build(deps-dev): Bump vite from 6.4.3 to 8.1.5

[dependabot]

Bumps vite from 6.4.3 to 8.1.5.

Release notes

Sourced from vite's releases.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.0.16

Please refer to CHANGELOG.md for details.

v8.0.15

Please refer to CHANGELOG.md for details.

v8.0.14

Please refer to CHANGELOG.md for details.

v8.0.13

Please refer to CHANGELOG.md for details.

v8.0.12

Please refer to CHANGELOG.md for details.

v8.0.11

Please refer to CHANGELOG.md for details.

v8.0.10

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.1.5 (2026-07-16)

Bug Fixes

• bundled-dev: avoid duplicated buildEnd (#22931) (8100320)
• client: overlay error message format align rolldown (#22869) (5a72b87)
• deps: update all non-major dependencies (#22921) (fef682d)
• deps: update rolldown-related dependencies (#22922) (3c345e4)
• module-runner: don't crash stack-trace source mapping when globalThis.Buffer is absent (#22945) (f8b38e3)
• optimizer: respect importer module format for dynamic import interop with CJS deps (#22951) (6c08c39)
• ssr: scope switch-case declarations to the switch, not the function (#22893) (b59a73f)

Documentation

• build: fix incorrect @default for build.cssMinify (#22948) (c88c236)
• build: fix incorrect @default for build.lib.formats (#22911) (369ed60)

Tests

• avoid scanner scanning all files under __tests__ (#22912) (c961cae)

8.1.4 (2026-07-09)

Features

• legacy: prefer oxc as minifier (fix #21973) (#22468) (ab5dafa)

Bug Fixes

• build: add workaround for building on stackblitz (#22840) (575c32c)
• build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)
• deps: update all non-major dependencies (#22865) (d4295a9)
• deps: update rolldown-related dependencies (#22866) (7cf07e4)
• html: avoid backtracking in import-only check (#22848) (b5868c0)
• optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)
• ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)
• strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

• fix incorrect @default for server.cors (#22859) (70435b2)

Miscellaneous Chores

• deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

Code Refactoring

• eliminate ineffectiveDynamicImport warn (#22876) (ea22fb3)

Tests

... (truncated)

Commits

• 5e7fe12 release: v8.1.5
• 6c08c39 fix(optimizer): respect importer module format for dynamic import interop wit...
• 5a72b87 fix(client): overlay error message format align rolldown (#22869)
• f8b38e3 fix(module-runner): don't crash stack-trace source mapping when globalThis.Bu...
• 8100320 fix(bundled-dev): avoid duplicated buildEnd (#22931)
• c88c236 docs(build): fix incorrect @default for build.cssMinify (#22948)
• b59a73f fix(ssr): scope switch-case declarations to the switch, not the function (#22...
• fef682d fix(deps): update all non-major dependencies (#22921)
• 3c345e4 fix(deps): update rolldown-related dependencies (#22922)
• 369ed60 docs(build): fix incorrect @default for build.lib.formats (#22911)
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[github-actions]

⏱️ Benchmark (median ms, informational — not a gate)

Plan	Stage	Current	Baseline	Δ
BALANCED	compile	29.87	27.69	+8%
BALANCED	parse	4.95	6.52	-24%
BALANCED	resolve	16.23	6.20	+162% ⚠️
BALANCED	toScene	3.47	8.02	-57%
BALANCED	renderSvg	1.66	2.99	-44%
BALANCED	lint	41.94	7.20	+482% ⚠️
BALANCED	describe	13.80	5.73	+141% ⚠️
BALANCED	circulation	0.00	—	—
BALANCED	occupancy	0.72	—	—
ROOM_HEAVY	compile	10.34	17.15	-40%
ROOM_HEAVY	parse	5.32	7.67	-31%
ROOM_HEAVY	resolve	1.36	4.46	-70%
ROOM_HEAVY	toScene	0.67	0.70	-4%
ROOM_HEAVY	renderSvg	1.57	2.78	-43%
ROOM_HEAVY	lint	118.95	2.39	+4871% ⚠️
ROOM_HEAVY	describe	47.33	28.73	+65% ⚠️
ROOM_HEAVY	circulation	0.00	—	—
ROOM_HEAVY	occupancy	0.03	—	—
OPENING_HEAVY	compile	44.23	51.90	-15%
OPENING_HEAVY	parse	4.04	6.60	-39%
OPENING_HEAVY	resolve	34.07	10.19	+234% ⚠️
OPENING_HEAVY	toScene	3.05	22.04	-86%
OPENING_HEAVY	renderSvg	1.75	2.86	-39%
OPENING_HEAVY	lint	3.08	3.98	-22%
OPENING_HEAVY	describe	0.77	0.67	+16%
OPENING_HEAVY	circulation	0.00	—	—
OPENING_HEAVY	occupancy	0.02	—	—
STUDIO	compile	1.27	—	—
STUDIO	parse	0.45	—	—
STUDIO	resolve	0.24	—	—
STUDIO	toScene	0.28	—	—
STUDIO	renderSvg	0.16	—	—
STUDIO	lint	4.88	—	—
STUDIO	describe	1.60	—	—
STUDIO	circulation	1.44	—	—
STUDIO	occupancy	0.10	—	—
MUSEUM	compile	4.12	—	—
MUSEUM	parse	0.42	—	—
MUSEUM	resolve	0.52	—	—
MUSEUM	toScene	0.91	—	—
MUSEUM	renderSvg	0.27	—	—
MUSEUM	lint	53.77	—	—
MUSEUM	describe	39.73	—	—
MUSEUM	circulation	39.07	—	—
MUSEUM	occupancy	10.24	—	—

⚠️ One or more stages regressed past the warning threshold. Timings are runner-dependent — confirm locally before acting.

[ChanMeng666]

Held deliberately rather than merged or closed, and here is the state it is waiting on.

vite is not directly declared here — it arrives through vitest (2.1.9, which wants vite ^5.0.0) and through vitepress@1.6.4 (which pins vite ^5.4.14), and today those two share one hoisted vite@5.4.21. Bumping vite on its own is therefore not a clean move: the same question is really "do we take the vitest 5 major", which is a three-major jump (2.1.9 → 5.0.0) across 203 test files and four workspaces, and which would split that shared tree rather than unify it.

That decision is recorded in docs/backlog.md 3.1 with four written triggers. The measurement behind it: after the transitive bumps landed in b84e336, npm audit --omit=dev reports 0 vulnerabilities — every remaining advisory is dev-only, and nightly.yml's dependency job runs exactly that command. Neither outstanding critical ships.

This PR will be revisited with that decision rather than ahead of it.