Skip to content

chore: bump vite in generate-client example fixtures - #3051

Merged
mallachari merged 1 commit into
mainfrom
chore/bump-vite-e2e-fixtures
Aug 25, 2026
Merged

chore: bump vite in generate-client example fixtures#3051
mallachari merged 1 commit into
mainfrom
chore/bump-vite-e2e-fixtures

Conversation

@mallachari

@mallachari mallachari commented Aug 24, 2026

Copy link
Copy Markdown
Contributor

What/Why/How?

Bumps vite from ^5.4.0 to ^6.4.3 in all 10 tests/e2e/generate-client/examples/* fixtures to resolve the open Dependabot alerts.
Vite 5.x has no backported fix (the vulnerable range is <= 6.4.2), so this is a minimal major bump to the first fixed line.

Reference

CVE-2026-39365, CVE-2026-53571, CVE-2026-53632

Testing

  • npm install resolves vite 6.4.3
  • generate and build pass

Screenshots (optional)

Check yourself

  • This PR follows the contributing guide
  • All new/updated code is covered by tests
  • Core code changed? - Tested with other Redocly products (internal contributions only)
  • New package installed? - Tested in different environments (browser/node)
  • Documentation update has been considered

Security

  • The security impact of the change has been considered
  • Code follows company security practices and guidelines

Note

Low Risk
Dependency-only bump in test/example fixtures; no production or core CLI code changes. Vite 6 is a major version, so e2e example builds could still break if configs are incompatible.

Overview
Bumps vite from ^5.4.0 to ^6.4.3 in all ten tests/e2e/generate-client/examples fixtures.

This is a security-driven major bump (Vite 5 has no backported fix for the reported CVEs). No application or generator code is changed.

Reviewed by Cursor Bugbot for commit dca99d9. Bugbot is set up for automated code reviews on this repo. Configure here.

@mallachari
mallachari requested a review from a team as a code owner August 24, 2026 13:49
@changeset-bot

changeset-bot Bot commented Aug 24, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: dca99d9

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@mallachari mallachari changed the title chore: bump vite to in generate-client example fixtures chore: bump vite in generate-client example fixtures Aug 24, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Performance Benchmark (Lower is Faster)

CLI Version Bundle Lint Check Config
cli-latest ▓ 1.00x (Fastest) ▓ 1.00x ± 0.01 ▓ 1.02x ± 0.01
cli-next ▓ 1.03x ± 0.01 ▓ 1.00x (Fastest) ▓ 1.00x (Fastest)

@github-actions

Copy link
Copy Markdown
Contributor

Coverage Report

Status Category Percentage Covered / Total
🔵 Lines 77.73% (🎯 77%) 11763 / 15132
🔵 Statements 77.8% (🎯 77%) 12588 / 16179
🔵 Functions 82.42% (🎯 81%) 2401 / 2913
🔵 Branches 71.19% (🎯 71%) 8646 / 12144
File CoverageNo changed files found.
Generated in workflow #11455 for commit dca99d9 by the Vitest Coverage Report Action

@mallachari
mallachari merged commit be0e159 into main Aug 25, 2026
50 of 52 checks passed
@mallachari
mallachari deleted the chore/bump-vite-e2e-fixtures branch August 25, 2026 07:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants