Update dependency vite to v6.3.4 [security], remove transpiling to commonjs and tell vite to not statically analyse dynamic url

Author: LeighFinegold

calm-hub-ui/package.json

@@ -61,7 +61,7 @@
         "tailwindcss": "^4.1.4",
         "typescript": "^5.5.3",
         "typescript-eslint": "^8.14.0",
-        "vite": "^6.2.5",
+        "vite": "^6.3.4",
         "vitest": "^3.0.6"
     },
     "resolutions": {

package-lock.json

@@ -218,5 +218,4 @@ export default class DocusaurusTransformer implements CalmTemplateTransformer {
     private getTargetFromRelationship(relationshipId: string): string {
         return relationshipId.split('-uses-').slice(-1)[0];
     }
-}
-module.exports = DocusaurusTransformer;
+}

shared/src/docify/template-bundles/docusaurus/docusaurus-transformer.ts

@@ -116,7 +116,7 @@ export class TemplateProcessor {
                 transpileOnly: true,
                 compilerOptions: {
                     target: 'es2021',
-                    module: 'commonjs',
+                    module: 'esnext',
                     moduleResolution: 'node',
                     esModuleInterop: true,
                     sourceMap: true,
@@ -135,7 +135,7 @@ export class TemplateProcessor {
 
         try {
             const url = pathToFileURL(transformerFilePath).href;
-            const mod = await import(url);
+            const mod = await import(/* @vite-ignore */ url);
             const TransformerClass = mod.default;
             if (typeof TransformerClass !== 'function') {
                 throw new Error('❌ TransformerClass is not a constructor. Did you forget to export default?');

shared/src/template/template-processor.ts

@@ -4,7 +4,7 @@ export default defineConfig({
     entry: [
         'src/docify/template-bundles/docusaurus/docusaurus-transformer.ts'
     ],
-    format: ['cjs'],
+    format: ['esm'],
     clean: true,
     outDir: 'dist/template-bundles/docusaurus',
     target: 'node18',