Skip to content

Commit 352953d

Browse files
committed
minor #2977 [Vue] Update dev dependency `@vitejs/plugin-vue` (neothone)
This PR was merged into the 2.x branch. Discussion ---------- [Vue] Update dev dependency ``@vitejs`/plugin-vue` | Q | A | ------------- | --- | Bug fix? | no | New feature? | no | Docs? | no | Issues | no | License | MIT esbuild 0.21.5 require by vite 5.4.19, require by plugin-vue 4.6.2 contains security vulnerabilities It's necessary to upgrade to esbuild to 0.25.0+, so plugin-vue must be in 5.1.5+ in order to have vite 6+ which is the first version that require esbuild 0.25.0+ It's a recurring dependabot alerts for me, example : https://github.com/fastfony/fastfony/security/dependabot/1 <img width="1246" height="722" alt="Capture d’écran 2025-08-06 à 00 03 48" src="https://github.com/user-attachments/assets/3253530c-0dea-4eef-beda-96f1c6e5b437" /> I have tested this upgrade on Fastfony with a fork of ux-vue repo and seems to no BC appears. Commits ------- 9457c8e Update plugin-vue required version in package.json
2 parents 2aceea8 + 9457c8e commit 352953d

File tree

2 files changed

+14
-8
lines changed

2 files changed

+14
-8
lines changed

pnpm-lock.yaml

Lines changed: 13 additions & 7 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

src/Vue/assets/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@
4949
"@testing-library/jest-dom": "^6.6.3",
5050
"@testing-library/user-event": "^14.6.1",
5151
"@types/webpack-env": "^1.16",
52-
"@vitejs/plugin-vue": "^4.4.0",
52+
"@vitejs/plugin-vue": "^6.0.0",
5353
"jsdom": "^26.1.0",
5454
"tslib": "^2.8.1",
5555
"tsx": "^4.20.3",

0 commit comments

Comments
 (0)