46.md (14787B)
1 # PR #46 Bump the npm_and_yarn group with 1 update 2 3 - **Status:** open 4 - **Author:** @dependabot[bot] 5 - **Created:** 2024-04-03T19:04:18Z 6 - **Branch:** dependabot/npm_and_yarn/npm_and_yarn-security-group-4c4c126df2 → main 7 - **Labels:** dependencies, javascript 8 - **Diff:** [46.diff](./46.diff) 9 10 --- 11 12 Bumps the npm_and_yarn group with 1 update: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). 13 14 Updates `vite` from 5.0.5 to 5.2.8 15 <details> 16 <summary>Release notes</summary> 17 <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> 18 <blockquote> 19 <h2>create-vite@5.2.3</h2> 20 <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@5.2.3/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> 21 <h2>create-vite@5.2.2</h2> 22 <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@5.2.2/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> 23 <h2>create-vite@5.2.1</h2> 24 <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@5.2.1/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> 25 <h2>create-vite@5.2.0</h2> 26 <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@5.2.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> 27 <h2>create-vite@5.1.0</h2> 28 <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@5.1.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> 29 </blockquote> 30 </details> 31 <details> 32 <summary>Changelog</summary> 33 <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> 34 <blockquote> 35 <h2><!-- raw HTML omitted -->5.2.8 (2024-04-03)<!-- raw HTML omitted --></h2> 36 <ul> 37 <li>fix: csp nonce injection when no closing tag (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16281">#16281</a>) (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16282">#16282</a>) (<a href="https://github.com/vitejs/vite/commit/3c85c6b">3c85c6b</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16281">#16281</a> <a href="https://redirect.github.com/vitejs/vite/issues/16282">#16282</a></li> 38 <li>fix: do not access document in <code>/@vite/client</code> when not defined (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16318">#16318</a>) (<a href="https://github.com/vitejs/vite/commit/646319c">646319c</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16318">#16318</a></li> 39 <li>fix: fix sourcemap when using object as <code>define</code> value (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15805">#15805</a>) (<a href="https://github.com/vitejs/vite/commit/445c4f2">445c4f2</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/15805">#15805</a></li> 40 <li>fix(css): unknown file error happened with lightningcss (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16306">#16306</a>) (<a href="https://github.com/vitejs/vite/commit/01af308">01af308</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16306">#16306</a></li> 41 <li>fix(hmr): multiple updates happened when invalidate is called while multiple tabs open (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16307">#16307</a>) (<a href="https://github.com/vitejs/vite/commit/21cc10b">21cc10b</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16307">#16307</a></li> 42 <li>fix(scanner): duplicate modules for same id if glob is used in html-like types (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16305">#16305</a>) (<a href="https://github.com/vitejs/vite/commit/eca68fa">eca68fa</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16305">#16305</a></li> 43 <li>chore(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16325">#16325</a>) (<a href="https://github.com/vitejs/vite/commit/a78e265">a78e265</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16325">#16325</a></li> 44 <li>refactor: use types from sass instead of <code>@types/sass</code> (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16340">#16340</a>) (<a href="https://github.com/vitejs/vite/commit/4581e83">4581e83</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16340">#16340</a></li> 45 </ul> 46 <h2><!-- raw HTML omitted -->5.2.7 (2024-03-29)<!-- raw HTML omitted --></h2> 47 <ul> 48 <li>chore: deprecate splitVendorChunkPlugin (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16274">#16274</a>) (<a href="https://github.com/vitejs/vite/commit/45a06da">45a06da</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16274">#16274</a></li> 49 <li>fix: skip injecting <code>__vite__mapDeps</code> when it's not used (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16271">#16271</a>) (<a href="https://github.com/vitejs/vite/commit/890538a">890538a</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16271">#16271</a></li> 50 <li>fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16258">#16258</a>) (<a href="https://github.com/vitejs/vite/commit/7caef42">7caef42</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16258">#16258</a></li> 51 <li>fix(hmr): don't mutate module graph when collecting modules (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16302">#16302</a>) (<a href="https://github.com/vitejs/vite/commit/dfffea1">dfffea1</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16302">#16302</a></li> 52 <li>fix(hmr): trigger hmr for missing file import errored module after file creation (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16303">#16303</a>) (<a href="https://github.com/vitejs/vite/commit/ffedc06">ffedc06</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16303">#16303</a></li> 53 <li>fix(sourcemap): don't warn even if the sourcesContent is an empty string (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16273">#16273</a>) (<a href="https://github.com/vitejs/vite/commit/24e376a">24e376a</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16273">#16273</a></li> 54 <li>feat(hmr): reload when HTML file is created/deleted (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16288">#16288</a>) (<a href="https://github.com/vitejs/vite/commit/1f53796">1f53796</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16288">#16288</a></li> 55 </ul> 56 <h2><!-- raw HTML omitted -->5.2.6 (2024-03-24)<!-- raw HTML omitted --></h2> 57 <ul> 58 <li>fix: <code>fs.deny</code> with globs with directories (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16250">#16250</a>) (<a href="https://github.com/vitejs/vite/commit/ba5269c">ba5269c</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16250">#16250</a></li> 59 </ul> 60 <h2><!-- raw HTML omitted -->5.2.5 (2024-03-24)<!-- raw HTML omitted --></h2> 61 <ul> 62 <li>fix: avoid SSR requests in waitForRequestIdle (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16246">#16246</a>) (<a href="https://github.com/vitejs/vite/commit/7093f77">7093f77</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16246">#16246</a></li> 63 <li>docs: clarify enforce vs hook.order (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16226">#16226</a>) (<a href="https://github.com/vitejs/vite/commit/3a73e48">3a73e48</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16226">#16226</a></li> 64 </ul> 65 <h2><!-- raw HTML omitted -->5.2.4 (2024-03-23)<!-- raw HTML omitted --></h2> 66 <ul> 67 <li>fix: dont resolve imports with malformed URI (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16244">#16244</a>) (<a href="https://github.com/vitejs/vite/commit/fbf69d5">fbf69d5</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16244">#16244</a></li> 68 </ul> 69 <h2><!-- raw HTML omitted -->5.2.3 (2024-03-22)<!-- raw HTML omitted --></h2> 70 <ul> 71 <li>fix: handle warmup request error correctly (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16223">#16223</a>) (<a href="https://github.com/vitejs/vite/commit/d7c5256">d7c5256</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16223">#16223</a></li> 72 <li>fix: skip encode if is data uri (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16233">#16233</a>) (<a href="https://github.com/vitejs/vite/commit/8617e76">8617e76</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16233">#16233</a></li> 73 <li>fix(optimizer): fix <code>optimizeDeps.include</code> glob syntax for <code>./*</code> exports (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16230">#16230</a>) (<a href="https://github.com/vitejs/vite/commit/f184c80">f184c80</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16230">#16230</a></li> 74 <li>fix(runtime): fix sourcemap with <code>prepareStackTrace</code> (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16220">#16220</a>) (<a href="https://github.com/vitejs/vite/commit/dad7f4f">dad7f4f</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/16220">#16220</a></li> 75 </ul> 76 <!-- raw HTML omitted --> 77 </blockquote> 78 <p>... (truncated)</p> 79 </details> 80 <details> 81 <summary>Commits</summary> 82 <ul> 83 <li><a href="https://github.com/vitejs/vite/commit/8b8d4024fb07a96e7a6707dbdc1a08c40f397eb9"><code>8b8d402</code></a> release: v5.2.8</li> 84 <li><a href="https://github.com/vitejs/vite/commit/646319cc845f24a12ac5f8f6d176597a5bf66fd3"><code>646319c</code></a> fix: do not access document in <code>/@vite/client</code> when not defined (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16318">#16318</a>)</li> 85 <li><a href="https://github.com/vitejs/vite/commit/445c4f21583334edb37c7b32a1474903a0852b01"><code>445c4f2</code></a> fix: fix sourcemap when using object as <code>define</code> value (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/15805">#15805</a>)</li> 86 <li><a href="https://github.com/vitejs/vite/commit/a78e265822ebf06c5775c2083ee345e974488c6b"><code>a78e265</code></a> chore(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16325">#16325</a>)</li> 87 <li><a href="https://github.com/vitejs/vite/commit/4581e8371d0c2481e859f4496f928d1dcacd3a9d"><code>4581e83</code></a> refactor: use types from sass instead of <code>@types/sass</code> (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16340">#16340</a>)</li> 88 <li><a href="https://github.com/vitejs/vite/commit/3c85c6b52edbae22cf812e72680d210a644d9313"><code>3c85c6b</code></a> fix: csp nonce injection when no closing tag (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16281">#16281</a>) (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16282">#16282</a>)</li> 89 <li><a href="https://github.com/vitejs/vite/commit/21cc10bfda99a5818bfd709beff260e72b4b4ec5"><code>21cc10b</code></a> fix(hmr): multiple updates happened when invalidate is called while multiple ...</li> 90 <li><a href="https://github.com/vitejs/vite/commit/01af308dfd271df604a3fc9e9b3a9fcc2063e5d8"><code>01af308</code></a> fix(css): unknown file error happened with lightningcss (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/16306">#16306</a>)</li> 91 <li><a href="https://github.com/vitejs/vite/commit/eca68fa942818b69d08eae4dceaf46a330684a5e"><code>eca68fa</code></a> fix(scanner): duplicate modules for same id if glob is used in html-like type...</li> 92 <li><a href="https://github.com/vitejs/vite/commit/ad246da9897dc90b05ddc23ef96ae14ff490c7c9"><code>ad246da</code></a> release: v5.2.7</li> 93 <li>Additional commits viewable in <a href="https://github.com/vitejs/vite/commits/v5.2.8/packages/vite">compare view</a></li> 94 </ul> 95 </details> 96 <br /> 97 98 99 [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) 100 101 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. 102 103 [//]: # (dependabot-automerge-start) 104 [//]: # (dependabot-automerge-end) 105 106 --- 107 108 <details> 109 <summary>Dependabot commands and options</summary> 110 <br /> 111 112 You can trigger Dependabot actions by commenting on this PR: 113 - `@dependabot rebase` will rebase this PR 114 - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it 115 - `@dependabot merge` will merge this PR after your CI passes on it 116 - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it 117 - `@dependabot cancel merge` will cancel a previously requested merge and block automerging 118 - `@dependabot reopen` will reopen this PR if it is closed 119 - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually 120 - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency 121 - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) 122 - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) 123 - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) 124 - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency 125 - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions 126 You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/MTRNord/msc-viewer/network/alerts). 127 128 </details> 129