fix(security): Upgrade to vite@5.0.12 to resolve CVE-2024-23331

This commit is contained in:
Aaron Klinker
2024-01-29 11:25:31 -06:00
parent bc29bfd434
commit 39b76d3ec0
2 changed files with 75 additions and 15 deletions
+1 -1
View File
@@ -134,7 +134,7 @@
"prompts": "^2.4.2",
"rollup-plugin-visualizer": "^5.9.2",
"unimport": "^3.4.0",
"vite": "^5.0.0",
"vite": "^5.0.12",
"web-ext-run": "^0.1.2",
"webextension-polyfill": "^0.10.0",
"zip-dir": "^2.0.0"
+74 -14
View File
@@ -102,8 +102,8 @@ importers:
specifier: ^3.4.0
version: 3.4.0
vite:
specifier: ^5.0.0
version: 5.0.5(@types/node@20.10.3)(sass@1.69.5)
specifier: ^5.0.12
version: 5.0.12(@types/node@20.10.3)(sass@1.69.5)
web-ext-run:
specifier: ^0.1.2
version: 0.1.2
@@ -188,7 +188,7 @@ importers:
version: 1.0.0-rc.34(@types/node@20.10.3)(typescript@5.3.2)
vitest:
specifier: ^1.1.0
version: 1.1.0(@types/node@20.10.3)(happy-dom@12.10.3)(sass@1.69.5)
version: 1.1.0(@types/node@20.10.3)(happy-dom@12.10.3)
vitest-mock-extended:
specifier: ^1.3.1
version: 1.3.1(typescript@5.3.2)(vitest@1.1.0)
@@ -1165,14 +1165,14 @@ packages:
resolution: {integrity: sha512-LlmbFLUB7+BDrb9nMuM0wlqtx9LZbBV2x3W98o02cD7Y8i10+sBenTlhG56vr47dzC7WIVXbURii+5jMJsyjLw==}
dev: false
/@vitejs/plugin-vue@5.0.2(vite@5.0.10)(vue@3.4.3):
/@vitejs/plugin-vue@5.0.2(vite@5.0.12)(vue@3.4.3):
resolution: {integrity: sha512-kEjJHrLb5ePBvjD0SPZwJlw1QTRcjjCA9sB5VyfonoXVBxTS7TMnqL6EkLt1Eu61RDeiuZ/WN9Hf6PxXhPI2uA==}
engines: {node: ^18.0.0 || >=20.0.0}
peerDependencies:
vite: ^5.0.0
vue: ^3.2.25
dependencies:
vite: 5.0.10(@types/node@20.10.3)
vite: 5.0.12(@types/node@20.10.3)(sass@1.69.5)
vue: 3.4.3(typescript@5.3.2)
dev: true
@@ -1194,7 +1194,7 @@ packages:
std-env: 3.6.0
test-exclude: 6.0.0
v8-to-istanbul: 9.2.0
vitest: 1.1.0(@types/node@20.10.3)(happy-dom@12.10.3)(sass@1.69.5)
vitest: 1.1.0(@types/node@20.10.3)(happy-dom@12.10.3)
transitivePeerDependencies:
- supports-color
dev: true
@@ -4925,7 +4925,7 @@ packages:
debug: 4.3.4
pathe: 1.1.1
picocolors: 1.0.0
vite: 5.0.5(@types/node@20.10.3)(sass@1.69.5)
vite: 5.0.12(@types/node@20.10.3)(sass@1.69.5)
transitivePeerDependencies:
- '@types/node'
- less
@@ -4936,8 +4936,8 @@ packages:
- supports-color
- terser
/vite@5.0.10(@types/node@20.10.3):
resolution: {integrity: sha512-2P8J7WWgmc355HUMlFrwofacvr98DAjoE52BfdbwQtyLH06XKwaL/FMnmKM2crF0iX4MpmMKoDlNCB1ok7zHCw==}
/vite@5.0.12(@types/node@20.10.3)(sass@1.69.5):
resolution: {integrity: sha512-4hsnEkG3q0N4Tzf1+t6NdN9dg/L3BM+q8SWgbSPnJvrgH2kgdyzfVJwbR1ic69/4uMJJ/3dqDZZE5/WwqW8U1w==}
engines: {node: ^18.0.0 || >=20.0.0}
hasBin: true
peerDependencies:
@@ -4965,12 +4965,12 @@ packages:
optional: true
dependencies:
'@types/node': 20.10.3
esbuild: 0.19.8
esbuild: 0.19.11
postcss: 8.4.32
rollup: 4.6.1
sass: 1.69.5
optionalDependencies:
fsevents: 2.3.3
dev: true
/vite@5.0.5(@types/node@20.10.3)(sass@1.69.5):
resolution: {integrity: sha512-OekeWqR9Ls56f3zd4CaxzbbS11gqYkEiBtnWFFgYR2WV8oPJRRKq0mpskYy/XaoCL3L7VINDhqqOMNDiYdGvGg==}
@@ -5007,6 +5007,7 @@ packages:
sass: 1.69.5
optionalDependencies:
fsevents: 2.3.3
dev: false
/vitepress@1.0.0-rc.34(@types/node@20.10.3)(typescript@5.3.2):
resolution: {integrity: sha512-TUbTiSdAZFni2XlHlpx61KikgkQ5uG4Wtmw2R0SXhIOG6qGqzDJczAFjkMc4i45I9c3KyatwOYe8oEfCnzVYwQ==}
@@ -5023,7 +5024,7 @@ packages:
'@docsearch/css': 3.5.2
'@docsearch/js': 3.5.2
'@types/markdown-it': 13.0.7
'@vitejs/plugin-vue': 5.0.2(vite@5.0.10)(vue@3.4.3)
'@vitejs/plugin-vue': 5.0.2(vite@5.0.12)(vue@3.4.3)
'@vue/devtools-api': 6.5.1
'@vueuse/core': 10.7.1(vue@3.4.3)
'@vueuse/integrations': 10.7.1(focus-trap@7.5.4)(vue@3.4.3)
@@ -5034,7 +5035,7 @@ packages:
shikiji: 0.9.16
shikiji-core: 0.9.16
shikiji-transformers: 0.9.16
vite: 5.0.10(@types/node@20.10.3)
vite: 5.0.12(@types/node@20.10.3)(sass@1.69.5)
vue: 3.4.3(typescript@5.3.2)
transitivePeerDependencies:
- '@algolia/client-search'
@@ -5072,7 +5073,65 @@ packages:
dependencies:
ts-essentials: 9.3.2(typescript@5.3.2)
typescript: 5.3.2
vitest: 1.1.0(@types/node@20.10.3)(happy-dom@12.10.3)(sass@1.69.5)
vitest: 1.1.0(@types/node@20.10.3)(happy-dom@12.10.3)
dev: true
/vitest@1.1.0(@types/node@20.10.3)(happy-dom@12.10.3):
resolution: {integrity: sha512-oDFiCrw7dd3Jf06HoMtSRARivvyjHJaTxikFxuqJjO76U436PqlVw1uLn7a8OSPrhSfMGVaRakKpA2lePdw79A==}
engines: {node: ^18.0.0 || >=20.0.0}
hasBin: true
peerDependencies:
'@edge-runtime/vm': '*'
'@types/node': ^18.0.0 || >=20.0.0
'@vitest/browser': ^1.0.0
'@vitest/ui': ^1.0.0
happy-dom: '*'
jsdom: '*'
peerDependenciesMeta:
'@edge-runtime/vm':
optional: true
'@types/node':
optional: true
'@vitest/browser':
optional: true
'@vitest/ui':
optional: true
happy-dom:
optional: true
jsdom:
optional: true
dependencies:
'@types/node': 20.10.3
'@vitest/expect': 1.1.0
'@vitest/runner': 1.1.0
'@vitest/snapshot': 1.1.0
'@vitest/spy': 1.1.0
'@vitest/utils': 1.1.0
acorn-walk: 8.3.0
cac: 6.7.14
chai: 4.3.10
debug: 4.3.4
execa: 8.0.1
happy-dom: 12.10.3
local-pkg: 0.5.0
magic-string: 0.30.5
pathe: 1.1.1
picocolors: 1.0.0
std-env: 3.6.0
strip-literal: 1.3.0
tinybench: 2.5.1
tinypool: 0.8.1
vite: 5.0.12(@types/node@20.10.3)(sass@1.69.5)
vite-node: 1.1.0(@types/node@20.10.3)(sass@1.69.5)
why-is-node-running: 2.2.2
transitivePeerDependencies:
- less
- lightningcss
- sass
- stylus
- sugarss
- supports-color
- terser
dev: true
/vitest@1.1.0(@types/node@20.10.3)(happy-dom@12.10.3)(sass@1.69.5):
@@ -5131,6 +5190,7 @@ packages:
- sugarss
- supports-color
- terser
dev: false
/vscode-oniguruma@1.7.0:
resolution: {integrity: sha512-L9WMGRfrjOhgHSdOYgCt/yRMsXzLDJSL7BPrOZt73gU0iWO4mpqzqQzOz5srxqTvMBaR0XZTSrVWo4j55Rc6cA==}