Repository navigation
Fix Dependabot alerts: bump dompurify, override vite to 6.4.5 - #516
Merged
Merged
Conversation
- dompurify 3.4.16 -> 3.4.17 (transitive via mermaid) - force vite ^6.4.5 via overrides (vitepress 1.6.4 still pins vite 5), which also pulls esbuild 0.25 and the patched bundled launch-editor npm audit: 0 vulnerabilities; vitepress build and dev verified. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_015qs8s6YqB5SPsCr5ZDeopS
|
Preview of the website obtained from the PR: https://3dc95a08.hack-gpon-preview.pages.dev |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fixes all 12 open Dependabot alerts (all dev-scope, transitive).
Changes
^6.4.5viaoverridesinpackage.json. vitepress 1.6.4 (latest stable) still depends on vite 5.4, which has no patched release. Vite 6 also brings esbuild 0.25 and the patched bundled launch-editor — fixes Fix wrong password for ONT FS.com GPON ONU Stick with MAC #6, Warn about RX loss #33, Add link to zte-config-utiltiy #34, 5054494E = PTIN = Altice Portugal Telecom Inovação #35, #37, #38, Add initial info for XZ000-G3 #39, Add guide to change onu version and image software version for FS stick #40, Fix FS stick examples #41.@vitejs/plugin-vue5.2.4 (used by vitepress) officially supportsvite ^5 || ^6. The override can be dropped once vitepress 2 is stable.Verification
npm audit: 0 vulnerabilitiesvitepress build: all pages render successfullyvitepress dev: starts, home page responds 200Note: the lockfile was regenerated with npm 11, which adds
libcfields to some optional sharp packages;npm ciwith npm 10 reads it without issues.Generated by Claude Code