Hi,
I already try to update vite+react but had to revert (compiled on Win7 - with
npm 13, but not on Linux)
https://github.com/apache/ofbiz-plugins/commit/a083bf9561d2df2d0c02c0c05e544fd03b12d888
Anyway, as I said "this is just used to demonstrate Vite + React in example."
And the possible moderate severity is just on Windows, so IMO not a big deal:
https://github.com/apache/ofbiz-plugins/security/dependabot/34
HTH
Jacques
Le 21/10/2025 à 02:37, dependabot[bot] a écrit :
This automated pull request fixes a security vulnerability
<https://github.com/apache/ofbiz-plugins/security/dependabot/34> (moderate
severity).
Learn more about Dependabot security updates
<https://docs.github.com/github/managing-security-vulnerabilities/configuring-dependabot-security-updates>.
------------------------------------------------------------------------------------------------------------------------------------------------------
Bumps vite <https://github.com/vitejs/vite/tree/HEAD/packages/vite> from 4.5.5
to 7.1.11.
Release notes
/Sourced from vite's releases <https://github.com/vitejs/vite/releases>./
v7.1.11
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/v7.1.11/packages/vite/CHANGELOG.md> for
details.
v7.1.10
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/v7.1.10/packages/vite/CHANGELOG.md> for
details.
v7.1.9
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/v7.1.9/packages/vite/CHANGELOG.md> for
details.
v7.1.8
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/v7.1.8/packages/vite/CHANGELOG.md> for
details.
v7.1.7
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/v7.1.7/packages/vite/CHANGELOG.md> for
details.
v7.1.6
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/v7.1.6/packages/vite/CHANGELOG.md> for
details.
v7.1.5
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/v7.1.5/packages/vite/CHANGELOG.md> for
details.
v7.1.4
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/v7.1.4/packages/vite/CHANGELOG.md> for
details.
v7.1.3
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/v7.1.3/packages/vite/CHANGELOG.md> for
details.
[email protected]
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/[email protected]/packages/create-vite/CHANGELOG.md>
for details.
v7.1.2
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/v7.1.2/packages/vite/CHANGELOG.md> for
details.
[email protected]
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/[email protected]/packages/create-vite/CHANGELOG.md>
for details.
v7.1.1
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/v7.1.1/packages/vite/CHANGELOG.md> for
details.
[email protected]
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/[email protected]/packages/create-vite/CHANGELOG.md>
for details.
[email protected]
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/[email protected]/packages/plugin-legacy/CHANGELOG.md>
for details.
[email protected]
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/[email protected]/packages/create-vite/CHANGELOG.md>
for details.
v7.1.0
Please refer to CHANGELOG.md
<https://github.com/vitejs/vite/blob/v7.1.0/packages/vite/CHANGELOG.md> for
details.
... (truncated)
Changelog
/Sourced from vite's changelog
<https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md>./
7.1.11 <https://github.com/vitejs/vite/compare/v7.1.10...v7.1.11>
(2025-10-20)
Bug Fixes
* *dev:* trim trailing slash before |server.fs.deny| check (#20968
<https://redirect.github.com/vitejs/vite/issues/20968>) (f479cc5
<https://github.com/vitejs/vite/commit/f479cc57c425ed41ceb434fecebd63931b1ed4ed>)
Miscellaneous Chores
* *deps:* update all non-major dependencies (#20966
<https://redirect.github.com/vitejs/vite/issues/20966>) (6fb41a2
<https://github.com/vitejs/vite/commit/6fb41a260bda443685e719ea4765d3faca3db944>)
Code Refactoring
* use subpath imports for types module reference (#20921
<https://redirect.github.com/vitejs/vite/issues/20921>) (d0094af
<https://github.com/vitejs/vite/commit/d0094af639d9ebbb51d4e00910b74f23eb8fe131>)
Build System
* remove cjs reference in files field (#20945
<https://redirect.github.com/vitejs/vite/issues/20945>) (ef411ce
<https://github.com/vitejs/vite/commit/ef411cee2696af3ba791879fdae9aad165f178b2>)
* remove hash from built filenames (#20946
<https://redirect.github.com/vitejs/vite/issues/20946>) (a817307
<https://github.com/vitejs/vite/commit/a81730754d655d1371ce0f4354af1c84e12f9f2d>)
7.1.10 <https://github.com/vitejs/vite/compare/v7.1.9...v7.1.10>
(2025-10-14)
Bug Fixes
* *css:* avoid duplicate style for server rendered stylesheet link and
client inline style during dev (#20767
<https://redirect.github.com/vitejs/vite/issues/20767>) (3a92bc7
<https://github.com/vitejs/vite/commit/3a92bc79b306a01b8aaf37f80b2239eaf6e488e7>)
* *css:* respect emitAssets when cssCodeSplit=false (#20883
<https://redirect.github.com/vitejs/vite/issues/20883>) (d3e7eee
<https://github.com/vitejs/vite/commit/d3e7eeefa91e1992f47694d16fe4dbe708c4d80e>)
* *deps:* update all non-major dependencies (879de86
<https://github.com/vitejs/vite/commit/879de86935a31b4e47ab907ddd859366518ce268>)
* *deps:* update all non-major dependencies (#20894
<https://redirect.github.com/vitejs/vite/issues/20894>) (3213f90
<https://github.com/vitejs/vite/commit/3213f90ff0d8f274bcec65f40aac6dfcff1ac244>)
* *dev:* allow aliases starting with |//| (#20760
<https://redirect.github.com/vitejs/vite/issues/20760>) (b95fa2a
<https://github.com/vitejs/vite/commit/b95fa2aa7564eda4c9f05ee7616a2dbada35e463>)
* *dev:* remove timestamp query consistently (#20887
<https://redirect.github.com/vitejs/vite/issues/20887>) (6537d15
<https://github.com/vitejs/vite/commit/6537d15591619d7e1cfc1e50599bec16cd88340f>)
* *esbuild:* inject esbuild helpers correctly for esbuild 0.25.9+ (#20906
<https://redirect.github.com/vitejs/vite/issues/20906>) (446eb38
<https://github.com/vitejs/vite/commit/446eb386329ef682d614c77958a542f2dc222880>)
* normalize path before calling |fileToBuiltUrl| (#20898
<https://redirect.github.com/vitejs/vite/issues/20898>) (73b6d24
<https://github.com/vitejs/vite/commit/73b6d243e0398ee5d8d44c7d24162f4a0f4b1cf1>)
* preserve original sourcemap file field when combining sourcemaps (#20926
<https://redirect.github.com/vitejs/vite/issues/20926>) (c714776
<https://github.com/vitejs/vite/commit/c714776aa1dcc24299a81c1495cbcbb1b1ef1dd3>)
Documentation
* correct |WebSocket| spelling (#20890
<https://redirect.github.com/vitejs/vite/issues/20890>) (29e98dc
<https://github.com/vitejs/vite/commit/29e98dc3efe35efbd978523367c05db7d2e7a278>)
Miscellaneous Chores
* *deps:* update rolldown-related dependencies (#20923
<https://redirect.github.com/vitejs/vite/issues/20923>) (a5e3b06
<https://github.com/vitejs/vite/commit/a5e3b064fa7ca981cb6f15f8e88806b36a99b8bf>)
7.1.9 <https://github.com/vitejs/vite/compare/v7.1.8...v7.1.9>
(2025-10-03)
Reverts
* *server:* drain stdin when not interactive (#20885
<https://redirect.github.com/vitejs/vite/issues/20885>) (12d72b0
<https://github.com/vitejs/vite/commit/12d72b0538ef1540bfb0f1dd8a44b75deaa3464e>)
7.1.8 <https://github.com/vitejs/vite/compare/v7.1.7...v7.1.8>
(2025-10-02)
Bug Fixes
* *css:* improve url escape characters handling (#20847
<https://redirect.github.com/vitejs/vite/issues/20847>) (24a61a3
<https://github.com/vitejs/vite/commit/24a61a3f5404279e91f7ceebf7449a5e874f9d56>)
* *deps:* update all non-major dependencies (#20855
<https://redirect.github.com/vitejs/vite/issues/20855>) (788a183
<https://github.com/vitejs/vite/commit/788a183afce57de13f5656f0cf42cdf6fdc3ebaa>)
* *deps:* update artichokie to 0.4.2 (#20864
<https://redirect.github.com/vitejs/vite/issues/20864>) (e670799
<https://github.com/vitejs/vite/commit/e670799e123dca78e1a63aeb06dbadade3d5ab51>)
... (truncated)
Commits
* |8b69c9e|
<https://github.com/vitejs/vite/commit/8b69c9e32c3606ae375a1333cd38e91848d27781>
release: v7.1.11
* |f479cc5|
<https://github.com/vitejs/vite/commit/f479cc57c425ed41ceb434fecebd63931b1ed4ed>
fix(dev): trim trailing slash before |server.fs.deny|
check (#20968
<https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20968>)
* |6fb41a2|
<https://github.com/vitejs/vite/commit/6fb41a260bda443685e719ea4765d3faca3db944>
chore(deps): update all non-major dependencies
(#20966
<https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20966>)
* |a817307|
<https://github.com/vitejs/vite/commit/a81730754d655d1371ce0f4354af1c84e12f9f2d>
build: remove hash from built filenames (#20946
<https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20946>)
* |ef411ce|
<https://github.com/vitejs/vite/commit/ef411cee2696af3ba791879fdae9aad165f178b2>
build: remove cjs reference in files field (#20945
<https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20945>)
* |d0094af|
<https://github.com/vitejs/vite/commit/d0094af639d9ebbb51d4e00910b74f23eb8fe131>
refactor: use subpath imports for types module
reference (#20921
<https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20921>)
* |ed4a0dc|
<https://github.com/vitejs/vite/commit/ed4a0dc9132dc8436760dbd04825e29a57946369>
release: v7.1.10
* |c714776|
<https://github.com/vitejs/vite/commit/c714776aa1dcc24299a81c1495cbcbb1b1ef1dd3>
fix: preserve original sourcemap file field when
combining sourcemaps (#20926
<https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20926>)
* |446eb38|
<https://github.com/vitejs/vite/commit/446eb386329ef682d614c77958a542f2dc222880>
fix(esbuild): inject esbuild helpers correctly for
esbuild 0.25.9+ (#20906
<https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/20906>)
* |879de86|
<https://github.com/vitejs/vite/commit/879de86935a31b4e47ab907ddd859366518ce268>
fix(deps): update all non-major dependencies
* Additional commits viewable in compare view
<https://github.com/vitejs/vite/commits/v7.1.11/packages/vite>
Maintainer changes
This version was pushed to npm by [GitHub
Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite since
your current version.
Dependabot compatibility score
<https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores>
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
|@dependabot rebase|.
------------------------------------------------------------------------------------------------------------------------------------------------------
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
* |@dependabot rebase| will rebase this PR
* |@dependabot recreate| will recreate this PR, overwriting any edits that
have been made to it
* |@dependabot merge| will merge this PR after your CI passes on it
* |@dependabot squash and merge| will squash and merge this PR after your CI
passes on it
* |@dependabot cancel merge| will cancel a previously requested merge and
block automerging
* |@dependabot reopen| will reopen this PR if it is closed
* |@dependabot close| will close this PR and stop Dependabot recreating it.
You can achieve the same result by closing it manually
* |@dependabot show <dependency name> ignore conditions| will show all of the
ignore conditions of the specified dependency
* |@dependabot ignore this major version| will close this PR and stop
Dependabot creating any more for this major version (unless you reopen the
PR or upgrade to it yourself)
* |@dependabot ignore this minor version| will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen the
PR or upgrade to it yourself)
* |@dependabot ignore this dependency| will close this PR and stop Dependabot
creating any more for this dependency (unless you reopen the PR or
upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts
page <https://github.com/apache/ofbiz-plugins/network/alerts>.
------------------------------------------------------------------------------------------------------------------------------------------------------
You can view, comment on, or merge this pull request online at:
https://github.com/apache/ofbiz-plugins/pull/145
Commit Summary
* 7780c56
<https://github.com/apache/ofbiz-plugins/pull/145/commits/7780c568c25de63143bb5e6b53ee8e71fec8b858>
Bump vite from 4.5.5 to 7.1.11 in
/example/vite-react-app
File Changes
(2 files <https://github.com/apache/ofbiz-plugins/pull/145/files>)
* *M* example/vite-react-app/package-lock.json
<https://github.com/apache/ofbiz-plugins/pull/145/files#diff-7d3a59ea361e0ab1045f7373b9aa7741098947a645d9ee08aeea678363fdbc96>
(1218)
* *M* example/vite-react-app/package.json
<https://github.com/apache/ofbiz-plugins/pull/145/files#diff-84fea36364e35eaefcc92b7c90462417e979364a10251604a1589e5516c5c3b8>
(2)
Patch Links:
* https://github.com/apache/ofbiz-plugins/pull/145.patch
* https://github.com/apache/ofbiz-plugins/pull/145.diff
—
Reply to this email directly, view it on GitHub <https://github.com/apache/ofbiz-plugins/pull/145>, or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AAEIG5ORNWVAW7ERXRIM2OD3YV53TAVCNFSM6AAAAACJXLTOZWVHI2DSMVQWIX3LMV43ASLTON2WKOZTGUZTINBRGMZDMMQ>.
You are receiving this because you are subscribed to this thread.Message ID:
<apache/ofbiz-plugins/pull/[email protected]>
