dependabot[bot]
39e187832a
build(deps): bump the npm_and_yarn group across 3 directories with 2 updates ( #229 )
...
Bumps the npm_and_yarn group with 1 update in the /apps/docs directory:
[koa](https://github.com/koajs/koa ).
Bumps the npm_and_yarn group with 1 update in the /apps/www directory:
[vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ).
Bumps the npm_and_yarn group with 1 update in the /packages/www
directory:
[vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ).
Updates `koa` from 2.15.4 to 2.16.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/koajs/koa/releases ">koa's
releases</a>.</em></p>
<blockquote>
<h2>v2.16.1</h2>
<p>fix: don't render redirect values in anchor ref</p>
<h2>2.16.0</h2>
<p>This is a backported release to fix core underlying issue with
<code>HEAD</code> requests when using
<code>http2.createSecureServer</code>. See discussion at <a
href="https://redirect.github.com/koajs/koa/pull/1593 ">koajs/koa#1593</a>
and <a
href="https://redirect.github.com/koajs/koa/issues/1547 ">koajs/koa#1547</a>.</p>
<ul>
<li>fix missing cleanup, if response socket is no longer writeable
(issue 1547) (<a
href="https://redirect.github.com/koajs/koa/pull/1593 ">koajs/koa#1593</a>)
399cb6b0dd2104224c0ef0ce8e92f84e4f7faf42</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ba148220692ff6c3fb803d51d034afeb84d890b8https://github.com/koajs/koa/compare/2.15.4...v2.16.1 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `vite` from 5.4.16 to 6.0.14
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases ">vite's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.14</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.14/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.13</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.13/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.12</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.12/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.11</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.11/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.10</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.10/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.9</h2>
<p>This version contains a breaking change due to security fixes. See <a
href="https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6 ">https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6 </a>
for more details.</p>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.9/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.8</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.8/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.7</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.7/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.6</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.6/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.5</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.5/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.4</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.4/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.3</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.3/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.2</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.2/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@6.0.2</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@6.0.2/packages/plugin-legacy/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>create-vite@6.0.1</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/create-vite@6.0.1/packages/create-vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.1</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.1/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/v6.0.14/packages/vite/CHANGELOG.md ">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted -->6.0.14 (2025-04-03)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782 ">#19782</a>,
fs check with svg and relative paths (<a
href="48ee91df38https://redirect.github.com/vitejs/vite/issues/19782 ">#19782</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.0.13 (2025-03-31)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: fs check in transform middleware (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19761 ">#19761</a>)
(<a
href="1487f393f3https://redirect.github.com/vitejs/vite/issues/19761 ">#19761</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.0.12 (2025-03-24)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: fs raw query with query separators (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19702 ">#19702</a>)
(<a
href="92ca12dc79https://redirect.github.com/vitejs/vite/issues/19702 ">#19702</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.0.11 (2025-01-21)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: <code>preview.allowedHosts</code> with specific values was not
respected (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19246 ">#19246</a>)
(<a
href="aeb3ec84a2https://redirect.github.com/vitejs/vite/issues/19246 ">#19246</a></li>
<li>fix: allow CORS from loopback addresses by default (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19249 ">#19249</a>)
(<a
href="3d03899737https://redirect.github.com/vitejs/vite/issues/19249 ">#19249</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.0.10 (2025-01-20)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: try parse <code>server.origin</code> URL (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19241 ">#19241</a>)
(<a
href="2495022420https://redirect.github.com/vitejs/vite/issues/19241 ">#19241</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.0.9 (2025-01-20)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix!: check host header to prevent DNS rebinding attacks and
introduce <code>server.allowedHosts</code> (<a
href="bd896fb5f3b09572acc9029dcd6d77https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19193 ">#19193</a>)
(<a
href="3bd55bcb7ehttps://redirect.github.com/vitejs/vite/issues/19193 ">#19193</a></li>
<li>fix: build time display 7m 60s (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19108 ">#19108</a>)
(<a
href="cf0d2c8e23https://redirect.github.com/vitejs/vite/issues/19108 ">#19108</a></li>
<li>fix: don't resolve URL starting with double slash (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19059 ">#19059</a>)
(<a
href="35942cde11https://redirect.github.com/vitejs/vite/issues/19059 ">#19059</a></li>
<li>fix: ensure <code>server.close()</code> only called once (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19204 ">#19204</a>)
(<a
href="db81c2dadahttps://redirect.github.com/vitejs/vite/issues/19204 ">#19204</a></li>
<li>fix: resolve.conditions in ResolvedConfig was
<code>defaultServerConditions</code> (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19174 ">#19174</a>)
(<a
href="ad75c56dcehttps://redirect.github.com/vitejs/vite/issues/19174 ">#19174</a></li>
<li>fix: tree shake stringified JSON imports (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19189 ">#19189</a>)
(<a
href="f2aed62d0bhttps://redirect.github.com/vitejs/vite/issues/19189 ">#19189</a></li>
<li>fix: use shared sigterm callback (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19203 ">#19203</a>)
(<a
href="47039f4643https://redirect.github.com/vitejs/vite/issues/19203 ">#19203</a></li>
<li>fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19098 ">#19098</a>)
(<a
href="8639538e64https://redirect.github.com/vitejs/vite/issues/19098 ">#19098</a></li>
<li>fix(optimizer): use correct default install state path for yarn PnP
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19119 ">#19119</a>)
(<a
href="e690d8bb1ehttps://redirect.github.com/vitejs/vite/issues/19119 ">#19119</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f678baacaf48ee91df38https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782 ">#19782</a>,
fs check with svg and relative paths</li>
<li><a
href="0eaadcf9521487f393f3https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19761 ">#19761</a>)</li>
<li><a
href="9d981f9d3892ca12dc79https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19702 ">#19702</a>)</li>
<li><a
href="a0ed4057c93d03899737https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19249 ">#19249</a>)</li>
<li><a
href="aeb3ec84a2https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19246 ">#19246</a>)</li>
<li><a
href="9654348258https://github.com/vitejs/vite/commits/v6.0.14/packages/vite ">compare
view</a></li>
</ul>
</details>
<br />
Updates `vite` from 5.4.16 to 6.0.14
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases ">vite's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.14</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.14/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.13</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.13/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.12</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.12/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.11</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.11/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.10</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.10/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.9</h2>
<p>This version contains a breaking change due to security fixes. See <a
href="https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6 ">https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6 </a>
for more details.</p>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.9/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.8</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.8/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.7</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.7/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.6</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.6/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.5</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.5/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.4</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.4/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.3</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.3/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.2</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.2/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@6.0.2</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@6.0.2/packages/plugin-legacy/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>create-vite@6.0.1</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/create-vite@6.0.1/packages/create-vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.0.1</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.0.1/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/v6.0.14/packages/vite/CHANGELOG.md ">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted -->6.0.14 (2025-04-03)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782 ">#19782</a>,
fs check with svg and relative paths (<a
href="48ee91df38https://redirect.github.com/vitejs/vite/issues/19782 ">#19782</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.0.13 (2025-03-31)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: fs check in transform middleware (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19761 ">#19761</a>)
(<a
href="1487f393f3https://redirect.github.com/vitejs/vite/issues/19761 ">#19761</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.0.12 (2025-03-24)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: fs raw query with query separators (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19702 ">#19702</a>)
(<a
href="92ca12dc79https://redirect.github.com/vitejs/vite/issues/19702 ">#19702</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.0.11 (2025-01-21)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: <code>preview.allowedHosts</code> with specific values was not
respected (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19246 ">#19246</a>)
(<a
href="aeb3ec84a2https://redirect.github.com/vitejs/vite/issues/19246 ">#19246</a></li>
<li>fix: allow CORS from loopback addresses by default (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19249 ">#19249</a>)
(<a
href="3d03899737https://redirect.github.com/vitejs/vite/issues/19249 ">#19249</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.0.10 (2025-01-20)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: try parse <code>server.origin</code> URL (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19241 ">#19241</a>)
(<a
href="2495022420https://redirect.github.com/vitejs/vite/issues/19241 ">#19241</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.0.9 (2025-01-20)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix!: check host header to prevent DNS rebinding attacks and
introduce <code>server.allowedHosts</code> (<a
href="bd896fb5f3b09572acc9029dcd6d77https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19193 ">#19193</a>)
(<a
href="3bd55bcb7ehttps://redirect.github.com/vitejs/vite/issues/19193 ">#19193</a></li>
<li>fix: build time display 7m 60s (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19108 ">#19108</a>)
(<a
href="cf0d2c8e23https://redirect.github.com/vitejs/vite/issues/19108 ">#19108</a></li>
<li>fix: don't resolve URL starting with double slash (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19059 ">#19059</a>)
(<a
href="35942cde11https://redirect.github.com/vitejs/vite/issues/19059 ">#19059</a></li>
<li>fix: ensure <code>server.close()</code> only called once (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19204 ">#19204</a>)
(<a
href="db81c2dadahttps://redirect.github.com/vitejs/vite/issues/19204 ">#19204</a></li>
<li>fix: resolve.conditions in ResolvedConfig was
<code>defaultServerConditions</code> (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19174 ">#19174</a>)
(<a
href="ad75c56dcehttps://redirect.github.com/vitejs/vite/issues/19174 ">#19174</a></li>
<li>fix: tree shake stringified JSON imports (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19189 ">#19189</a>)
(<a
href="f2aed62d0bhttps://redirect.github.com/vitejs/vite/issues/19189 ">#19189</a></li>
<li>fix: use shared sigterm callback (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19203 ">#19203</a>)
(<a
href="47039f4643https://redirect.github.com/vitejs/vite/issues/19203 ">#19203</a></li>
<li>fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19098 ">#19098</a>)
(<a
href="8639538e64https://redirect.github.com/vitejs/vite/issues/19098 ">#19098</a></li>
<li>fix(optimizer): use correct default install state path for yarn PnP
(<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19119 ">#19119</a>)
(<a
href="e690d8bb1ehttps://redirect.github.com/vitejs/vite/issues/19119 ">#19119</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f678baacaf48ee91df38https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782 ">#19782</a>,
fs check with svg and relative paths</li>
<li><a
href="0eaadcf9521487f393f3https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19761 ">#19761</a>)</li>
<li><a
href="9d981f9d3892ca12dc79https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19702 ">#19702</a>)</li>
<li><a
href="a0ed4057c93d03899737https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19249 ">#19249</a>)</li>
<li><a
href="aeb3ec84a2https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19246 ">#19246</a>)</li>
<li><a
href="9654348258https://github.com/vitejs/vite/commits/v6.0.14/packages/vite ">compare
view</a></li>
</ul>
</details>
<br />
<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>
| Dependency Name | Ignore Conditions |
| --- | --- |
| vite | [< 5.5, > 5.4.16] |
</details>
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/nestrilabs/nestri/network/alerts ).
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Wanjohi <elviswanjohi47@gmail.com >
2025-04-12 13:03:10 +03:00
dependabot[bot]
18b14a4261
build(deps): bump the npm_and_yarn group across 3 directories with 1 update ( #224 )
...
Bumps the npm_and_yarn group with 1 update in the /apps/docs directory:
[vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ).
Bumps the npm_and_yarn group with 1 update in the /apps/www directory:
[vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ).
Bumps the npm_and_yarn group with 1 update in the /packages/www
directory:
[vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ).
Updates `vite` from 6.2.3 to 6.2.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases ">vite's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.5</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.2.5/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.2.4</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.2.4/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/v6.2.5/packages/vite/CHANGELOG.md ">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted -->6.2.5 (2025-04-03)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782 ">#19782</a>,
fs check with svg and relative paths (<a
href="fdb196e9f8https://redirect.github.com/vitejs/vite/issues/19782 ">#19782</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.2.4 (2025-03-31)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: fs check in transform middleware (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19761 ">#19761</a>)
(<a
href="7a4fabab6ahttps://redirect.github.com/vitejs/vite/issues/19761 ">#19761</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c176acf70afdb196e9f8https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782 ">#19782</a>,
fs check with svg and relative paths</li>
<li><a
href="037f8010757a4fabab6ahttps://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19761 ">#19761</a>)</li>
<li>See full diff in <a
href="https://github.com/vitejs/vite/commits/v6.2.5/packages/vite ">compare
view</a></li>
</ul>
</details>
<br />
Updates `vite` from 5.4.12 to 5.4.16
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases ">vite's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.5</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.2.5/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.2.4</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.2.4/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/v6.2.5/packages/vite/CHANGELOG.md ">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted -->6.2.5 (2025-04-03)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782 ">#19782</a>,
fs check with svg and relative paths (<a
href="fdb196e9f8https://redirect.github.com/vitejs/vite/issues/19782 ">#19782</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.2.4 (2025-03-31)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: fs check in transform middleware (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19761 ">#19761</a>)
(<a
href="7a4fabab6ahttps://redirect.github.com/vitejs/vite/issues/19761 ">#19761</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c176acf70afdb196e9f8https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782 ">#19782</a>,
fs check with svg and relative paths</li>
<li><a
href="037f8010757a4fabab6ahttps://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19761 ">#19761</a>)</li>
<li>See full diff in <a
href="https://github.com/vitejs/vite/commits/v6.2.5/packages/vite ">compare
view</a></li>
</ul>
</details>
<br />
Updates `vite` from 5.4.12 to 5.4.16
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases ">vite's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.5</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.2.5/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v6.2.4</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v6.2.4/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/v6.2.5/packages/vite/CHANGELOG.md ">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted -->6.2.5 (2025-04-03)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782 ">#19782</a>,
fs check with svg and relative paths (<a
href="fdb196e9f8https://redirect.github.com/vitejs/vite/issues/19782 ">#19782</a></li>
</ul>
<h2><!-- raw HTML omitted -->6.2.4 (2025-03-31)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: fs check in transform middleware (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19761 ">#19761</a>)
(<a
href="7a4fabab6ahttps://redirect.github.com/vitejs/vite/issues/19761 ">#19761</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c176acf70afdb196e9f8https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782 ">#19782</a>,
fs check with svg and relative paths</li>
<li><a
href="037f8010757a4fabab6ahttps://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19761 ">#19761</a>)</li>
<li>See full diff in <a
href="https://github.com/vitejs/vite/commits/v6.2.5/packages/vite ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/nestrilabs/nestri/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-03 18:50:19 +03:00
dependabot[bot]
1d68ec71b8
build(deps): bump the npm_and_yarn group across 2 directories with 3 updates ( #192 )
...
Bumps the npm_and_yarn group with 2 updates in the /apps/docs directory:
[@nuxt/vite-builder](https://github.com/nuxt/nuxt/tree/HEAD/packages/vite )
and [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt ).
Bumps the npm_and_yarn group with 1 update in the /apps/www directory:
[vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ).
Updates `@nuxt/vite-builder` from 3.13.2 to 3.15.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nuxt/nuxt/releases "><code>@nuxt/vite-builder</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v3.15.4</h2>
<blockquote>
<p>3.15.4 is the next patch release.</p>
</blockquote>
<h2>✅ Upgrading</h2>
<p>As usual, our recommendation for upgrading is to run:</p>
<pre lang="sh"><code>npx nuxi@latest upgrade --force
</code></pre>
<p>This will refresh your lockfile as well, and ensures that you pull in
updates from other dependencies that Nuxt relies on, particularly in the
unjs ecosystem.</p>
<h2>👉 Changelog</h2>
<p><a
href="https://github.com/nuxt/nuxt/compare/v3.15.3...v3.15.4 ">compare
changes</a></p>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>nuxt:</strong> Improve error logging when parsing with
<code>acorn</code> (<a
href="https://redirect.github.com/nuxt/nuxt/pull/30754 ">#30754</a>)</li>
<li><strong>nuxt:</strong> Clear island uid before saving into the
payload (<a
href="https://redirect.github.com/nuxt/nuxt/pull/30767 ">#30767</a>)</li>
<li><strong>kit:</strong> Load <code>@nuxt/schema</code> from
<code>nuxt</code> package dir (<a
href="https://redirect.github.com/nuxt/nuxt/pull/30774 ">#30774</a>)</li>
<li><strong>nuxt:</strong> Allow restarting nuxt on paths outside
<code>srcDir</code> (<a
href="https://redirect.github.com/nuxt/nuxt/pull/30771 ">#30771</a>)</li>
<li><strong>nuxt:</strong> Don't warn about calling
<code>useRoute</code> in SFC setup (<a
href="https://redirect.github.com/nuxt/nuxt/pull/30788 ">#30788</a>)</li>
<li><strong>webpack:</strong> Disallow cross-site requests in no-cors
mode (<a
href="https://redirect.github.com/nuxt/nuxt/pull/30757 ">#30757</a>)</li>
<li><strong>vite:</strong> Restore <code>externality</code> for dev
server externals (<a
href="https://redirect.github.com/nuxt/nuxt/pull/30802 ">#30802</a>)</li>
</ul>
<h3>💅 Refactors</h3>
<ul>
<li><strong>vite:</strong> Use new rollup <code>chunk.names</code> for
asset names (<a
href="https://redirect.github.com/nuxt/nuxt/pull/30780 ">#30780</a>)</li>
</ul>
<h3>❤️ Contributors</h3>
<ul>
<li>Daniel Roe (<a
href="https://github.com/danielroe "><code>@danielroe</code></a>)</li>
<li>Peter Radko (<a
href="https://github.com/Gwynerva "><code>@Gwynerva</code></a>)</li>
<li>Lansi (<a
href="https://github.com/lansi951 "><code>@lansi951</code></a>)</li>
<li>Julien Huang (<a
href="https://github.com/huang-julien "><code>@huang-julien</code></a>)</li>
<li>Norbiros (<a
href="https://github.com/Norbiros "><code>@Norbiros</code></a>)</li>
</ul>
<h2>v3.15.3</h2>
<blockquote>
<p>3.15.3 is the next regularly scheduled patch release.</p>
</blockquote>
<h2>👀 Highlights</h2>
<h3>CORS configuration for dev server</h3>
<p>Alongside a range of improvements, we've also shipped a significant
fix to impose <a
href="https://github.com/nuxt/nuxt/commit/406db5b4d ">CORS origin
restrictions on the dev server</a>. This applies to your Vite or
Webpack/Rspack dev middleware only.</p>
<p>This is a significant/breaking change we would not normally ship in a
patch but it is a security fix (see <a
href="https://github.com/nuxt/nuxt/security/advisories/GHSA-4gf7-ff8x-hq99 ">https://github.com/nuxt/nuxt/security/advisories/GHSA-4gf7-ff8x-hq99 </a>
and <a
href="https://github.com/nuxt/nuxt/security/advisories/GHSA-2452-6xj8-jh47 ">https://github.com/nuxt/nuxt/security/advisories/GHSA-2452-6xj8-jh47 </a>)
and we urge you to update ASAP.</p>
<p>You can configure the allowed origins and other CORS options via the
<code>devServer.cors</code> options in your <code>nuxt.config</code>,
which may be relevant if you are developing with a custom hostname:</p>
<pre lang="ts"><code>export default defineNuxtConfig({
</tr></table>
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="244da170dd56d889ebb0https://github.com/nuxt/nuxt/tree/HEAD/packages/vite/issues/30802 ">#30802</a>)</li>
<li><a
href="325ed41a40https://github.com/nuxt/nuxt/tree/HEAD/packages/vite/issues/30780 ">#30780</a>)</li>
<li><a
href="940bcb8c4ehttps://github.com/nuxt/nuxt/tree/HEAD/packages/vite/issues/30747 ">#30747</a>)</li>
<li><a
href="048f974ebac6056bd07dhttps://github.com/nuxt/nuxt/tree/HEAD/packages/vite/issues/30733 ">#30733</a>)</li>
<li><a
href="406db5b4d209d8db5f2fhttps://github.com/nuxt/nuxt/tree/HEAD/packages/vite/issues/30724 ">#30724</a>)</li>
<li><a
href="10a54958d3https://github.com/nuxt/nuxt/tree/HEAD/packages/vite/issues/30690 ">#30690</a>)</li>
<li><a
href="f1c2948cd0https://github.com/nuxt/nuxt/tree/HEAD/packages/vite/issues/30694 ">#30694</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/nuxt/nuxt/commits/v3.15.4/packages/vite ">compare
view</a></li>
</ul>
</details>
<br />
Updates `nuxt` from 3.13.2 to 3.15.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nuxt/nuxt/releases ">nuxt's
releases</a>.</em></p>
<blockquote>
<h2>v3.15.4</h2>
<blockquote>
<p>3.15.4 is the next patch release.</p>
</blockquote>
<h2>✅ Upgrading</h2>
<p>As usual, our recommendation for upgrading is to run:</p>
<pre lang="sh"><code>npx nuxi@latest upgrade --force
</code></pre>
<p>This will refresh your lockfile as well, and ensures that you pull in
updates from other dependencies that Nuxt relies on, particularly in the
unjs ecosystem.</p>
<h2>👉 Changelog</h2>
<p><a
href="https://github.com/nuxt/nuxt/compare/v3.15.3...v3.15.4 ">compare
changes</a></p>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>nuxt:</strong> Improve error logging when parsing with
<code>acorn</code> (<a
href="https://redirect.github.com/nuxt/nuxt/pull/30754 ">#30754</a>)</li>
<li><strong>nuxt:</strong> Clear island uid before saving into the
payload (<a
href="https://redirect.github.com/nuxt/nuxt/pull/30767 ">#30767</a>)</li>
<li><strong>kit:</strong> Load <code>@nuxt/schema</code> from
<code>nuxt</code> package dir (<a
href="https://redirect.github.com/nuxt/nuxt/pull/30774 ">#30774</a>)</li>
<li><strong>nuxt:</strong> Allow restarting nuxt on paths outside
<code>srcDir</code> (<a
href="https://redirect.github.com/nuxt/nuxt/pull/30771 ">#30771</a>)</li>
<li><strong>nuxt:</strong> Don't warn about calling
<code>useRoute</code> in SFC setup (<a
href="https://redirect.github.com/nuxt/nuxt/pull/30788 ">#30788</a>)</li>
<li><strong>webpack:</strong> Disallow cross-site requests in no-cors
mode (<a
href="https://redirect.github.com/nuxt/nuxt/pull/30757 ">#30757</a>)</li>
<li><strong>vite:</strong> Restore <code>externality</code> for dev
server externals (<a
href="https://redirect.github.com/nuxt/nuxt/pull/30802 ">#30802</a>)</li>
</ul>
<h3>💅 Refactors</h3>
<ul>
<li><strong>vite:</strong> Use new rollup <code>chunk.names</code> for
asset names (<a
href="https://redirect.github.com/nuxt/nuxt/pull/30780 ">#30780</a>)</li>
</ul>
<h3>❤️ Contributors</h3>
<ul>
<li>Daniel Roe (<a
href="https://github.com/danielroe "><code>@danielroe</code></a>)</li>
<li>Peter Radko (<a
href="https://github.com/Gwynerva "><code>@Gwynerva</code></a>)</li>
<li>Lansi (<a
href="https://github.com/lansi951 "><code>@lansi951</code></a>)</li>
<li>Julien Huang (<a
href="https://github.com/huang-julien "><code>@huang-julien</code></a>)</li>
<li>Norbiros (<a
href="https://github.com/Norbiros "><code>@Norbiros</code></a>)</li>
</ul>
<h2>v3.15.3</h2>
<blockquote>
<p>3.15.3 is the next regularly scheduled patch release.</p>
</blockquote>
<h2>👀 Highlights</h2>
<h3>CORS configuration for dev server</h3>
<p>Alongside a range of improvements, we've also shipped a significant
fix to impose <a
href="https://github.com/nuxt/nuxt/commit/406db5b4d ">CORS origin
restrictions on the dev server</a>. This applies to your Vite or
Webpack/Rspack dev middleware only.</p>
<p>This is a significant/breaking change we would not normally ship in a
patch but it is a security fix (see <a
href="https://github.com/nuxt/nuxt/security/advisories/GHSA-4gf7-ff8x-hq99 ">https://github.com/nuxt/nuxt/security/advisories/GHSA-4gf7-ff8x-hq99 </a>
and <a
href="https://github.com/nuxt/nuxt/security/advisories/GHSA-2452-6xj8-jh47 ">https://github.com/nuxt/nuxt/security/advisories/GHSA-2452-6xj8-jh47 </a>)
and we urge you to update ASAP.</p>
<p>You can configure the allowed origins and other CORS options via the
<code>devServer.cors</code> options in your <code>nuxt.config</code>,
which may be relevant if you are developing with a custom hostname:</p>
<pre lang="ts"><code>export default defineNuxtConfig({
</tr></table>
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="244da170ddceaf0f5aeahttps://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/30804 ">#30804</a>)</li>
<li><a
href="626eba06cchttps://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/30788 ">#30788</a>)</li>
<li><a
href="7a1e5c818bhttps://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/30771 ">#30771</a>)</li>
<li><a
href="ca2d91f8e0https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/30774 ">#30774</a>)</li>
<li><a
href="b78da56dd7https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/30767 ">#30767</a>)</li>
<li><a
href="e0c47f9bf3https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/30754 ">#30754</a>)</li>
<li><a
href="940bcb8c4ehttps://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/30747 ">#30747</a>)</li>
<li><a
href="048f974ebae96a96dbd9https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt/issues/30720 ">#30720</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/nuxt/nuxt/commits/v3.15.4/packages/nuxt ">compare
view</a></li>
</ul>
</details>
<br />
Updates `vite` from 5.4.8 to 6.1.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases ">vite's
releases</a>.</em></p>
<blockquote>
<h2>v5.4.12</h2>
<p>This version contains a breaking change due to security fixes. See <a
href="https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6 ">https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6 </a>
for more details.</p>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.12/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.11</h2>
<p>Please refer to <a
href="ecd2375460/packages/vite/CHANGELOG.mdhttps://github.com/vitejs/vite/blob/v5.4.10/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.9</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.9/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.8</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.8/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.7</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.7/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.6</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.6/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.5</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.5/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.4</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.4/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.3</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.3/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@5.4.3</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@5.4.3/packages/plugin-legacy/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@5.4.2</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@5.4.2/packages/plugin-legacy/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.2</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.2/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@5.4.1</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@5.4.1/packages/plugin-legacy/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.1</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.1/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@5.4.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@5.4.0/packages/plugin-legacy/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/v5.4.12/packages/vite/CHANGELOG.md ">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted -->5.4.12 (2025-01-20)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix!: check host header to prevent DNS rebinding attacks and
introduce <code>server.allowedHosts</code> (<a
href="9da4abc8dddfea38f1ffb71a5c89a1ecd2375460ceb15db613https://redirect.github.com/vitejs/vite/issues/18617 ">#18617</a></li>
</ul>
<h2><!-- raw HTML omitted -->5.4.10 (2024-10-23)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18367 ">#18367</a>,augment
hash for CSS files to prevent chromium erroring by loading previous fil
(<a
href="7d1a3bcc43https://redirect.github.com/vitejs/vite/issues/18367 ">#18367</a>
<a
href="https://redirect.github.com/vitejs/vite/issues/18412 ">#18412</a></li>
</ul>
<h2><!-- raw HTML omitted -->5.4.9 (2024-10-14)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: bump launch-editor-middleware to v2.9.1 (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18348 ">#18348</a>)
(<a
href="508d9ab834https://redirect.github.com/vitejs/vite/issues/18348 ">#18348</a></li>
<li>fix(css): fix lightningcss dep url resolution with custom root (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18125 ">#18125</a>)
(<a
href="eae00b561ehttps://redirect.github.com/vitejs/vite/issues/18125 ">#18125</a></li>
<li>fix(data-uri): only match ids starting with <code>data:</code> (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18241 ">#18241</a>)
(<a
href="96084d6e75https://redirect.github.com/vitejs/vite/issues/18241 ">#18241</a></li>
<li>fix(deps): bump tsconfck (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18322 ">#18322</a>)
(<a
href="dc5434ce87https://redirect.github.com/vitejs/vite/issues/18322 ">#18322</a></li>
<li>fix(hmr): don't try to rewrite imports for direct CSS soft
invalidation (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18252 ">#18252</a>)
(<a
href="851b258c34https://redirect.github.com/vitejs/vite/issues/18252 ">#18252</a></li>
<li>fix(ssr): (backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18150 ">#18150</a>)
fix source map remapping with multiple sources (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18204 ">#18204</a>)
(<a
href="262a8796d4https://redirect.github.com/vitejs/vite/issues/18204 ">#18204</a></li>
<li>chore: update all url references of vitejs.dev to vite.dev (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18276 ">#18276</a>)
(<a
href="c23558a7afhttps://redirect.github.com/vitejs/vite/issues/18276 ">#18276</a></li>
<li>chore: update license copyright (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18278 ">#18278</a>)
(<a
href="1864eb17b2https://redirect.github.com/vitejs/vite/issues/18278 ">#18278</a></li>
<li>docs: update homepage (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18274 ">#18274</a>)
(<a
href="ae4416349ehttps://redirect.github.com/vitejs/vite/issues/18274 ">#18274</a></li>
</ul>
<h2><!-- raw HTML omitted -->5.4.8 (2024-09-25)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix(css): backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18113 ">#18113</a>,
fix missing source file warning with sass modern api custom importer (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18 ">#18</a>
(<a
href="7d47fc1c74https://redirect.github.com/vitejs/vite/issues/18183 ">#18183</a></li>
<li>fix(css): backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18128 ">#18128</a>,
ensure sass compiler initialized only once (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18184 ">#18184</a>)
(<a
href="8464d976b1https://redirect.github.com/vitejs/vite/issues/18128 ">#18128</a>
<a
href="https://redirect.github.com/vitejs/vite/issues/18184 ">#18184</a></li>
</ul>
<h2><!-- raw HTML omitted -->5.4.7 (2024-09-20)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: treat config file as ESM in Deno (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18158 ">#18158</a>)
(<a
href="b5908a24bahttps://redirect.github.com/vitejs/vite/issues/18158 ">#18158</a></li>
</ul>
<h2><!-- raw HTML omitted -->5.4.6 (2024-09-16)<!-- raw HTML omitted
--></h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f428aa9af89da4abc8ddb71a5c89a1dfea38f1ffecd2375460c54c860f9d5f52bc8b9e7d1a3bcc43https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18367 ">#18367</a>,augment
hash for CSS files to prevent chromium erroring ...</li>
<li><a
href="898d61f94b508d9ab834https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18348 ">#18348</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v5.4.12/packages/vite ">compare
view</a></li>
</ul>
</details>
<br />
Updates `vite` from 5.3.5 to 5.4.12
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases ">vite's
releases</a>.</em></p>
<blockquote>
<h2>v5.4.12</h2>
<p>This version contains a breaking change due to security fixes. See <a
href="https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6 ">https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6 </a>
for more details.</p>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.12/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.11</h2>
<p>Please refer to <a
href="ecd2375460/packages/vite/CHANGELOG.mdhttps://github.com/vitejs/vite/blob/v5.4.10/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.9</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.9/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.8</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.8/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.7</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.7/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.6</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.6/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.5</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.5/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.4</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.4/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.3</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.3/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@5.4.3</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@5.4.3/packages/plugin-legacy/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@5.4.2</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@5.4.2/packages/plugin-legacy/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.2</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.2/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@5.4.1</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@5.4.1/packages/plugin-legacy/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v5.4.1</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v5.4.1/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@5.4.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@5.4.0/packages/plugin-legacy/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/v5.4.12/packages/vite/CHANGELOG.md ">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted -->5.4.12 (2025-01-20)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix!: check host header to prevent DNS rebinding attacks and
introduce <code>server.allowedHosts</code> (<a
href="9da4abc8dddfea38f1ffb71a5c89a1ecd2375460ceb15db613https://redirect.github.com/vitejs/vite/issues/18617 ">#18617</a></li>
</ul>
<h2><!-- raw HTML omitted -->5.4.10 (2024-10-23)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18367 ">#18367</a>,augment
hash for CSS files to prevent chromium erroring by loading previous fil
(<a
href="7d1a3bcc43https://redirect.github.com/vitejs/vite/issues/18367 ">#18367</a>
<a
href="https://redirect.github.com/vitejs/vite/issues/18412 ">#18412</a></li>
</ul>
<h2><!-- raw HTML omitted -->5.4.9 (2024-10-14)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: bump launch-editor-middleware to v2.9.1 (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18348 ">#18348</a>)
(<a
href="508d9ab834https://redirect.github.com/vitejs/vite/issues/18348 ">#18348</a></li>
<li>fix(css): fix lightningcss dep url resolution with custom root (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18125 ">#18125</a>)
(<a
href="eae00b561ehttps://redirect.github.com/vitejs/vite/issues/18125 ">#18125</a></li>
<li>fix(data-uri): only match ids starting with <code>data:</code> (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18241 ">#18241</a>)
(<a
href="96084d6e75https://redirect.github.com/vitejs/vite/issues/18241 ">#18241</a></li>
<li>fix(deps): bump tsconfck (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18322 ">#18322</a>)
(<a
href="dc5434ce87https://redirect.github.com/vitejs/vite/issues/18322 ">#18322</a></li>
<li>fix(hmr): don't try to rewrite imports for direct CSS soft
invalidation (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18252 ">#18252</a>)
(<a
href="851b258c34https://redirect.github.com/vitejs/vite/issues/18252 ">#18252</a></li>
<li>fix(ssr): (backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18150 ">#18150</a>)
fix source map remapping with multiple sources (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18204 ">#18204</a>)
(<a
href="262a8796d4https://redirect.github.com/vitejs/vite/issues/18204 ">#18204</a></li>
<li>chore: update all url references of vitejs.dev to vite.dev (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18276 ">#18276</a>)
(<a
href="c23558a7afhttps://redirect.github.com/vitejs/vite/issues/18276 ">#18276</a></li>
<li>chore: update license copyright (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18278 ">#18278</a>)
(<a
href="1864eb17b2https://redirect.github.com/vitejs/vite/issues/18278 ">#18278</a></li>
<li>docs: update homepage (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18274 ">#18274</a>)
(<a
href="ae4416349ehttps://redirect.github.com/vitejs/vite/issues/18274 ">#18274</a></li>
</ul>
<h2><!-- raw HTML omitted -->5.4.8 (2024-09-25)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix(css): backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18113 ">#18113</a>,
fix missing source file warning with sass modern api custom importer (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18 ">#18</a>
(<a
href="7d47fc1c74https://redirect.github.com/vitejs/vite/issues/18183 ">#18183</a></li>
<li>fix(css): backport <a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18128 ">#18128</a>,
ensure sass compiler initialized only once (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18184 ">#18184</a>)
(<a
href="8464d976b1https://redirect.github.com/vitejs/vite/issues/18128 ">#18128</a>
<a
href="https://redirect.github.com/vitejs/vite/issues/18184 ">#18184</a></li>
</ul>
<h2><!-- raw HTML omitted -->5.4.7 (2024-09-20)<!-- raw HTML omitted
--></h2>
<ul>
<li>fix: treat config file as ESM in Deno (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18158 ">#18158</a>)
(<a
href="b5908a24bahttps://redirect.github.com/vitejs/vite/issues/18158 ">#18158</a></li>
</ul>
<h2><!-- raw HTML omitted -->5.4.6 (2024-09-16)<!-- raw HTML omitted
--></h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f428aa9af89da4abc8ddb71a5c89a1dfea38f1ffecd2375460c54c860f9d5f52bc8b9e7d1a3bcc43https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18367 ">#18367</a>,augment
hash for CSS files to prevent chromium erroring ...</li>
<li><a
href="898d61f94b508d9ab834https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/18348 ">#18348</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v5.4.12/packages/vite ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/nestrilabs/nestri/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-24 23:51:14 +03:00
dependabot[bot]
Victor Pahuus Petersen