chore(deps-dev): bump @vitejs/plugin-react from 5.1.4 to 6.0.1 by dependabot[bot] · Pull Request #123 · chrisreddington/flight-school

dependabot · 2026-03-21T22:03:43Z

Bumps @vitejs/plugin-react from 5.1.4 to 6.0.1.

Release notes

Sourced from @vitejs/plugin-react's releases.

plugin-react@6.0.1

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

plugin-react@6.0.0

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:
 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})
For React compiler users, you can use reactCompilerPreset for easier setup with preconfigured filter to improve build performance:
 import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [

react({

 babel: {



   plugins: ['babel-plugin-react-compiler'],



 },


}),


react(),
babel({

 presets: [reactCompilerPreset()]



</tr></table>

... (truncated)

Changelog

Sourced from @vitejs/plugin-react's changelog.

6.0.1 (2026-03-13)

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

6.0.0 (2026-03-12)

6.0.0-beta.0 (2026-03-03)

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:
 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})
For React compiler users, you can use reactCompilerPreset for easier setup with preconfigured filter to improve build performance:
 import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [

react({

 babel: {



   plugins: ['babel-plugin-react-compiler'],



 },



</tr></table>

... (truncated)

Commits

1e94c06 release: plugin-react@6.0.1
77c00c0 feat(plugin-react): expand @rolldown/plugin-babel peer dep range (#1146)
dcc9012 release: plugin-react@6.0.0
3a17886 docs: add a link to the Oxlint rule for component exports alongside the ESLin...
f812135 fix(deps): update all non-major dependencies (#1140)
a0329a0 docs(react): clarify react compiler preset filter (#1137)
704e0d3 release: plugin-react@6.0.0-beta.0
ac16acc feat(react)!: remove babel (#1123)
f01b30c fix(deps): update all non-major dependencies (#1127)
b1014bd chore(react): add changelog for #1124
Additional commits viewable in compare view

github-actions · 2026-03-26T11:58:29Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 1e90eb2.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@oxc-project/types

0.122.0

Unknown

npm/@rolldown/binding-android-arm64

1.0.0-rc.12

Unknown

npm/@rolldown/binding-darwin-arm64

1.0.0-rc.12

Unknown

npm/@rolldown/binding-darwin-x64

1.0.0-rc.12

Unknown

npm/@rolldown/binding-freebsd-x64

1.0.0-rc.12

Unknown

npm/@rolldown/binding-linux-arm-gnueabihf

1.0.0-rc.12

Unknown

npm/@rolldown/binding-linux-arm64-gnu

1.0.0-rc.12

Unknown

npm/@rolldown/binding-linux-arm64-musl

1.0.0-rc.12

Unknown

npm/@rolldown/binding-linux-ppc64-gnu

1.0.0-rc.12

Unknown

npm/@rolldown/binding-linux-s390x-gnu

1.0.0-rc.12

Unknown

npm/@rolldown/binding-linux-x64-gnu

1.0.0-rc.12

Unknown

npm/@rolldown/binding-linux-x64-musl

1.0.0-rc.12

Unknown

npm/@rolldown/binding-openharmony-arm64

1.0.0-rc.12

Unknown

npm/@rolldown/binding-wasm32-wasi

1.0.0-rc.12

Unknown

npm/@rolldown/binding-win32-arm64-msvc

1.0.0-rc.12

Unknown

npm/@rolldown/binding-win32-x64-msvc

1.0.0-rc.12

Unknown

npm/@rolldown/pluginutils

1.0.0-rc.7

Unknown

npm/@rolldown/pluginutils

1.0.0-rc.12

Unknown

npm/@vitejs/plugin-react

6.0.1

🟢 7.3

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 5/20 approved changesets -- score normalized to 2
Maintained	🟢 10	30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Token-Permissions	🟢 7	detected GitHub workflow tokens with excessive permissions
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 7	dependency not pinned by hash detected -- score normalized to 7
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
Security-Policy	🟢 10	security policy file detected
SAST	🟢 9	SAST tool is not run on all commits -- score normalized to 9

npm/lightningcss

1.32.0

Unknown

npm/lightningcss-android-arm64

1.32.0

Unknown

npm/lightningcss-darwin-arm64

1.32.0

Unknown

npm/lightningcss-darwin-x64

1.32.0

Unknown

npm/lightningcss-freebsd-x64

1.32.0

Unknown

npm/lightningcss-linux-arm-gnueabihf

1.32.0

Unknown

npm/lightningcss-linux-arm64-gnu

1.32.0

Unknown

npm/lightningcss-linux-arm64-musl

1.32.0

Unknown

npm/lightningcss-linux-x64-gnu

1.32.0

Unknown

npm/lightningcss-linux-x64-musl

1.32.0

Unknown

npm/lightningcss-win32-arm64-msvc

1.32.0

Unknown

npm/lightningcss-win32-x64-msvc

1.32.0

Unknown

npm/postcss

8.5.8

🟢 4.5

Details

Check	Score	Reason
Maintained	🟢 9	10 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 9
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	⚠️ 1	Found 5/30 approved changesets -- score normalized to 1
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 10	all dependencies are pinned
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/rolldown

1.0.0-rc.12

Unknown

npm/vite

8.0.5

🟢 6.3

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Code-Review	🟢 5	Found 12/21 approved changesets -- score normalized to 5
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Token-Permissions	🟢 5	detected GitHub workflow tokens with excessive permissions
License	🟢 10	license file detected
Binary-Artifacts	🟢 5	binaries present in source code
Pinned-Dependencies	🟢 6	dependency not pinned by hash detected -- score normalized to 6
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST	🟢 4	SAST tool is not run on all commits -- score normalized to 4

Scanned Files

package-lock.json

Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) from 5.1.4 to 6.0.1. - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.1/packages/plugin-react) --- updated-dependencies: - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies javascript Pull requests that update javascript code labels Mar 21, 2026

dependabot bot force-pushed the dependabot/npm_and_yarn/vitejs/plugin-react-6.0.1 branch from e0e09c8 to 0635eba Compare March 26, 2026 11:58

dependabot bot force-pushed the dependabot/npm_and_yarn/vitejs/plugin-react-6.0.1 branch 2 times, most recently from e581a78 to 00fe9c3 Compare April 4, 2026 22:05

dependabot bot force-pushed the dependabot/npm_and_yarn/vitejs/plugin-react-6.0.1 branch from 00fe9c3 to 1e90eb2 Compare April 6, 2026 23:42

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump @vitejs/plugin-react from 5.1.4 to 6.0.1#123

chore(deps-dev): bump @vitejs/plugin-react from 5.1.4 to 6.0.1#123
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/vitejs/plugin-react-6.0.1

dependabot bot commented on behalf of github Mar 21, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Mar 26, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

plugin-react@6.0.1

Expand @rolldown/plugin-babel peer dep range (#1146)

plugin-react@6.0.0

Remove Babel Related Features (#1123)

6.0.1 (2026-03-13)

Expand @rolldown/plugin-babel peer dep range (#1146)

6.0.0 (2026-03-12)

6.0.0-beta.0 (2026-03-03)

Remove Babel Related Features (#1123)

Uh oh!

github-actions bot commented Mar 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

Snapshot Warnings

OpenSSF Scorecard

Scanned Files

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Mar 21, 2026 •

edited

Loading

Expand `@rolldown/plugin-babel` peer dep range (#1146)

Expand `@rolldown/plugin-babel` peer dep range (#1146)

github-actions bot commented Mar 26, 2026 •

edited

Loading