Skip to content

Update vite version to 7.3.2 in package.json#169

Merged
legomushroom merged 2 commits intomainfrom
legomushroom/vuln-mgmt-187464
May 1, 2026
Merged

Update vite version to 7.3.2 in package.json#169
legomushroom merged 2 commits intomainfrom
legomushroom/vuln-mgmt-187464

Conversation

@legomushroom
Copy link
Copy Markdown
Collaborator

@legomushroom legomushroom self-assigned this Apr 30, 2026
Copilot AI review requested due to automatic review settings April 30, 2026 19:15
@legomushroom
Copy link
Copy Markdown
Collaborator Author

@copilot update package lock based on the changes in package.json

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates build tooling dependencies to address the linked vulnerability-management request by bumping Vite and pinning transitive dependencies via npm overrides.

Changes:

  • Bump vite from ^7.2.6 to ^7.3.2
  • Add an overrides section to pin specific transitive dependency versions (picomatch, path-to-regexp, lodash, and minimatch under @typescript-eslint/typescript-estree)
Show a summary per file
File Description
package.json Updates Vite version and adds npm overrides pins intended to address dependency vulnerabilities.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 1/1 changed files
  • Comments generated: 1

Comment thread package.json
Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 30, 2026

@copilot update package lock based on the changes in package.json

Updated package-lock.json in fa8a531 to reflect vite 7.3.2 and the new overrides (picomatch, path-to-regexp, lodash, minimatch under typescript-estree).

@legomushroom legomushroom merged commit 41de47a into main May 1, 2026
6 checks passed
@legomushroom legomushroom deleted the legomushroom/vuln-mgmt-187464 branch May 1, 2026 00:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants