Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 8, 2024

Bumps vite from 5.1.6 to 5.2.8.

Release notes

Sourced from vite's releases.

create-vite@5.2.3

Please refer to CHANGELOG.md for details.

create-vite@5.2.2

Please refer to CHANGELOG.md for details.

create-vite@5.2.1

Please refer to CHANGELOG.md for details.

create-vite@5.2.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

5.2.8 (2024-04-03)

5.2.7 (2024-03-29)

5.2.6 (2024-03-24)

5.2.5 (2024-03-24)

5.2.4 (2024-03-23)

5.2.3 (2024-03-22)

... (truncated)

Commits
  • 8b8d402 release: v5.2.8
  • 646319c fix: do not access document in /@vite/client when not defined (#16318)
  • 445c4f2 fix: fix sourcemap when using object as define value (#15805)
  • a78e265 chore(deps): update all non-major dependencies (#16325)
  • 4581e83 refactor: use types from sass instead of @​types/sass (#16340)
  • 3c85c6b fix: csp nonce injection when no closing tag (#16281) (#16282)
  • 21cc10b fix(hmr): multiple updates happened when invalidate is called while multiple ...
  • 01af308 fix(css): unknown file error happened with lightningcss (#16306)
  • eca68fa fix(scanner): duplicate modules for same id if glob is used in html-like type...
  • ad246da release: v5.2.7
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.1.6 to 5.2.8.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.2.8/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from sgammon as a code owner April 8, 2024 02:57
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 8, 2024
@socket-security
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/jest-junit@16.0.0 environment, filesystem +5 210 kB jsonp
npm/node-fetch@3.3.2 network +5 9.24 MB node-fetch-bot
npm/react-dom@18.2.0 environment +3 4.62 MB gnoff
npm/react-test-renderer@18.2.0 environment +6 1.77 MB gnoff
npm/react@18.2.0 environment +2 337 kB gnoff
npm/serve@14.2.1 Transitive: environment, eval, filesystem, network, shell, unsafe +66 3.68 MB vercel-release-bot
npm/typescript@5.4.2 None 0 32.4 MB typescript-bot

🚮 Removed packages: npm/@mdx-js/react@3.0.1, npm/@mdx-js/rollup@3.0.1, npm/@radix-ui/react-slot@1.0.2, npm/@remix-run/cloudflare-pages@2.8.1, npm/@remix-run/cloudflare@2.8.1, npm/@remix-run/dev@2.8.1, npm/@remix-run/react@2.8.1, npm/@storybook/addon-essentials@8.0.0, npm/@storybook/addon-interactions@8.0.0, npm/@storybook/addon-links@8.0.0, npm/@storybook/addon-onboarding@8.0.0, npm/@storybook/blocks@8.0.0, npm/@storybook/react-vite@8.0.0, npm/@storybook/react@8.0.0, npm/@storybook/test@8.0.0, npm/@types/mdx@2.0.11, npm/@types/node@20.11.28, npm/@types/react-dom@18.2.22, npm/@types/react@18.2.66, npm/@types/service-worker-mock@2.0.4, npm/@typescript-eslint/eslint-plugin@7.2.0, npm/@typescript-eslint/parser@7.2.0, npm/@vitejs/plugin-react@4.2.1, npm/autoprefixer@10.4.18, npm/chromatic@11.0.8, npm/class-variance-authority@0.7.0, npm/commitlint@19.2.0, npm/drizzle-kit@0.20.14, npm/drizzle-orm@0.30.2, npm/eslint-import-resolver-typescript@3.6.1, npm/eslint-plugin-import@2.29.1, npm/eslint-plugin-jsx-a11y@6.8.0, npm/eslint-plugin-react-hooks@4.6.0, npm/eslint-plugin-react@7.34.1, npm/eslint-plugin-storybook@0.8.0, npm/eslint@8.57.0, npm/husky@9.0.11

View full report↗︎

@sonarqubecloud
Copy link

sonarqubecloud bot commented Apr 8, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 22, 2024

Superseded by #112.

@dependabot dependabot bot closed this Apr 22, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/vite-5.2.8 branch April 22, 2024 02:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant