vite 5.1.6 → 5.1.8

package/dist/node/chunks/{dep-jvB8WLp9.js → dep-Ootdsuvy.js}

@@ -32173,8 +32173,8 @@ function createCachedImport(imp) {
         return cached;
     };
 }
-const importPostcssImport = createCachedImport(() => import('./dep-sFlFG1c_.js').then(function (n) { return n.i; }));
-const importPostcssModules = createCachedImport(() => import('./dep-pxQDj-UY.js').then(function (n) { return n.i; }));
+const importPostcssImport = createCachedImport(() => import('./dep-ysrvncjo.js').then(function (n) { return n.i; }));
+const importPostcssModules = createCachedImport(() => import('./dep-g9b13IRr.js').then(function (n) { return n.i; }));
 const importPostcss = createCachedImport(() => import('postcss'));
 const preprocessorWorkerControllerCache = new WeakMap();
 let alwaysFakeWorkerWorkerControllerCache;
@@ -63491,6 +63491,10 @@ function transformMiddleware(server) {
             if (publicDirInRoot && url.startsWith(publicPath)) {
                 warnAboutExplicitPublicPathInUrl(url);
             }
+            if ((rawRE.test(url) || urlRE.test(url)) &&
+                !ensureServingAccess(url, server, res, next)) {
+                return;
+            }
             if (isJSRequest(url) ||
                 isImportRequest(url) ||
                 isCSSRequest(url) ||
@@ -64561,9 +64565,14 @@ async function _createServer(inlineConfig = {}, options) {
         _importGlobMap: new Map(),
         _forceOptimizeOnRestart: false,
         _pendingRequests: new Map(),
-        _fsDenyGlob: picomatch$4(config.server.fs.deny, {
-            matchBase: true,
+        _fsDenyGlob: picomatch$4(
+        // matchBase: true does not work as it's documented
+        // https://github.com/micromatch/picomatch/issues/89
+        // convert patterns without `/` on our side for now
+        config.server.fs.deny.map((pattern) => pattern.includes('/') ? pattern : `**/${pattern}`), {
+            matchBase: false,
             nocase: true,
+            dot: true,
         }),
         _shortcutsOptions: undefined,
     };
@@ -67322,7 +67331,7 @@ function escapeId(id) {
     return id.replace(backSlashRegEx, '\\\\').replace(quoteNewlineRegEx, '\\$1');
 }
 const getResolveUrl = (path, URL = 'URL') => `new ${URL}(${path}).href`;
-const getRelativeUrlFromDocument = (relativePath, umd = false) => getResolveUrl(`'${escapeId(relativePath)}', ${umd ? `typeof document === 'undefined' ? location.href : ` : ''}document.currentScript && document.currentScript.src || document.baseURI`);
+const getRelativeUrlFromDocument = (relativePath, umd = false) => getResolveUrl(`'${escapeId(relativePath)}', ${umd ? `typeof document === 'undefined' ? location.href : ` : ''}document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT' && document.currentScript.src || document.baseURI`);
 const getFileUrlFromFullPath = (path) => `require('u' + 'rl').pathToFileURL(${path}).href`;
 const getFileUrlFromRelativePath = (path) => getFileUrlFromFullPath(`__dirname + '/${escapeId(path)}'`);
 const relativeUrlMechanisms = {

package/dist/node/chunks/{dep-pxQDj-UY.js → dep-g9b13IRr.js}

@@ -1,4 +1,4 @@
-import { C as commonjsGlobal, B as getDefaultExportFromCjs } from './dep-jvB8WLp9.js';
+import { C as commonjsGlobal, B as getDefaultExportFromCjs } from './dep-Ootdsuvy.js';
 import require$$0__default from 'fs';
 import require$$0 from 'postcss';
 import require$$0$1 from 'path';

package/dist/node/chunks/{dep-sFlFG1c_.js → dep-ysrvncjo.js}

@@ -1,4 +1,4 @@
-import { B as getDefaultExportFromCjs } from './dep-jvB8WLp9.js';
+import { B as getDefaultExportFromCjs } from './dep-Ootdsuvy.js';
 import require$$0 from 'path';
 import require$$0__default from 'fs';
 import { l as lib } from './dep-8a-6Quh6.js';

package/dist/node/cli.js

@@ -2,7 +2,7 @@ import path from 'node:path';
 import fs from 'node:fs';
 import { performance } from 'node:perf_hooks';
 import { EventEmitter } from 'events';
-import { A as colors, v as createLogger, r as resolveConfig } from './chunks/dep-jvB8WLp9.js';
+import { A as colors, v as createLogger, r as resolveConfig } from './chunks/dep-Ootdsuvy.js';
 import { VERSION } from './constants.js';
 import 'node:fs/promises';
 import 'node:url';
@@ -757,7 +757,7 @@ cli
     filterDuplicateOptions(options);
     // output structure is preserved even after bundling so require()
     // is ok here
-    const { createServer } = await import('./chunks/dep-jvB8WLp9.js').then(function (n) { return n.E; });
+    const { createServer } = await import('./chunks/dep-Ootdsuvy.js').then(function (n) { return n.E; });
     try {
         const server = await createServer({
             root,
@@ -836,7 +836,7 @@ cli
     .option('-w, --watch', `[boolean] rebuilds when modules have changed on disk`)
     .action(async (root, options) => {
     filterDuplicateOptions(options);
-    const { build } = await import('./chunks/dep-jvB8WLp9.js').then(function (n) { return n.F; });
+    const { build } = await import('./chunks/dep-Ootdsuvy.js').then(function (n) { return n.F; });
     const buildOptions = cleanOptions(options);
     try {
         await build({
@@ -863,7 +863,7 @@ cli
     .option('--force', `[boolean] force the optimizer to ignore the cache and re-bundle`)
     .action(async (root, options) => {
     filterDuplicateOptions(options);
-    const { optimizeDeps } = await import('./chunks/dep-jvB8WLp9.js').then(function (n) { return n.D; });
+    const { optimizeDeps } = await import('./chunks/dep-Ootdsuvy.js').then(function (n) { return n.D; });
     try {
         const config = await resolveConfig({
             root,
@@ -889,7 +889,7 @@ cli
     .option('--outDir <dir>', `[string] output directory (default: dist)`)
     .action(async (root, options) => {
     filterDuplicateOptions(options);
-    const { preview } = await import('./chunks/dep-jvB8WLp9.js').then(function (n) { return n.G; });
+    const { preview } = await import('./chunks/dep-Ootdsuvy.js').then(function (n) { return n.G; });
     try {
         const server = await preview({
             root,

package/dist/node/index.js

@@ -1,6 +1,6 @@
 export { parseAst, parseAstAsync } from 'rollup/parseAst';
-import { i as isInNodeModules, a as arraify } from './chunks/dep-jvB8WLp9.js';
-export { b as build, g as buildErrorMessage, k as createFilter, v as createLogger, c as createServer, d as defineConfig, h as fetchModule, f as formatPostcssSourceMap, x as isFileServingAllowed, l as loadConfigFromFile, y as loadEnv, j as mergeAlias, m as mergeConfig, n as normalizePath, o as optimizeDeps, e as preprocessCSS, p as preview, r as resolveConfig, z as resolveEnvPrefix, q as rollupVersion, w as searchForWorkspaceRoot, u as send, s as sortUserPlugins, t as transformWithEsbuild } from './chunks/dep-jvB8WLp9.js';
+import { i as isInNodeModules, a as arraify } from './chunks/dep-Ootdsuvy.js';
+export { b as build, g as buildErrorMessage, k as createFilter, v as createLogger, c as createServer, d as defineConfig, h as fetchModule, f as formatPostcssSourceMap, x as isFileServingAllowed, l as loadConfigFromFile, y as loadEnv, j as mergeAlias, m as mergeConfig, n as normalizePath, o as optimizeDeps, e as preprocessCSS, p as preview, r as resolveConfig, z as resolveEnvPrefix, q as rollupVersion, w as searchForWorkspaceRoot, u as send, s as sortUserPlugins, t as transformWithEsbuild } from './chunks/dep-Ootdsuvy.js';
 export { VERSION as version } from './constants.js';
 export { version as esbuildVersion } from 'esbuild';
 import { existsSync, readFileSync } from 'node:fs';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vite",
-  "version": "5.1.6",
+  "version": "5.1.8",
   "type": "module",
   "license": "MIT",
   "author": "Evan You",