Skip to content

Fix vulnerabilities in npm dependencies#469

Merged
chrismayer merged 1 commit into
wegue-oss:masterfrom
chrismayer:fix-vulnerabilities
Dec 18, 2025
Merged

Fix vulnerabilities in npm dependencies#469
chrismayer merged 1 commit into
wegue-oss:masterfrom
chrismayer:fix-vulnerabilities

Conversation

@chrismayer
Copy link
Copy Markdown
Collaborator

This fixes the current vulnerabilities in the npm dependencies.

Copy link
Copy Markdown
Collaborator

@sronveaux sronveaux left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @chrismayer and thanks for the PR!

I just tested it and everything works as expected!

Just a simple comment, wouldn't it also be useful to change Vite version inside the package.json file?
This would mean replacing the "vite": "^7.1.9", line with "vite": "^7.3.0", to align with package-lock.json...

Someone doing npm i will arrive at the same result anyway, so I let you choose whether to do it or not. It is ready to merge from my point of view.

Please also know that I'll have two weeks off after tomorrow so I'm not sure I'll have time to review the other PRs you made with the other things I have to finish for that time...

Enjoy the end of the year and merry Christmas!

@chrismayer
Copy link
Copy Markdown
Collaborator Author

Thanks @sronveaux for your review. I like the idea of grading up explicitly to "vite": "^7.3.0", which I did by rebasing my original commit.

Going to merge now.

Merry Christmas to all 🎄

@chrismayer chrismayer merged commit 9291605 into wegue-oss:master Dec 18, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants