Skip to content

Conversation

@pharret31
Copy link
Contributor

No description provided.

@pharret31 pharret31 self-assigned this Dec 24, 2025
@pharret31 pharret31 added dependencies Pull requests that update a dependency file skip-cache 26_1 labels Dec 24, 2025
@pharret31 pharret31 marked this pull request as ready for review December 24, 2025 14:03
Copilot AI review requested due to automatic review settings December 24, 2025 14:03
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR addresses security vulnerabilities in Vite by updating to patched versions. The changes add a pnpm override for Vite 6.x versions and update a direct dependency in the bundlers test package from Vite 5.4.19 to 5.4.21.

Key changes:

  • Adds pnpm override to force Vite 6.2.7 to upgrade to 6.4.1
  • Updates e2e/bundlers package to use Vite 5.4.21 instead of 5.4.19
  • Updates pnpm-lock.yaml with new version resolutions and dependency changes

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File Description
package.json Adds pnpm override for vite@6.2.7 to force upgrade to ^6.4.1
e2e/bundlers/package.json Updates direct Vite dependency from 5.4.19 to 5.4.21
pnpm-lock.yaml Updates lockfile with new Vite version resolutions (6.2.7→6.4.1, 5.4.19→5.4.21), dependency snapshots, and package metadata
Files not reviewed (1)
  • pnpm-lock.yaml: Language not supported

Copilot AI review requested due to automatic review settings December 24, 2025 14:09
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 2 out of 3 changed files in this pull request and generated 2 comments.

Files not reviewed (1)
  • pnpm-lock.yaml: Language not supported

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@pharret31 pharret31 merged commit ef05ef0 into DevExpress:26_1 Dec 24, 2025
99 checks passed
@pharret31 pharret31 deleted the 26_1_3005-tribe-duty-sprint-13-252-vite branch December 24, 2025 14:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

26_1 dependencies Pull requests that update a dependency file skip-cache

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants