Skip to content

chore(deps-dev): bump vite from 6.4.3 to 6.4.4 - #9666

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vite-6.4.4
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vite-6.4.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Contributor

Bumps vite from 6.4.3 to 6.4.4.

Release notes

Sourced from vite's releases.

v6.4.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.4 (2026-10-06)

Commits
  • 5f0d9a4 release: v6.4.4
  • eec6464 fix(server): check resolved ids for transform access (#20410)
  • e570d8d fix(server): store ids to safeModulePaths rather than URLs (#23656)
  • 8afec69 fix(deps): update launch-editor to v2.14.2 (#23654)
  • 19902cf fix(html): filename passed to transformIndexHtml should not include queries (...
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.4.3 to 6.4.4.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.4/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.4/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 6.4.4
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI balanced review requested due to automatic review settings October 22, 2026 01:45
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 22, 2026
@github-actions

github-actions Bot commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

🤖 AI PR Validation Report

PR Review Results

Thank you for your submission! Here's detailed feedback on your PR title and body compliance:

✅ PR Title

  • Current: chore(deps-dev): bump vite from 6.4.3 to 6.4.4
  • Issue: The title is specific and accurately describes the dependency update.
  • Recommendation: No change required.

❌ Commit Type

  • No commit type checkbox from the required template is present in the PR body.
  • Recommendation: Add the template and select exactly one type: - [x] chore - Maintenance/tooling.

❌ Risk Level

  • No risk level is selected in the PR body, and no required risk label (risk:low, risk:medium, or risk:high) is present.
  • Based on the diff, the advised risk is Low: this is a development dependency patch update affecting Vite and its transitive build-tool dependencies, with no application source changes.
  • Recommendation: Add - [x] Low - Minor changes, limited scope under ## Risk Level and apply the risk:low label. Only select one risk level.

❌ What & Why

  • Current: (Missing; the body contains only the generated Dependabot dependency details.)
  • Issue: The required ## What & Why section is missing.
  • Recommendation: Add a brief explanation such as: Update Vite from 6.4.3 to 6.4.4 to incorporate the upstream patch fixes and refresh the related lockfile dependencies.

❌ Impact of Change

  • The required ## Impact of Change section and its Users, Developers, and System impact details are missing.
  • Recommendation: Add:
    • Users: No intended user-facing behavior changes; build tooling receives a patch update.
    • Developers: Local development and build commands use Vite 6.4.4 and refreshed transitive tooling dependencies.
    • System: No runtime or production architecture changes; package-lock resolution changes include Rollup, Lightning CSS, PostCSS, and related packages.

✅ Test Plan

  • This is a dependency/tooling-only change with no application source or test-file changes in the diff, so additional tests are not required by the review criteria.
  • Recommendation: Add the template's ## Test Plan section for completeness. If manual validation was performed, select - [x] Manual testing completed and briefly describe the build or CI validation.

⚠️ Contributors

  • The Contributors section is missing.
  • Recommendation: Add the section and credit PMs, designers, reviewers, or other contributors where applicable. This is optional and does not block approval.

⚠️ Screenshots/Videos

  • No screenshots or videos are included.
  • This is appropriate because the diff contains no visual or user-interface changes. No screenshots are required.

Summary Table

Section Status Recommendation
Title ✅ Keep the current specific title.
Commit Type ❌ Add the template and select chore.
Risk Level ❌ Select Low and add the risk:low label.
What & Why ❌ Explain the Vite patch update and its purpose.
Impact of Change ❌ Describe the lack of runtime impact and tooling changes.
Test Plan ✅ No automated tests are required for this tooling-only dependency update; document any validation if performed.
Contributors ⚠️ Add contributor credit where applicable.
Screenshots/Videos ⚠️ Not applicable because there are no visual changes.

The PR title passes and the advised risk is Low, but the submission does not pass because the required body sections and risk label are missing. Please update the PR body using the required template, select chore and Low risk, and apply the risk:low label before resubmitting.


Powered by: Logic App (fallback) | Last updated: Thu, 22 Oct 2026 01:46:33 GMT

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

The lockfile refresh affects shared build and runtime dependencies beyond Vite, and passing workspace CI has not been verified.

No open issues 🎉

What changed in this PR

Updates Vite from 6.4.3 to 6.4.4 across Logic Apps UX applications and the A2A core library, bringing upstream development-server and HTML transformation fixes.

Changes:

  • Raises the Vite dependency range to ^6.4.4 in four workspace packages.
  • Refreshes lockfile resolutions, including shared build and runtime dependencies beyond Vite.
File Description
pnpm-lock.yaml Updates Vite resolutions and refreshes transitive dependencies.
libs/​a2a-core/​package.json Bumps Vite for A2A core development tooling.
apps/​vs-code-react/​package.json Bumps Vite for the VS Code webview application.
apps/​Standalone/​package.json Bumps Vite for the standalone designer.
apps/​iframe-app/​package.json Bumps Vite for the iframe application.

Review effort: Balanced

@github-actions

Copy link
Copy Markdown
Contributor

📊 Coverage Check

No source files changed in this PR.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code needs-pr-update

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant