chore(deps): bump esbuild, @sveltejs/vite-plugin-svelte, @vitejs/plugin-vue, vite and vite-plugin-static-copy in /system/templates/base by dependabot[bot] · Pull Request #67 · 2pisoftware/cosine

dependabot · 2026-06-13T19:16:04Z

Removes esbuild. It's no longer used after updating ancestor dependencies esbuild, @sveltejs/vite-plugin-svelte, @vitejs/plugin-vue, vite and vite-plugin-static-copy. These dependencies need to be updated together.

Removes esbuild

Updates @sveltejs/vite-plugin-svelte from 3.1.1 to 7.1.2

Release notes

Sourced from @sveltejs/vite-plugin-svelte's releases.

@sveltejs/vite-plugin-svelte@7.1.2

Patch Changes

fix: correctly resolve compiled CSS on the server for dependencies with Svelte files (#1342)

@sveltejs/vite-plugin-svelte@7.1.1

Patch Changes

fix: pass typescript.onlyRemoveTypeImports to transformWithOxc in vitePreprocess so that value imports are not dropped when they are only referenced in Svelte template markup (#1326)

fix: correctly resolve compiled CSS for optimised Svelte dependencies on the server (#1336)

@sveltejs/vite-plugin-svelte@7.1.0

Minor Changes

feat: enable optimizer for server environments during dev (#1328)

@sveltejs/vite-plugin-svelte@7.0.0

Major Changes

breaking(deps): require vite 8 (#1266)

breaking(options): remove deprecated options (#1274)

vitePlugin.hot in svelte.config.js use compilerOptions.hmr instead

vitePlugin.ignorePluginPreprocessors in svelte.config.js no longer needed

api.idFilter of vite-plugin-svelte:api use api.filter instead

plugin.api.sveltePreprocess of other vite plugins Update affected plugins to a newer version or remove them. See docs for more information.

breaking(dev): no longer overrides compilerOptions.cssHash because Svelte now produces a stable css hash by itself (#1271)

breaking(inspector): integrate vite-plugin-svelte-inspector into vite-plugin-svelte to avoid circular dependency (#1270)

breaking(deps): require svelte 5.46.4 or later (#1271)

Patch Changes

chore: upgrade vitefu to compatible peer dependency range (#1286)

remove author field from package.json (#1281)

... (truncated)

Changelog

Sourced from @sveltejs/vite-plugin-svelte's changelog.

7.1.2

Patch Changes

fix: correctly resolve compiled CSS on the server for dependencies with Svelte files (#1342)

7.1.1

Patch Changes

fix: pass typescript.onlyRemoveTypeImports to transformWithOxc in vitePreprocess so that value imports are not dropped when they are only referenced in Svelte template markup (#1326)

fix: correctly resolve compiled CSS for optimised Svelte dependencies on the server (#1336)

7.1.0

Minor Changes

feat: enable optimizer for server environments during dev (#1328)

7.0.0

Major Changes

breaking(deps): require vite 8 (#1266)

breaking(options): remove deprecated options (#1274)

vitePlugin.hot in svelte.config.js use compilerOptions.hmr instead

vitePlugin.ignorePluginPreprocessors in svelte.config.js no longer needed

api.idFilter of vite-plugin-svelte:api use api.filter instead

plugin.api.sveltePreprocess of other vite plugins Update affected plugins to a newer version or remove them. See docs for more information.

breaking(dev): no longer overrides compilerOptions.cssHash because Svelte now produces a stable css hash by itself (#1271)

breaking(inspector): integrate vite-plugin-svelte-inspector into vite-plugin-svelte to avoid circular dependency (#1270)

breaking(deps): require svelte 5.46.4 or later (#1271)

Patch Changes

... (truncated)

Commits

471f822 Version Packages (#1344)
1a9bc08 fix: always retrieve CSS using component filename first (#1342)
508d91b Version Packages (#1339)
990e58c fix: correctly resolve Svelte CSS on the server during development (#1336)
d5458a9 fix: restore value imports stripped by oxc in script preprocessing (#1326)
1c85126 Version Packages (#1331)
1a4d225 feat: enable optimizer for server environments during dev (#1328)
d91be5f fix: use correct pnpm catalog syntax
4d3afb4 chore: fix audit CI (#1327)
8b3687b use modern JSDoc imports (#1309)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @sveltejs/vite-plugin-svelte since your current version.

Updates @vitejs/plugin-vue from 5.1.4 to 6.0.7

Release notes

Sourced from @vitejs/plugin-vue's releases.

plugin-vue@6.0.7

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.6

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.5

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.4

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.3

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.2

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.1

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.0

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.0-beta.2

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.0-beta.1

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.0-beta.0

Please refer to CHANGELOG.md for details.

plugin-vue@5.2.4

Please refer to CHANGELOG.md for details.

plugin-vue@5.2.3

Please refer to CHANGELOG.md for details.

plugin-vue@5.2.2

Please refer to CHANGELOG.md for details.

plugin-vue@5.2.1

Please refer to CHANGELOG.md for details.

plugin-vue@5.2.0

Please refer to CHANGELOG.md for details.

plugin-vue@5.1.5

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from @vitejs/plugin-vue's changelog.

6.0.7 (2026-05-15)

Features

use carets for @rolldown/pluginutils version (#776) (941b651)

Bug Fixes

deps: update all non-major dependencies (#762) (9e825b8)

deps: update all non-major dependencies (#774) (77dc8bc)

6.0.6 (2026-04-13)

Features

plugin-vue: propagate multiRoot for template-only vapor components (#745) (9e07ae9)

Bug Fixes

deps: update all non-major dependencies (#738) (050c996)

Miscellaneous Chores

deps: update dependency rollup to ^4.59.0 (#749) (a0e1ef8)

remove unused deps (#760) (6d834d8)

6.0.5 (2026-03-12)

Miscellaneous Chores

remove Vite 8 beta from supported range (#746) (b3f23e4)

6.0.4 (2026-02-02)

Bug Fixes

deps: update all non-major dependencies (#709) (924b28e)

deps: update all non-major dependencies (#722) (8a95809)

deps: update all non-major dependencies (#726) (e69d751)

Miscellaneous Chores

add metadata for vite-plugin-registry (#730) (239eb6a)

deps: update dependency rollup to ^4.57.1 (#733) (cd0c8a8)

deps: update upstream (#727) (fa3ea0e)

6.0.3 (2025-12-12)

Features

add Vite 8 support (2080d41)

Bug Fixes

deps: update all non-major dependencies (#707) (799f419)

... (truncated)

Commits

f93aceb release: plugin-vue@6.0.7
941b651 feat: use carets for @rolldown/pluginutils version (#776)
77dc8bc fix(deps): update all non-major dependencies (#774)
9e825b8 fix(deps): update all non-major dependencies (#762)
51dbf4b release: plugin-vue@6.0.6
9e07ae9 feat(plugin-vue): propagate multiRoot for template-only vapor components (#745)
050c996 fix(deps): update all non-major dependencies (#738)
6d834d8 chore: remove unused deps (#760)
a0e1ef8 chore(deps): update dependency rollup to ^4.59.0 (#749)
6ad6cc1 release: plugin-vue@6.0.5
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @vitejs/plugin-vue since your current version.

Updates vite from 5.4.9 to 8.0.16

Release notes

Sourced from vite's releases.

v8.0.16

Please refer to CHANGELOG.md for details.

v8.0.15

Please refer to CHANGELOG.md for details.

v8.0.14

Please refer to CHANGELOG.md for details.

v8.0.13

Please refer to CHANGELOG.md for details.

v8.0.12

Please refer to CHANGELOG.md for details.

v8.0.11

Please refer to CHANGELOG.md for details.

v8.0.10

Please refer to CHANGELOG.md for details.

v8.0.9

Please refer to CHANGELOG.md for details.

v8.0.8

Please refer to CHANGELOG.md for details.

v8.0.7

Please refer to CHANGELOG.md for details.

v8.0.6

Please refer to CHANGELOG.md for details.

v8.0.5

Please refer to CHANGELOG.md for details.

v8.0.4

Please refer to CHANGELOG.md for details.

create-vite@8.0.3

Please refer to CHANGELOG.md for details.

v8.0.3

Please refer to CHANGELOG.md for details.

create-vite@8.0.2

Please refer to CHANGELOG.md for details.

v8.0.2

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.0.16 (2026-06-01)

Bug Fixes

deps: reject UNC paths for launch-editor-middleware (#22571) (50b9512)

reject windows alternate paths (#22572) (dc245c7)

8.0.15 (2026-06-01)

Features

send 408 on request timeout (#22476) (c85c9ee)

update rolldown to 1.0.3 (#22538) (646dbed)

Bug Fixes

capitalize error messages and remove spurious space in parse error (#22488) (85a0eff)

deps: update all non-major dependencies (#22511) (2686d7d)

dev: fix html-proxy cache key mismatch for /@fs/ HTML paths (#21762) (47c4213)

glob: error on relative glob in virtual module when no files match (#22497) (5c8e98f)

optimizer: close the rolldown bundle when write() rejects (#22528) (e3cfb9d)

resolve: provide onWarn for viteResolvePlugin in JS plugin containers (#22509) (40985f1)

Miscellaneous Chores

deps: update rolldown-related dependencies (#22566) (3052a67)

Code Refactoring

correct logic in collectAllModules function (#22562) (6978a9c)

8.0.14 (2026-05-21)

Features

update rolldown to 1.0.2 (#22484) (96efc88)

Bug Fixes

deps: update all non-major dependencies (#22471) (98b8163)

dev: handle errors when sending messages to vite server (#22450) (e8e9a34)

html: handle trailing slash paths in transformIndexHtml (#22480) (5d94d1b)

optimizer: pass oxc jsx options to transformSync in dependency scan (#22342) (b3132da)

Miscellaneous Chores

deps: update rolldown-related dependencies (#22470) (7cb728e)

remove irrelevant commits from changelog (2c69495)

Code Refactoring

glob: do not rewrite import path for absolute base (#22310) (0ae2844)

... (truncated)

Commits

f94df87 release: v8.0.16
dc245c7 fix: reject windows alternate paths (#22572)
50b9512 fix(deps): reject UNC paths for launch-editor-middleware (#22571)
8d1b019 release: v8.0.15
2686d7d fix(deps): update all non-major dependencies (#22511)
3052a67 chore(deps): update rolldown-related dependencies (#22566)
e3cfb9d fix(optimizer): close the rolldown bundle when write() rejects (#22528)
6978a9c refactor: correct logic in collectAllModules function (#22562)
646dbed feat: update rolldown to 1.0.3 (#22538)
85a0eff fix: capitalize error messages and remove spurious space in parse error (#22488)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vite since your current version.

Updates vite-plugin-static-copy from 2.2.0 to 4.1.1

Release notes

Sourced from vite-plugin-static-copy's releases.

vite-plugin-static-copy@4.1.1

Patch Changes

#240 671579b Thanks @saif-shines! - Use each environment's resolved build.outDir when copying static assets during build. Previously the plugin kept only the last configResolved config, so multi-environment setups (for example Astro with separate client and SSR output directories) could copy files into the wrong folder.

vite-plugin-static-copy@4.1.0

Minor Changes
#251 7672842 Thanks @sapphi-red! - Add name property to the rename object form and allow rename functions to return a RenameObject. The name property replaces the file's basename (filename + extension), and can be combined with stripBase to both flatten directory structure and rename the file in one step. Rename functions can now return { name, stripBase } objects instead of only strings, making it easier to declaratively control output paths from dynamic rename logic.
// node_modules/lib/dist/index.js → vendor/lib.js
{ src: 'node_modules/lib/dist/index.js', dest: 'vendor', rename: { name: 'lib.js', stripBase: true } }
// src/pages/events/test.html → dist/events/index.html
{ src: 'src/pages/**/*.html', dest: 'dist/', rename: { stripBase: 2, name: 'index.html' } }
vite-plugin-static-copy@4.0.1

Patch Changes
#249 c6bf44c Thanks @sapphi-red! - Fix absolute dest paths being nested under the output directory

When dest was an absolute path and the source file had a directory component (structured output), the path was incorrectly converted to a relative path, causing files to be nested under the build output directory instead of being copied to the specified absolute path.
{ src: 'foo/foo.txt', dest: '/home/user/my-repo/bar' }
Before: /home/user/my-repo/dist/home/user/my-repo/bar/foo/foo.txt After: /home/user/my-repo/bar/foo/foo.txt
#247 d3af79e Thanks @sapphi-red! - Fix rename.stripBase to work correctly with ../ paths

Previously, stripBase counted .. as directory segments, causing incorrect output paths when copying from parent directories.
{ src: '../../src/pages/**/*.html', dest: 'dist/', rename: { stripBase: 2 } }
Before: dist/src/pages/events/test.html After: dist/events/test.html
{ src: '../../src/pages/**/*.html', dest: 'dist/', rename: { stripBase: true } }
Before: dist/src/pages/events/test.html After: dist/test.html

... (truncated)

Changelog

Sourced from vite-plugin-static-copy's changelog.

4.1.1

Patch Changes

#240 671579b Thanks @saif-shines! - Use each environment's resolved build.outDir when copying static assets during build. Previously the plugin kept only the last configResolved config, so multi-environment setups (for example Astro with separate client and SSR output directories) could copy files into the wrong folder.

4.1.0

Minor Changes
#251 7672842 Thanks @sapphi-red! - Add name property to the rename object form and allow rename functions to return a RenameObject. The name property replaces the file's basename (filename + extension), and can be combined with stripBase to both flatten directory structure and rename the file in one step. Rename functions can now return { name, stripBase } objects instead of only strings, making it easier to declaratively control output paths from dynamic rename logic.
// node_modules/lib/dist/index.js → vendor/lib.js
{ src: 'node_modules/lib/dist/index.js', dest: 'vendor', rename: { name: 'lib.js', stripBase: true } }
// src/pages/events/test.html → dist/events/index.html
{ src: 'src/pages/**/*.html', dest: 'dist/', rename: { stripBase: 2, name: 'index.html' } }
4.0.1

Patch Changes
#249 c6bf44c Thanks @sapphi-red! - Fix absolute dest paths being nested under the output directory

When dest was an absolute path and the source file had a directory component (structured output), the path was incorrectly converted to a relative path, causing files to be nested under the build output directory instead of being copied to the specified absolute path.
{ src: 'foo/foo.txt', dest: '/home/user/my-repo/bar' }
Before: /home/user/my-repo/dist/home/user/my-repo/bar/foo/foo.txt After: /home/user/my-repo/bar/foo/foo.txt
#247 d3af79e Thanks @sapphi-red! - Fix rename.stripBase to work correctly with ../ paths

Previously, stripBase counted .. as directory segments, causing incorrect output paths when copying from parent directories.
{ src: '../../src/pages/**/*.html', dest: 'dist/', rename: { stripBase: 2 } }
Before: dist/src/pages/events/test.html After: dist/events/test.html
{ src: '../../src/pages/**/*.html', dest: 'dist/', rename: { stripBase: true } }

... (truncated)

Commits

63dd788 chore: update versions (#259)
671579b fix: use environment-specific outDir in build plugin for Vite 6 (#240)
01757de chore(deps): update pnpm to v11
707a0fe ci: pin actions
f0df2ad fix(deps): update all non-major dependencies (#257)
efb0d50 fix(deps): update all non-major dependencies (#255)
e95cd6e chore: update versions (#253)
7672842 feat: add name property to RenameObject and allow RenameFunc to return ...
7ae0134 chore: update versions (#248)
de515fa chore(deps): update dependency typescript to v6 (#245)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vite-plugin-static-copy since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

…in-vue, vite and vite-plugin-static-copy Removes [esbuild](https://github.com/evanw/esbuild). It's no longer used after updating ancestor dependencies [esbuild](https://github.com/evanw/esbuild), [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte), [@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [vite-plugin-static-copy](https://github.com/sapphi-red/vite-plugin-static-copy). These dependencies need to be updated together. Removes `esbuild` Updates `@sveltejs/vite-plugin-svelte` from 3.1.1 to 7.1.2 - [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases) - [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@7.1.2/packages/vite-plugin-svelte) Updates `@vitejs/plugin-vue` from 5.1.4 to 6.0.7 - [Release notes](https://github.com/vitejs/vite-plugin-vue/releases) - [Changelog](https://github.com/vitejs/vite-plugin-vue/blob/main/packages/plugin-vue/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-vue/commits/plugin-vue@6.0.7/packages/plugin-vue) Updates `vite` from 5.4.9 to 8.0.16 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.0.16/packages/vite) Updates `vite-plugin-static-copy` from 2.2.0 to 4.1.1 - [Release notes](https://github.com/sapphi-red/vite-plugin-static-copy/releases) - [Changelog](https://github.com/sapphi-red/vite-plugin-static-copy/blob/main/CHANGELOG.md) - [Commits](https://github.com/sapphi-red/vite-plugin-static-copy/compare/vite-plugin-static-copy@2.2.0...vite-plugin-static-copy@4.1.1) --- updated-dependencies: - dependency-name: esbuild dependency-version: dependency-type: indirect - dependency-name: "@sveltejs/vite-plugin-svelte" dependency-version: 7.1.2 dependency-type: direct:development - dependency-name: "@vitejs/plugin-vue" dependency-version: 6.0.7 dependency-type: direct:development - dependency-name: vite dependency-version: 8.0.16 dependency-type: direct:development - dependency-name: vite-plugin-static-copy dependency-version: 4.1.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 13, 2026

dependabot Bot mentioned this pull request Jun 13, 2026

chore(deps-dev): bump vite, @sveltejs/vite-plugin-svelte and @vitejs/plugin-vue in /system/templates/base #52

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump esbuild, @sveltejs/vite-plugin-svelte, @vitejs/plugin-vue, vite and vite-plugin-static-copy in /system/templates/base#67

chore(deps): bump esbuild, @sveltejs/vite-plugin-svelte, @vitejs/plugin-vue, vite and vite-plugin-static-copy in /system/templates/base#67
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/system/templates/base/multi-d22fb42ff5

dependabot Bot commented on behalf of github Jun 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 13, 2026

@​sveltejs/vite-plugin-svelte@​7.1.2

Patch Changes

@​sveltejs/vite-plugin-svelte@​7.1.1

Patch Changes

@​sveltejs/vite-plugin-svelte@​7.1.0

Minor Changes

@​sveltejs/vite-plugin-svelte@​7.0.0

Major Changes

Patch Changes

7.1.2

Patch Changes

7.1.1

Patch Changes

7.1.0

Minor Changes

7.0.0

Major Changes

Patch Changes

plugin-vue@6.0.7

plugin-vue@6.0.6

plugin-vue@6.0.5

plugin-vue@6.0.4

plugin-vue@6.0.3

plugin-vue@6.0.2

plugin-vue@6.0.1

plugin-vue@6.0.0

plugin-vue@6.0.0-beta.2

plugin-vue@6.0.0-beta.1

plugin-vue@6.0.0-beta.0

plugin-vue@5.2.4

plugin-vue@5.2.3

plugin-vue@5.2.2

plugin-vue@5.2.1

plugin-vue@5.2.0

plugin-vue@5.1.5

6.0.7 (2026-05-15)

Features

Bug Fixes

6.0.6 (2026-04-13)

Features

Bug Fixes

Miscellaneous Chores

6.0.5 (2026-03-12)

Miscellaneous Chores

6.0.4 (2026-02-02)

Bug Fixes

Miscellaneous Chores

6.0.3 (2025-12-12)

Features

Bug Fixes

v8.0.16

v8.0.15

v8.0.14

v8.0.13

v8.0.12

v8.0.11

v8.0.10

v8.0.9

v8.0.8

v8.0.7

v8.0.6

v8.0.5

v8.0.4

create-vite@8.0.3

v8.0.3

create-vite@8.0.2

v8.0.2

8.0.16 (2026-06-01)

Bug Fixes

8.0.15 (2026-06-01)

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

8.0.14 (2026-05-21)

Features

Bug Fixes

Miscellaneous Chores

`@sveltejs/vite-plugin-svelte@7`.1.2

`@sveltejs/vite-plugin-svelte@7`.1.1

`@sveltejs/vite-plugin-svelte@7`.1.0

`@sveltejs/vite-plugin-svelte@7`.0.0