chore(deps): update 'vite' to '^8.3.5', deduplicate 'pnpm-lock.yaml' and remove 'vite@6.4.1' from 'trustPolicyExclude' by sukvvon · Pull Request #12446 · TanStack/query

sukvvon · 2026-10-29T03:38:50Z

🎯 Changes

Updates the vite specifier from ^8.3.1 to ^8.3.5 in the root, integrations/* and examples package.json files (103 files).
Runs pnpm dedupe, so pnpm-lock.yaml resolves a single vite@8.3.5 and a single vue@3.5.44, and drops duplicated transitive versions.
Updates the vite dependency of vinxi (used by examples/solid/solid-start-streaming) from 6.4.1 to 6.4.5, which is published with provenance, and removes vite@6.4.1 from trustPolicyExclude in pnpm-workspace.yaml.

✅ Checklist

I have followed the steps in the Contributing guide.
I have tested code changes locally with pnpm run test:pr, or these tests do not apply to this pull request.
I have followed the AI contribution policy and fully understand the code in this pull request, including any code generated with AI assistance.

🚀 Release Impact

This change affects published code, and I have generated a changeset.
This change is docs/CI/dev-only (no release).

Summary by CodeRabbit

Chores
- Updated Vite to version 8.3.5 across the project, integrations, and framework examples.

…and remove 'vite@6.4.1' from 'trustPolicyExclude'

changeset-bot · 2026-10-29T03:38:57Z

⚠️ No Changeset found

Latest commit: ea8dd7c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

nx-cloud · 2026-10-29T03:39:16Z

View your CI Pipeline Execution ↗ for commit ea8dd7c

Command	Status	Duration	Result
`nx affected --targets=test:sherif,test:knip,tes...`	⛔ Cancelled	19m 35s	View ↗
`nx run-many --target=build --exclude=examples/*...`	✅ Succeeded	38s	View ↗

☁️ Nx Cloud last updated this comment at 2026-10-29 03:59:39 UTC

github-actions · 2026-10-29T03:39:47Z

🚀 Changeset Version Preview

10 package(s) bumped directly, 14 bumped as dependents.

🟩 Patch bumps

Package	Version	Reason
`@tanstack/angular-query-experimental`	5.105.0 → 5.105.1	Changeset
`@tanstack/eslint-plugin-query`	5.105.0 → 5.105.1	Changeset
`@tanstack/lit-query`	0.2.31 → 0.2.32	Changeset
`@tanstack/preact-query`	5.105.0 → 5.105.1	Changeset
`@tanstack/query-core`	5.105.0 → 5.105.1	Changeset
`@tanstack/query-persist-client-core`	5.105.0 → 5.105.1	Changeset
`@tanstack/react-query`	5.105.0 → 5.105.1	Changeset
`@tanstack/solid-query`	5.105.0 → 5.105.1	Changeset
`@tanstack/svelte-query`	6.3.6 → 6.3.7	Changeset
`@tanstack/vue-query`	5.105.0 → 5.105.1	Changeset
`@tanstack/preact-query-devtools`	5.105.0 → 5.105.1	Dependent
`@tanstack/preact-query-persist-client`	5.105.0 → 5.105.1	Dependent
`@tanstack/query-async-storage-persister`	5.105.0 → 5.105.1	Dependent
`@tanstack/query-broadcast-client-experimental`	5.105.0 → 5.105.1	Dependent
`@tanstack/query-devtools`	5.105.0 → 5.105.1	Dependent
`@tanstack/query-sync-storage-persister`	5.105.0 → 5.105.1	Dependent
`@tanstack/react-query-devtools`	5.105.0 → 5.105.1	Dependent
`@tanstack/react-query-next-experimental`	5.105.0 → 5.105.1	Dependent
`@tanstack/react-query-persist-client`	5.105.0 → 5.105.1	Dependent
`@tanstack/solid-query-devtools`	5.105.0 → 5.105.1	Dependent
`@tanstack/solid-query-persist-client`	5.105.0 → 5.105.1	Dependent
`@tanstack/svelte-query-devtools`	6.3.6 → 6.3.7	Dependent
`@tanstack/svelte-query-persist-client`	6.3.6 → 6.3.7	Dependent
`@tanstack/vue-query-devtools`	6.3.6 → 6.3.7	Dependent

coderabbitai · 2026-10-29T03:40:24Z

Caution

Review failed

The pull request is closed.

Walkthrough

Vite dependency ranges changed from ^8.3.1 to ^8.3.5 in the root package, integration packages, and example manifests. The workspace trust policy no longer excludes vite@6.4.1.

Changes: Vite dependency updates

Layer / File(s)	Summary
Vite dependency ranges and workspace policy `package.json`, `integrations/*-vite/package.json`, `examples/lit/.../package.json`, `examples/preact/.../package.json`, `examples/react/.../package.json`, `examples/solid/.../package.json`, `examples/svelte/.../package.json`, `examples/vue/.../package.json`, `pnpm-workspace.yaml`	The root, integration, and example manifests update Vite from `^8.3.1` to `^8.3.5`. The workspace configuration removes `vite@6.4.1` from `trustPolicyExclude`.

Priority: Not assessed

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Possibly related PRs

TanStack/query#12438: Adds Vue example manifests that this PR updates with the newer Vite range.
TanStack/query#12403: Adds Preact example manifests that this PR updates with the newer Vite range.
TanStack/query#12423: Adds Solid example manifests that this PR updates with the newer Vite range.

Suggested reviewers: lachlancollins

Merge Risk: Minimal · up to ea8dd

No concrete merge risk was established for the dependency updates.

Finishing Touches

🧪 Generate unit tests (beta)

Commit to this branch
Create a new PR

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

pkg-pr-new · 2026-10-29T03:42:51Z

More templates

@tanstack/angular-query-experimental

npm i https://pkg.pr.new/@tanstack/angular-query-experimental@12446

@tanstack/eslint-plugin-query

npm i https://pkg.pr.new/@tanstack/eslint-plugin-query@12446

@tanstack/lit-query

npm i https://pkg.pr.new/@tanstack/lit-query@12446

@tanstack/preact-query

npm i https://pkg.pr.new/@tanstack/preact-query@12446

@tanstack/preact-query-devtools

npm i https://pkg.pr.new/@tanstack/preact-query-devtools@12446

@tanstack/preact-query-persist-client

npm i https://pkg.pr.new/@tanstack/preact-query-persist-client@12446

@tanstack/query-async-storage-persister

npm i https://pkg.pr.new/@tanstack/query-async-storage-persister@12446

@tanstack/query-broadcast-client-experimental

npm i https://pkg.pr.new/@tanstack/query-broadcast-client-experimental@12446

@tanstack/query-core

npm i https://pkg.pr.new/@tanstack/query-core@12446

@tanstack/query-devtools

npm i https://pkg.pr.new/@tanstack/query-devtools@12446

@tanstack/query-persist-client-core

npm i https://pkg.pr.new/@tanstack/query-persist-client-core@12446

@tanstack/query-sync-storage-persister

npm i https://pkg.pr.new/@tanstack/query-sync-storage-persister@12446

@tanstack/react-query

npm i https://pkg.pr.new/@tanstack/react-query@12446

@tanstack/react-query-devtools

npm i https://pkg.pr.new/@tanstack/react-query-devtools@12446

@tanstack/react-query-next-experimental

npm i https://pkg.pr.new/@tanstack/react-query-next-experimental@12446

@tanstack/react-query-persist-client

npm i https://pkg.pr.new/@tanstack/react-query-persist-client@12446

@tanstack/solid-query

npm i https://pkg.pr.new/@tanstack/solid-query@12446

@tanstack/solid-query-devtools

npm i https://pkg.pr.new/@tanstack/solid-query-devtools@12446

@tanstack/solid-query-persist-client

npm i https://pkg.pr.new/@tanstack/solid-query-persist-client@12446

@tanstack/svelte-query

npm i https://pkg.pr.new/@tanstack/svelte-query@12446

@tanstack/svelte-query-devtools

npm i https://pkg.pr.new/@tanstack/svelte-query-devtools@12446

@tanstack/svelte-query-persist-client

npm i https://pkg.pr.new/@tanstack/svelte-query-persist-client@12446

@tanstack/vue-query

npm i https://pkg.pr.new/@tanstack/vue-query@12446

@tanstack/vue-query-devtools

npm i https://pkg.pr.new/@tanstack/vue-query-devtools@12446

commit: ea8dd7c

github-actions · 2026-10-29T03:44:04Z

size-limit report 📦

Path	Size
react full	11.74 KB (-0.08% 🔽)
react minimal	8.58 KB (-0.2% 🔽)

chore(deps): update 'vite' to '^8.3.5', deduplicate 'pnpm-lock.yaml' …

ea8dd7c

…and remove 'vite@6.4.1' from 'trustPolicyExclude'

sukvvon self-assigned this Oct 29, 2026

sukvvon merged commit 259de1d into main Oct 29, 2026
7 of 9 checks passed

sukvvon deleted the chore/deps-update-vite-and-dedupe branch October 29, 2026 03:48

Navigation Menu

Repository navigation

chore(deps): update 'vite' to '^8.3.5', deduplicate 'pnpm-lock.yaml' and remove 'vite@6.4.1' from 'trustPolicyExclude' - #12446

chore(deps): update 'vite' to '^8.3.5', deduplicate 'pnpm-lock.yaml' and remove 'vite@6.4.1' from 'trustPolicyExclude'#12446
sukvvon merged 1 commit into
mainfrom
chore/deps-update-vite-and-dedupe

sukvvon commented Oct 29, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

changeset-bot Bot commented Oct 29, 2026

Uh oh!

nx-cloud Bot commented Oct 29, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 29, 2026

Uh oh!

coderabbitai Bot commented Oct 29, 2026 •

edited

Loading

Review failed

Uh oh!

pkg-pr-new Bot commented Oct 29, 2026

Uh oh!

github-actions Bot commented Oct 29, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

sukvvon commented Oct 29, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🎯 Changes

✅ Checklist

🚀 Release Impact

Summary by CodeRabbit

Uh oh!

changeset-bot Bot commented Oct 29, 2026

⚠️ No Changeset found

Uh oh!

nx-cloud Bot commented Oct 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 29, 2026

🚀 Changeset Version Preview

🟩 Patch bumps

Uh oh!

coderabbitai Bot commented Oct 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review failed

Uh oh!

pkg-pr-new Bot commented Oct 29, 2026

Uh oh!

github-actions Bot commented Oct 29, 2026

size-limit report 📦

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

sukvvon commented Oct 29, 2026 •

edited by coderabbitai Bot

Loading

nx-cloud Bot commented Oct 29, 2026 •

edited

Loading

coderabbitai Bot commented Oct 29, 2026 •

edited

Loading