We published three security advisories affecting the dev server.
Only apps using --host are affected.
Update now to the patched versions:
- Vite 8.0.5 / 7.3.2 / 6.4.2
- Vite+ 0.1.16
Links to each vulnerability report below.
Posts by sapphi_red
Announcing Vite+ Alpha.
Now open source.
To make JavaScript developers more productive than ever before.
A single binary that:
◆ Unifies your frontend toolchain
◆ Manages your runtime & pkg manager
◆ Caching & monorepo support
Works with every framework and meta framework in the Vite ecosystem.
I'd be happy to help. I'll try to spend some time fixing bugs and reviewing PRs if that would be helpful.
⚡️ Vite 8.0 is here!
The most significant architectural change since Vite 2.
⏬ Powered by @rolldown.rs bringing faster production builds and more consistency
🛤️ New features such as tsconfig paths and emitDecoratorMetadata support
vite.dev/blog/announc...
Wondering how Node-compatible runtimes handle vulns in Node. IIRC they use JS code forked from Node, which means they'd have the same vulnerabilities if the vuln exists in the JS side. Does that mean that there's a window where they're vulnerable to 0-day exploits whenever one is discovered?
The State of JS 2025 results are out!
🏆 Most Adopted Tech → Vitest
🏆 Highest Satisfaction → Vite (98%) & Vitest (97%)
🏆 Highest Interest → Vitest (83%) & Rolldown (80%)
But that's not all!
A thread 🧵
Success message and celebration reaction for sveltekit passing vite-ecosystem-ci with vite-8 beta for the first time
It took a while, lots of debugging and fixes in rolldown, vite-plugin-svelte and sveltekit, but today it happened. For the first time, sveltekit tests in vite-ecosystem-ci for vite-8 beta passed.
github.com/vitejs/vite-...
Thanks to everyone who helped getting there especially @sapphi.red
Rolldown 1.0 RC is here 🎉
🔒 Stable API: No breaking changes planned before 1.0
⚡ 10-30x faster than Rollup while staying compatible
🧩 Multiple chunking algorithm improvements
📦 3,400+ commits since beta: 749 features, 682 fixes, 109 perf optimizations
Working on a page that you can search vite plugins. I'm planning to allow plugins to add metadata for that page via a field in package.json. I wonder if it's a good idea to use a generic name like `compatiblePackages`.
registry.vite.dev/guide/extend...
Introducing the Astro 6.0 Beta.
- Redesigned dev server: run against the same runtime you deploy to
- First-class Cloudflare Workers support with workerd
- Stable Content Security Policy and Live Collections
It's never been a beta time to try Astro 👀
VoidZero infographic. First row including the new logos of the projects, the new "The JavaScript Tooling Company" slogan and the logo. Second row is showing what frameworks are vite-powered or have Vite support. Last row includes Vitest including Jest compat, tech supported by vite, 4.1bn+ total NPM downloads, Rolldown powering Vite and the Oxc stack.
New Year. New Look. Same Mission.
Make JavaScript developers more productive than ever before
Happy new year 🎉
Our December 2025 recap is out!
⚡ Oxlint type-aware linting alpha
🎨 Oxfmt with @vuejs.org, Markdown & JSON support (+ more languages)
📦 @rolldown.rs chunking improvements
🔬 @vitest.dev OpenTelemetry & import breakdowns
🗺️ 2026 Oxc roadmap
👀 and more
voidzero.dev/posts/whats-...
Announcing Oxlint Type-Aware Linting Alpha 🎁
Just a few months after our technical preview, type-aware linting reaches the alpha milestone!
✨ Type-aware rules can now be configured
🙈 Inline comments to disable rules work for type-aware rules too
✔ Auto fixes for type-aware rules are now available
What's new in ViteLand?
Our November 2025 recap is out!
✨ @vite.dev 8 Beta
👉 Oxfmt alpha
💻 @vitest.dev caching and imports breakdown
⚓️ Oxc becoming even faster!?
🎙 Updates from the Community
👀 and more
voidzero.dev/posts/whats-...
⚡️ The first Vite 8.0 beta is here!
- Powered by Rolldown, bringing significantly faster production builds and more consistency
- New features such as tsconfig paths or emitDecoratorMetadata support
- Bumping browser targets aligned with Baseline Widely Available
Read more in our announcement post!
Announcing Oxfmt Alpha! 🚀
We’re excited to announce the alpha release of Oxfmt, our Rust-powered formatter.
We designed Oxfmt to be easily adoptable, especially for existing Prettier users
More below and in our announcement post voidzero.dev/posts/announ...
Title: Improved require(esm) support Subtext: chunk.mjs defines the return value when used via require by setting it via export `as “module.exports"` Image showing that index.js requires chunk.mjs and logs result: const User = require('./chunk.mjs'); console.log('User:', User); The chunk exports a user class by default, but also via "export { User as 'module.exports' }". --- Screenshot of the a previous Rolldown version showing the console.log that does not log the class but an object with default and 'mode.exports' key. Subtitle: OLD: Use literal exports, no transformation Screenshot of the latest Rolldown version correctly logging that User is a class. Subtitle: NEW: Detection & correct runtime result Three bullet points at the end: * More predictable behavior * Aligns with Node.js * Only relevant for require(esm)
Improved require(esm) interop in @rolldown.rs.
Since the last beta, the bundler supports the special `as "module.exports"` keyword and aligns with the @nodejs.org behavior.
Another step towards better interoperability between CJS and ESM, now with bundler support!
🚨 PSA: Breaking Change in Oxc v0.98.0
We've updated exposed function names to have a uniform naming pattern and to always expose both, synchronous and asynchronous functions.
Async: `<name>()` -> `minify()`
Sync: `<name>Sync()` -> `minifySync()`
More below and in github.com/oxc-project/...
The Vite docs' releases page explaining the current supported Vite versions
The Vite docs now has clearer supported version ranges. Make sure you're up-to-date to receive important fixes and security patches! vite.dev/releases#sup...
Vite 7.2 is out! ⚡️
🗃️ `build.license` option
🔌 proxy + HTTP2 support
💜 and more features and fixes
Don't forget to check the complete changelog at github.com/vitejs/vite/...
What's new in ViteLand?
Our October 2025 recap is out
✨ Vite+
📣 Series A announcement
👉 @vite.dev 7.2 beta
💻 @vitest.dev 4 with stable Browser Mode
⚓️ Oxlint JS Plugins & Oxfmt pre-alpha
🎙 Updates from the Community
👀 and more
voidzero.dev/posts/whats-...
Builtin license file generation! Easily host all the licenses that your site depends on. Been a while since I added a feature.
Vite 7.2.0-beta.1 is out ✋
Beta docs at main.vitejs.dev
🗃️ `build.license` option
🔌 proxy + HTTP2 support
💜 and more feats and fixes
Help us test the beta and give us feedback!
Full changelog linked below.
github.com/vitejs/vite/...
ViteConf 2025 was a blast!
If you didn't catch up on all the highlights yet, then our recap post is what you need.
◆ Vite+ 👀
◆ How Oxlint supports JS plugins
◆ A @vite.dev DevTools sneak peek
◆ State of @vitest.dev
◆ Using @rolldown.rs & Oxlint at scale
◆ ...and more
voidzero.dev/posts/whats-...
The Unified Toolchain for the Web
We are thrilled to announce Vite+: A unified, Rust-powered toolchain and drop-in upgrade for @vite_js.
Read the full vision and learn about our sustainable licensing model (free for individuals, OSS & small businesses).
voidzero.dev/posts/announ...
"Let's hear it for the UN of Javascript!
Vite: The Documentary is finally here.
If you missed the premiere, it's OK!!! Here's the link so you can watch it again, and again and again.
youtu.be/bmWQqAKLgT4 "
"I'm super happy for them and I think they should take over the world."
Hear the full story of how @vitejs did just that.
Vite: The Documentary premieres tomorrow ⚡️
7pm CET | 12pm CST on our YT channel!
We are readyyyyyy!!
Join the live stream right now via viteconf.amsterdam