From d162c2a9b1bc019d43c766aef725cf6ab80b6640 Mon Sep 17 00:00:00 2001 From: Kristaps Fabians Geikins Date: Mon, 6 Oct 2025 12:25:26 +0200 Subject: [PATCH] Chore: bump vite to fix vulns (#5653) --- packages/objectsender/package.json | 2 +- packages/preview-frontend/package.json | 2 +- packages/ui-components/package.json | 2 +- packages/viewer-sandbox/package.json | 2 +- yarn.lock | 293 +++++++++++++++++++++++-- 5 files changed, 276 insertions(+), 25 deletions(-) diff --git a/packages/objectsender/package.json b/packages/objectsender/package.json index b13012b81..8be7b5e5b 100644 --- a/packages/objectsender/package.json +++ b/packages/objectsender/package.json @@ -47,7 +47,7 @@ "eslint-config-prettier": "^9.1.0", "prettier": "^3.3.2", "typescript": "^5.2.2", - "vite": "^5.2.0", + "vite": "^5.4.20", "vite-plugin-dts": "^4.5.4", "vitest": "^1.6.0" }, diff --git a/packages/preview-frontend/package.json b/packages/preview-frontend/package.json index e08c39ead..b20416188 100644 --- a/packages/preview-frontend/package.json +++ b/packages/preview-frontend/package.json @@ -26,6 +26,6 @@ "eslint-config-prettier": "^9.1.0", "typescript": "^5.7.2", "typescript-eslint": "^7.12.0", - "vite": "^6.0.0" + "vite": "^6.3.6" } } diff --git a/packages/ui-components/package.json b/packages/ui-components/package.json index 20d42a368..f1ddfe337 100644 --- a/packages/ui-components/package.json +++ b/packages/ui-components/package.json @@ -94,7 +94,7 @@ "type-fest": "^2.13.1", "typescript": "^5.0.4", "vee-validate": "4.7.0", - "vite": "^4.5.2", + "vite": "^4.5.14", "vite-plugin-dts": "^4.5.4", "vue": "^3.5.13", "vue-tsc": "^2.2.2", diff --git a/packages/viewer-sandbox/package.json b/packages/viewer-sandbox/package.json index 1894dc537..983c03a27 100644 --- a/packages/viewer-sandbox/package.json +++ b/packages/viewer-sandbox/package.json @@ -34,7 +34,7 @@ "eslint": "^9.4.0", "eslint-config-prettier": "^9.1.0", "typescript": "^4.5.4", - "vite": "^5.0.12", + "vite": "^5.4.20", "wrangler": "^3.51.2" } } diff --git a/yarn.lock b/yarn.lock index c94b1f249..d9fc191e4 100644 --- a/yarn.lock +++ b/yarn.lock @@ -10008,6 +10008,13 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-android-arm-eabi@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-android-arm-eabi@npm:4.52.4" + conditions: os=android & cpu=arm + languageName: node + linkType: hard + "@rollup/rollup-android-arm64@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-android-arm64@npm:4.47.1" @@ -10015,6 +10022,13 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-android-arm64@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-android-arm64@npm:4.52.4" + conditions: os=android & cpu=arm64 + languageName: node + linkType: hard + "@rollup/rollup-darwin-arm64@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-darwin-arm64@npm:4.47.1" @@ -10022,6 +10036,13 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-darwin-arm64@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-darwin-arm64@npm:4.52.4" + conditions: os=darwin & cpu=arm64 + languageName: node + linkType: hard + "@rollup/rollup-darwin-x64@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-darwin-x64@npm:4.47.1" @@ -10029,6 +10050,13 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-darwin-x64@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-darwin-x64@npm:4.52.4" + conditions: os=darwin & cpu=x64 + languageName: node + linkType: hard + "@rollup/rollup-freebsd-arm64@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-freebsd-arm64@npm:4.47.1" @@ -10036,6 +10064,13 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-freebsd-arm64@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-freebsd-arm64@npm:4.52.4" + conditions: os=freebsd & cpu=arm64 + languageName: node + linkType: hard + "@rollup/rollup-freebsd-x64@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-freebsd-x64@npm:4.47.1" @@ -10043,6 +10078,13 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-freebsd-x64@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-freebsd-x64@npm:4.52.4" + conditions: os=freebsd & cpu=x64 + languageName: node + linkType: hard + "@rollup/rollup-linux-arm-gnueabihf@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-linux-arm-gnueabihf@npm:4.47.1" @@ -10050,6 +10092,13 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-linux-arm-gnueabihf@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-linux-arm-gnueabihf@npm:4.52.4" + conditions: os=linux & cpu=arm & libc=glibc + languageName: node + linkType: hard + "@rollup/rollup-linux-arm-musleabihf@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-linux-arm-musleabihf@npm:4.47.1" @@ -10057,6 +10106,13 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-linux-arm-musleabihf@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-linux-arm-musleabihf@npm:4.52.4" + conditions: os=linux & cpu=arm & libc=musl + languageName: node + linkType: hard + "@rollup/rollup-linux-arm64-gnu@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-linux-arm64-gnu@npm:4.47.1" @@ -10064,6 +10120,13 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-linux-arm64-gnu@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-linux-arm64-gnu@npm:4.52.4" + conditions: os=linux & cpu=arm64 & libc=glibc + languageName: node + linkType: hard + "@rollup/rollup-linux-arm64-musl@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-linux-arm64-musl@npm:4.47.1" @@ -10071,6 +10134,20 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-linux-arm64-musl@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-linux-arm64-musl@npm:4.52.4" + conditions: os=linux & cpu=arm64 & libc=musl + languageName: node + linkType: hard + +"@rollup/rollup-linux-loong64-gnu@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-linux-loong64-gnu@npm:4.52.4" + conditions: os=linux & cpu=loong64 & libc=glibc + languageName: node + linkType: hard + "@rollup/rollup-linux-loongarch64-gnu@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-linux-loongarch64-gnu@npm:4.47.1" @@ -10085,6 +10162,13 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-linux-ppc64-gnu@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-linux-ppc64-gnu@npm:4.52.4" + conditions: os=linux & cpu=ppc64 & libc=glibc + languageName: node + linkType: hard + "@rollup/rollup-linux-riscv64-gnu@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-linux-riscv64-gnu@npm:4.47.1" @@ -10092,6 +10176,13 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-linux-riscv64-gnu@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-linux-riscv64-gnu@npm:4.52.4" + conditions: os=linux & cpu=riscv64 & libc=glibc + languageName: node + linkType: hard + "@rollup/rollup-linux-riscv64-musl@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-linux-riscv64-musl@npm:4.47.1" @@ -10099,6 +10190,13 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-linux-riscv64-musl@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-linux-riscv64-musl@npm:4.52.4" + conditions: os=linux & cpu=riscv64 & libc=musl + languageName: node + linkType: hard + "@rollup/rollup-linux-s390x-gnu@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-linux-s390x-gnu@npm:4.47.1" @@ -10106,6 +10204,13 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-linux-s390x-gnu@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-linux-s390x-gnu@npm:4.52.4" + conditions: os=linux & cpu=s390x & libc=glibc + languageName: node + linkType: hard + "@rollup/rollup-linux-x64-gnu@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-linux-x64-gnu@npm:4.47.1" @@ -10113,6 +10218,13 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-linux-x64-gnu@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-linux-x64-gnu@npm:4.52.4" + conditions: os=linux & cpu=x64 & libc=glibc + languageName: node + linkType: hard + "@rollup/rollup-linux-x64-musl@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-linux-x64-musl@npm:4.47.1" @@ -10120,6 +10232,20 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-linux-x64-musl@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-linux-x64-musl@npm:4.52.4" + conditions: os=linux & cpu=x64 & libc=musl + languageName: node + linkType: hard + +"@rollup/rollup-openharmony-arm64@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-openharmony-arm64@npm:4.52.4" + conditions: os=openharmony & cpu=arm64 + languageName: node + linkType: hard + "@rollup/rollup-win32-arm64-msvc@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-win32-arm64-msvc@npm:4.47.1" @@ -10127,6 +10253,13 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-win32-arm64-msvc@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-win32-arm64-msvc@npm:4.52.4" + conditions: os=win32 & cpu=arm64 + languageName: node + linkType: hard + "@rollup/rollup-win32-ia32-msvc@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-win32-ia32-msvc@npm:4.47.1" @@ -10134,6 +10267,20 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-win32-ia32-msvc@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-win32-ia32-msvc@npm:4.52.4" + conditions: os=win32 & cpu=ia32 + languageName: node + linkType: hard + +"@rollup/rollup-win32-x64-gnu@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-win32-x64-gnu@npm:4.52.4" + conditions: os=win32 & cpu=x64 + languageName: node + linkType: hard + "@rollup/rollup-win32-x64-msvc@npm:4.47.1": version: 4.47.1 resolution: "@rollup/rollup-win32-x64-msvc@npm:4.47.1" @@ -10141,6 +10288,13 @@ __metadata: languageName: node linkType: hard +"@rollup/rollup-win32-x64-msvc@npm:4.52.4": + version: 4.52.4 + resolution: "@rollup/rollup-win32-x64-msvc@npm:4.52.4" + conditions: os=win32 & cpu=x64 + languageName: node + linkType: hard + "@rrweb/types@npm:^2.0.0-alpha.13": version: 2.0.0-alpha.18 resolution: "@rrweb/types@npm:2.0.0-alpha.18" @@ -11180,7 +11334,7 @@ __metadata: prettier: "npm:^3.3.2" reflect-metadata: "npm:^0.2.2" typescript: "npm:^5.2.2" - vite: "npm:^5.2.0" + vite: "npm:^5.4.20" vite-plugin-dts: "npm:^4.5.4" vitest: "npm:^1.6.0" languageName: unknown @@ -11196,7 +11350,7 @@ __metadata: eslint-config-prettier: "npm:^9.1.0" typescript: "npm:^5.7.2" typescript-eslint: "npm:^7.12.0" - vite: "npm:^6.0.0" + vite: "npm:^6.3.6" languageName: unknown linkType: soft @@ -11582,7 +11736,7 @@ __metadata: typescript: "npm:^5.0.4" v3-infinite-loading: "npm:^1.2.2" vee-validate: "npm:4.7.0" - vite: "npm:^4.5.2" + vite: "npm:^4.5.14" vite-plugin-dts: "npm:^4.5.4" vue: "npm:^3.5.13" vue-advanced-cropper: "npm:^2.8.8" @@ -11609,7 +11763,7 @@ __metadata: eslint-config-prettier: "npm:^9.1.0" tweakpane: "npm:^3.0.8" typescript: "npm:^4.5.4" - vite: "npm:^5.0.12" + vite: "npm:^5.4.20" wrangler: "npm:^3.51.2" languageName: unknown linkType: soft @@ -32797,7 +32951,7 @@ __metadata: languageName: node linkType: hard -"postcss@npm:^8.3.11, postcss@npm:^8.4.0, postcss@npm:^8.4.24, postcss@npm:^8.4.27, postcss@npm:^8.4.31, postcss@npm:^8.4.38, postcss@npm:^8.4.47, postcss@npm:^8.5.1, postcss@npm:^8.5.3, postcss@npm:^8.5.6": +"postcss@npm:^8.3.11, postcss@npm:^8.4.0, postcss@npm:^8.4.24, postcss@npm:^8.4.27, postcss@npm:^8.4.31, postcss@npm:^8.4.38, postcss@npm:^8.4.43, postcss@npm:^8.4.47, postcss@npm:^8.5.1, postcss@npm:^8.5.3, postcss@npm:^8.5.6": version: 8.5.6 resolution: "postcss@npm:8.5.6" dependencies: @@ -34880,7 +35034,88 @@ __metadata: languageName: node linkType: hard -"rollup@npm:^4.13.0, rollup@npm:^4.30.1, rollup@npm:^4.43.0, rollup@npm:^4.45.0": +"rollup@npm:^4.20.0, rollup@npm:^4.34.9": + version: 4.52.4 + resolution: "rollup@npm:4.52.4" + dependencies: + "@rollup/rollup-android-arm-eabi": "npm:4.52.4" + "@rollup/rollup-android-arm64": "npm:4.52.4" + "@rollup/rollup-darwin-arm64": "npm:4.52.4" + "@rollup/rollup-darwin-x64": "npm:4.52.4" + "@rollup/rollup-freebsd-arm64": "npm:4.52.4" + "@rollup/rollup-freebsd-x64": "npm:4.52.4" + "@rollup/rollup-linux-arm-gnueabihf": "npm:4.52.4" + "@rollup/rollup-linux-arm-musleabihf": "npm:4.52.4" + "@rollup/rollup-linux-arm64-gnu": "npm:4.52.4" + "@rollup/rollup-linux-arm64-musl": "npm:4.52.4" + "@rollup/rollup-linux-loong64-gnu": "npm:4.52.4" + "@rollup/rollup-linux-ppc64-gnu": "npm:4.52.4" + "@rollup/rollup-linux-riscv64-gnu": "npm:4.52.4" + "@rollup/rollup-linux-riscv64-musl": "npm:4.52.4" + "@rollup/rollup-linux-s390x-gnu": "npm:4.52.4" + "@rollup/rollup-linux-x64-gnu": "npm:4.52.4" + "@rollup/rollup-linux-x64-musl": "npm:4.52.4" + "@rollup/rollup-openharmony-arm64": "npm:4.52.4" + "@rollup/rollup-win32-arm64-msvc": "npm:4.52.4" + "@rollup/rollup-win32-ia32-msvc": "npm:4.52.4" + "@rollup/rollup-win32-x64-gnu": "npm:4.52.4" + "@rollup/rollup-win32-x64-msvc": "npm:4.52.4" + "@types/estree": "npm:1.0.8" + fsevents: "npm:~2.3.2" + dependenciesMeta: + "@rollup/rollup-android-arm-eabi": + optional: true + "@rollup/rollup-android-arm64": + optional: true + "@rollup/rollup-darwin-arm64": + optional: true + "@rollup/rollup-darwin-x64": + optional: true + "@rollup/rollup-freebsd-arm64": + optional: true + "@rollup/rollup-freebsd-x64": + optional: true + "@rollup/rollup-linux-arm-gnueabihf": + optional: true + "@rollup/rollup-linux-arm-musleabihf": + optional: true + "@rollup/rollup-linux-arm64-gnu": + optional: true + "@rollup/rollup-linux-arm64-musl": + optional: true + "@rollup/rollup-linux-loong64-gnu": + optional: true + "@rollup/rollup-linux-ppc64-gnu": + optional: true + "@rollup/rollup-linux-riscv64-gnu": + optional: true + "@rollup/rollup-linux-riscv64-musl": + optional: true + "@rollup/rollup-linux-s390x-gnu": + optional: true + "@rollup/rollup-linux-x64-gnu": + optional: true + "@rollup/rollup-linux-x64-musl": + optional: true + "@rollup/rollup-openharmony-arm64": + optional: true + "@rollup/rollup-win32-arm64-msvc": + optional: true + "@rollup/rollup-win32-ia32-msvc": + optional: true + "@rollup/rollup-win32-x64-gnu": + optional: true + "@rollup/rollup-win32-x64-msvc": + optional: true + fsevents: + optional: true + bin: + rollup: dist/bin/rollup + checksum: 10/ca5e2ba511d29accc0a3e02546d777a95748b757040f907e8c58c236b507f8791ab18dbe7a86085c1e7746c8c246a94a1f1895d9e29404e30be46cf1a7405dce + languageName: node + linkType: hard + +"rollup@npm:^4.43.0, rollup@npm:^4.45.0": version: 4.47.1 resolution: "rollup@npm:4.47.1" dependencies: @@ -37527,6 +37762,16 @@ __metadata: languageName: node linkType: hard +"tinyglobby@npm:^0.2.13": + version: 0.2.15 + resolution: "tinyglobby@npm:0.2.15" + dependencies: + fdir: "npm:^6.5.0" + picomatch: "npm:^4.0.3" + checksum: 10/d72bd826a8b0fa5fa3929e7fe5ba48fceb2ae495df3a231b6c5408cd7d8c00b58ab5a9c2a76ba56a62ee9b5e083626f1f33599734bed1ffc4b792406408f0ca2 + languageName: node + linkType: hard + "tinypool@npm:^1.0.2": version: 1.0.2 resolution: "tinypool@npm:1.0.2" @@ -39367,9 +39612,9 @@ __metadata: languageName: node linkType: hard -"vite@npm:^4.5.2": - version: 4.5.2 - resolution: "vite@npm:4.5.2" +"vite@npm:^4.5.14": + version: 4.5.14 + resolution: "vite@npm:4.5.14" dependencies: esbuild: "npm:^0.18.10" fsevents: "npm:~2.3.2" @@ -39403,7 +39648,7 @@ __metadata: optional: true bin: vite: bin/vite.js - checksum: 10/3feb39f8da038fb2b1ad074c19a9579c263c1d7a872c5c6e0269b82d67805bb8c93cf9fc393e852807483ae9a918b1ac2861c72f73ee92fb3935ea68333a2cf7 + checksum: 10/316a02f0d310511241fae15e6085c9f7285e87b7a75b7b04216925e72ec17107ae6f666181c79c711f6008fdaa8a0b4510280c68ce0bfab436ebea2470783d0a languageName: node linkType: hard @@ -39462,14 +39707,17 @@ __metadata: languageName: node linkType: hard -"vite@npm:^5.0.0 || ^6.0.0, vite@npm:^6.0.0": - version: 6.2.0 - resolution: "vite@npm:6.2.0" +"vite@npm:^5.0.0 || ^6.0.0, vite@npm:^6.3.6": + version: 6.3.6 + resolution: "vite@npm:6.3.6" dependencies: esbuild: "npm:^0.25.0" + fdir: "npm:^6.4.4" fsevents: "npm:~2.3.3" + picomatch: "npm:^4.0.2" postcss: "npm:^8.5.3" - rollup: "npm:^4.30.1" + rollup: "npm:^4.34.9" + tinyglobby: "npm:^0.2.13" peerDependencies: "@types/node": ^18.0.0 || ^20.0.0 || >=22.0.0 jiti: ">=1.21.0" @@ -39510,23 +39758,24 @@ __metadata: optional: true bin: vite: bin/vite.js - checksum: 10/5ffa8bb22881276d12cc38d15feaf7df6c95f902ac6c4cd983f27af1cdb6929cf9e3ef9d6dfe74e8af27f1c1adf4cdfeeeed7fada8a53011575241bdaf0ca6e5 + checksum: 10/8b8b6fe12318ca457396bf2053df7056cf4810f1d4a43b36b6afe59860e32b749c0685a290fe8a973b0d3da179ceec4c30cebbd3c91d0c47fbcf6436b17bdeef languageName: node linkType: hard -"vite@npm:^5.0.12, vite@npm:^5.2.0": - version: 5.3.1 - resolution: "vite@npm:5.3.1" +"vite@npm:^5.4.20": + version: 5.4.20 + resolution: "vite@npm:5.4.20" dependencies: esbuild: "npm:^0.21.3" fsevents: "npm:~2.3.3" - postcss: "npm:^8.4.38" - rollup: "npm:^4.13.0" + postcss: "npm:^8.4.43" + rollup: "npm:^4.20.0" peerDependencies: "@types/node": ^18.0.0 || >=20.0.0 less: "*" lightningcss: ^1.21.0 sass: "*" + sass-embedded: "*" stylus: "*" sugarss: "*" terser: ^5.4.0 @@ -39542,6 +39791,8 @@ __metadata: optional: true sass: optional: true + sass-embedded: + optional: true stylus: optional: true sugarss: @@ -39550,7 +39801,7 @@ __metadata: optional: true bin: vite: bin/vite.js - checksum: 10/180ca1795389f1ebc0b09f2ce61846943d34df597c4719e68d1d5ecba3e6cbd5b3313a4a321119b18290de3ef543df433659ba8b678de84df152e0386342697f + checksum: 10/ed7b939074d4a54af2858811170999f127755c18325e27355b19857b0d68b84536d0983355204abd9adf9b5f42e52cf2df7b7d77c8b1c9e5f06b1b96921d203f languageName: node linkType: hard