From 7969b4061fd0e1024890e1d02c14db411be2ead3 Mon Sep 17 00:00:00 2001 From: Damien Elmes Date: Tue, 15 Apr 2025 20:53:26 +1000 Subject: [PATCH] Bump vite/svelte for latest security fixes --- package.json | 4 +- ts/licenses.json | 20 ++++--- yarn.lock | 138 ++++++++++++++++++----------------------------- 3 files changed, 69 insertions(+), 93 deletions(-) diff --git a/package.json b/package.json index 1ce1353d5..b0795c918 100644 --- a/package.json +++ b/package.json @@ -19,7 +19,7 @@ "@poppanator/sveltekit-svg": "^5.0.0", "@sqltools/formatter": "^1.2.2", "@sveltejs/adapter-static": "^3.0.0", - "@sveltejs/kit": "^2.8.3", + "@sveltejs/kit": "^2.20.7", "@sveltejs/vite-plugin-svelte": "4.0.0", "@types/bootstrap": "^5.0.12", "@types/codemirror": "^5.60.0", @@ -56,7 +56,7 @@ "tslib": "^2.0.3", "tsx": "^3.12.0", "typescript": "^5.0.4", - "vite": "^5.4.17", + "vite": "5.4.18", "vitest": "^2" }, "dependencies": { diff --git a/ts/licenses.json b/ts/licenses.json index 9d6f7d2c1..2e88336b3 100644 --- a/ts/licenses.json +++ b/ts/licenses.json @@ -95,8 +95,8 @@ "repository": "https://github.com/TooTallNate/node-agent-base", "publisher": "Nathan Rajlich", "email": "nathan@tootallnate.net", - "path": "node_modules/agent-base", - "licenseFile": "node_modules/agent-base/README.md" + "path": "node_modules/http-proxy-agent/node_modules/agent-base", + "licenseFile": "node_modules/http-proxy-agent/node_modules/agent-base/README.md" }, "asynckit@0.4.0": { "licenses": "MIT", @@ -572,6 +572,14 @@ "path": "node_modules/lodash-es", "licenseFile": "node_modules/lodash-es/LICENSE" }, + "lru-cache@10.4.3": { + "licenses": "ISC", + "repository": "https://github.com/isaacs/node-lru-cache", + "publisher": "Isaac Z. Schlueter", + "email": "i@izs.me", + "path": "node_modules/lru-cache", + "licenseFile": "node_modules/lru-cache/LICENSE" + }, "marked@5.1.2": { "licenses": "MIT", "repository": "https://github.com/markedjs/marked", @@ -768,16 +776,16 @@ "repository": "https://github.com/jsdom/whatwg-url", "publisher": "Sebastian Mayr", "email": "github@smayr.name", - "path": "node_modules/whatwg-url", - "licenseFile": "node_modules/whatwg-url/LICENSE.txt" + "path": "node_modules/jsdom/node_modules/whatwg-url", + "licenseFile": "node_modules/jsdom/node_modules/whatwg-url/LICENSE.txt" }, "whatwg-url@11.0.0": { "licenses": "MIT", "repository": "https://github.com/jsdom/whatwg-url", "publisher": "Sebastian Mayr", "email": "github@smayr.name", - "path": "node_modules/data-urls/node_modules/whatwg-url", - "licenseFile": "node_modules/data-urls/node_modules/whatwg-url/LICENSE.txt" + "path": "node_modules/whatwg-url", + "licenseFile": "node_modules/whatwg-url/LICENSE.txt" }, "ws@8.18.0": { "licenses": "MIT", diff --git a/yarn.lock b/yarn.lock index a1ee4eed6..ebb11b5eb 100644 --- a/yarn.lock +++ b/yarn.lock @@ -1173,14 +1173,14 @@ __metadata: languageName: node linkType: hard -"@sveltejs/kit@npm:^2.8.3": - version: 2.8.3 - resolution: "@sveltejs/kit@npm:2.8.3" +"@sveltejs/kit@npm:^2.20.7": + version: 2.20.7 + resolution: "@sveltejs/kit@npm:2.20.7" dependencies: "@types/cookie": "npm:^0.6.0" cookie: "npm:^0.6.0" devalue: "npm:^5.1.0" - esm-env: "npm:^1.0.0" + esm-env: "npm:^1.2.2" import-meta-resolve: "npm:^4.1.0" kleur: "npm:^4.1.5" magic-string: "npm:^0.30.5" @@ -1188,14 +1188,13 @@ __metadata: sade: "npm:^1.8.1" set-cookie-parser: "npm:^2.6.0" sirv: "npm:^3.0.0" - tiny-glob: "npm:^0.2.9" peerDependencies: - "@sveltejs/vite-plugin-svelte": ^3.0.0 || ^4.0.0-next.1 + "@sveltejs/vite-plugin-svelte": ^3.0.0 || ^4.0.0-next.1 || ^5.0.0 svelte: ^4.0.0 || ^5.0.0-next.0 - vite: ^5.0.3 + vite: ^5.0.3 || ^6.0.0 bin: svelte-kit: svelte-kit.js - checksum: 10c0/ffd15835c807f5d9401ef26b2bd9ac6603f46647c2b51ea9b8f9a43d64f8e549c44fb2274e10ca527362d8fda011c1fb814ea5a0287a024a8051349e5e2873d4 + checksum: 10c0/f1c0e477e981b5dc3fd04bd636e68f77c1947bd4b7200914b1b3553095f34ed9ca249765be7e04e89b21ebeb58227546fd807238f558c0d6e7d6559e4ee61b26 languageName: node linkType: hard @@ -1997,7 +1996,7 @@ __metadata: "@popperjs/core": "npm:^2.11.8" "@sqltools/formatter": "npm:^1.2.2" "@sveltejs/adapter-static": "npm:^3.0.0" - "@sveltejs/kit": "npm:^2.8.3" + "@sveltejs/kit": "npm:^2.20.7" "@sveltejs/vite-plugin-svelte": "npm:4.0.0" "@types/bootstrap": "npm:^5.0.12" "@types/codemirror": "npm:^5.60.0" @@ -2047,7 +2046,7 @@ __metadata: tslib: "npm:^2.0.3" tsx: "npm:^3.12.0" typescript: "npm:^5.0.4" - vite: "npm:^5.4.17" + vite: "npm:5.4.18" vitest: "npm:^2" languageName: unknown linkType: soft @@ -3876,14 +3875,7 @@ __metadata: languageName: node linkType: hard -"esm-env@npm:^1.0.0": - version: 1.0.0 - resolution: "esm-env@npm:1.0.0" - checksum: 10c0/6ea0001410224ebc18de4a83ce97dbdca6abc83ea4bbe91625aa3aead70793bb98dfa089f38e2cc5c13b7b025668d0649d5e25f2f9e8cca0f4aa3ad3406870d0 - languageName: node - linkType: hard - -"esm-env@npm:^1.2.1": +"esm-env@npm:^1.2.1, esm-env@npm:^1.2.2": version: 1.2.2 resolution: "esm-env@npm:1.2.2" checksum: 10c0/3d25c973f2fd69c25ffff29c964399cea573fe10795ecc1d26f6f957ce0483d3254e1cceddb34bf3296a0d7b0f1d53a28992f064ba509dfe6366751e752c4166 @@ -4284,13 +4276,6 @@ __metadata: languageName: node linkType: hard -"globalyzer@npm:0.1.0": - version: 0.1.0 - resolution: "globalyzer@npm:0.1.0" - checksum: 10c0/e16e47a5835cbe8a021423d4c7fcd9f5f85815b4190a7f50c1fdb95fc559d72e4fb30be96f106c66a99413f36d72da0f8323d19d27f60a8feec9d936139ec5a8 - languageName: node - linkType: hard - "globby@npm:^11.1.0": version: 11.1.0 resolution: "globby@npm:11.1.0" @@ -4305,13 +4290,6 @@ __metadata: languageName: node linkType: hard -"globrex@npm:^0.1.2": - version: 0.1.2 - resolution: "globrex@npm:0.1.2" - checksum: 10c0/a54c029520cf58bda1d8884f72bd49b4cd74e977883268d931fd83bcbd1a9eb96d57c7dbd4ad80148fb9247467ebfb9b215630b2ed7563b2a8de02e1ff7f89d1 - languageName: node - linkType: hard - "gopd@npm:^1.0.1": version: 1.0.1 resolution: "gopd@npm:1.0.1" @@ -6702,16 +6680,6 @@ __metadata: languageName: node linkType: hard -"tiny-glob@npm:^0.2.9": - version: 0.2.9 - resolution: "tiny-glob@npm:0.2.9" - dependencies: - globalyzer: "npm:0.1.0" - globrex: "npm:^0.1.2" - checksum: 10c0/cbe072f0d213a1395d30aa94845a051d4af18fe8ffb79c8e99ac1787cd25df69083f17791a53997cb65f469f48950cb61426ccc0683cc9df170ac2430e883702 - languageName: node - linkType: hard - "tinybench@npm:^2.9.0": version: 2.9.0 resolution: "tinybench@npm:2.9.0" @@ -7062,6 +7030,49 @@ __metadata: languageName: node linkType: hard +"vite@npm:5.4.18": + version: 5.4.18 + resolution: "vite@npm:5.4.18" + dependencies: + esbuild: "npm:^0.21.3" + fsevents: "npm:~2.3.3" + postcss: "npm:^8.4.43" + rollup: "npm:^4.20.0" + peerDependencies: + "@types/node": ^18.0.0 || >=20.0.0 + less: "*" + lightningcss: ^1.21.0 + sass: "*" + sass-embedded: "*" + stylus: "*" + sugarss: "*" + terser: ^5.4.0 + dependenciesMeta: + fsevents: + optional: true + peerDependenciesMeta: + "@types/node": + optional: true + less: + optional: true + lightningcss: + optional: true + sass: + optional: true + sass-embedded: + optional: true + stylus: + optional: true + sugarss: + optional: true + terser: + optional: true + bin: + vite: bin/vite.js + checksum: 10c0/a8cbbec6bdf399e62c386d70b8485e4f2f1b427beb19bc7c5d52b402a0c3750b7ff469fc20a8333755ea13bc1b0af5df3f22c8fd37d1739ee51d709b7a4740b6 + languageName: node + linkType: hard + "vite@npm:^5.0.0": version: 5.4.14 resolution: "vite@npm:5.4.14" @@ -7105,49 +7116,6 @@ __metadata: languageName: node linkType: hard -"vite@npm:^5.4.17": - version: 5.4.17 - resolution: "vite@npm:5.4.17" - dependencies: - esbuild: "npm:^0.21.3" - fsevents: "npm:~2.3.3" - postcss: "npm:^8.4.43" - rollup: "npm:^4.20.0" - peerDependencies: - "@types/node": ^18.0.0 || >=20.0.0 - less: "*" - lightningcss: ^1.21.0 - sass: "*" - sass-embedded: "*" - stylus: "*" - sugarss: "*" - terser: ^5.4.0 - dependenciesMeta: - fsevents: - optional: true - peerDependenciesMeta: - "@types/node": - optional: true - less: - optional: true - lightningcss: - optional: true - sass: - optional: true - sass-embedded: - optional: true - stylus: - optional: true - sugarss: - optional: true - terser: - optional: true - bin: - vite: bin/vite.js - checksum: 10c0/3322bd6d8da30cbc87b1b24cd14fdbca75abb36de81217d1062c8b4c574a1a0d28d11dfe23a3eed08b3d179d2bdc1510e0d7b9f3e1b722a45bd7631c7cec72eb - languageName: node - linkType: hard - "vitefu@npm:^1.0.3": version: 1.0.3 resolution: "vitefu@npm:1.0.3"