Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion example/webview_demo/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@
"@eslint/js": "^9.39.1",
"@types/react": "^19.2.7",
"@types/react-dom": "^19.2.3",
"@vitejs/plugin-react": "^5.1.1",
"@vitejs/plugin-react": "^6.0.0",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Plugin-react v6 requires Vite 8, project uses Vite 7

High Severity

@vitejs/plugin-react v6 dropped support for Vite 7 and below, requiring vite@^8.0.0 as a peer dependency. The project still specifies "vite": "^7.3.1", which is incompatible. This will cause a peer dependency conflict during npm install and the plugin will not function correctly at runtime since v6 relies on Vite 8's native Oxc-based React Refresh Transform. The vite dependency needs to be upgraded to ^8.0.0 alongside this change.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit a1de315. Configure here.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Lockfile not updated for major dependency bump

Medium Severity

The package.json updates @vitejs/plugin-react to ^6.0.0, but the package-lock.json still references ^5.1.1 (resolved to 5.2.0). This mismatch will cause npm ci to fail because the lockfile is out of sync with package.json. The lockfile needs to be regenerated to reflect the new major version.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit dfc265f. Configure here.

"eslint": "^9.39.1",
"eslint-plugin-react-hooks": "^7.0.1",
"eslint-plugin-react-refresh": "^0.5.0",
Expand Down
Loading