build(deps-dev): bump vite from 6.3.4 to 7.1.7 by dependabot[bot] · Pull Request #575 · Chia-Network/Climate-Tokenization-Engine-UI

dependabot · 2025-09-23T20:04:53Z

Bumps vite from 6.3.4 to 7.1.7.

Release notes

v7.1.7

Please refer to CHANGELOG.md for details.

v7.1.6

Please refer to CHANGELOG.md for details.

v7.1.5

Please refer to CHANGELOG.md for details.

v7.1.4

Please refer to CHANGELOG.md for details.

v7.1.3

Please refer to CHANGELOG.md for details.

create-vite@7.1.3

Please refer to CHANGELOG.md for details.

v7.1.2

Please refer to CHANGELOG.md for details.

create-vite@7.1.2

Please refer to CHANGELOG.md for details.

v7.1.1

Please refer to CHANGELOG.md for details.

create-vite@7.1.1

Please refer to CHANGELOG.md for details.

plugin-legacy@7.1.0

Please refer to CHANGELOG.md for details.

create-vite@7.1.0

Please refer to CHANGELOG.md for details.

v7.1.0

Please refer to CHANGELOG.md for details.

v7.1.0-beta.1

Please refer to CHANGELOG.md for details.

v7.1.0-beta.0

Please refer to CHANGELOG.md for details.

v7.0.7

Please refer to CHANGELOG.md for details.

v7.0.6

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

7.1.7 (2025-09-22)

Bug Fixes

build: fix ssr environment emitAssets: true when sharedConfigBuild: true (#20787) (4c4583c)

client: use CSP nonce when rendering error overlay (#20791) (9bc9d12)

deps: update all non-major dependencies (#20811) (9f2247c)

glob: handle glob imports from folders starting with dot (#20800) (105abe8)

hmr: trigger prune event when import is removed from non hmr module (#20768) (9f32b1d)

hmr: wait for import.meta.hot.prune callbacks to complete before running other HMRs (#20698) (98a3484)

7.1.6 (2025-09-18)

Bug Fixes

deps: update all non-major dependencies (#20773) (88af2ae)

esbuild: inject esbuild helper functions with minified $ variables correctly (#20761) (7e8e004)

fallback terser to main thread when nameCache is provided (#20750) (a679a64)

types: strict env typings fail when skipLibCheck is false (#20755) (cc54e29)

Miscellaneous Chores

deps: update rolldown-related dependencies (#20675) (a67bb5f)

deps: update rolldown-related dependencies (#20772) (d785e72)

7.1.5 (2025-09-08)

Bug Fixes

apply fs.strict check to HTML files (#20736) (14015d7)

deps: update all non-major dependencies (#20732) (122bfba)

upgrade sirv to 3.0.2 (#20735) (09f2b52)

7.1.4 (2025-09-01)

Bug Fixes

add missing awaits (#20697) (79d10ed)

deps: update all non-major dependencies (#20676) (5a274b2)

deps: update all non-major dependencies (#20709) (0401feb)

pass rollup watch options when building in watch mode (#20674) (f367453)

Miscellaneous Chores

remove unused constants entry from rolldown.config.ts (#20710) (537fcf9)

Code Refactoring

remove unnecessary minify parameter from finalizeCss (#20701) (8099582)

7.1.3 (2025-08-19)

Features

cli: add Node.js version warning for unsupported versions (#20638) (a1be1bf)

... (truncated)

Commits

693d255 release: v7.1.7
98a3484 fix(hmr): wait for import.meta.hot.prune callbacks to complete before runni...
9f32b1d fix(hmr): trigger prune event when import is removed from non hmr module (#20...
9f2247c fix(deps): update all non-major dependencies (#20811)
105abe8 fix(glob): handle glob imports from folders starting with dot (#20800)
4c4583c fix(build): fix ssr environment emitAssets: true when `sharedConfigBuild: t...
9bc9d12 fix(client): use CSP nonce when rendering error overlay (#20791)
54377f7 release: v7.1.6
88af2ae fix(deps): update all non-major dependencies (#20773)
d785e72 chore(deps): update rolldown-related dependencies (#20772)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.3.4 to 7.1.7. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.1.7/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 7.1.7 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2025-09-23T20:14:22Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	postcss@8.5.3 ⏵ 8.5.6	⁺¹		⁺¹
	vite@6.3.4 ⏵ 7.1.7	⁺³	⁺⁹	⁺²	⁺¹

View full report

socket-security · 2025-09-23T20:14:23Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		`vite@7.1.7` is a AI-detected potential code anomaly. Notes: The code is a benign browser automation helper that reuses an existing tab, reuses an empty tab, or opens a new tab to navigate to a user-supplied URL. While generally safe in a trusted automation context, the lack of input validation introduces potential misuse if the input URL is untrusted. No evidence of data exfiltration, hardcoded secrets, or remote control functionality is present in this fragment. Confidence: 1.00 Severity: 0.60 From: package-lock.json → `npm/vite@7.1.7` ℹ Read more on: This package \| This alert \| What is an AI-detected potential code anomaly? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: An AI system found a low-risk anomaly in this package. It may still be fine to use, but you should check that it is safe before proceeding. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/vite@7.1.7`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot · 2025-10-07T20:15:07Z

Superseded by #585.

dependabot bot added Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 23, 2025

dependabot bot mentioned this pull request Sep 23, 2025

build(deps-dev): bump vite from 6.3.4 to 7.1.5 #568

Closed

dependabot bot closed this Oct 7, 2025

dependabot bot deleted the dependabot/npm_and_yarn/vite-7.1.7 branch October 7, 2025 20:15

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps-dev): bump vite from 6.3.4 to 7.1.7#575

build(deps-dev): bump vite from 6.3.4 to 7.1.7#575
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/vite-7.1.7

dependabot bot commented on behalf of github Sep 23, 2025

Uh oh!

socket-security bot commented Sep 23, 2025

Uh oh!

socket-security bot commented Sep 23, 2025

Uh oh!

dependabot bot commented on behalf of github Oct 7, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Sep 23, 2025

v7.1.7

v7.1.6

v7.1.5

v7.1.4

v7.1.3

create-vite@7.1.3

v7.1.2

create-vite@7.1.2

v7.1.1

create-vite@7.1.1

plugin-legacy@7.1.0

create-vite@7.1.0

v7.1.0

v7.1.0-beta.1

v7.1.0-beta.0

v7.0.7

v7.0.6

7.1.7 (2025-09-22)

Bug Fixes

7.1.6 (2025-09-18)

Bug Fixes

Miscellaneous Chores

7.1.5 (2025-09-08)

Bug Fixes

7.1.4 (2025-09-01)

Bug Fixes

Miscellaneous Chores

Code Refactoring

7.1.3 (2025-08-19)

Features

Uh oh!

socket-security bot commented Sep 23, 2025

Uh oh!

socket-security bot commented Sep 23, 2025

Uh oh!

dependabot bot commented on behalf of github Oct 7, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants