chore(deps): bump vite from 6.3.5 to 7.1.11 by dependabot[bot] · Pull Request #127 · codecov/example-javascript · GitHub

Bumps vite from 6.3.5 to 7.1.11.

Release notes

v7.1.11

Please refer to CHANGELOG.md for details.

v7.1.10

Please refer to CHANGELOG.md for details.

v7.1.9

Please refer to CHANGELOG.md for details.

v7.1.8

Please refer to CHANGELOG.md for details.

v7.1.7

Please refer to CHANGELOG.md for details.

v7.1.6

Please refer to CHANGELOG.md for details.

v7.1.5

Please refer to CHANGELOG.md for details.

v7.1.4

Please refer to CHANGELOG.md for details.

v7.1.3

Please refer to CHANGELOG.md for details.

create-vite@7.1.3

Please refer to CHANGELOG.md for details.

v7.1.2

Please refer to CHANGELOG.md for details.

create-vite@7.1.2

Please refer to CHANGELOG.md for details.

v7.1.1

Please refer to CHANGELOG.md for details.

create-vite@7.1.1

Please refer to CHANGELOG.md for details.

plugin-legacy@7.1.0

Please refer to CHANGELOG.md for details.

create-vite@7.1.0

Please refer to CHANGELOG.md for details.

v7.1.0

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

7.1.11 (2025-10-20)

Bug Fixes

dev: trim trailing slash before server.fs.deny check (#20968) (f479cc5)

Miscellaneous Chores

deps: update all non-major dependencies (#20966) (6fb41a2)

Code Refactoring

use subpath imports for types module reference (#20921) (d0094af)

Build System

remove cjs reference in files field (#20945) (ef411ce)

remove hash from built filenames (#20946) (a817307)

7.1.10 (2025-10-14)

Bug Fixes

css: avoid duplicate style for server rendered stylesheet link and client inline style during dev (#20767) (3a92bc7)

css: respect emitAssets when cssCodeSplit=false (#20883) (d3e7eee)

deps: update all non-major dependencies (879de86)

deps: update all non-major dependencies (#20894) (3213f90)

dev: allow aliases starting with // (#20760) (b95fa2a)

dev: remove timestamp query consistently (#20887) (6537d15)

esbuild: inject esbuild helpers correctly for esbuild 0.25.9+ (#20906) (446eb38)

normalize path before calling fileToBuiltUrl (#20898) (73b6d24)

preserve original sourcemap file field when combining sourcemaps (#20926) (c714776)

Documentation

correct WebSocket spelling (#20890) (29e98dc)

Miscellaneous Chores

deps: update rolldown-related dependencies (#20923) (a5e3b06)

7.1.9 (2025-10-03)

Reverts

server: drain stdin when not interactive (#20885) (12d72b0)

7.1.8 (2025-10-02)

Bug Fixes

css: improve url escape characters handling (#20847) (24a61a3)

deps: update all non-major dependencies (#20855) (788a183)

deps: update artichokie to 0.4.2 (#20864) (e670799)

... (truncated)

Commits

8b69c9e release: v7.1.11
f479cc5 fix(dev): trim trailing slash before server.fs.deny check (#20968)
6fb41a2 chore(deps): update all non-major dependencies (#20966)
a817307 build: remove hash from built filenames (#20946)
ef411ce build: remove cjs reference in files field (#20945)
d0094af refactor: use subpath imports for types module reference (#20921)
ed4a0dc release: v7.1.10
c714776 fix: preserve original sourcemap file field when combining sourcemaps (#20926)
446eb38 fix(esbuild): inject esbuild helpers correctly for esbuild 0.25.9+ (#20906)
879de86 fix(deps): update all non-major dependencies
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.3.5 to 7.1.11. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.1.11/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 7.1.11 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (8f437f5) to head (ff6bb61).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##              main      #127   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            1         1           
  Lines            8         8           
  Branches         5         5           
=========================================
  Hits             8         8

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Bug: The Vite 7.1.11 upgrade requires Node 20+, but the CI workflow runs on Node 18, which will cause npm install to fail.
(Severity: Critical 0.85 | Confidence: 1.00)

🔍 Detailed Analysis

The GitHub Actions workflow is configured to use Node 18. The update to Vite 7.1.11 introduces a stricter engine requirement of Node ^20.19.0 || >=22.12.0. When npm install is executed in the CI environment, npm will detect this version mismatch and raise an EBADENGINE error. This will cause the dependency installation to fail, breaking the entire CI/CD pipeline.

💡 Suggested Fix

Update the GitHub Actions workflow (ci.yml) to use a Node.js version compatible with Vite 7.1.11, such as version 20 or 22. Additionally, consider adding an engines field to package.json to enforce the Node version requirement across all environments.

🤖 Prompt for AI Agent

Fix this bug. In package-lock.json at line 1887: The GitHub Actions workflow is
configured to use Node 18. The update to Vite 7.1.11 introduces a stricter engine
requirement of Node `^20.19.0 || &gt;=22.12.0`. When `npm install` is executed in the CI
environment, npm will detect this version mismatch and raise an `EBADENGINE` error. This
will cause the dependency installation to fail, breaking the entire CI/CD pipeline.

Did we get this right? 👍 / 👎 to inform future reviews.

Superseded by #133.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2025

dependabot Bot mentioned this pull request Oct 21, 2025

chore(deps): bump vite from 6.3.5 to 7.1.5 #126

Closed

seer-by-sentry Bot reviewed Oct 21, 2025

View reviewed changes

dependabot Bot closed this Apr 7, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/vite-7.1.11 branch April 7, 2026 02:53

                     "engines": {
-                      "node": "^18.0.0 || ^20.0.0 || >=22.0.0"
+                      "node": "^20.19.0 || >=22.12.0"
                     },

chore(deps): bump vite from 6.3.5 to 7.1.11 by dependabot[bot] · Pull Request #127 · codecov/example-javascript · GitHub

Uh oh!

chore(deps): bump vite from 6.3.5 to 7.1.11 - #127

chore(deps): bump vite from 6.3.5 to 7.1.11#127
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vite-7.1.11

dependabot Bot commented on behalf of github Oct 21, 2025

Uh oh!

sentry Bot commented Oct 21, 2025 •
edited
Loading

Uh oh!

Uh oh!

seer-by-sentry Bot Oct 21, 2025

Uh oh!

dependabot Bot commented on behalf of github Apr 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

chore(deps): bump vite from 6.3.5 to 7.1.11 by dependabot[bot] · Pull Request #127 · codecov/example-javascript · GitHub

Uh oh!

chore(deps): bump vite from 6.3.5 to 7.1.11 - #127

chore(deps): bump vite from 6.3.5 to 7.1.11#127dependabot[bot] wants to merge 1 commit intomaincodecov/example-javascript:mainfrom dependabot/npm_and_yarn/vite-7.1.11codecov/example-javascript:dependabot/npm_and_yarn/vite-7.1.11Copy head branch name to clipboard

Conversation

dependabot Bot commented on behalf of github Oct 21, 2025

v7.1.11

v7.1.10

v7.1.9

v7.1.8

v7.1.7

v7.1.6

v7.1.5

v7.1.4

v7.1.3

create-vite@7.1.3

v7.1.2

create-vite@7.1.2

v7.1.1

create-vite@7.1.1

plugin-legacy@7.1.0

create-vite@7.1.0

v7.1.0

7.1.11 (2025-10-20)

Bug Fixes

Miscellaneous Chores

Code Refactoring

Build System

7.1.10 (2025-10-14)

Bug Fixes

Documentation

Miscellaneous Chores

7.1.9 (2025-10-03)

Reverts

7.1.8 (2025-10-02)

Bug Fixes

Uh oh!

sentry Bot commented Oct 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

seer-by-sentry Bot Oct 21, 2025

Choose a reason for hiding this comment

Uh oh!

dependabot Bot commented on behalf of github Apr 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

chore(deps): bump vite from 6.3.5 to 7.1.11#127
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vite-7.1.11

sentry Bot commented Oct 21, 2025 •
edited
Loading