Repository navigation
fix(security): patch Vite tooling to 8.2.4 - #32
Conversation
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.2.2 to 8.3.5. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 8.3.5 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Assignment security-remediation-20261021-hysvaer-rle-36793. No npm release or consumer upgrade.
Reuse PR32 with normal ancestry, retaining exact tested manifest and lock. No 8.3 minor upgrade, release, consumer or workflow change.
johan-eilertsen
changed the title
|
Uavhengig Adminreview avHELEdiff mot87d2374a8528747e37e7e8a456c1f27c6fe72976 forhead75c6e2a294201368dc2de8e4a6bd5be90117b53d: manifest/låspinnVite8.2.4er eneste semantiskeendring. @playwright/testsorteringsflytt er byte-/JSON-identisk; samme pakkeidentiteter,rootunntattVite ogalleandrenoderidentiske. Npmregistrytarball/integrity/dependencies/enginesfor8.2.4samsvarer. AGENTSlest; ingenproduktdata/API/kartatferds-/pakkeversjonsendring. EksaktheadCI39662819707etterlestSUCCESS; eiers29tester/type/build/packbrowser/installertekonsumentkontrollnotert,ingenlintscriptoppfunnet. Ingenblokkerendefunn. Eierkanlandenormalautorisertsammeheadetterfriskbase/head/requiredcheck/stackguard,verifiserfaktiskmain/alertstateogcloseout. Detteergodkjenningavpatchkilden,IKKEnpmutgivelse/konsumentoppgraderingellerHysværprodgodkjenning. |
Security-only scope
Assignment security-remediation-20261021-hysvaer-rle-36793. Refs Hysvær Issue #71, parent project-control#264 / Admin516.
This existing Dependabot PR is intentionally narrowed from the proposed Vite8.3.5 minor to EXACT8.2.4, the fixed8.2 patch line. Normal ancestry merge and no-force push preserve bot history; no duplicate PR is opened. Only package.json/package-lock.json differ from main (+21/-21). Package version0.6.0 is unchanged. No npm publish, release, real consumer upgrade, workflow/product change or production deploy.
Evidence
Exact candidate head75c6e2a294201368dc2de8e4a6bd5be90117b53d; existing CI must be terminally green on this head. Independent review remains required. Native review-child admission failed twice because model runtime replacement is in progress; no review worker was accepted. Admin may review this exact candidate before normal merge. Do not infer independent PASS or main-fixed state from local tests.