#22 chore(deps): bump rollup and @crxjs/vite-plugin

[Anonymous]

Originally created by: dependabot[bot]

Bumps rollup to 2.80.0 and updates ancestor dependency @crxjs/vite-plugin. These dependencies need to be updated together.

Updates rollup from 2.79.2 to 2.80.0

Changelog

Sourced from rollup's changelog.

2.80.0

2026-02-22

Features

• Throw when the generated bundle contains paths that would leave the output directory (#6277](https://github.com/href="https://redirect.github.com/rollup/rollup/issues/6277">/issues/6277))

Pull Requests

• #6277](https://github.com/href="https://redirect.github.com/rollup/rollup/pull/6277">/issues/6277): Validate bundle stays within output dir (@​lukastaegert)

Commits

• d17ae15 2.80.0
• d6dee5e Validate bundle stays within output dir (#6277](https://github.com/href="https://redirect.github.com/rollup/rollup/issues/6277">/issues/6277))
• See full diff in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates @crxjs/vite-plugin from 2.0.0-beta.33 to 2.7.1

Release notes

Sourced from @​crxjs/vite-plugin's releases.

@​crxjs/vite-plugin@​2.3.0

Minor Changes

• ee17090: * adds support for main world content scripts declared from manifest
  • shows warning during development for detected main world scripts so that the dev is not surprised the hmr does not work for it
  • does not touch chrome.scripting.registerContentScripts scripts, as they already work

@​crxjs/vite-plugin@​2.2.1

Patch Changes

• 5ff5465: feat(vite-plugin): limit path string checking to literals

@​crxjs/vite-plugin@​2.2.0

Minor Changes

• 1b0ada4: feat: add support for root url content script match in firefox #1056](https://github.com/href="https://github.com/crxjs/chrome-extension-tools/tree/HEAD/packages/vite-plugin/issues/1056">/issues/1056)

@​crxjs/vite-plugin@​2.1.0

Minor Changes

• 637e12c: feat: include sourcemaps in web_accessible_resources
• 3e7a1b3: feat: allow query string in manifest html urls

@​crxjs/vite-plugin@​2.0.3

Patch Changes

• 96c942b: fix: usage of newer picocolor api when using old dependency #1038](https://github.com/href="https://github.com/crxjs/chrome-extension-tools/tree/HEAD/packages/vite-plugin/issues/1038">/issues/1038)
• 548fb58: Add optional_host_permissions to manifest schemas

@​crxjs/vite-plugin@​2.0.2

Patch Changes

• dcd88ee: fix: update repository url

@​crxjs/vite-plugin@​2.0.1

Patch Changes

• b7e41e0: beatiful terminal

@​crxjs/vite-plugin@​2.0.0

🎉 Vite support is officially out of beta! 🎉

Vite support has been around under the @beta npm tag since December 16, 2021, but we're thrilled to announce that it's officially out of beta with version 2.0.0 ! 🔥

After three years of beta use, from Vite 3 to Vite 6, the plugin has proven it's stability for Chrome extension development.

What's New?

... (truncated)

Changelog

Sourced from @​crxjs/vite-plugin's changelog.

2.7.1

Patch Changes

• efa9c63: Update direct dependency ranges for convert-source-map, debug, and fs-extra.
• 6efde9d: Filter Vite 8/Rolldown-only options before the dev file writer calls Rollup, removing Unknown input options: platform warnings.

2.7.0

Minor Changes

• 9f00943: Add dev HMR support for manifest-declared MAIN world content scripts.

Patch Changes

• a9cc89a: Remove unused vite-plugin dependencies and update selected dependency versions.

2.6.1

Patch Changes

• 2b88621: Coalesce file writer readiness waits so large dev-server graph updates do not repeatedly recompute the same dependency traversal. This also fixes late HMR readiness waits that could miss the shared ready event and delay content script updates.

2.6.0

Minor Changes

• 4f5d2ec: feat: add IIFE content script bundling

  Content scripts named with .iife.ts extension are automatically bundled as self-contained IIFE files with all dependencies inlined. This is useful for MAIN world content scripts used with chrome.scripting.executeScript or chrome.scripting.registerContentScripts.

Patch Changes

• 5316e9c: Allow chrome-extension:// and moz-extension:// origins in Vite dev-server CORS automatically. This keeps extension pages able to fetch dev-server files on Vite releases with the stricter localhost-only CORS default, including Vite 4.5.6, 5.4.12, and 6.0.9+, without requiring projects to configure server.cors.origin manually.
• 1aee9ad: fix: dynamic content scripts failing in build --watch mode
• 2f8bab5: Fix the dev-mode loading page so it waits for the requested extension HTML file, preserves the page URL query string, allows extension-origin

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​crxjs/vite-plugin since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name=""> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/fujiDevv/context-aware-browser-pet/network/alerts). </dependency>

[Anonymous]

Originally posted by: dependabot[bot]

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.