[pull] main from vitejs:main

.github/workflows/ci.yml

@@ -46,7 +46,7 @@ jobs:
 
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@a284dc1814e3fd07f2e34267fc8f81227ed29fb8 # v45.0.9
+        uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0
         with:
           files: |
             docs/**
@@ -81,7 +81,7 @@ jobs:
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
 
       - name: Set node version to ${{ matrix.node_version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: ${{ matrix.node_version }}
           cache: "pnpm"
@@ -154,7 +154,7 @@ jobs:
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
 
       - name: Set node version to 22
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: 22
           cache: "pnpm"

.github/workflows/copilot-setup-steps.yml

@@ -20,7 +20,7 @@ jobs:
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
 
       - name: Set node version to 22
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: 22
           cache: "pnpm"

.github/workflows/preview-release.yml

@@ -29,11 +29,12 @@ jobs:
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
 
       - name: Set node version to 22
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: 22
           registry-url: https://registry.npmjs.org/
-          cache: "pnpm"
+          # disable cache, to avoid cache poisoning (https://docs.zizmor.sh/audits/#cache-poisoning)
+          package-manager-cache: false
 
       - name: Disallow installation scripts
         run: yq '.onlyBuiltDependencies = []' -i pnpm-workspace.yaml

.github/workflows/publish.yml

@@ -24,11 +24,12 @@ jobs:
         uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
 
       - name: Set node version to 22
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: 22
           registry-url: https://registry.npmjs.org/
           # disable cache, to avoid cache poisoning (https://docs.zizmor.sh/audits/#cache-poisoning)
+          package-manager-cache: false
 
       - name: Disallow installation scripts
         run: yq '.onlyBuiltDependencies = []' -i pnpm-workspace.yaml

docs/guide/env-and-mode.md

@@ -2,6 +2,17 @@
 
 Vite exposes certain constants under the special `import.meta.env` object. These constants are defined as global variables during dev and statically replaced at build time to make tree-shaking effective.
 
+:::details Example
+
+```js
+if (import.meta.env.DEV) {
+  // code inside here will be tree-shaken in production builds
+  console.log('Dev mode')
+}
+```
+
+:::
+
 ## Built-in Constants
 
 Some built-in constants are available in all cases:

docs/guide/static-deploy-github-pages.yaml

@@ -35,7 +35,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v5
       - name: Set up Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: lts/*
           cache: 'npm'

docs/package.json

@@ -9,7 +9,7 @@
     "docs-serve": "vitepress serve"
   },
   "devDependencies": {
-    "@shikijs/vitepress-twoslash": "^3.12.2",
+    "@shikijs/vitepress-twoslash": "^3.13.0",
     "@types/express": "^5.0.3",
     "feed": "^5.1.0",
     "gsap": "^3.13.0",

package.json

@@ -40,7 +40,7 @@
     "ci-docs": "pnpm build && pnpm docs-build"
   },
   "devDependencies": {
-    "@eslint/js": "^9.35.0",
+    "@eslint/js": "^9.36.0",
     "@type-challenges/utils": "^0.1.1",
     "@types/babel__core": "^7.20.5",
     "@types/babel__preset-env": "^7.10.0",
@@ -50,14 +50,14 @@
     "@types/estree": "^1.0.8",
     "@types/etag": "^1.8.4",
     "@types/less": "^3.0.8",
-    "@types/node": "^22.18.3",
+    "@types/node": "^22.18.6",
     "@types/picomatch": "^4.0.2",
     "@types/stylus": "^0.48.43",
     "@types/ws": "^8.18.1",
     "@vitejs/release-scripts": "^1.6.0",
-    "eslint": "^9.35.0",
+    "eslint": "^9.36.0",
     "eslint-plugin-import-x": "^4.16.1",
-    "eslint-plugin-n": "^17.22.0",
+    "eslint-plugin-n": "^17.23.1",
     "eslint-plugin-regexp": "^2.10.0",
     "execa": "^9.6.0",
     "globals": "^16.4.0",
@@ -69,7 +69,7 @@
     "simple-git-hooks": "^2.13.1",
     "tsx": "^4.20.5",
     "typescript": "~5.9.2",
-    "typescript-eslint": "^8.43.0",
+    "typescript-eslint": "^8.44.0",
     "vite": "workspace:*",
     "vitest": "^3.2.4"
   },
@@ -90,7 +90,7 @@
       "eslint --cache --fix"
     ]
   },
-  "packageManager": "pnpm@10.16.1",
+  "packageManager": "pnpm@10.17.0",
   "stackblitz": {
     "startCommand": "pnpm --filter='./packages/vite' run dev"
   }

packages/create-vite/CHANGELOG.md

@@ -1,3 +1,9 @@
+## <small>[7.1.3](https://github.com/vitejs/vite/compare/create-vite@7.1.2...create-vite@7.1.3) (2025-09-22)</small>
+### Bug Fixes
+
+* **create-vite:** support deno create command ([#20806](https://github.com/vitejs/vite/issues/20806)) ([a50a162](https://github.com/vitejs/vite/commit/a50a16274ab6a23cb14b2b65b8df4a36dc5f84d2))
+* **deps:** update all non-major dependencies ([#20811](https://github.com/vitejs/vite/issues/20811)) ([9f2247c](https://github.com/vitejs/vite/commit/9f2247c066cac75746356c9391845235445a154b))
+
 ## <small>[7.1.2](https://github.com/vitejs/vite/compare/create-vite@7.1.1...create-vite@7.1.2) (2025-09-18)</small>
 ### Bug Fixes
 

packages/create-vite/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-vite",
-  "version": "7.1.2",
+  "version": "7.1.3",
   "type": "module",
   "license": "MIT",
   "author": "Evan You",

packages/create-vite/src/index.ts

@@ -625,7 +625,7 @@ function pkgFromUserAgent(userAgent: string | undefined): PkgInfo | undefined {
 
 function setupReactSwc(root: string, isTs: boolean) {
   // renovate: datasource=npm depName=@vitejs/plugin-react-swc
-  const reactSwcPluginVersion = '4.0.1'
+  const reactSwcPluginVersion = '4.1.0'
 
   editFile(path.resolve(root, 'package.json'), (content) => {
     return content.replace(
@@ -658,6 +658,10 @@ function getFullCustomCommand(customCommand: string, pkgInfo?: PkgInfo) {
         if (pkgManager === 'bun') {
           return 'bun x create-'
         }
+        // Deno uses `run -A npm:create-` instead of `create` or `init` to also provide needed perms
+        if (pkgManager === 'deno') {
+          return 'deno run -A npm:create-'
+        }
         // pnpm doesn't support the -- syntax
         if (pkgManager === 'pnpm') {
           return 'pnpm create '
@@ -669,20 +673,23 @@ function getFullCustomCommand(customCommand: string, pkgInfo?: PkgInfo) {
       })
       // Only Yarn 1.x doesn't support `@version` in the `create` command
       .replace('@latest', () => (isYarn1 ? '' : '@latest'))
-      .replace(/^npm exec/, () => {
+      .replace(/^npm exec /, () => {
         // Prefer `pnpm dlx`, `yarn dlx`, or `bun x`
         if (pkgManager === 'pnpm') {
-          return 'pnpm dlx'
+          return 'pnpm dlx '
         }
         if (pkgManager === 'yarn' && !isYarn1) {
-          return 'yarn dlx'
+          return 'yarn dlx '
         }
         if (pkgManager === 'bun') {
-          return 'bun x'
+          return 'bun x '
+        }
+        if (pkgManager === 'deno') {
+          return 'deno run -A npm:'
         }
         // Use `npm exec` in all other cases,
         // including Yarn 1.x and other custom npm clients.
-        return 'npm exec'
+        return 'npm exec '
       })
   )
 }

packages/create-vite/template-lit-ts/package.json

@@ -13,6 +13,6 @@
   },
   "devDependencies": {
     "typescript": "~5.8.3",
-    "vite": "^7.1.6"
+    "vite": "^7.1.7"
   }
 }

packages/create-vite/template-lit/package.json

@@ -12,6 +12,6 @@
     "lit": "^3.3.1"
   },
   "devDependencies": {
-    "vite": "^7.1.6"
+    "vite": "^7.1.7"
   }
 }

packages/create-vite/template-preact-ts/package.json

@@ -14,6 +14,6 @@
   "devDependencies": {
     "@preact/preset-vite": "^2.10.2",
     "typescript": "~5.8.3",
-    "vite": "^7.1.6"
+    "vite": "^7.1.7"
   }
 }

packages/create-vite/template-preact/package.json

@@ -13,6 +13,6 @@
   },
   "devDependencies": {
     "@preact/preset-vite": "^2.10.2",
-    "vite": "^7.1.6"
+    "vite": "^7.1.7"
   }
 }

packages/create-vite/template-qwik-ts/package.json

@@ -11,7 +11,7 @@
   "devDependencies": {
     "serve": "^14.2.5",
     "typescript": "~5.8.3",
-    "vite": "^7.1.6"
+    "vite": "^7.1.7"
   },
   "dependencies": {
     "@builder.io/qwik": "^1.16.0"

packages/create-vite/template-qwik/package.json

@@ -10,7 +10,7 @@
   },
   "devDependencies": {
     "serve": "^14.2.5",
-    "vite": "^7.1.6"
+    "vite": "^7.1.7"
   },
   "dependencies": {
     "@builder.io/qwik": "^1.16.0"

packages/create-vite/template-react-ts/package.json

@@ -14,16 +14,16 @@
     "react-dom": "^19.1.1"
   },
   "devDependencies": {
-    "@eslint/js": "^9.35.0",
+    "@eslint/js": "^9.36.0",
     "@types/react": "^19.1.13",
     "@types/react-dom": "^19.1.9",
-    "@vitejs/plugin-react": "^5.0.2",
-    "eslint": "^9.35.0",
+    "@vitejs/plugin-react": "^5.0.3",
+    "eslint": "^9.36.0",
     "eslint-plugin-react-hooks": "^5.2.0",
     "eslint-plugin-react-refresh": "^0.4.20",
     "globals": "^16.4.0",
     "typescript": "~5.8.3",
-    "typescript-eslint": "^8.43.0",
-    "vite": "^7.1.6"
+    "typescript-eslint": "^8.44.0",
+    "vite": "^7.1.7"
   }
 }

packages/create-vite/template-react/package.json

@@ -14,14 +14,14 @@
     "react-dom": "^19.1.1"
   },
   "devDependencies": {
-    "@eslint/js": "^9.35.0",
+    "@eslint/js": "^9.36.0",
     "@types/react": "^19.1.13",
     "@types/react-dom": "^19.1.9",
-    "@vitejs/plugin-react": "^5.0.2",
-    "eslint": "^9.35.0",
+    "@vitejs/plugin-react": "^5.0.3",
+    "eslint": "^9.36.0",
     "eslint-plugin-react-hooks": "^5.2.0",
     "eslint-plugin-react-refresh": "^0.4.20",
     "globals": "^16.4.0",
-    "vite": "^7.1.6"
+    "vite": "^7.1.7"
   }
 }

packages/create-vite/template-solid-ts/package.json

@@ -13,7 +13,7 @@
   },
   "devDependencies": {
     "typescript": "~5.8.3",
-    "vite": "^7.1.6",
+    "vite": "^7.1.7",
     "vite-plugin-solid": "^2.11.8"
   }
 }

packages/create-vite/template-solid/package.json

@@ -12,7 +12,7 @@
     "solid-js": "^1.9.9"
   },
   "devDependencies": {
-    "vite": "^7.1.6",
+    "vite": "^7.1.7",
     "vite-plugin-solid": "^2.11.8"
   }
 }

packages/create-vite/template-svelte-ts/package.json

@@ -12,9 +12,9 @@
   "devDependencies": {
     "@sveltejs/vite-plugin-svelte": "^6.2.0",
     "@tsconfig/svelte": "^5.0.5",
-    "svelte": "^5.38.10",
+    "svelte": "^5.39.4",
     "svelte-check": "^4.3.1",
     "typescript": "~5.8.3",
-    "vite": "^7.1.6"
+    "vite": "^7.1.7"
   }
 }

packages/create-vite/template-svelte/package.json

@@ -10,7 +10,7 @@
   },
   "devDependencies": {
     "@sveltejs/vite-plugin-svelte": "^6.2.0",
-    "svelte": "^5.38.10",
-    "vite": "^7.1.6"
+    "svelte": "^5.39.4",
+    "vite": "^7.1.7"
   }
 }

packages/create-vite/template-vanilla-ts/package.json

@@ -10,6 +10,6 @@
   },
   "devDependencies": {
     "typescript": "~5.8.3",
-    "vite": "^7.1.6"
+    "vite": "^7.1.7"
   }
 }

packages/create-vite/template-vanilla/package.json

@@ -9,6 +9,6 @@
     "preview": "vite preview"
   },
   "devDependencies": {
-    "vite": "^7.1.6"
+    "vite": "^7.1.7"
   }
 }

packages/create-vite/template-vue-ts/package.json

@@ -15,7 +15,7 @@
     "@vitejs/plugin-vue": "^6.0.1",
     "@vue/tsconfig": "^0.8.1",
     "typescript": "~5.8.3",
-    "vite": "^7.1.6",
+    "vite": "^7.1.7",
     "vue-tsc": "^3.0.7"
   }
 }

packages/create-vite/template-vue/package.json

@@ -13,6 +13,6 @@
   },
   "devDependencies": {
     "@vitejs/plugin-vue": "^6.0.1",
-    "vite": "^7.1.6"
+    "vite": "^7.1.7"
   }
 }

packages/plugin-legacy/package.json

@@ -45,7 +45,7 @@
     "@babel/preset-env": "^7.28.3",
     "babel-plugin-polyfill-corejs3": "^0.13.0",
     "babel-plugin-polyfill-regenerator": "^0.6.5",
-    "browserslist": "^4.26.0",
+    "browserslist": "^4.26.2",
     "browserslist-to-esbuild": "^2.1.1",
     "core-js": "^3.45.1",
     "magic-string": "^0.30.19",

packages/vite/CHANGELOG.md

@@ -1,3 +1,13 @@
+## <small>[7.1.7](https://github.com/vitejs/vite/compare/v7.1.6...v7.1.7) (2025-09-22)</small>
+### Bug Fixes
+
+* **build:** fix ssr environment `emitAssets: true` when `sharedConfigBuild: true` ([#20787](https://github.com/vitejs/vite/issues/20787)) ([4c4583c](https://github.com/vitejs/vite/commit/4c4583ce7a13306e0853901570c5d95517fe81da))
+* **client:** use CSP nonce when rendering error overlay ([#20791](https://github.com/vitejs/vite/issues/20791)) ([9bc9d12](https://github.com/vitejs/vite/commit/9bc9d1258f550e9d8f5e530cd27aecb1bee32bdb))
+* **deps:** update all non-major dependencies ([#20811](https://github.com/vitejs/vite/issues/20811)) ([9f2247c](https://github.com/vitejs/vite/commit/9f2247c066cac75746356c9391845235445a154b))
+* **glob:** handle glob imports from folders starting with dot ([#20800](https://github.com/vitejs/vite/issues/20800)) ([105abe8](https://github.com/vitejs/vite/commit/105abe87c412cf0f83859ba41fed869221cbb3e0))
+* **hmr:** trigger prune event when import is removed from non hmr module ([#20768](https://github.com/vitejs/vite/issues/20768)) ([9f32b1d](https://github.com/vitejs/vite/commit/9f32b1dc710991c53a9f665c8d0d6945f342bf92))
+* **hmr:** wait for `import.meta.hot.prune` callbacks to complete before running other HMRs ([#20698](https://github.com/vitejs/vite/issues/20698)) ([98a3484](https://github.com/vitejs/vite/commit/98a3484733443ee529870477a6ab6a03572e3cbc))
+
 ## <small>[7.1.6](https://github.com/vitejs/vite/compare/v7.1.5...v7.1.6) (2025-09-18)</small>
 ### Bug Fixes