Skip to content

build(deps-dev): bump vite from 7.3.5 to 7.3.7 - #20159

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/vite-7.3.7
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/vite-7.3.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor

Bumps vite from 7.3.5 to 7.3.7.

Release notes

Sourced from vite's releases.

v7.3.7

Please refer to CHANGELOG.md for details.

v7.3.6

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.3.7 (2026-10-06)

Bug Fixes

  • deps: update launch-editor to v2.14.2 (#23654) (a0a3339)
  • html: filename passed to transformIndexHtml should not include queries (#23653) (8d479f9)
  • server: store ids to safeModulePaths rather than URLs (#23656) (f0d76c7)

7.3.6 (2026-06-25)

Features

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.5 to 7.3.7.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.7/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.7/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.3.7
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
develop-docs Ready Ready Preview Oct 21, 2026 10:38pm UTC
sentry-docs Ready Ready Preview Oct 21, 2026 10:38pm UTC

Request Review

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 21, 2026
@github-actions github-actions Bot added the Priority: Needs Triage The PR description is missing valid priority information label Oct 21, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Please update the IS YOUR CHANGE URGENT? section of the PR description:

  • Select exactly one option.
  • If you selected an urgent or other deadline, provide the date as YYYY-MM-DD.

This information helps the Docs team prioritize your review.

@cursor

cursor Bot commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor
  • The change updates a test-only bundler. Production pages should keep the same behavior.
  • The plan checks client errors, HTTP 5xx, and pageload time.
  • An issue escalates when client errors or 5xx rise, or when pageloads stall.

Services: sentry-docs, develop-docs.

Mention @change-monitor in a comment to update the plan.

Plan

What changed

Production page requests still return the same Next.js HTML and client bundle.
Vite 7.3.7 runs only inside vitest.
sentry-docs and develop-docs must deploy before the new lockfile is live.

Risk

A lockfile rebuild can emit a broken client bundle or a failing server route.
Users then see blank pages, failed scripts, or 5xx responses.
The blast radius is every page on both deployed sites.

Intended effect

This bump has no queryable production effect.
Vite is not on the request path.
No new counter should increment.
Do not treat held traffic as proof that the bump worked.
The executor cannot confirm intended effect from production telemetry.

Regression watch

A bad rebuild first shows as client error events or HTTP 5xx.
Pageload time also rises if scripts fail.
Traces for pageload and navigation use a 30% sample rate.
Error events do not use that sample rate.
The error ratio is not a true user error rate.
If client errors rise, inspect titles for TypeError, ReferenceError, and ChunkLoadError.

Signal Baseline Window Rule Source
Client error ratio, docs 1.80% last day (287 error events / 15963 pageload+navigation spans). Prior day 0.83% (138 / 16587). Band 0.83-1.80% 2026-10-20T22:33:00Z to 2026-10-21T22:33:00Z and 2026-10-19T22:33:00Z to 2026-10-20T22:33:00Z Hold in 0.83-1.80%. Escalate if the ratio rises above 1.80% Sentry org sentry project docs. Errors environment:production. Spans span.op:[pageload,navigation] sentry.environment:production
Client error ratio, develop-docs 1.85% last day (33 error events / 1780 pageload+navigation spans). Prior day 1.55% (30 / 1930). Band 1.55-1.85% 2026-10-20T22:33:00Z to 2026-10-21T22:33:00Z and 2026-10-19T22:33:00Z to 2026-10-20T22:33:00Z Hold in 1.55-1.85%. Escalate if the ratio rises above 1.85% Sentry org sentry project develop-docs. Same error and span filters as docs
HTTP 5xx rate, docs 1.14% (80 5xx / 6994 http.server spans) 2026-10-20T22:33:00Z to 2026-10-21T22:33:00Z Hold at or below 1.14%. Escalate if the rate rises above 1.14% on similar http.server volume Sentry org sentry project docs. Spans span.op:http.server sentry.environment:production with count_if(http.response.status_code:>=500)
HTTP 5xx rate, develop-docs 0% (0 5xx / 153 http.server spans) 2026-10-20T22:33:00Z to 2026-10-21T22:33:00Z Hold at 0. Escalate if 5xx http.server spans appear Sentry org sentry project develop-docs. Same http.server filter as docs
Pageload p95, docs Last day pageload p95 8940ms and navigation p95 2360ms. 48h hourly p95 for those ops combined ranged 5156-12322ms 2026-10-20T22:33:00Z to 2026-10-21T22:33:00Z, with hourly band 2026-10-19T22:33:00Z to 2026-10-21T22:31:00Z Hold pageload p95 in 5156-12322ms. Escalate if it stays above 12322ms Sentry org sentry project docs. Spans span.op:[pageload,navigation] sentry.environment:production
ChunkLoadError and SyntaxError, docs 0 events 2026-10-20T22:33:00Z to 2026-10-21T22:33:00Z Hold at 0 Sentry org sentry project docs. Errors environment:production AND (title:*ChunkLoadError* OR error.type:SyntaxError)

Not observable

No production signal shows that vite 7.3.7 is installed.
Vitest results live in CI.
They are not in this telemetry.
The prior-day HTTP 5xx rate for docs was not confirmed.
The 48 hour 5xx query used a different status field.
The prior-day HTTP 5xx rate for develop-docs was not measured.
ChunkLoadError volume on develop-docs was not measured.

This branch was successfully deployed

2 active deployments
Preview – sentry-docs — afefc43f Deployed Oct 21, 2026 by vercel[bot]
Preview – develop-docs — afefc43f Deployed Oct 21, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file Priority: Needs Triage The PR description is missing valid priority information

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants