Bump vite from 5.4.7 to 5.4.12 in /addons #1018
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
dependencies
|
@facebook-github-bot has imported this pull request. If you are a Meta employee, you can view this diff on Phabricator. (Because this pull request was imported automatically, there will not be any future comments.) |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/addons/vite-5.4.12
branch
from
72b652b to
0ab2378
Compare
|
@dependabot[bot] has updated the pull request. You must reimport the pull request before landing. |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/addons/vite-5.4.12
branch
from
0ab2378 to
aae6e91
Compare
|
@dependabot[bot] has updated the pull request. You must reimport the pull request before landing. |
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.4.7 to 5.4.12. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.4.12/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.4.12/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/addons/vite-5.4.12
branch
from
aae6e91 to
71aaac6
Compare
|
@dependabot[bot] has updated the pull request. You must reimport the pull request before landing. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
|
@quark-zju merged this pull request in fda584c. |
Bumps vite from 5.4.7 to 5.4.12.
Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
Commits
f428aa9release: v5.4.129da4abcfix!: check host header to prevent DNS rebinding attacks and introduce `serve...b71a5c8fix: verify token for HMR WebSocket connectiondfea38ffix!: defaultserver.cors: falseto disallow fetching from untrusted originsecd2375chore: add deps update changelogc54c860release: v5.4.115f52bc8release: v5.4.107d1a3bcfix: backport #18367,augment hash for CSS files to prevent chromium erroring ...898d61frelease: v5.4.9508d9abfix: bump launch-editor-middleware to v2.9.1 (#18348)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.