Skip to content

[Snyk] Security upgrade vite from 5.4.20 to 6.4.2#997

Open
Dargon789 wants to merge 1 commit intomainfrom
snyk-fix-f60d6c9e7bff4146eb6993f146e50999
Open

[Snyk] Security upgrade vite from 5.4.20 to 6.4.2#997
Dargon789 wants to merge 1 commit intomainfrom
snyk-fix-f60d6c9e7bff4146eb6993f146e50999

Conversation

@Dargon789
Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the pnpm dependencies of this project.

Snyk changed the following file(s):

  • examples/vue-ak-basic-sign-client/package.json
⚠️ Warning
Failed to update the pnpm-lock.yaml, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

Issue
medium severity Directory Traversal
SNYK-JS-VITE-15922213

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Directory Traversal

@codesandbox
Copy link
Copy Markdown

codesandbox bot commented Apr 9, 2026

Review or Edit in CodeSandbox

Open the branch in Web EditorVS CodeInsiders

Open Preview

@bolt-new-by-stackblitz
Copy link
Copy Markdown

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

@vercel
Copy link
Copy Markdown

vercel bot commented Apr 9, 2026

Deployment failed with the following error:

Too many requests - try again in 5 minutes (more than 60, code: "api-deployments-flood").

Learn More: https://vercel.com/docs/limits#rate-limits

@vercel
Copy link
Copy Markdown

vercel bot commented Apr 9, 2026

Deployment failed with the following error:

Resource is limited - try again in 24 hours (more than 100, code: "api-deployments-free-per-day").

Learn More: https://vercel.com/dargon789-forge?upgradeToPro=build-rate-limit

@snyk-io
Copy link
Copy Markdown

snyk-io bot commented Apr 9, 2026

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the vite dependency to version 6.4.2 in the Vue basic sign client example. The review feedback highlights the need to update the pnpm-lock.yaml file to maintain dependency integrity and recommends upgrading @vitejs/plugin-vue to version 5.1.0 or higher to ensure full compatibility with Vite 6.

"@vitejs/plugin-vue": "5.0.2",
"typescript": "5.9.2",
"vite": "5.4.20",
"vite": "6.4.2",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The pnpm-lock.yaml was not updated, which is critical for maintaining dependency integrity in a pnpm workspace. Please run pnpm install and commit the updated lockfile. Additionally, Vite 6 officially requires @vitejs/plugin-vue version ^5.1.0 or higher for full compatibility; consider upgrading it to ensure the build remains stable.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants