[pull] main from vitejs:main

.github/workflows/ci.yml

@@ -39,7 +39,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           # Assume PRs are less than 50 commits
           fetch-depth: 50
@@ -77,7 +77,7 @@ jobs:
     name: "Build&Test: node-${{ matrix.node_version }}, ${{ matrix.os }}"
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
 
@@ -152,7 +152,7 @@ jobs:
     runs-on: ubuntu-latest
     name: "Lint: node-24, ubuntu-latest"
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
 

.github/workflows/copilot-setup-steps.yml

@@ -14,7 +14,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
 

.github/workflows/issue-close-require.yml

@@ -13,7 +13,7 @@ jobs:
       issues: write # for actions/issues-helper to update issues
       pull-requests: write # for actions/issues-helper to update PRs
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
 

.github/workflows/issue-labeled.yml

@@ -13,7 +13,7 @@ jobs:
       issues: write # for actions/issues-helper to update issues
       pull-requests: write # for actions/issues-helper to update PRs
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
 

.github/workflows/issue-template-check.yml

@@ -17,7 +17,7 @@ jobs:
       template_type: ${{ steps.detect.outputs.template_type }}
       skip: ${{ steps.detect.outputs.skip }}
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
 

.github/workflows/lock-closed-issues.yml

@@ -13,7 +13,7 @@ jobs:
     if: github.repository == 'vitejs/vite'
     runs-on: ubuntu-slim
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
 

.github/workflows/preview-release.yml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
 

.github/workflows/publish.yml

@@ -18,7 +18,7 @@ jobs:
     environment: Release
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
 

.github/workflows/pull-request-template-check.yml

@@ -20,7 +20,7 @@ jobs:
     outputs:
       agent_output: ${{ steps.agent.outputs.agent_output }}
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
 

.github/workflows/release-tag.yml

@@ -16,7 +16,7 @@ jobs:
     permissions:
       contents: write # for yyx990803/release-tag to create a release tag
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
 

.github/workflows/zizmor.yml

@@ -22,7 +22,7 @@ jobs:
     permissions:
       security-events: write # Required for upload-sarif (used by zizmor-action) to upload SARIF files.
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
 

docs/guide/static-deploy-github-pages.yaml

@@ -33,7 +33,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Set up Node
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
         with:

packages/plugin-legacy/package.json

@@ -43,7 +43,7 @@
     "browserslist": "^4.28.6",
     "browserslist-to-esbuild": "^2.1.1",
     "core-js": "^3.49.0",
-    "magic-string": "^0.30.21",
+    "magic-string": "^1.0.0",
     "regenerator-runtime": "^0.14.1",
     "systemjs": "^6.15.1"
   },

packages/vite/package.json

@@ -107,7 +107,7 @@
     "host-validation-middleware": "^0.1.4",
     "http-proxy-3": "^1.23.3",
     "launch-editor-middleware": "^2.14.1",
-    "magic-string": "^0.30.21",
+    "magic-string": "^1.0.0",
     "mlly": "^1.8.2",
     "mrmime": "^2.0.1",
     "nanoid": "^5.1.16",

packages/vite/src/node/__tests__/fixtures/config/native-compat/mts-config/package.json

@@ -0,0 +1,5 @@
+{
+  "name": "@vitejs/test-native-compat-mts",
+  "type": "commonjs",
+  "private": true
+}

packages/vite/src/node/__tests__/fixtures/config/native-compat/mts-config/vite.config.mts

@@ -0,0 +1,3 @@
+import { defineConfig } from 'vite'
+
+export default defineConfig({})

packages/vite/src/node/nativeConfigCompat.ts

@@ -217,7 +217,13 @@ export function createNativeConfigCompatPlugin(
   return {
     name: 'vite:native-config-compat-check',
     transform: {
-      filter: { id: /\.[cm]?[jt]sx?$/ },
+      filter: {
+        id: {
+          include: /\.[cm]?[jt]sx?$/,
+          // exclude rolldown runtime
+          exclude: /^\0/,
+        },
+      },
       async handler(code, id) {
         const isESM =
           typeof process.versions.deno === 'string' || isFilePathESM(id)

packages/vite/src/node/utils.ts

@@ -430,6 +430,13 @@ export function isFilePathESM(
     return true
   } else if (/\.c[jt]s$/.test(filePath)) {
     return false
+  } else if (filePath.startsWith('\0')) {
+    // treat virtual modules as ESM
+    return true
+  } else if (!path.isAbsolute(filePath)) {
+    // should not rely on `process.cwd()` as that would depend on
+    // the environment and make it unreproducible
+    return false
   } else {
     // check package.json for type: "module"
     try {
@@ -453,6 +460,15 @@ export function isFilePathFormatExplicit(
   if (/\.[mc][jt]s$/.test(filePath)) {
     return true
   }
+  if (filePath.startsWith('\0')) {
+    // treat virtual modules as ESM
+    return true
+  }
+  if (!path.isAbsolute(filePath)) {
+    // should not rely on `process.cwd()` as that would depend on
+    // the environment and make it unreproducible
+    return false
+  }
   try {
     const pkg = findNearestPackageData(path.dirname(filePath), packageCache)
     return pkg?.data.type === 'module' || pkg?.data.type === 'commonjs'

playground/css-sourcemap/package.json

@@ -12,7 +12,7 @@
   "devDependencies": {
     "less": "^4.7.0",
     "lightningcss": "^1.33.0",
-    "magic-string": "^0.30.21",
+    "magic-string": "^1.0.0",
     "sass": "^1.101.0",
     "stylus": "^0.64.0",
     "sugarss": "^5.0.1"

playground/js-sourcemap/package.json

@@ -15,7 +15,7 @@
     "@vitejs/test-dep-malicious-sourcemap": "file:dep-malicious-sourcemap",
     "@vitejs/test-dep-optimized-malicious": "file:dep-optimized-malicious",
     "@vitejs/test-importee-pkg": "file:importee-pkg",
-    "magic-string": "^0.30.21",
+    "magic-string": "^1.0.0",
     "oxc-parser": "^0.139.0"
   }
 }