Repository navigation
fix(deps): address security vulnerabilities in dompurify, vite, and next - #2194
Conversation
|
@czarandy must be a member of the Meta Open Source team on Vercel to deploy. Learn more about collaboration on Vercel and other options here. |
meta-cla
Bot
added
the
CLA Signed
- dompurify: resolve to ^3.3.2 (was 3.2.7, affected <= 3.3.1, medium severity) - vite: bump to ^6.4.2 and add resolution (was 5.4.21, affected <= 6.4.1, medium severity) - next: bump to ^15.5.16 across all apps (was 15.5.15, affected < 15.5.16, high severity)
028afdc to
9809c07
Compare
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
PR Analysis Report📚 Storybook PreviewView Storybook for this PR 🧪 Sandbox PreviewView Sandbox for this PR No new or modified components detected. Bundle Size Summary
Accessibility AuditStatus: No accessibility violations detected. Generated by PR Enrichment workflow | Storybook | Sandbox | View full report |
cixzhang
left a comment
cixzhang
left a comment
There was a problem hiding this comment.
Safe patches across the board. Vite major bump is contained to internal test app. Ship it.
…ext (#2194) - dompurify: resolve to ^3.3.2 (was 3.2.7, affected <= 3.3.1, medium severity) - vite: bump to ^6.4.2 and add resolution (was 5.4.21, affected <= 6.4.1, medium severity) - next: bump to ^15.5.16 across all apps (was 15.5.15, affected < 15.5.16, high severity)
…ext (#2194) - dompurify: resolve to ^3.3.2 (was 3.2.7, affected <= 3.3.1, medium severity) - vite: bump to ^6.4.2 and add resolution (was 5.4.21, affected <= 6.4.1, medium severity) - next: bump to ^15.5.16 across all apps (was 15.5.15, affected < 15.5.16, high severity)
This branch had an error being deployed
2 participants
Summary
^3.3.2resolution to rootpackage.json— resolves to 3.4.5 (was 3.2.7, transitive via monaco-editor)internal/vibe-tests/appfrom^5.0.0to^6.4.2and added^6.4.2resolution to root — resolves to 6.4.2 (was 5.4.21)^15.5.15to^15.5.16across 6 apps (docsite, sandbox, example-nextjs, example-nextjs-source, example-nextjs-stylex, example-nextjs-tailwind) — resolves to 15.5.18Test plan
yarn installsucceeds with no new errorsyarn dev)yarn workspace @xds/docs build)