New version for Vite 7?

[capripot]

What would it take to release a new version?
It looks like Vite is now at version 7.2.4, would you accept an update PR?

[dmix]

I'm using vite 7 with vite-ruby and it works fine, rolldown-vite on the otherhand is broken

[brendon]

Vite 5 now has a dependency on esbuild that is flagged as a security concern:

GHSA-67mh-4wv8-2f99
GHSA-mwcw-c2x4-8c55

vite-ruby officially depends on Vite 5 if I'm not mistaken. Is it safe to forcefully go to 6 or 7, and what are the plans for making vite-ruby officially compatible with later versions of Vite?

[dmix]

just to clarify my earlier comment, I only use vite_ruby, vite_rails, and vite-plugin-ruby and they both work in production with Vite 7. I do not use vite-plugin-rails

Vite 6 and 7 was a much easier upgrade than 4->5 so I'd imagine this would be a minor change for this project

[ElMassimo]

You should already be able to use Vite 7 with the currently published gems.

I'm not sure it makes sense to cut a release bumping the default at this point, given that Vite 8 is around the corner, and most users will want to take advantage of the improved performance.

[JasonBarnabe]

I guess the confusion (at least on my part) is what the dependencies added to package.json meant. I assumed that they were hard dependencies and upping the versions manually was inadvisable. The documentation for vite upgrade implies that doing so is unsafe and may lead to incompatibilities.

But if you're saying these are just "defaults" and we can upgrade them separately, that's cool, but it would be good if that was documented somewhere.

[brendon]

I’d be surprised if it was as simple as that since a lot has changed with those versions internally. Still, some guidance would be helpful :)

[brendon]

6.x is now able to be used with vite_ruby.