the next Vite major: - **[Vite 7.0 announcement blog post](https://vite.dev/blog/announcing-vite7.html)** - [Docs](https://vite.dev/) (translations: [简体中文](https://cn.vite.dev/), [日本語](https://ja.vite.dev/), [Español](https://es.vite.dev/), [Português](https://pt.vite.dev/), [한국어](https://ko.vite.dev/), [Deutsch](https://de.vite.dev/), [فارسی](https://fa.vite.dev/)) - [Migration Guide](https://vite.dev/guide/migration.html) ##### ⚠ BREAKING CHANGES - **ssr:** don't access `Object` variable in ssr transformed code ([#​19996](https://redirect.github.com/vitejs/vite/issues/19996)) - remove `experimental.skipSsrTransform` option ([#​20038](https://redirect.github.com/vitejs/vite/issues/20038)) - remove `HotBroadcaster` ([#​19988](https://redirect.github.com/vitejs/vite/issues/19988)) - **css:** always use sass compiler API ([#​19978](https://redirect.github.com/vitejs/vite/issues/19978)) - bump `build.target` and name it `baseline-widely-available` ([#​20007](https://redirect.github.com/vitejs/vite/issues/20007)) - bump required node version to 20.19+, 22.12+ and remove cjs build ([#​20032](https://redirect.github.com/vitejs/vite/issues/20032)) - **css:** remove sass legacy API support ([#​19977](https://redirect.github.com/vitejs/vite/issues/19977)) - remove deprecated `HotBroadcaster` related types ([#​19987](https://redirect.github.com/vitejs/vite/issues/19987)) - remove deprecated no-op type only properties ([#​19985](https://redirect.github.com/vitejs/vite/issues/19985)) - remove node 18 support ([#​19972](https://redirect.github.com/vitejs/vite/issues/19972)) - remove deprecated hook-level `enforce`/`transform` from `transformIndexHtml` hook ([#​19349](https://redirect.github.com/vitejs/vite/issues/19349)) - remove deprecated splitVendorChunkPlugin ([#​19255](https://redirect.github.com/vitejs/vite/issues/19255)) ##### Features - **types:** use terser types from terser package ([#​20274](https://redirect.github.com/vitejs/vite/issues/20274)) ([a5799fa](a5799fa74c)) - apply some middlewares before `configurePreviewServer` hook ([#​20224](https://redirect.github.com/vitejs/vite/issues/20224)) ([b989c42](b989c42cf8)) - apply some middlewares before `configureServer` hook ([#​20222](https://redirect.github.com/vitejs/vite/issues/20222)) ([f5cc4c0](f5cc4c0ded)) - add base option to import.meta.glob ([#​20163](https://redirect.github.com/vitejs/vite/issues/20163)) ([253d6c6](253d6c6df2)) - add `this.meta.viteVersion` ([#​20088](https://redirect.github.com/vitejs/vite/issues/20088)) ([f55bf41](f55bf41e91)) - allow passing down resolved config to vite's `createServer` ([#​19894](https://redirect.github.com/vitejs/vite/issues/19894)) ([c1ae9bd](c1ae9bd4a0)) - buildApp hook ([#​19971](https://redirect.github.com/vitejs/vite/issues/19971)) ([5da659d](5da659de90)) - **build:** provide names for asset entrypoints ([#​19912](https://redirect.github.com/vitejs/vite/issues/19912)) ([c4e01dc](c4e01dc5ab)) - bump `build.target` and name it `baseline-widely-available` ([#​20007](https://redirect.github.com/vitejs/vite/issues/20007)) ([4a8aa82](4a8aa82556)) - **client:** support opening fileURL in editor ([#​20040](https://redirect.github.com/vitejs/vite/issues/20040)) ([1bde4d2](1bde4d2524)) - make PluginContext available for Vite-specific hooks ([#​19936](https://redirect.github.com/vitejs/vite/issues/19936)) ([7063839](7063839d47)) - resolve environments plugins at config time ([#​20120](https://redirect.github.com/vitejs/vite/issues/20120)) ([f6a28d5](f6a28d5f79)) - stabilize `css.preprocessorMaxWorkers` and default to `true` ([#​19992](https://redirect.github.com/vitejs/vite/issues/19992)) ([70aee13](70aee139ea)) - stabilize `optimizeDeps.noDiscovery` ([#​19984](https://redirect.github.com/vitejs/vite/issues/19984)) ([6d2dcb4](6d2dcb494d)) ##### Bug Fixes - **deps:** update all non-major dependencies ([#​20271](https://redirect.github.com/vitejs/vite/issues/20271)) ([6b64d63](https://redirect.github.com/vitejs/vite/commit/6b64d63d700154de2c00270 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNDMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE0My4xIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>