Skip to content

chore(sdk): update Vite to 8.1.6 - #4792

Merged
SDAChess merged 1 commit into
mainfrom
chore/update-vite/SDAChess
Oct 21, 2026
Merged

SDAChess merged 1 commit into
mainfrom
chore/update-vite/SDAChess

Conversation

@SDAChess

Copy link
Copy Markdown
Member

Summary

Update the TypeScript SDK's transitive Vite dependency from 8.1.4 to the patched 8.1.6 release to address Dependabot alert #57 (GHSA-587h-7wmj-h5pm).

Related Issue

No issue created, as requested by the repository administrator. This PR addresses the Dependabot alert linked above.

Changes

  • Update Vite's lockfile version, tarball URL, integrity hash, and dependency requirements.
  • Keep Vite transitive through Vitest; package.json is unchanged.

Release Notes

Testing

  • Checks appropriate to the affected code and behavior pass
  • mise run --skip-tools sdk:ts:ci passed with Node.js, mise, and uv supplied by Nix: protobuf generation/lint, Biome, typecheck, build, and all 196 tests.
  • Line coverage: 93.08%. npm audit reported zero vulnerabilities.
  • git diff --check passed.
  • Repository-wide pre-commit hook bypassed with explicit author approval after it failed because mise was absent from the default shell.
  • Unit and E2E test changes are not applicable to this dependency-only update.

Checklist

  • Follows Conventional Commits
  • Commits are signed off (DCO)
  • Architecture documentation changes are not applicable.

Signed-off-by: Simon Scatton <sscatton@nvidia.com>
@SDAChess
SDAChess added this pull request to the merge queue Oct 21, 2026
Merged via the queue into main with commit e7dc051 Oct 21, 2026
81 checks passed
@SDAChess
SDAChess deleted the chore/update-vite/SDAChess branch October 21, 2026 15:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants