[dependabot]

Bumps vite to 6.4.5 and updates ancestor dependency vite-plugin-node-polyfills. These dependencies need to be updated together.

Updates vite from 5.4.19 to 6.4.5

Release notes

Sourced from vite's releases.

v6.4.5

Please refer to CHANGELOG.md for details.

v6.4.4

Please refer to CHANGELOG.md for details.

v6.4.3

Please refer to CHANGELOG.md for details.

v6.4.2

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.5 (2026-10-21)

• fix: check server.fs after stripping query as well (#22160) (#23855) (91e40d7), closes #22160 #23855

6.4.4 (2026-10-06)

• fix(deps): update launch-editor to v2.14.2 (#23654) (8afec69), closes #23654
• fix(html): filename passed to transformIndexHtml should not include queries (#23653) (19902cf), closes #23653
• fix(server): check resolved ids for transform access (#20410) (eec6464), closes #20410
• fix(server): store ids to safeModulePaths rather than URLs (#23656) (e570d8d), closes #23656

6.4.3 (2026-06-01)

• fix: backport #22572, reject windows alternate paths (#22576) (96b0c10), closes #22572 #22576
• fix(deps): backport #22571, reject UNC paths for launch-editor-middleware (#22575) (8fed5cf), closes #22571 #22575

6.4.2 (2026-04-06)

• fix: apply server.fs check to env transport (#22159) (#22163) (fe28e47), closes #22159 #22163
• fix: avoid path traversal with optimize deps sourcemap handler (#22161) (ca4da5d), closes #22161

6.4.1 (2025-10-20)

• fix(dev): trim trailing slash before server.fs.deny check (#20968) (#20969) (1114b5d), closes #20968 #20969

6.4.0 (2025-10-15)

• feat: allow passing down resolved config to vite's createServer (#20932) (ca6455e), closes #20932

6.3.7 (2025-10-14)

• fix(esbuild): inject esbuild helpers correctly for esbuild 0.25.9+ (#20940) (c59a222), closes #20940

6.3.6 (2025-09-08)

• fix: apply fs.strict check to HTML files (#20736) (0ab19ea), closes #20736

... (truncated)

Commits

• 83ab40b release: v6.4.5
• 91e40d7 fix: check server.fs after stripping query as well (#22160) (#23855)
• 5f0d9a4 release: v6.4.4
• eec6464 fix(server): check resolved ids for transform access (#20410)
• e570d8d fix(server): store ids to safeModulePaths rather than URLs (#23656)
• 8afec69 fix(deps): update launch-editor to v2.14.2 (#23654)
• 19902cf fix(html): filename passed to transformIndexHtml should not include queries (...
• 6c2c881 release: v6.4.3
• 96b0c10 fix: backport #22572, reject windows alternate paths (#22576)
• 8fed5cf fix(deps): backport #22571, reject UNC paths for launch-editor-middleware (#2...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vite since your current version.

Updates vite-plugin-node-polyfills from 0.22.0 to 0.28.0

Release notes

Sourced from vite-plugin-node-polyfills's releases.

v0.28.0

• Normalize trailing slashes (fix for Vite 8)
• Run unit tests against Vite 8 & Vitest 4 in CI
• Update @playwright/test

v0.27.0

• Use inject plugin instead of esbuild.banner (thanks to @​sapphi-red)

v0.26.0

• Add support for Vite v8 (thanks to @​sapphi-red)

v0.25.0

• Update node-stdlib-browser dependency (thanks to @​miguel-nascimento)
• Add support for Vite 8 beta (thanks to @​sapphi-red)

v0.24.0

• Add rolldown-vite support
• Fix broken v0.23.1 build

v0.23.1

• Allow installation in Vite v7 projects

v0.23.0

• Improve performance when not using globals
• Support Vite v6

Commits

• eebf1cf Release v0.28.0
• b1609a7 Normalize trailing slashes (#156)
• 3c24819 Properly resolve polyfills in Vite 8
• fc03122 Move global shim banners into utils
• 36c618a Disable GH token permissions in CI
• 6db3db0 Run unit tests against Vite 8 and Vitest 4 in CI
• 015aafa Add GitHub Action for overriding dependency versions
• 84a2a5f Update @playwright/test
• a31869f Move util-like types into utils
• 780986c Release v0.27.0
• Additional commits viewable in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Source mode: Auto
• Repository: forbole/kastle
• Branch: main
• File: .coderabbit.yml
• Commit: 43b227f
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 5fe06dda-f1ea-4a4a-957b-c2f2535fb39c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

Note

.coderabbit.yml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings: 1

Validation error: Unrecognized keys: "labels", "include_paths", "exclude_paths", "filters", "review", "pull_request", "limits", "commands", "messages"

⚙️ Configuration instructions

• Please see the configuration documentation for more information.
• You can also validate your configuration using the online YAML validator.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}