From 67cb60706a651465cbebf2583eff05cc483b2f75 Mon Sep 17 00:00:00 2001 From: Mathijs de Bruin Date: Wed, 22 Jan 2025 19:06:00 +0000 Subject: [PATCH] Routine security updates. (#1781) * Routine security updates. * Bump Node for CI to 23.3 * Consistently bump Vite, address CVE-2025-24010. --- .github/actions/pnpm-node-install/action.yaml | 2 +- frontend/package.json | 6 +- frontend/pnpm-lock.yaml | 58 ++++++++-------- libs/copilot/package.json | 14 ++-- libs/copilot/pnpm-lock.yaml | 68 ++++++++++--------- libs/react-client/package.json | 6 +- libs/react-client/pnpm-lock.yaml | 52 +++++++------- 7 files changed, 109 insertions(+), 97 deletions(-) diff --git a/.github/actions/pnpm-node-install/action.yaml b/.github/actions/pnpm-node-install/action.yaml index 5cbb111073..507cb4ba56 100644 --- a/.github/actions/pnpm-node-install/action.yaml +++ b/.github/actions/pnpm-node-install/action.yaml @@ -5,7 +5,7 @@ inputs: node-version: description: Node.js version required: true - default: '22.7.0' + default: '23.3.0' pnpm-version: description: pnpm version required: true diff --git a/frontend/package.json b/frontend/package.json index cb0c72e4ee..61e3ebfb1c 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -93,7 +93,7 @@ "tailwindcss": "^3.4.16", "tslib": "^2.6.2", "typescript": "^5.2.2", - "vite": "^5.4.12", + "vite": "^5.4.14", "vite-plugin-svgr": "^4.2.0", "vite-tsconfig-paths": "^4.2.0", "vitest": "^0.34.4" @@ -112,7 +112,9 @@ "vite@>=4.0.0 <4.5.4": ">=4.5.4", "vite@>=4.0.0 <=4.5.3": ">=4.5.4", "rollup@>=3.0.0 <3.29.5": ">=3.29.5", - "rollup@>=4.0.0 <4.22.4": ">=4.22.4" + "rollup@>=4.0.0 <4.22.4": ">=4.22.4", + "cross-spawn@>=7.0.0 <7.0.5": ">=7.0.5", + "nanoid@<3.3.8": ">=3.3.8" } } } diff --git a/frontend/pnpm-lock.yaml b/frontend/pnpm-lock.yaml index 3706f02eb5..298a49130e 100644 --- a/frontend/pnpm-lock.yaml +++ b/frontend/pnpm-lock.yaml @@ -18,6 +18,8 @@ overrides: vite@>=4.0.0 <=4.5.3: '>=4.5.4' rollup@>=3.0.0 <3.29.5: '>=3.29.5' rollup@>=4.0.0 <4.22.4: '>=4.22.4' + cross-spawn@>=7.0.0 <7.0.5: '>=7.0.5' + nanoid@<3.3.8: '>=3.3.8' importers: @@ -230,10 +232,10 @@ importers: version: 9.0.3 '@vitejs/plugin-react': specifier: ^4.0.4 - version: 4.2.1(vite@5.4.12(@types/node@20.5.7)) + version: 4.2.1(vite@5.4.14(@types/node@20.5.7)) '@vitejs/plugin-react-swc': specifier: ^3.3.2 - version: 3.3.2(vite@5.4.12(@types/node@20.5.7)) + version: 3.3.2(vite@5.4.14(@types/node@20.5.7)) autoprefixer: specifier: ^10.4.20 version: 10.4.20(postcss@8.4.49) @@ -256,14 +258,14 @@ importers: specifier: ^5.2.2 version: 5.2.2 vite: - specifier: ^5.4.12 - version: 5.4.12(@types/node@20.5.7) + specifier: ^5.4.14 + version: 5.4.14(@types/node@20.5.7) vite-plugin-svgr: specifier: ^4.2.0 - version: 4.2.0(rollup@4.31.0)(typescript@5.2.2)(vite@5.4.12(@types/node@20.5.7)) + version: 4.2.0(rollup@4.31.0)(typescript@5.2.2)(vite@5.4.14(@types/node@20.5.7)) vite-tsconfig-paths: specifier: ^4.2.0 - version: 4.2.0(typescript@5.2.2)(vite@5.4.12(@types/node@20.5.7)) + version: 4.2.0(typescript@5.2.2)(vite@5.4.14(@types/node@20.5.7)) vitest: specifier: ^0.34.4 version: 0.34.6(jsdom@22.1.0) @@ -2092,8 +2094,8 @@ packages: country-regex@1.1.0: resolution: {integrity: sha512-iSPlClZP8vX7MC3/u6s3lrDuoQyhQukh5LyABJ3hvfzbQ3Yyayd4fp04zjLnfi267B/B2FkumcWWgrbban7sSA==} - cross-spawn@7.0.3: - resolution: {integrity: sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==} + cross-spawn@7.0.6: + resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==} engines: {node: '>= 8'} css-font-size-keywords@1.0.0: @@ -3243,9 +3245,9 @@ packages: mz@2.7.0: resolution: {integrity: sha512-z81GNO7nnYMEhrGh9LeymoE4+Yr0Wn5McHIZMK5cfQCl+NDX08sCZgUc9/6MHni9IWuFLm1Z3HTCXu2z9fN62Q==} - nanoid@3.3.7: - resolution: {integrity: sha512-eSRppjcPIatRIMC1U6UngP8XFcz8MQWGQdt1MTBQ7NaAmvXDfvNxbvWV3x2y6CdEUciCSsDHDQZbhYaB8QEo2g==} - engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} + nanoid@5.0.9: + resolution: {integrity: sha512-Aooyr6MXU6HpvvWXKoVoXwKMs/KyVakWwg7xQfv5/S/RIgJMy0Ifa45H9qqYy7pTCszrHzP21Uk4PZq2HpEM8Q==} + engines: {node: ^18 || >=20} hasBin: true native-promise-only@0.8.1: @@ -4188,8 +4190,8 @@ packages: vite: optional: true - vite@5.4.12: - resolution: {integrity: sha512-KwUaKB27TvWwDJr1GjjWthLMATbGEbeWYZIbGZ5qFIsgPP3vWzLu4cVooqhm5/Z2SPDUMjyPVjTztm5tYKwQxA==} + vite@5.4.14: + resolution: {integrity: sha512-EK5cY7Q1D8JNhSaPKVK4pwBFvaTmZxEnoKXLG/U9gmdDcihQGNzFlgIvaxezFR4glP1LsuiedwMBqCXH3wZccA==} engines: {node: ^18.0.0 || >=20.0.0} hasBin: true peerDependencies: @@ -5811,21 +5813,21 @@ snapshots: '@ungap/structured-clone@1.2.0': {} - '@vitejs/plugin-react-swc@3.3.2(vite@5.4.12(@types/node@20.5.7))': + '@vitejs/plugin-react-swc@3.3.2(vite@5.4.14(@types/node@20.5.7))': dependencies: '@swc/core': 1.3.100 - vite: 5.4.12(@types/node@20.5.7) + vite: 5.4.14(@types/node@20.5.7) transitivePeerDependencies: - '@swc/helpers' - '@vitejs/plugin-react@4.2.1(vite@5.4.12(@types/node@20.5.7))': + '@vitejs/plugin-react@4.2.1(vite@5.4.14(@types/node@20.5.7))': dependencies: '@babel/core': 7.23.7 '@babel/plugin-transform-react-jsx-self': 7.23.3(@babel/core@7.23.7) '@babel/plugin-transform-react-jsx-source': 7.23.3(@babel/core@7.23.7) '@types/babel__core': 7.20.5 react-refresh: 0.14.0 - vite: 5.4.12(@types/node@20.5.7) + vite: 5.4.14(@types/node@20.5.7) transitivePeerDependencies: - supports-color @@ -6175,7 +6177,7 @@ snapshots: country-regex@1.1.0: {} - cross-spawn@7.0.3: + cross-spawn@7.0.6: dependencies: path-key: 3.1.1 shebang-command: 2.0.0 @@ -6594,7 +6596,7 @@ snapshots: foreground-child@3.1.1: dependencies: - cross-spawn: 7.0.3 + cross-spawn: 7.0.6 signal-exit: 4.1.0 form-data@4.0.0: @@ -7705,7 +7707,7 @@ snapshots: object-assign: 4.1.1 thenify-all: 1.6.0 - nanoid@3.3.7: {} + nanoid@5.0.9: {} native-promise-only@0.8.1: {} @@ -7953,7 +7955,7 @@ snapshots: postcss@8.4.49: dependencies: - nanoid: 3.3.7 + nanoid: 5.0.9 picocolors: 1.1.1 source-map-js: 1.2.1 @@ -8813,7 +8815,7 @@ snapshots: mlly: 1.6.1 pathe: 1.1.2 picocolors: 1.0.0 - vite: 5.4.12(@types/node@20.5.7) + vite: 5.4.14(@types/node@20.5.7) transitivePeerDependencies: - '@types/node' - less @@ -8825,29 +8827,29 @@ snapshots: - supports-color - terser - vite-plugin-svgr@4.2.0(rollup@4.31.0)(typescript@5.2.2)(vite@5.4.12(@types/node@20.5.7)): + vite-plugin-svgr@4.2.0(rollup@4.31.0)(typescript@5.2.2)(vite@5.4.14(@types/node@20.5.7)): dependencies: '@rollup/pluginutils': 5.1.0(rollup@4.31.0) '@svgr/core': 8.1.0(typescript@5.2.2) '@svgr/plugin-jsx': 8.1.0(@svgr/core@8.1.0(typescript@5.2.2)) - vite: 5.4.12(@types/node@20.5.7) + vite: 5.4.14(@types/node@20.5.7) transitivePeerDependencies: - rollup - supports-color - typescript - vite-tsconfig-paths@4.2.0(typescript@5.2.2)(vite@5.4.12(@types/node@20.5.7)): + vite-tsconfig-paths@4.2.0(typescript@5.2.2)(vite@5.4.14(@types/node@20.5.7)): dependencies: debug: 4.3.4 globrex: 0.1.2 tsconfck: 2.1.2(typescript@5.2.2) optionalDependencies: - vite: 5.4.12(@types/node@20.5.7) + vite: 5.4.14(@types/node@20.5.7) transitivePeerDependencies: - supports-color - typescript - vite@5.4.12(@types/node@20.5.7): + vite@5.4.14(@types/node@20.5.7): dependencies: esbuild: 0.21.5 postcss: 8.4.49 @@ -8879,7 +8881,7 @@ snapshots: strip-literal: 1.3.0 tinybench: 2.6.0 tinypool: 0.7.0 - vite: 5.4.12(@types/node@20.5.7) + vite: 5.4.14(@types/node@20.5.7) vite-node: 0.34.6(@types/node@20.5.7) why-is-node-running: 2.2.2 optionalDependencies: diff --git a/libs/copilot/package.json b/libs/copilot/package.json index 8a7c6f4030..41bbd47edc 100644 --- a/libs/copilot/package.json +++ b/libs/copilot/package.json @@ -14,9 +14,6 @@ "build-storybook": "storybook build" }, "dependencies": { - "react": "^18.3.1", - "react-dom": "^18.3.1", - "uuid": "^9.0.0", "@chainlit/app": "workspace:^", "@chainlit/react-client": "workspace:^", "class-variance-authority": "^0.7.1", @@ -25,11 +22,14 @@ "i18next": "^23.7.16", "lodash": "^4.17.21", "lucide-react": "^0.468.0", + "react": "^18.3.1", + "react-dom": "^18.3.1", "react-i18next": "^14.0.0", "recoil": "^0.7.7", "sonner": "^1.2.3", "tailwind-merge": "^2.5.5", - "tailwindcss-animate": "^1.0.7" + "tailwindcss-animate": "^1.0.7", + "uuid": "^9.0.0" }, "devDependencies": { "@storybook/addon-essentials": "^8.4.7", @@ -52,7 +52,7 @@ "storybook": "^8.4.7", "tailwindcss": "^3.4.16", "typescript": "^5.2.2", - "vite": "^4.4.9", + "vite": "^5.4.14", "vite-plugin-svgr": "^4.2.0", "vite-tsconfig-paths": "^4.2.0" }, @@ -75,7 +75,9 @@ "vite@>=4.0.0 <4.5.4": ">=4.5.4", "vite@>=4.0.0 <=4.5.3": ">=4.5.4", "rollup@>=3.0.0 <3.29.5": ">=3.29.5", - "cookie@<0.7.0": ">=0.7.0" + "cookie@<0.7.0": ">=0.7.0", + "cross-spawn@>=7.0.0 <7.0.5": ">=7.0.5", + "nanoid@<3.3.8": ">=3.3.8" } } } diff --git a/libs/copilot/pnpm-lock.yaml b/libs/copilot/pnpm-lock.yaml index ade9e4d88f..d5c91676d0 100644 --- a/libs/copilot/pnpm-lock.yaml +++ b/libs/copilot/pnpm-lock.yaml @@ -23,6 +23,8 @@ overrides: vite@>=4.0.0 <=4.5.3: '>=4.5.4' rollup@>=3.0.0 <3.29.5: '>=3.29.5' cookie@<0.7.0: '>=0.7.0' + cross-spawn@>=7.0.0 <7.0.5: '>=7.0.5' + nanoid@<3.3.8: '>=3.3.8' importers: @@ -97,7 +99,7 @@ importers: version: 8.4.7(@storybook/test@8.4.7(storybook@8.4.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(storybook@8.4.7)(typescript@5.2.2) '@storybook/react-vite': specifier: ^8.4.7 - version: 8.4.7(@storybook/test@8.4.7(storybook@8.4.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(rollup@4.24.0)(storybook@8.4.7)(typescript@5.2.2)(vite@5.4.8(@types/node@20.5.7)) + version: 8.4.7(@storybook/test@8.4.7(storybook@8.4.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(rollup@4.24.0)(storybook@8.4.7)(typescript@5.2.2)(vite@5.4.14(@types/node@20.5.7)) '@storybook/test': specifier: ^8.4.7 version: 8.4.7(storybook@8.4.7) @@ -121,7 +123,7 @@ importers: version: 9.0.3 '@vitejs/plugin-react-swc': specifier: ^3.3.2 - version: 3.3.2(vite@5.4.8(@types/node@20.5.7)) + version: 3.3.2(vite@5.4.14(@types/node@20.5.7)) autoprefixer: specifier: ^10.4.20 version: 10.4.20(postcss@8.4.49) @@ -138,14 +140,14 @@ importers: specifier: ^5.2.2 version: 5.2.2 vite: - specifier: '>=4.5.4' - version: 5.4.8(@types/node@20.5.7) + specifier: ^5.4.14 + version: 5.4.14(@types/node@20.5.7) vite-plugin-svgr: specifier: ^4.2.0 - version: 4.2.0(rollup@4.24.0)(typescript@5.2.2)(vite@5.4.8(@types/node@20.5.7)) + version: 4.2.0(rollup@4.24.0)(typescript@5.2.2)(vite@5.4.14(@types/node@20.5.7)) vite-tsconfig-paths: specifier: ^4.2.0 - version: 4.2.0(typescript@5.2.2)(vite@5.4.8(@types/node@20.5.7)) + version: 4.2.0(typescript@5.2.2)(vite@5.4.14(@types/node@20.5.7)) packages: @@ -1337,8 +1339,8 @@ packages: typescript: optional: true - cross-spawn@7.0.3: - resolution: {integrity: sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==} + cross-spawn@7.0.6: + resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==} engines: {node: '>= 8'} css.escape@1.5.1: @@ -1850,9 +1852,9 @@ packages: mz@2.7.0: resolution: {integrity: sha512-z81GNO7nnYMEhrGh9LeymoE4+Yr0Wn5McHIZMK5cfQCl+NDX08sCZgUc9/6MHni9IWuFLm1Z3HTCXu2z9fN62Q==} - nanoid@3.3.7: - resolution: {integrity: sha512-eSRppjcPIatRIMC1U6UngP8XFcz8MQWGQdt1MTBQ7NaAmvXDfvNxbvWV3x2y6CdEUciCSsDHDQZbhYaB8QEo2g==} - engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} + nanoid@5.0.9: + resolution: {integrity: sha512-Aooyr6MXU6HpvvWXKoVoXwKMs/KyVakWwg7xQfv5/S/RIgJMy0Ifa45H9qqYy7pTCszrHzP21Uk4PZq2HpEM8Q==} + engines: {node: ^18 || >=20} hasBin: true neo-async@2.6.2: @@ -2445,8 +2447,8 @@ packages: vite: optional: true - vite@5.4.8: - resolution: {integrity: sha512-FqrItQ4DT1NC4zCUqMB4c4AZORMKIa0m8/URVCZ77OZ/QSNeJ54bU1vrFADbDsuwfIPcgknRkmqakQcgnL4GiQ==} + vite@5.4.14: + resolution: {integrity: sha512-EK5cY7Q1D8JNhSaPKVK4pwBFvaTmZxEnoKXLG/U9gmdDcihQGNzFlgIvaxezFR4glP1LsuiedwMBqCXH3wZccA==} engines: {node: ^18.0.0 || >=20.0.0} hasBin: true peerDependencies: @@ -2825,11 +2827,11 @@ snapshots: wrap-ansi: 8.1.0 wrap-ansi-cjs: wrap-ansi@7.0.0 - '@joshwooding/vite-plugin-react-docgen-typescript@0.4.2(typescript@5.2.2)(vite@5.4.8(@types/node@20.5.7))': + '@joshwooding/vite-plugin-react-docgen-typescript@0.4.2(typescript@5.2.2)(vite@5.4.14(@types/node@20.5.7))': dependencies: magic-string: 0.27.0 react-docgen-typescript: 2.2.2(typescript@5.2.2) - vite: 5.4.8(@types/node@20.5.7) + vite: 5.4.14(@types/node@20.5.7) optionalDependencies: typescript: 5.2.2 @@ -3043,13 +3045,13 @@ snapshots: react: 18.3.1 react-dom: 18.3.1(react@18.3.1) - '@storybook/builder-vite@8.4.7(storybook@8.4.7)(vite@5.4.8(@types/node@20.5.7))': + '@storybook/builder-vite@8.4.7(storybook@8.4.7)(vite@5.4.14(@types/node@20.5.7))': dependencies: '@storybook/csf-plugin': 8.4.7(storybook@8.4.7) browser-assert: 1.2.1 storybook: 8.4.7 ts-dedent: 2.2.0 - vite: 5.4.8(@types/node@20.5.7) + vite: 5.4.14(@types/node@20.5.7) '@storybook/channels@7.6.8': dependencies: @@ -3175,11 +3177,11 @@ snapshots: react-dom: 18.3.1(react@18.3.1) storybook: 8.4.7 - '@storybook/react-vite@8.4.7(@storybook/test@8.4.7(storybook@8.4.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(rollup@4.24.0)(storybook@8.4.7)(typescript@5.2.2)(vite@5.4.8(@types/node@20.5.7))': + '@storybook/react-vite@8.4.7(@storybook/test@8.4.7(storybook@8.4.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(rollup@4.24.0)(storybook@8.4.7)(typescript@5.2.2)(vite@5.4.14(@types/node@20.5.7))': dependencies: - '@joshwooding/vite-plugin-react-docgen-typescript': 0.4.2(typescript@5.2.2)(vite@5.4.8(@types/node@20.5.7)) + '@joshwooding/vite-plugin-react-docgen-typescript': 0.4.2(typescript@5.2.2)(vite@5.4.14(@types/node@20.5.7)) '@rollup/pluginutils': 5.1.0(rollup@4.24.0) - '@storybook/builder-vite': 8.4.7(storybook@8.4.7)(vite@5.4.8(@types/node@20.5.7)) + '@storybook/builder-vite': 8.4.7(storybook@8.4.7)(vite@5.4.14(@types/node@20.5.7)) '@storybook/react': 8.4.7(@storybook/test@8.4.7(storybook@8.4.7))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(storybook@8.4.7)(typescript@5.2.2) find-up: 5.0.0 magic-string: 0.30.5 @@ -3189,7 +3191,7 @@ snapshots: resolve: 1.22.8 storybook: 8.4.7 tsconfig-paths: 4.2.0 - vite: 5.4.8(@types/node@20.5.7) + vite: 5.4.14(@types/node@20.5.7) transitivePeerDependencies: - '@storybook/test' - rollup @@ -3502,10 +3504,10 @@ snapshots: '@types/uuid@9.0.3': {} - '@vitejs/plugin-react-swc@3.3.2(vite@5.4.8(@types/node@20.5.7))': + '@vitejs/plugin-react-swc@3.3.2(vite@5.4.14(@types/node@20.5.7))': dependencies: '@swc/core': 1.3.102 - vite: 5.4.8(@types/node@20.5.7) + vite: 5.4.14(@types/node@20.5.7) transitivePeerDependencies: - '@swc/helpers' @@ -3727,7 +3729,7 @@ snapshots: optionalDependencies: typescript: 5.2.2 - cross-spawn@7.0.3: + cross-spawn@7.0.6: dependencies: path-key: 3.1.1 shebang-command: 2.0.0 @@ -3887,7 +3889,7 @@ snapshots: execa@5.1.1: dependencies: - cross-spawn: 7.0.3 + cross-spawn: 7.0.6 get-stream: 6.0.1 human-signals: 2.1.0 is-stream: 2.0.1 @@ -3942,7 +3944,7 @@ snapshots: foreground-child@3.1.1: dependencies: - cross-spawn: 7.0.3 + cross-spawn: 7.0.6 signal-exit: 4.1.0 form-data@4.0.0: @@ -4234,7 +4236,7 @@ snapshots: object-assign: 4.1.1 thenify-all: 1.6.0 - nanoid@3.3.7: {} + nanoid@5.0.9: {} neo-async@2.6.2: {} @@ -4395,7 +4397,7 @@ snapshots: postcss@8.4.49: dependencies: - nanoid: 3.3.7 + nanoid: 5.0.9 picocolors: 1.1.1 source-map-js: 1.2.1 @@ -4804,29 +4806,29 @@ snapshots: spdx-correct: 3.2.0 spdx-expression-parse: 3.0.1 - vite-plugin-svgr@4.2.0(rollup@4.24.0)(typescript@5.2.2)(vite@5.4.8(@types/node@20.5.7)): + vite-plugin-svgr@4.2.0(rollup@4.24.0)(typescript@5.2.2)(vite@5.4.14(@types/node@20.5.7)): dependencies: '@rollup/pluginutils': 5.1.0(rollup@4.24.0) '@svgr/core': 8.1.0(typescript@5.2.2) '@svgr/plugin-jsx': 8.1.0(@svgr/core@8.1.0(typescript@5.2.2)) - vite: 5.4.8(@types/node@20.5.7) + vite: 5.4.14(@types/node@20.5.7) transitivePeerDependencies: - rollup - supports-color - typescript - vite-tsconfig-paths@4.2.0(typescript@5.2.2)(vite@5.4.8(@types/node@20.5.7)): + vite-tsconfig-paths@4.2.0(typescript@5.2.2)(vite@5.4.14(@types/node@20.5.7)): dependencies: debug: 4.3.4 globrex: 0.1.2 tsconfck: 2.1.2(typescript@5.2.2) optionalDependencies: - vite: 5.4.8(@types/node@20.5.7) + vite: 5.4.14(@types/node@20.5.7) transitivePeerDependencies: - supports-color - typescript - vite@5.4.8(@types/node@20.5.7): + vite@5.4.14(@types/node@20.5.7): dependencies: esbuild: 0.21.5 postcss: 8.4.49 diff --git a/libs/react-client/package.json b/libs/react-client/package.json index 2ed2a8c85f..0845b73d14 100644 --- a/libs/react-client/package.json +++ b/libs/react-client/package.json @@ -41,7 +41,7 @@ "tslib": "^2.6.2", "tsup": "^7.2.0", "typescript": "^5.2.2", - "vite": "^4.4.9", + "vite": "^5.4.14", "vite-tsconfig-paths": "^4.2.0", "vitest": "^0.34.4" }, @@ -69,7 +69,9 @@ "micromatch@<4.0.8": ">=4.0.8", "vite@>=4.0.0 <4.5.4": ">=4.5.4", "vite@>=4.0.0 <=4.5.3": ">=4.5.4", - "rollup@>=3.0.0 <3.29.5": ">=3.29.5" + "rollup@>=3.0.0 <3.29.5": ">=3.29.5", + "cross-spawn@>=7.0.0 <7.0.5": ">=7.0.5", + "nanoid@<3.3.8": ">=3.3.8" } } } diff --git a/libs/react-client/pnpm-lock.yaml b/libs/react-client/pnpm-lock.yaml index 39b0461d3b..56a990e442 100644 --- a/libs/react-client/pnpm-lock.yaml +++ b/libs/react-client/pnpm-lock.yaml @@ -15,6 +15,8 @@ overrides: vite@>=4.0.0 <4.5.4: '>=4.5.4' vite@>=4.0.0 <=4.5.3: '>=4.5.4' rollup@>=3.0.0 <3.29.5: '>=3.29.5' + cross-spawn@>=7.0.0 <7.0.5: '>=7.0.5' + nanoid@<3.3.8: '>=3.3.8' importers: @@ -65,10 +67,10 @@ importers: version: 9.0.3 '@vitejs/plugin-react': specifier: ^4.0.4 - version: 4.0.4(vite@5.4.8(@types/node@20.9.0)) + version: 4.0.4(vite@5.4.14(@types/node@20.9.0)) '@vitejs/plugin-react-swc': specifier: ^3.3.2 - version: 3.3.2(vite@5.4.8(@types/node@20.9.0)) + version: 3.3.2(vite@5.4.14(@types/node@20.9.0)) jsdom: specifier: ^22.1.0 version: 22.1.0 @@ -82,11 +84,11 @@ importers: specifier: ^5.2.2 version: 5.2.2 vite: - specifier: '>=4.5.4' - version: 5.4.8(@types/node@20.9.0) + specifier: ^5.4.14 + version: 5.4.14(@types/node@20.9.0) vite-tsconfig-paths: specifier: ^4.2.0 - version: 4.2.0(typescript@5.2.2)(vite@5.4.8(@types/node@20.9.0)) + version: 4.2.0(typescript@5.2.2)(vite@5.4.14(@types/node@20.9.0)) vitest: specifier: ^0.34.4 version: 0.34.4(jsdom@22.1.0) @@ -930,8 +932,8 @@ packages: convert-source-map@2.0.0: resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==} - cross-spawn@7.0.3: - resolution: {integrity: sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==} + cross-spawn@7.0.6: + resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==} engines: {node: '>= 8'} css.escape@1.5.1: @@ -1403,9 +1405,9 @@ packages: mz@2.7.0: resolution: {integrity: sha512-z81GNO7nnYMEhrGh9LeymoE4+Yr0Wn5McHIZMK5cfQCl+NDX08sCZgUc9/6MHni9IWuFLm1Z3HTCXu2z9fN62Q==} - nanoid@3.3.7: - resolution: {integrity: sha512-eSRppjcPIatRIMC1U6UngP8XFcz8MQWGQdt1MTBQ7NaAmvXDfvNxbvWV3x2y6CdEUciCSsDHDQZbhYaB8QEo2g==} - engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} + nanoid@5.0.9: + resolution: {integrity: sha512-Aooyr6MXU6HpvvWXKoVoXwKMs/KyVakWwg7xQfv5/S/RIgJMy0Ifa45H9qqYy7pTCszrHzP21Uk4PZq2HpEM8Q==} + engines: {node: ^18 || >=20} hasBin: true node-releases@2.0.13: @@ -1823,8 +1825,8 @@ packages: vite: optional: true - vite@5.4.8: - resolution: {integrity: sha512-FqrItQ4DT1NC4zCUqMB4c4AZORMKIa0m8/URVCZ77OZ/QSNeJ54bU1vrFADbDsuwfIPcgknRkmqakQcgnL4GiQ==} + vite@5.4.14: + resolution: {integrity: sha512-EK5cY7Q1D8JNhSaPKVK4pwBFvaTmZxEnoKXLG/U9gmdDcihQGNzFlgIvaxezFR4glP1LsuiedwMBqCXH3wZccA==} engines: {node: ^18.0.0 || >=20.0.0} hasBin: true peerDependencies: @@ -2487,20 +2489,20 @@ snapshots: dependencies: '@types/yargs-parser': 21.0.3 - '@vitejs/plugin-react-swc@3.3.2(vite@5.4.8(@types/node@20.9.0))': + '@vitejs/plugin-react-swc@3.3.2(vite@5.4.14(@types/node@20.9.0))': dependencies: '@swc/core': 1.3.86 - vite: 5.4.8(@types/node@20.9.0) + vite: 5.4.14(@types/node@20.9.0) transitivePeerDependencies: - '@swc/helpers' - '@vitejs/plugin-react@4.0.4(vite@5.4.8(@types/node@20.9.0))': + '@vitejs/plugin-react@4.0.4(vite@5.4.14(@types/node@20.9.0))': dependencies: '@babel/core': 7.23.3 '@babel/plugin-transform-react-jsx-self': 7.23.3(@babel/core@7.23.3) '@babel/plugin-transform-react-jsx-source': 7.23.3(@babel/core@7.23.3) react-refresh: 0.14.0 - vite: 5.4.8(@types/node@20.9.0) + vite: 5.4.14(@types/node@20.9.0) transitivePeerDependencies: - supports-color @@ -2687,7 +2689,7 @@ snapshots: convert-source-map@2.0.0: {} - cross-spawn@7.0.3: + cross-spawn@7.0.6: dependencies: path-key: 3.1.1 shebang-command: 2.0.0 @@ -2855,7 +2857,7 @@ snapshots: execa@5.1.1: dependencies: - cross-spawn: 7.0.3 + cross-spawn: 7.0.6 get-stream: 6.0.1 human-signals: 2.1.0 is-stream: 2.0.1 @@ -3248,7 +3250,7 @@ snapshots: object-assign: 4.1.1 thenify-all: 1.6.0 - nanoid@3.3.7: {} + nanoid@5.0.9: {} node-releases@2.0.13: {} @@ -3327,7 +3329,7 @@ snapshots: postcss@8.4.47: dependencies: - nanoid: 3.3.7 + nanoid: 5.0.9 picocolors: 1.1.0 source-map-js: 1.2.1 @@ -3643,7 +3645,7 @@ snapshots: mlly: 1.4.2 pathe: 1.1.1 picocolors: 1.0.0 - vite: 5.4.8(@types/node@20.9.0) + vite: 5.4.14(@types/node@20.9.0) transitivePeerDependencies: - '@types/node' - less @@ -3655,18 +3657,18 @@ snapshots: - supports-color - terser - vite-tsconfig-paths@4.2.0(typescript@5.2.2)(vite@5.4.8(@types/node@20.9.0)): + vite-tsconfig-paths@4.2.0(typescript@5.2.2)(vite@5.4.14(@types/node@20.9.0)): dependencies: debug: 4.3.4 globrex: 0.1.2 tsconfck: 2.1.2(typescript@5.2.2) optionalDependencies: - vite: 5.4.8(@types/node@20.9.0) + vite: 5.4.14(@types/node@20.9.0) transitivePeerDependencies: - supports-color - typescript - vite@5.4.8(@types/node@20.9.0): + vite@5.4.14(@types/node@20.9.0): dependencies: esbuild: 0.21.5 postcss: 8.4.47 @@ -3698,7 +3700,7 @@ snapshots: strip-literal: 1.3.0 tinybench: 2.5.1 tinypool: 0.7.0 - vite: 5.4.8(@types/node@20.9.0) + vite: 5.4.14(@types/node@20.9.0) vite-node: 0.34.4(@types/node@20.9.0) why-is-node-running: 2.2.2 optionalDependencies: