Bump esbuild, laravel-vite-plugin and vite #368

dependabot · 2025-09-30T18:51:45Z

Bumps esbuild to 0.25.10 and updates ancestor dependencies esbuild, laravel-vite-plugin and vite. These dependencies need to be updated together.

Updates esbuild from 0.18.20 to 0.25.10

Release notes

Sourced from esbuild's releases.

v0.25.10
Fix a panic in a minification edge case (#4287)

This release fixes a panic due to a null pointer that could happen when esbuild inlines a doubly-nested identity function and the final result is empty. It was fixed by emitting the value undefined in this case, which avoids the panic. This case must be rare since it hasn't come up until now. Here is an example of code that previously triggered the panic (which only happened when minifying):
function identity(x) { return x }
identity({ y: identity(123) })
Fix @supports nested inside pseudo-element (#4265)

When transforming nested CSS to non-nested CSS, esbuild is supposed to filter out pseudo-elements such as ::placeholder for correctness. The CSS nesting specification says the following:

The nesting selector cannot represent pseudo-elements (identical to the behavior of the ':is()' pseudo-class). We’d like to relax this restriction, but need to do so simultaneously for both ':is()' and '&', since they’re intentionally built on the same underlying mechanisms.

However, it seems like this behavior is different for nested at-rules such as @supports, which do work with pseudo-elements. So this release modifies esbuild's behavior to now take that into account:
/* Original code */
::placeholder {
  color: red;
  body & { color: green }
  @supports (color: blue) { color: blue }
}
/* Old output (with --supported:nesting=false) */
::placeholder {
color: red;
}
body :is() {
color: green;
}
@supports (color: blue) {
{
color: blue;
}
}
/* New output (with --supported:nesting=false) */
::placeholder {
color: red;
}
body :is() {
color: green;
}
@supports (color: blue) {
::placeholder {
color: blue;
}

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2023

This changelog documents all esbuild versions published in the year 2023 (versions 0.16.13 through 0.19.11).

0.19.11
Fix TypeScript-specific class transform edge case (#3559)

The previous release introduced an optimization that avoided transforming super() in the class constructor for TypeScript code compiled with useDefineForClassFields set to false if all class instance fields have no initializers. The rationale was that in this case, all class instance fields are omitted in the output so no changes to the constructor are needed. However, if all of this is the case and there are #private instance fields with initializers, those private instance field initializers were still being moved into the constructor. This was problematic because they were being inserted before the call to super() (since super() is now no longer transformed in that case). This release introduces an additional optimization that avoids moving the private instance field initializers into the constructor in this edge case, which generates smaller code, matches the TypeScript compiler's output more closely, and avoids this bug:
// Original code
class Foo extends Bar {
  #private = 1;
  public: any;
  constructor() {
    super();
  }
}
// Old output (with esbuild v0.19.9)
class Foo extends Bar {
constructor() {
super();
this.#private = 1;
}
#private;
}
// Old output (with esbuild v0.19.10)
class Foo extends Bar {
constructor() {
this.#private = 1;
super();
}
#private;
}
// New output
class Foo extends Bar {
#private = 1;
constructor() {
super();
}
}
Minifier: allow reording a primitive past a side-effect (#3568)

The minifier previously allowed reordering a side-effect past a primitive, but didn't handle the case of reordering a primitive past a side-effect. This additional case is now handled:

... (truncated)

Commits

d6b668f publish 0.25.10 to npm
5088c19 refactor: use strings.Builder (#4290)
755da31 run make update-compat-table
a1d9c86 fix #4287: marked the wrong issue as fixed
73a0b2a fix #4286: minifier panic due to identity function
134dadf fix #4265: @supports nested inside ::pseudo
195e05c publish 0.25.9 to npm
3dac33f fix #3131, fix #3663: yarnpnp + windows + D drive
0f2c5c8 mock fs now supports multiple volumes on windows
100a51e split out yarnpnp snapshot tests
Additional commits viewable in compare view

Updates laravel-vite-plugin from 0.8.1 to 2.0.1

Release notes

Sourced from laravel-vite-plugin's releases.

v2.0.1

Automatically create hotFile parent directory by @adrum in laravel/vite-plugin#334

v2.0.0

Vite 7 Support by @sweptsquash in laravel/vite-plugin#328

Upgrade dependencies by @timacdonald in laravel/vite-plugin#331

v1.3.0

Use rollup types from Vite by @sapphi-red in laravel/vite-plugin#325

v1.2.0

[1.x] Fix Invalid URL issue with Vite 6.0.9 by @batinmustu in laravel/vite-plugin#317

[1.x] Add default CORS origins by @timacdonald in laravel/vite-plugin#318

v1.1.1

[1.1] Fix dependency issue with Vite 5 by @jessarcher in laravel/vite-plugin#313

v1.1.0

Upgrade to Vite 6 by @timacdonald in laravel/vite-plugin#310

v1.0.6

Replace dead link in Security Policy by @Jubeki in laravel/vite-plugin#300

Look for certificates in valet linux config directory by @jameshulse in laravel/vite-plugin#307

v1.0.5

TypeScript: define entrypoints using object by @tylerlwsmith in laravel/vite-plugin#298

v1.0.4

Include base in hotFile without modifying server.origin replacement by @danielztolnai in laravel/vite-plugin#296

v1.0.3

Append base to hot file by @timacdonald in laravel/vite-plugin#290

Support Laravel Herd for windows by @mozex in laravel/vite-plugin#293

v1.0.2

[1.x] Fix HMR issue when resources/lang directory doesn't exist and a symlink is present in the root directory by @jessarcher in laravel/vite-plugin#285

v1.0.1

[1.x] Simpler conditional by @Jubeki in laravel/vite-plugin#273

[1.x] Account for imported CSS files while cleaning by @timacdonald in laravel/vite-plugin#275

[1.x] Fix exit error messages by @timacdonald in laravel/vite-plugin#276

v1.0.0

[1.0] Drop CJS build and export types first by @benmccann in laravel/vite-plugin#235

[1.x] Introduce clean-orphaned-assets binary by @timacdonald in laravel/vite-plugin#251

[0.8.x] Respect vite server.origin in viteDevServerUrl by @nurdism in laravel/vite-plugin#255

[1.x] Vite 5 by @timacdonald in laravel/vite-plugin#269

[0.8.x] Fallback pages by @timacdonald in laravel/vite-plugin#271

[1.x] Auto detect Valet / Herd TLS certificates by @timacdonald in laravel/vite-plugin#180

Changelog

Sourced from laravel-vite-plugin's changelog.

v2.0.1 - 2025-08-26

Automatically create hotFile parent directory by @adrum in laravel/vite-plugin#334

v1.3.0 - 2025-06-03

Use rollup types from Vite by @sapphi-red in laravel/vite-plugin#325

v1.2.0 - 2025-01-21

[1.x] Fix Invalid URL issue with Vite 6.0.9 by @batinmustu in laravel/vite-plugin#317

[1.x] Add default CORS origins by @timacdonald in laravel/vite-plugin#318

v1.1.1 - 2024-12-03

[1.1] Fix dependency issue with Vite 5 by @jessarcher in laravel/vite-plugin#313

v1.1.0 - 2024-12-02

Upgrade to Vite 6 by @timacdonald in laravel/vite-plugin#310

v1.0.6 - 2024-11-12

Replace dead link in Security Policy by @Jubeki in laravel/vite-plugin#300

Look for certificates in valet linux config directory by @jameshulse in laravel/vite-plugin#307

v1.0.5 - 2024-07-09

TypeScript: define entrypoints using object by @tylerlwsmith in laravel/vite-plugin#298

v1.0.4 - 2024-05-17

Include base in hotFile without modifying server.origin replacement by @danielztolnai in laravel/vite-plugin#296

v1.0.3 - 2024-05-16

Append base to hot file by @timacdonald in laravel/vite-plugin#290

Support Laravel Herd for windows by @mozex in laravel/vite-plugin#293

v1.0.2 - 2024-02-28

[1.x] Fix HMR issue when resources/lang directory doesn't exist and a symlink is present in the root directory by @jessarcher in laravel/vite-plugin#285

v1.0.1 - 2023-12-27

[1.x] Simpler conditional by @Jubeki in laravel/vite-plugin#273

[1.x] Account for imported CSS files while cleaning by @timacdonald in laravel/vite-plugin#275

[1.x] Fix exit error messages by @timacdonald in laravel/vite-plugin#276

v1.0.0 - 2023-12-19

... (truncated)

Upgrade guide

Sourced from laravel-vite-plugin's upgrade guide.

Upgrade Guide

0.x to 1.x

Adds support for Vite 5 and removes support for Vite 3 and 4.

Introduces an npx clean-orphaned-assets command to clean orphaned assets in Vite's build directories.

Introduces Valet / Herd TLS certificate auto detection.

Adds app/Livewire/** to the default "refresh" paths.

Adds output of SSR manifest for SSR builds.

Notable Changes

Dropped CJS build: laravel/vite-plugin#235

Dropped support for a boolean value of server.https option in vite.config.js: laravel/vite-plugin#254

Dropped support for Node 14, 15, 16, 17, and 19: laravel/vite-plugin#269

Please see the Vite migration documentation for why these changes have been made and additional changes you may need to consider.

Upgrade Path

Update to the latest version of the laravel-vite-plugin, vite, and any Vite plugins you may have installed, such as @vitejs/plugin-vue which requires version ^4.5.0 or @vitejs/plugin-react which requires version ^4.2.0 to be compatible with Vite 5.

The following command will update laravel-vite-plugin and vite only. You may need to include any additional plugin updates as needed by your application:
npm install --save-dev vite@^5.0.0 laravel-vite-plugin@^1.0.0
You should also check the upgrade guide and changelogs for any packages you update, including Vite's migrations guide.

Ensure your package.json contains "type": "module".

Run the following command in your project's root directory or anywhere you have your package.json files:
npm pkg set type=module
You may also need to rename any *.js configuration files that contain CJS, which is the older-style Node-flavored var plugin = require('plugin') syntax, to filename.cjs after making this change.

Migrating from Laravel Mix to Vite

Note
This upgrade guide does not cover all possible Mix use cases, such as Sass compilation. Please consult the Vite documentation for information on configuring Vite for these scenarios.

Update Laravel Framework

To make use of the new Vite integration, you will need to update to at least version 9.19.0 of the laravel/framework:
</tr></table> 

... (truncated)

Commits

297259e 2.0.1
6774e33 Automatically create hotFile parent directory (#334)
1ffbf14 2.0.0
a289b84 Upgrade dependencies (#331)
746c04c Vite 7 Support (#328)
4a1c055 Update CHANGELOG
9d835fe version
aa697cd Use rollup types from Vite (#325)
c0c82ca Comment on duplicated regex
6dbbe25 chore: Update update-changelog.yml
Additional commits viewable in compare view

Updates vite from 4.5.14 to 7.1.7

Release notes

Sourced from vite's releases.

v7.1.7

Please refer to CHANGELOG.md for details.

v7.1.6

Please refer to CHANGELOG.md for details.

v7.1.5

Please refer to CHANGELOG.md for details.

v7.1.4

Please refer to CHANGELOG.md for details.

v7.1.3

Please refer to CHANGELOG.md for details.

create-vite@7.1.3

Please refer to CHANGELOG.md for details.

v7.1.2

Please refer to CHANGELOG.md for details.

create-vite@7.1.2

Please refer to CHANGELOG.md for details.

v7.1.1

Please refer to CHANGELOG.md for details.

create-vite@7.1.1

Please refer to CHANGELOG.md for details.

plugin-legacy@7.1.0

Please refer to CHANGELOG.md for details.

create-vite@7.1.0

Please refer to CHANGELOG.md for details.

v7.1.0

Please refer to CHANGELOG.md for details.

v7.1.0-beta.1

Please refer to CHANGELOG.md for details.

v7.1.0-beta.0

Please refer to CHANGELOG.md for details.

v7.0.7

Please refer to CHANGELOG.md for details.

v7.0.6

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

7.1.7 (2025-09-22)

Bug Fixes

build: fix ssr environment emitAssets: true when sharedConfigBuild: true (#20787) (4c4583c)

client: use CSP nonce when rendering error overlay (#20791) (9bc9d12)

deps: update all non-major dependencies (#20811) (9f2247c)

glob: handle glob imports from folders starting with dot (#20800) (105abe8)

hmr: trigger prune event when import is removed from non hmr module (#20768) (9f32b1d)

hmr: wait for import.meta.hot.prune callbacks to complete before running other HMRs (#20698) (98a3484)

7.1.6 (2025-09-18)

Bug Fixes

deps: update all non-major dependencies (#20773) (88af2ae)

esbuild: inject esbuild helper functions with minified $ variables correctly (#20761) (7e8e004)

fallback terser to main thread when nameCache is provided (#20750) (a679a64)

types: strict env typings fail when skipLibCheck is false (#20755) (cc54e29)

Miscellaneous Chores

deps: update rolldown-related dependencies (#20675) (a67bb5f)

deps: update rolldown-related dependencies (#20772) (d785e72)

7.1.5 (2025-09-08)

Bug Fixes

apply fs.strict check to HTML files (#20736) (14015d7)

deps: update all non-major dependencies (#20732) (122bfba)

upgrade sirv to 3.0.2 (#20735) (09f2b52)

7.1.4 (2025-09-01)

Bug Fixes

add missing awaits (#20697) (79d10ed)

deps: update all non-major dependencies (#20676) (5a274b2)

deps: update all non-major dependencies (#20709) (0401feb)

pass rollup watch options when building in watch mode (#20674) (f367453)

Miscellaneous Chores

remove unused constants entry from rolldown.config.ts (#20710) (537fcf9)

Code Refactoring

remove unnecessary minify parameter from finalizeCss (#20701) (8099582)

7.1.3 (2025-08-19)

Features

cli: add Node.js version warning for unsupported versions (#20638) (a1be1bf)

... (truncated)

Commits

693d255 release: v7.1.7
98a3484 fix(hmr): wait for import.meta.hot.prune callbacks to complete before runni...
9f32b1d fix(hmr): trigger prune event when import is removed from non hmr module (#20...
9f2247c fix(deps): update all non-major dependencies (#20811)
105abe8 fix(glob): handle glob imports from folders starting with dot (#20800)
4c4583c fix(build): fix ssr environment emitAssets: true when `sharedConfigBuild: t...
9bc9d12 fix(client): use CSP nonce when rendering error overlay (#20791)
54377f7 release: v7.1.6
88af2ae fix(deps): update all non-major dependencies (#20773)
d785e72 chore(deps): update rolldown-related dependencies (#20772)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite since your current version.

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [esbuild](https://github.com/evanw/esbuild) to 0.25.10 and updates ancestor dependencies [esbuild](https://github.com/evanw/esbuild), [laravel-vite-plugin](https://github.com/laravel/vite-plugin) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). These dependencies need to be updated together. Updates `esbuild` from 0.18.20 to 0.25.10 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2023.md) - [Commits](evanw/esbuild@v0.18.20...v0.25.10) Updates `laravel-vite-plugin` from 0.8.1 to 2.0.1 - [Release notes](https://github.com/laravel/vite-plugin/releases) - [Changelog](https://github.com/laravel/vite-plugin/blob/2.x/CHANGELOG.md) - [Upgrade guide](https://github.com/laravel/vite-plugin/blob/2.x/UPGRADE.md) - [Commits](laravel/vite-plugin@v0.8.1...v2.0.1) Updates `vite` from 4.5.14 to 7.1.7 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.1.7/packages/vite) --- updated-dependencies: - dependency-name: esbuild dependency-version: 0.25.10 dependency-type: indirect - dependency-name: laravel-vite-plugin dependency-version: 2.0.1 dependency-type: direct:development - dependency-name: vite dependency-version: 7.1.7 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 30, 2025

dependabot bot mentioned this pull request Sep 30, 2025

Bump vite and laravel-vite-plugin #363

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump esbuild, laravel-vite-plugin and vite #368

Bump esbuild, laravel-vite-plugin and vite #368

Uh oh!

dependabot bot commented on behalf of github Sep 30, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant

Uh oh!

Bump esbuild, laravel-vite-plugin and vite #368

Are you sure you want to change the base?

Bump esbuild, laravel-vite-plugin and vite #368

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 30, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.25.10

Changelog: 2023

0.19.11

v2.0.1

v2.0.0

v1.3.0

v1.2.0

v1.1.1

v1.1.0

v1.0.6

v1.0.5

v1.0.4

v1.0.3

v1.0.2

v1.0.1

v1.0.0

v2.0.1 - 2025-08-26

v1.3.0 - 2025-06-03

v1.2.0 - 2025-01-21

v1.1.1 - 2024-12-03

v1.1.0 - 2024-12-02

v1.0.6 - 2024-11-12

v1.0.5 - 2024-07-09

v1.0.4 - 2024-05-17

v1.0.3 - 2024-05-16

v1.0.2 - 2024-02-28

v1.0.1 - 2023-12-27

v1.0.0 - 2023-12-19

Upgrade Guide

0.x to 1.x

Notable Changes

Upgrade Path

Migrating from Laravel Mix to Vite

Update Laravel Framework

v7.1.7

v7.1.6

v7.1.5

v7.1.4

v7.1.3

create-vite@7.1.3

v7.1.2

create-vite@7.1.2

v7.1.1

create-vite@7.1.1

plugin-legacy@7.1.0

create-vite@7.1.0

v7.1.0

v7.1.0-beta.1

v7.1.0-beta.0

v7.0.7

v7.0.6

7.1.7 (2025-09-22)

Bug Fixes

7.1.6 (2025-09-18)

Bug Fixes

Miscellaneous Chores

7.1.5 (2025-09-08)

Bug Fixes

7.1.4 (2025-09-01)

Bug Fixes

Miscellaneous Chores

Code Refactoring

7.1.3 (2025-08-19)

Features

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Sep 30, 2025 •

edited

Loading

`0.x` to `1.x`