Commit caee1d5
authored
* fix(deps): bump vite to 7.3.5 in site/ via npm overrides
Adds overrides.vite=^7.3.5 to site/package.json to force resolution of
the transitive vite dep from 7.3.2 to 7.3.5, fixing Dependabot alerts
#62 and #63 (server.fs.deny bypass and NTLMv2 hash disclosure).
Dependabot couldn't auto-update because @astrojs/tailwind@6.0.2 only
declares peer dep support for astro@^3-5 (not v6), causing strict
resolution to conflict when bumping vite past 7.3.2.
1 parent 83bde6a commit caee1d5
2 files changed
Lines changed: 6 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
17 | 17 | | |
18 | 18 | | |
19 | 19 | | |
| 20 | + | |
| 21 | + | |
| 22 | + | |
20 | 23 | | |
21 | 24 | | |
22 | 25 | | |
| |||
0 commit comments