fix: use patched vite version, bump deps for audit, dedupe

Author: dominikg

package.json

@@ -53,7 +53,7 @@
     "svelte-eslint-parser": "^0.41.0",
     "typescript": "^5.5.4",
     "typescript-eslint": "^8.3.0",
-    "vite": "https://pkg.pr.new/vite@main",
+    "vite": "^5.4.4",
     "vitest": "^2.0.5"
   },
   "lint-staged": {
@@ -74,7 +74,8 @@
       "@sveltejs/vite-plugin-svelte-inspector": "workspace:^",
       "svelte": "$svelte",
       "vite": "$vite",
-      "@types/node@<=20.12.0": "20.11.5"
+      "@types/node@<=20.12.0": "20.11.5",
+      "send@<0.19.0": "^0.19.0"
     },
     "onlyBuiltDependencies": [
       "esbuild"

packages/e2e-tests/vite-ssr-esm/package.json

@@ -17,9 +17,9 @@
     "cross-env": "^7.0.3",
     "decamelize": "^6.0.0",
     "e2e-test-dep-esm-only": "workspace:^",
-    "express": "^4.19.2",
+    "express": "^4.20.0",
     "npm-run-all2": "^6.2.2",
-    "serve-static": "^1.15.0",
+    "serve-static": "^1.16.0",
     "svelte": "^5.0.0-next.242",
     "vite": "^5.4.2"
   }

packages/playground/big-component-library-vite-ssr/package.json

@@ -12,7 +12,7 @@
   },
   "dependencies": {
     "compression": "^1.7.4",
-    "express": "^4.19.2",
+    "express": "^4.20.0",
     "sirv": "^2.0.4"
   },
   "devDependencies": {