Skip to content

Conversation

@abdelhamiderrahmouni
Copy link
Contributor

update vite to v7 because v5 depends on a vulnerable version of esbuild, and also updated laravel-vite-plugin to v2.

npm audit fix                                                                                                                                     █ 100%

changed 2 packages, and audited 190 packages in 2s

36 packages are looking for funding
  run `npm fund` for details

# npm audit report

esbuild  <=0.24.2
Severity: moderate
esbuild enables any website to send any requests to the development server and read the response - https://github.com/advisories/GHSA-67mh-4wv8-2f99
fix available via `npm audit fix --force`
Will install vite@7.2.0, which is a breaking change
node_modules/esbuild
  vite  0.11.0 - 6.1.6
  Depends on vulnerable versions of esbuild
  node_modules/vite

2 moderate severity vulnerabilities

To address all issues (including breaking changes), run:
  npm audit fix --force

…f esbuild, and also updated laravel-vite-plugin to v2
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant