Skip to content

Update Vite security dependency#35

Merged
PrimeBuild-pc merged 1 commit into
mainfrom
chore/update-vite-security
Jun 18, 2026
Merged

Update Vite security dependency#35
PrimeBuild-pc merged 1 commit into
mainfrom
chore/update-vite-security

Conversation

@PrimeBuild-pc

Copy link
Copy Markdown
Owner

Summary

  • update Vite from 8.0.7 to 8.0.16, the smallest release outside the affected 8.0.0–8.0.15 range
  • refresh only Vite's required lockfile dependency graph

Security impact

This clears the Vite advisories reported by npm audit, including the Windows UNC-path credential disclosure and server.fs.deny bypass advisories.

Validation

  • npm install --save-dev vite@8.0.16
  • npm audit — Vite advisories cleared; one unrelated moderate DOMPurify advisory remains
  • npm run build — passed with Vite 8.0.16
  • npm run check — passed

No test or lint scripts are configured.

@PrimeBuild-pc PrimeBuild-pc marked this pull request as ready for review June 18, 2026 12:16
@PrimeBuild-pc PrimeBuild-pc merged commit 23f86c9 into main Jun 18, 2026
5 checks passed
@PrimeBuild-pc PrimeBuild-pc deleted the chore/update-vite-security branch June 18, 2026 12:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant