build(deps): bump esbuild, @vitejs/plugin-react and vite
Type: Pull Request
State: Merged
Association: Contributor
Comments: 1
(3 months ago)
(3 months ago)
(3 months ago)
by farrah-deriv
dependencies javascript
Bumps esbuild to 0.25.8 and updates ancestor dependencies esbuild, @vitejs/plugin-react and vite. These dependencies need to be updated together.
Updates esbuild from 0.21.5 to 0.25.8
Release notes
Sourced from esbuild's releases.
v0.25.8
Fix another TypeScript parsing edge case (#4248)
This fixes a regression with a change in the previous release that tries to more accurately parse TypeScript arrow functions inside the
?:operator. The regression specifically involves parsing an arrow function containing a#privateidentifier inside the middle of a?:ternary operator inside a class body. This was fixed by propagating private identifier state into the parser clone used to speculatively parse the arrow function body. Here is an example of some affected code:class CachedDict { #has = (a: string) => dict.has(a); has = window ? (word: string): boolean => this.#has(word) : this.#has; }Fix a regression with the parsing of source phase imports
The change in the previous release to parse source phase imports failed to properly handle the following cases:
import source from 'bar' import source from from 'bar' import source type foo from 'bar'Parsing for these cases should now be fixed. The first case was incorrectly treated as a syntax error because esbuild was expecting the second case. And the last case was previously allowed but is now forbidden. TypeScript hasn't added this feature yet so it remains to be seen whether the last case will be allowed, but it's safer to disallow it for now. At least Babel doesn't allow the last case when parsing TypeScript, and Babel was involved with the source phase import specification.
v0.25.7
Parse and print JavaScript imports with an explicit phase (#4238)
This release adds basic syntax support for the
deferandsourceimport phases in JavaScript:
deferThis is a stage 3 proposal for an upcoming JavaScript feature that will provide one way to eagerly load but lazily initialize imported modules. The imported module is automatically initialized on first use. Support for this syntax will also be part of the upcoming release of TypeScript 5.9. The syntax looks like this:
import defer * as foo from "<specifier>"; const bar = await import.defer("<specifier>");Note that this feature deliberately cannot be used with the syntax
import defer foo from "<specifier>"orimport defer { foo } from "<specifier>".
sourceThis is a stage 3 proposal for an upcoming JavaScript feature that will provide another way to eagerly load but lazily initialize imported modules. The imported module is returned in an uninitialized state. Support for this syntax may or may not be a part of TypeScript 5.9 (see this issue for details). The syntax looks like this:
import source foo from "<specifier>"; const bar = await import.source("<specifier>");
... (truncated)
Changelog
Sourced from esbuild's changelog.
Changelog: 2024
This changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2).
0.24.2
Fix regression with
--defineandimport.meta(#4010, #4012, #4013)The previous change in version 0.24.1 to use a more expression-like parser for
definevalues to allow quoted property names introduced a regression that removed the ability to use--define:import.meta=.... Even thoughimportis normally a keyword that can't be used as an identifier, ES modules special-case theimport.metaexpression to behave like an identifier anyway. This change fixes the regression.This fix was contributed by
@sapphi-red.0.24.1
Allow
es2024as a target intsconfig.json(#4004)TypeScript recently added
es2024as a compilation target, so esbuild now supports this in thetargetfield oftsconfig.jsonfiles, such as in the following configuration file:{ "compilerOptions": { "target": "ES2024" } }As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.
This fix was contributed by
@billyjanitsch.Allow automatic semicolon insertion after
get/setThis change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:
class Foo { get *x() {} set *y() {} }The above code will be considered valid starting with this release. This change to esbuild follows a similar change to TypeScript which will allow this syntax starting with TypeScript 5.7.
Allow quoted property names in
--defineand--pure(#4008)The
defineandpureAPI options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes--defineand--pureconsistent with--global-name, which already supported quoted property names. For example, the following is now possible:
... (truncated)
Commits
8c71947publish 0.25.8 to npm0508f24some parsing fixes for source phase imports6e4be2fjs parser: recover from bad#privateidentifiersc9c6357fix #4248:#privateids in arrow fn body in?:9b42f68publish 0.25.7 to npm9ba01d1abs-paths: js api and testsca196c9fix for parser backtracking crash2979b84fix #4241: ts arrow function type backtrack (hack)1180410fix an unused variable warningfc3da57fix #4238: adddeferandsourceimport phases- Additional commits viewable in compare view
Updates @vitejs/plugin-react from 4.3.1 to 4.7.0
Release notes
Sourced from @vitejs/plugin-react's releases.
plugin-react@4.7.0
Add HMR support for compound components (#518)
HMR now works for compound components like this:
const Root = () => <div>Accordion Root</div> const Item = () => <div>Accordion Item</div>export const Accordion = { Root, Item }
Return
Plugin[]instead ofPluginOption[](#537)The return type has changed from
react(): PluginOption[]to more specialized typereact(): Plugin[]. This allows for type-safe manipulation of plugins, for example:// previously this causes type errors react({ babel: { plugins: ['babel-plugin-react-compiler'] } }) .map(p => ({ ...p, applyToEnvironment: e => e.name === 'client' }))plugin-react@4.6.0
Add raw Rolldown support
This plugin only worked with Vite. But now it can also be used with raw Rolldown. The main purpose for using this plugin with Rolldown is to use react compiler.
plugin-react@4.5.2
Suggest
@vitejs/plugin-react-oxcif rolldown-vite is detected #491Emit a log which recommends
@vitejs/plugin-react-oxcwhenrolldown-viteis detected to improve performance and use Oxc under the hood. The warning can be disabled by settingdisableOxcRecommendation: falsein the plugin options.Use
optimizeDeps.rollupOptionsinstead ofoptimizeDeps.esbuildOptionsfor rolldown-vite #489This suppresses the warning about
optimizeDeps.esbuildOptionsbeing deprecated in rolldown-vite.Add Vite 7-beta to peerDependencies range #497
React plugins are compatible with Vite 7, this removes the warning when testing the beta.
plugin-react@4.5.1
Add explicit semicolon in preambleCode #485
This fixes an edge case when using HTML minifiers that strips line breaks aggressively.
plugin-react@4.5.0
Add
filterfor rolldown-vite #470Added
filterso that it is more performant when running this plugin with rolldown-powered version of Vite.
... (truncated)
Changelog
Sourced from @vitejs/plugin-react's changelog.
4.7.0 (2025-07-18)
Add HMR support for compound components (#518)
HMR now works for compound components like this:
const Root = () => <div>Accordion Root</div> const Item = () => <div>Accordion Item</div>export const Accordion = { Root, Item }
Return
Plugin[]instead ofPluginOption[](#537)The return type has changed from
react(): PluginOption[]to more specialized typereact(): Plugin[]. This allows for type-safe manipulation of plugins, for example:// previously this causes type errors react({ babel: { plugins: ['babel-plugin-react-compiler'] } }) .map(p => ({ ...p, applyToEnvironment: e => e.name === 'client' }))4.6.0 (2025-06-23)
Add raw Rolldown support
This plugin only worked with Vite. But now it can also be used with raw Rolldown. The main purpose for using this plugin with Rolldown is to use react compiler.
4.5.2 (2025-06-10)
Suggest
@vitejs/plugin-react-oxcif rolldown-vite is detected #491Emit a log which recommends
@vitejs/plugin-react-oxcwhenrolldown-viteis detected to improve performance and use Oxc under the hood. The warning can be disabled by settingdisableOxcRecommendation: truein the plugin options.Use
optimizeDeps.rollupOptionsinstead ofoptimizeDeps.esbuildOptionsfor rolldown-vite #489This suppresses the warning about
optimizeDeps.esbuildOptionsbeing deprecated in rolldown-vite.Add Vite 7-beta to peerDependencies range #497
React plugins are compatible with Vite 7, this removes the warning when testing the beta.
4.5.1 (2025-06-03)
Add explicit semicolon in preambleCode #485
This fixes an edge case when using HTML minifiers that strips line breaks aggressively.
4.5.0 (2025-05-23)
... (truncated)
Commits
8041706release: plugin-react@4.7.0bbfd1b7chore: update changelog for #537fdc9d9afeat: add hmr support for compound components (#518)d14f31dfix(deps): update all non-major dependencies (#568)22be17fbuild: use tsdown for plugin-react / plugin-react-oxc (#554)840f0b1chore(deps): update prettier (#556)cfe2912fix(deps): update all non-major dependencies (#540)11f56d6fix: returnPlugin[]instead ofPluginOption[](#537)9da5e19fix(deps): update all non-major dependencies (#519)1583c5dchore: remove Vite 7 beta from supported range (#517)- Additional commits viewable in compare view
Updates vite from 5.4.10 to 7.0.5
Release notes
Sourced from vite's releases.
v7.0.5
Please refer to CHANGELOG.md for details.
v7.0.4
Please refer to CHANGELOG.md for details.
v7.0.3
Please refer to CHANGELOG.md for details.
create-vite@7.0.3
Please refer to CHANGELOG.md for details.
v7.0.2
Please refer to CHANGELOG.md for details.
create-vite@7.0.2
Please refer to CHANGELOG.md for details.
v7.0.1
Please refer to CHANGELOG.md for details.
create-vite@7.0.1
Please refer to CHANGELOG.md for details.
plugin-legacy@7.0.1
Please refer to CHANGELOG.md for details.
create-vite@7.0.0
Please refer to CHANGELOG.md for details.
plugin-legacy@7.0.0
Please refer to CHANGELOG.md for details.
v7.0.0
Please refer to CHANGELOG.md for details.
v7.0.0-beta.2
Please refer to CHANGELOG.md for details.
v7.0.0-beta.1
Please refer to CHANGELOG.md for details.
plugin-legacy@7.0.0-beta.1
Please refer to CHANGELOG.md for details.
plugin-legacy@7.0.0-beta.0
Please refer to CHANGELOG.md for details.
v7.0.0-beta.0
Please refer to CHANGELOG.md for details.
... (truncated)
Changelog
Sourced from vite's changelog.
7.0.5 (2025-07-17)
Bug Fixes
- deps: update all non-major dependencies (#20406) (1a1cc8a)
- remove special handling for
Accept: text/html(#20376) (c9614b9)- watch assets referenced by
new URL(, import.meta.url)(#20382) (6bc8bf6)Miscellaneous Chores
Code Refactoring
7.0.4 (2025-07-10)
Bug Fixes
Build System
7.0.3 (2025-07-08)
Bug Fixes
- client: protect against window being defined but addEv undefined (#20359) (31d1467)
- define: replace optional values (#20338) (9465ae1)
- deps: update all non-major dependencies (#20366) (43ac73d)
Miscellaneous Chores
- deps: update dependency dotenv to v17 (#20325) (45040d4)
- deps: update dependency rolldown to ^1.0.0-beta.24 (#20365) (5ab25e7)
- use
n/prefer-node-protocolrule (#20368) (38bb268)Code Refactoring
7.0.2 (2025-07-04)
Bug Fixes
7.0.1 (2025-07-03)
Bug Fixes
... (truncated)
Commits
832f687release: v7.0.5c9614b9fix: remove special handling forAccept: text/html(#20376)862e192refactor: usefoo.endsWith("bar")instead of/bar$/.test(foo)(#20413)6bc8bf6fix: watch assets referenced bynew URL(, import.meta.url)(#20382)1a1cc8afix(deps): update all non-major dependencies (#20406)1165667chore(deps): update dependency rolldown to ^1.0.0-beta.27 (#20405)8a65433release: v7.0.4324669cfix: allow resolving bare specifiers to relative paths for entries (#20379)5e29602build: remove@oxc-project/runtimedevDep (#20389)f562df8release: v7.0.3- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
Pull Request Statistics
1
2
+964
-447
Package Dependencies
esbuild, @vitejs/plugin-react
npm
Technical Details
| ID: | 4007655 |
| UUID: | 2684318254 |
| Node ID: | PR_kwDOLJXTDc6f_3Iu |
| Host: | GitHub |
| Repository: | deriv-com/deriv-api-hooks |
| Merge State: | Unknown |