Skip to content

chore(deps): bump vite #7811

Merged
yhabib merged 1 commit intomainfrom
chore/deps
Apr 8, 2026
Merged

chore(deps): bump vite #7811
yhabib merged 1 commit intomainfrom
chore/deps

Conversation

@yhabib
Copy link
Copy Markdown
Contributor

@yhabib yhabib commented Apr 7, 2026

Motivation

# npm audit report

vite  <=6.4.1
Severity: high
Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling - https://github.com/advisories/GHSA-4w7w-66w2-5vf9
Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket - https://github.com/advisories/GHSA-p9ff-h696-f583
fix available via `npm audit fix`
node_modules/vite

1 high severity vulnerability

To address all issues, run:
  npm audit fix

Changes

  • Ran npm audit fix

Tests

  • CI should be green.

Todos

  • Accessibility (a11y) – any impact?
  • Changelog – is it needed?

@yhabib yhabib requested a review from a team as a code owner April 7, 2026 09:24
@yhabib yhabib enabled auto-merge April 7, 2026 09:24
@yhabib yhabib added this pull request to the merge queue Apr 8, 2026
Merged via the queue into main with commit 6ffb0f7 Apr 8, 2026
33 checks passed
@yhabib yhabib deleted the chore/deps branch April 8, 2026 09:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants