chore(deps): update dependency @tailwindcss/vite to v4.3.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@tailwindcss/vite (source)	4.2.3 → 4.3.0

---

Release Notes

tailwindlabs/tailwindcss (@​tailwindcss/vite)

v4.3.0

Compare Source

Added

• Add @container-size utility (#​18901)
• Add scrollbar-{auto,thin,none} utilities for scrollbar-width, and scrollbar-thumb-* / scrollbar-track-* color utilities for scrollbar-color (#​19981, #​20019)
• Add scrollbar-gutter-* utilities (#​20018)
• Add zoom-* utilities (#​20020)
• Add tab-* utilities (#​20022)
• Allow using @variant with stacked variants (e.g. @variant hover:focus { … }) (#​19996)
• Allow using @variant with compound variants (e.g. @variant hover, focus { … }) (#​19996)
• Support --default(…) in --value(…) and --modifier(…) for functional @utility definitions (#​19989)

Fixed

• Ensure @plugin resolves package JavaScript entries instead of browser CSS entries when using @tailwindcss/vite (#​19949)
• Fix relative @import and @plugin paths resolving from the wrong directory when using @tailwindcss/vite (#​19965)
• Ensure CSS files containing @variant are processed by @tailwindcss/vite (#​19966)
• Resolve imports relative to base when result.opts.from is not provided when using @tailwindcss/postcss (#​19980)
• Canonicalization: preserve significant _ whitespace in arbitrary values (#​19986)
• Canonicalization: add parentheses when removing whitespace from arbitrary values would hurt readability (e.g. w-[calc(100%---spacing(60))] → w-[calc(100%-(--spacing(60)))]) (#​19986)
• Canonicalization: preserve the original unit in arbitrary values instead of normalizing to base units (e.g. -mt-[20in] → mt-[-20in], not mt-[-1920px]) (#​19988)
• Canonicalization: migrate arbitrary :has() variants from [&:has(…)] to has-[…] (#​19991)
• Upgrade: don’t migrate inline style attributes (e.g. style="flex-grow: 1" → style="flex-grow: 1", not style="grow: 1") (#​19918)
• Allow multiple @utility definitions with the same name but different value types (#​19777)
• Export missing PluginWithConfig type from tailwindcss/plugin to fix errors when inferring plugin config types (#​19707)
• Ensure start and end legacy utilities without values do not generate CSS (#​20003)
• Ensure --value(…) is required in functional @utility definitions (#​20005)
• Canonicalization: preserve required whitespace around operators in negated arbitrary values (e.g. -left-[(var(--a)+var(--b))]) (#​20011)

v4.2.4

Compare Source

Fixed

• Ensure imports in @import and @plugin still resolve correctly when using Vite aliases in @tailwindcss/vite (#​19947)

---

Configuration

📅 Schedule: (in timezone Africa/Johannesburg)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​tailwindcss/​vite@​4.2.3 ⏵ 4.3.0			+1	+1

View full report

[github-actions]

📚 Docs preview deployed

https://scratchyjs-docs-pr-94.asjas.workers.dev

Updates automatically on every push to this PR.

[github-actions]

⚡ Benchmark Results

benchmarks/renderer/ring-buffer.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
SharedRingBuffer – small payload (64 B) — write 64 bytes	577.5 K	0.0017	0.0111	±0.67%	+6.4%
SharedRingBuffer – small payload (64 B) — write + read 64 bytes	473.2 K	0.0021	0.0114	±0.94%	-10.0% ⚠️
SharedRingBuffer – medium payload (1 KB) — write 1 KB	280.7 K	0.0036	0.0157	±1.82%	-19.1% ⚠️
SharedRingBuffer – medium payload (1 KB) — write + read 1 KB	218.6 K	0.0046	0.0218	±1.05%	-15.9% ⚠️
SharedRingBuffer – large payload (16 KB) — write 16 KB	61.6 K	0.0162	0.0339	±1.16%	+5.9%
SharedRingBuffer – large payload (16 KB) — write + read 16 KB	80.8 K	0.0124	0.0384	±2.22%	+4.8%
SharedRingBuffer – sequential throughput (100 × 64 B) — 100 write + read cycles	35.6 K	0.0281	0.0417	±0.39%	-12.5% ⚠️
SharedRingBuffer – introspection — availableToRead	14.52 M	0.0001	0.0002	±0.08%	-2.4%
SharedRingBuffer – introspection — isEmpty	13.78 M	0.0001	0.0002	±0.08%	-5.7%
SharedRingBuffer – introspection — isFull	14.43 M	0.0001	0.0002	±0.08%	-1.0%

benchmarks/renderer/shared-buffer.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
SharedBuffer – allocation — createSharedBuffer(4 KB)	595.3 K	0.0017	0.0116	±0.67%	-16.5% ⚠️
SharedBuffer – allocation — createSharedBuffer(64 KB)	61.1 K	0.0164	0.0332	±1.10%	+8.3%
SharedBuffer – small payload round-trip — write small JSON	295.5 K	0.0034	0.0136	±0.38%	-17.8% ⚠️
SharedBuffer – small payload round-trip — write + read small JSON	221.9 K	0.0045	0.0152	±0.44%	-18.9% ⚠️
SharedBuffer – medium payload round-trip — write medium JSON (~2 KB)	97.6 K	0.0102	0.0267	±4.02%	+9.7%
SharedBuffer – medium payload round-trip — write + read medium JSON (~2 KB)	57.3 K	0.0174	0.0346	±0.75%	-1.7%
SharedBuffer – large payload round-trip — write large JSON (~10 KB)	16.0 K	0.0626	0.0998	±0.37%	+3.5%
SharedBuffer – large payload round-trip — write + read large JSON (~10 KB)	7.2 K	0.1389	0.1790	±0.39%	-7.9%

benchmarks/utils/ip-address.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
getClientIPAddress – no IP headers — no IP-related headers → null	2.59 M	0.0004	0.0009	±0.69%	-2.0%
getClientIPAddress – single header — cf-connecting-ip (Cloudflare)	1.43 M	0.0007	0.0012	±0.45%	-14.2% ⚠️
getClientIPAddress – single header — x-forwarded-for (simple)	1.74 M	0.0006	0.0010	±0.40%	-10.0%
getClientIPAddress – single header — x-real-ip	1.24 M	0.0008	0.0014	±0.42%	-17.2% ⚠️
getClientIPAddress – single header — true-client-ip (Akamai / Cloudflare Enterprise)	1.30 M	0.0008	0.0012	±0.17%	-15.8% ⚠️
getClientIPAddress – x-forwarded-for multi-hop — 2-hop chain	1.64 M	0.0006	0.0010	±0.20%	-6.1%
getClientIPAddress – x-forwarded-for multi-hop — 4-hop chain	1.48 M	0.0007	0.0012	±0.27%	-11.4% ⚠️
getClientIPAddress – Forwarded header (RFC 7239) — simple for= directive	944.7 K	0.0011	0.0017	±1.06%	-6.8%
getClientIPAddress – Forwarded header (RFC 7239) — for= with port	677.4 K	0.0015	0.0021	±0.49%	-7.1%
getClientIPAddress – Forwarded header (RFC 7239) — IPv6 literal	686.8 K	0.0015	0.0022	±1.23%	-9.7%
getClientIPAddress – Forwarded header (RFC 7239) — multi-hop Forwarded	763.4 K	0.0013	0.0021	±0.40%	-9.4%
getClientIPAddress – IPv6 addresses — x-forwarded-for IPv6	1.13 M	0.0009	0.0014	±1.13%	-1.4%

benchmarks/utils/promise.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
promiseHash – concurrent resolution — 2 already-resolved promises	780.7 K	0.0013	0.0023	±0.92%	-8.8%
promiseHash – concurrent resolution — 5 already-resolved promises	432.7 K	0.0023	0.0032	±1.23%	-17.4% ⚠️
promiseHash – concurrent resolution — 10 already-resolved promises	255.0 K	0.0039	0.0073	±1.04%	-10.6% ⚠️
promiseHash – concurrent resolution — 5 promises with object values	390.2 K	0.0026	0.0038	±1.24%	-19.7% ⚠️
timeout – wrapping fast promises — timeout wrapping an already-resolved promise (1 s budget)	916.7 K	0.0011	0.0019	±1.28%	-5.3%
timeout – wrapping fast promises — timeout wrapping an already-resolved object (5 s budget)	901.2 K	0.0011	0.0018	±0.56%	-3.6%

benchmarks/utils/safe-redirect.bench.ts

Suite — Benchmark	ops/sec	mean (µs)	p99 (µs)	±rme	vs main
safeRedirect – valid paths — root path /	7.66 M	0.0001	0.0003	±0.13%	+13.2% 🚀
safeRedirect – valid paths — simple path /dashboard	3.85 M	0.0003	0.0004	±0.08%	+6.5%
safeRedirect – valid paths — nested path /settings/profile	3.45 M	0.0003	0.0005	±0.23%	+7.8%
safeRedirect – valid paths — path with query string /search?q=hello	3.71 M	0.0003	0.0004	±0.08%	+6.2%
safeRedirect – valid paths — path with hash /docs#section	3.76 M	0.0003	0.0004	±0.08%	+4.7%
safeRedirect – rejected inputs — absolute URL https://evil.com	4.96 M	0.0002	0.0004	±0.09%	+7.6%
safeRedirect – rejected inputs — protocol-relative URL //evil.com	4.96 M	0.0002	0.0004	±0.07%	+10.0% 🚀
safeRedirect – rejected inputs — backslash-relative /\evil.com	4.92 M	0.0002	0.0004	±0.07%	+6.2%
safeRedirect – rejected inputs — path traversal /../etc/passwd	4.37 M	0.0002	0.0004	±0.07%	+6.3%
safeRedirect – rejected inputs — null input	15.80 M	0.0001	0.0002	±0.07%	-2.5%
safeRedirect – rejected inputs — undefined input	15.85 M	0.0001	0.0002	±0.08%	-2.2%
safeRedirect – rejected inputs — empty string	15.63 M	0.0001	0.0002	±0.07%	-3.5%
safeRedirect – percent-encoded bypass — percent-encoded // (%2F%2F)	4.81 M	0.0002	0.0004	±0.08%	+1.2%
safeRedirect – percent-encoded bypass — percent-encoded path traversal (%2e%2e)	4.85 M	0.0002	0.0004	±0.07%	+2.1%
safeRedirect – percent-encoded bypass — mixed percent-encoded absolute URL	4.82 M	0.0002	0.0004	±0.08%	+5.4%
safeRedirect – custom default redirect — valid path with custom default	3.89 M	0.0003	0.0005	±0.10%	+3.8%
safeRedirect – custom default redirect — invalid input with custom default	4.98 M	0.0002	0.0004	±0.08%	+3.6%

🔬 Compared against the latest benchmark run on main. ⚠️ = >10% slower · 🚀 = >10% faster.