From 77f5dbff126abe8a53d19387fa43056ca5dc4ba1 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 19 Sep 2024 11:30:09 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-VITE-8023174 - https://snyk.io/vuln/SNYK-JS-VITE-8022916 --- package-lock.json | 15 ++++++++------- package.json | 2 +- 2 files changed, 9 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 8969355..88a35fc 100644 --- a/package-lock.json +++ b/package-lock.json @@ -12,7 +12,7 @@ "@vitejs/plugin-react": "^4.0.0", "react": "^18.2.0", "react-dom": "^18.2.0", - "vite": "^5.0.0" + "vite": "^5.4.6" }, "devDependencies": { "@semantic-release/changelog": "^6.0.1", @@ -11468,9 +11468,10 @@ } }, "node_modules/vite": { - "version": "5.4.3", - "resolved": "https://registry.npmjs.org/vite/-/vite-5.4.3.tgz", - "integrity": "sha512-IH+nl64eq9lJjFqU+/yrRnrHPVTlgy42/+IzbOdaFDVlyLgI/wDlf+FCobXLX1cT0X5+7LMyH1mIy2xJdLfo8Q==", + "version": "5.4.6", + "resolved": "https://registry.npmjs.org/vite/-/vite-5.4.6.tgz", + "integrity": "sha512-IeL5f8OO5nylsgzd9tq4qD2QqI0k2CQLGrWD0rCN0EQJZpBK5vJAx0I+GDkMOXxQX/OfFHMuLIx6ddAxGX/k+Q==", + "license": "MIT", "dependencies": { "esbuild": "^0.21.3", "postcss": "^8.4.43", @@ -19647,9 +19648,9 @@ } }, "vite": { - "version": "5.4.3", - "resolved": "https://registry.npmjs.org/vite/-/vite-5.4.3.tgz", - "integrity": "sha512-IH+nl64eq9lJjFqU+/yrRnrHPVTlgy42/+IzbOdaFDVlyLgI/wDlf+FCobXLX1cT0X5+7LMyH1mIy2xJdLfo8Q==", + "version": "5.4.6", + "resolved": "https://registry.npmjs.org/vite/-/vite-5.4.6.tgz", + "integrity": "sha512-IeL5f8OO5nylsgzd9tq4qD2QqI0k2CQLGrWD0rCN0EQJZpBK5vJAx0I+GDkMOXxQX/OfFHMuLIx6ddAxGX/k+Q==", "requires": { "esbuild": "^0.21.3", "fsevents": "~2.3.3", diff --git a/package.json b/package.json index 55986fd..597cf5e 100644 --- a/package.json +++ b/package.json @@ -63,7 +63,7 @@ "@vitejs/plugin-react": "^4.0.0", "react": "^18.2.0", "react-dom": "^18.2.0", - "vite": "^5.0.0" + "vite": "^5.4.6" }, "devDependencies": { "@semantic-release/changelog": "^6.0.1",