Merge branch 'main' into renovate/npm-serve-static-vulnerability

Author: edison1105

package.json

@@ -56,7 +56,7 @@
     "picocolors": "^1.0.1",
     "playwright-chromium": "^1.46.1",
     "prettier": "3.3.3",
-    "rollup": "^4.21.3",
+    "rollup": "^4.24.0",
     "simple-git-hooks": "^2.11.1",
     "tsx": "^4.19.0",
     "typescript": "^5.5.4",

packages/plugin-vue-jsx/src/index.ts

@@ -1,4 +1,4 @@
-import { createHash } from 'node:crypto'
+import crypto from 'node:crypto'
 import path from 'node:path'
 import type { types } from '@babel/core'
 import * as babel from '@babel/core'
@@ -293,8 +293,17 @@ function isDefineComponentCall(
   )
 }
 
+const hash =
+  // eslint-disable-next-line n/no-unsupported-features/node-builtins -- crypto.hash is supported in Node 21.7.0+, 20.12.0+
+  crypto.hash ??
+  ((
+    algorithm: string,
+    data: crypto.BinaryLike,
+    outputEncoding: crypto.BinaryToTextEncoding,
+  ) => crypto.createHash(algorithm).update(data).digest(outputEncoding))
+
 function getHash(text: string) {
-  return createHash('sha256').update(text).digest('hex').substring(0, 8)
+  return hash('sha256', text, 'hex').substring(0, 8)
 }
 
 export default vueJsxPlugin

packages/plugin-vue/package.json

@@ -42,7 +42,7 @@
     "@jridgewell/gen-mapping": "^0.3.5",
     "@jridgewell/trace-mapping": "^0.3.25",
     "debug": "^4.3.6",
-    "rollup": "^4.21.3",
+    "rollup": "^4.24.0",
     "slash": "^5.1.0",
     "source-map-js": "^1.2.0",
     "vite": "catalog:",

packages/plugin-vue/src/main.ts

@@ -50,7 +50,7 @@ export async function transformMain(
       // for vue files, create descriptor from fs read to be consistent with
       // logic in handleHotUpdate()
       // for non vue files, e.g. md files in vitepress, we assume
-      // `hmrContext.read` is overwriten so handleHotUpdate() is dealing with
+      // `hmrContext.read` is overwritten so handleHotUpdate() is dealing with
       // post-transform code, so we populate the descriptor with post-transform
       // code here as well.
       filename.endsWith('.vue') ? undefined : code,

packages/plugin-vue/src/utils/descriptorCache.ts

@@ -1,6 +1,6 @@
 import fs from 'node:fs'
 import path from 'node:path'
-import { createHash } from 'node:crypto'
+import crypto from 'node:crypto'
 import type { CompilerError, SFCDescriptor } from 'vue/compiler-sfc'
 import { normalizePath } from 'vite'
 import type { ResolvedOptions, VueQuery } from '../index'
@@ -120,6 +120,15 @@ export function setSrcDescriptor(
   cache.set(filename, entry)
 }
 
+const hash =
+  // eslint-disable-next-line n/no-unsupported-features/node-builtins -- crypto.hash is supported in Node 21.7.0+, 20.12.0+
+  crypto.hash ??
+  ((
+    algorithm: string,
+    data: crypto.BinaryLike,
+    outputEncoding: crypto.BinaryToTextEncoding,
+  ) => crypto.createHash(algorithm).update(data).digest(outputEncoding))
+
 function getHash(text: string): string {
-  return createHash('sha256').update(text).digest('hex').substring(0, 8)
+  return hash('sha256', text, 'hex').substring(0, 8)
 }