Skip to content

build(deps-dev): bump the dev-dependencies group with 3 updates - #6

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/dev-dependencies-549c5ea04f
Open

build(deps-dev): bump the dev-dependencies group with 3 updates#6
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/dev-dependencies-549c5ea04f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 9, 2026

Copy link
Copy Markdown

Bumps the dev-dependencies group with 3 updates: @codecov/vite-plugin, @vitejs/plugin-vue and vite.

Updates @codecov/vite-plugin from 1.9.1 to 2.0.1

Maintainer changes

This version was pushed to npm by thomasrockhu, a new releaser for @​codecov/vite-plugin since your current version.


Updates @vitejs/plugin-vue from 6.0.1 to 6.0.6

Release notes

Sourced from @​vitejs/plugin-vue's releases.

plugin-vue@6.0.6

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.5

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.4

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.3

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.2

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​vitejs/plugin-vue's changelog.

6.0.6 (2026-04-13)

Features

  • plugin-vue: propagate multiRoot for template-only vapor components (#745) (9e07ae9)

Bug Fixes

  • deps: update all non-major dependencies (#738) (050c996)

Miscellaneous Chores

6.0.5 (2026-03-12)

Miscellaneous Chores

  • remove Vite 8 beta from supported range (#746) (b3f23e4)

6.0.4 (2026-02-02)

Bug Fixes

  • deps: update all non-major dependencies (#709) (924b28e)
  • deps: update all non-major dependencies (#722) (8a95809)
  • deps: update all non-major dependencies (#726) (e69d751)

Miscellaneous Chores

6.0.3 (2025-12-12)

Features

Bug Fixes

  • deps: update all non-major dependencies (#707) (799f419)
  • hmr: reload when components switch between vapor and vdom (#714) (6c45fe5)

Performance Improvements

Miscellaneous Chores

... (truncated)

Commits
  • 51dbf4b release: plugin-vue@6.0.6
  • 9e07ae9 feat(plugin-vue): propagate multiRoot for template-only vapor components (#745)
  • 050c996 fix(deps): update all non-major dependencies (#738)
  • 6d834d8 chore: remove unused deps (#760)
  • a0e1ef8 chore(deps): update dependency rollup to ^4.59.0 (#749)
  • 6ad6cc1 release: plugin-vue@6.0.5
  • b3f23e4 chore: remove Vite 8 beta from supported range (#746)
  • 5527bf4 release: plugin-vue@6.0.4
  • e69d751 fix(deps): update all non-major dependencies (#726)
  • cd0c8a8 chore(deps): update dependency rollup to ^4.57.1 (#733)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​vitejs/plugin-vue since your current version.


Updates vite from 6.4.1 to 8.0.11

Release notes

Sourced from vite's releases.

v8.0.11

Please refer to CHANGELOG.md for details.

v8.0.10

Please refer to CHANGELOG.md for details.

v8.0.9

Please refer to CHANGELOG.md for details.

v8.0.8

Please refer to CHANGELOG.md for details.

v8.0.7

Please refer to CHANGELOG.md for details.

v8.0.6

Please refer to CHANGELOG.md for details.

v8.0.5

Please refer to CHANGELOG.md for details.

v8.0.4

Please refer to CHANGELOG.md for details.

create-vite@8.0.3

Please refer to CHANGELOG.md for details.

v8.0.3

Please refer to CHANGELOG.md for details.

create-vite@8.0.2

Please refer to CHANGELOG.md for details.

v8.0.2

Please refer to CHANGELOG.md for details.

create-vite@8.0.1

Please refer to CHANGELOG.md for details.

v8.0.1

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.1

Please refer to CHANGELOG.md for details.

create-vite@8.0.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.0

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.0.11 (2026-05-07)

Features

Bug Fixes

  • deps: update all non-major dependencies (#22334) (672c962)
  • deps: update all non-major dependencies (#22382) (5c0cfcb)
  • glob: align hmr matcher options with glob enumeration (#22306) (30028f9)
  • make separate object instance for each environment (#22276) (7c2aa3b)

Documentation

Miscellaneous Chores

  • deps: update dependency tsdown to ^0.21.10 (#22333) (3b51e05)
  • deps: update rolldown-related dependencies (#22383) (555ff36)
  • deps: update transitive packages to fix npm audit alerts (#22316) (86aee62)

Code Refactoring

Tests

8.0.10 (2026-04-23)

Features

Bug Fixes

  • hmrClient.logger.debug and hmrClient.logger.error looked different from other HMR logs (#22147) (a4d828f)
  • css: show filename in CSS minification warnings for .css?inline (#22292) (83f0a78)
  • optimizer: allow user transform.target to override default in optimizeDeps (#22273) (5c7cec6)
  • remove format sniffing module resolution from JS resolver (#22297) (b8a21cc)

Code Refactoring

... (truncated)

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-dependencies group with 3 updates: @codecov/vite-plugin, [@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `@codecov/vite-plugin` from 1.9.1 to 2.0.1

Updates `@vitejs/plugin-vue` from 6.0.1 to 6.0.6
- [Release notes](https://github.com/vitejs/vite-plugin-vue/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-vue/blob/main/packages/plugin-vue/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-vue/commits/plugin-vue@6.0.6/packages/plugin-vue)

Updates `vite` from 6.4.1 to 8.0.11
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.11/packages/vite)

---
updated-dependencies:
- dependency-name: "@codecov/vite-plugin"
  dependency-version: 2.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: "@vitejs/plugin-vue"
  dependency-version: 6.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: vite
  dependency-version: 8.0.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 9, 2026
@inkatail
inkatail force-pushed the master branch 2 times, most recently from 6e96920 to 4a23b28 Compare June 17, 2026 19:28
inkatail pushed a commit that referenced this pull request Jun 27, 2026
…lkan)

On Linux with the Vulkan encoder, reinit triggered by display switching
or mode changes can crash Sunshine due to packets in flight after encoder
teardown.

With extra debug logging, this pattern was occurring:

Jun 26 23:57:21 archlinux sunshine[263621]: [2026-06-26 23:57:21.625]: Warning: [crash] encode_avcodec session=0x7fd8c89ad480 thread=140569594554048 avctx=0x7fd8c8c7f980 hw_frames=0x7fd8c883a940 FFmpeg frames ctx=0x7fd8c8a6b200
Jun 26 23:57:21 archlinux sunshine[263621]: [2026-06-26 23:57:21.628]: Warning: PACKET DESTROY 0x7fd8c8b76d00
Jun 26 23:57:21 archlinux sunshine[263621]: [2026-06-26 23:57:21.628]: Warning: [crash] SESSION DESTROY START 0x7fd8c89ad480
Jun 26 23:57:21 archlinux sunshine[263621]: [2026-06-26 23:57:21.628]: Warning: PACKET DESTROY 0x7fd8e8bfd490
Jun 26 23:57:21 archlinux sunshine[263621]: [2026-06-26 23:57:21.628]: Warning: [crash] Calling avcodec_ctx.reset()
Jun 26 23:57:21 archlinux sunshine[263621]: [2026-06-26 23:57:21.628]: Warning: [crash] SESSION DESTROY AFTER RESET 0x7fd8c89ad480
Jun 26 23:57:21 archlinux sunshine[263621]: [2026-06-26 23:57:21.628]: Warning: [crash] Calling device.reset()
Jun 26 23:57:21 archlinux sunshine[263621]: [2026-06-26 23:57:21.629]: Warning: PACKET DESTROY 0x7fd8c882de40
Jun 26 23:57:21 archlinux kernel: rtsp::handler[263877]: segfault at 7fd8a0af7e20 ip 00007fd8a0af7e20 sp 00007fd8ebffd638 error 14 likely on CPU 11 (core 3, socket 0)
Jun 26 23:57:21 archlinux kernel: Code: Unable to access opcode bytes at 0x7fd8a0af7df6.
Jun 26 23:57:21 archlinux systemd-coredump[263973]: Process 263621 (sunshine) of user 1000 terminated abnormally with signal 11/SEGV, processing...
Jun 26 23:57:21 archlinux systemd[1]: Started Process Core Dump (PID 263973/UID 0).
Jun 26 23:57:21 archlinux systemd[1]: Started Pass systemd-coredump journal entries to relevant user for potential DrKonqi handling.
Jun 26 23:57:22 archlinux systemd-coredump[263974]: [🡕] Process 263621 (sunshine) of user 1000 dumped core.

                                                    Stack trace of thread 263877:
                                                    #0  0x00007fd8a0af7e20 n/a (libvulkan_radeon.so + 0xf7e20)
                                                    #1  0x00007fd8a0bcd8cf n/a (libvulkan_radeon.so + 0x1cd8cf)
                                                    #2  0x00005636d70c0ea4 ff_vk_unmap_buffers (sunshine + 0x45dea4)
                                                    #3  0x00005636d70c100b ff_vk_unmap_buffer (sunshine + 0x45e00b)
                                                    #4  0x00005636d70c102d free_data_buf (sunshine + 0x45e02d)
                                                    #5  0x00005636d7198a17 buffer_pool_flush (sunshine + 0x535a17)
                                                    #6  0x00005636d7198c26 buffer_replace (sunshine + 0x535c26)
                                                    #7  0x00005636d704596e av_packet_unref (sunshine + 0x3e296e)
                                                    #8  0x00005636d70459da av_packet_free (sunshine + 0x3e29da)
                                                    #9  0x00005636d6eb51a8 _ZNSt10unique_ptrIN5video12packet_raw_tESt14default_deleteIS1_EED2Ev.lto_priv.0 (sunshine + 0x2521a8)
                                                    #10 0x00005636d6ea6b69 _ZN6stream20videoBroadcastThreadERN5boost4asio21basic_datagram_socketINS1_2ip3udpENS1_15any_io_executorEEE (sunshine + 0x243b69)
                                                    #11 0x00005636d7f4f749 execute_native_thread_routine (sunshine + 0x12ec749)
                                                    #12 0x00007fd938a97739 n/a (libc.so.6 + 0x97739)
                                                    #13 0x00007fd938b1bedc n/a (libc.so.6 + 0x11bedc)

Since an in-flight packet's packet_raw_avcodec destructor was calling av_packet_free(..) after device.reset(), a UAF-type SEGFAULT would manifest. Moving the breakout check
of the encoding loop to check immediately before encode() resolves the issue on my system via repeated stress testing. It may be possible that in-flight packets can still
be active, which may necessitate future refcounting of packets in flight and waiting for it to drop to zero before breaking out of the encode loop, but for now, this minimal change
fully resolves the issue on my system.
@inkatail
inkatail force-pushed the master branch 2 times, most recently from 11d10c8 to 665aef9 Compare July 3, 2026 17:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants