[Snyk] Security upgrade vite from 5.4.20 to 6.4.2#997
Conversation
…bilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-VITE-15922213
Review or Edit in CodeSandboxOpen the branch in Web Editor • VS Code • Insiders |
|
|
|
Deployment failed with the following error: Learn More: https://vercel.com/docs/limits#rate-limits |
|
Deployment failed with the following error: Learn More: https://vercel.com/dargon789-forge?upgradeToPro=build-rate-limit |
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
There was a problem hiding this comment.
Code Review
This pull request updates the vite dependency to version 6.4.2 in the Vue basic sign client example. The review feedback highlights the need to update the pnpm-lock.yaml file to maintain dependency integrity and recommends upgrading @vitejs/plugin-vue to version 5.1.0 or higher to ensure full compatibility with Vite 6.
| "@vitejs/plugin-vue": "5.0.2", | ||
| "typescript": "5.9.2", | ||
| "vite": "5.4.20", | ||
| "vite": "6.4.2", |
There was a problem hiding this comment.
The pnpm-lock.yaml was not updated, which is critical for maintaining dependency integrity in a pnpm workspace. Please run pnpm install and commit the updated lockfile. Additionally, Vite 6 officially requires @vitejs/plugin-vue version ^5.1.0 or higher for full compatibility; consider upgrading it to ensure the build remains stable.
Snyk has created this PR to fix 1 vulnerabilities in the pnpm dependencies of this project.
Snyk changed the following file(s):
examples/vue-ak-basic-sign-client/package.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-VITE-15922213
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Directory Traversal