Skip to content

Conversation

@TomGoedeme
Copy link

@TomGoedeme TomGoedeme commented Jan 12, 2025

Update to Vite required conversion to MJS from CJS in prebundle.js

@TomGoedeme TomGoedeme changed the title Update vite and axios dependencies to mitigate subdepency CVE's Update vite and axios dependencies to mitigate subdepency vulnerabilities Jan 12, 2025
@deacon-mp deacon-mp requested a review from Copilot September 29, 2025 23:23
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates vite and axios dependencies to mitigate subdependency vulnerabilities. The major vite version update required converting the project to use ES modules instead of CommonJS.

  • Updated vite from v2.8.4 to v6.0.7 and axios from v0.26.1 to v1.7.9
  • Converted package.json to ES module type
  • Updated prebundle.js to use ES module import syntax

Reviewed Changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File Description
package.json Added module type and updated vite/axios versions
prebundle.js Converted from CommonJS require to ES module import

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant