deps: Update dependency @vitejs/plugin-react to v6.0.2 - #401
deps: Update dependency @vitejs/plugin-react to v6.0.2#401renovate[bot] wants to merge 1 commit into
Conversation
|
|
Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits. |
b6eb3e1 to
c77fca5
Compare
c77fca5 to
5969f75
Compare
plugin-react 6.0.2 makes npm try to install its OPTIONAL @rolldown/plugin-babel peer, whose @babel/plugin-transform-runtime@8 -> @babel/core@^8 chain conflicts with the project's @babel/core@7 (required by plugin-react's own babel-7 path), causing an ERESOLVE. The dashboard does not use rolldown's babel transform, so pin the optional tooling to babel 7 via an override; npm then skips the babel-8 chain and resolves cleanly. Verified locally: npm ci, build, and 18/18 tests pass. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
Superseded by #406, which now carries the |
Renovate Ignore NotificationBecause you closed this PR without merging, Renovate will ignore this update ( If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR. |
…2.0) + @vitejs/plugin-react 6.0.2 (#406) * deps: clear dashboard npm audit advisories (vite 8.1.0, js-yaml >=4.2.0) Resolves 1 high + 2 moderate advisories surfaced after the Renovate lock-file maintenance: - vite 8.0.11 -> 8.1.0 (high): GHSA-fx2h-pf6j-xcff (server.fs.deny bypass) and GHSA-v6wh-96g9-6wx3 (launch-editor NTLMv2 hash disclosure). Minor bump within the 8.x major; both CVEs are Windows dev-server only. - js-yaml override ^4.2.0 (2x moderate): GHSA-h67p-54hq-rp68 quadratic-DoS in <=4.1.1, pulled in transitively by @redocly/openapi-core (via openapi-typescript) and cosmiconfig (via shadcn) — both dev-only tools. 4.2.0 is a backward-compatible minor; staying in 4.x avoids the ESM-only 5.x break for those CJS consumers. Verified: npm audit clean, vite build, vitest 18/18, eslint, tsc, and generate:ts produces identical src/types/api.ts. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * deps: bump @vitejs/plugin-react to 6.0.2 (supersedes #401) plugin-react 6.0.2 makes npm try to install its OPTIONAL @rolldown/plugin-babel peer, whose @babel/plugin-transform-runtime@8 -> @babel/core@^8 chain conflicts with the project's @babel/core@7 (required by plugin-react's own babel-7 path), causing an ERESOLVE. The dashboard does not use rolldown's babel transform, so pin the optional tooling to babel 7 via an override; npm then skips the babel-8 chain and resolves cleanly. Verified locally: npm ci, build, and 18/18 tests pass. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
This PR contains the following updates:
6.0.1→6.0.2Release Notes
vitejs/vite-plugin-react (@vitejs/plugin-react)
v6.0.2Compare Source
Allow all options in reactCompilerPreset (#1189)
This is a type only change. Only
compilationModeandtargetoptions were available forreactCompilerPreset.Configuration
📅 Schedule: (in timezone UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.