chore(deps): tighten bundler peer/dependency declarations

.changeset/dependency-hygiene.md

@@ -0,0 +1,17 @@
+---
+"@dotenv-run/vite": patch
+"@dotenv-run/rollup": patch
+"@dotenv-run/esbuild": patch
+---
+
+Dependency hygiene across the bundler integrations:
+
+- `@dotenv-run/vite`: `vite` is now a `peerDependency` (+ `devDependency`) instead
+  of a hard runtime `dependency`. A bundler plugin should never bundle its own
+  copy of the bundler — the previous setup risked duplicate Vite instances and
+  version conflicts with the host project. The plugin only imports the `Plugin`
+  type from Vite, which the consumer always provides.
+- `@dotenv-run/rollup`: widen the `rollup` peer range to `^3.0.0 || ^4.0.0` so
+  Rollup 4 consumers are supported.
+- `@dotenv-run/esbuild`: align the `@dotenv-run/core` range to `^1.3.7` for
+  consistency with every other package (was `~1.3.7`).

packages/esbuild/package.json

@@ -26,7 +26,7 @@
   "author": "Chihab Otmani <chihab@gmail.com>",
   "license": "ISC",
   "dependencies": {
-    "@dotenv-run/core": "workspace:~1.3.7"
+    "@dotenv-run/core": "workspace:^1.3.7"
   },
   "peerDependencies": {
     "esbuild": ">=0.21.0"

packages/rollup/package.json

@@ -26,7 +26,7 @@
     "@rollup/plugin-replace": "^5.0.7"
   },
   "peerDependencies": {
-    "rollup": "^3.0.0"
+    "rollup": "^3.0.0 || ^4.0.0"
   },
   "devDependencies": {
     "@types/node": "^22.12.0",

packages/vite/package.json

@@ -26,11 +26,14 @@
   "dependencies": {
     "@dotenv-run/core": "workspace:^1.3.7",
     "@rollup/plugin-replace": "^5.0.7",
-    "lodash-es": "^4.17.21",
-    "vite": "^6.2.0"
+    "lodash-es": "^4.17.21"
+  },
+  "peerDependencies": {
+    "vite": "^5.0.0 || ^6.0.0 || ^7.0.0"
   },
   "devDependencies": {
     "@types/lodash-es": "^4.17.12",
-    "@types/node": "^22.12.0"
+    "@types/node": "^22.12.0",
+    "vite": "^6.2.0"
   }
 }