[Snyk] Upgrade @adonisjs/vite from 2.0.2 to 4.0.0

[thetutlage]

Snyk has created this PR to upgrade @adonisjs/vite from 2.0.2 to 4.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

• The recommended version is 15 versions ahead of your current version.

• The recommended version was released 22 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	696	Proof of Concept
	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	696	No Known Exploit

Release notes

Package name: @adonisjs/vite

• 4.0.0 - 2024-12-14
  

  This release adds support for Vite 6.

  Breaking Changes

  • Vite.createRuntime is now Vite.createServerModuleRunner and accepts the same options as Vite's createServerModuleRunner. This breaking change is unlikely to affect you unless you are a package maintainer.

  New Contributors

  • @ Barabasbalazs made their first contribution in #19

  Full Changelog: v3.0.0...v4.0.0

• 4.0.0-beta.0 - 2024-12-14
  

  v4.0.0-beta.0

• 3.0.0 - 2024-06-02
  

  Changes

  V3 of @ adonisjs/vite is finally available in stable version. The changes have been fully explained in the following documents:

  • Documentation: https://docs.adonisjs.com/guides/experimental-vite
  • Blog post: https://adonisjs.com/blog/future-plans-for-adonisjs-6 and https://adonisjs.com/blog/experimental-release-for-inertia

  Migration Guide

  To migrate your application you will need to make the following changes:

  • You will need to add the vite server middleware to your kernel.ts file :

    + () => import('@ adonisjs/vite/vite_middleware'),
    ])

  • generateEntryPointsTags method is now async.

  • Our implementation is based on the new Vite Runtime API, available only since version 5.1. So make sure you have at least this version of vite in your package.json.

  • You'll need the latest version of adonisjs/assembler and adonisjs/core. Then make sure to have assetsBundler: false and the assembler hook defined in your adonisrc.ts file :

  + assetsBundler: false,
  + hooks: {
  + onBuildStarting: [() => import('@ adonisjs/vite/build_hook')],
  + },
  })

  Commits

  • chore: move from np to release-it (facfc61)
  • feat: add assetsBundler: false through codemods (7e059c4)
  • chore: update missing dependencies (29a7177)
  • feat(configure): add assembler hook automatically (7b16ac5)
  • chore: update dependencies (ef6751b)
  • chore(release): 3.0.0-11 (39cf324)
  • fix: handle cors issue (#14) (864659e)
  • chore(release): 3.0.0-10 (20bd446)
  • refactor: remove hardcoded hmr port (b5e8170)
  • fix: move to warmupRequest (859ec25)
  • chore(release): 3.0.0-9 (29f812c)
  • feat: prevent fouc in development (#12) (5936fb9)
  • fix: config/vite.stub file not found (9b84d3f)
  • perf: improve boot time of the provider (116d615)
  • refactor!: remove vite config builtin aliases (55447d4)
  • chore(release): 3.0.0-8 (1b57843)
  • fix: aliases not flattened (60aafa7)
  • chore(release): 3.0.0-7 (c48b294)
  • fix: enforce post for config plugin (7fd9e77)
  • chore(release): 3.0.0-6 (0973495)
  • feat: allow options to be passed to createDevServer (6c6080c)
  • chore(release): 3.0.0-5 (bce1201)
  • fix: createRuntime (b627136)
  • fix: create a new runtime instead of caching one (3ed37db)
  • chore(release): 3.0.0-4 (fec9128)
  • test: fix failing test (32b4a93)
  • feat: add support for preloading assets in production (ab0a13b)
  • chore: add japa snapshot plugin (1126e0f)
  • feat: csp support (d06e72b)
  • chore: middleware typo (1e596b7)
  • chore(release): 3.0.0-3 (e15289c)
  • chore: doc provider (6413d8b)
  • refactor: run dev server only in test & web environments (754ebcd)
  • refactor: register vite middleware in boot method (f1b112e)
  • refactor: add back edge plugin entrypoint (00f435e)
  • chore: restore gitignore and prettierignore (c4a53a4)
  • refactor: remove application dev dependency (eb6f51d)
  • fix: register edge in production (2b473a8)
  • chore(release): 3.0.0-2 (42930fb)
  • fix: tsup published files (edec6f1)
  • chore(release): 3.0.0-1 (ee15318)
  • chore: update shield peer dep version (2b40db1)
  • chore: update dependencies (7e61998)
  • chore: bundle using tsup-node (1dd8901)
  • chore: add funding (58fa144)
  • fix: build hook module (5c36641)
  • chore(release): 3.0.0-0 (30dc8e1)
  • chore: update version (f21ac99)
  • chore: update publish config (78ce80a)
  • feat: new vite ingration (ffeca7f)
  • chore: update dependencies (a67c8ac)
• 3.0.0-11 - 2024-03-30
  

  Changes

  This new release has a breaking change: the Vite middleware must be added in your own kernel.ts like this :

  // file: kernel.ts

  // ...
  server.use([
  // ...
  () => import('@ adonisjs/cors/cors_middleware'),
  () => import('@ adonisjs/vite/vite_middleware'),
  ])

  This was needed because otherwise Vite's CORS settings and @ adonisjs/cors could conflict. See #14 and #13 for more detailed explanations.

  Commits

  • fix: handle cors issue (#14) b9f444a

  v3.0.0-10...v3.0.0-11

• 3.0.0-10 - 2024-03-27
  
  • refactor: remove hardcoded hmr port bcaf3cb
  • fix: move to warmupRequest e277ffd

  v3.0.0-9...v3.0.0-10

• 3.0.0-9 - 2024-03-25
  

  Breaking Changes

  • generateEntryPointsTags method is now async.

  Changes

  • Prevent fouc in development. We initially have a patch for this in adonisjs/inertia. The patch has been moved to the adonisjs/vite package directly with a more generic implementation. thanks to this, fouc will be avoided on adonisjs+tsx, adonisjs+edge, adonisjs+inertia stacks.
  • Attempt to improve the start-up time of the Vite provider

  Commits

  • feat: prevent fouc in development (#12) 15bef87
  • fix: config/vite.stub file not found b8dc984
  • perf: improve boot time of the provider 76016e4
  • refactor!: remove vite config builtin aliases 9b6f1b9

  v3.0.0-8...v3.0.0-9

• 3.0.0-8 - 2024-03-06
  

  Fixed a configuration resolving problem that caused Solid x Inertia apps to sometimes get a "find.test is not a function`

  Commits

  • fix: aliases not flattened c270352

  v3.0.0-7...v3.0.0-8

• 3.0.0-7 - 2024-03-04
  

  chore(release): 3.0.0-7

• 3.0.0-6 - 2024-03-04
  

  chore(release): 3.0.0-6

• 3.0.0-5 - 2024-03-04
  

  Breaking changes

  • Remove the getRuntime in favor of a createRuntime method that returns a fresh instance

  Commits

  • fix: createRuntime c8a5629
  • fix: create a new runtime instead of caching one 6d9d685

  v3.0.0-4...v3.0.0-5

• 3.0.0-4 - 2024-03-02
• 3.0.0-3 - 2024-02-27
• 3.0.0-2 - 2024-02-26
• 3.0.0-1 - 2024-02-26
• 3.0.0-0 - 2024-02-26
• 2.0.2 - 2024-01-09

from @adonisjs/vite GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[cloudflare-workers-and-pages]

Deploying vinejs-dev with    Cloudflare Pages

Latest commit:	39b6296
Status:	🚫  Build failed.

View logs