Skip to content

chore(deps,web-ui)(deps-dev): bump @vitejs/plugin-react from 5.2.0 to 6.0.3 in /web-ui - #494

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web-ui/vitejs/plugin-react-6.0.3
Closed

chore(deps,web-ui)(deps-dev): bump @vitejs/plugin-react from 5.2.0 to 6.0.3 in /web-ui#494
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web-ui/vitejs/plugin-react-6.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps @vitejs/plugin-react from 5.2.0 to 6.0.3.

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.0.3

No release notes provided.

plugin-react@6.0.2

Allow all options in reactCompilerPreset (#1189)

This is a type only change. Only compilationMode and target options were available for reactCompilerPreset.

plugin-react@6.0.1

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

plugin-react@6.0.0

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:

 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})

For React compiler users, you can use reactCompilerPreset for easier setup with preconfigured filter to improve build performance:

 import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [
</tr></table>

... (truncated)

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.0.3 (2026-06-23)

6.0.2 (2026-05-14)

Allow all options in reactCompilerPreset (#1189)

This is a type only change. Only compilationMode and target options were available for reactCompilerPreset.

6.0.1 (2026-03-13)

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

6.0.0 (2026-03-12)

6.0.0-beta.0 (2026-03-03)

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:

 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})

For React compiler users, you can use reactCompilerPreset for easier setup with preconfigured filter to improve build performance:

 import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
</tr></table> 

... (truncated)

Commits
  • 640fd35 release: plugin-react@6.0.3
  • 889efb0 fix(deps): update all non-major dependencies (#1249)
  • 6c57dd4 fix(plugin-react): use '/' base in bundledDev preamble to fix non-root base p...
  • 3cc33a7 fix(deps): update react-related dependencies (#1245)
  • c0f7c7f docs: mention the Biome rule in the "Consistent components exports" section (...
  • cd80f0f fix(deps): update all non-major dependencies (#1241)
  • e38acca fix(deps): update all non-major dependencies (#1227)
  • 9a9bb26 perf(react): improve react compiler preset so that slightly more modules are ...
  • 6535b55 release: plugin-react@6.0.2
  • bf0e43b feat(react): whitelist debugging-options (#1189)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) from 5.2.0 to 6.0.3.
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.3/packages/plugin-react)

---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: deps, web-ui. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Weegy added a commit that referenced this pull request Jul 26, 2026
* chore(middleware): bump dependencies (dependabot batch 2026-07-26)

openai 6.42.0 -> 6.46.0 (#492)
@anthropic-ai/sdk 0.110.0 -> 0.111.0 (#491)
sharp 0.33.5 -> 0.35.3 (#490)
ws 8.18.0/8.21.0 -> 8.21.1, bonjour-service 1.4.2 -> 1.4.3 (#502)
prettier 3.9.4 -> 3.9.5, tsx 4.23.0 -> 4.23.1, vitest 4.1.8/4.1.9 -> 4.1.10 (#487)

* chore(web-ui): bump dependencies (dependabot batch 2026-07-26)

@tailwindcss/postcss 4.3.2 -> 4.3.3, @types/node 22.20.0 -> 22.20.1,
eslint 9.39.4 -> 9.39.5, vitest 4.1.9 -> 4.1.10 (#503)
@xyflow/react 12.11.1 -> 12.11.2, next-intl 4.13.1 -> 4.13.2 (#493)
@vitejs/plugin-react 5.2.0 -> 6.0.3 -- major bump, CI-validated build/typecheck/lint/vitest (#494)
cytoscape 3.33.4 -> 3.34.0 (#250, stale PR reapplied onto fresh main)

* chore(ci): bump actions/setup-node v4 -> v7, actions/setup-python v6 -> v7

actions/setup-node@v7 across ci.yml, auto-release.yml, desktop-apps.yml, release.yml (#500)
actions/setup-python@v7 in desktop-apps.yml (#501)

* chore(deps): ignore typescript major bumps (dependabot batch 2026-07-26)

PR #495 (typescript 5.9.3 -> 7.0.2, the Go-native tsgo rewrite) fails
web-ui build + typecheck + vitest CI outright. Excluded from this batch;
add an ignore rule for typescript semver-major so dependabot stops
reopening it weekly until the ecosystem catches up.

* fix(ci): upgrade npm before audit step to dodge retired quick-audit endpoint

Both 'audit (high+critical block)' checks on this PR (middleware, web-ui)
fail with a 400 'Invalid package tree' from npm's registry -- reproduces
identically against a pristine, unmodified main checkout (confirmed via
fresh npm ci + npm audit), and main's last green CI run was 2026-07-20.
Not caused by this batch's dependency bumps: npm's registry is retiring
the legacy 'quick audit' endpoint npm 10.x calls, and now hard-rejects it.
A current npm CLI uses the newer bulk-advisory endpoint instead.

* fix(ci): degrade audit gate gracefully on upstream npm registry outage

The npm@latest bump alone didn't fix it: every npm CLI I tested (10.9.8,
11.0.0, 11.16.0, 11.18.0, latest/12.0.1) fails against npm's registry
right now -- 10.x's retiring 'quick audit' endpoint 400s outright, and
11.x/12.x's newer bulk-advisory endpoint fails to gzip-decode its own
response. This is a registry-side outage, confirmed reproducible even
against a pristine main checkout, not something fixable by picking an
npm version.

npm's own error handler prints the literal string 'audit endpoint
returned an error' whenever the HTTP call itself fails, distinct from a
genuine vulnerabilities-found failure. Detect that string and treat it
as non-blocking (::warning:: + exit 0) so this gate degrades gracefully
during an outage instead of wedging every PR in the repo; real
high/critical findings still hard-fail as before.
@dependabot @github

dependabot Bot commented on behalf of github Jul 26, 2026

Copy link
Copy Markdown
Contributor Author

Looks like @vitejs/plugin-react is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 26, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/web-ui/vitejs/plugin-react-6.0.3 branch July 26, 2026 08:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants