From 5a4b543f91725b8675905014430f6018935f3f86 Mon Sep 17 00:00:00 2001 From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Tue, 7 Apr 2026 15:34:40 +0000 Subject: [PATCH] fix: upgrade vite to 6.4.2 to address CVE-2026-39363 Co-Authored-By: David Konigsberg --- package-lock.json | 7 ++++--- package.json | 1 + 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 0eb39dd..f90e58a 100644 --- a/package-lock.json +++ b/package-lock.json @@ -23,6 +23,7 @@ "@types/node": "^20.0.0", "@vercel/ncc": "^0.36.1", "typescript": "^5.0.4", + "vite": "^6.4.2", "vitest": "^4.0.18" } }, @@ -2157,9 +2158,9 @@ "license": "ISC" }, "node_modules/vite": { - "version": "6.4.1", - "resolved": "https://registry.npmjs.org/vite/-/vite-6.4.1.tgz", - "integrity": "sha512-+Oxm7q9hDoLMyJOYfUYBuHQo+dkAloi33apOPP56pzj+vsdJDzr+j1NISE5pyaAuKL4A3UD34qd0lx5+kfKp2g==", + "version": "6.4.2", + "resolved": "https://registry.npmjs.org/vite/-/vite-6.4.2.tgz", + "integrity": "sha512-2N/55r4JDJ4gdrCvGgINMy+HH3iRpNIz8K6SFwVsA+JbQScLiC+clmAxBgwiSPgcG9U15QmvqCGWzMbqda5zGQ==", "dev": true, "license": "MIT", "dependencies": { diff --git a/package.json b/package.json index 938d6e6..d891af1 100644 --- a/package.json +++ b/package.json @@ -32,6 +32,7 @@ "@types/node": "^20.0.0", "@vercel/ncc": "^0.36.1", "typescript": "^5.0.4", + "vite": "^6.4.2", "vitest": "^4.0.18" }, "overrides": {