chore(deps): bump vite 8.0.3 -> 8.0.5 (security)

Fixes 3 dev server vulnerabilities:
- Path traversal in optimized deps .map handling
- Arbitrary file read via WebSocket
- server.fs.deny bypass with queries

Closes #274

cc
This commit is contained in:
vicrodh committed 2026-04-06 15:14:10 -06:00
1 parent f86bc9607e
commit a98d3d953a
2 files changed
+6 -6

No files matched your search

+5 -5
View File
@@ -28,7 +28,7 @@
"svelte": "^5.55.0",
"svelte-check": "^4.4.6",
"typescript": "~5.9.3",
"vite": "^8.0.3",
"vite": "^8.0.5",
"vitest": "^4.1.2"
}
},
@@ -3176,9 +3176,9 @@
}
},
"node_modules/vite": {
"version": "8.0.3",
"resolved": "https://registry.npmjs.org/vite/-/vite-8.0.3.tgz",
"integrity": "sha512-B9ifbFudT1TFhfltfaIPgjo9Z3mDynBTJSUYxTjOQruf/zHH+ezCQKcoqO+h7a9Pw9Nm/OtlXAiGT1axBgwqrQ==",
"version": "8.0.5",
"resolved": "https://registry.npmjs.org/vite/-/vite-8.0.5.tgz",
"integrity": "sha512-nmu43Qvq9UopTRfMx2jOYW5l16pb3iDC1JH6yMuPkpVbzK0k+L7dfsEDH4jRgYFmsg0sTAqkojoZgzLMlwHsCQ==",
"license": "MIT",
"dependencies": {
"lightningcss": "^1.32.0",
@@ -3202,7 +3202,7 @@
"peerDependencies": {
"@types/node": "^20.19.0 || >=22.12.0",
"@vitejs/devtools": "^0.1.0",
"esbuild": "^0.27.0",
"esbuild": "^0.27.0 || ^0.28.0",
"jiti": ">=1.21.0",
"less": "^4.0.0",
"sass": "^1.70.0",
+1 -1
View File
@@ -45,7 +45,7 @@
"svelte": "^5.55.0",
"svelte-check": "^4.4.6",
"typescript": "~5.9.3",
"vite": "^8.0.3",
"vite": "^8.0.5",
"vitest": "^4.1.2"
},
"overrides": {