fix: patch vite version to resolve CVE-2024-31207 fixes #8

This commit is contained in:
zs-ko
2024-06-05 09:59:33 +00:00
parent bad962ffd7
commit 9e37ad9cb9
2 changed files with 8 additions and 41 deletions

View File

@@ -148,6 +148,7 @@
"pnpm": {
"overrides": {
"vite@<4.3.9": "^4.3.9",
"vite@>4.3.9": "^4.5.3",
"zod@<=3.22.2": ">=3.22.3",
"axios@<=1.4.0": ">=1.4.1"
}

48
pnpm-lock.yaml generated
View File

@@ -6,6 +6,7 @@ settings:
overrides:
vite@<4.3.9: ^4.3.9
vite@>4.3.9: ^4.5.3
zod@<=3.22.2: '>=3.22.3'
axios@<=1.4.0: '>=1.4.1'
@@ -410,7 +411,7 @@ packages:
'@rollup/plugin-replace': 5.0.5(rollup@3.29.4)
'@rollup/plugin-terser': 0.4.4(rollup@3.29.4)
'@rollup/plugin-virtual': 3.0.2(rollup@3.29.4)
'@vitejs/plugin-vue': 4.6.2(vite@4.5.2)(vue@3.4.27)
'@vitejs/plugin-vue': 4.6.2(vite@4.5.3)(vue@3.4.27)
chalk: 5.3.0
commander: 10.0.1
esbuild: 0.17.19
@@ -421,7 +422,7 @@ packages:
rollup: 3.29.4
rollup-plugin-esbuild: 5.0.0(esbuild@0.17.19)(rollup@3.29.4)
rollup-plugin-styles: 4.0.0(rollup@3.29.4)
vite: 4.5.2(@types/node@20.14.2)
vite: 4.5.3(@types/node@20.14.2)
vue: 3.4.27(typescript@5.4.5)
transitivePeerDependencies:
- '@types/node'
@@ -1936,14 +1937,14 @@ packages:
vue: 3.4.27(typescript@5.4.5)
dev: true
/@vitejs/plugin-vue@4.6.2(vite@4.5.2)(vue@3.4.27):
/@vitejs/plugin-vue@4.6.2(vite@4.5.3)(vue@3.4.27):
resolution: {integrity: sha512-kqf7SGFoG+80aZG6Pf+gsZIVvGSCKE98JbiWqcCV9cThtg91Jav0yvYFC9Zb+jKetNGF6ZKeoaxgZfND21fWKw==}
engines: {node: ^14.18.0 || >=16.0.0}
peerDependencies:
vite: ^4.3.9
vue: ^3.2.25
dependencies:
vite: 4.5.2(@types/node@20.14.2)
vite: 4.5.3(@types/node@20.14.2)
vue: 3.4.27(typescript@5.4.5)
dev: true
@@ -7642,6 +7643,7 @@ packages:
/string_decoder@1.3.0:
resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}
requiresBuild: true
dependencies:
safe-buffer: 5.2.1
dev: true
@@ -8257,42 +8259,6 @@ packages:
- terser
dev: true
/vite@4.5.2(@types/node@20.14.2):
resolution: {integrity: sha512-tBCZBNSBbHQkaGyhGCDUGqeo2ph8Fstyp6FMSvTtsXeZSPpSMGlviAOav2hxVTqFcx8Hj/twtWKsMJXNY0xI8w==}
engines: {node: ^14.18.0 || >=16.0.0}
hasBin: true
peerDependencies:
'@types/node': '>= 14'
less: '*'
lightningcss: ^1.21.0
sass: '*'
stylus: '*'
sugarss: '*'
terser: ^5.4.0
peerDependenciesMeta:
'@types/node':
optional: true
less:
optional: true
lightningcss:
optional: true
sass:
optional: true
stylus:
optional: true
sugarss:
optional: true
terser:
optional: true
dependencies:
'@types/node': 20.14.2
esbuild: 0.18.20
postcss: 8.4.38
rollup: 3.29.4
optionalDependencies:
fsevents: 2.3.3
dev: true
/vite@4.5.3(@types/node@20.14.2):
resolution: {integrity: sha512-kQL23kMeX92v3ph7IauVkXkikdDRsYMGTVl5KY2E9OY4ONLvkHf04MDTbnfo6NKxZiDLWzVpP5oTa8hQD8U3dg==}
engines: {node: ^14.18.0 || >=16.0.0}
@@ -8611,7 +8577,7 @@ packages:
require-directory: 2.1.1
string-width: 4.2.3
y18n: 5.0.8
yargs-parser: 20.2.4
yargs-parser: 20.2.9
dev: true
/yargs@17.7.2: