build(deps-dev): bump the vite group in /frontend with 3 updates

[dependabot]

Bumps the vite group in /frontend with 3 updates: @vitejs/plugin-react, vite and vite-plugin-graphql-codegen.

Updates @vitejs/plugin-react from 4.5.2 to 5.0.0

Release notes

Sourced from @​vitejs/plugin-react's releases.

[email protected]

(Same content as v5.0.0-beta.0 https://github.com/vitejs/vite-plugin-react/releases/tag/plugin-react%405.0.0-beta.0)

Use Oxc for react refresh transform in rolldown-vite

When used with rolldown-vite, this plugin now uses Oxc for react refresh transform.

Since this behavior is what @vitejs/plugin-react-oxc did, @vitejs/plugin-react-oxc is now deprecated and the disableOxcRecommendation option is removed.

Also, while @vitejs/plugin-react-oxc used the production JSX transform even for NODE_ENV=development build, @vitejs/plugin-react uses the development JSX transform for NODE_ENV=development build.

Allow processing files in node_modules

The default value of exclude options is now [/\/node_modules\//] to allow processing files in node_modules directory. It was previously [] and files in node_modules was always excluded regardless of the value of exclude option.

react and react-dom is no longer added to resolve.dedupe automatically

Adding values to resolve.dedupe forces Vite to resolve them differently from how Node.js does, which can be confusing and may not be expected. This plugin no longer adds react and react-dom to resolve.dedupe automatically.

If you encounter errors after upgrading, check your package.json for version mismatches in dependencies or devDependencies, as well as your package manager’s configuration. If you prefer the previous behavior, you can manually add react and react-dom to resolve.dedupe.

Remove old babel-plugin-react-compiler support that requires runtimeModule option

runtimeModule option is no longer needed in newer babel-plugin-react-compiler versions. Make sure to use a newer version of babel-plugin-react-compiler that supports target option.

Require Node 20.19+, 22.12+

This plugin now requires Node 20.19+ or 22.12+.

[email protected]

Use Oxc for react refresh transform in rolldown-vite

When used with rolldown-vite, this plugin now uses Oxc for react refresh transform.

Since this behavior is what @vitejs/plugin-react-oxc did, @vitejs/plugin-react-oxc is now deprecated and the disableOxcRecommendation option is removed.

Also, while @vitejs/plugin-react-oxc used the production JSX transform even for NODE_ENV=development build, @vitejs/plugin-react uses the development JSX transform for NODE_ENV=development build.

Allow processing files in node_modules

The default value of exclude options is now [/\/node_modules\//] to allow processing files in node_modules directory. It was previously [] and files in node_modules was always excluded regardless of the value of exclude option.

react and react-dom is no longer added to resolve.dedupe automatically

Adding values to resolve.dedupe forces Vite to resolve them differently from how Node.js does, which can be confusing and may not be expected. This plugin no longer adds react and react-dom to resolve.dedupe automatically.

If you encounter errors after upgrading, check your package.json for version mismatches in dependencies or devDependencies, as well as your package manager’s configuration. If you prefer the previous behavior, you can manually add react and react-dom to resolve.dedupe.

Remove old babel-plugin-react-compiler support that requires runtimeModule option

... (truncated)

Changelog

Sourced from @​vitejs/plugin-react's changelog.

5.0.0 (2025-08-07)

5.0.0-beta.0 (2025-07-28)

Use Oxc for react refresh transform in rolldown-vite

When used with rolldown-vite, this plugin now uses Oxc for react refresh transform.

Since this behavior is what @vitejs/plugin-react-oxc did, @vitejs/plugin-react-oxc is now deprecated and the disableOxcRecommendation option is removed.

Also, while @vitejs/plugin-react-oxc used the production JSX transform even for NODE_ENV=development build, @vitejs/plugin-react uses the development JSX transform for NODE_ENV=development build.

Allow processing files in node_modules

The default value of exclude options is now [/\/node_modules\//] to allow processing files in node_modules directory. It was previously [] and files in node_modules was always excluded regardless of the value of exclude option.

react and react-dom is no longer added to resolve.dedupe automatically

Adding values to resolve.dedupe forces Vite to resolve them differently from how Node.js does, which can be confusing and may not be expected. This plugin no longer adds react and react-dom to resolve.dedupe automatically.

If you encounter errors after upgrading, check your package.json for version mismatches in dependencies or devDependencies, as well as your package manager’s configuration. If you prefer the previous behavior, you can manually add react and react-dom to resolve.dedupe.

Remove old babel-plugin-react-compiler support that requires runtimeModule option

runtimeModule option is no longer needed in newer babel-plugin-react-compiler versions. Make sure to use a newer version of babel-plugin-react-compiler that supports target option.

Require Node 20.19+, 22.12+

This plugin now requires Node 20.19+ or 22.12+.

4.7.0 (2025-07-18)

Add HMR support for compound components (#518)

HMR now works for compound components like this:

const Root = () => <div>Accordion Root</div>
const Item = () => <div>Accordion Item</div>
export const Accordion = { Root, Item }

Return Plugin[] instead of PluginOption[] (#537)

The return type has changed from react(): PluginOption[] to more specialized type react(): Plugin[]. This allows for type-safe manipulation of plugins, for example:

// previously this causes type errors
react({ babel: { plugins: ['babel-plugin-react-compiler'] } })
</tr></table> 

... (truncated)

Commits

• 9e4a944 release: [email protected]
• 61d777d fix(deps): update all non-major dependencies (#670)
• 7d3a57a release: [email protected]
• 9ffd86d fix(react): use development jsx transform for NODE_ENV=development build (#...
• 133d786 feat: merge plugin-react-oxc into plugin-react (#609)
• 26326b3 feat!: support including files in node_modules (#306)
• 9ce3b22 fix(deps): update all non-major dependencies (#593)
• cadd7d2 fix!: remove resolve.dedupe (#586)
• 005f16e refactor!: remove old babel-plugin-react-compiler support (#584)
• b9efa3f refactor!: bump required node version to 20.19+, 22.12+ and drop CJS build (#...
• Additional commits viewable in compare view

Updates vite from 6.3.5 to 7.1.2

Release notes

Sourced from vite's releases.

v7.1.2

Please refer to CHANGELOG.md for details.

v7.1.1

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v7.1.0

Please refer to CHANGELOG.md for details.

v7.1.0-beta.1

Please refer to CHANGELOG.md for details.

v7.1.0-beta.0

Please refer to CHANGELOG.md for details.

v7.0.6

Please refer to CHANGELOG.md for details.

v7.0.5

Please refer to CHANGELOG.md for details.

v7.0.4

Please refer to CHANGELOG.md for details.

v7.0.3

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v7.0.2

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v7.0.1

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

7.1.2 (2025-08-12)

Bug Fixes

• client: add [vite] prefixes to debug logs (#20595) (7cdef61)
• config: make debugger work with bundle loader (#20573) (c583927)
• deps: update all non-major dependencies (#20587) (20d4817)
• don't consider ids with npm: prefix as a built-in module (#20558) (ab33803)
• hmr: watch non-inlined assets referenced by CSS (#20581) (b7d494b)
• module-runner: prevent crash when sourceMappingURL pattern appears in string literals (#20554) (2770478)

Miscellaneous Chores

• deps: migrate to @jridgewell/remapping from @ampproject/remapping (#20577) (0a6048a)
• deps: update rolldown-related dependencies (#20586) (77632c5)

7.1.1 (2025-08-08)

Bug Fixes

• deps: update launch-editor-middleware (#20569) (826b394)

Miscellaneous Chores

• fix changelog beta links (#20561) (2e0c21a)
• update 7.1 changelog (#20560) (d8869b8)

7.1.0 (2025-08-07)

Features

• support files with more than 1000 lines by generateCodeFrame (#20508) (e7d0b2a)
• add import.meta.main support in config (bundle config loader) (#20516) (5d3e3c2)
• optimizer: improve dependency optimization error messages with esbuild formatMessages (#20525) (d17cfed)
• ssr: add import.meta.main support for Node.js module runner (#20517) (794a8f2)
• add future: 'warn' (#20473) (e6aaf17)
• add removeServerPluginContainer future deprecation (#20437) (c1279e7)
• add removeServerReloadModule future deprecation (#20436) (6970d17)
• add server.warmupRequest to future deprecation (#20431) (8ad388a)
• add ssrFixStacktrace / ssrRewriteStacktrace to removeSsrLoadModule future deprecation (#20435) (8c8f587)
• client: ping from SharedWorker (#19057) (5c97c22)
• dev: add this.fs support (#20301) (0fe3f2f)
• export defaultExternalConditions (#20279) (344d302)
• implement removePluginHookSsrArgument future deprecation (#20433) (95927d9)
• implement removeServerHot future deprecation (#20434) (259f45d)
• resolve server URLs before calling other listeners (#19981) (45f6443)
• ssr: resolve externalized packages with resolve.externalConditions and add module-sync to default external condition (#20409) (c669c52)
• ssr: support import.meta.resolve in module runner (#20260) (62835f7)

Bug Fixes

• css: avoid warnings for image-set containing __VITE_ASSET__ (#20520) (f1a2635)
• css: empty CSS entry points should generate CSS files, not JS files (#20518) (bac9f3e)

... (truncated)

Commits

• 42de3e6 release: v7.1.2
• b7d494b fix(hmr): watch non-inlined assets referenced by CSS (#20581)
• c583927 fix(config): make debugger work with bundle loader (#20573)
• 20d4817 fix(deps): update all non-major dependencies (#20587)
• 7cdef61 fix(client): add [vite] prefixes to debug logs (#20595)
• 77632c5 chore(deps): update rolldown-related dependencies (#20586)
• 0a6048a chore(deps): migrate to @jridgewell/remapping from @ampproject/remapping ...
• 2770478 fix(module-runner): prevent crash when sourceMappingURL pattern appears in st...
• ab33803 fix: don't consider ids with npm: prefix as a built-in module (#20558)
• f4438a1 release: v7.1.1
• Additional commits viewable in compare view

Updates vite-plugin-graphql-codegen from 3.6.1 to 3.6.3

Release notes

Sourced from vite-plugin-graphql-codegen's releases.

v3.6.3

3.6.3 (2025-07-09)

Bug Fixes

• downgrade unbuild to fix cjs type output (326d2d5), closes #39

Miscellaneous Chores

• update deps (32deb80)
• update node to v22.17.0 (91be2a7)

v3.6.2

3.6.2 (2025-06-24)

Bug Fixes

• add vite v7.0.0 to peer dep range (c9db7f9)

Miscellaneous Chores

• refresh editorconfig (fd1fd48)
• update deps and refresh lockfile (d200170)

Changelog

Sourced from vite-plugin-graphql-codegen's changelog.

3.6.3 (2025-07-09)

Bug Fixes

• downgrade unbuild to fix cjs type output (326d2d5), closes #39

Miscellaneous Chores

• update deps (32deb80)
• update node to v22.17.0 (91be2a7)

3.6.2 (2025-06-24)

Bug Fixes

• add vite v7.0.0 to peer dep range (c9db7f9)

Miscellaneous Chores

• refresh editorconfig (fd1fd48)
• update deps and refresh lockfile (d200170)

Commits

• 69acfd5 chore(release): 3.6.3 [skip ci]
• 32deb80 chore: update deps
• 326d2d5 fix: downgrade unbuild to fix cjs type output
• 91be2a7 chore: update node to v22.17.0
• 9065dc7 chore(release): 3.6.2 [skip ci]
• c9db7f9 fix: add vite v7.0.0 to peer dep range
• d200170 chore: update deps and refresh lockfile
• fd1fd48 chore: refresh editorconfig
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: A-Dependencies, Z-Deps-Frontend. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.