Commit fbfc08a
authored
chore: update dependencies (#122)
* chore: bump vite to ^8.1.2 to fix CVEs
Fixes three advisories, all resolved by upgrading vite (audit now clean):
- GHSA-fx2h-pf6j-xcff (high): vite server.fs.deny bypass on Windows alternate paths
- GHSA-v6wh-96g9-6wx3 (moderate): launch-editor NTLMv2 hash disclosure via UNC paths
- GHSA-g7r4-m6w7-qqqr (low): esbuild arbitrary file read via dev server (transitive; deduped to 0.28.1)
Refs #95
* chore: update minor/patch dependencies
Bumps (all minor/patch, within existing major):
- @sveltejs/kit 2.61.1 -> 2.69.0
- @sveltejs/adapter-node 5.5.4 -> 5.5.7
- @sveltejs/vite-plugin-svelte -> latest
- svelte 5.55.9 -> 5.56.4
- svelte-check 4.4.8 -> 4.7.1
- eslint 10.4.0 -> 10.6.0
- eslint-plugin-svelte 3.17.1 -> 3.20.0
- typescript-eslint 8.59.4 -> 8.62.1
- @playwright/test 1.60.0 -> 1.61.1
- prettier 3.8.3 -> 3.9.4
- prettier-plugin-svelte 4.0.1 -> 4.1.1
- @iconify/svelte 5.2.1 -> 5.2.2
- @privacybydesign/yivi-web 1.0.1 -> 1.0.2
- sass 1.100.0 -> 1.101.0
- globals 17.6.0 -> 17.7.0
- tsx 4.22.3 -> 4.22.4
- vitest 4.1.7 -> 4.1.9
Reformat src/lib/global.scss for prettier 3.9 SCSS map style change.
Build, svelte-check, eslint, and vitest (94) all pass; audit clean.
Refs #95
* chore: bump @types/node 25 -> 26 (major)
Evaluated individually per the tracking issue. @types/node 26 is a
dev-only typings bump; no API-breaking impact on this codebase.
svelte-check (typecheck), build, and vitest (94) all pass on Node 22.
Refs #95
---------
Co-authored-by: dobby-yivi-agent[bot] <275734547+dobby-yivi-agent[bot]@users.noreply.github.com>1 parent 259c5ff commit fbfc08a
3 files changed
Lines changed: 415 additions & 380 deletions
0 commit comments