From 39b76d3ec02276357fe05d87d85c43c4f89764b9 Mon Sep 17 00:00:00 2001 From: Aaron Klinker Date: Mon, 29 Jan 2024 11:25:31 -0600 Subject: [PATCH] fix(security): Upgrade to vite@5.0.12 to resolve CVE-2024-23331 --- package.json | 2 +- pnpm-lock.yaml | 88 ++++++++++++++++++++++++++++++++++++++++++-------- 2 files changed, 75 insertions(+), 15 deletions(-) diff --git a/package.json b/package.json index 1676c103..a6f8c7a1 100644 --- a/package.json +++ b/package.json @@ -134,7 +134,7 @@ "prompts": "^2.4.2", "rollup-plugin-visualizer": "^5.9.2", "unimport": "^3.4.0", - "vite": "^5.0.0", + "vite": "^5.0.12", "web-ext-run": "^0.1.2", "webextension-polyfill": "^0.10.0", "zip-dir": "^2.0.0" diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 5523bb82..7d03b61f 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -102,8 +102,8 @@ importers: specifier: ^3.4.0 version: 3.4.0 vite: - specifier: ^5.0.0 - version: 5.0.5(@types/node@20.10.3)(sass@1.69.5) + specifier: ^5.0.12 + version: 5.0.12(@types/node@20.10.3)(sass@1.69.5) web-ext-run: specifier: ^0.1.2 version: 0.1.2 @@ -188,7 +188,7 @@ importers: version: 1.0.0-rc.34(@types/node@20.10.3)(typescript@5.3.2) vitest: specifier: ^1.1.0 - version: 1.1.0(@types/node@20.10.3)(happy-dom@12.10.3)(sass@1.69.5) + version: 1.1.0(@types/node@20.10.3)(happy-dom@12.10.3) vitest-mock-extended: specifier: ^1.3.1 version: 1.3.1(typescript@5.3.2)(vitest@1.1.0) @@ -1165,14 +1165,14 @@ packages: resolution: {integrity: sha512-LlmbFLUB7+BDrb9nMuM0wlqtx9LZbBV2x3W98o02cD7Y8i10+sBenTlhG56vr47dzC7WIVXbURii+5jMJsyjLw==} dev: false - /@vitejs/plugin-vue@5.0.2(vite@5.0.10)(vue@3.4.3): + /@vitejs/plugin-vue@5.0.2(vite@5.0.12)(vue@3.4.3): resolution: {integrity: sha512-kEjJHrLb5ePBvjD0SPZwJlw1QTRcjjCA9sB5VyfonoXVBxTS7TMnqL6EkLt1Eu61RDeiuZ/WN9Hf6PxXhPI2uA==} engines: {node: ^18.0.0 || >=20.0.0} peerDependencies: vite: ^5.0.0 vue: ^3.2.25 dependencies: - vite: 5.0.10(@types/node@20.10.3) + vite: 5.0.12(@types/node@20.10.3)(sass@1.69.5) vue: 3.4.3(typescript@5.3.2) dev: true @@ -1194,7 +1194,7 @@ packages: std-env: 3.6.0 test-exclude: 6.0.0 v8-to-istanbul: 9.2.0 - vitest: 1.1.0(@types/node@20.10.3)(happy-dom@12.10.3)(sass@1.69.5) + vitest: 1.1.0(@types/node@20.10.3)(happy-dom@12.10.3) transitivePeerDependencies: - supports-color dev: true @@ -4925,7 +4925,7 @@ packages: debug: 4.3.4 pathe: 1.1.1 picocolors: 1.0.0 - vite: 5.0.5(@types/node@20.10.3)(sass@1.69.5) + vite: 5.0.12(@types/node@20.10.3)(sass@1.69.5) transitivePeerDependencies: - '@types/node' - less @@ -4936,8 +4936,8 @@ packages: - supports-color - terser - /vite@5.0.10(@types/node@20.10.3): - resolution: {integrity: sha512-2P8J7WWgmc355HUMlFrwofacvr98DAjoE52BfdbwQtyLH06XKwaL/FMnmKM2crF0iX4MpmMKoDlNCB1ok7zHCw==} + /vite@5.0.12(@types/node@20.10.3)(sass@1.69.5): + resolution: {integrity: sha512-4hsnEkG3q0N4Tzf1+t6NdN9dg/L3BM+q8SWgbSPnJvrgH2kgdyzfVJwbR1ic69/4uMJJ/3dqDZZE5/WwqW8U1w==} engines: {node: ^18.0.0 || >=20.0.0} hasBin: true peerDependencies: @@ -4965,12 +4965,12 @@ packages: optional: true dependencies: '@types/node': 20.10.3 - esbuild: 0.19.8 + esbuild: 0.19.11 postcss: 8.4.32 rollup: 4.6.1 + sass: 1.69.5 optionalDependencies: fsevents: 2.3.3 - dev: true /vite@5.0.5(@types/node@20.10.3)(sass@1.69.5): resolution: {integrity: sha512-OekeWqR9Ls56f3zd4CaxzbbS11gqYkEiBtnWFFgYR2WV8oPJRRKq0mpskYy/XaoCL3L7VINDhqqOMNDiYdGvGg==} @@ -5007,6 +5007,7 @@ packages: sass: 1.69.5 optionalDependencies: fsevents: 2.3.3 + dev: false /vitepress@1.0.0-rc.34(@types/node@20.10.3)(typescript@5.3.2): resolution: {integrity: sha512-TUbTiSdAZFni2XlHlpx61KikgkQ5uG4Wtmw2R0SXhIOG6qGqzDJczAFjkMc4i45I9c3KyatwOYe8oEfCnzVYwQ==} @@ -5023,7 +5024,7 @@ packages: '@docsearch/css': 3.5.2 '@docsearch/js': 3.5.2 '@types/markdown-it': 13.0.7 - '@vitejs/plugin-vue': 5.0.2(vite@5.0.10)(vue@3.4.3) + '@vitejs/plugin-vue': 5.0.2(vite@5.0.12)(vue@3.4.3) '@vue/devtools-api': 6.5.1 '@vueuse/core': 10.7.1(vue@3.4.3) '@vueuse/integrations': 10.7.1(focus-trap@7.5.4)(vue@3.4.3) @@ -5034,7 +5035,7 @@ packages: shikiji: 0.9.16 shikiji-core: 0.9.16 shikiji-transformers: 0.9.16 - vite: 5.0.10(@types/node@20.10.3) + vite: 5.0.12(@types/node@20.10.3)(sass@1.69.5) vue: 3.4.3(typescript@5.3.2) transitivePeerDependencies: - '@algolia/client-search' @@ -5072,7 +5073,65 @@ packages: dependencies: ts-essentials: 9.3.2(typescript@5.3.2) typescript: 5.3.2 - vitest: 1.1.0(@types/node@20.10.3)(happy-dom@12.10.3)(sass@1.69.5) + vitest: 1.1.0(@types/node@20.10.3)(happy-dom@12.10.3) + dev: true + + /vitest@1.1.0(@types/node@20.10.3)(happy-dom@12.10.3): + resolution: {integrity: sha512-oDFiCrw7dd3Jf06HoMtSRARivvyjHJaTxikFxuqJjO76U436PqlVw1uLn7a8OSPrhSfMGVaRakKpA2lePdw79A==} + engines: {node: ^18.0.0 || >=20.0.0} + hasBin: true + peerDependencies: + '@edge-runtime/vm': '*' + '@types/node': ^18.0.0 || >=20.0.0 + '@vitest/browser': ^1.0.0 + '@vitest/ui': ^1.0.0 + happy-dom: '*' + jsdom: '*' + peerDependenciesMeta: + '@edge-runtime/vm': + optional: true + '@types/node': + optional: true + '@vitest/browser': + optional: true + '@vitest/ui': + optional: true + happy-dom: + optional: true + jsdom: + optional: true + dependencies: + '@types/node': 20.10.3 + '@vitest/expect': 1.1.0 + '@vitest/runner': 1.1.0 + '@vitest/snapshot': 1.1.0 + '@vitest/spy': 1.1.0 + '@vitest/utils': 1.1.0 + acorn-walk: 8.3.0 + cac: 6.7.14 + chai: 4.3.10 + debug: 4.3.4 + execa: 8.0.1 + happy-dom: 12.10.3 + local-pkg: 0.5.0 + magic-string: 0.30.5 + pathe: 1.1.1 + picocolors: 1.0.0 + std-env: 3.6.0 + strip-literal: 1.3.0 + tinybench: 2.5.1 + tinypool: 0.8.1 + vite: 5.0.12(@types/node@20.10.3)(sass@1.69.5) + vite-node: 1.1.0(@types/node@20.10.3)(sass@1.69.5) + why-is-node-running: 2.2.2 + transitivePeerDependencies: + - less + - lightningcss + - sass + - stylus + - sugarss + - supports-color + - terser dev: true /vitest@1.1.0(@types/node@20.10.3)(happy-dom@12.10.3)(sass@1.69.5): @@ -5131,6 +5190,7 @@ packages: - sugarss - supports-color - terser + dev: false /vscode-oniguruma@1.7.0: resolution: {integrity: sha512-L9WMGRfrjOhgHSdOYgCt/yRMsXzLDJSL7BPrOZt73gU0iWO4mpqzqQzOz5srxqTvMBaR0XZTSrVWo4j55Rc6cA==}