[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
vite (source)	8.0.10 → 8.0.11

---

Release Notes

vitejs/vite (vite)

v8.0.11

Compare Source

Features

• update rolldown to 1.0.0-rc.18 (#​22360) (3f80524)

Bug Fixes

• deps: update all non-major dependencies (#​22334) (672c962)
• deps: update all non-major dependencies (#​22382) (5c0cfcb)
• glob: align hmr matcher options with glob enumeration (#​22306) (30028f9)
• make separate object instance for each environment (#​22276) (7c2aa3b)

Documentation

• create-vite: list react-compiler templates in README (#​22347) (7c3a61f)
• explain mergeConfig skips null/undefined (#​22325) (2151f70)
• mention native config loader in CLI options (#​22348) (0420c5d)
• update evan's x handle (640202a)

Miscellaneous Chores

• deps: update dependency tsdown to ^0.21.10 (#​22333) (3b51e05)
• deps: update rolldown-related dependencies (#​22383) (555ff36)
• deps: update transitive packages to fix npm audit alerts (#​22316) (86aee62)

Code Refactoring

• devtools integration (#​22312) (3c8bf06)
• remove unnecessary async (#​22296) (b31fd35)
• show direct path type in bad character warning (#​22339) (0c162e9)

Tests

• create-vite: use short help alias (#​22389) (994ab66)

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

^{Need help on this PR? Tag @codesmith with what you need.}

• Let Codesmith autofix CI failures and bot reviews

[claude]

Claude finished @renovate[bot]'s task in 50s —— View job

---

Code review — vite 8.0.10 → 8.0.11

• Inspect package.json diff
• Sanity-check package-lock.json diff
• Verify range / lock alignment
• Post review

Verdict: looks good — patch-level bump, lockfile is internally consistent.

What changed beyond the title:

Package	From → To	Why
vite (devDep)	8.0.10 → 8.0.11	the bump
@rolldown/binding-* (transitive, all platforms)	1.0.0-rc.17 → 1.0.0-rc.18	matches vite changelog (#22360)
@oxc-project/types (transitive)	0.127.0 → 0.128.0	rolldown alignment
postcss (transitive)	8.5.10 → 8.5.14	non-major bump in vite's deps

Other notes:

• The Linux rolldown binding entries pick up new "libc": ["glibc" \| "musl"] annotations — that's an upstream metadata addition in rc.18, not something this repo controls.
• package.json (vite: 8.0.11) and the root node_modules/vite entry in the lockfile match. services/qyl.dashboard/ is the only frontend in qyl.slnx, so no other lockfile needs to track this.
• Vite 8.0.11 is patch-level; the documented changes (env isolation fix, glob HMR matcher alignment, devtools refactor) are upstream-internal and shouldn't affect this dashboard's vite.config.ts / Vitest setup.
• Renovate has automerge enabled for this PR, so no further action needed from a reviewer once CI passes.

No code changes pushed — patch-level dep bump with no qyl-side touch points to fix.
· branch renovate/vite-8.x

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[claude]

Claude finished @renovate[bot]'s task in 47s —— View job

---

Code review — vite 8.0.10 → 8.0.11 (re-check)

• Re-verify package.json + package-lock.json diff vs origin/main
• Confirm lockfile root entry matches manifest (node_modules/vite → 8.0.11)
• Apply decision tree

Verdict: clean — approve.

Patch-level dep bump in services/qyl.dashboard/. No qyl-side touch points, no rule violations, no stale codegen, no doc drift. Manifest pin vite: 8.0.11 aligns with the lockfile root entry. Transitive bumps (@rolldown/binding-* rc.17→rc.18, @oxc-project/types 0.127→0.128, postcss 8.5.10→8.5.14) match the upstream changelog and are internally consistent.

The earlier review at 08:04 already covered the substantive analysis — nothing new in this synchronize event to change that conclusion. Nothing to commit.
· branch renovate/vite-8.x