vite 6.0.7 → 6.0.9

package/dist/node/chunks/{dep-DnSxfB-q.js → dep-DcIXjcop.js}

@@ -397,7 +397,7 @@ function replaceCodePoint(codePoint) {
     if ((codePoint >= 0xd800 && codePoint <= 0xdfff) || codePoint > 0x10ffff) {
         return 0xfffd;
     }
-    return (_a = decodeMap.get(codePoint)) !== null && _a !== void 0 ? _a : codePoint;
+    return (_a = decodeMap.get(codePoint)) !== null && _a !== undefined ? _a : codePoint;
 }
 
 var CharCodes;
@@ -641,7 +641,7 @@ class EntityDecoder {
         var _a;
         // Ensure we consumed at least one digit.
         if (this.consumed <= expectedLength) {
-            (_a = this.errors) === null || _a === void 0 ? void 0 : _a.absenceOfDigitsInNumericCharacterReference(this.consumed);
+            (_a = this.errors) === null || _a === undefined ? undefined : _a.absenceOfDigitsInNumericCharacterReference(this.consumed);
             return 0;
         }
         // Figure out if this is a legit end of the entity
@@ -716,7 +716,7 @@ class EntityDecoder {
         const { result, decodeTree } = this;
         const valueLength = (decodeTree[result] & BinTrieFlags.VALUE_LENGTH) >> 14;
         this.emitNamedEntityData(result, valueLength, this.consumed);
-        (_a = this.errors) === null || _a === void 0 ? void 0 : _a.missingSemicolonAfterCharacterReference();
+        (_a = this.errors) === null || _a === undefined ? undefined : _a.missingSemicolonAfterCharacterReference();
         return this.consumed;
     }
     /**
@@ -765,7 +765,7 @@ class EntityDecoder {
                 return this.emitNumericEntity(0, 3);
             }
             case EntityDecoderState.NumericStart: {
-                (_a = this.errors) === null || _a === void 0 ? void 0 : _a.absenceOfDigitsInNumericCharacterReference(this.consumed);
+                (_a = this.errors) === null || _a === undefined ? undefined : _a.absenceOfDigitsInNumericCharacterReference(this.consumed);
                 return 0;
             }
             case EntityDecoderState.EntityStart: {
@@ -1236,7 +1236,7 @@ const TAG_NAME_TO_ID = new Map([
 ]);
 function getTagID(tagName) {
     var _a;
-    return (_a = TAG_NAME_TO_ID.get(tagName)) !== null && _a !== void 0 ? _a : TAG_ID.UNKNOWN;
+    return (_a = TAG_NAME_TO_ID.get(tagName)) !== null && _a !== undefined ? _a : TAG_ID.UNKNOWN;
 }
 const $ = TAG_ID;
 const SPECIAL_ELEMENTS = {
@@ -1513,7 +1513,7 @@ class Tokenizer {
     //Errors
     _err(code, cpOffset = 0) {
         var _a, _b;
-        (_b = (_a = this.handler).onParseError) === null || _b === void 0 ? void 0 : _b.call(_a, this.preprocessor.getError(code, cpOffset));
+        (_b = (_a = this.handler).onParseError) === null || _b === undefined ? undefined : _b.call(_a, this.preprocessor.getError(code, cpOffset));
     }
     // NOTE: `offset` may never run across line boundaries.
     getCurrentLocation(offset) {
@@ -1556,7 +1556,7 @@ class Tokenizer {
             return;
         this._runParsingLoop();
         if (!this.paused) {
-            writeCallback === null || writeCallback === void 0 ? void 0 : writeCallback();
+            writeCallback === null || writeCallback === undefined ? undefined : writeCallback();
         }
     }
     write(chunk, isLastChunk, writeCallback) {
@@ -1564,7 +1564,7 @@ class Tokenizer {
         this.preprocessor.write(chunk, isLastChunk);
         this._runParsingLoop();
         if (!this.paused) {
-            writeCallback === null || writeCallback === void 0 ? void 0 : writeCallback();
+            writeCallback === null || writeCallback === undefined ? undefined : writeCallback();
         }
     }
     insertHtmlAtCurrentPos(chunk) {
@@ -1663,7 +1663,7 @@ class Tokenizer {
         if (getTokenAttr(token, this.currentAttr.name) === null) {
             token.attrs.push(this.currentAttr);
             if (token.location && this.currentLocation) {
-                const attrLocations = ((_a = (_b = token.location).attrs) !== null && _a !== void 0 ? _a : (_b.attrs = Object.create(null)));
+                const attrLocations = ((_a = (_b = token.location).attrs) !== null && _a !== undefined ? _a : (_b.attrs = Object.create(null)));
                 attrLocations[this.currentAttr.name] = this.currentLocation;
                 // Set end location
                 this._leaveAttrValue();
@@ -5076,11 +5076,11 @@ class Parser {
         if (this.onParseError) {
             this.options.sourceCodeLocationInfo = true;
         }
-        this.document = document !== null && document !== void 0 ? document : this.treeAdapter.createDocument();
+        this.document = document !== null && document !== undefined ? document : this.treeAdapter.createDocument();
         this.tokenizer = new Tokenizer(this.options, this);
         this.activeFormattingElements = new FormattingElementList(this.treeAdapter);
         this.fragmentContextID = fragmentContext ? getTagID(this.treeAdapter.getTagName(fragmentContext)) : TAG_ID.UNKNOWN;
-        this._setContextModes(fragmentContext !== null && fragmentContext !== void 0 ? fragmentContext : this.document, this.fragmentContextID);
+        this._setContextModes(fragmentContext !== null && fragmentContext !== undefined ? fragmentContext : this.document, this.fragmentContextID);
         this.openElements = new OpenElementStack(this.document, this.treeAdapter, this);
     }
     // API
@@ -5096,7 +5096,7 @@ class Parser {
         };
         //NOTE: use a <template> element as the fragment context if no context element was provided,
         //so we will parse in a "forgiving" manner
-        fragmentContext !== null && fragmentContext !== void 0 ? fragmentContext : (fragmentContext = opts.treeAdapter.createElement(TAG_NAMES.TEMPLATE, NS.HTML, []));
+        fragmentContext !== null && fragmentContext !== undefined ? fragmentContext : (fragmentContext = opts.treeAdapter.createElement(TAG_NAMES.TEMPLATE, NS.HTML, []));
         //NOTE: create a fake element which will be used as the `document` for fragment parsing.
         //This is important for jsdom, where a new `document` cannot be created. This led to
         //fragment parsing messing with the main `document`.
@@ -5123,7 +5123,7 @@ class Parser {
         var _a;
         if (!this.onParseError)
             return;
-        const loc = (_a = token.location) !== null && _a !== void 0 ? _a : BASE_LOC;
+        const loc = (_a = token.location) !== null && _a !== undefined ? _a : BASE_LOC;
         const err = {
             code,
             startLine: loc.startLine,
@@ -5139,7 +5139,7 @@ class Parser {
     /** @internal */
     onItemPush(node, tid, isTop) {
         var _a, _b;
-        (_b = (_a = this.treeAdapter).onItemPush) === null || _b === void 0 ? void 0 : _b.call(_a, node);
+        (_b = (_a = this.treeAdapter).onItemPush) === null || _b === undefined ? undefined : _b.call(_a, node);
         if (isTop && this.openElements.stackTop > 0)
             this._setContextModes(node, tid);
     }
@@ -5149,7 +5149,7 @@ class Parser {
         if (this.options.sourceCodeLocationInfo) {
             this._setEndLocation(node, this.currentToken);
         }
-        (_b = (_a = this.treeAdapter).onItemPop) === null || _b === void 0 ? void 0 : _b.call(_a, node, this.openElements.current);
+        (_b = (_a = this.treeAdapter).onItemPop) === null || _b === undefined ? undefined : _b.call(_a, node, this.openElements.current);
         if (isTop) {
             let current;
             let currentTagId;
@@ -7311,7 +7311,7 @@ function eofInBody(p, token) {
 function endTagInText(p, token) {
     var _a;
     if (token.tagID === TAG_ID.SCRIPT) {
-        (_a = p.scriptHandler) === null || _a === void 0 ? void 0 : _a.call(p, p.openElements.current);
+        (_a = p.scriptHandler) === null || _a === undefined ? undefined : _a.call(p, p.openElements.current);
     }
     p.openElements.pop();
     p.insertionMode = p.originalInsertionMode;
@@ -8039,7 +8039,7 @@ function endTagAfterBody(p, token) {
             p._setEndLocation(p.openElements.items[0], token);
             // Update the body element, if it doesn't have an end tag
             const bodyElement = p.openElements.items[1];
-            if (bodyElement && !((_a = p.treeAdapter.getNodeSourceCodeLocation(bodyElement)) === null || _a === void 0 ? void 0 : _a.endTag)) {
+            if (bodyElement && !((_a = p.treeAdapter.getNodeSourceCodeLocation(bodyElement)) === null || _a === undefined ? undefined : _a.endTag)) {
                 p._setEndLocation(bodyElement, token);
             }
         }

package/dist/node/cli.js

@@ -2,12 +2,13 @@ import path from 'node:path';
 import fs__default from 'node:fs';
 import { performance } from 'node:perf_hooks';
 import { EventEmitter } from 'events';
-import { M as colors, G as createLogger, r as resolveConfig } from './chunks/dep-BJP6rrE_.js';
+import { M as colors, G as createLogger, r as resolveConfig } from './chunks/dep-BdTvomPN.js';
 import { VERSION } from './constants.js';
 import 'node:fs/promises';
 import 'node:url';
 import 'node:util';
 import 'node:module';
+import 'node:crypto';
 import 'esbuild';
 import 'path';
 import 'fs';
@@ -23,7 +24,6 @@ import 'stream';
 import 'os';
 import 'child_process';
 import 'node:os';
-import 'node:crypto';
 import 'node:dns';
 import 'vite/module-runner';
 import 'rollup/parseAst';
@@ -40,6 +40,7 @@ import 'zlib';
 import 'buffer';
 import 'https';
 import 'tls';
+import 'node:net';
 import 'assert';
 import 'node:querystring';
 import 'node:zlib';
@@ -65,9 +66,9 @@ function mri2 (args, opts) {
 	var k, arr, arg, name, val, out={ _:[] };
 	var i=0, j=0, idx=0, len=args.length;
 
-	const alibi = opts.alias !== void 0;
-	const strict = opts.unknown !== void 0;
-	const defaults = opts.default !== void 0;
+	const alibi = opts.alias !== undefined;
+	const strict = opts.unknown !== undefined;
+	const defaults = opts.default !== undefined;
 
 	opts.alias = opts.alias || {};
 	opts.string = toArr(opts.string);
@@ -96,7 +97,7 @@ function mri2 (args, opts) {
 		for (k in opts.default) {
 			name = typeof opts.default[k];
 			arr = opts.alias[k] = opts.alias[k] || [];
-			if (opts[name] !== void 0) {
+			if (opts[name] !== undefined) {
 				opts[name].push(k);
 				for (i=0; i < arr.length; i++) {
 					opts[name].push(arr[i]);
@@ -146,7 +147,7 @@ function mri2 (args, opts) {
 
 	if (defaults) {
 		for (k in opts.default) {
-			if (out[k] === void 0) {
+			if (out[k] === undefined) {
 				out[k] = opts.default[k];
 			}
 		}
@@ -400,7 +401,7 @@ class Command {
       sections.push({
         title: "Options",
         body: options.map((option) => {
-          return `  ${padRight(option.rawName, longestOptionName.length)}  ${option.description} ${option.config.default === void 0 ? "" : `(default: ${option.config.default})`}`;
+          return `  ${padRight(option.rawName, longestOptionName.length)}  ${option.description} ${option.config.default === undefined ? "" : `(default: ${option.config.default})`}`;
         }).join("\n")
       });
     }
@@ -529,8 +530,8 @@ class CAC extends EventEmitter {
     return this;
   }
   unsetMatchedCommand() {
-    this.matchedCommand = void 0;
-    this.matchedCommandName = void 0;
+    this.matchedCommand = undefined;
+    this.matchedCommandName = undefined;
   }
   parse(argv = processArgs, {
     run = true
@@ -610,13 +611,13 @@ class CAC extends EventEmitter {
     const ignoreDefault = command && command.config.ignoreOptionDefaultValue ? command.config.ignoreOptionDefaultValue : this.globalCommand.config.ignoreOptionDefaultValue;
     let transforms = Object.create(null);
     for (const cliOption of cliOptions) {
-      if (!ignoreDefault && cliOption.config.default !== void 0) {
+      if (!ignoreDefault && cliOption.config.default !== undefined) {
         for (const name of cliOption.names) {
           options[name] = cliOption.config.default;
         }
       }
       if (Array.isArray(cliOption.config.type)) {
-        if (transforms[cliOption.name] === void 0) {
+        if (transforms[cliOption.name] === undefined) {
           transforms[cliOption.name] = Object.create(null);
           transforms[cliOption.name]["shouldTransform"] = true;
           transforms[cliOption.name]["transformFunction"] = cliOption.config.type[0];
@@ -674,7 +675,7 @@ const stopProfiler = (log) => {
             `CPU profile written to ${colors.white(colors.dim(outPath))}`
           )
         );
-        profileSession = void 0;
+        profileSession = undefined;
         res();
       } else {
         rej(err);
@@ -711,7 +712,7 @@ function cleanGlobalCLIOptions(options) {
   }
   if ("watch" in ret) {
     const watch = ret.watch;
-    ret.watch = watch ? {} : void 0;
+    ret.watch = watch ? {} : undefined;
   }
   return ret;
 }
@@ -740,7 +741,7 @@ cli.command("[root]", "start dev server").alias("serve").alias("dev").option("--
   `[boolean] force the optimizer to ignore the cache and re-bundle`
 ).action(async (root, options) => {
   filterDuplicateOptions(options);
-  const { createServer } = await import('./chunks/dep-BJP6rrE_.js').then(function (n) { return n.Q; });
+  const { createServer } = await import('./chunks/dep-BdTvomPN.js').then(function (n) { return n.Q; });
   try {
     const server = await createServer({
       root,
@@ -833,7 +834,7 @@ cli.command("build [root]", "build for production").option("--target <target>",
 ).option("-w, --watch", `[boolean] rebuilds when modules have changed on disk`).option("--app", `[boolean] same as \`builder: {}\``).action(
   async (root, options) => {
     filterDuplicateOptions(options);
-    const { createBuilder } = await import('./chunks/dep-BJP6rrE_.js').then(function (n) { return n.R; });
+    const { createBuilder } = await import('./chunks/dep-BdTvomPN.js').then(function (n) { return n.R; });
     const buildOptions = cleanGlobalCLIOptions(
       cleanBuilderCLIOptions(options)
     );
@@ -868,7 +869,7 @@ cli.command("optimize [root]", "pre-bundle dependencies").option(
 ).action(
   async (root, options) => {
     filterDuplicateOptions(options);
-    const { optimizeDeps } = await import('./chunks/dep-BJP6rrE_.js').then(function (n) { return n.P; });
+    const { optimizeDeps } = await import('./chunks/dep-BdTvomPN.js').then(function (n) { return n.P; });
     try {
       const config = await resolveConfig(
         {
@@ -894,7 +895,7 @@ ${e.stack}`),
 cli.command("preview [root]", "locally preview production build").option("--host [host]", `[string] specify hostname`, { type: [convertHost] }).option("--port <port>", `[number] specify port`).option("--strictPort", `[boolean] exit if specified port is already in use`).option("--open [path]", `[boolean | string] open browser on startup`).option("--outDir <dir>", `[string] output directory (default: dist)`).action(
   async (root, options) => {
     filterDuplicateOptions(options);
-    const { preview } = await import('./chunks/dep-BJP6rrE_.js').then(function (n) { return n.S; });
+    const { preview } = await import('./chunks/dep-BdTvomPN.js').then(function (n) { return n.S; });
     try {
       const server = await preview({
         root,

package/dist/node/index.d.ts

@@ -674,6 +674,18 @@ interface CommonServerOptions {
      * Set to 0.0.0.0 to listen on all addresses, including LAN and public addresses.
      */
     host?: string | boolean;
+    /**
+     * The hostnames that Vite is allowed to respond to.
+     * `localhost` and subdomains under `.localhost` and all IP addresses are allowed by default.
+     * When using HTTPS, this check is skipped.
+     *
+     * If a string starts with `.`, it will allow that hostname without the `.` and all subdomains under the hostname.
+     * For example, `.example.com` will allow `example.com`, `foo.example.com`, and `foo.bar.example.com`.
+     *
+     * If set to `true`, the server is allowed to respond to requests for any hosts.
+     * This is not recommended as it will be vulnerable to DNS rebinding attacks.
+     */
+    allowedHosts?: string[] | true;
     /**
      * Enable TLS + HTTP/2.
      * Note: this downgrades to TLS only when the proxy option is also used.
@@ -709,8 +721,14 @@ interface CommonServerOptions {
     /**
      * Configure CORS for the dev server.
      * Uses https://github.com/expressjs/cors.
+     *
+     * When enabling this option, **we recommend setting a specific value
+     * rather than `true`** to avoid exposing the source code to untrusted origins.
+     *
      * Set to `true` to allow all methods from any origin, or configure separately
      * using an object.
+     *
+     * @default false
      */
     cors?: CorsOptions | boolean;
     /**
@@ -722,6 +740,12 @@ interface CommonServerOptions {
  * https://github.com/expressjs/cors#configuration-options
  */
 interface CorsOptions {
+    /**
+     * Configures the Access-Control-Allow-Origin CORS header.
+     *
+     * **We recommend setting a specific value rather than
+     * `true`** to avoid exposing the source code to untrusted origins.
+     */
     origin?: CorsOrigin | ((origin: string | undefined, cb: (err: Error, origins: CorsOrigin) => void) => void);
     methods?: string | string[];
     allowedHeaders?: string | string[];
@@ -3111,8 +3135,8 @@ interface ResolvedServerUrls {
 declare function createServer(inlineConfig?: InlineConfig): Promise<ViteDevServer>;
 
 interface ESBuildOptions extends esbuild_TransformOptions {
-    include?: string | RegExp | string[] | RegExp[];
-    exclude?: string | RegExp | string[] | RegExp[];
+    include?: string | RegExp | ReadonlyArray<string | RegExp>;
+    exclude?: string | RegExp | ReadonlyArray<string | RegExp>;
     jsxInject?: string;
     /**
      * This option is not respected. Use `build.minify` instead.
@@ -3900,6 +3924,18 @@ interface LegacyOptions {
      * https://github.com/vitejs/vite/discussions/14697.
      */
     proxySsrExternalModules?: boolean;
+    /**
+     * In Vite 6.0.8 and below, WebSocket server was able to connect from any web pages. However,
+     * that could be exploited by a malicious web page.
+     *
+     * In Vite 6.0.9+, the WebSocket server now requires a token to connect from a web page.
+     * But this may break some plugins and frameworks that connects to the WebSocket server
+     * on their own. Enabling this option will make Vite skip the token check.
+     *
+     * **We do not recommend enabling this option unless you are sure that you are fine with
+     * that security weakness.**
+     */
+    skipWebSocketTokenCheck?: boolean;
 }
 interface ResolvedWorkerOptions {
     format: 'es' | 'iife';
@@ -3946,6 +3982,17 @@ type ResolvedConfig = Readonly<Omit<UserConfig, 'plugins' | 'css' | 'json' | 'as
     appType: AppType;
     experimental: ExperimentalOptions;
     environments: Record<string, ResolvedEnvironmentOptions>;
+    /**
+     * The token to connect to the WebSocket server from browsers.
+     *
+     * We recommend using `import.meta.hot` rather than connecting
+     * to the WebSocket server directly.
+     * If you have a usecase that requires connecting to the WebSocket
+     * server, please create an issue so that we can discuss.
+     *
+     * @deprecated
+     */
+    webSocketToken: string;
 } & PluginHookUtils>;
 interface PluginHookUtils {
     getSortedPlugins: <K extends keyof Plugin>(hookName: K) => PluginWithRequiredHook<K>[];

package/dist/node/index.js

@@ -1,6 +1,6 @@
 export { parseAst, parseAstAsync } from 'rollup/parseAst';
-import { i as isInNodeModules, a as arraify } from './chunks/dep-BJP6rrE_.js';
-export { B as BuildEnvironment, D as DevEnvironment, f as build, m as buildErrorMessage, g as createBuilder, C as createFilter, h as createIdResolver, G as createLogger, n as createRunnableDevEnvironment, c as createServer, w as createServerHotChannel, v as createServerModuleRunner, d as defineConfig, u as fetchModule, j as formatPostcssSourceMap, J as isFileLoadingAllowed, I as isFileServingAllowed, q as isRunnableDevEnvironment, l as loadConfigFromFile, K as loadEnv, A as mergeAlias, z as mergeConfig, x as moduleRunnerTransform, y as normalizePath, o as optimizeDeps, p as perEnvironmentPlugin, b as perEnvironmentState, k as preprocessCSS, e as preview, r as resolveConfig, L as resolveEnvPrefix, E as rollupVersion, H as searchForWorkspaceRoot, F as send, s as sortUserPlugins, t as transformWithEsbuild } from './chunks/dep-BJP6rrE_.js';
+import { i as isInNodeModules, a as arraify } from './chunks/dep-BdTvomPN.js';
+export { B as BuildEnvironment, D as DevEnvironment, f as build, m as buildErrorMessage, g as createBuilder, C as createFilter, h as createIdResolver, G as createLogger, n as createRunnableDevEnvironment, c as createServer, w as createServerHotChannel, v as createServerModuleRunner, d as defineConfig, u as fetchModule, j as formatPostcssSourceMap, J as isFileLoadingAllowed, I as isFileServingAllowed, q as isRunnableDevEnvironment, l as loadConfigFromFile, K as loadEnv, A as mergeAlias, z as mergeConfig, x as moduleRunnerTransform, y as normalizePath, o as optimizeDeps, p as perEnvironmentPlugin, b as perEnvironmentState, k as preprocessCSS, e as preview, r as resolveConfig, L as resolveEnvPrefix, E as rollupVersion, H as searchForWorkspaceRoot, F as send, s as sortUserPlugins, t as transformWithEsbuild } from './chunks/dep-BdTvomPN.js';
 export { DEFAULT_CLIENT_CONDITIONS as defaultClientConditions, DEFAULT_CLIENT_MAIN_FIELDS as defaultClientMainFields, DEFAULT_SERVER_CONDITIONS as defaultServerConditions, DEFAULT_SERVER_MAIN_FIELDS as defaultServerMainFields, VERSION as version } from './constants.js';
 export { version as esbuildVersion } from 'esbuild';
 import 'node:fs';
@@ -10,6 +10,7 @@ import 'node:url';
 import 'node:util';
 import 'node:perf_hooks';
 import 'node:module';
+import 'node:crypto';
 import 'path';
 import 'fs';
 import 'node:child_process';
@@ -25,7 +26,6 @@ import 'stream';
 import 'os';
 import 'child_process';
 import 'node:os';
-import 'node:crypto';
 import 'node:dns';
 import 'vite/module-runner';
 import 'module';
@@ -41,6 +41,7 @@ import 'zlib';
 import 'buffer';
 import 'https';
 import 'tls';
+import 'node:net';
 import 'assert';
 import 'node:querystring';
 import 'node:zlib';

package/dist/node-cjs/publicUtils.cjs

@@ -2778,7 +2778,7 @@ const parse$2 = (input, options) => {
       }
 
       if (prior.type === 'slash' && prior.prev.type !== 'bos' && rest[0] === '/') {
-        const end = rest[1] !== void 0 ? '|$' : '';
+        const end = rest[1] !== undefined ? '|$' : '';
 
         state.output = state.output.slice(0, -(prior.output + prev.output).length);
         prior.output = `(?:${prior.output}`;
@@ -5644,7 +5644,7 @@ function clearScreen() {
 }
 let timeFormatter;
 function getTimeFormatter() {
-  timeFormatter ??= new Intl.DateTimeFormat(void 0, {
+  timeFormatter ??= new Intl.DateTimeFormat(undefined, {
     hour: "numeric",
     minute: "numeric",
     second: "numeric"
@@ -6370,13 +6370,13 @@ function loadEnv(mode, envDir, prefixes = "VITE_") {
       return Object.entries(parse_1(fs$1.readFileSync(filePath)));
     })
   );
-  if (parsed.NODE_ENV && process.env.VITE_USER_NODE_ENV === void 0) {
+  if (parsed.NODE_ENV && process.env.VITE_USER_NODE_ENV === undefined) {
     process.env.VITE_USER_NODE_ENV = parsed.NODE_ENV;
   }
-  if (parsed.BROWSER && process.env.BROWSER === void 0) {
+  if (parsed.BROWSER && process.env.BROWSER === undefined) {
     process.env.BROWSER = parsed.BROWSER;
   }
-  if (parsed.BROWSER_ARGS && process.env.BROWSER_ARGS === void 0) {
+  if (parsed.BROWSER_ARGS && process.env.BROWSER_ARGS === undefined) {
     process.env.BROWSER_ARGS = parsed.BROWSER_ARGS;
   }
   const processEnv = { ...process.env };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vite",
-  "version": "6.0.7",
+  "version": "6.0.9",
   "type": "module",
   "license": "MIT",
   "author": "Evan You",
@@ -103,7 +103,7 @@
     "dep-types": "link:./src/types",
     "dotenv": "^16.4.7",
     "dotenv-expand": "^12.0.1",
-    "es-module-lexer": "^1.5.4",
+    "es-module-lexer": "^1.6.0",
     "escape-html": "^1.0.3",
     "estree-walker": "^3.0.3",
     "etag": "^1.8.1",
@@ -116,7 +116,7 @@
     "nanoid": "^5.0.9",
     "open": "^10.1.0",
     "parse5": "^7.2.1",
-    "pathe": "^1.1.2",
+    "pathe": "^2.0.0",
     "periscopic": "^4.0.2",
     "picocolors": "^1.1.1",
     "picomatch": "^4.0.2",
@@ -127,8 +127,8 @@
     "rollup-plugin-dts": "^6.1.1",
     "rollup-plugin-esbuild": "^6.1.1",
     "rollup-plugin-license": "^3.5.3",
-    "sass": "^1.83.0",
-    "sass-embedded": "^1.83.0",
+    "sass": "^1.83.1",
+    "sass-embedded": "^1.83.1",
     "sirv": "^3.0.0",
     "source-map-support": "^0.5.21",
     "strip-literal": "^2.1.1",