Skip to content

Update frontend build dependencies for esbuild advisory#44

Merged
Vedasheersh merged 1 commit into
maranasgroup:mainfrom
Vedasheersh:codex/security-esbuild
Jun 15, 2026
Merged

Update frontend build dependencies for esbuild advisory#44
Vedasheersh merged 1 commit into
maranasgroup:mainfrom
Vedasheersh:codex/security-esbuild

Conversation

@Vedasheersh

Copy link
Copy Markdown
Contributor

Summary

  • Update the frontend Vite toolchain from Vite 6 to Vite 8 and @vitejs/plugin-vue 6.
  • Refresh package-lock.json so the frontend no longer installs the vulnerable esbuild range reported by GHSA-gv7w-rqvm-qjhr.
  • The refreshed lockfile also resolves the transitive PostCSS audit finding by using postcss@8.5.15.

Verification

  • npm audit --json reports 0 vulnerabilities.
  • npm run build succeeds with Vite 8.0.16.
  • git -c core.whitespace=blank-at-eol,blank-at-eof,space-before-tab,cr-at-eol diff --check

@Vedasheersh Vedasheersh merged commit b314a28 into maranasgroup:main Jun 15, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant