deps(npm): bump vite from 8.0.5 to 8.0.7 in /frontend in the vue-ecosystem group#636
Conversation
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.Snapshot WarningsEnsure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice. OpenSSF ScorecardScorecard details
Scanned Files
|
Manifest Changes vs v0.1.0-beta.27base✅ No changes debug✅ No changes crds✅ No changes |
📸 UI ScreenshotsCaptured 22 screenshots (11 light, 11 dark mode) 📥 Download
Pages Captured
Screenshots are generated automatically on each PR that modifies frontend code. |
Bumps the vue-ecosystem group in /frontend with 1 update: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `vite` from 8.0.5 to 8.0.7 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.0.7/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 8.0.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: vue-ecosystem ... Signed-off-by: dependabot[bot] <support@github.com>
ffebc85 to
0fe5c83
Compare
There was a problem hiding this comment.
Pull request overview
This Dependabot PR updates the frontend build toolchain by bumping Vite within the frontend/ workspace, keeping the Vue/Vite ecosystem dependencies current.
Changes:
- Bump
vitefrom^8.0.5to^8.0.7infrontend/package.json. - Regenerate
frontend/package-lock.jsonto reflect the updated Vite version and its transitive dependency updates (notablyrolldownto1.0.0-rc.13).
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| frontend/package.json | Updates the Vite devDependency version range to ^8.0.7. |
| frontend/package-lock.json | Updates the resolved Vite package to 8.0.7 and refreshes related transitive dependency versions/integrity hashes. |
Files not reviewed (1)
- frontend/package-lock.json: Language not supported
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #636 +/- ##
=======================================
Coverage 68.72% 68.72%
=======================================
Files 159 159
Lines 33620 33620
=======================================
Hits 23107 23107
Misses 8985 8985
Partials 1528 1528
Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
Bumps the vue-ecosystem group in /frontend with 1 update: vite.
Updates
vitefrom 8.0.5 to 8.0.7Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
Commits
fdb2e6frelease: v8.0.75c05b04fix: use sync dns.getDefaultResultOrder instead of dns.promises (#22185)7b3086frelease: v8.0.6af71fb2chore: replace remaining prettier script (#22179)51d3e48feat: update rolldown to 1.0.0-rc.13 (#22097)17a8f9efix(optimize-deps): hoist CJS interop assignment (#22156)d5081c2fix(css): avoid mutating sass error multiple times (#22115)56ec256perf: early return ingetLocalhostAddressIfDiffersFromDNSwhen DNS order is...bdc53abchore(create-vite): remove unnecessary DOM.Iterable (#22168)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions