Skip to content

Bump vite, @shopify/hydrogen and @remix-run/dev#140

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-8edd600443
Open

Bump vite, @shopify/hydrogen and @remix-run/dev#140
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-8edd600443

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 8, 2026

Bumps vite, @shopify/hydrogen and @remix-run/dev. These dependencies needed to be updated together.
Updates vite from 5.2.12 to 8.0.7

Release notes

Sourced from vite's releases.

v8.0.7

Please refer to CHANGELOG.md for details.

v8.0.6

Please refer to CHANGELOG.md for details.

v8.0.5

Please refer to CHANGELOG.md for details.

v8.0.4

Please refer to CHANGELOG.md for details.

create-vite@8.0.3

Please refer to CHANGELOG.md for details.

v8.0.3

Please refer to CHANGELOG.md for details.

create-vite@8.0.2

Please refer to CHANGELOG.md for details.

v8.0.2

Please refer to CHANGELOG.md for details.

create-vite@8.0.1

Please refer to CHANGELOG.md for details.

v8.0.1

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.1

Please refer to CHANGELOG.md for details.

create-vite@8.0.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0-beta.18

Please refer to CHANGELOG.md for details.

v8.0.0-beta.17

Please refer to CHANGELOG.md for details.

v8.0.0-beta.16

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.0.7 (2026-04-07)

Bug Fixes

  • use sync dns.getDefaultResultOrder instead of dns.promises (#22185) (5c05b04)

8.0.6 (2026-04-07)

Features

Bug Fixes

Performance Improvements

  • early return in getLocalhostAddressIfDiffersFromDNS when DNS order is verbatim (#22151) (56ec256)

Miscellaneous Chores

8.0.5 (2026-04-06)

Bug Fixes

  • apply server.fs check to env transport (#22159) (f02d9fd)
  • avoid path traversal with optimize deps sourcemap handler (#22161) (79f002f)
  • check server.fs after stripping query as well (#22160) (a9a3df2)
  • disallow referencing files outside the package from sourcemap (#22158) (f05f501)

8.0.4 (2026-04-06)

Features

  • allow esbuild 0.28 as peer deps (#22155) (b0da973)
  • hmr: truncate list of files on hmr update (#21535) (d00e806)
  • optimizer: log when dependency scanning or bundling takes over 1s (#21797) (f61a1ab)

Bug Fixes

  • hasBothRollupOptionsAndRolldownOptions should return false for proxy case (#22043) (99897d2)
  • add types for vite/modulepreload-polyfill (#22126) (17330d2)
  • deps: update all non-major dependencies (#22073) (6daa10f)
  • deps: update all non-major dependencies (#22143) (22b0166)
  • resolve: resolve tsconfig paths starting with # (#22038) (3460fc5)
  • ssr: use browser platform for webworker SSR builds (fix #21969) (#21963) (364c227)

Documentation

... (truncated)

Commits
  • fdb2e6f release: v8.0.7
  • 5c05b04 fix: use sync dns.getDefaultResultOrder instead of dns.promises (#22185)
  • 7b3086f release: v8.0.6
  • af71fb2 chore: replace remaining prettier script (#22179)
  • 51d3e48 feat: update rolldown to 1.0.0-rc.13 (#22097)
  • 17a8f9e fix(optimize-deps): hoist CJS interop assignment (#22156)
  • d5081c2 fix(css): avoid mutating sass error multiple times (#22115)
  • 56ec256 perf: early return in getLocalhostAddressIfDiffersFromDNS when DNS order is...
  • bdc53ab chore(create-vite): remove unnecessary DOM.Iterable (#22168)
  • 1a12d4c release: v8.0.5
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite since your current version.


Updates @shopify/hydrogen from 2025.1.1 to 2025.10.1

Release notes

Sourced from @​shopify/hydrogen's releases.

@​shopify/hydrogen@​2025.10.1

Patch Changes

  • Fixed bug where file paths containing spaces were causing errors with virtual routes by decoding URL-encoded paths (#3436) by @​itsjustriley

@​shopify/hydrogen-react@​2025.10.0

Major Changes

Minor Changes

  • Add visitorConsent support to @inContext directive for Storefront API parity (#3408) by @​kdaviduik

    Note: Most Hydrogen storefronts do NOT need this feature.

    This API addition provides Storefront API 2025-10 parity for the visitorConsent parameter in @inContext directives. However, if you're using Hydrogen's analytics provider or Shopify's Customer Privacy API (including third-party consent services integrated with it), consent is already handled automatically and you don't need to use this.

    This feature is primarily intended for Checkout Kit and other non-Hydrogen integrations that manage consent outside of Shopify's standard consent flow.

    What it does: When explicitly provided, visitorConsent encodes buyer consent preferences (analytics, marketing, preferences, saleOfData) into the cart's checkoutUrl via the _cs parameter.

Patch Changes

  • Add parent prop to AddToCartButton for nested cart lines (#3398) by @​fredericoo

    The AddToCartButton component now accepts an optional parent prop, allowing you to add items as children of an existing cart line. This enables adding warranties, gift wrapping, or other add-ons that should be associated with a parent product.

    Usage

    import {AddToCartButton} from '@shopify/hydrogen-react';
// Add a warranty as a child of an existing cart line (by line ID)
<AddToCartButton
variantId="gid://shopify/ProductVariant/warranty-123"
parent={{parentLineId: 'gid://shopify/CartLine/parent-456'}}
>
Add Extended Warranty
</AddToCartButton>
// Add a warranty as a child of a cart line (by merchandise ID)
// Useful when you know the product variant but not the cart line ID
<AddToCartButton
variantId="gid://shopify/ProductVariant/warranty-123"
parent={{merchandiseId: 'gid://shopify/ProductVariant/laptop-456'}}
>
Add Extended Warranty
</AddToCartButton>

... (truncated)

Changelog

Sourced from @​shopify/hydrogen's changelog.

2025.10.1

Patch Changes

  • Fixed bug where file paths containing spaces were causing errors with virtual routes by decoding URL-encoded paths (#3436) by @​itsjustriley

2025.10.0

Major Changes

Minor Changes

  • Add cartDeliveryAddressesReplaceDefault to handle the new cartDeliveryAddressesReplace Storefront API mutation (2025-10) (#3406) by @​kdaviduik

    This new mutation replaces all delivery addresses on a cart in a single operation.

    Usage via cart handler:

    const result = await cart.replaceDeliveryAddresses([
  {
    address: {
      deliveryAddress: {
        address1: '123 Main St',
        city: 'Anytown',
        countryCode: 'US',
      },
    },
    selected: true,
  },
]);

    Usage via CartForm:

    <CartForm action={CartForm.ACTIONS.DeliveryAddressesReplace}>
  {/* form inputs */}
</CartForm>

  • Add cartGiftCardCodesAdd mutation (#3401) by @​kdaviduik

    New Feature: cartGiftCardCodesAdd

    Adds gift card codes without replacing existing ones.

    Before (2025-07):

... (truncated)

Commits
  • 0723a6f [ci] release 2025.10.1 (#3451)
  • ed51909 improve testing
  • 7229151 add decoding for url-encoded paths
  • 87eb365 [ci] release 2025.10.0
  • 38f8a79 feat(cart): add visitorConsent support to @​inContext directive
  • 60fe949 fix: fix failing test
  • 0e61522 feat: add support for nested cart lines
  • 0516581 Merge pull request #3406 from Shopify/2025-10-deliveryAddressReplace
  • 13a6f89 feat(cart): add cartDeliveryAddressesReplace mutation support
  • cb68e36 chore(cart): remove redundant gift card code deduplication
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​shopify/hydrogen since your current version.


Updates @remix-run/dev from 2.15.3 to 2.17.4

Release notes

Sourced from @​remix-run/dev's releases.

remix v2.17.4

See the changelog for the release notes: https://github.com/remix-run/remix/blob/v2/CHANGELOG.md#v2174

remix v2.17.3

See the changelog for the release notes: https://github.com/remix-run/remix/blob/v2/CHANGELOG.md#v2173

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​remix-run/dev since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump vite, @Shopify/hydrogen and @remix-run/dev
2f59086 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [@Shopify/hydrogen](https://github.com/Shopify/hydrogen/tree/HEAD/packages/hydrogen) and [@remix-run/dev](https://github.com/remix-run/remix/tree/HEAD/packages/remix-dev). These dependencies needed to be updated together.

Updates `vite` from 5.2.12 to 8.0.7
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.7/packages/vite)

Updates `@Shopify/hydrogen` from 2025.1.1 to 2025.10.1
- [Release notes](https://github.com/Shopify/hydrogen/releases)
- [Changelog](https://github.com/Shopify/hydrogen/blob/main/packages/hydrogen/CHANGELOG.md)
- [Commits](https://github.com/Shopify/hydrogen/commits/@shopify/hydrogen@2025.10.1/packages/hydrogen)

Updates `@remix-run/dev` from 2.15.3 to 2.17.4
- [Release notes](https://github.com/remix-run/remix/releases)
- [Commits](https://github.com/remix-run/remix/commits/remix@2.17.4/packages/remix-dev)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.0.7
  dependency-type: direct:development
- dependency-name: "@Shopify/hydrogen"
  dependency-version: 2025.10.1
  dependency-type: direct:production
- dependency-name: "@remix-run/dev"
  dependency-version: 2.17.4
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 8, 2026
@dependabot dependabot bot mentioned this pull request Apr 8, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants