Skip to content

v1.1.2 - Security & dependency updates

Choose a tag to compare

View all tags
@janosrusiczki janosrusiczki released this 17 Jun 10:34
· 19 commits to master since this release
v1.1.2
688e46b

Changed

  • Migrated package management and CI from Yarn to npm (replaced yarn.lock with package-lock.json)

Security

  • Updated Vite to v8 to resolve dev-server advisories (arbitrary file read via WebSocket; path traversal in optimized deps .map handling)
  • Updated Vitest to v4.1 to resolve the Vitest UI server arbitrary file read/execute advisory (GHSA-5xrq-8626-4rwp)

Dependencies

  • @eslint/js 9.39.4 → 10.0.1
  • @vitest/coverage-v8 4.0.18 → 4.1.9
  • jsdom 28.1.0 → 29.1.1
  • vite 7.3.1 → 8.0.16
  • vitest 4.0.18 → 4.1.9

Full Changelog: v1.1.1...v1.1.2

Assets 2
Loading