From 26da25100374fc753eded10f7322ee2537f43d5f Mon Sep 17 00:00:00 2001 From: Chrilleweb Date: Sat, 24 Oct 2026 15:13:18 +0200 Subject: [PATCH] chore: security --- pnpm-lock.yaml | 26 +++++++++++++------------- pnpm-workspace.yaml | 2 +- 2 files changed, 14 insertions(+), 14 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index ec9a8f69..2c48ec79 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -5,7 +5,7 @@ settings: excludeLinksFromLockfile: false overrides: - vite@>=7.0.0 <7.3.6: ^7.3.6 + vite@>=7.0.0 <7.3.7: ^7.3.7 esbuild@>=0.27.3 <0.28.1: ^0.28.1 postcss: ^8.5.23 nanoid: ^3.3.17 @@ -61,7 +61,7 @@ importers: version: 6.0.3 vitest: specifier: ^5.0.5 - version: 5.0.5(@types/node@26.6.5)(@vitest/coverage-v8@5.0.3)(vite@7.3.6(@types/node@26.6.5)(yaml@2.9.1)) + version: 5.0.5(@types/node@26.6.5)(@vitest/coverage-v8@5.0.3)(vite@7.3.7(@types/node@26.6.5)(yaml@2.9.1)) packages/@repo/eslint-config: devDependencies: @@ -703,7 +703,7 @@ packages: resolution: {integrity: sha512-xLL3lkDegJZw+MGoGaCCsFayDZthGgpAtr3Vziyfc4p7xH89K7KRPcRBBh/kEYm0Aqkt5DtTmkYpBtRV/FrHZg==} peerDependencies: msw: ^2.4.9 || ^3.0.0 - vite: ^7.3.6 + vite: ^7.3.7 peerDependenciesMeta: msw: optional: true @@ -1145,8 +1145,8 @@ packages: uri-js@4.4.1: resolution: {integrity: sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==} - vite@7.3.6: - resolution: {integrity: sha512-4XP60spRGjSZFf1qYH+dJIkK2znL3zQfl9KkOV9MkkRR/3Dls0dxaBsQPTloEc5BLXWPL9vsOxopxyKoMmDueg==} + vite@7.3.7: + resolution: {integrity: sha512-AHEzTORMbi7/7aXp7w7KZ5+DCUdSeLsJz0grY8xHpc9DHdYb0vQu6DqJfm2tOw3gDExNgPgnJTXxM6syYFHaCA==} engines: {node: ^20.19.0 || >=22.12.0} hasBin: true peerDependencies: @@ -1201,7 +1201,7 @@ packages: '@vitest/ui': 5.0.5 happy-dom: '*' jsdom: '*' - vite: ^7.3.6 + vite: ^7.3.7 peerDependenciesMeta: '@edge-runtime/vm': optional: true @@ -1768,7 +1768,7 @@ snapshots: obug: 2.2.1 std-env: 4.3.0 tinyrainbow: 3.2.0 - vitest: 5.0.5(@types/node@26.6.5)(@vitest/coverage-v8@5.0.3)(vite@7.3.6(@types/node@26.6.5)(yaml@2.9.1)) + vitest: 5.0.5(@types/node@26.6.5)(@vitest/coverage-v8@5.0.3)(vite@7.3.7(@types/node@26.6.5)(yaml@2.9.1)) '@vitest/istanbul-lib-coverage@1.0.2': {} @@ -1776,14 +1776,14 @@ snapshots: dependencies: '@vitest/istanbul-lib-coverage': 1.0.2 - '@vitest/mocker@5.0.5(vite@7.3.6(@types/node@26.6.5)(yaml@2.9.1))': + '@vitest/mocker@5.0.5(vite@7.3.7(@types/node@26.6.5)(yaml@2.9.1))': dependencies: '@jridgewell/trace-mapping': 0.3.31 '@vitest/spy': 5.0.5 estree-walker: 3.0.3 magic-string: 1.4.3 optionalDependencies: - vite: 7.3.6(@types/node@26.6.5)(yaml@2.9.1) + vite: 7.3.7(@types/node@26.6.5)(yaml@2.9.1) '@vitest/spy@5.0.5': {} @@ -2228,7 +2228,7 @@ snapshots: dependencies: punycode: 2.3.1 - vite@7.3.6(@types/node@26.6.5)(yaml@2.9.1): + vite@7.3.7(@types/node@26.6.5)(yaml@2.9.1): dependencies: esbuild: 0.28.1 fdir: 6.5.0(picomatch@4.0.7) @@ -2241,10 +2241,10 @@ snapshots: fsevents: 2.3.3 yaml: 2.9.1 - vitest@5.0.5(@types/node@26.6.5)(@vitest/coverage-v8@5.0.3)(vite@7.3.6(@types/node@26.6.5)(yaml@2.9.1)): + vitest@5.0.5(@types/node@26.6.5)(@vitest/coverage-v8@5.0.3)(vite@7.3.7(@types/node@26.6.5)(yaml@2.9.1)): dependencies: '@types/chai': 5.2.3 - '@vitest/mocker': 5.0.5(vite@7.3.6(@types/node@26.6.5)(yaml@2.9.1)) + '@vitest/mocker': 5.0.5(vite@7.3.7(@types/node@26.6.5)(yaml@2.9.1)) chai: 6.3.0 es-module-lexer: 2.3.2 expect-type: 1.4.0 @@ -2255,7 +2255,7 @@ snapshots: tinybench: 6.2.2 tinyexec: 1.3.1 tinyglobby: 0.2.17 - vite: 7.3.6(@types/node@26.6.5)(yaml@2.9.1) + vite: 7.3.7(@types/node@26.6.5)(yaml@2.9.1) why-is-node-running: 3.2.1 optionalDependencies: '@types/node': 26.6.5 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 74314309..dd132c4a 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -8,7 +8,7 @@ allowBuilds: # Force patched versions of transitive (dev-only) dependencies flagged by # security advisories. They all come in via vitest → vite. overrides: - vite@>=7.0.0 <7.3.6: '^7.3.6' + vite@>=7.0.0 <7.3.7: '^7.3.7' esbuild@>=0.27.3 <0.28.1: '^0.28.1' postcss: "^8.5.23" nanoid: "^3.3.17"