chore(deps): bump @vitejs/plugin-rsc and @holocron.so/vite in /docs

[dependabot]

Bumps @vitejs/plugin-rsc to 0.5.27 and updates ancestor dependency @holocron.so/vite. These dependencies need to be updated together.

Updates @vitejs/plugin-rsc from 0.5.21 to 0.5.27

Release notes

Sourced from @​vitejs/plugin-rsc's releases.

plugin-rsc@0.5.27

Please refer to CHANGELOG.md for details.

plugin-rsc@0.5.26

Please refer to CHANGELOG.md for details.

plugin-rsc@0.5.25

Please refer to CHANGELOG.md for details.

plugin-rsc@0.5.24

Please refer to CHANGELOG.md for details.

plugin-rsc@0.5.23

Please refer to CHANGELOG.md for details.

plugin-rsc@0.5.22

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​vitejs/plugin-rsc's changelog.

0.5.27 (2026-06-01)

Features

• use carets for rolldown versions (#1216) (3bd1f08)

Bug Fixes

• deps: update all non-major dependencies (#1218) (2b8df67)
• deps: update all non-major dependencies (#1227) (e38acca)
• rsc: handle export * re-exports in use client and use server modules (#1234) (dd94ec6)
• rsc: handle conflict names from export * in use client and use server modules (#1239) (d618f63)

Miscellaneous Chores

• deps: update dependency @​types/react to ^19.2.15 (#1236) (40dff34)

0.5.26 (2026-05-07)

Bug Fixes

• deps: update all non-major dependencies (#1201) (152e549)
• deps: update all non-major dependencies (#1209) (a4296ad)
• deps: update react 19.2.6 (#1211) (8fa9619)

Tests

• rsc: add starter-extra and enhance css tests (#1202) (bb42093)

0.5.25 (2026-04-27)

Bug Fixes

• deps: update all non-major dependencies (#1196) (323ccd7)
• rsc: fix server css hmr with cssLinkPrecedence: false (#1188) (f4647c4)
• rsc: include bundled server CSS when cssCodeSplit is false (#1192) (2845b9f)

Miscellaneous Chores

• deps: update vite 8.0.10 (#1198) (a7506e1)

Tests

• assert new minified error message on react canary (#1199) (cbac17c)

0.5.24 (2026-04-13)

Bug Fixes

• deps: update all non-major dependencies (#1184) (02cff2a)
• rsc: preserve * for generators (#1183) (0df3060)

0.5.23 (2026-04-08)

Bug Fixes

... (truncated)

Commits

• d8e0f4f release: plugin-rsc@0.5.27
• d618f63 fix(rsc): handle conflict names from export * in use client and `use serv...
• dd94ec6 fix(rsc): handle export * re-exports in use client and use server modul...
• 40dff34 chore(deps): update dependency @​types/react to ^19.2.15 (#1236)
• e38acca fix(deps): update all non-major dependencies (#1227)
• 3bd1f08 feat: use carets for rolldown versions (#1216)
• 2b8df67 fix(deps): update all non-major dependencies (#1218)
• 65d378f release: plugin-rsc@0.5.26
• 8fa9619 fix(deps): update react 19.2.6 (#1211)
• a4296ad fix(deps): update all non-major dependencies (#1209)
• Additional commits viewable in compare view

Updates @holocron.so/vite from 0.14.5 to 0.18.2

Release notes

Sourced from @​holocron.so/vite's releases.

@​holocron.so/vite@0.18.2

1. Fixed false broken link warnings for imported files outside pagesDir — when a markdown file outside pagesDir (e.g., a repo-root README.md) is imported into a page and contains relative links back to pages, those links are now correctly resolved to absolute slug paths instead of raw filesystem-relative paths.

   Previously all relative links in such imported files showed as broken even when the target page existed. For example, a README.md at the repo root imported via import Readme from '../../README.md' that contains [OpenAPI](https://github.com/remorses/holocron/tree/HEAD/vite/blob/HEAD/website/src/openapi.md) now resolves to /openapi instead of the unresolvable ../../website/src/openapi. Hash fragments and query strings are preserved.

@​holocron.so/vite@0.18.1

1. Restored motion as optional dependency — motion was accidentally removed in 0.18.0. Added it back so user projects that depend on it don't break on install.

@​holocron.so/vite@0.18.0

1. Build summary with actionable tips — after all individual warnings are logged, the build now prints a final summary:

   ▲ holocron found 3 invalid internal links across 2 pages.
   ▲ holocron 2 pages with MDX errors. Fix the syntax issues listed above.
   

   The broken links summary includes a link to the docs page explaining knownPaths.

2. HOLOCRON_TOKEN accepted as env var alias for HOLOCRON_KEY — the Vite plugin, deploy command, and AI chat auth now check both HOLOCRON_TOKEN and HOLOCRON_KEY (first defined wins). Useful when your CI already has a HOLOCRON_TOKEN secret.

3. Fixed OpenAPI renderer CJS crash in dev — render-openapi.tsx was incorrectly marked 'use client', pulling safe-mdx and its transitive chain into the client bundle. The format package (CJS-only) caused:

   The requested module "format/format.js" does not provide an export named "default"
   

   The fix removes the 'use client' directive so the OpenAPI renderer stays server-side.

4. Trimmed Prism syntax highlighting bundle (891 KB -> 471 KB) — removed ~170 obscure languages, keeping ~130 popular ones. If you need a removed language, open an issue.

5. Deduplicated acorn in RSC bundle (180 KB saved) — a resolve alias now forces all acorn imports to the ESM entry, eliminating the CJS+ESM duplication. RSC bundle: 3,998 KB -> 3,818 KB.

6. Removed dead dependencies — dropped @fastify/deepmerge, image-size, and motion from the package.

@​holocron.so/vite@0.17.1

1. Fixed OpenAPI double-framed code panels — when an operation defined multiple named request body or response examples, RequestExample and ResponseExample wrapped them in a CodeGroup inside a CodeCard, producing a double frame. Now they render as a single tabbed panel with each example as a named tab.

2. Fixed app entry CSS crash without the Vite plugin — importing @holocron.so/vite/app outside the holocron Vite plugin (e.g. inside a @cloudflare/vitest-pool-workers test running in workerd) crashed with Cannot find module './styles/globals.css'. The import now resolves from the package src/ directory which is stable from both src/ and dist/.

3. Hidden tab scrollbars and press feedback — the horizontal tab scroll container no longer shows a scrollbar on overflow, and tab buttons no longer flash a press/active highlight.

@​holocron.so/vite@0.17.0

1. Changelog tab generated from GitHub releases — add a tab with a changelog URL and Holocron fetches the repository's published releases at build time, rendering one page with a Mintlify-compatible <Update> entry per release (newest first, drafts skipped):

   {
     "tab": "Changelog",
     "changelog": "https://github.com/owner/repo"
   }

... (truncated)

Changelog

Sourced from @​holocron.so/vite's changelog.

0.18.2

1. Fixed false broken link warnings for imported files outside pagesDir — when a markdown file outside pagesDir (e.g., a repo-root README.md) is imported into a page and contains relative links back to pages, those links are now correctly resolved to absolute slug paths instead of raw filesystem-relative paths. Previously all relative links in such imported files showed as broken even when the target page existed.

   For example, a README.md at the repo root imported via import Readme from '../../README.md' that contains [OpenAPI](https://github.com/remorses/holocron/blob/main/vite/website/src/openapi.md) now resolves to /openapi instead of the unresolvable ../../website/src/openapi. Hash fragments and query strings are preserved through the conversion.

0.18.1

1. Restored motion as optional dependency — motion was accidentally removed in 0.18.0. Added it back as an optional dependency so user projects that import it don't break.

0.18.0

1. Build summary with actionable tips — after all individual warnings are logged, the build now prints a final summary at the end:

   ▲ holocron found 3 invalid internal links across 2 pages. Fix them or add paths to knownPaths in docs.json.
   ▲ holocron 2 pages with MDX errors. Fix the syntax issues in the pages listed above.
   

   The broken links summary includes a link to the docs page explaining knownPaths.

2. HOLOCRON_TOKEN accepted as env var alias for HOLOCRON_KEY — the Vite plugin, deploy command, and AI chat auth now check both HOLOCRON_TOKEN and HOLOCRON_KEY (first defined wins). Useful when your CI already has a HOLOCRON_TOKEN secret.

3. Fixed OpenAPI renderer CJS crash in dev — render-openapi.tsx was incorrectly marked 'use client', pulling safe-mdx and its transitive chain (remark-frontmatter -> micromark-extension-frontmatter -> fault -> format) into the client bundle. The format package (CJS-only, last updated 2013) caused:

   The requested module "format/format.js" does not provide an export named "default"
   

   The fix removes the 'use client' directive so the OpenAPI renderer stays server-side.

4. Trimmed Prism syntax highlighting bundle (891 KB -> 471 KB) — removed ~170 obscure languages (Agda, ABAP, Bro, GAP, etc.), keeping ~130 popular ones. If you need a removed language, open an issue.

5. Deduplicated acorn in RSC bundle (180 KB saved) — acorn ships both CJS and ESM entries. Some transitive deps use require("acorn") while others use ESM imports, causing both copies to end up in the bundle. A resolve alias now forces all acorn imports to the ESM entry. RSC bundle: 3,998 KB -> 3,818 KB.

6. Removed dead dependencies — dropped @fastify/deepmerge, image-size, and motion from the package. These were unused leftovers that added install weight.

0.17.1

1. Fixed OpenAPI double-framed code panels — when an operation defined multiple named request body or response examples, RequestExample and ResponseExample wrapped them in a CodeGroup inside a CodeCard, producing a double frame. Now they render as a single tabbed panel with each example as a named tab.

2. Fixed app entry CSS crash without the Vite plugin — importing @holocron.so/vite/app outside the holocron Vite plugin (e.g. inside a @cloudflare/vitest-pool-workers test) crashed with Cannot find module './styles/globals.css'. The import now resolves from the package src/ directory which is stable from both src/ and dist/.

3. Hidden tab scrollbars and press feedback — the horizontal tab scroll container no longer shows a scrollbar on overflow, and tab buttons no longer flash a press/active highlight.

0.17.0

1. Changelog tab generated from GitHub releases — add a tab with a changelog URL and Holocron fetches the repository's published releases at build time, rendering one page with a Mintlify-compatible <Update> entry per release (newest first, drafts skipped):

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.