From 83d06d8b4ffac66ad5994be5c1533921d0c6152a Mon Sep 17 00:00:00 2001 From: Arshavir Ter-Gabrielyan Date: Tue, 7 Apr 2026 11:59:10 +0200 Subject: [PATCH 1/2] chore(deps): fix remaining high-priority Dependabot alerts MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Direct dependency bumps: - @playwright/test ^1.51.1 → ^1.55.1 (high, #118): SSL cert verification - vite 5.4.19 → 5.4.21 (medium, #120/#121; low, #105–#108): fs.deny bypass + fs settings pnpm overrides for transitive dependencies: - defu <6.1.5 → ^6.1.5 (high, #219): prototype pollution - vite >=6.0.0 <6.4.2 → 6.4.2 (high, #221; medium, #220/#222): arbitrary file read + path traversal Co-Authored-By: Claude Opus 4.6 --- package.json | 8 ++-- pnpm-lock.yaml | 116 +++++++++++++++++++++++++------------------------ 2 files changed, 64 insertions(+), 60 deletions(-) diff --git a/package.json b/package.json index 0b832de98..00c569952 100644 --- a/package.json +++ b/package.json @@ -46,7 +46,9 @@ "brace-expansion@^1": "1.1.13", "brace-expansion@^2": "2.0.3", "lodash@<4.18.0": "^4.18.1", - "axios@<1.8.2": "^1.8.2" + "axios@<1.8.2": "^1.8.2", + "defu@<6.1.5": "^6.1.5", + "vite@>=6.0.0 <6.4.2": "6.4.2" } }, "devDependencies": { @@ -56,7 +58,7 @@ "@nx/devkit": "19.8.3", "@nx/js": "19.8.3", "@nx/workspace": "19.8.3", - "@playwright/test": "^1.51.1", + "@playwright/test": "^1.55.1", "@types/node": "22.7.4", "@typescript-eslint/eslint-plugin": "8.23.0", "@typescript-eslint/parser": "8.23.0", @@ -70,7 +72,7 @@ "nx": "19.8.3", "prettier": "3.3.3", "typescript": "5.6.2", - "vite": "5.4.19", + "vite": "5.4.21", "vitest": "1.6.1", "vue-tsc": "2.1.6" } diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 52c65b0c8..fc069d60d 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -25,6 +25,8 @@ overrides: brace-expansion@^2: 2.0.3 lodash@<4.18.0: ^4.18.1 axios@<1.8.2: ^1.8.2 + defu@<6.1.5: ^6.1.5 + vite@>=6.0.0 <6.4.2: 6.4.2 importers: @@ -49,8 +51,8 @@ importers: specifier: 19.8.3 version: 19.8.3 '@playwright/test': - specifier: ^1.51.1 - version: 1.52.0 + specifier: ^1.55.1 + version: 1.59.1 '@types/node': specifier: 22.7.4 version: 22.7.4 @@ -91,8 +93,8 @@ importers: specifier: 5.6.2 version: 5.6.2 vite: - specifier: 5.4.19 - version: 5.4.19(@types/node@22.7.4)(lightningcss@1.29.1)(sass@1.77.1) + specifier: 5.4.21 + version: 5.4.21(@types/node@22.7.4)(lightningcss@1.29.1)(sass@1.77.1) vitest: specifier: 1.6.1 version: 1.6.1(@types/node@22.7.4)(jsdom@24.1.3)(lightningcss@1.29.1)(sass@1.77.1) @@ -107,7 +109,7 @@ importers: version: 0.5.16(tailwindcss@4.0.4) '@tailwindcss/vite': specifier: 4.0.4 - version: 4.0.4(vite@6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3)) + version: 4.0.4(vite@6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3)) astro: specifier: 5.18.1 version: 5.18.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(rollup@4.60.0)(sass@1.77.1)(typescript@5.6.2)(yaml@2.8.3) @@ -183,7 +185,7 @@ importers: version: 13.11.10 '@vitejs/plugin-vue': specifier: 5.2.1 - version: 5.2.1(vite@6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3))(vue@3.5.13(typescript@5.6.2)) + version: 5.2.1(vite@6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3))(vue@3.5.13(typescript@5.6.2)) '@vue/test-utils': specifier: 2.4.6 version: 2.4.6 @@ -201,10 +203,10 @@ importers: version: 1.77.1 vite-plugin-vuetify: specifier: 2.0.4 - version: 2.0.4(vite@6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3))(vue@3.5.13(typescript@5.6.2))(vuetify@3.5.18) + version: 2.0.4(vite@6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3))(vue@3.5.13(typescript@5.6.2))(vuetify@3.5.18) vite-plugin-wasm: specifier: 3.4.1 - version: 3.4.1(vite@6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3)) + version: 3.4.1(vite@6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3)) cli: devDependencies: @@ -2470,8 +2472,8 @@ packages: resolution: {integrity: sha512-cq8o4cWH0ibXh9VGi5P20Tu9XF/0fFXl9EUinr9QfTM7a7p0oTA4iJRCQWppXR1Pg8dSM0UCItCkPwsk9qWWYA==} engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0} - '@playwright/test@1.52.0': - resolution: {integrity: sha512-uh6W7sb55hl7D6vsAeA+V2p5JnlAqzhqFyF0VcJkKZXkgnFcVG9PziERRHQfPLfNGx1C292a4JqbWzhR8L4R1g==} + '@playwright/test@1.59.1': + resolution: {integrity: sha512-PG6q63nQg5c9rIi4/Z5lR5IVF7yU5MqmKaPOe0HSc0O2cX1fPi96sUQu5j7eo4gKCkB2AnNGoWt7y4/Xx3Kcqg==} engines: {node: '>=18'} hasBin: true @@ -2735,7 +2737,7 @@ packages: '@tailwindcss/vite@4.0.4': resolution: {integrity: sha512-zrWGbluPeXeoetUQoDFmt1dQIeiOBThfznla7zPIqST69rMmiDD4SZwJrHVoL5CvXz06AYQXz/M/jELSakL7Rg==} peerDependencies: - vite: ^5.2.0 || ^6 + vite: 6.4.2 '@tsconfig/node10@1.0.11': resolution: {integrity: sha512-DcRjDCujK/kCk/cUe8Xz8ZSpm8mS3mNNpta+jGCA6USEDfktlNvm1+IuZ9eTcDbNk41BHwpHHeW+N1lKCz4zOw==} @@ -2983,7 +2985,7 @@ packages: resolution: {integrity: sha512-cxh314tzaWwOLqVes2gnnCtvBDcM1UMdn+iFR+UjAn411dPT3tOmqrJjbMd7koZpMAmBM/GqeV4n9ge7JSiJJQ==} engines: {node: ^18.0.0 || >=20.0.0} peerDependencies: - vite: ^5.0.0 || ^6.0.0 + vite: 6.4.2 vue: ^3.2.25 '@vitest/coverage-v8@1.6.1': @@ -3809,8 +3811,8 @@ packages: resolution: {integrity: sha512-Ds09qNh8yw3khSjiJjiUInaGX9xlqZDY7JVryGxdxV7NPeuqQfplOpQ66yJFZut3jLa5zOwkXw1g9EI2uKh4Og==} engines: {node: '>=8'} - defu@6.1.4: - resolution: {integrity: sha512-mEQCMmwJu317oSz8CwdIOdwf3xMif1ttiM8LTufzc3g6kR+9Pe236twL8j3IYT1F7GfRgGcW6MWxzZjLIkuHIg==} + defu@6.1.7: + resolution: {integrity: sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ==} delaunator@5.0.1: resolution: {integrity: sha512-8nvh+XBe96aCESrGOqMp/84b13H9cdKbG5P2ejQCh4d4sK9RL4371qou9drQjMhvnPmhWl5hnmqbEE0fXr9Xnw==} @@ -5532,18 +5534,13 @@ packages: pkg-types@1.2.1: resolution: {integrity: sha512-sQoqa8alT3nHjGuTjuKgOnvjo4cljkufdtLMnO2LBP/wRwuDlo1tkaEdMxCRhyGRPacv/ztlZgDPm2b7FAmEvw==} - playwright-core@1.52.0: - resolution: {integrity: sha512-l2osTgLXSMeuLZOML9qYODUQoPPnUsKsb5/P6LJ2e6uPKXUdPK5WYhN4z03G+YNbWmGDY4YENauNu4ZKczreHg==} - engines: {node: '>=18'} - hasBin: true - playwright-core@1.55.1: resolution: {integrity: sha512-Z6Mh9mkwX+zxSlHqdr5AOcJnfp+xUWLCt9uKV18fhzA8eyxUd8NUWzAjxUh55RZKSYwDGX0cfaySdhZJGMoJ+w==} engines: {node: '>=18'} hasBin: true - playwright@1.52.0: - resolution: {integrity: sha512-JAwMNMBlxJ2oD1kce4KPtMkDeKGHQstdpFPcPH3maElAXon/QZeTvtsfXmTMRyO9TslfoYOXkSsvao2nE1ilTw==} + playwright-core@1.59.1: + resolution: {integrity: sha512-HBV/RJg81z5BiiZ9yPzIiClYV/QMsDCKUyogwH9p3MCP6IYjUFu/MActgYAvK0oWyV9NlwM3GLBjADyWgydVyg==} engines: {node: '>=18'} hasBin: true @@ -5552,6 +5549,11 @@ packages: engines: {node: '>=18'} hasBin: true + playwright@1.59.1: + resolution: {integrity: sha512-C8oWjPR3F81yljW9o5OxcWzfh6avkVwDD2VYdwIGqTkl+OGFISgypqzfu7dOe4QNLL2aqcWBmI3PMtLIK233lw==} + engines: {node: '>=18'} + hasBin: true + points-on-curve@0.2.0: resolution: {integrity: sha512-0mYKnYYe9ZcqMCWhUjItv/oHjvgEsfKvnUTg8sAtnHr3GVy7rGkXCb6d5cSyqrWqL4k81b9CPg3urd+T7aop3A==} @@ -6501,17 +6503,17 @@ packages: resolution: {integrity: sha512-A4cliYUoP/u4AWSRVRvAPKgpgR987Pss7LpFa7s1GvOe8WjgDq92Rt3eVXrvgxGCWvZsPKziVqfHHdCMqeDhfw==} engines: {node: ^18.0.0 || >=20.0.0} peerDependencies: - vite: '>=5' + vite: 6.4.2 vue: ^3.0.0 vuetify: ^3.0.0 vite-plugin-wasm@3.4.1: resolution: {integrity: sha512-ja3nSo2UCkVeitltJGkS3pfQHAanHv/DqGatdI39ja6McgABlpsZ5hVgl6wuR8Qx5etY3T5qgDQhOWzc5RReZA==} peerDependencies: - vite: ^2 || ^3 || ^4 || ^5 || ^6 + vite: 6.4.2 - vite@5.4.19: - resolution: {integrity: sha512-qO3aKv3HoQC8QKiNSTuUM1l9o/XX3+c+VTgLHbJWHZGeTPVAg2XwazI9UWzoxjIJCGCV2zU60uqMzjeLZuULqA==} + vite@5.4.21: + resolution: {integrity: sha512-o5a9xKjbtuhY6Bi5S3+HvbRERmouabWbyUcpXXUA1u+GNUKoROi9byOJ8M0nHbHYHkYICiMlqxkg1KkYmm25Sw==} engines: {node: ^18.0.0 || >=20.0.0} hasBin: true peerDependencies: @@ -6541,8 +6543,8 @@ packages: terser: optional: true - vite@6.4.1: - resolution: {integrity: sha512-+Oxm7q9hDoLMyJOYfUYBuHQo+dkAloi33apOPP56pzj+vsdJDzr+j1NISE5pyaAuKL4A3UD34qd0lx5+kfKp2g==} + vite@6.4.2: + resolution: {integrity: sha512-2N/55r4JDJ4gdrCvGgINMy+HH3iRpNIz8K6SFwVsA+JbQScLiC+clmAxBgwiSPgcG9U15QmvqCGWzMbqda5zGQ==} engines: {node: ^18.0.0 || ^20.0.0 || >=22.0.0} hasBin: true peerDependencies: @@ -6584,7 +6586,7 @@ packages: vitefu@1.1.2: resolution: {integrity: sha512-zpKATdUbzbsycPFBN71nS2uzBUQiVnFoOrr2rvqv34S1lcAgMKKkjWleLGeiJlZ8lwCXvtWaRn7R3ZC16SYRuw==} peerDependencies: - vite: ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-beta.0 + vite: 6.4.2 peerDependenciesMeta: vite: optional: true @@ -9212,13 +9214,13 @@ snapshots: '@pkgr/core@0.1.1': {} - '@playwright/test@1.52.0': + '@playwright/test@1.59.1': dependencies: - playwright: 1.52.0 + playwright: 1.59.1 '@rollup/pluginutils@5.3.0(rollup@4.60.0)': dependencies: - '@types/estree': 1.0.7 + '@types/estree': 1.0.8 estree-walker: 2.0.2 picomatch: 4.0.4 optionalDependencies: @@ -9430,13 +9432,13 @@ snapshots: postcss-selector-parser: 6.0.10 tailwindcss: 4.0.4 - '@tailwindcss/vite@4.0.4(vite@6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3))': + '@tailwindcss/vite@4.0.4(vite@6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3))': dependencies: '@tailwindcss/node': 4.0.4 '@tailwindcss/oxide': 4.0.4 lightningcss: 1.29.1 tailwindcss: 4.0.4 - vite: 6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3) + vite: 6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3) '@tsconfig/node10@1.0.11': {} @@ -9725,9 +9727,9 @@ snapshots: '@ungap/structured-clone@1.2.0': {} - '@vitejs/plugin-vue@5.2.1(vite@6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3))(vue@3.5.13(typescript@5.6.2))': + '@vitejs/plugin-vue@5.2.1(vite@6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3))(vue@3.5.13(typescript@5.6.2))': dependencies: - vite: 6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3) + vite: 6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3) vue: 3.5.13(typescript@5.6.2) '@vitest/coverage-v8@1.6.1(vitest@1.6.1(@types/node@22.7.4)(jsdom@24.1.3)(lightningcss@1.29.1)(sass@1.77.1))': @@ -10045,8 +10047,8 @@ snapshots: unist-util-visit: 5.0.0 unstorage: 1.17.5 vfile: 6.0.3 - vite: 6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3) - vitefu: 1.1.2(vite@6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3)) + vite: 6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3) + vitefu: 1.1.2(vite@6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3)) xxhash-wasm: 1.1.0 yargs-parser: 21.1.1 yocto-spinner: 0.2.3 @@ -10752,7 +10754,7 @@ snapshots: define-lazy-prop@2.0.0: {} - defu@6.1.4: {} + defu@6.1.7: {} delaunator@5.0.1: dependencies: @@ -11208,7 +11210,7 @@ snapshots: estree-walker@3.0.3: dependencies: - '@types/estree': 1.0.6 + '@types/estree': 1.0.8 esutils@2.0.3: {} @@ -11427,7 +11429,7 @@ snapshots: dependencies: cookie-es: 1.2.2 crossws: 0.3.5 - defu: 6.1.4 + defu: 6.1.7 destr: 2.0.5 iron-webcrypto: 1.2.1 node-mock-http: 1.0.4 @@ -13080,19 +13082,19 @@ snapshots: mlly: 1.7.3 pathe: 1.1.2 - playwright-core@1.52.0: {} - playwright-core@1.55.1: {} - playwright@1.52.0: + playwright-core@1.59.1: {} + + playwright@1.55.1: dependencies: - playwright-core: 1.52.0 + playwright-core: 1.55.1 optionalDependencies: fsevents: 2.3.2 - playwright@1.55.1: + playwright@1.59.1: dependencies: - playwright-core: 1.55.1 + playwright-core: 1.59.1 optionalDependencies: fsevents: 2.3.2 @@ -14172,7 +14174,7 @@ snapshots: debug: 4.4.0 pathe: 1.1.2 picocolors: 1.1.1 - vite: 5.4.19(@types/node@22.7.4)(lightningcss@1.29.1)(sass@1.77.1) + vite: 5.4.21(@types/node@22.7.4)(lightningcss@1.29.1)(sass@1.77.1) transitivePeerDependencies: - '@types/node' - less @@ -14184,22 +14186,22 @@ snapshots: - supports-color - terser - vite-plugin-vuetify@2.0.4(vite@6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3))(vue@3.5.13(typescript@5.6.2))(vuetify@3.5.18): + vite-plugin-vuetify@2.0.4(vite@6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3))(vue@3.5.13(typescript@5.6.2))(vuetify@3.5.18): dependencies: '@vuetify/loader-shared': 2.1.0(vue@3.5.13(typescript@5.6.2))(vuetify@3.5.18) debug: 4.4.0 upath: 2.0.1 - vite: 6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3) + vite: 6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3) vue: 3.5.13(typescript@5.6.2) vuetify: 3.5.18(typescript@5.6.2)(vite-plugin-vuetify@2.0.4)(vue-i18n@9.14.3(vue@3.5.13(typescript@5.6.2)))(vue@3.5.13(typescript@5.6.2)) transitivePeerDependencies: - supports-color - vite-plugin-wasm@3.4.1(vite@6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3)): + vite-plugin-wasm@3.4.1(vite@6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3)): dependencies: - vite: 6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3) + vite: 6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3) - vite@5.4.19(@types/node@22.7.4)(lightningcss@1.29.1)(sass@1.77.1): + vite@5.4.21(@types/node@22.7.4)(lightningcss@1.29.1)(sass@1.77.1): dependencies: esbuild: 0.21.5 postcss: 8.5.3 @@ -14210,7 +14212,7 @@ snapshots: lightningcss: 1.29.1 sass: 1.77.1 - vite@6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3): + vite@6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3): dependencies: esbuild: 0.25.12 fdir: 6.5.0(picomatch@4.0.4) @@ -14226,9 +14228,9 @@ snapshots: sass: 1.77.1 yaml: 2.8.3 - vitefu@1.1.2(vite@6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3)): + vitefu@1.1.2(vite@6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3)): optionalDependencies: - vite: 6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3) + vite: 6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3) vitest@1.6.1(@types/node@22.7.4)(jsdom@24.1.3)(lightningcss@1.29.1)(sass@1.77.1): dependencies: @@ -14249,7 +14251,7 @@ snapshots: strip-literal: 2.1.1 tinybench: 2.9.0 tinypool: 0.8.4 - vite: 5.4.19(@types/node@22.7.4)(lightningcss@1.29.1)(sass@1.77.1) + vite: 5.4.21(@types/node@22.7.4)(lightningcss@1.29.1)(sass@1.77.1) vite-node: 1.6.1(@types/node@22.7.4)(lightningcss@1.29.1)(sass@1.77.1) why-is-node-running: 2.3.0 optionalDependencies: @@ -14339,7 +14341,7 @@ snapshots: vue: 3.5.13(typescript@5.6.2) optionalDependencies: typescript: 5.6.2 - vite-plugin-vuetify: 2.0.4(vite@6.4.1(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3))(vue@3.5.13(typescript@5.6.2))(vuetify@3.5.18) + vite-plugin-vuetify: 2.0.4(vite@6.4.2(@types/node@22.7.4)(jiti@2.4.2)(lightningcss@1.29.1)(sass@1.77.1)(yaml@2.8.3))(vue@3.5.13(typescript@5.6.2))(vuetify@3.5.18) vue-i18n: 9.14.3(vue@3.5.13(typescript@5.6.2)) w3c-xmlserializer@5.0.0: From 4fd3302befe424918c2ba7c3d7e7ea105aa21411 Mon Sep 17 00:00:00 2001 From: Arshavir Ter-Gabrielyan Date: Tue, 7 Apr 2026 14:36:31 +0200 Subject: [PATCH 2/2] chore(deps): use caret range in vite 6.x pnpm override Change the vite override target from exact "6.4.2" to "^6.4.2" so that pnpm records a caret range (^6.4.2) in lockfile peerDependencies rather than an exact pin. This is still narrower than the original published ranges (a known pnpm override side-effect) but allows future patch versions without lockfile churn. Co-Authored-By: Claude Opus 4.6 --- package.json | 2 +- pnpm-lock.yaml | 12 ++++++------ 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/package.json b/package.json index 00c569952..893e0415c 100644 --- a/package.json +++ b/package.json @@ -48,7 +48,7 @@ "lodash@<4.18.0": "^4.18.1", "axios@<1.8.2": "^1.8.2", "defu@<6.1.5": "^6.1.5", - "vite@>=6.0.0 <6.4.2": "6.4.2" + "vite@>=6.0.0 <6.4.2": "^6.4.2" } }, "devDependencies": { diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index fc069d60d..241d136c8 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -26,7 +26,7 @@ overrides: lodash@<4.18.0: ^4.18.1 axios@<1.8.2: ^1.8.2 defu@<6.1.5: ^6.1.5 - vite@>=6.0.0 <6.4.2: 6.4.2 + vite@>=6.0.0 <6.4.2: ^6.4.2 importers: @@ -2737,7 +2737,7 @@ packages: '@tailwindcss/vite@4.0.4': resolution: {integrity: sha512-zrWGbluPeXeoetUQoDFmt1dQIeiOBThfznla7zPIqST69rMmiDD4SZwJrHVoL5CvXz06AYQXz/M/jELSakL7Rg==} peerDependencies: - vite: 6.4.2 + vite: ^6.4.2 '@tsconfig/node10@1.0.11': resolution: {integrity: sha512-DcRjDCujK/kCk/cUe8Xz8ZSpm8mS3mNNpta+jGCA6USEDfktlNvm1+IuZ9eTcDbNk41BHwpHHeW+N1lKCz4zOw==} @@ -2985,7 +2985,7 @@ packages: resolution: {integrity: sha512-cxh314tzaWwOLqVes2gnnCtvBDcM1UMdn+iFR+UjAn411dPT3tOmqrJjbMd7koZpMAmBM/GqeV4n9ge7JSiJJQ==} engines: {node: ^18.0.0 || >=20.0.0} peerDependencies: - vite: 6.4.2 + vite: ^6.4.2 vue: ^3.2.25 '@vitest/coverage-v8@1.6.1': @@ -6503,14 +6503,14 @@ packages: resolution: {integrity: sha512-A4cliYUoP/u4AWSRVRvAPKgpgR987Pss7LpFa7s1GvOe8WjgDq92Rt3eVXrvgxGCWvZsPKziVqfHHdCMqeDhfw==} engines: {node: ^18.0.0 || >=20.0.0} peerDependencies: - vite: 6.4.2 + vite: ^6.4.2 vue: ^3.0.0 vuetify: ^3.0.0 vite-plugin-wasm@3.4.1: resolution: {integrity: sha512-ja3nSo2UCkVeitltJGkS3pfQHAanHv/DqGatdI39ja6McgABlpsZ5hVgl6wuR8Qx5etY3T5qgDQhOWzc5RReZA==} peerDependencies: - vite: 6.4.2 + vite: ^6.4.2 vite@5.4.21: resolution: {integrity: sha512-o5a9xKjbtuhY6Bi5S3+HvbRERmouabWbyUcpXXUA1u+GNUKoROi9byOJ8M0nHbHYHkYICiMlqxkg1KkYmm25Sw==} @@ -6586,7 +6586,7 @@ packages: vitefu@1.1.2: resolution: {integrity: sha512-zpKATdUbzbsycPFBN71nS2uzBUQiVnFoOrr2rvqv34S1lcAgMKKkjWleLGeiJlZ8lwCXvtWaRn7R3ZC16SYRuw==} peerDependencies: - vite: 6.4.2 + vite: ^6.4.2 peerDependenciesMeta: vite: optional: true