chore(deps): update Vite from v6 to v8 by lachlancollins · Pull Request #11650 · TanStack/query

lachlancollins · 2026-09-26T00:34:15Z

🎯 Changes

Updated Vite from v6 to v8
Updated framework Vite plugins
Disabld false ESlint no-unnecessary-type-assertion warnings (break typechecking)
Removed @tanstack/vite-config
Added @analogjs/vite-plugin-angular
Switched vue-query-devtools to tsdown

✅ Checklist

I have followed the steps in the Contributing guide.
I have tested code changes locally with pnpm run test:pr, or these tests do not apply to this pull request.
I have followed the AI contribution policy and fully understand the code in this pull request, including any code generated with AI assistance.

🚀 Release Impact

This change affects published code, and I have generated a changeset.
This change is docs/CI/dev-only (no release).

Summary by CodeRabbit

Chores
- Updated the development tooling used by framework examples and integrations, including Vite and the React, Vue, and Svelte plugins.
- Updated Angular package test and build setup.
- Refreshed the repository’s test tooling versions.
Changes
- The ESLint plugin is available as a default export; its named export has been removed.
- Updated Vue Devtools package exports and build output.

coderabbitai · 2026-09-26T00:34:22Z

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Repository: TanStack/query/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: ab97d443-3bf2-495b-9a79-1bb3858b1e4f

📥 Commits

Reviewing files that changed from the base of the PR and between fe053bf and a63473f.

⛔ Files ignored due to path filters (1)

pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (84)

.changeset/nice-buses-tie.md
examples/lit/basic/package.json
examples/lit/pagination/package.json
examples/lit/ssr/package.json
examples/preact/simple/package.json
examples/react/algolia/package.json
examples/react/basic-graphql-request/package.json
examples/react/basic/package.json
examples/react/batching/package.json
examples/react/chat/package.json
examples/react/default-query-function/package.json
examples/react/devtools-panel/package.json
examples/react/eslint-legacy/package.json
examples/react/offline/package.json
examples/react/playground/package.json
examples/react/react-router/package.json
examples/react/rick-morty/package.json
examples/react/shadow-dom/package.json
examples/react/simple/package.json
examples/react/star-wars/package.json
examples/react/suspense/package.json
examples/solid/astro/package.json
examples/solid/basic-graphql-request/package.json
examples/solid/basic/package.json
examples/solid/default-query-function/package.json
examples/solid/offline/package.json
examples/solid/simple/package.json
examples/svelte/auto-refetching/package.json
examples/svelte/basic/package.json
examples/svelte/load-more-infinite-scroll/package.json
examples/svelte/optimistic-updates/package.json
examples/svelte/playground/package.json
examples/svelte/simple/package.json
examples/svelte/ssr/package.json
examples/svelte/star-wars/package.json
examples/vue/basic/package.json
examples/vue/dependent-queries/package.json
examples/vue/persister/package.json
examples/vue/simple/package.json
integrations/lit-vite/package.json
integrations/react-vite/package.json
integrations/solid-vite/package.json
integrations/svelte-vite/package.json
integrations/vue-vite/package.json
knip.ts
package.json
packages/angular-query-experimental/package.json
packages/angular-query-experimental/src/create-base-query.ts
packages/angular-query-experimental/src/inject-queries.ts
packages/angular-query-experimental/tsconfig.json
packages/angular-query-experimental/vite.config.ts
packages/angular-query-persist-client/package.json
packages/angular-query-persist-client/tsconfig.json
packages/angular-query-persist-client/vite.config.ts
packages/eslint-plugin-query/vite.config.ts
packages/query-broadcast-client-experimental/package.json
packages/query-core/src/__tests__/queryClient.test-d.tsx
packages/query-core/src/__tests__/retryer.test-d.tsx
packages/query-core/src/__tests__/streamedQuery.test.tsx
packages/query-core/src/__tests__/utils.test-d.tsx
packages/query-core/src/streamedQuery.ts
packages/query-devtools/src/__tests__/Devtools.test.tsx
packages/query-devtools/src/__tests__/Explorer.test.tsx
packages/query-test-utils/package.json
packages/react-query-devtools/package.json
packages/react-query-next-experimental/package.json
packages/react-query-persist-client/package.json
packages/react-query/package.json
packages/react-query/src/__tests__/useSuspenseQuery.test.tsx
packages/svelte-query-devtools/package.json
packages/svelte-query-persist-client/package.json
packages/svelte-query/package.json
packages/vue-query-devtools/package.json
packages/vue-query-devtools/root.tsdown.config.js
packages/vue-query-devtools/src/__tests__/VueQueryDevtools.test.ts
packages/vue-query-devtools/src/__tests__/VueQueryDevtoolsPanel.test.ts
packages/vue-query-devtools/src/index.ts
packages/vue-query-devtools/src/production.ts
packages/vue-query-devtools/src/stub.ts
packages/vue-query-devtools/tsdown.config.ts
packages/vue-query-devtools/vite.config.ts
packages/vue-query/package.json
packages/vue-query/vite.config.ts
pnpm-workspace.yaml

 ______________________________________________
< Looking for trouble in all the right places. >
 ----------------------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).

✨ Finishing Touches

📝 Generate docstrings

Commit to this branch
Create a new PR

🧪 Generate unit tests (beta)

Commit to this branch
Create a new PR

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

nx-cloud · 2026-09-26T00:35:41Z

View your CI Pipeline Execution ↗ for commit 1325abe

Command	Status	Duration	Result
`nx affected --targets=test:sherif,test:knip,tes...`	✅ Succeeded	3m 50s	View ↗
`nx run-many --target=build --exclude=examples/*...`	✅ Succeeded	2s	View ↗

☁️ Nx Cloud last updated this comment at 2026-09-26 02:22:38 UTC

github-actions · 2026-09-26T00:36:10Z

🚀 Changeset Version Preview

14 package(s) bumped directly, 11 bumped as dependents.

🟥 Major bumps

Package	Version	Reason
`@tanstack/angular-query-experimental`	5.103.3 → 6.0.0	Changeset
`@tanstack/eslint-plugin-query`	5.103.3 → 6.0.0	Changeset
`@tanstack/query-broadcast-client-experimental`	5.103.3 → 6.0.0	Changeset
`@tanstack/query-core`	5.103.3 → 6.0.0	Changeset
`@tanstack/query-devtools`	5.103.3 → 6.0.0	Changeset
`@tanstack/react-query`	5.103.3 → 6.0.0	Changeset
`@tanstack/react-query-devtools`	5.103.3 → 6.0.0	Changeset
`@tanstack/react-query-next-experimental`	5.103.3 → 6.0.0	Changeset
`@tanstack/react-query-persist-client`	5.103.3 → 6.0.0	Changeset
`@tanstack/svelte-query`	6.2.5 → 7.0.0	Changeset
`@tanstack/svelte-query-devtools`	6.2.5 → 7.0.0	Changeset
`@tanstack/svelte-query-persist-client`	6.2.5 → 7.0.0	Changeset
`@tanstack/vue-query`	5.103.3 → 6.0.0	Changeset
`@tanstack/vue-query-devtools`	6.2.5 → 7.0.0	Changeset
`@tanstack/angular-query-persist-client`	5.103.3 → 6.0.0	Dependent
`@tanstack/lit-query`	0.2.24 → 1.0.0	Dependent
`@tanstack/preact-query`	5.103.3 → 6.0.0	Dependent
`@tanstack/preact-query-devtools`	5.103.3 → 6.0.0	Dependent
`@tanstack/preact-query-persist-client`	5.103.3 → 6.0.0	Dependent
`@tanstack/query-async-storage-persister`	5.103.3 → 6.0.0	Dependent
`@tanstack/query-persist-client-core`	5.103.3 → 6.0.0	Dependent
`@tanstack/query-sync-storage-persister`	5.103.3 → 6.0.0	Dependent
`@tanstack/solid-query`	5.103.3 → 6.0.0	Dependent
`@tanstack/solid-query-devtools`	5.103.3 → 6.0.0	Dependent
`@tanstack/solid-query-persist-client`	5.103.3 → 6.0.0	Dependent

socket-security · 2026-09-26T00:36:10Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	Maintenance
typescript-eslint@8.58.1 ⏵ 8.70.1			⁺¹
@oxc-project/runtime@0.151.0
@typescript-eslint/rule-tester@8.58.1 ⏵ 8.70.1			⁺¹
@astrojs/solid-js@5.1.3 ⏵ 7.0.2				⁺⁵
@sveltejs/vite-plugin-svelte@5.1.1 ⏵ 7.3.1	⁺¹		⁺¹	⁺⁵
@astrojs/node@9.5.5 ⏵ 11.1.6		⁺⁴	⁺¹
astro@5.18.1 ⏵ 7.3.5	⁺¹	⁺⁷⁵	⁺¹
tsdown@0.22.14 ⏵ 0.23.0			⁺¹
@vitejs/plugin-react@4.7.0 ⏵ 6.1.1	⁺¹
unplugin-vue@8.0.0
@analogjs/vite-plugin-angular@2.7.5

View full report

socket-security · 2026-09-26T00:36:12Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		High CVE: Vite: `server.fs.deny` bypassed with queries CVE: GHSA-v2wj-q39q-566r Vite: `server.fs.deny` bypassed with queries (HIGH) Affected versions: >= 8.0.0 < 8.0.5; >= 7.1.0 < 7.3.2 Patched version: 7.3.2 From: pnpm-lock.yaml → `npm/@angular/build@20.3.22` → `npm/@analogjs/vite-plugin-angular@2.7.5` → `npm/vite@7.1.11` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/vite@7.1.11`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

pkg-pr-new · 2026-09-26T00:37:19Z

More templates

@tanstack/angular-query-experimental

npm i https://pkg.pr.new/@tanstack/angular-query-experimental@11650

@tanstack/eslint-plugin-query

npm i https://pkg.pr.new/@tanstack/eslint-plugin-query@11650

@tanstack/lit-query

npm i https://pkg.pr.new/@tanstack/lit-query@11650

@tanstack/preact-query

npm i https://pkg.pr.new/@tanstack/preact-query@11650

@tanstack/preact-query-devtools

npm i https://pkg.pr.new/@tanstack/preact-query-devtools@11650

@tanstack/preact-query-persist-client

npm i https://pkg.pr.new/@tanstack/preact-query-persist-client@11650

@tanstack/query-async-storage-persister

npm i https://pkg.pr.new/@tanstack/query-async-storage-persister@11650

@tanstack/query-broadcast-client-experimental

npm i https://pkg.pr.new/@tanstack/query-broadcast-client-experimental@11650

@tanstack/query-core

npm i https://pkg.pr.new/@tanstack/query-core@11650

@tanstack/query-devtools

npm i https://pkg.pr.new/@tanstack/query-devtools@11650

@tanstack/query-persist-client-core

npm i https://pkg.pr.new/@tanstack/query-persist-client-core@11650

@tanstack/query-sync-storage-persister

npm i https://pkg.pr.new/@tanstack/query-sync-storage-persister@11650

@tanstack/react-query

npm i https://pkg.pr.new/@tanstack/react-query@11650

@tanstack/react-query-devtools

npm i https://pkg.pr.new/@tanstack/react-query-devtools@11650

@tanstack/react-query-next-experimental

npm i https://pkg.pr.new/@tanstack/react-query-next-experimental@11650

@tanstack/react-query-persist-client

npm i https://pkg.pr.new/@tanstack/react-query-persist-client@11650

@tanstack/solid-query

npm i https://pkg.pr.new/@tanstack/solid-query@11650

@tanstack/solid-query-devtools

npm i https://pkg.pr.new/@tanstack/solid-query-devtools@11650

@tanstack/solid-query-persist-client

npm i https://pkg.pr.new/@tanstack/solid-query-persist-client@11650

@tanstack/svelte-query

npm i https://pkg.pr.new/@tanstack/svelte-query@11650

@tanstack/svelte-query-devtools

npm i https://pkg.pr.new/@tanstack/svelte-query-devtools@11650

@tanstack/svelte-query-persist-client

npm i https://pkg.pr.new/@tanstack/svelte-query-persist-client@11650

@tanstack/vue-query

npm i https://pkg.pr.new/@tanstack/vue-query@11650

@tanstack/vue-query-devtools

npm i https://pkg.pr.new/@tanstack/vue-query-devtools@11650

commit: a63473f

github-actions · 2026-09-26T00:38:14Z

size-limit report 📦

Path	Size
react full	11.73 KB (0%)
react minimal	8.58 KB (0%)

lachlancollins added 2 commits September 26, 2026 10:10

chore(deps): update Vite from v6 to v8

6f46424

Fix angular, vue-devtools

c7ef121

Merge branch 'main' into vite-v8

482ae32

Fix vue-devtools

8ac09ad

lachlancollins force-pushed the vite-v8 branch from def1b55 to 8ac09ad Compare September 26, 2026 01:15

lachlancollins added 4 commits September 26, 2026 11:26

Fix knip, remove @tanstack/vite-config

df5d503

Update eslint config

7269518

Disable false eslint errors

cafef87

Fix remaining errors

d7fbdde

lachlancollins marked this pull request as ready for review September 26, 2026 01:53

lachlancollins added 2 commits September 26, 2026 12:05

Fix knip, dedupe esbuild

1325abe

Add changeset

a63473f

lachlancollins merged commit 5279b05 into main Sep 26, 2026
8 of 9 checks passed

lachlancollins deleted the vite-v8 branch September 26, 2026 02:23

github-actions Bot mentioned this pull request Sep 26, 2026

ci: Version Packages #11651

Merged

Navigation Menu

Uh oh!

chore(deps): update Vite from v6 to v8 - #11650

chore(deps): update Vite from v6 to v8#11650
lachlancollins merged 10 commits into
mainfrom
vite-v8

lachlancollins commented Sep 26, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 26, 2026 •

edited

Loading

Uh oh!

nx-cloud Bot commented Sep 26, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 26, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 26, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 26, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Sep 26, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 26, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

lachlancollins commented Sep 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🎯 Changes

✅ Checklist

🚀 Release Impact

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Sep 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

nx-cloud Bot commented Sep 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🚀 Changeset Version Preview

🟥 Major bumps

Uh oh!

socket-security Bot commented Sep 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Sep 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pkg-pr-new Bot commented Sep 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 26, 2026

size-limit report 📦

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

lachlancollins commented Sep 26, 2026 •

edited

Loading

coderabbitai Bot commented Sep 26, 2026 •

edited

Loading

nx-cloud Bot commented Sep 26, 2026 •

edited

Loading

github-actions Bot commented Sep 26, 2026 •

edited

Loading

socket-security Bot commented Sep 26, 2026 •

edited

Loading

socket-security Bot commented Sep 26, 2026 •

edited

Loading

pkg-pr-new Bot commented Sep 26, 2026 •

edited

Loading