chore(deps-dev): bump @vitejs/plugin-react from 4.5.1 to 6.0.1#907
chore(deps-dev): bump @vitejs/plugin-react from 4.5.1 to 6.0.1#907dependabot[bot] wants to merge 2 commits intomainfrom
Conversation
Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) from 4.5.1 to 6.0.1. - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.1/packages/plugin-react) --- updated-dependencies: - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
| vite: ^4.2.0 || ^5.0.0 || ^6.0.0 | ||
| checksum: 10c0/51b28c02905228cc5b1dd16f5d008cf08175e47d22ff37b0959a9ee20a46a5215698b20405f39e6b73ae2a63c2a005d74c94b3456083ad038b59932d682b9165 | ||
| vite: ^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 | ||
| checksum: 10c0/692f23960972879485d647713663ec299c478222c96567d60285acf7c7dc5c178e71abfe9d2eefddef1eeb01514dacbc2ed68aad84628debf9c7116134734253 |
There was a problem hiding this comment.
PR claims v6.0.1 bump but lockfile resolves to v4.7.0
High Severity
The PR title states it bumps @vitejs/plugin-react from 4.5.1 to 6.0.1, but the yarn.lock resolves the ^4.5.1 specifier to version 4.7.0 instead. The package.json files (in examples/client-example, examples/guide-example, and packages/expo) still contain "^4.5.1", which is a semver range that cannot resolve to 6.x. The intended major version upgrade (with its breaking change of removing Babel features) is not actually applied — only an unintended minor bump to 4.7.0 occurs.
|
this will require upgrading vite substantially, closing for now. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #907 +/- ##
=======================================
Coverage 65.15% 65.15%
=======================================
Files 207 207
Lines 9593 9593
Branches 1250 1250
=======================================
Hits 6250 6250
Misses 3318 3318
Partials 25 25 |


Bumps @vitejs/plugin-react from 4.5.1 to 6.0.1.
Release notes
Sourced from
@vitejs/plugin-react's releases.... (truncated)
Changelog
Sourced from
@vitejs/plugin-react's changelog.... (truncated)
Commits
1e94c06release: plugin-react@6.0.177c00c0feat(plugin-react): expand@rolldown/plugin-babelpeer dep range (#1146)dcc9012release: plugin-react@6.0.03a17886docs: add a link to the Oxlint rule for component exports alongside the ESLin...f812135fix(deps): update all non-major dependencies (#1140)a0329a0docs(react): clarify react compiler preset filter (#1137)704e0d3release: plugin-react@6.0.0-beta.0ac16accfeat(react)!: remove babel (#1123)f01b30cfix(deps): update all non-major dependencies (#1127)b1014bdchore(react): add changelog for #1124Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for
@vitejs/plugin-reactsince your current version.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)