Skip to content

Conversation

@StefRuseva88
Copy link
Owner

Update Vite version from 5.4.8 to 5.4.19

StefRuseva88 and others added 5 commits June 1, 2025 14:30
Test Merge pull request #156 from StefRuseva88/main
Bumps the npm_and_yarn group with 1 update in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `vite` from 5.4.8 to 5.4.19
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v5.4.19/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.19/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 5.4.19
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
…ectory

Bump vite from 5.4.8 to 5.4.19 in the npm_and_yarn group across 1 directory
@github-actions
Copy link

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/vite 5.4.19 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 8Found 23/27 approved changesets -- score normalized to 8
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions🟢 7detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 3SAST tool is not run on all commits -- score normalized to 3
Vulnerabilities🟢 91 existing vulnerabilities detected
npm/vite 5.4.19 🟢 7.3
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 8Found 23/27 approved changesets -- score normalized to 8
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions🟢 7detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 3SAST tool is not run on all commits -- score normalized to 3
Vulnerabilities🟢 91 existing vulnerabilities detected

Scanned Files

  • package-lock.json
  • package.json

@github-actions
Copy link

Coverage Report

Status Category Percentage Covered / Total
🔵 Lines 57.24% 316 / 552
🔵 Statements 57.24% 316 / 552
🔵 Functions 86.36% 38 / 44
🔵 Branches 85.18% 69 / 81
File CoverageNo changed files found.
Generated in workflow #188 for commit c1de5b6 by the Vitest Coverage Report Action

@StefRuseva88 StefRuseva88 merged commit 90d5a9e into StefRuseva88-patch-1 Jun 12, 2025
11 of 12 checks passed
StefRuseva88 added a commit that referenced this pull request Jun 12, 2025
Merge pull request #160 from StefRuseva88/main
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants