Skip to content

build(deps-dev): bump @vitejs/plugin-react from 5.2.0 to 6.0.2#110

Merged
haasonsaas merged 1 commit into
mainfrom
dependabot/npm_and_yarn/vitejs/plugin-react-6.0.2
Jun 11, 2026
Merged

build(deps-dev): bump @vitejs/plugin-react from 5.2.0 to 6.0.2#110
haasonsaas merged 1 commit into
mainfrom
dependabot/npm_and_yarn/vitejs/plugin-react-6.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 4, 2026

Copy link
Copy Markdown
Contributor

Bumps @vitejs/plugin-react from 5.2.0 to 6.0.2.

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.0.2

Allow all options in reactCompilerPreset (#1189)

This is a type only change. Only compilationMode and target options were available for reactCompilerPreset.

plugin-react@6.0.1

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

plugin-react@6.0.0

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:

 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})

For React compiler users, you can use reactCompilerPreset for easier setup with preconfigured filter to improve build performance:

 import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [

react({

 babel: {



   plugins: ['babel-plugin-react-compiler'],



</tr></table>

... (truncated)

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.0.2 (2026-05-14)

Allow all options in reactCompilerPreset (#1189)

This is a type only change. Only compilationMode and target options were available for reactCompilerPreset.

6.0.1 (2026-03-13)

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

6.0.0 (2026-03-12)

6.0.0-beta.0 (2026-03-03)

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:

 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})

For React compiler users, you can use reactCompilerPreset for easier setup with preconfigured filter to improve build performance:

 import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
</tr></table>

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update JavaScript code labels Jun 4, 2026
@socket-security

socket-security Bot commented Jun 4, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​vitejs/​plugin-react@​5.2.0 ⏵ 6.0.2100 +110010092100

View full report

haasonsaas added a commit that referenced this pull request Jun 11, 2026
…n sync (#114)

@emnapi/core, @emnapi/runtime, @emnapi/wasi-threads, @napi-rs/wasm-runtime,
and @tybys/wasm-util only entered the lockfile as transitive deps of the
optional wasm32-wasi platform bindings (@rolldown/binding-wasm32-wasi,
@tailwindcss/oxide-wasm32-wasi). Dependabot's lockfile regeneration drops
those entries, so every grouped bump since #105 landed with a lock missing
@emnapi/* and `npm ci` failed EUSAGE on PRs #110-#113.

Pinning them as direct devDependencies guarantees lock entries survive any
regeneration; the $-reference overrides collapse the bindings' exact pins
onto the root versions so a single entry satisfies the whole tree. The wasi
bindings are never installed on CI runners (linux-x64/darwin-arm64 use
native bindings), so the forced versions only affect lock resolution.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
@haasonsaas

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jun 11, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@haasonsaas

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jun 11, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@haasonsaas

Copy link
Copy Markdown
Collaborator

@dependabot recreate

Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) from 5.2.0 to 6.0.2.
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.2/packages/plugin-react)

---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/vitejs/plugin-react-6.0.2 branch from 1cd83b8 to 1e206f7 Compare June 11, 2026 22:39
@cursor

cursor Bot commented Jun 11, 2026

Copy link
Copy Markdown

PR Summary

Medium Risk
Major upgrade to the React/Vite build pipeline could affect dev HMR or production bundles even though config is unchanged; worth verifying npm run dev and npm run build after merge.

Overview
Bumps @vitejs/plugin-react from 5.2.0 to 6.0.2 in package.json and refreshes package-lock.json accordingly. There are no changes to electron.vite.config.ts or other app code—the renderer still uses the default react() plugin.

v6 is a major release aligned with Vite 8: React Fast Refresh no longer goes through Babel inside the plugin (Oxc/Vite handles it), so the lockfile drops several transitive dev deps (react-refresh, JSX Babel plugins, @types/babel__*, etc.). Optional peers for @rolldown/plugin-babel and babel-plugin-react-compiler only matter if you add custom Babel or React Compiler setup later.

Reviewed by Cursor Bugbot for commit 1e206f7. Bugbot is set up for automated code reviews on this repo. Configure here.

@haasonsaas haasonsaas merged commit 50b2809 into main Jun 11, 2026
6 checks passed
@haasonsaas haasonsaas deleted the dependabot/npm_and_yarn/vitejs/plugin-react-6.0.2 branch June 11, 2026 22:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update JavaScript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant