Repository navigation
build(deps-dev): bump vite from 8.2.2 to 8.2.4 - #2036
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
|
All alerts resolved. Learn more about Socket for GitHub. This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. Ignoring alerts on:
|
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
Looks good, straightforward devDependency version bump. Reviewed package.json's vite bump (^8.2.2 to ^8.2.4) and the corresponding yarn.lock regeneration for vite's transitive dependencies (@ oxc-project/types, @ rolldown/binding-* platform packages) — versions and checksums are updated consistently, no other files or application code are touched.
Extended reasoning...
Two-file diff: package.json changes one devDependency version string, yarn.lock is the mechanically regenerated lockfile reflecting that bump across vite's transitive native binding packages. No application source, config logic, auth, or security-sensitive code paths are touched. Change is small, self-contained, and matches standard dependabot patch-bump patterns, with no outstanding review objections in the timeline.
|
coverage: 87.341%. remained the same — dependabot/npm_and_yarn/vite-8.2.4 into main |
|
@SocketSecurity ignore-all |
d2539b5 to
6f17737
Compare
41ff2c4 to
5afc659
Compare
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.2.2 to 8.2.4. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v8.2.4/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.2.4/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 8.2.4 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
5afc659 to
54d567e
Compare
This branch has not been deployed
2 participants
Bumps vite from 8.2.2 to 8.2.4.
Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
Commits
eb3137drelease: v8.2.43f52d26release: v8.2.345c0e33fix(server): store ids tosafeModulePathsrather than URLs (#23656)b6c6d2ffix(server): checkfs.servefor?vite-wasm-instance(#23655)61b2171fix(deps): update launch-editor to v2.14.2 (#23654)1203c62fix(html): filename passed to transformIndexHtml should not include queries (...