Skip to content

Bump the npm-minor-patch group across 1 directory with 9 updates - #31

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-minor-patch-dbf6f0bc67
Open

Bump the npm-minor-patch group across 1 directory with 9 updates#31
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-minor-patch-dbf6f0bc67

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 9 updates in the / directory:

Package From To
@tauri-apps/api 2.12.1 2.12.4
@tauri-apps/plugin-dialog 2.8.1 2.8.3
@tauri-apps/plugin-sql 2.5.0 2.6.0
maplibre-gl 6.11.2 6.14.0
react 19.3.0 19.3.1
react-dom 19.3.0 19.3.1
@tauri-apps/cli 2.12.1 2.12.3
@vitejs/plugin-react 6.1.1 6.1.2
vite 8.3.2 8.3.4

Updates @tauri-apps/api from 2.12.1 to 2.12.4

Release notes

Sourced from @​tauri-apps/api's releases.

@​tauri-apps/api v2.12.4

All found vulnerabilities were already reviewed and decided to be ignored
1 ignored: 1 high

[2.12.4]

What's Changed

$ pnpm build && cd ./dist && pnpm publish --access public --loglevel debug --no-git-checks
$ rollup -c --configPlugin typescript
�[36m
�[1m./src/app.ts, ./src/core.ts, ./src/dpi.ts, ./src/event.ts, ./src/image.ts, ./src/index.ts, ./src/menu.ts, ./src/mocks.ts, ./src/path.ts, ./src/tray.ts, ./src/webview.ts, ./src/webviewWindow.ts, ./src/window.ts�[22m → �[1m./dist, ./dist�[22m...�[39m
�[32mcreated �[1m./dist, ./dist�[22m in �[1m955ms�[22m�[39m
�[36m
�[1msrc/index.ts�[22m → �[1m../../crates/tauri/scripts/bundle.global.js�[22m...�[39m
�[32mcreated �[1m../../crates/tauri/scripts/bundle.global.js�[22m in �[1m1.5s�[22m�[39m
GET https://run-actions-3-azure-eastus.actions.githubusercontent.com/21//idtoken/c37ddb61-7d6d-84f8-af6e-d0b7e7d7955a/56cb7a72-c3b4-5319-90d2-88ed76ba30ee?api-version=2.0&audience=npm%3Aregistry.npmjs.org 200 128ms
📦 @tauri-apps/api@2.12.4 → https://registry.npmjs.org/
GET https://run-actions-3-azure-eastus.actions.githubusercontent.com/21//idtoken/c37ddb61-7d6d-84f8-af6e-d0b7e7d7955a/56cb7a72-c3b4-5319-90d2-88ed76ba30ee?api-version=2.0&audience=sigstore 200 58ms
Signed provenance statement with source and build information
✅ Published package @tauri-apps/api@2.12.4

@​tauri-apps/api v2.12.3

All found vulnerabilities were already reviewed and decided to be ignored
3 ignored: 3 high

[2.12.3]

... (truncated)

Commits
  • 59b63ab Apply Version Updates From Current Changes (#16255)
  • 55883af fix(bundler): Update rpm-rs to 0.30 (#15639)
  • 744ff2b chore(deps): bump rustls to 0.23.46
  • c95be46 fix(cli): xcode-script tauri CWD rewrite (#16287)
  • dc637db chore: add missing api change file (#16260)
  • b948762 fix(macos-sign): import the signing certificate as an explicit pkcs12 (fix: #...
  • 7b673dd fix(core): drop late mobile plugin responses instead of panicking (#16146)
  • 5a61498 fix(bundler): keep script stderr in errors and hint at the Finder permission ...
  • 5a3cbfc fix(macos-codesign): Inline apple-codesign code (#16279)
  • 141d1c0 fix(acl): resolve permission files after the target dir is moved (#16199)
  • Additional commits viewable in compare view

Updates @tauri-apps/plugin-dialog from 2.8.1 to 2.8.3

Release notes

Sourced from @​tauri-apps/plugin-dialog's releases.

dialog-js v2.8.3

[2.8.3]

Dependencies

  • Upgraded to fs-js@2.7.1
npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.8.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 7.1kB dist-js/index.cjs
npm notice 15.1kB dist-js/index.d.ts
npm notice 7.0kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.8.3
npm notice filename: tauri-apps-plugin-dialog-2.8.3.tgz
npm notice package size: 6.8 kB
npm notice unpacked size: 34.3 kB
npm notice shasum: 1ef5cbd8833d50c911dedc3b50b94c6ba7ec2db5
npm notice integrity: sha512-Hd/yBfk2R5v2M[...]S+gBDNe3nHspw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3253692258
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-dialog@2.8.3

dialog v2.8.3

[2.8.3]

Dependencies

... (truncated)

Commits
  • 44293a5 Publish New Versions (v2) (#3689)
  • 7550f7c chore(deps): bump rustls to 0.23.46
  • 36d8e40 feat(geolocation): support for non-GMS devices (#3377)
  • 57297f3 feat(clipboard-manager): add support for writing secrets (#3376)
  • 1ab9304 fix(opener): avoid blocking-runtime panic in reveal_item_in_dir (#3565)
  • 0e17675 fix(http): decode header values as ISO-8859-1 (#3586)
  • 62b3565 chore(deps): update quinn-proto (lockfile-only) (#3707)
  • d80b1be feat: add torch plugin for iOS and Android (#3551)
  • c91a9e6 feat(sql): add autoCreate option to Database.load (#3702)
  • 0374bec [feat] [biometric] Adding the capability of encrypting/decrypting data using ...
  • Additional commits viewable in compare view

Updates @tauri-apps/plugin-sql from 2.5.0 to 2.6.0

Release notes

Sourced from @​tauri-apps/plugin-sql's releases.

notification-js v2.6.0

[2.6.0]

  • 42ae8b45 (#3684) On iOS, mark the plugin's init_plugin_* entry point public so release builds made with Xcode 27 keep it global and link.

feat

  • 46381516 (#3671) Report actions on desktop: a click on a notification (tap) or on one of the actions of its action type reaches onAction and the new Rust Notification::on_action, which also works on mobile. registerActionTypes, removeActive (Linux and the BSDs) and the listener commands no longer fail with "command not found" on desktop.

    The onAction callback is now typed with the new ActionPerformed interface, which is what every platform sends, instead of Options. Callbacks annotated with Options must be updated.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-notification@2.6.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 16.6kB dist-js/index.cjs
npm notice 26.1kB dist-js/index.d.ts
npm notice 16.2kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 663B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-notification
npm notice version: 2.6.0
npm notice filename: tauri-apps-plugin-notification-2.6.0.tgz
npm notice package size: 11.1 kB
npm notice unpacked size: 64.7 kB
npm notice shasum: 68f6090e06e17a92fd1803c7b40a01e4ee20cc7c
npm notice integrity: sha512-QvpsQ6L6uSGT/[...]J3c52S+1afsIw==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3189634908
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-notification@2.6.0

notification v2.6.0

... (truncated)

Commits

Updates maplibre-gl from 6.11.2 to 6.14.0

Release notes

Sourced from maplibre-gl's releases.

v6.14.0

✨ Features and improvements

  • Allow calling new Map({ globalState: { ... }}) and setStyle({ globalState: ... }) to provide an initial global state for the map style, overriding the global state defaults from the style (#7632) (by @​hiddewie)

🐞 Bug fixes

  • fix: ScaleControl throwing when its sample points miss the globe (#8720) (by @​SatvikMishra08)
  • Fix a rendering crash when removeFeatureState removes a property before feature state is set (#8715) (by @​yeomin4242)
  • Work around blank, unresponsive maps on affected iPadOS 16 Safari devices (#8364) (by @​samuelsmarason)
  • Fix circles with circle-pitch-alignment: map being drawn too large while the globe transitions to mercator (#8714) (by @​heikki)
  • Fix map.resize(eventData, false) constraining the camera with the vertical-perspective projection (#8695) (by @​birkskyum)
  • Fix an uncaught error when setStyle is called while the WebGL context is lost, since 6.12.0 (#8693) (by @​birkskyum)
  • Fix the view sliding hundreds of meters off the center when terrain is switched on during a gesture (#8688) (by @​johncarmack1984)
  • Fix the camera jumping back at the end of a pan, flick or rotation into terrain (#8692) (by @​johncarmack1984)
  • Fix flyTo dropping the offset and around options under prefers-reduced-motion, so a reduced-motion fly lands at the same camera as the animated one (#8730) (by @​maartenla)
  • Fix load and idle never firing when the last tile fails with a status other than 404 (#8733) (by @​johncarmack1984)

v6.13.0

✨ Features and improvements

  • Let the globe center reach the poles, where it stopped at 85.05° (#8629) (by @​birkskyum)
  • Speed up symbol layout by skipping line breaking for labels that fit on one line (#8617) (by @​DoFabien)
  • Add experimental CustomLayerInterface.renderToTerrainTile, CustomLayerInterface.terrainTileRevision and renderTerrainHeightMap in the options of prerender, so custom layers can drape what they draw over the terrain and place objects on it on the GPU (#8588) (by @​birkskyum)

🐞 Bug fixes

  • Fix a stale cached worker crashing the map after an upgrade: the worker is self-contained again instead of importing maplibre-gl-shared.mjs, and its default URL carries the version as a v query parameter. maplibre-gl-shared.mjs and maplibre-gl-shared-dev.mjs are now empty files, kept so that existing copy steps don't fail; they are deprecated and will be removed in the next major version (#8621) (by @​HarelM)
  • Fix globeDistanceOfLocationsPixels returning NaN when two copies of the same point have a dot product slightly above 1 (#8624)(by @​Dimononon)
  • Keep the camera above the terrain, where a scroll zoom into a mountain could take it under the surface and the zoom's end throw it kilometers up (#8539) (by @​johncarmack1984)

v6.12.0

✨ Features and improvements

  • Add a zoomToUserAccuracy option to GeolocateControlOptions to allow control over map zoom adjustments in line with the Geolocation Position update accuracy, while trackUserLocation is true (#7908, #8324, continues #7909) (by @​timsluis)
  • With fill-extrusion-rounded-corner-distance set, shade the walls of a rounded corner as one curved surface by sharing the vertex normal between walls that meet at a shallow angle, instead of one flat shade per arc segment (#8475) (by @​clement-igonet)
  • Speed up symbol rendering when the set of visible tiles changes, by rewriting the opacity buffers only of the symbol buckets whose labels actually changed instead of every bucket of every symbol layer (#8434) (by @​cherenkov)
  • Add an absolutePadding option to Map#cameraForBounds and Map#fitBounds to treat padding as the map's persistent padding instead of adding it to the current one (#8480) (by @​sargunv)

🐞 Bug fixes

  • fix(CanvasSource): catch load errors and fire map.error like ImageSource (#8448) (#8450) (by @​SatvikMishra08)
  • Fix GeoJSONSource still sending its waiting updates to the worker after the source is removed (#8585) (by @​clementperon)
  • Fix GeoJSONSource memory growing until the page crashes when setData is called faster than the worker handles it (#8585) (by @​clementperon)
  • Fix the map rendering at the display rate instead of going idle over a DEM with a minimum below sea level when centerClampedToGround is false (#8605) (by @​johncarmack1984)
  • Fix a gesture over terrain throwing the camera when the terrain under the center loads after the gesture begins or the terrain switches off before it ends (#8548) (by @​johncarmack1984)
  • Fix the terrain elevation reading 0 outside the drawn tiles while the camera is below the terrain, and make that read about 40 times cheaper (#8539) (by @​johncarmack1984)

... (truncated)

Changelog

Sourced from maplibre-gl's changelog.

6.14.0

✨ Features and improvements

  • Allow calling new Map({ globalState: { ... }}) and setStyle({ globalState: ... }) to provide an initial global state for the map style, overriding the global state defaults from the style (#7632) (by @​hiddewie)

🐞 Bug fixes

  • fix: ScaleControl throwing when its sample points miss the globe (#8720) (by @​SatvikMishra08)
  • Fix a rendering crash when removeFeatureState removes a property before feature state is set (#8715) (by @​yeomin4242)
  • Work around blank, unresponsive maps on affected iPadOS 16 Safari devices (#8364) (by @​samuelsmarason)
  • Fix circles with circle-pitch-alignment: map being drawn too large while the globe transitions to mercator (#8714) (by @​heikki)
  • Fix map.resize(eventData, false) constraining the camera with the vertical-perspective projection (#8695) (by @​birkskyum)
  • Fix an uncaught error when setStyle is called while the WebGL context is lost, since 6.12.0 (#8693) (by @​birkskyum)
  • Fix the view sliding hundreds of meters off the center when terrain is switched on during a gesture (#8688) (by @​johncarmack1984)
  • Fix the camera jumping back at the end of a pan, flick or rotation into terrain (#8692) (by @​johncarmack1984)
  • Fix flyTo dropping the offset and around options under prefers-reduced-motion, so a reduced-motion fly lands at the same camera as the animated one (#8730) (by @​maartenla)
  • Fix load and idle never firing when the last tile fails with a status other than 404 (#8733) (by @​johncarmack1984)

6.13.0

✨ Features and improvements

  • Let the globe center reach the poles, where it stopped at 85.05° (#8629) (by @​birkskyum)
  • Speed up symbol layout by skipping line breaking for labels that fit on one line (#8617) (by @​DoFabien)
  • Add experimental CustomLayerInterface.renderToTerrainTile, CustomLayerInterface.terrainTileRevision and renderTerrainHeightMap in the options of prerender, so custom layers can drape what they draw over the terrain and place objects on it on the GPU (#8588) (by @​birkskyum)

🐞 Bug fixes

  • Fix a stale cached worker crashing the map after an upgrade: the worker is self-contained again instead of importing maplibre-gl-shared.mjs, and its default URL carries the version as a v query parameter. maplibre-gl-shared.mjs and maplibre-gl-shared-dev.mjs are now empty files, kept so that existing copy steps don't fail; they are deprecated and will be removed in the next major version (#8621) (by @​HarelM)
  • Fix globeDistanceOfLocationsPixels returning NaN when two copies of the same point have a dot product slightly above 1 (#8624)(by @​Dimononon)
  • Keep the camera above the terrain, where a scroll zoom into a mountain could take it under the surface and the zoom's end throw it kilometers up (#8539) (by @​johncarmack1984)

6.12.0

✨ Features and improvements

  • Add a zoomToUserAccuracy option to GeolocateControlOptions to allow control over map zoom adjustments in line with the Geolocation Position update accuracy, while trackUserLocation is true (#7908, #8324, continues #7909) (by @​timsluis)
  • With fill-extrusion-rounded-corner-distance set, shade the walls of a rounded corner as one curved surface by sharing the vertex normal between walls that meet at a shallow angle, instead of one flat shade per arc segment (#8475) (by @​clement-igonet)
  • Speed up symbol rendering when the set of visible tiles changes, by rewriting the opacity buffers only of the symbol buckets whose labels actually changed instead of every bucket of every symbol layer (#8434) (by @​cherenkov)
  • Add an absolutePadding option to Map#cameraForBounds and Map#fitBounds to treat padding as the map's persistent padding instead of adding it to the current one (#8480) (by @​sargunv)

🐞 Bug fixes

  • fix(CanvasSource): catch load errors and fire map.error like ImageSource (#8448) (#8450) (by @​SatvikMishra08)
  • Fix GeoJSONSource still sending its waiting updates to the worker after the source is removed (#8585) (by @​clementperon)
  • Fix GeoJSONSource memory growing until the page crashes when setData is called faster than the worker handles it (#8585) (by @​clementperon)
  • Fix the map rendering at the display rate instead of going idle over a DEM with a minimum below sea level when centerClampedToGround is false (#8605) (by @​johncarmack1984)
  • Fix a gesture over terrain throwing the camera when the terrain under the center loads after the gesture begins or the terrain switches off before it ends (#8548) (by @​johncarmack1984)
  • Fix the terrain elevation reading 0 outside the drawn tiles while the camera is below the terrain, and make that read about 40 times cheaper (#8539) (by @​johncarmack1984)

... (truncated)

Commits
  • 7292730 Bump js version to 6.14.0 (#8737)
  • 9d3c6b3 Fix rendering crash when removing a property before feature state is set (#8715)
  • 8e23433 fix: load and idle never firing when the last tile fails with a non-404 statu...
  • 873377f feat: Allow providing initial global state and style transform for map (#8264)
  • 5d5dea2 Keep offset and around when flyTo honors prefers-reduced-motion (#8730)
  • 7e493d2 fix: ScaleControl throwing when its sample points miss the globe (#8720)
  • 6d26435 chore(deps-dev): bump monocart-coverage-reports from 2.13.0 to 2.13.1 (#8728)
  • 398f874 chore(deps): bump zensical/zensical from 0.0.67 to 0.0.68 (#8729)
  • 93f5c6c chore(deps-dev): bump the eslint group with 2 updates (#8724)
  • 299ab7e chore(deps-dev): bump postcss from 8.5.28 to 8.5.29 (#8726)
  • Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates @tauri-apps/cli from 2.12.1 to 2.12.3

Release notes

Sourced from @​tauri-apps/cli's releases.

@​tauri-apps/cli v2.12.3

[2.12.3]

Bug Fixes

  • c95be4615 (#16287) Fix tauri ios xcode-script failing to find the Tauri project when Xcode inherits package manager environment variables from tauri ios dev --open, or when pnpm runs the CLI directly from the gen/apple folder.
  • d62e5d9c0 (#16184) Fix NSIS installer leaving uninstall.exe and the installation directory behind when uninstalling an existing installation from the installer.

Dependencies

@​tauri-apps/cli v2.12.2

[2.12.2]

Bug Fixes

  • c48e1ca89 (#16246) On iOS, mark the Swift @_cdecl entry points that Rust links against as public (in the iOS API and in the plugin templates), so release builds made with Xcode 27 keep them global and link.

Dependencies

  • Upgraded to tauri-cli@2.12.2
  • fd319dd43 Update base64 to 0.23.
Commits
  • 59b63ab Apply Version Updates From Current Changes (#16255)
  • 55883af fix(bundler): Update rpm-rs to 0.30 (#15639)
  • 744ff2b chore(deps): bump rustls to 0.23.46
  • c95be46 fix(cli): xcode-script tauri CWD rewrite (#16287)
  • dc637db chore: add missing api change file (#16260)
  • b948762 fix(macos-sign): import the signing certificate as an explicit pkcs12 (fix: #...
  • 7b673dd fix(core): drop late mobile plugin responses instead of panicking (#16146)
  • 5a61498 fix(bundler): keep script stderr in errors and hint at the Finder permission ...
  • 5a3cbfc fix(macos-codesign): Inline apple-codesign code (#16279)
  • 141d1c0 fix(acl): resolve permission files after the target dir is moved (#16199)
  • Additional commits viewable in compare view

Updates @vitejs/plugin-react from 6.1.1 to 6.1.2

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.1.2

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.1.2 (2026-10-05)

Fix HMR for compound components (#1484)

Adding or removing a component from a compound component was not handled, creating stale updates. Doing this now triggers hmr invalidate on the file and propagates the invalidation to importers.

Fix compiler.logDiagnostics option not working (#1483)

With oxc-transform-react >= 0.148, the logDiagnostics was not working. This version fixes it and requires oxc-transform-react >= 0.152 as a peer dependency if you are using the compiler option. compiler.logDiagnostics option is now deprecated and should be swapped for the builtin compiler.reportDiagnostics.

Disable refresh for non-jsx with compiler enabled (fix #1478) (#1485)

When the compiler was enabled, TS files could trigger fast refresh which would cause runtime errors. The logic now follows what the builtin oxc plugin in Vite does.

Commits

Updates vite from 8.3.2 to 8.3.4

Release notes

Sourced from vite's releases.

v8.3.4

Features

  • bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

  • avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
  • build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
  • build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
  • bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
  • client: skip rewriting unchanged adopted styles (#23697) (fa71469)
  • css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
  • deps: update all non-major dependencies (#23648) (8a4c19c)
  • deps: update rolldown-related dependencies (#23649) (794516d)
  • dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
  • don't treat modules ending with js-like query as js (#23687) (fcb6f12)
  • html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
  • html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
  • optimizer: scan deep imports with custom extensions (#23678) (8579189)
  • remove input option unescaping for now (#23694) (facc2fb)
  • server: match static aliases on path boundaries (#23643) (b28db28)
  • watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

  • module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

  • bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

v8.3.3

Bug Fixes

  • deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
  • html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
  • server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
  • server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)
Changelog

Sourced from vite's changelog.

8.3.4 (2026-10-08)

Features

  • bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

  • avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
  • build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
  • build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
  • bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
  • client: skip rewriting unchanged adopted styles (#23697) (fa71469)
  • css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
  • deps: update all non-major dependencies (#23648) (8a4c19c)
  • deps: update rolldown-related dependencies (#23649) (794516d)
  • dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
  • don't treat modules ending with js-like query as js (#23687) (fcb6f12)
  • html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
  • html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
  • optimizer: scan deep imports with custom extensions (#23678) (8579189)
  • remove input option unescaping for now (#23694) (facc2fb)
  • server: match static aliases on path boundaries (#23643) (b28db28)
  • watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

  • module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

  • bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

8.3.3 (2026-10-06)

Bug Fixes

  • deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
  • html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
  • server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
  • server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)
Commits

@dependabot
Bump the npm-minor-patch group across 1 directory with 9 updates
3dd62a3 
Bumps the npm-minor-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@tauri-apps/api](https://github.com/tauri-apps/tauri) | `2.12.1` | `2.12.4` |
| [@tauri-apps/plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.8.1` | `2.8.3` |
| [@tauri-apps/plugin-sql](https://github.com/tauri-apps/plugins-workspace) | `2.5.0` | `2.6.0` |
| [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) | `6.11.2` | `6.14.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.3.0` | `19.3.1` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.3.0` | `19.3.1` |
| [@tauri-apps/cli](https://github.com/tauri-apps/tauri) | `2.12.1` | `2.12.3` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.1` | `6.1.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.2` | `8.3.4` |



Updates `@tauri-apps/api` from 2.12.1 to 2.12.4
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/api-v2.12.1...@tauri-apps/api-v2.12.4)

Updates `@tauri-apps/plugin-dialog` from 2.8.1 to 2.8.3
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@http-v2.8.1...http-v2.8.3)

Updates `@tauri-apps/plugin-sql` from 2.5.0 to 2.6.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@fs-v2.5.0...fs-v2.6.0)

Updates `maplibre-gl` from 6.11.2 to 6.14.0
- [Release notes](https://github.com/maplibre/maplibre-gl-js/releases)
- [Changelog](https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md)
- [Commits](maplibre/maplibre-gl-js@v6.11.2...v6.14.0)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `@tauri-apps/cli` from 2.12.1 to 2.12.3
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/cli-v2.12.1...@tauri-apps/cli-v2.12.3)

Updates `@vitejs/plugin-react` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.2/packages/plugin-react)

Updates `vite` from 8.3.2 to 8.3.4
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite)

---
updated-dependencies:
- dependency-name: "@tauri-apps/api"
  dependency-version: 2.12.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@tauri-apps/plugin-dialog"
  dependency-version: 2.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@tauri-apps/plugin-sql"
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: maplibre-gl
  dependency-version: 6.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@tauri-apps/cli"
  dependency-version: 2.12.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: vite
  dependency-version: 8.3.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants