chore(deps): bump vite from 2.8.6 to 2.9.16

[dependabot[bot]]

Bumps vite from 2.8.6 to 2.9.16.

Changelog

Sourced from vite's changelog.

2.9.16 (2023-05-26)

• fix: port #13348 to v2, fs.deny with leading double slash (#13350) (7d8100a), closes #13348 #13350

2.9.15 (2022-08-12)

• fix: backport make resolveConfig() concurrent safe (#9224) (#9229) (7f01a00), closes #9224 #9229
• fix: fs serve only edit pathname (fixes #9148) (#9654) (521bb39), closes #9148 #9654
• fix(ssr-manifest): check name before saving to ssrManifest (#9595) (e361a80), closes #9595
• chore: narrow down rollup version (#9651) (ed8d6a7), closes #9651

2.9.14 (2022-07-08)

• fix: backport #8979, re-encode url to prevent fs.allow bypass (fixes #8498) (#8990) (adb61c5), closes #8498 #8990
• fix: reverts #8471 (da77dee), closes #8471
• fix(css): backport #7746 (d4d89b9), closes #7746
• fix(css): backport #8936 (#8977) (84ec02a), closes #8936 #8977

2.9.13 (2022-06-27)

• fix: backport #8804, /@fs/ dir traversal with escaped chars (fixes #8498) (#8805) (e109d64), closes #8498 #8805
• fix(wasm): support decoding data URL in Node < v16 (#8668) (1afc1c2), closes #8668

2.9.12 (2022-06-10)

• fix: backport outdated optimized dep removed from module graph (#8534) (c0d6c60), closes #8534

2.9.11 (2022-06-10)

• fix: backport respect server.headers in static middlewares (#8481) (ab7dc1c), closes #8481
• fix(dev): avoid FOUC when swapping out link tag (fix #7973) (#8495) (01fa807), closes #7973 #8495

2.9.10 (2022-06-06)

• feat: backport treat Astro file scripts as TS (#8151) (9fdd0a3), closes #8151
• feat: new hook configurePreviewServer (#7658) (#8437) (7b972bc), closes #7658 #8437
• fix: backport remove empty chunk css imports when using esnext (#8345) (9fbc1a9), closes #8345
• fix: EPERM error on Windows when processing dependencies (#8235) (dfe4307), closes #8235

... (truncated)

Commits

• ea814d7 release: v2.9.16
• 7d8100a fix: port #13348 to v2, fs.deny with leading double slash (#13350)
• 3a5543d release: v2.9.15
• 521bb39 fix: fs serve only edit pathname (fixes #9148) (#9654)
• ed8d6a7 chore: narrow down rollup version (#9651)
• e361a80 fix(ssr-manifest): check name before saving to ssrManifest (#9595)
• 7f01a00 fix: backport make resolveConfig() concurrent safe (#9224) (#9229)
• 0d13630 release: v2.9.14
• adb61c5 fix: backport #8979, re-encode url to prevent fs.allow bypass (fixes #8498) (...
• 84ec02a fix(css): backport #8936 (#8977)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/metonym/format-fuse.js/network/alerts).