-
Notifications
You must be signed in to change notification settings - Fork 660
Package.json: update vulnerable vite versions #32040
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Package.json: update vulnerable vite versions #32040
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR addresses security vulnerabilities in Vite by updating to patched versions. The changes add a pnpm override for Vite 6.x versions and update a direct dependency in the bundlers test package from Vite 5.4.19 to 5.4.21.
Key changes:
- Adds pnpm override to force Vite 6.2.7 to upgrade to 6.4.1
- Updates e2e/bundlers package to use Vite 5.4.21 instead of 5.4.19
- Updates pnpm-lock.yaml with new version resolutions and dependency changes
Reviewed changes
Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| package.json | Adds pnpm override for vite@6.2.7 to force upgrade to ^6.4.1 |
| e2e/bundlers/package.json | Updates direct Vite dependency from 5.4.19 to 5.4.21 |
| pnpm-lock.yaml | Updates lockfile with new Vite version resolutions (6.2.7→6.4.1, 5.4.19→5.4.21), dependency snapshots, and package metadata |
Files not reviewed (1)
- pnpm-lock.yaml: Language not supported
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
Copilot reviewed 2 out of 3 changed files in this pull request and generated 2 comments.
Files not reviewed (1)
- pnpm-lock.yaml: Language not supported
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.
No description provided.