chore(deps): update dependency vite to v8.0.11

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
vite (source)	8.0.8 → 8.0.11

---

Release Notes

vitejs/vite (vite)

v8.0.11

Compare Source

Features

• update rolldown to 1.0.0-rc.18 (#​22360) (3f80524)

Bug Fixes

• deps: update all non-major dependencies (#​22334) (672c962)
• deps: update all non-major dependencies (#​22382) (5c0cfcb)
• glob: align hmr matcher options with glob enumeration (#​22306) (30028f9)
• make separate object instance for each environment (#​22276) (7c2aa3b)

Documentation

• create-vite: list react-compiler templates in README (#​22347) (7c3a61f)
• explain mergeConfig skips null/undefined (#​22325) (2151f70)
• mention native config loader in CLI options (#​22348) (0420c5d)
• update evan's x handle (640202a)

Miscellaneous Chores

• deps: update dependency tsdown to ^0.21.10 (#​22333) (3b51e05)
• deps: update rolldown-related dependencies (#​22383) (555ff36)
• deps: update transitive packages to fix npm audit alerts (#​22316) (86aee62)

Code Refactoring

• devtools integration (#​22312) (3c8bf06)
• remove unnecessary async (#​22296) (b31fd35)
• show direct path type in bad character warning (#​22339) (0c162e9)

Tests

• create-vite: use short help alias (#​22389) (994ab66)

v8.0.10

Compare Source

Features

• update rolldown to 1.0.0-rc.17 (#​22299) (a4d06d9)

Bug Fixes

• hmrClient.logger.debug and hmrClient.logger.error looked different from other HMR logs (#​22147) (a4d828f)
• css: show filename in CSS minification warnings for .css?inline (#​22292) (83f0a78)
• optimizer: allow user transform.target to override default in optimizeDeps (#​22273) (5c7cec6)
• remove format sniffing module resolution from JS resolver (#​22297) (b8a21cc)

Code Refactoring

• enable some typecheck rules (#​22278) (9437518)
• typecheck client directory (#​22284) (40a0847)

v8.0.9

Compare Source

Features

• update rolldown to 1.0.0-rc.16 (#​22248) (2947edd)

Bug Fixes

• allow binding when strictPort is set but wildcard port is in use (#​22150) (dfc8aa5)
• build: emptyOutDir should happen for watch rebuilds (#​22207) (ee52267)
• bundled-dev: reject requests to HMR patch files in non potentially trustworthy origins (#​22269) (868f141)
• css: use unique key for cssEntriesMap to prevent same-basename collision (#​22039) (374bb5d)
• deps: update all non-major dependencies (#​22219) (4cd0d67)
• deps: update all non-major dependencies (#​22268) (c28e9c1)
• detect Deno workspace root (fix #​22237) (#​22238) (1b793c0)
• dev: handle errors in watchChange hook (#​22188) (fc08bda)
• optimizer: handle more chars that will be sanitized (#​22208) (3f24533)
• skip fallback sourcemap generation for ?raw imports (#​22148) (3ec9cda)

Documentation

• align the descriptions in READMEs (#​22231) (44c42b9)
• fix reuses wording in dev environment comment (#​22173) (9163412)
• fix wording in sass error comment (#​22214) (bc5c6a7)
• update build CLI defaults (#​22261) (605bb97)

Miscellaneous Chores

• deps: update dependency dotenv-expand to v13 (#​22271) (0a3887d)

---

Configuration

📅 Schedule: (in timezone Africa/Johannesburg)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

📚 Docs preview deployed

https://scratchyjs-docs-pr-88.asjas.workers.dev

Updates automatically on every push to this PR.

[github-actions]

⚡ Benchmark Results

benchmarks/renderer/ring-buffer.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
SharedRingBuffer – small payload (64 B) — write 64 bytes	548.6 K	0.0018	0.0109	±0.67%	+1.1%
SharedRingBuffer – small payload (64 B) — write + read 64 bytes	463.3 K	0.0022	0.0110	±1.09%	-11.9% ⚠️
SharedRingBuffer – medium payload (1 KB) — write 1 KB	308.4 K	0.0032	0.0148	±0.51%	-11.1% ⚠️
SharedRingBuffer – medium payload (1 KB) — write + read 1 KB	212.9 K	0.0047	0.0214	±0.92%	-18.1% ⚠️
SharedRingBuffer – large payload (16 KB) — write 16 KB	68.0 K	0.0147	0.0336	±1.41%	+16.8% 🚀
SharedRingBuffer – large payload (16 KB) — write + read 16 KB	82.2 K	0.0122	0.0390	±1.71%	+6.7%
SharedRingBuffer – sequential throughput (100 × 64 B) — 100 write + read cycles	35.2 K	0.0284	0.0442	±0.55%	-13.3% ⚠️
SharedRingBuffer – introspection — availableToRead	14.80 M	0.0001	0.0002	±0.08%	~0%
SharedRingBuffer – introspection — isEmpty	14.22 M	0.0001	0.0003	±0.09%	-2.7%
SharedRingBuffer – introspection — isFull	14.29 M	0.0001	0.0002	±0.08%	-2.0%

benchmarks/renderer/shared-buffer.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
SharedBuffer – allocation — createSharedBuffer(4 KB)	610.1 K	0.0016	0.0111	±0.67%	-14.5% ⚠️
SharedBuffer – allocation — createSharedBuffer(64 KB)	59.5 K	0.0168	0.0344	±1.06%	+5.5%
SharedBuffer – small payload round-trip — write small JSON	294.5 K	0.0034	0.0139	±0.36%	-18.0% ⚠️
SharedBuffer – small payload round-trip — write + read small JSON	218.3 K	0.0046	0.0144	±0.47%	-20.2% ⚠️
SharedBuffer – medium payload round-trip — write medium JSON (~2 KB)	90.6 K	0.0110	0.0291	±3.77%	+1.8%
SharedBuffer – medium payload round-trip — write + read medium JSON (~2 KB)	56.5 K	0.0177	0.0370	±0.78%	-3.0%
SharedBuffer – large payload round-trip — write large JSON (~10 KB)	15.7 K	0.0635	0.1034	±0.80%	+2.0%
SharedBuffer – large payload round-trip — write + read large JSON (~10 KB)	7.4 K	0.1359	0.1605	±0.40%	-5.8%

benchmarks/utils/ip-address.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
getClientIPAddress – no IP headers — no IP-related headers → null	2.62 M	0.0004	0.0009	±0.72%	~0%
getClientIPAddress – single header — cf-connecting-ip (Cloudflare)	1.63 M	0.0006	0.0011	±0.38%	-2.2%
getClientIPAddress – single header — x-forwarded-for (simple)	1.90 M	0.0005	0.0009	±0.38%	-1.9%
getClientIPAddress – single header — x-real-ip	1.32 M	0.0008	0.0013	±1.05%	-11.6% ⚠️
getClientIPAddress – single header — true-client-ip (Akamai / Cloudflare Enterprise)	1.43 M	0.0007	0.0012	±0.17%	-7.3%
getClientIPAddress – x-forwarded-for multi-hop — 2-hop chain	1.96 M	0.0005	0.0009	±0.09%	+12.1% 🚀
getClientIPAddress – x-forwarded-for multi-hop — 4-hop chain	1.68 M	0.0006	0.0011	±0.29%	~0%
getClientIPAddress – Forwarded header (RFC 7239) — simple for= directive	982.6 K	0.0010	0.0017	±1.10%	-3.1%
getClientIPAddress – Forwarded header (RFC 7239) — for= with port	687.1 K	0.0015	0.0022	±0.92%	-5.8%
getClientIPAddress – Forwarded header (RFC 7239) — IPv6 literal	740.5 K	0.0014	0.0021	±0.42%	-2.7%
getClientIPAddress – Forwarded header (RFC 7239) — multi-hop Forwarded	677.7 K	0.0015	0.0043	±1.20%	-19.5% ⚠️
getClientIPAddress – IPv6 addresses — x-forwarded-for IPv6	1.27 M	0.0008	0.0013	±0.31%	+10.7% 🚀

benchmarks/utils/promise.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
promiseHash – concurrent resolution — 2 already-resolved promises	747.7 K	0.0013	0.0024	±0.97%	-12.7% ⚠️
promiseHash – concurrent resolution — 5 already-resolved promises	417.4 K	0.0024	0.0037	±1.14%	-20.4% ⚠️
promiseHash – concurrent resolution — 10 already-resolved promises	256.5 K	0.0039	0.0052	±0.47%	-10.0% ⚠️
promiseHash – concurrent resolution — 5 promises with object values	372.5 K	0.0027	0.0050	±1.18%	-23.4% ⚠️
timeout – wrapping fast promises — timeout wrapping an already-resolved promise (1 s budget)	909.1 K	0.0011	0.0019	±1.41%	-6.1%
timeout – wrapping fast promises — timeout wrapping an already-resolved object (5 s budget)	881.5 K	0.0011	0.0019	±1.27%	-5.7%

benchmarks/utils/safe-redirect.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
safeRedirect – valid paths — root path /	7.55 M	0.0001	0.0003	±0.11%	+11.5% 🚀
safeRedirect – valid paths — simple path /dashboard	3.92 M	0.0003	0.0004	±0.25%	+8.4%
safeRedirect – valid paths — nested path /settings/profile	3.52 M	0.0003	0.0005	±0.22%	+10.1% 🚀
safeRedirect – valid paths — path with query string /search?q=hello	3.79 M	0.0003	0.0005	±0.21%	+8.5%
safeRedirect – valid paths — path with hash /docs#section	3.83 M	0.0003	0.0005	±0.08%	+6.6%
safeRedirect – rejected inputs — absolute URL https://evil.com	5.05 M	0.0002	0.0004	±0.07%	+9.4%
safeRedirect – rejected inputs — protocol-relative URL //evil.com	4.99 M	0.0002	0.0004	±0.18%	+10.7% 🚀
safeRedirect – rejected inputs — backslash-relative /\evil.com	4.84 M	0.0002	0.0004	±0.08%	+4.6%
safeRedirect – rejected inputs — path traversal /../etc/passwd	4.40 M	0.0002	0.0004	±0.08%	+7.0%
safeRedirect – rejected inputs — null input	15.94 M	0.0001	0.0002	±0.09%	-1.7%
safeRedirect – rejected inputs — undefined input	15.75 M	0.0001	0.0002	±0.08%	-2.8%
safeRedirect – rejected inputs — empty string	15.20 M	0.0001	0.0002	±0.09%	-6.2%
safeRedirect – percent-encoded bypass — percent-encoded // (%2F%2F)	4.90 M	0.0002	0.0004	±0.08%	+3.1%
safeRedirect – percent-encoded bypass — percent-encoded path traversal (%2e%2e)	4.82 M	0.0002	0.0004	±0.08%	+1.4%
safeRedirect – percent-encoded bypass — mixed percent-encoded absolute URL	4.89 M	0.0002	0.0004	±0.08%	+6.9%
safeRedirect – custom default redirect — valid path with custom default	3.97 M	0.0003	0.0004	±0.08%	+6.1%
safeRedirect – custom default redirect — invalid input with custom default	5.11 M	0.0002	0.0004	±0.09%	+6.4%

🔬 Compared against the latest benchmark run on main. ⚠️ = >10% slower · 🚀 = >10% faster.