[pull] main from vitejs:main

.github/workflows/ci.yml

@@ -81,7 +81,7 @@ jobs:
         uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
 
       - name: Set node version to ${{ matrix.node_version }}
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node_version }}
           cache: "pnpm"
@@ -154,7 +154,7 @@ jobs:
         uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
 
       - name: Set node version to 22
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
           node-version: 22
           cache: "pnpm"

.github/workflows/copilot-setup-steps.yml

@@ -20,7 +20,7 @@ jobs:
         uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
 
       - name: Set node version to 22
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
           node-version: 22
           cache: "pnpm"

.github/workflows/preview-release.yml

@@ -29,7 +29,7 @@ jobs:
         uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
 
       - name: Set node version to 22
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
           node-version: 22
           registry-url: https://registry.npmjs.org/

.github/workflows/publish.yml

@@ -24,7 +24,7 @@ jobs:
         uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
 
       - name: Set node version to 22
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
           node-version: 22
           registry-url: https://registry.npmjs.org/

docs/guide/static-deploy-github-pages.yaml

@@ -35,7 +35,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v5
       - name: Set up Node
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
           node-version: lts/*
           cache: 'npm'

docs/package.json

@@ -15,7 +15,7 @@
     "gsap": "^3.13.0",
     "markdown-it-image-size": "^15.0.1",
     "vitepress": "^2.0.0-alpha.12",
-    "vitepress-plugin-group-icons": "^1.6.3",
+    "vitepress-plugin-group-icons": "^1.6.4",
     "vitepress-plugin-llms": "^1.8.0",
     "vue": "^3.5.22",
     "vue-tsc": "^3.1.1"

package.json

@@ -40,7 +40,7 @@
     "ci-docs": "pnpm build && pnpm docs-build"
   },
   "devDependencies": {
-    "@eslint/js": "^9.37.0",
+    "@eslint/js": "^9.38.0",
     "@type-challenges/utils": "^0.1.1",
     "@types/babel__core": "^7.20.5",
     "@types/babel__preset-env": "^7.10.0",
@@ -50,20 +50,20 @@
     "@types/estree": "^1.0.8",
     "@types/etag": "^1.8.4",
     "@types/less": "^3.0.8",
-    "@types/node": "^22.18.10",
+    "@types/node": "^22.18.11",
     "@types/picomatch": "^4.0.2",
     "@types/stylus": "^0.48.43",
     "@types/ws": "^8.18.1",
     "@vitejs/release-scripts": "^1.6.0",
-    "eslint": "^9.37.0",
+    "eslint": "^9.38.0",
     "eslint-plugin-import-x": "^4.16.1",
     "eslint-plugin-n": "^17.23.1",
     "eslint-plugin-regexp": "^2.10.0",
     "execa": "^9.6.0",
     "globals": "^16.4.0",
     "lint-staged": "^16.2.4",
     "picocolors": "^1.1.1",
-    "playwright-chromium": "^1.56.0",
+    "playwright-chromium": "^1.56.1",
     "prettier": "3.6.2",
     "rolldown": "^1.0.0-beta.43",
     "rollup": "^4.43.0",
@@ -91,7 +91,7 @@
       "eslint --cache --fix"
     ]
   },
-  "packageManager": "pnpm@10.18.2",
+  "packageManager": "pnpm@10.18.3",
   "stackblitz": {
     "startCommand": "pnpm --filter='./packages/vite' run dev"
   }

packages/create-vite/src/index.ts

@@ -661,7 +661,7 @@ async function init() {
 
   if (useRolldownVite) {
     // renovate: datasource=npm depName=rolldown-vite
-    const rolldownViteVersion = '7.1.16'
+    const rolldownViteVersion = '7.1.17'
     const pkgVersion = `npm:rolldown-vite@${rolldownViteVersion}`
     pkg.devDependencies.vite = pkgVersion
     switch (pkgManager) {

packages/create-vite/template-lit-ts/package.json

@@ -13,6 +13,6 @@
   },
   "devDependencies": {
     "typescript": "~5.9.3",
-    "vite": "^7.1.9"
+    "vite": "^7.1.10"
   }
 }

packages/create-vite/template-lit/package.json

@@ -12,6 +12,6 @@
     "lit": "^3.3.1"
   },
   "devDependencies": {
-    "vite": "^7.1.9"
+    "vite": "^7.1.10"
   }
 }

packages/create-vite/template-preact-ts/package.json

@@ -13,8 +13,8 @@
   },
   "devDependencies": {
     "@preact/preset-vite": "^2.10.2",
-    "@types/node": "^24.7.2",
+    "@types/node": "^24.8.1",
     "typescript": "~5.9.3",
-    "vite": "^7.1.9"
+    "vite": "^7.1.10"
   }
 }

packages/create-vite/template-preact/package.json

@@ -13,6 +13,6 @@
   },
   "devDependencies": {
     "@preact/preset-vite": "^2.10.2",
-    "vite": "^7.1.9"
+    "vite": "^7.1.10"
   }
 }

packages/create-vite/template-qwik-ts/package.json

@@ -9,10 +9,10 @@
     "preview": "serve dist"
   },
   "devDependencies": {
-    "@types/node": "^24.7.2",
+    "@types/node": "^24.8.1",
     "serve": "^14.2.5",
     "typescript": "~5.9.3",
-    "vite": "^7.1.9"
+    "vite": "^7.1.10"
   },
   "dependencies": {
     "@builder.io/qwik": "^1.17.0"

packages/create-vite/template-qwik/package.json

@@ -10,7 +10,7 @@
   },
   "devDependencies": {
     "serve": "^14.2.5",
-    "vite": "^7.1.9"
+    "vite": "^7.1.10"
   },
   "dependencies": {
     "@builder.io/qwik": "^1.17.0"

packages/create-vite/template-react-ts/package.json

@@ -14,17 +14,17 @@
     "react-dom": "^19.2.0"
   },
   "devDependencies": {
-    "@eslint/js": "^9.37.0",
-    "@types/node": "^24.7.2",
+    "@eslint/js": "^9.38.0",
+    "@types/node": "^24.8.1",
     "@types/react": "^19.2.2",
     "@types/react-dom": "^19.2.2",
     "@vitejs/plugin-react": "^5.0.4",
-    "eslint": "^9.37.0",
+    "eslint": "^9.38.0",
     "eslint-plugin-react-hooks": "^5.2.0",
-    "eslint-plugin-react-refresh": "^0.4.23",
+    "eslint-plugin-react-refresh": "^0.4.24",
     "globals": "^16.4.0",
     "typescript": "~5.9.3",
     "typescript-eslint": "^8.46.1",
-    "vite": "^7.1.9"
+    "vite": "^7.1.10"
   }
 }

packages/create-vite/template-react/package.json

@@ -14,14 +14,14 @@
     "react-dom": "^19.2.0"
   },
   "devDependencies": {
-    "@eslint/js": "^9.37.0",
+    "@eslint/js": "^9.38.0",
     "@types/react": "^19.2.2",
     "@types/react-dom": "^19.2.2",
     "@vitejs/plugin-react": "^5.0.4",
-    "eslint": "^9.37.0",
+    "eslint": "^9.38.0",
     "eslint-plugin-react-hooks": "^5.2.0",
-    "eslint-plugin-react-refresh": "^0.4.23",
+    "eslint-plugin-react-refresh": "^0.4.24",
     "globals": "^16.4.0",
-    "vite": "^7.1.9"
+    "vite": "^7.1.10"
   }
 }

packages/create-vite/template-solid-ts/package.json

@@ -12,9 +12,9 @@
     "solid-js": "^1.9.9"
   },
   "devDependencies": {
-    "@types/node": "^24.7.2",
+    "@types/node": "^24.8.1",
     "typescript": "~5.9.3",
-    "vite": "^7.1.9",
+    "vite": "^7.1.10",
     "vite-plugin-solid": "^2.11.9"
   }
 }

packages/create-vite/template-solid/package.json

@@ -12,7 +12,7 @@
     "solid-js": "^1.9.9"
   },
   "devDependencies": {
-    "vite": "^7.1.9",
+    "vite": "^7.1.10",
     "vite-plugin-solid": "^2.11.9"
   }
 }

packages/create-vite/template-svelte-ts/package.json

@@ -12,10 +12,10 @@
   "devDependencies": {
     "@sveltejs/vite-plugin-svelte": "^6.2.1",
     "@tsconfig/svelte": "^5.0.5",
-    "@types/node": "^24.7.2",
-    "svelte": "^5.39.12",
+    "@types/node": "^24.8.1",
+    "svelte": "^5.41.0",
     "svelte-check": "^4.3.3",
     "typescript": "~5.9.3",
-    "vite": "^7.1.9"
+    "vite": "^7.1.10"
   }
 }

packages/create-vite/template-svelte/package.json

@@ -10,7 +10,7 @@
   },
   "devDependencies": {
     "@sveltejs/vite-plugin-svelte": "^6.2.1",
-    "svelte": "^5.39.12",
-    "vite": "^7.1.9"
+    "svelte": "^5.41.0",
+    "vite": "^7.1.10"
   }
 }

packages/create-vite/template-vanilla-ts/package.json

@@ -10,6 +10,6 @@
   },
   "devDependencies": {
     "typescript": "~5.9.3",
-    "vite": "^7.1.9"
+    "vite": "^7.1.10"
   }
 }

packages/create-vite/template-vanilla/package.json

@@ -9,6 +9,6 @@
     "preview": "vite preview"
   },
   "devDependencies": {
-    "vite": "^7.1.9"
+    "vite": "^7.1.10"
   }
 }

packages/create-vite/template-vue-ts/package.json

@@ -12,11 +12,11 @@
     "vue": "^3.5.22"
   },
   "devDependencies": {
-    "@types/node": "^24.7.2",
+    "@types/node": "^24.8.1",
     "@vitejs/plugin-vue": "^6.0.1",
     "@vue/tsconfig": "^0.8.1",
     "typescript": "~5.9.3",
-    "vite": "^7.1.9",
+    "vite": "^7.1.10",
     "vue-tsc": "^3.1.1"
   }
 }

packages/create-vite/template-vue/package.json

@@ -13,6 +13,6 @@
   },
   "devDependencies": {
     "@vitejs/plugin-vue": "^6.0.1",
-    "vite": "^7.1.9"
+    "vite": "^7.1.10"
   }
 }

packages/vite/CHANGELOG.md

@@ -1,3 +1,21 @@
+## <small>[7.1.11](https://github.com/vitejs/vite/compare/v7.1.10...v7.1.11) (2025-10-20)</small>
+### Bug Fixes
+
+* **dev:** trim trailing slash before `server.fs.deny` check ([#20968](https://github.com/vitejs/vite/issues/20968)) ([f479cc5](https://github.com/vitejs/vite/commit/f479cc57c425ed41ceb434fecebd63931b1ed4ed))
+
+### Miscellaneous Chores
+
+* **deps:** update all non-major dependencies ([#20966](https://github.com/vitejs/vite/issues/20966)) ([6fb41a2](https://github.com/vitejs/vite/commit/6fb41a260bda443685e719ea4765d3faca3db944))
+
+### Code Refactoring
+
+* use subpath imports for types module reference ([#20921](https://github.com/vitejs/vite/issues/20921)) ([d0094af](https://github.com/vitejs/vite/commit/d0094af639d9ebbb51d4e00910b74f23eb8fe131))
+
+### Build System
+
+* remove cjs reference in files field ([#20945](https://github.com/vitejs/vite/issues/20945)) ([ef411ce](https://github.com/vitejs/vite/commit/ef411cee2696af3ba791879fdae9aad165f178b2))
+* remove hash from built filenames ([#20946](https://github.com/vitejs/vite/issues/20946)) ([a817307](https://github.com/vitejs/vite/commit/a81730754d655d1371ce0f4354af1c84e12f9f2d))
+
 ## <small>[7.1.10](https://github.com/vitejs/vite/compare/v7.1.9...v7.1.10) (2025-10-14)</small>
 ### Bug Fixes
 

packages/vite/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vite",
-  "version": "7.1.10",
+  "version": "7.1.11",
   "type": "module",
   "license": "MIT",
   "author": "Evan You",
@@ -99,13 +99,13 @@
     "@polka/compression": "^1.0.0-next.25",
     "@rolldown/pluginutils": "^1.0.0-beta.43",
     "@rollup/plugin-alias": "^5.1.1",
-    "@rollup/plugin-commonjs": "^28.0.6",
+    "@rollup/plugin-commonjs": "^28.0.8",
     "@rollup/plugin-dynamic-import-vars": "2.1.4",
     "@rollup/pluginutils": "^5.3.0",
     "@types/escape-html": "^1.0.4",
     "@types/pnpapi": "^0.0.5",
     "artichokie": "^0.4.2",
-    "baseline-browser-mapping": "^2.8.16",
+    "baseline-browser-mapping": "^2.8.18",
     "cac": "^6.7.14",
     "chokidar": "^3.6.0",
     "connect": "^3.7.0",

packages/vite/src/module-runner/sourcemap/decoder.ts

@@ -1,6 +1,6 @@
 import type { OriginalMapping } from '@jridgewell/trace-mapping'
 import { originalPositionFor } from '@jridgewell/trace-mapping'
-import { posixResolve } from '../utils'
+import { posixDirname, posixResolve } from '../utils'
 
 interface SourceMapLike {
   version: number
@@ -20,6 +20,7 @@ export class DecodedMap {
   _decoded: undefined | number[][][]
   _decodedMemo: Stats
   url: string
+  file: string
   version: number
   names: string[] = []
   resolvedSources: string[]
@@ -34,8 +35,10 @@ export class DecodedMap {
     this._encoded = mappings || ''
     this._decodedMemo = memoizedState()
     this.url = from
+    this.file = from
+    const originDir = posixDirname(from)
     this.resolvedSources = (sources || []).map((s) =>
-      posixResolve(s || '', from),
+      posixResolve(originDir, s || ''),
     )
   }
 }

packages/vite/src/node/server/middlewares/static.ts

@@ -297,7 +297,12 @@ export function isFileLoadingAllowed(
 
   if (!fs.strict) return true
 
-  if (config.fsDenyGlob(filePath)) return false
+  // NOTE: `fs.readFile('/foo.png/')` tries to load `'/foo.png'`
+  // so we should check the path without trailing slash
+  const filePathWithoutTrailingSlash = filePath.endsWith('/')
+    ? filePath.slice(0, -1)
+    : filePath
+  if (config.fsDenyGlob(filePathWithoutTrailingSlash)) return false
 
   if (config.safeModulePaths.has(filePath)) return true