Skip to content

test(deps): update vite in examples to 7.3.1#1668

Merged
jennifer-shehane merged 1 commit intocypress-io:masterfrom
MikeMcC399:update/vite
Feb 27, 2026
Merged

test(deps): update vite in examples to 7.3.1#1668
jennifer-shehane merged 1 commit intocypress-io:masterfrom
MikeMcC399:update/vite

Conversation

@MikeMcC399
Copy link
Copy Markdown
Collaborator

Situation

Examples using Vite report a vulnerability GHSA-mw96-cpmx-2vgc

$ npm audit
# npm audit report

rollup  4.0.0 - 4.58.0
Severity: high
Rollup 4 has Arbitrary File Write via Path Traversal - https://github.com/advisories/GHSA-mw96-cpmx-2vgc
fix available via `npm audit fix`
node_modules/rollup

1 high severity vulnerability

To address all issues, run:
  npm audit fix

Change

Update vite to 7.3.1 and refresh other dependencies in affected examples directories.

@cypress-app-bot
Copy link
Copy Markdown

@MikeMcC399 MikeMcC399 added bug Something isn't working type: dependencies labels Feb 27, 2026
@MikeMcC399 MikeMcC399 self-assigned this Feb 27, 2026
@MikeMcC399 MikeMcC399 marked this pull request as ready for review February 27, 2026 09:18
@jennifer-shehane jennifer-shehane merged commit 664c54f into cypress-io:master Feb 27, 2026
86 checks passed
@MikeMcC399 MikeMcC399 deleted the update/vite branch February 27, 2026 10:27
@github-actions
Copy link
Copy Markdown

🎉 This PR is included in version 7.1.6 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants