Skip to content

fix: patch Vite dependency audit failure - #130

Merged
godsonten merged 1 commit into
issues/577-dns-qa-fixesfrom
issues/577-docs-ci-vite-patch
Oct 21, 2026
Merged

godsonten merged 1 commit into
issues/577-dns-qa-fixesfrom
issues/577-docs-ci-vite-patch

Conversation

@godsonten

@godsonten godsonten commented Oct 21, 2026 •

Copy link
Copy Markdown
Collaborator

What changed

Update the locked Vite dependency from 8.3.2 to 8.3.3 and add a scoped security override using the existing dependency policy.

Why

The dependency audit on #129 fails because Vite 8.3.2 is affected by GHSA-587h-7wmj-h5pm.

Merge this PR into issues/577-dns-qa-fixes first. This updates docs PR #129 and triggers its CI again. Wait for #129 to pass CI before merging it into main.

Related: zsoftly/iaas#787.

Validation

Validated locally with the pinned pnpm 10.33.0:

  • Frozen installation and pnpm audit --audit-level=high pass.
  • Formatting, lint, and typecheck pass.
  • All 31 tests pass across the three repository test scripts.
  • Full build, internal links, sitemap host, and robots host checks pass.
  • Independent code and context reviews found no issues.

The existing audit exceptions are unchanged; passing the audit gate does not mean the dependency tree has no remaining advisories.

Signed-off-by: godsonten <tendongze.g@zsoftly.com>
@coderabbitai

coderabbitai Bot commented Oct 21, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 499ab00c-2418-4f2d-a3dc-a6bd19883df4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@godsonten
godsonten merged commit 03c118b into issues/577-dns-qa-fixes Oct 21, 2026
5 checks passed
@godsonten godsonten changed the title fix: patch Vite dependency audit failure for #577 fix: patch Vite dependency audit failure Oct 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant