Skip to content

Update vite, vitest and hono past their Dependabot alerts - #369

Merged
fylorn merged 1 commit into
devfrom
chore/dependabot-alerts
Oct 24, 2026
Merged

fylorn merged 1 commit into
devfrom
chore/dependabot-alerts

Conversation

@fylorn

@fylorn fylorn commented Oct 24, 2026

Copy link
Copy Markdown
Contributor

Closes the open npm Dependabot alerts. All three are development dependencies; nothing in the shipped app changes.

  • vite 7.3.6 -> 7.3.7 (one high, three moderate, one low)
  • vitest and @vitest/mocker 5.0.0 -> 5.0.5 (two moderate)
  • hono 4.13.7 -> 4.13.13 (one moderate; transitive, through shadcn's MCP server)

The lockfile only moves these packages and the few dependencies vitest 5.0.5 brings with it. The remaining glib alert needs the GTK stack that Tauri depends on to move and is left as is.

Checked locally: tsc for the app and the screenshot scripts, vitest (1301 tests) and vite build.

🤖 Generated with Claude Code

vite 7.3.6 -> 7.3.7, vitest and @vitest/mocker 5.0.0 -> 5.0.5, hono 4.13.7 -> 4.13.13
(transitive, through shadcn). All are development dependencies.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@fylorn
fylorn merged commit 38a6090 into dev Oct 24, 2026
6 checks passed
@fylorn
fylorn deleted the chore/dependabot-alerts branch October 24, 2026 11:26
@github-actions github-actions Bot locked and limited conversation to collaborators Oct 24, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant