vite 7.0.6 → 7.0.7

package/dist/node/chunks/{dep-PzytSxfE.js → dep-Cumava67.js}

@@ -1,5 +1,5 @@
 import { createRequire as ___createRequire } from 'module'; const require = ___createRequire(import.meta.url);
-import { preview, resolvePreviewOptions } from "./dep-BHkUv4Z8.js";
+import { preview, resolvePreviewOptions } from "./dep-D718l5rc.js";
 import "./dep-Ctugieod.js";
 
 export { preview };

package/dist/node/chunks/{dep-BHkUv4Z8.js → dep-D718l5rc.js}

@@ -5,7 +5,7 @@ import { builtinModules, createRequire } from "node:module";
 import { parseAst, parseAstAsync } from "rollup/parseAst";
 import * as fs$1 from "node:fs";
 import fs, { existsSync, promises, readFileSync } from "node:fs";
-import path, { basename, dirname, extname, isAbsolute, join, normalize, posix, relative, resolve } from "node:path";
+import path, { basename, dirname, extname, isAbsolute, join, normalize, posix, relative, resolve, sep } from "node:path";
 import fsp, { constants } from "node:fs/promises";
 import { URL as URL$1, fileURLToPath, pathToFileURL } from "node:url";
 import { format, inspect, promisify, stripVTControlCharacters } from "node:util";
@@ -17,7 +17,7 @@ import os from "node:os";
 import net from "node:net";
 import childProcess, { exec, execFile, execSync } from "node:child_process";
 import { promises as promises$1 } from "node:dns";
-import path$1, { basename as basename$1, dirname as dirname$1, extname as extname$1, isAbsolute as isAbsolute$1, join as join$1, posix as posix$1, relative as relative$1, resolve as resolve$1, sep, win32 } from "path";
+import path$1, { basename as basename$1, dirname as dirname$1, extname as extname$1, isAbsolute as isAbsolute$1, join as join$1, posix as posix$1, relative as relative$1, resolve as resolve$1, sep as sep$1, win32 } from "path";
 import { existsSync as existsSync$1, readFileSync as readFileSync$1, readdirSync, statSync } from "fs";
 import { fdir } from "fdir";
 import { gzip } from "node:zlib";
@@ -4457,7 +4457,7 @@ function getEsImportProxy(id, defaultIsModuleExports, moduleSideEffects) {
 	};
 }
 function getCandidatesForExtension(resolved, extension$1) {
-	return [resolved + extension$1, `${resolved}${sep}index${extension$1}`];
+	return [resolved + extension$1, `${resolved}${sep$1}index${extension$1}`];
 }
 function getCandidates(resolved, extensions$1) {
 	return extensions$1.reduce((paths, extension$1) => paths.concat(getCandidatesForExtension(resolved, extension$1)), [resolved]);
@@ -5976,7 +5976,7 @@ function findUp(dir, { resolve: resolve$4, reject, promise }, options$1) {
 * @property {boolean} err - error flag
 * @property {string[]} configNames - config file names
 */
-const sep$2 = path.sep;
+const sep$3 = path.sep;
 
 //#endregion
 //#region ../../node_modules/.pnpm/tsconfck@3.1.6_typescript@5.7.3/node_modules/tsconfck/src/to-json.js
@@ -16569,7 +16569,7 @@ var require_is_binary_path = __commonJS({ "../../node_modules/.pnpm/is-binary-pa
 //#endregion
 //#region ../../node_modules/.pnpm/chokidar@3.6.0_patch_hash=8a4f9e2b397e6034b91a0508faae3cecb97f222313faa129d7cb0eb71e9d0e84/node_modules/chokidar/lib/constants.js
 var require_constants$2 = __commonJS({ "../../node_modules/.pnpm/chokidar@3.6.0_patch_hash=8a4f9e2b397e6034b91a0508faae3cecb97f222313faa129d7cb0eb71e9d0e84/node_modules/chokidar/lib/constants.js"(exports) {
-	const { sep: sep$1 } = require("path");
+	const { sep: sep$2 } = require("path");
 	const { platform: platform$1 } = process;
 	const os$2 = require("os");
 	exports.EV_ALL = "all";
@@ -16602,7 +16602,7 @@ var require_constants$2 = __commonJS({ "../../node_modules/.pnpm/chokidar@3.6.0_
 		exports.KEY_ERR,
 		exports.KEY_RAW
 	];
-	exports.DOT_SLASH = `.${sep$1}`;
+	exports.DOT_SLASH = `.${sep$2}`;
 	exports.BACK_SLASH_RE = /\\/g;
 	exports.DOUBLE_SLASH_RE = /\/\//;
 	exports.SLASH_OR_BACK_SLASH_RE = /[/\\]/;
@@ -26012,7 +26012,7 @@ function parse$1(req$4) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/sirv@3.0.1_patch_hash=95b663b930c5cc6e609c7fa15b69a86ff3b30df68978611d1d3d724c65135cb1/node_modules/sirv/build.mjs
+//#region ../../node_modules/.pnpm/sirv@3.0.2_patch_hash=c07c56eb72faea34341d465cde2314e89db472106ed378181e3447893af6bf95/node_modules/sirv/build.mjs
 const noop = () => {};
 function isMatch(uri, arr) {
 	for (let i$1 = 0; i$1 < arr.length; i$1++) if (arr[i$1].test(uri)) return true;
@@ -26134,7 +26134,7 @@ function build_default(dir, opts = {}) {
 			headers
 		};
 	});
-	let lookup$1 = opts.dev ? viaLocal.bind(0, dir, isEtag) : viaCache.bind(0, FILES);
+	let lookup$1 = opts.dev ? viaLocal.bind(0, dir.endsWith(sep) ? dir : dir + sep, isEtag) : viaCache.bind(0, FILES);
 	return function(req$4, res, next) {
 		let extns = [""];
 		let pathname = parse$1(req$4).pathname;
@@ -27792,7 +27792,12 @@ function indexHtmlMiddleware(root, server) {
 		if (url$6?.endsWith(".html") && req$4.headers["sec-fetch-dest"] !== "script") {
 			let filePath;
 			if (isDev && url$6.startsWith(FS_PREFIX)) filePath = decodeURIComponent(fsPathFromId(url$6));
-			else filePath = path.join(root, decodeURIComponent(url$6));
+			else filePath = normalizePath(path.resolve(path.join(root, decodeURIComponent(url$6))));
+			if (isDev) {
+				const servingAccessResult = checkLoadingAccess(server.config, filePath);
+				if (servingAccessResult === "denied") return respondWithAccessDenied(filePath, server, res);
+				if (servingAccessResult === "fallback") return next();
+			} else if (!isParentDirectory(root, filePath)) return next();
 			if (fs.existsSync(filePath)) {
 				const headers = isDev ? server.config.server.headers : server.config.preview.headers;
 				try {
@@ -30921,7 +30926,7 @@ function createFilterForTransform(idFilter, codeFilter, cwd) {
 async function resolvePlugins(config$2, prePlugins, normalPlugins, postPlugins) {
 	const isBuild = config$2.command === "build";
 	const isWorker = config$2.isWorker;
-	const buildPlugins = isBuild ? await (await import("./dep-CmzxWWz4.js")).resolveBuildPlugins(config$2) : {
+	const buildPlugins = isBuild ? await (await import("./dep-zXgPjA_2.js")).resolveBuildPlugins(config$2) : {
 		pre: [],
 		post: []
 	};
@@ -33100,16 +33105,16 @@ function formatStylusSourceMap(mapBefore, root) {
 	map$1.sources = map$1.sources.map(resolveFromRoot);
 	return map$1;
 }
-async function getSource(source, filename, additionalData, enableSourcemap, sep$3 = "") {
+async function getSource(source, filename, additionalData, enableSourcemap, sep$4 = "") {
 	if (!additionalData) return { content: source };
 	if (typeof additionalData === "function") {
 		const newContent = await additionalData(source, filename);
 		if (typeof newContent === "string") return { content: newContent };
 		return newContent;
 	}
-	if (!enableSourcemap) return { content: additionalData + sep$3 + source };
+	if (!enableSourcemap) return { content: additionalData + sep$4 + source };
 	const ms = new MagicString(source);
-	ms.appendLeft(0, sep$3);
+	ms.appendLeft(0, sep$4);
 	ms.appendLeft(0, additionalData);
 	const map$1 = ms.generateMap({ hires: "boundary" });
 	map$1.file = filename;
@@ -35706,7 +35711,8 @@ async function preview(inlineConfig = {}) {
 	if (config$2.appType === "spa" || config$2.appType === "mpa") app.use(htmlFallbackMiddleware(distDir, config$2.appType === "spa"));
 	postHooks.forEach((fn) => fn && fn());
 	if (config$2.appType === "spa" || config$2.appType === "mpa") {
-		app.use(indexHtmlMiddleware(distDir, server));
+		const normalizedDistDir = normalizePath(distDir);
+		app.use(indexHtmlMiddleware(normalizedDistDir, server));
 		app.use(notFoundMiddleware());
 	}
 	const hostname = await resolveHostname(options$1.host);

package/dist/node/chunks/{dep-Bg9-PZ8I.js → dep-V0qnk7_W.js}

@@ -1,5 +1,5 @@
 import { createRequire as ___createRequire } from 'module'; const require = ___createRequire(import.meta.url);
-import { addManuallyIncludedOptimizeDeps, addOptimizedDepInfo, cleanupDepsCacheStaleDirs, createIsOptimizedDepFile, createIsOptimizedDepUrl, depsFromOptimizedDepInfo, depsLogString, discoverProjectDependencies, extractExportsData, getDepsCacheDir, getOptimizedDepPath, initDepsOptimizerMetadata, isDepOptimizationDisabled, loadCachedDepOptimizationMetadata, optimizeDeps, optimizeExplicitEnvironmentDeps, optimizedDepInfoFromFile, optimizedDepInfoFromId, optimizedDepNeedsInterop, runOptimizeDeps, toDiscoveredDependencies } from "./dep-BHkUv4Z8.js";
+import { addManuallyIncludedOptimizeDeps, addOptimizedDepInfo, cleanupDepsCacheStaleDirs, createIsOptimizedDepFile, createIsOptimizedDepUrl, depsFromOptimizedDepInfo, depsLogString, discoverProjectDependencies, extractExportsData, getDepsCacheDir, getOptimizedDepPath, initDepsOptimizerMetadata, isDepOptimizationDisabled, loadCachedDepOptimizationMetadata, optimizeDeps, optimizeExplicitEnvironmentDeps, optimizedDepInfoFromFile, optimizedDepInfoFromId, optimizedDepNeedsInterop, runOptimizeDeps, toDiscoveredDependencies } from "./dep-D718l5rc.js";
 import "./dep-Ctugieod.js";
 
 export { optimizeDeps };

package/dist/node/chunks/{dep-Ck0J6tA7.js → dep-ovf8FmPp.js}

@@ -1,5 +1,5 @@
 import { createRequire as ___createRequire } from 'module'; const require = ___createRequire(import.meta.url);
-import { _createServer, createServer, createServerCloseFn, resolveServerOptions, restartServerWithUrls, serverConfigDefaults } from "./dep-BHkUv4Z8.js";
+import { _createServer, createServer, createServerCloseFn, resolveServerOptions, restartServerWithUrls, serverConfigDefaults } from "./dep-D718l5rc.js";
 import "./dep-Ctugieod.js";
 
 export { createServer };

package/dist/node/chunks/{dep-CmzxWWz4.js → dep-zXgPjA_2.js}

@@ -1,5 +1,5 @@
 import { createRequire as ___createRequire } from 'module'; const require = ___createRequire(import.meta.url);
-import { BuildEnvironment, build, buildEnvironmentOptionsDefaults, builderOptionsDefaults, createBuilder, createToImportMetaURLBasedRelativeRuntime, injectEnvironmentToHooks, onRollupLog, resolveBuildEnvironmentOptions, resolveBuildOutputs, resolveBuildPlugins, resolveBuilderOptions, resolveLibFilename, resolveUserExternal, toOutputFilePathInCss, toOutputFilePathInHtml, toOutputFilePathInJS, toOutputFilePathWithoutRuntime } from "./dep-BHkUv4Z8.js";
+import { BuildEnvironment, build, buildEnvironmentOptionsDefaults, builderOptionsDefaults, createBuilder, createToImportMetaURLBasedRelativeRuntime, injectEnvironmentToHooks, onRollupLog, resolveBuildEnvironmentOptions, resolveBuildOutputs, resolveBuildPlugins, resolveBuilderOptions, resolveLibFilename, resolveUserExternal, toOutputFilePathInCss, toOutputFilePathInHtml, toOutputFilePathInJS, toOutputFilePathWithoutRuntime } from "./dep-D718l5rc.js";
 import "./dep-Ctugieod.js";
 
 export { createBuilder, resolveBuildPlugins };

package/dist/node/cli.js

@@ -1,6 +1,6 @@
 import { createRequire as ___createRequire } from 'module'; const require = ___createRequire(import.meta.url);
 import { __toESM } from "./chunks/dep-Drtntmtt.js";
-import { createLogger, require_picocolors, resolveConfig } from "./chunks/dep-BHkUv4Z8.js";
+import { createLogger, require_picocolors, resolveConfig } from "./chunks/dep-D718l5rc.js";
 import { VERSION } from "./chunks/dep-Ctugieod.js";
 import fs from "node:fs";
 import path from "node:path";
@@ -568,7 +568,7 @@ const convertBase = (v) => {
 cli.option("-c, --config <file>", `[string] use specified config file`).option("--base <path>", `[string] public base path (default: /)`, { type: [convertBase] }).option("-l, --logLevel <level>", `[string] info | warn | error | silent`).option("--clearScreen", `[boolean] allow/disable clear screen when logging`).option("--configLoader <loader>", `[string] use 'bundle' to bundle the config with esbuild, or 'runner' (experimental) to process it on the fly, or 'native' (experimental) to load using the native runtime (default: bundle)`).option("-d, --debug [feat]", `[string | boolean] show debug logs`).option("-f, --filter <filter>", `[string] filter debug logs`).option("-m, --mode <mode>", `[string] set env mode`);
 cli.command("[root]", "start dev server").alias("serve").alias("dev").option("--host [host]", `[string] specify hostname`, { type: [convertHost] }).option("--port <port>", `[number] specify port`).option("--open [path]", `[boolean | string] open browser on startup`).option("--cors", `[boolean] enable CORS`).option("--strictPort", `[boolean] exit if specified port is already in use`).option("--force", `[boolean] force the optimizer to ignore the cache and re-bundle`).action(async (root, options) => {
 	filterDuplicateOptions(options);
-	const { createServer } = await import("./chunks/dep-Ck0J6tA7.js");
+	const { createServer } = await import("./chunks/dep-ovf8FmPp.js");
 	try {
 		const server = await createServer({
 			root,
@@ -624,7 +624,7 @@ cli.command("[root]", "start dev server").alias("serve").alias("dev").option("--
 });
 cli.command("build [root]", "build for production").option("--target <target>", `[string] transpile target (default: 'baseline-widely-available')`).option("--outDir <dir>", `[string] output directory (default: dist)`).option("--assetsDir <dir>", `[string] directory under outDir to place assets in (default: assets)`).option("--assetsInlineLimit <number>", `[number] static asset base64 inline threshold in bytes (default: 4096)`).option("--ssr [entry]", `[string] build specified entry for server-side rendering`).option("--sourcemap [output]", `[boolean | "inline" | "hidden"] output source maps for build (default: false)`).option("--minify [minifier]", "[boolean | \"terser\" | \"esbuild\"] enable/disable minification, or specify minifier to use (default: esbuild)").option("--manifest [name]", `[boolean | string] emit build manifest json`).option("--ssrManifest [name]", `[boolean | string] emit ssr manifest json`).option("--emptyOutDir", `[boolean] force empty outDir when it's outside of root`).option("-w, --watch", `[boolean] rebuilds when modules have changed on disk`).option("--app", `[boolean] same as \`builder: {}\``).action(async (root, options) => {
 	filterDuplicateOptions(options);
-	const { createBuilder } = await import("./chunks/dep-CmzxWWz4.js");
+	const { createBuilder } = await import("./chunks/dep-zXgPjA_2.js");
 	const buildOptions = cleanGlobalCLIOptions(cleanBuilderCLIOptions(options));
 	try {
 		const inlineConfig = {
@@ -649,7 +649,7 @@ cli.command("build [root]", "build for production").option("--target <target>",
 });
 cli.command("optimize [root]", "pre-bundle dependencies (deprecated, the pre-bundle process runs automatically and does not need to be called)").option("--force", `[boolean] force the optimizer to ignore the cache and re-bundle`).action(async (root, options) => {
 	filterDuplicateOptions(options);
-	const { optimizeDeps } = await import("./chunks/dep-Bg9-PZ8I.js");
+	const { optimizeDeps } = await import("./chunks/dep-V0qnk7_W.js");
 	try {
 		const config = await resolveConfig({
 			root,
@@ -667,7 +667,7 @@ cli.command("optimize [root]", "pre-bundle dependencies (deprecated, the pre-bun
 });
 cli.command("preview [root]", "locally preview production build").option("--host [host]", `[string] specify hostname`, { type: [convertHost] }).option("--port <port>", `[number] specify port`).option("--strictPort", `[boolean] exit if specified port is already in use`).option("--open [path]", `[boolean | string] open browser on startup`).option("--outDir <dir>", `[string] output directory (default: dist)`).action(async (root, options) => {
 	filterDuplicateOptions(options);
-	const { preview } = await import("./chunks/dep-PzytSxfE.js");
+	const { preview } = await import("./chunks/dep-Cumava67.js");
 	try {
 		const server = await preview({
 			root,

package/dist/node/index.js

@@ -1,5 +1,5 @@
 import { createRequire as ___createRequire } from 'module'; const require = ___createRequire(import.meta.url);
-import { BuildEnvironment, DevEnvironment, build, buildErrorMessage, createBuilder, createFilter, createIdResolver, createLogger, createRunnableDevEnvironment, createServer, createServerHotChannel, createServerModuleRunner, createServerModuleRunnerTransport, defineConfig, fetchModule, formatPostcssSourceMap, isCSSRequest, isFileLoadingAllowed, isFileServingAllowed, isRunnableDevEnvironment, loadConfigFromFile, loadEnv, mergeAlias, mergeConfig, normalizePath, optimizeDeps, perEnvironmentPlugin, perEnvironmentState, preprocessCSS, preview, resolveConfig, resolveEnvPrefix, rollupVersion, runnerImport, searchForWorkspaceRoot, send, sortUserPlugins, ssrTransform, transformWithEsbuild } from "./chunks/dep-BHkUv4Z8.js";
+import { BuildEnvironment, DevEnvironment, build, buildErrorMessage, createBuilder, createFilter, createIdResolver, createLogger, createRunnableDevEnvironment, createServer, createServerHotChannel, createServerModuleRunner, createServerModuleRunnerTransport, defineConfig, fetchModule, formatPostcssSourceMap, isCSSRequest, isFileLoadingAllowed, isFileServingAllowed, isRunnableDevEnvironment, loadConfigFromFile, loadEnv, mergeAlias, mergeConfig, normalizePath, optimizeDeps, perEnvironmentPlugin, perEnvironmentState, preprocessCSS, preview, resolveConfig, resolveEnvPrefix, rollupVersion, runnerImport, searchForWorkspaceRoot, send, sortUserPlugins, ssrTransform, transformWithEsbuild } from "./chunks/dep-D718l5rc.js";
 import { DEFAULT_CLIENT_CONDITIONS, DEFAULT_CLIENT_MAIN_FIELDS, DEFAULT_SERVER_CONDITIONS, DEFAULT_SERVER_MAIN_FIELDS, VERSION, defaultAllowedOrigins } from "./chunks/dep-Ctugieod.js";
 import { parseAst, parseAstAsync } from "rollup/parseAst";
 import { version as esbuildVersion } from "esbuild";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vite",
-  "version": "7.0.6",
+  "version": "7.0.7",
   "type": "module",
   "license": "MIT",
   "author": "Evan You",
@@ -129,7 +129,7 @@
     "rollup-plugin-license": "^3.6.0",
     "sass": "^1.89.2",
     "sass-embedded": "^1.89.2",
-    "sirv": "^3.0.1",
+    "sirv": "^3.0.2",
     "strip-literal": "^3.0.0",
     "terser": "^5.43.1",
     "tsconfck": "^3.1.6",