[dev-dependency](deps-dev): Bump vite from 7.0.6 to 7.1.5 in /electron-app in the npm_and_yarn group across 1 directory by dependabot[bot] · Pull Request #149 · Nick2bad4u/FitFileViewer

dependabot · 2025-09-09T21:22:48Z

Bumps the npm_and_yarn group with 1 update in the /electron-app directory: vite.

Updates vite from 7.0.6 to 7.1.5

Release notes

v7.1.5

Please refer to CHANGELOG.md for details.

v7.1.4

Please refer to CHANGELOG.md for details.

v7.1.3

Please refer to CHANGELOG.md for details.

v7.1.2

Please refer to CHANGELOG.md for details.

v7.1.1

Please refer to CHANGELOG.md for details.

create-vite@7.1.1

Please refer to CHANGELOG.md for details.

plugin-legacy@7.1.0

Please refer to CHANGELOG.md for details.

create-vite@7.1.0

Please refer to CHANGELOG.md for details.

v7.1.0

Please refer to CHANGELOG.md for details.

v7.1.0-beta.1

Please refer to CHANGELOG.md for details.

v7.1.0-beta.0

Please refer to CHANGELOG.md for details.

v7.0.7

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.1.5 (2025-09-08)

Bug Fixes

apply fs.strict check to HTML files (#20736) (14015d7)

deps: update all non-major dependencies (#20732) (122bfba)

upgrade sirv to 3.0.2 (#20735) (09f2b52)

7.1.4 (2025-09-01)

Bug Fixes

add missing awaits (#20697) (79d10ed)

deps: update all non-major dependencies (#20676) (5a274b2)

deps: update all non-major dependencies (#20709) (0401feb)

pass rollup watch options when building in watch mode (#20674) (f367453)

Miscellaneous Chores

remove unused constants entry from rolldown.config.ts (#20710) (537fcf9)

Code Refactoring

remove unnecessary minify parameter from finalizeCss (#20701) (8099582)

7.1.3 (2025-08-19)

Features

cli: add Node.js version warning for unsupported versions (#20638) (a1be1bf)

generate code frame for parse errors thrown by terser (#20642) (a9ba017)

support long lines in generateCodeFrame (#20640) (1559577)

Bug Fixes

deps: update all non-major dependencies (#20634) (4851cab)

optimizer: incorrect incompatible error (#20439) (446fe83)

support multiline new URL(..., import.meta.url) expressions (#20644) (9ccf142)

Performance Improvements

cli: dynamically import resolveConfig (#20646) (f691f57)

Miscellaneous Chores

deps: update rolldown-related dependencies (#20633) (98b92e8)

Code Refactoring

replace startsWith with strict equality (#20603) (42816de)

use import in worker threads (#20641) (530687a)

Tests

... (truncated)

Commits

5647540 release: v7.1.5
09f2b52 fix: upgrade sirv to 3.0.2 (#20735)
14015d7 fix: apply fs.strict check to HTML files (#20736)
122bfba fix(deps): update all non-major dependencies (#20732)
bcc3144 release: v7.1.4
0401feb fix(deps): update all non-major dependencies (#20709)
537fcf9 chore: remove unused constants entry from rolldown.config.ts (#20710)
79d10ed fix: add missing awaits (#20697)
8099582 refactor: remove unnecessary minify parameter from finalizeCss (#20701)
f367453 fix: pass rollup watch options when building in watch mode (#20674)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 1 update in the /electron-app directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `vite` from 7.0.6 to 7.1.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.1.5/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 7.1.5 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2025-09-09T21:23:05Z

Pull Request Summary for Project Owner

Title:

dev-dependency: Bump vite from 7.0.6 to 7.1.5 in /electron-app in the npm_and_yarn group

Overview:

This pull request, created by Dependabot, updates the vite development dependency in your /electron-app directory from version 7.0.6 to 7.1.5.

Reason for Update:

The update introduces bug fixes, dependency updates, code refactoring, and performance improvements across multiple intermediate versions. It ensures the project benefits from the latest improvements and better compatibility.

Key Changes in `vite` from 7.0.6 to 7.1.5:

Bug Fixes: Fixed various issues related to HTML file checks, dependency management, and build processes in watch mode.
Performance Improvements: Optimizations in CLI behavior,

Nick2bad4u · 2025-09-09T21:23:11Z

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

github-actions · 2025-09-09T21:23:29Z

# npm audit report

braces  <3.0.3
Severity: high
Uncontrolled resource consumption in braces - https://github.com/advisories/GHSA-grv7-fg5c-xmjg
fix available via `npm audit fix --force`
Will install ts-migrate@0.0.0, which is a breaking change
node_modules/jscodeshift/node_modules/braces
node_modules/ts-migrate-plugins/node_modules/braces
  micromatch  <=4.0.7
  Depends on vulnerable versions of braces
  node_modules/jscodeshift/node_modules/micromatch
  node_modules/ts-migrate-plugins/node_modules/micromatch
    jscodeshift  0.3.20 - 0.13.1
    Depends on vulnerable versions of micromatch
    node_modules/jscodeshift
    node_modules/ts-migrate-plugins/node_modules/jscodeshift
      json5-writer  *
      Depends on vulnerable versions of jscodeshift
      node_modules/json5-writer
        ts-migrate  >=0.0.3
        Depends on vulnerable versions of json5-writer
        Depends on vulnerable versions of ts-migrate-plugins
        node_modules/ts-migrate
      ts-migrate-plugins  *
      Depends on vulnerable versions of jscodeshift
      node_modules/ts-migrate-plugins


6 vulnerabilities (4 moderate, 2 high)

To address all issues possible (including breaking changes), run:
  npm audit fix --force

Some issues need review, and may require choosing
a different dependency.

github-actions · 2025-09-09T21:36:54Z

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	39	0	0	0.77s
✅ COPYPASTE	jscpd	yes	no	no	15.84s
⚠️ CSS	stylelint	2	1	0	2.89s
✅ HTML	djlint	1	0	0	2.47s
⚠️ HTML	htmlhint	1	1	0	0.28s
✅ JAVASCRIPT	prettier	219	0	0	96.33s
✅ JSON	jsonlint	16	0	0	2.33s
⚠️ JSON	prettier	16	14	0	5.19s
✅ JSON	v8r	16	0	0	23.34s
⚠️ MARKDOWN	markdownlint	27	6	0	12.25s
⚠️ MARKDOWN	markdown-link-check	27	5	0	812.61s
✅ MARKDOWN	markdown-table-formatter	20	0	0	4.63s
✅ POWERSHELL	powershell	5	0	0	5.82s
⚠️ POWERSHELL	powershell_formatter	5	2	0	4.76s
✅ REPOSITORY	checkov	yes	no	no	29.24s
⚠️ REPOSITORY	devskim	yes	1	1	3.49s
✅ REPOSITORY	dustilock	yes	no	no	2.0s
✅ REPOSITORY	gitleaks	yes	no	no	2.66s
✅ REPOSITORY	git_diff	yes	no	no	0.17s
✅ REPOSITORY	grype	yes	no	no	41.08s
✅ REPOSITORY	kics	yes	no	no	3.17s
✅ REPOSITORY	secretlint	yes	no	no	4.61s
✅ REPOSITORY	syft	yes	no	no	3.83s
✅ REPOSITORY	trivy	yes	no	no	6.78s
✅ REPOSITORY	trivy-sbom	yes	no	no	0.57s
✅ REPOSITORY	trufflehog	yes	no	no	13.65s
⚠️ SPELL	cspell	351	1408	0	657.49s
✅ SPELL	lychee	95	0	0	47.96s
⚠️ TYPESCRIPT	ts-standard	3	3	0	1.23s
✅ XML	xmllint	1	0	0	1.96s
⚠️ YAML	prettier	49	48	96	16.38s
✅ YAML	v8r	49	0	0	69.84s
✅ YAML	yamllint	49	0	0	7.89s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

Click here to request the new flavor

github-actions · 2025-09-15T23:45:26Z

Summary of Pull Request

Title: Bump vite from version 7.0.6 to 7.1.5 in /electron-app dev-dependency.

Key Changes

This automated Dependabot PR updates the vite dev dependency to the latest version (7.1.5). Below is a summary of the changes across versions:

Bug Fixes:
- Resolved issues with file system checks, HTML parsing, and dependency upgrades.
- Improved rollup handling in watch mode.
- Addressed issues with missing await statements and resolved optimizer errors.
New Features:
- Added CLI warnings for unsupported Node.js versions.
- Enhanced error messages for code parsing.
- Improved support for long code lines in frame generation.
Refactoring and Performance:
- Removed unused constants and unnecessary parameters.
- Improved performance by dynamically importing configurations.
**

dependabot · 2025-09-15T23:53:28Z

Dependabot encountered an unknown error. Because of this, Dependabot cannot update this pull request.

github-actions · 2025-09-15T23:53:50Z

Summary of Pull Request

Purpose

This pull request updates the development dependency vite (a frontend tooling library) from version 7.0.6 to 7.1.5 in the /electron-app directory of the project. vite is part of the npm_and_yarn dependency group.

Notable Changes and Fixes

The updates to vite across versions include several bug fixes, performance improvements, and minor feature enhancements. Below are some highlights from the changelog:

Bug Fixes:
- Applied stricter file system (fs.strict) checks for HTML files.
- Addressed missing awaits, optimizing asynchronous operations.
- Fixed dependency management and updated various non-major dependencies.
- Corrected a bug in passing Rollup watch options when building in watch mode.
New Features:
- Added a CLI warning for unsupported Node.js versions.
- Improved error handling

…_yarn-f5c1666f0c

github-actions · 2025-09-17T17:13:24Z

Summary of the GitHub Pull Request:

Title: Bump vite from 7.0.6 to 7.1.5 in /electron-app directory.

Overview:
This pull request, created by Dependabot, updates vite, a development dependency, from version 7.0.6 to 7.1.5. This change applies specifically to the /electron-app directory, within the npm_and_yarn dependency group.

Key Updates in Vite (7.0.6 -> 7.1.5):

Bug Fixes:
- HTML Handling: Improved fs.strict checks for HTML files.
- Dependencies: Updated non-major dependencies to the latest versions.
- Build Improvements: Enhancements in rollup watch mode and upgraded sirv dependency to version 3.0.2.
- Other Fixes

github-actions · 2025-09-17T17:13:45Z

# npm audit report

braces  <3.0.3
Severity: high
Uncontrolled resource consumption in braces - https://github.com/advisories/GHSA-grv7-fg5c-xmjg
fix available via `npm audit fix --force`
Will install ts-migrate@0.0.0, which is a breaking change
node_modules/jscodeshift/node_modules/braces
node_modules/ts-migrate-plugins/node_modules/braces
  micromatch  <=4.0.7
  Depends on vulnerable versions of braces
  node_modules/jscodeshift/node_modules/micromatch
  node_modules/ts-migrate-plugins/node_modules/micromatch
    jscodeshift  0.3.20 - 0.13.1
    Depends on vulnerable versions of micromatch
    node_modules/jscodeshift
    node_modules/ts-migrate-plugins/node_modules/jscodeshift
      json5-writer  *
      Depends on vulnerable versions of jscodeshift
      node_modules/json5-writer
        ts-migrate  >=0.0.3
        Depends on vulnerable versions of json5-writer
        Depends on vulnerable versions of ts-migrate-plugins
        node_modules/ts-migrate
      ts-migrate-plugins  *
      Depends on vulnerable versions of jscodeshift
      node_modules/ts-migrate-plugins


6 vulnerabilities (4 moderate, 2 high)

To address all issues possible (including breaking changes), run:
  npm audit fix --force

Some issues need review, and may require choosing
a different dependency.

dependabot · 2025-09-28T19:57:31Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot assigned Nick2bad4u Sep 9, 2025

dependabot Bot requested a review from Nick2bad4u as a code owner September 9, 2025 21:22

dependabot Bot added dependabot Dependabot Pull Requests dependencies Pull requests that update a dependency file npm npm updates labels Sep 9, 2025

Merge branch 'main' into dependabot/npm_and_yarn/electron-app/npm_and…

4b716a8

…_yarn-f5c1666f0c

Nick2bad4u closed this Sep 28, 2025

dependabot Bot deleted the dependabot/npm_and_yarn/electron-app/npm_and_yarn-f5c1666f0c branch September 28, 2025 19:57

Navigation Menu

Repository navigation

[dev-dependency](deps-dev): Bump vite from 7.0.6 to 7.1.5 in /electron-app in the npm_and_yarn group across 1 directory - #149

[dev-dependency](deps-dev): Bump vite from 7.0.6 to 7.1.5 in /electron-app in the npm_and_yarn group across 1 directory#149
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/electron-app/npm_and_yarn-f5c1666f0c

dependabot Bot commented on behalf of github Sep 9, 2025 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 9, 2025

Uh oh!

Nick2bad4u commented Sep 9, 2025 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 9, 2025

Uh oh!

github-actions Bot commented Sep 9, 2025 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 15, 2025

Uh oh!

dependabot Bot commented on behalf of github Sep 15, 2025

Uh oh!

github-actions Bot commented Sep 15, 2025

Uh oh!

github-actions Bot commented Sep 17, 2025

Uh oh!

github-actions Bot commented Sep 17, 2025

Uh oh!

dependabot Bot commented on behalf of github Sep 28, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.1.5

v7.1.4

v7.1.3

v7.1.2

v7.1.1

create-vite@7.1.1

plugin-legacy@7.1.0

create-vite@7.1.0

v7.1.0

v7.1.0-beta.1

v7.1.0-beta.0

v7.0.7

7.1.5 (2025-09-08)

Bug Fixes

7.1.4 (2025-09-01)

Bug Fixes

Miscellaneous Chores

Code Refactoring

7.1.3 (2025-08-19)

Features

Bug Fixes

Performance Improvements

Miscellaneous Chores

Code Refactoring

Tests

Uh oh!

github-actions Bot commented Sep 9, 2025

Pull Request Summary for Project Owner

Title:

Overview:

Reason for Update:

Key Changes in vite from 7.0.6 to 7.1.5:

Uh oh!

Nick2bad4u commented Sep 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🎉 Snyk checks have passed. No issues have been found so far.

Uh oh!

github-actions Bot commented Sep 9, 2025

Uh oh!

github-actions Bot commented Sep 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦙 MegaLinter status: ⚠️ WARNING

Uh oh!

github-actions Bot commented Sep 15, 2025

Summary of Pull Request

Key Changes

Uh oh!

dependabot Bot commented on behalf of github Sep 15, 2025

Uh oh!

github-actions Bot commented Sep 15, 2025

Summary of Pull Request

Purpose

Notable Changes and Fixes

Uh oh!

github-actions Bot commented Sep 17, 2025

Summary of the GitHub Pull Request:

Uh oh!

github-actions Bot commented Sep 17, 2025

Uh oh!

dependabot Bot commented on behalf of github Sep 28, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 9, 2025 •

edited

Loading

Key Changes in `vite` from 7.0.6 to 7.1.5:

Nick2bad4u commented Sep 9, 2025 •

edited

Loading

github-actions Bot commented Sep 9, 2025 •

edited

Loading