chore(deps): update dependency vite to v5.4.8 #14

renovate · 2024-05-05T11:16:01Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
vite (source)	`5.0.8` -> `5.4.8`

Release Notes

vitejs/vite (vite)

`v5.4.8`

Compare Source

Please refer to CHANGELOG.md for details.

`v5.4.7`

Compare Source

Please refer to CHANGELOG.md for details.

`v5.4.6`

Compare Source

Please refer to CHANGELOG.md for details.

`v5.4.5`

Compare Source

Please refer to CHANGELOG.md for details.

`v5.4.4`

Compare Source

Please refer to CHANGELOG.md for details.

`v5.4.3`

Compare Source

fix: allow getting URL of JS files in publicDir (#17915) (943ece1), closes #17915
fix: cjs warning respect the logLevel flag (#17993) (dc3c14f), closes #17993
fix: improve CJS warning trace information (#17926) (5c5f82c), closes #17926
fix: only remove entry assets handled by Vite core (#17916) (ebfaa7e), closes #17916
fix: waitForRequestIdle locked (#17982) (ad13760), closes #17982
fix(css): fix directory index import in sass modern api (#17960) (9b001ba), closes #17960
fix(css): fix sass file:// reference (#17909) (561b940), closes #17909
fix(css): fix sass modern source map (#17938) (d428e7e), closes #17938
fix(deps): bump tsconfck (#17990) (8c661b2), closes #17990
fix(html): rewrite assets url in (#17988) (413c86a), closes #17988
fix(preload): add crossorigin attribute in CSS link tags (#17930) (15871c7), closes #17930
chore: reduce diffs with v6 branch (#17942) (bf9065a), closes #17942
chore(deps): update all non-major dependencies (#17945) (cfb621e), closes #17945
chore(deps): update all non-major dependencies (#17991) (0ca53cf), closes #17991

`v5.4.2`

Compare Source

chore: remove stale TODOs (#17866) (e012f29), closes #17866
refactor: remove redundant prepend/strip base (#17887) (3b8f03d), closes #17887
fix: resolve relative URL generated by renderBuiltUrl passed to module preload (#16084) (fac3a8e), closes #16084
feat: support originalFilename (#17867) (7d8c0e2), closes #17867

`v5.4.1`

Compare Source

fix: build.modulePreload.resolveDependencies is optimizable (#16083) (e961b31), closes #16083
fix: align CorsOptions.origin type with @types/cors (#17836) (1bda847), closes #17836
fix: typings for vite:preloadError (#17868) (6700594), closes #17868
fix(build): avoid re-define __vite_import_meta_env__ (#17876) (e686d74), closes #17876
fix(deps): update all non-major dependencies (#17869) (d11711c), closes #17869
fix(lightningcss): search for assets with correct base path (#17856) (4e5ce3c), closes #17856
fix(worker): handle self reference url worker in dependency for build (#17846) (391bb49), closes #17846
chore: fix picocolors import for local dev (#17884) (9018255), closes #17884
refactor: remove handleHotUpdate from watch-package-data plugin (#17865) (e16bf1f), closes #17865

`v5.4.0`

Compare Source

fix(build): windows platform build output path error (#17818) (6ae0615), closes #17818
fix(deps): update launch-editor to consume fix for windows paths (#17828) (cf2f90d), closes #17828
fix(ssr): fix global variable name conflict (#17809) (6aa2206), closes #17809
fix(worker): fix importScripts injection breaking iife code (#17827) (bb4ba9f), closes #17827
chore: bump typescript-eslint to v8 (#17624) (d1891fd), closes #17624
chore(deps): update all non-major dependencies (#17820) (bb2f8bb), closes #17820
perf(ssr): do a single-pass over AST with node cache arrays (#17812) (81327eb), closes #17812

`v5.3.6`

Compare Source

Please refer to CHANGELOG.md for details.

`v5.3.5`

Compare Source

refactor(asset): remove rollup 3 public file watch workaround (#16331) (66bdb1d), closes #16331
fix: make server type less restrictive (fix #17627) (#17628) (b55c32f), closes #17627 #17628
fix: show error if vite client cannot be loaded (#17419) (db5ab1d), closes #17419
fix(build): env output is not stable (#17748) (b240a83), closes #17748
fix(client): fix vite error path (#17744) (3c1bde3), closes #17744
fix(css): resolve url aliases with fragments (fix: #17690) (#17691) (d906d3f)
fix(deps): update all non-major dependencies (#17629) (93281b0), closes #17629
fix(importMetaGlob): handle alias that starts with hash (#17743) (b58b423), closes #17743
fix(ssrTransform): sourcemaps with multiple sources (#17677) (f321fa8), closes #17677
chore: extend commit hash (#17709) (4fc9b64), closes #17709
chore(deps): update all non-major dependencies (#17734) (9983731), closes #17734
chore(deps): update typescript (#17699) (df5ceb3), closes #17699
revert: fix(logger): truncate log over 5000 characters long (#16581) (#17729) (f4f488f), closes #16581 #17729

`v5.3.4`

Compare Source

fix: update Terser type definitions (fix #17668) (#17669) (b723a75), closes #17668 #17669
fix(build): skip preload treeshaking for nested braces (#17687) (4be96b4), closes #17687
fix(css): include .css?url in assets field of manifest (#17623) (1465b20), closes #17623
fix(worker): nested inlined worker always fallbacked to data URI worker instead of using blob worker (07bc489), closes #17509
refactor: replace includes with logical operations (#17620) (c4a2227), closes #17620
chore: add callback to http-proxy.d.ts jsdoc (#17646) (d8a5d70), closes #17646

`v5.3.3`

Compare Source

fix: lazily evaluate __vite__mapDeps files (#17602) (dafff4a), closes #17602
fix(deps): update all non-major dependencies (#17590) (012490c), closes #17590
fix(lib): remove pure CSS dynamic import (#17601) (055f1c1), closes #17601
fix(proxy): replace changeOrigin changes in 5.3.0 with new rewriteWsOrigin option (#17563) (14c3d49), closes #17563

`v5.3.2`

Compare Source

fix(client): uniform variable location (#17528) (a8e2f6f), closes #17528
fix(deps): update all non-major dependencies (#17494) (bf123f2), closes #17494
fix(typescript): correctly expand ${configDir} in tsconfig.json (#17576) (24c799b), closes #17576
chore: fix some comments (#17495) (ec16a5e), closes #17495
chore(deps): update all non-major dependencies (#17553) (a33a97f), closes #17553
chore(deps): update dependency eslint to v9 (#16661) (6c10662), closes #16661
chore(deps): update es-module-lexer to 1.5.4 (#17555) (2d6672f), closes #17555
refactor(optimizer): use early continues (#17551) (7c06ef0), closes #17551

`v5.3.1`

Compare Source

fix(build): handle preload treeshaking for braces (#17479) (d355568), closes #17479
fix(build): handle preload treeshaking for commas (#17472) (3e27071), closes #17472
fix(build): preload treeshaking ignore equal (#17480) (6ced135), closes #17480
chore: consolidate changelog for 5.3 (#17476) (1f09344), closes #17476

`v5.3.0`

Compare Source

fix: typo in client log (#17363) (68aa9f8), closes #17363
fix(ssrTransform): handle arbitrary module namespace identifiers (#17446) (0a76652), closes #17446
test: disable isolate for unit test (#17448) (f16fae5), closes #17448
feat: asset type add bmp (#17439) (ec287f8), closes #17439

`v5.2.14`

Compare Source

Please refer to CHANGELOG.md for details.

`v5.2.13`

Compare Source

Please refer to CHANGELOG.md for details.

`v5.2.12`

Compare Source

chore: move to eslint flat config (#16743) (8f16765), closes #16743
chore(deps): remove unused deps (#17329) (5a45745), closes #17329
chore(deps): update all non-major dependencies (#16722) (b45922a), closes #16722
fix: mention build.rollupOptions.output.manualChunks instead of build.rollupOutput.manualChunks (89378c0), closes #16721
fix(build): make SystemJSWrapRE match lazy (#16633) (6583ad2), closes #16633
fix(css): avoid generating empty JS files when JS files becomes empty but has CSS files imported (#1 (95fe5a7), closes #16078
fix(css): handle lightningcss compiled css in Deno (#17301) (8e4e932), closes #17301
fix(css): only use files the current bundle contains (#16684) (15a6ebb), closes #16684
fix(css): page reload was not happening with .css?raw (#16455) (8041846), closes #16455
fix(deps): update all non-major dependencies (#16603) (6711553), closes #16603
fix(deps): update all non-major dependencies (#16660) (bf2f014), closes #16660
fix(deps): update all non-major dependencies (#17321) (4a89766), closes #17321
fix(error-logging): rollup errors weren't displaying id and codeframe (#16540) (22dc196), closes #16540
fix(hmr): normalize the path info (#14255) (6a085d0), closes #14255
fix(hmr): trigger page reload when calling invalidate on root module (#16636) (2b61cc3), closes #16636
fix(logger): truncate log over 5000 characters long (#16581) (b0b839a), closes #16581
fix(optimizer): log dependencies added by plugins (#16729) (f0fb987), closes #16729
fix(sourcemap): improve sourcemap compatibility for vue2 (#16594) (913c040), closes #16594
docs: correct proxy shorthand example (#15938) (abf766e), closes #15938
docs: deprecate server.hot (#16741) (e7d38ab), closes #16741

`v5.2.11`

Compare Source

feat: improve dynamic import variable failure error message (#16519) (f8feeea), closes #16519
fix: dynamic-import-vars plugin normalize path issue (#16518) (f71ba5b), closes #16518
fix: scripts and styles were missing from built HTML on Windows (#16421) (0e93f58), closes #16421
fix(deps): update all non-major dependencies (#16488) (2d50be2), closes #16488
fix(deps): update all non-major dependencies (#16549) (2d6a13b), closes #16549
fix(dev): watch publicDir explicitly to include it outside the root (#16502) (4d83eb5), closes #16502
fix(preload): skip preload for non-static urls (#16556) (bb79c9b), closes #16556
fix(ssr): handle class declaration and expression name scoping (#16569) (c071eb3), closes #16569
fix(ssr): handle function expression name scoping (#16563) (02db947), closes #16563

`v5.2.10`

Compare Source

revert: perf: use workspace root for fs cache (#15712) (#16476) (77e7359), closes #15712 #16476
fix: add base to virtual html (#16442) (721f94d), closes #16442
fix: adjust esm syntax judgment logic (#16436) (af72eab), closes #16436
fix: don't add outDirs to watch.ignored if emptyOutDir is false (#16453) (6a127d6), closes #16453
fix(cspNonce): don't overwrite existing nonce values (#16415) (b872635), closes #16415
feat: show warning if root is in build.outDir (#16454) (11444dc), closes #16454
feat: write cspNonce to style tags (#16419) (8e54bbd), closes #16419
chore(deps): update dependency eslint-plugin-n to v17 (#16381) (6cccef7), closes #16381

`v5.2.9`

Compare Source

fix: fsp.rm removing files does not take effect (#16032) (b05c405), closes #16032
fix: fix accumulated stacks in error overlay (#16393) (102c2fd), closes #16393
fix(deps): update all non-major dependencies (#16376) (58a2938), closes #16376
chore: update region comment (#16380) (77562c3), closes #16380
perf: reduce size of injected __vite__mapDeps code (#16184) (c0ec6be), closes #16184
perf(css): only replace empty chunk if imported (#16349) (e2658ad), closes #16349

`v5.2.8`

Compare Source

fix: csp nonce injection when no closing tag (#16281) (#16282) (3c85c6b), closes #16281 #16282
fix: do not access document in /@vite/client when not defined (#16318) (646319c), closes #16318
fix: fix sourcemap when using object as define value (#15805) (445c4f2), closes #15805
fix(css): unknown file error happened with lightningcss (#16306) (01af308), closes #16306
fix(hmr): multiple updates happened when invalidate is called while multiple tabs open (#16307) (21cc10b), closes #16307
fix(scanner): duplicate modules for same id if glob is used in html-like types (#16305) (eca68fa), closes #16305
chore(deps): update all non-major dependencies (#16325) (a78e265), closes #16325
refactor: use types from sass instead of @types/sass (#16340) (4581e83), closes #16340

`v5.2.7`

Compare Source

chore: deprecate splitVendorChunkPlugin (#16274) (45a06da), closes #16274
fix: skip injecting __vite__mapDeps when it's not used (#16271) (890538a), closes #16271
fix(deps): update all non-major dependencies (#16258) (7caef42), closes #16258
fix(hmr): don't mutate module graph when collecting modules (#16302) (dfffea1), closes #16302
fix(hmr): trigger hmr for missing file import errored module after file creation (#16303) (ffedc06), closes #16303
fix(sourcemap): don't warn even if the sourcesContent is an empty string (#16273) (24e376a), closes #16273
feat(hmr): reload when HTML file is created/deleted (#16288) (1f53796), closes #16288

`v5.2.6`

Compare Source

fix: fs.deny with globs with directories (#16250) (ba5269c), closes #16250

`v5.2.5`

Compare Source

fix: avoid SSR requests in waitForRequestIdle (#16246) (7093f77), closes #16246
docs: clarify enforce vs hook.order (#16226) (3a73e48), closes #16226

`v5.2.4`

Compare Source

fix: dont resolve imports with malformed URI (#16244) (fbf69d5), closes #16244

`v5.2.3`

Compare Source

fix: handle warmup request error correctly (#16223) (d7c5256), closes #16223
fix: skip encode if is data uri (#16233) (8617e76), closes #16233
fix(optimizer): fix optimizeDeps.include glob syntax for ./* exports (#16230) (f184c80), closes #16230
fix(runtime): fix sourcemap with prepareStackTrace (#16220) (dad7f4f), closes #16220
chore: utf8 replaced with utf-8 (#16232) (9800c73), closes #16232

`v5.2.2`

Compare Source

fix(importAnalysis): skip encode in ssr (#16213) (e4d2d60), closes #16213

`v5.2.1`

Compare Source

fix: encode path uri only (#16212) (0b2e40b), closes #16212

`v5.2.0`

Compare Source

fix: update client.ts@cleanUrl to accomodate blob protocol (#16182) (1a3b1d7), closes #16182
fix(assets): avoid splitting , inside query parameter of image URI in srcset property (#16081) (50caf67), closes #16081
chore(deps): update all non-major dependencies (#16186) (842643d), closes #16186
perf(transformRequest): fast-path watch and sourcemap handling (#16170) (de60f1e), closes #16170
docs: add @shikiji/vitepress-twoslash (#16168) (6f8a320), closes #16168

`v5.1.8`

Compare Source

Please refer to CHANGELOG.md for details.

`v5.1.7`

Compare Source

Please refer to CHANGELOG.md for details.

`v5.1.6`

Compare Source

chore(deps): update all non-major dependencies (#16131) (a862ecb), closes #16131
fix: check for publicDir before checking if it is a parent directory (#16046) (b6fb323), closes #16046
fix: escape single quote when relative base is used (#16060) (8f74ce4), closes #16060
fix: handle function property extension in namespace import (#16113) (f699194), closes #16113
fix: server middleware mode resolve (#16122) (8403546), closes #16122
fix(esbuild): update tsconfck to fix bug that could cause a deadlock (#16124) (fd9de04), closes #16124
fix(worker): hide "The emitted file overwrites" warning if the content is same (#16094) (60dfa9e), closes #16094
fix(worker): throw error when circular worker import is detected and support self referencing worker (eef9da1), closes #16103
style(utils): remove null check (#16112) (0d2df52), closes #16112
refactor(runtime): share more code between runtime and main bundle (#16063) (93be84e), closes #16063

`v5.1.5`

Compare Source

fix: __vite__mapDeps code injection (#15732) (aff54e1), closes #15732
fix: analysing build chunk without dependencies (#15469) (bd52283), closes #15469
fix: import with query with imports field (#16085) (ab823ab), closes #16085
fix: normalize literal-only entry pattern (#16010) (1dccc37), closes #16010
fix: optimizeDeps.entries with literal-only pattern(s) (#15853) (49300b3), closes #15853
fix: output correct error for empty import specifier (#16055) (a9112eb), closes #16055
fix: upgrade esbuild to 0.20.x (#16062) (899d9b1), closes #16062
fix(runtime): runtime HMR affects only imported files (#15898) (57463fc), closes #15898
fix(scanner): respect experimentalDecorators: true (#15206) (4144781), closes #15206
revert: "fix: upgrade esbuild to 0.20.x" (#16072) (11cceea), closes #16072
refactor: share code with vite runtime (#15907) (b20d542), closes #15907
refactor(runtime): use functions from pathe (#16061) (aac2ef7), closes #16061
chore(deps): update all non-major dependencies (#16028) (7cfe80d), closes #16028

`v5.1.4`

Compare Source

perf: remove unnecessary regex s modifier (#15766) (8dc1b73), closes #15766
fix: fs cached checks disabled by default for yarn pnp (#15920) (8b11fea), closes #15920
fix: resolve directory correctly when fs.cachedChecks: true (#15983) (4fe971f), closes #15983
fix: srcSet with optional descriptor (#15905) (81b3bd0), closes #15905
fix(deps): update all non-major dependencies (#15959) (571a3fd), closes #15959
fix(watch): build watch fails when outDir is empty string (#15979) (1d263d3), closes #15979

[`v5.1.3`](https://redirect.github.com/vitejs/vite/blob/HEA

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

secure-code-warrior-for-github · 2024-05-05T11:16:05Z

Micro-Learning Topic: Code injection (Detected by phrase)

Matched on "code injection"

What is this? (2min video)

Code injection happens when an application insecurely accepts input that is subsequently used in a dynamic code evaluation call. If insufficient validation or sanitisation is performed on the input, specially crafted inputs may be able to alter the syntax of the evaluated code and thus alter execution. In a worst case scenario, an attacker could run arbitrary code in the server context and thus perform almost any action on the application server.

Try a challenge in Secure Code Warrior

Helpful references

OWASP Command Injection - OWASP community page with comprehensive information about Code Injection, and links to various OWASP resources to help detect or prevent it.
SEI CERT Oracle Coding Standard for Java - Prevent Code Injection - Carnegie Mellon University Software Engineering Institute guidance on preventing code injection vulnerabilities in Java.

chore(deps): update dependency vite to v5.2.11

bd179c8

renovate bot changed the title ~~chore(deps): update dependency vite to v5.2.11~~ chore(deps): update dependency vite to v5.2.12 May 28, 2024

renovate bot changed the title ~~chore(deps): update dependency vite to v5.2.12~~ chore(deps): update dependency vite to v5.2.13 Jun 8, 2024

renovate bot changed the title ~~chore(deps): update dependency vite to v5.2.13~~ chore(deps): update dependency vite to v5.3.0 Jun 14, 2024

renovate bot changed the title ~~chore(deps): update dependency vite to v5.3.0~~ chore(deps): update dependency vite to v5.3.1 Jun 15, 2024

renovate bot changed the title ~~chore(deps): update dependency vite to v5.3.1~~ chore(deps): update dependency vite to v5.3.2 Jun 28, 2024

renovate bot changed the title ~~chore(deps): update dependency vite to v5.3.2~~ chore(deps): update dependency vite to v5.3.3 Jul 4, 2024

renovate bot changed the title ~~chore(deps): update dependency vite to v5.3.3~~ chore(deps): update dependency vite to v5.3.4 Jul 17, 2024

renovate bot changed the title ~~chore(deps): update dependency vite to v5.3.4~~ chore(deps): update dependency vite to v5.3.5 Jul 25, 2024

renovate bot changed the title ~~chore(deps): update dependency vite to v5.3.5~~ chore(deps): update dependency vite to v5.4.0 Aug 11, 2024

renovate bot changed the title ~~chore(deps): update dependency vite to v5.4.0~~ chore(deps): update dependency vite to v5.4.1 Aug 15, 2024

renovate bot changed the title ~~chore(deps): update dependency vite to v5.4.1~~ chore(deps): update dependency vite to v5.4.2 Aug 22, 2024

renovate bot changed the title ~~chore(deps): update dependency vite to v5.4.2~~ chore(deps): update dependency vite to v5.4.3 Sep 5, 2024

renovate bot changed the title ~~chore(deps): update dependency vite to v5.4.3~~ chore(deps): update dependency vite to v5.4.4 Sep 11, 2024

renovate bot changed the title ~~chore(deps): update dependency vite to v5.4.4~~ chore(deps): update dependency vite to v5.4.5 Sep 14, 2024

renovate bot changed the title ~~chore(deps): update dependency vite to v5.4.5~~ chore(deps): update dependency vite to v5.4.6 Sep 17, 2024

renovate bot changed the title ~~chore(deps): update dependency vite to v5.4.6~~ chore(deps): update dependency vite to v5.4.7 Sep 21, 2024

renovate bot changed the title ~~chore(deps): update dependency vite to v5.4.7~~ chore(deps): update dependency vite to v5.4.8 Sep 26, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update dependency vite to v5.4.8 #14

chore(deps): update dependency vite to v5.4.8 #14

renovate bot commented May 5, 2024 •

edited

Loading

secure-code-warrior-for-github bot commented May 5, 2024

chore(deps): update dependency vite to v5.4.8 #14

Are you sure you want to change the base?

chore(deps): update dependency vite to v5.4.8 #14

Conversation

renovate bot commented May 5, 2024 • edited Loading

Release Notes

[v5.1.3](https://redirect.github.com/vitejs/vite/blob/HEA

Configuration

secure-code-warrior-for-github bot commented May 5, 2024

Micro-Learning Topic: Code injection (Detected by phrase)

Matched on "code injection"

renovate bot commented May 5, 2024 •

edited

Loading

[`v5.1.3`](https://redirect.github.com/vitejs/vite/blob/HEA