Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Bumps vite from 7.0.6 to 7.1.7.

Release notes

Sourced from vite's releases.

v7.1.7

Please refer to CHANGELOG.md for details.

v7.1.6

Please refer to CHANGELOG.md for details.

v7.1.5

Please refer to CHANGELOG.md for details.

v7.1.4

Please refer to CHANGELOG.md for details.

v7.1.3

Please refer to CHANGELOG.md for details.

create-vite@7.1.3

Please refer to CHANGELOG.md for details.

v7.1.2

Please refer to CHANGELOG.md for details.

create-vite@7.1.2

Please refer to CHANGELOG.md for details.

v7.1.1

Please refer to CHANGELOG.md for details.

create-vite@7.1.1

Please refer to CHANGELOG.md for details.

plugin-legacy@7.1.0

Please refer to CHANGELOG.md for details.

create-vite@7.1.0

Please refer to CHANGELOG.md for details.

v7.1.0

Please refer to CHANGELOG.md for details.

v7.1.0-beta.1

Please refer to CHANGELOG.md for details.

v7.1.0-beta.0

Please refer to CHANGELOG.md for details.

v7.0.7

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.1.7 (2025-09-22)

Bug Fixes

  • build: fix ssr environment emitAssets: true when sharedConfigBuild: true (#20787) (4c4583c)
  • client: use CSP nonce when rendering error overlay (#20791) (9bc9d12)
  • deps: update all non-major dependencies (#20811) (9f2247c)
  • glob: handle glob imports from folders starting with dot (#20800) (105abe8)
  • hmr: trigger prune event when import is removed from non hmr module (#20768) (9f32b1d)
  • hmr: wait for import.meta.hot.prune callbacks to complete before running other HMRs (#20698) (98a3484)

7.1.6 (2025-09-18)

Bug Fixes

  • deps: update all non-major dependencies (#20773) (88af2ae)
  • esbuild: inject esbuild helper functions with minified $ variables correctly (#20761) (7e8e004)
  • fallback terser to main thread when nameCache is provided (#20750) (a679a64)
  • types: strict env typings fail when skipLibCheck is false (#20755) (cc54e29)

Miscellaneous Chores

7.1.5 (2025-09-08)

Bug Fixes

7.1.4 (2025-09-01)

Bug Fixes

Miscellaneous Chores

  • remove unused constants entry from rolldown.config.ts (#20710) (537fcf9)

Code Refactoring

  • remove unnecessary minify parameter from finalizeCss (#20701) (8099582)

7.1.3 (2025-08-19)

Features

  • cli: add Node.js version warning for unsupported versions (#20638) (a1be1bf)

... (truncated)

Commits
  • 693d255 release: v7.1.7
  • 98a3484 fix(hmr): wait for import.meta.hot.prune callbacks to complete before runni...
  • 9f32b1d fix(hmr): trigger prune event when import is removed from non hmr module (#20...
  • 9f2247c fix(deps): update all non-major dependencies (#20811)
  • 105abe8 fix(glob): handle glob imports from folders starting with dot (#20800)
  • 4c4583c fix(build): fix ssr environment emitAssets: true when `sharedConfigBuild: t...
  • 9bc9d12 fix(client): use CSP nonce when rendering error overlay (#20791)
  • 54377f7 release: v7.1.6
  • 88af2ae fix(deps): update all non-major dependencies (#20773)
  • d785e72 chore(deps): update rolldown-related dependencies (#20772)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.0.6 to 7.1.7.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.1.7/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.1.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 1, 2025
@dependabot dependabot bot requested a review from basmasking as a code owner October 1, 2025 23:03
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 1, 2025
@dependabot dependabot bot requested a review from petermasking as a code owner October 1, 2025 23:03
@dependabot dependabot bot added the javascript Pull requests that update Javascript code label Oct 1, 2025
Copy link

coderabbitai bot commented Oct 1, 2025

Summary by CodeRabbit

  • Chores
    • Upgraded multiple dependencies to newer versions to improve stability, performance, and security.
  • Bug Fixes
    • Improved form validation accuracy for dates, UUIDs, emails, and URLs.
    • More consistent handling of required fields and clearer error messages.
  • Refactor
    • Updated the validation layer to modern APIs for better long-term compatibility without changing user-facing behavior.

Walkthrough

Dependency versions updated in package.json. Zod-based validation implementation migrated to Zod v4 APIs and core types, adjusting builder methods and internal type signatures accordingly.

Changes

Cohort / File(s) Summary
Dependency version bumps
package.json
Pinned and upgraded multiple dependencies/devDependencies (e.g., dayjs, minio, mongodb, openid-client, react, react-dom, react-router-dom, zod, TS/Vite/tooling). Updated optional dependency @rollup/rollup-linux-x64-gnu. No structural/package scripts changes indicated.
Zod v4 migration (types and builders)
src/integrations/validation/implementations/zod/Zod.ts
Switched to Zod v4 core types: replaced ZodIssue, ZodType, ZodUnrecognizedKeysIssue with $ZodIssue, $ZodIssueUnrecognizedKeys, and z.ZodTypeAny. Updated builder APIs: z.iso.datetime(), z.uuid(), z.email(), z.url(). Adjusted method signatures and internal usage to new types.

Sequence Diagram(s)

sequenceDiagram
  autonumber
  participant Caller
  participant Validator as ZodValidator (v4)
  participant Zod as zod/v4

  Caller->>Validator: validate(value, schema)
  Validator->>Zod: build schema (z.uuid()/z.email()/z.url()/z.iso.datetime())
  Zod-->>Validator: parse result or $ZodIssue[]
  alt success
    Validator-->>Caller: OK (validated value)
  else validation errors
    Validator->>Validator: map $ZodIssue(s) incl. unrecognized keys
    Validator-->>Caller: error messages map
  end
Loading

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Suggested reviewers

  • petermasking

Poem

A rabbit taps its keys with cheer,
New Zod hops in, v4 is here!
URLs, UUIDs aligned just right,
Issues mapped in clearer light.
Packages trimmed, versions tight—
I twitch my nose at tidy sight.
Onward we bound, validate tonight! 🐇✨

Pre-merge checks and finishing touches

❌ Failed checks (2 warnings)
Check name Status Explanation Resolution
Title Check ⚠️ Warning The title is focused solely on bumping Vite from 7.0.6 to 7.1.7, but the changeset includes numerous other dependency upgrades and significant updates to the Zod validation implementation, so it does not accurately summarize the primary scope of the PR. Update the title to reflect the full scope of changes, such as “chore: bump dependencies and migrate Zod validation to v4 types,” ensuring it concisely captures the major updates.
Description Check ⚠️ Warning The description does not follow the repository’s template because it lacks a “Fixes #” reference, the required “Changes proposed in this pull request:” section with bullet points, and the “@MaskingTechnology/comify” team mention. Revise the PR description to include the “Fixes #” line, add a bulleted list under “Changes proposed in this pull request:”, and append “@MaskingTechnology/comify” at the end to align with the template.
✅ Passed checks (1 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changes. Docstring coverage check skipped.
✨ Finishing touches
  • 📝 Generate docstrings
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch dependabot-npm_and_yarn-vite-7.1.7

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between e4659ad and 39e201a.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (2)
  • package.json (1 hunks)
  • src/integrations/validation/implementations/zod/Zod.ts (5 hunks)
🧰 Additional context used
🧠 Learnings (2)
📓 Common learnings
Learnt from: basmasking
PR: MaskingTechnology/comify#428
File: src/domain/post/create/types.ts:6-6
Timestamp: 2025-07-22T20:50:22.336Z
Learning: The Comify application uses a custom validation architecture where domain validation logic is decoupled from external validation libraries through an integrations layer. The current implementation uses Zod (src/integrations/validation/implementations/zod/Zod.ts) but can be easily switched to other validation libraries. Domain validation requirements remain consistent regardless of the underlying validation library, with validation schemas defined using custom validation functions like requiredIdValidation.
📚 Learning: 2025-07-22T20:50:22.336Z
Learnt from: basmasking
PR: MaskingTechnology/comify#428
File: src/domain/post/create/types.ts:6-6
Timestamp: 2025-07-22T20:50:22.336Z
Learning: The Comify application uses a custom validation architecture where domain validation logic is decoupled from external validation libraries through an integrations layer. The current implementation uses Zod (src/integrations/validation/implementations/zod/Zod.ts) but can be easily switched to other validation libraries. Domain validation requirements remain consistent regardless of the underlying validation library, with validation schemas defined using custom validation functions like requiredIdValidation.

Applied to files:

  • src/integrations/validation/implementations/zod/Zod.ts
🔇 Additional comments (1)
package.json (1)

71-71: Confirm the intended Vite target.

The PR title/release notes say “bump vite from 7.0.6 to 7.1.7”, but package.json pins vite to 7.1.9. Please confirm whether 7.1.9 is the desired target (and update the PR description/notes accordingly) or adjust the dependency back to 7.1.7 to match the stated goal.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Removed a lot of specific typing, as the $ZodType doesn't support .optional() anymore, and it became a mess to get all the new types correctly and working.
@basmasking
Copy link
Member

@coderabbitai review

Copy link

coderabbitai bot commented Oct 3, 2025

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

Copy link

sonarqubecloud bot commented Oct 3, 2025

@basmasking basmasking changed the title npm: bump vite from 7.0.6 to 7.1.7 chore(deps): october update Oct 3, 2025
@petermasking petermasking merged commit 1e68934 into main Oct 3, 2025
7 checks passed
@petermasking petermasking deleted the dependabot-npm_and_yarn-vite-7.1.7 branch October 3, 2025 10:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants