Skip to content

fix(openapi-viewer): pin vite-plugin-node-polyfills 0.23.0 and revert vue bump [no-ticket]#56

Merged
aymericcousaert merged 2 commits into
masterfrom
fix-vite-plugin-node-polyfills-hoist
May 27, 2026
Merged

fix(openapi-viewer): pin vite-plugin-node-polyfills 0.23.0 and revert vue bump [no-ticket]#56
aymericcousaert merged 2 commits into
masterfrom
fix-vite-plugin-node-polyfills-hoist

Conversation

@aymericcousaert
Copy link
Copy Markdown
Contributor

Summary

Follow-up fix to PR #55 which broke the Docker build.

  • Pin vite-plugin-node-polyfills to exact 0.23.0 via root overrides (0.23.1 is published as deprecated/broken — caused Rollup to fail resolving vite-plugin-node-polyfills/shims/global from ofetch)
  • Revert ui vue constraint from ^3.5.35 back to ^3.5.13 — bumping to 3.5.35 caused npm to install a nested ui/node_modules/vue@3.5.35 alongside the hoisted node_modules/vue@3.5.22 (peer-deduped from vuetify ecosystem), triggering vue-tsc type conflicts (e.g. Property 'paths' does not exist on type 'never')

Verification

  • npm -w ui run build passes locally
  • trivy fs --severity HIGH,CRITICAL reports 0 CRITICAL
  • npm run lint passes

Test plan

  • CI green

…eprecated as broken)

Regenerate lockfile from scratch to avoid hoisting issues and remove all HIGH/CRITICAL vulns.
@aymericcousaert aymericcousaert merged commit 80c5051 into master May 27, 2026
3 checks passed
@github-actions github-actions Bot added the fix label May 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant