DarkSky
027f741ed6
chore: bump deps ( #14065 )
...
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **Chores**
* Updated dependency versions across the monorepo (notably zod →
^3.25.76 and vitest-related packages → ^3.2.4), plus minor package bumps
to align tooling and libraries. These are manifest/test-tooling updates
only; no public API, behavior, or end-user features were changed.
<sub>✏️ Tip: You can customize this high-level summary in your review
settings.</sub>
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-12-08 21:47:25 +08:00
renovate[bot]
2c44d3abc6
chore: bump up vite version to v7 [SECURITY] ( #13786 )
...
This PR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
| [vite](https://vite.dev )
([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite ))
| [`^6.1.0` ->
`^7.0.0`](https://renovatebot.com/diffs/npm/vite/6.3.6/7.1.11 ) |
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
| [vite](https://vite.dev )
([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite ))
| [`^6.0.3` ->
`^7.0.0`](https://renovatebot.com/diffs/npm/vite/6.3.6/7.1.11 ) |
[](https://docs.renovatebot.com/merge-confidence/ )
|
[](https://docs.renovatebot.com/merge-confidence/ )
|
### GitHub Vulnerability Alerts
####
[CVE-2025-62522](https://redirect.github.com/vitejs/vite/security/advisories/GHSA-93m4-6634-74q7 )
### Summary
Files denied by
[`server.fs.deny`](https://vitejs.dev/config/server-options.html#server-fs-deny )
were sent if the URL ended with `\` when the dev server is running on
Windows.
### Impact
Only apps that match the following conditions are affected:
- explicitly exposes the Vite dev server to the network (using --host or
[`server.host` config
option](https://vitejs.dev/config/server-options.html#server-host ))
- running the dev server on Windows
### Details
`server.fs.deny` can contain patterns matching against files (by default
it includes `.env`, `.env.*`, `*.{crt,pem}` as such patterns). These
patterns were able to bypass by using a back slash(`\`). The root cause
is that `fs.readFile('/foo.png/')` loads `/foo.png`.
### PoC
```shell
npm create vite@latest
cd vite-project/
cat "secret" > .env
npm install
npm run dev
curl --request-target /.env\ http://localhost:5173
```
<img width="1593" height="616" alt="image"
src="https://github.com/user-attachments/assets/36212f4e-1d3c-4686-b16f-16b35ca9e175 "
/>
---
### Release Notes
<details>
<summary>vitejs/vite (vite)</summary>
###
[`v7.1.11`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-7111-2025-10-20-small )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.1.10...v7.1.11 )
##### Bug Fixes
- **dev:** trim trailing slash before `server.fs.deny` check
([#​20968](https://redirect.github.com/vitejs/vite/issues/20968 ))
([f479cc5](f479cc57c4https://redirect.github.com/vitejs/vite/issues/20966 ))
([6fb41a2](6fb41a260bhttps://redirect.github.com/vitejs/vite/issues/20921 ))
([d0094af](d0094af639https://redirect.github.com/vitejs/vite/issues/20945 ))
([ef411ce](ef411cee26https://redirect.github.com/vitejs/vite/issues/20946 ))
([a817307](a81730754dhttps://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-7110-2025-10-14-small )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.1.9...v7.1.10 )
##### Bug Fixes
- **css:** avoid duplicate style for server rendered stylesheet link and
client inline style during dev
([#​20767](https://redirect.github.com/vitejs/vite/issues/20767 ))
([3a92bc7](3a92bc79b3https://redirect.github.com/vitejs/vite/issues/20883 ))
([d3e7eee](d3e7eeefa9879de86935https://redirect.github.com/vitejs/vite/issues/20894 ))
([3213f90](3213f90ff0https://redirect.github.com/vitejs/vite/issues/20760 ))
([b95fa2a](b95fa2aa75https://redirect.github.com/vitejs/vite/issues/20887 ))
([6537d15](6537d15591https://redirect.github.com/vitejs/vite/issues/20906 ))
([446eb38](446eb38632https://redirect.github.com/vitejs/vite/issues/20898 ))
([73b6d24](73b6d243e0https://redirect.github.com/vitejs/vite/issues/20926 ))
([c714776](c714776aa1https://redirect.github.com/vitejs/vite/issues/20890 ))
([29e98dc](29e98dc3efhttps://redirect.github.com/vitejs/vite/issues/20923 ))
([a5e3b06](a5e3b064fahttps://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-719-2025-10-03-small )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.1.8...v7.1.9 )
##### Reverts
- **server:** drain stdin when not interactive
([#​20885](https://redirect.github.com/vitejs/vite/issues/20885 ))
([12d72b0](12d72b0538https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-718-2025-10-02-small )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.1.7...v7.1.8 )
##### Bug Fixes
- **css:** improve url escape characters handling
([#​20847](https://redirect.github.com/vitejs/vite/issues/20847 ))
([24a61a3](24a61a3f54https://redirect.github.com/vitejs/vite/issues/20855 ))
([788a183](788a183afchttps://redirect.github.com/vitejs/vite/issues/20864 ))
([e670799](e670799e12https://redirect.github.com/vitejs/vite/issues/20866 ))
([6bc6c4d](6bc6c4dbc2https://redirect.github.com/vitejs/vite/issues/20872 ))
([63e040f](63e040f1cahttps://redirect.github.com/vitejs/vite/issues/20808 ))
([d4eca98](d4eca986d6https://redirect.github.com/vitejs/vite/issues/20837 ))
([bb950e9](bb950e92b3https://redirect.github.com/vitejs/vite/issues/20830 ))
([d65a983](d65a9831c9https://redirect.github.com/vitejs/vite/issues/20747 ))
([fdb758a](fdb758a517https://redirect.github.com/vitejs/vite/issues/20810 ))
([ea68a88](ea68a8868chttps://redirect.github.com/vitejs/vite/issues/20854 ))
([4dd06fd](4dd06fdc8dhttps://redirect.github.com/vitejs/vite/issues/20865 ))
([166a178](166a178f45https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-717-2025-09-22-small )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.1.6...v7.1.7 )
##### Bug Fixes
- **build:** fix ssr environment `emitAssets: true` when
`sharedConfigBuild: true`
([#​20787](https://redirect.github.com/vitejs/vite/issues/20787 ))
([4c4583c](4c4583ce7ahttps://redirect.github.com/vitejs/vite/issues/20791 ))
([9bc9d12](9bc9d1258fhttps://redirect.github.com/vitejs/vite/issues/20811 ))
([9f2247c](9f2247c066https://redirect.github.com/vitejs/vite/issues/20800 ))
([105abe8](105abe87c4https://redirect.github.com/vitejs/vite/issues/20768 ))
([9f32b1d](9f32b1dc71https://redirect.github.com/vitejs/vite/issues/20698 ))
([98a3484](98a3484733https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-716-2025-09-18-small )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.1.5...v7.1.6 )
##### Bug Fixes
- **deps:** update all non-major dependencies
([#​20773](https://redirect.github.com/vitejs/vite/issues/20773 ))
([88af2ae](88af2ae7dfhttps://redirect.github.com/vitejs/vite/issues/20761 ))
([7e8e004](7e8e0043d6https://redirect.github.com/vitejs/vite/issues/20750 ))
([a679a64](a679a64340https://redirect.github.com/vitejs/vite/issues/20755 ))
([cc54e29](cc54e29474https://redirect.github.com/vitejs/vite/issues/20675 ))
([a67bb5f](a67bb5fbechttps://redirect.github.com/vitejs/vite/issues/20772 ))
([d785e72](d785e72f2ehttps://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-715-2025-09-08-small )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.1.4...v7.1.5 )
##### Bug Fixes
- apply `fs.strict` check to HTML files
([#​20736](https://redirect.github.com/vitejs/vite/issues/20736 ))
([14015d7](14015d794fhttps://redirect.github.com/vitejs/vite/issues/20732 ))
([122bfba](122bfbabebhttps://redirect.github.com/vitejs/vite/issues/20735 ))
([09f2b52](09f2b52e8dhttps://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-714-2025-09-01-small )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.1.3...v7.1.4 )
##### Bug Fixes
- add missing awaits
([#​20697](https://redirect.github.com/vitejs/vite/issues/20697 ))
([79d10ed](79d10ed634https://redirect.github.com/vitejs/vite/issues/20676 ))
([5a274b2](5a274b29dfhttps://redirect.github.com/vitejs/vite/issues/20709 ))
([0401feb](0401feba17https://redirect.github.com/vitejs/vite/issues/20674 ))
([f367453](f367453ca2https://redirect.github.com/vitejs/vite/issues/20710 ))
([537fcf9](537fcf9186https://redirect.github.com/vitejs/vite/issues/20701 ))
([8099582](8099582e53https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-713-2025-08-19-small )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.1.2...v7.1.3 )
##### Features
- **cli:** add Node.js version warning for unsupported versions
([#​20638](https://redirect.github.com/vitejs/vite/issues/20638 ))
([a1be1bf](a1be1bf090https://redirect.github.com/vitejs/vite/issues/20642 ))
([a9ba017](a9ba0174a5https://redirect.github.com/vitejs/vite/issues/20640 ))
([1559577](1559577317https://redirect.github.com/vitejs/vite/issues/20634 ))
([4851cab](4851cab3bahttps://redirect.github.com/vitejs/vite/issues/20439 ))
([446fe83](446fe83033https://redirect.github.com/vitejs/vite/issues/20644 ))
([9ccf142](9ccf142764https://redirect.github.com/vitejs/vite/issues/20646 ))
([f691f57](f691f57e46https://redirect.github.com/vitejs/vite/issues/20633 ))
([98b92e8](98b92e8c4bhttps://redirect.github.com/vitejs/vite/issues/20603 ))
([42816de](42816dee0ehttps://redirect.github.com/vitejs/vite/issues/20641 ))
([530687a](530687a344https://redirect.github.com/vitejs/vite/issues/20647 ))
([731d3e6](731d3e61f4https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-712-2025-08-12-small )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.1.1...v7.1.2 )
##### Bug Fixes
- **client:** add `[vite]` prefixes to debug logs
([#​20595](https://redirect.github.com/vitejs/vite/issues/20595 ))
([7cdef61](7cdef612a6https://redirect.github.com/vitejs/vite/issues/20573 ))
([c583927](c583927beehttps://redirect.github.com/vitejs/vite/issues/20587 ))
([20d4817](20d48172a0https://redirect.github.com/vitejs/vite/issues/20558 ))
([ab33803](ab33803f2chttps://redirect.github.com/vitejs/vite/issues/20581 ))
([b7d494b](b7d494bf60https://redirect.github.com/vitejs/vite/issues/20554 ))
([2770478](2770478d1chttps://redirect.github.com/vitejs/vite/issues/20577 ))
([0a6048a](0a6048aba4https://redirect.github.com/vitejs/vite/issues/20586 ))
([77632c5](77632c55dbhttps://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-7111-2025-10-20-small )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.1.0...v7.1.1 )
##### Bug Fixes
- **dev:** trim trailing slash before `server.fs.deny` check
([#​20968](https://redirect.github.com/vitejs/vite/issues/20968 ))
([f479cc5](f479cc57c4https://redirect.github.com/vitejs/vite/issues/20966 ))
([6fb41a2](6fb41a260bhttps://redirect.github.com/vitejs/vite/issues/20921 ))
([d0094af](d0094af639https://redirect.github.com/vitejs/vite/issues/20945 ))
([ef411ce](ef411cee26https://redirect.github.com/vitejs/vite/issues/20946 ))
([a817307](a81730754dhttps://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#710-2025-08-07 )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.0.8...v7.1.0 )
##### Features
- support files with more than 1000 lines by `generateCodeFrame`
([#​20508](https://redirect.github.com/vitejs/vite/issues/20508 ))
([e7d0b2a](e7d0b2afa5https://redirect.github.com/vitejs/vite/issues/20516 ))
([5d3e3c2](5d3e3c2ae5https://redirect.github.com/vitejs/vite/issues/20525 ))
([d17cfed](d17cfeda07https://redirect.github.com/vitejs/vite/issues/20517 ))
([794a8f2](794a8f2302https://redirect.github.com/vitejs/vite/issues/20473 ))
([e6aaf17](e6aaf17ca2https://redirect.github.com/vitejs/vite/issues/20437 ))
([c1279e7](c1279e7540https://redirect.github.com/vitejs/vite/issues/20436 ))
([6970d17](6970d1740chttps://redirect.github.com/vitejs/vite/issues/20431 ))
([8ad388a](8ad388aeabhttps://redirect.github.com/vitejs/vite/issues/20435 ))
([8c8f587](8c8f5879eahttps://redirect.github.com/vitejs/vite/issues/19057 ))
([5c97c22](5c97c22548https://redirect.github.com/vitejs/vite/issues/20301 ))
([0fe3f2f](0fe3f2f7c3https://redirect.github.com/vitejs/vite/issues/20279 ))
([344d302](344d30243bhttps://redirect.github.com/vitejs/vite/issues/20433 ))
([95927d9](95927d9c0bhttps://redirect.github.com/vitejs/vite/issues/20434 ))
([259f45d](259f45d069https://redirect.github.com/vitejs/vite/issues/19981 ))
([45f6443](45f6443a93https://redirect.github.com/vitejs/vite/issues/20409 ))
([c669c52](c669c524e6https://redirect.github.com/vitejs/vite/issues/20260 ))
([62835f7](62835f7c06https://redirect.github.com/vitejs/vite/issues/20520 ))
([f1a2635](f1a2635e69https://redirect.github.com/vitejs/vite/issues/20518 ))
([bac9f3e](bac9f3ecf8https://redirect.github.com/vitejs/vite/issues/20503 ))
([64a52e7](64a52e70d9https://redirect.github.com/vitejs/vite/issues/20542 ))
([6a46cda](6a46cdac5dhttps://redirect.github.com/vitejs/vite/issues/20556 ))
([97d5111](97d5111645https://redirect.github.com/vitejs/vite/issues/20507 ))
([1b211fd](1b211fd1behttps://redirect.github.com/vitejs/vite/issues/20512 ))
([3676da5](3676da5bc5https://redirect.github.com/vitejs/vite/issues/20537 ))
([fc9a9d3](fc9a9d3f14https://redirect.github.com/vitejs/vite/issues/20528 ))
([c5a10ec](c5a10ec004https://redirect.github.com/vitejs/vite/issues/20483 ))
([c12a4a7](c12a4a76a2https://redirect.github.com/vitejs/vite/issues/20502 ))
([9ebe4a5](9ebe4a514ahttps://redirect.github.com/vitejs/vite/issues/20489 ))
([f6aa04a](f6aa04a52dhttps://redirect.github.com/vitejs/vite/issues/20410 ))
([4be5270](4be5270b27https://redirect.github.com/vitejs/vite/issues/20391 ))
([7eac8dd](7eac8ddb65https://redirect.github.com/vitejs/vite/issues/20495 ))
([10d48bb](10d48bb2e3https://redirect.github.com/vitejs/vite/issues/20496 ))
([62b3e0d](62b3e0d95chttps://redirect.github.com/vitejs/vite/issues/20460 ))
([8033e5b](8033e5bf8dhttps://redirect.github.com/vitejs/vite/issues/20429 ))
([22ad43b](22ad43b4bfhttps://redirect.github.com/vitejs/vite/issues/20536 ))
([8be2787](8be278748ahttps://redirect.github.com/vitejs/vite/issues/20490 ))
([744582d](744582d018f20addc536https://redirect.github.com/vitejs/vite/issues/19592 ))
([ced1343](ced13433fbhttps://redirect.github.com/vitejs/vite/issues/20527 ))
([958cdf2](958cdf24f8https://redirect.github.com/vitejs/vite/issues/20373 ))
([2c4af1f](2c4af1f90bhttps://redirect.github.com/vitejs/vite/issues/20375 ))
([61a9778](61a97780e6https://redirect.github.com/vitejs/vite/issues/20424 ))
([7979f9d](7979f9da55https://redirect.github.com/vitejs/vite/issues/20402 ))
([26d9872](26d987232ahttps://redirect.github.com/vitejs/vite/issues/20358 ))
([f19c4d7](f19c4d72dehttps://redirect.github.com/vitejs/vite/issues/20480 ))
([acd2a13](acd2a13c2dhttps://redirect.github.com/vitejs/vite/issues/20544 ))
([856d3f0](856d3f06e6https://redirect.github.com/vitejs/vite/issues/20545 ))
([1f23554](1f235545b1https://redirect.github.com/vitejs/vite/compare/v7.1.0-beta.0...v7.1.0-beta.1 )
(2025-08-05)
See [7.1.0-beta.1
changelog](https://redirect.github.com/vitejs/vite/blob/v7.1.0-beta.1/packages/vite/CHANGELOG.md )
#####
[7.1.0-beta.0](https://redirect.github.com/vitejs/vite/compare/v7.0.6...v7.1.0-beta.0 )
(2025-07-30)
See [7.1.0-beta.0
changelog](https://redirect.github.com/vitejs/vite/blob/v7.1.0-beta.0/packages/vite/CHANGELOG.md )
###
[`v7.0.8`](https://redirect.github.com/vitejs/vite/releases/tag/v7.0.8 )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.0.7...v7.0.8 )
Please refer to
[CHANGELOG.md](https://redirect.github.com/vitejs/vite/blob/v7.0.8/packages/vite/CHANGELOG.md )
for details.
###
[`v7.0.7`](https://redirect.github.com/vitejs/vite/releases/tag/v7.0.7 )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.0.6...v7.0.7 )
Please refer to
[CHANGELOG.md](https://redirect.github.com/vitejs/vite/blob/v7.0.7/packages/vite/CHANGELOG.md )
for details.
###
[`v7.0.6`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#710-2025-08-07 )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.0.5...v7.0.6 )
##### Features
- support files with more than 1000 lines by `generateCodeFrame`
([#​20508](https://redirect.github.com/vitejs/vite/issues/20508 ))
([e7d0b2a](e7d0b2afa5https://redirect.github.com/vitejs/vite/issues/20516 ))
([5d3e3c2](5d3e3c2ae5https://redirect.github.com/vitejs/vite/issues/20525 ))
([d17cfed](d17cfeda07https://redirect.github.com/vitejs/vite/issues/20517 ))
([794a8f2](794a8f2302https://redirect.github.com/vitejs/vite/issues/20473 ))
([e6aaf17](e6aaf17ca2https://redirect.github.com/vitejs/vite/issues/20437 ))
([c1279e7](c1279e7540https://redirect.github.com/vitejs/vite/issues/20436 ))
([6970d17](6970d1740chttps://redirect.github.com/vitejs/vite/issues/20431 ))
([8ad388a](8ad388aeabhttps://redirect.github.com/vitejs/vite/issues/20435 ))
([8c8f587](8c8f5879eahttps://redirect.github.com/vitejs/vite/issues/19057 ))
([5c97c22](5c97c22548https://redirect.github.com/vitejs/vite/issues/20301 ))
([0fe3f2f](0fe3f2f7c3https://redirect.github.com/vitejs/vite/issues/20279 ))
([344d302](344d30243bhttps://redirect.github.com/vitejs/vite/issues/20433 ))
([95927d9](95927d9c0bhttps://redirect.github.com/vitejs/vite/issues/20434 ))
([259f45d](259f45d069https://redirect.github.com/vitejs/vite/issues/19981 ))
([45f6443](45f6443a93https://redirect.github.com/vitejs/vite/issues/20409 ))
([c669c52](c669c524e6https://redirect.github.com/vitejs/vite/issues/20260 ))
([62835f7](62835f7c06https://redirect.github.com/vitejs/vite/issues/20520 ))
([f1a2635](f1a2635e69https://redirect.github.com/vitejs/vite/issues/20518 ))
([bac9f3e](bac9f3ecf8https://redirect.github.com/vitejs/vite/issues/20503 ))
([64a52e7](64a52e70d9https://redirect.github.com/vitejs/vite/issues/20542 ))
([6a46cda](6a46cdac5dhttps://redirect.github.com/vitejs/vite/issues/20556 ))
([97d5111](97d5111645https://redirect.github.com/vitejs/vite/issues/20507 ))
([1b211fd](1b211fd1behttps://redirect.github.com/vitejs/vite/issues/20512 ))
([3676da5](3676da5bc5https://redirect.github.com/vitejs/vite/issues/20537 ))
([fc9a9d3](fc9a9d3f14https://redirect.github.com/vitejs/vite/issues/20528 ))
([c5a10ec](c5a10ec004https://redirect.github.com/vitejs/vite/issues/20483 ))
([c12a4a7](c12a4a76a2https://redirect.github.com/vitejs/vite/issues/20502 ))
([9ebe4a5](9ebe4a514ahttps://redirect.github.com/vitejs/vite/issues/20489 ))
([f6aa04a](f6aa04a52dhttps://redirect.github.com/vitejs/vite/issues/20410 ))
([4be5270](4be5270b27https://redirect.github.com/vitejs/vite/issues/20391 ))
([7eac8dd](7eac8ddb65https://redirect.github.com/vitejs/vite/issues/20495 ))
([10d48bb](10d48bb2e3https://redirect.github.com/vitejs/vite/issues/20496 ))
([62b3e0d](62b3e0d95chttps://redirect.github.com/vitejs/vite/issues/20460 ))
([8033e5b](8033e5bf8dhttps://redirect.github.com/vitejs/vite/issues/20429 ))
([22ad43b](22ad43b4bfhttps://redirect.github.com/vitejs/vite/issues/20536 ))
([8be2787](8be278748ahttps://redirect.github.com/vitejs/vite/issues/20490 ))
([744582d](744582d018f20addc536https://redirect.github.com/vitejs/vite/issues/19592 ))
([ced1343](ced13433fbhttps://redirect.github.com/vitejs/vite/issues/20527 ))
([958cdf2](958cdf24f8https://redirect.github.com/vitejs/vite/issues/20373 ))
([2c4af1f](2c4af1f90bhttps://redirect.github.com/vitejs/vite/issues/20375 ))
([61a9778](61a97780e6https://redirect.github.com/vitejs/vite/issues/20424 ))
([7979f9d](7979f9da55https://redirect.github.com/vitejs/vite/issues/20402 ))
([26d9872](26d987232ahttps://redirect.github.com/vitejs/vite/issues/20358 ))
([f19c4d7](f19c4d72dehttps://redirect.github.com/vitejs/vite/issues/20480 ))
([acd2a13](acd2a13c2dhttps://redirect.github.com/vitejs/vite/issues/20544 ))
([856d3f0](856d3f06e6https://redirect.github.com/vitejs/vite/issues/20545 ))
([1f23554](1f235545b1https://redirect.github.com/vitejs/vite/compare/v7.1.0-beta.0...v7.1.0-beta.1 )
(2025-08-05)
See [7.1.0-beta.1
changelog](https://redirect.github.com/vitejs/vite/blob/v7.1.0-beta.1/packages/vite/CHANGELOG.md )
#####
[7.1.0-beta.0](https://redirect.github.com/vitejs/vite/compare/v7.0.6...v7.1.0-beta.0 )
(2025-07-30)
See [7.1.0-beta.0
changelog](https://redirect.github.com/vitejs/vite/blob/v7.1.0-beta.0/packages/vite/CHANGELOG.md )
###
[`v7.0.5`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-705-2025-07-17-small )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.0.4...v7.0.5 )
##### Bug Fixes
- **deps:** update all non-major dependencies
([#​20406](https://redirect.github.com/vitejs/vite/issues/20406 ))
([1a1cc8a](1a1cc8a435https://redirect.github.com/vitejs/vite/issues/20376 ))
([c9614b9](c9614b9c37https://redirect.github.com/vitejs/vite/issues/20382 ))
([6bc8bf6](6bc8bf634dhttps://redirect.github.com/vitejs/vite/issues/20405 ))
([1165667](1165667b27https://redirect.github.com/vitejs/vite/issues/20413 ))
([862e192](862e192d21https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-704-2025-07-10-small )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.0.3...v7.0.4 )
##### Bug Fixes
- allow resolving bare specifiers to relative paths for entries
([#​20379](https://redirect.github.com/vitejs/vite/issues/20379 ))
([324669c](324669c2d8https://redirect.github.com/vitejs/vite/issues/20389 ))
([5e29602](5e29602f6fhttps://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-703-2025-07-08-small )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.0.2...v7.0.3 )
##### Bug Fixes
- **client:** protect against window being defined but addEv undefined
([#​20359](https://redirect.github.com/vitejs/vite/issues/20359 ))
([31d1467](31d1467cf0https://redirect.github.com/vitejs/vite/issues/20338 ))
([9465ae1](9465ae1378https://redirect.github.com/vitejs/vite/issues/20366 ))
([43ac73d](43ac73da27https://redirect.github.com/vitejs/vite/issues/20325 ))
([45040d4](45040d4807https://redirect.github.com/vitejs/vite/issues/20365 ))
([5ab25e7](5ab25e73a2https://redirect.github.com/vitejs/vite/issues/20368 ))
([38bb268](38bb268cdehttps://redirect.github.com/vitejs/vite/issues/20354 ))
([2e8050e](2e8050e4cdhttps://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-702-2025-07-04-small )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.0.1...v7.0.2 )
##### Bug Fixes
- **css:** resolve relative paths in sass, revert
[#​20300](https://redirect.github.com/vitejs/vite/issues/20300 )
([#​20349](https://redirect.github.com/vitejs/vite/issues/20349 ))
([db8bd41](db8bd412a8https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-701-2025-07-03-small )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v7.0.0...v7.0.1 )
##### Bug Fixes
- **css:** skip resolving resolved paths in sass
([#​20300](https://redirect.github.com/vitejs/vite/issues/20300 ))
([ac528a4](ac528a44c3https://redirect.github.com/vitejs/vite/issues/20324 ))
([3e81af3](3e81af38a8https://redirect.github.com/vitejs/vite/issues/20243 ))
([37bdfc1](37bdfc18f4https://redirect.github.com/vitejs/vite/issues/20323 ))
([30d2f1b](30d2f1b38chttps://redirect.github.com/vitejs/vite/issues/20337 ))
([c1c951d](c1c951dcc3https://redirect.github.com/vitejs/vite/issues/20310 ))
([41e83f6](41e83f62b1https://redirect.github.com/vitejs/vite/issues/20280 ))
([eafd28a](eafd28ac88https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#700-2025-06-24 )
[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v6.4.1...v7.0.0 )
Today, we're excited to announce the release of the next Vite major:
- **[Vite 7.0 announcement blog
post](https://vite.dev/blog/announcing-vite7.html )**
- [Docs](https://vite.dev/ ) (translations: [简体中文](https://cn.vite.dev/ ),
[日本語](https://ja.vite.dev/ ), [Español](https://es.vite.dev/ ),
[Português](https://pt.vite.dev/ ), [한국어](https://ko.vite.dev/ ),
[Deutsch](https://de.vite.dev/ ), [فارسی](https://fa.vite.dev/ ))
- [Migration Guide](https://vite.dev/guide/migration.html )
##### ⚠ BREAKING CHANGES
- **ssr:** don't access `Object` variable in ssr transformed code
([#​19996](https://redirect.github.com/vitejs/vite/issues/19996 ))
- remove `experimental.skipSsrTransform` option
([#​20038](https://redirect.github.com/vitejs/vite/issues/20038 ))
- remove `HotBroadcaster`
([#​19988](https://redirect.github.com/vitejs/vite/issues/19988 ))
- **css:** always use sass compiler API
([#​19978](https://redirect.github.com/vitejs/vite/issues/19978 ))
- bump `build.target` and name it `baseline-widely-available`
([#​20007](https://redirect.github.com/vitejs/vite/issues/20007 ))
- bump required node version to 20.19+, 22.12+ and remove cjs build
([#​20032](https://redirect.github.com/vitejs/vite/issues/20032 ))
- **css:** remove sass legacy API support
([#​19977](https://redirect.github.com/vitejs/vite/issues/19977 ))
- remove deprecated `HotBroadcaster` related types
([#​19987](https://redirect.github.com/vitejs/vite/issues/19987 ))
- remove deprecated no-op type only properties
([#​19985](https://redirect.github.com/vitejs/vite/issues/19985 ))
- remove node 18 support
([#​19972](https://redirect.github.com/vitejs/vite/issues/19972 ))
- remove deprecated hook-level `enforce`/`transform` from
`transformIndexHtml` hook
([#​19349](https://redirect.github.com/vitejs/vite/issues/19349 ))
- remove deprecated splitVendorChunkPlugin
([#​19255](https://redirect.github.com/vitejs/vite/issues/19255 ))
##### Features
- **types:** use terser types from terser package
([#​20274](https://redirect.github.com/vitejs/vite/issues/20274 ))
([a5799fa](a5799fa74chttps://redirect.github.com/vitejs/vite/issues/20224 ))
([b989c42](b989c42cf8https://redirect.github.com/vitejs/vite/issues/20222 ))
([f5cc4c0](f5cc4c0dedhttps://redirect.github.com/vitejs/vite/issues/20163 ))
([253d6c6](253d6c6df2https://redirect.github.com/vitejs/vite/issues/20088 ))
([f55bf41](f55bf41e91https://redirect.github.com/vitejs/vite/issues/19894 ))
([c1ae9bd](c1ae9bd4a0https://redirect.github.com/vitejs/vite/issues/19971 ))
([5da659d](5da659de90https://redirect.github.com/vitejs/vite/issues/19912 ))
([c4e01dc](c4e01dc5abhttps://redirect.github.com/vitejs/vite/issues/20007 ))
([4a8aa82](4a8aa82556https://redirect.github.com/vitejs/vite/issues/20040 ))
([1bde4d2](1bde4d2524https://redirect.github.com/vitejs/vite/issues/19936 ))
([7063839](7063839d47https://redirect.github.com/vitejs/vite/issues/20120 ))
([f6a28d5](f6a28d5f79https://redirect.github.com/vitejs/vite/issues/19992 ))
([70aee13](70aee139eahttps://redirect.github.com/vitejs/vite/issues/19984 ))
([6d2dcb4](6d2dcb494dhttps://redirect.github.com/vitejs/vite/issues/20271 ))
([6b64d63](https://redirect.github.com/vitejs/vite/commit/6b64d63d700154de2c00270
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNDMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE0My4xIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-21 16:12:43 +00:00
renovate
ec7993c5e7
chore: bump up multer version to v2 ( #12374 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [multer](https://redirect.github.com/expressjs/multer ) | [`^1.4.5-lts.1` -> `^2.0.0`](https://renovatebot.com/diffs/npm/multer/1.4.5-lts.2/2.0.0 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
---
### Release Notes
<details>
<summary>expressjs/multer (multer)</summary>
### [`v2.0.0`](https://redirect.github.com/expressjs/multer/releases/tag/v2.0.0 )
[Compare Source](https://redirect.github.com/expressjs/multer/compare/v1.4.5-lts.2...v2.0.0 )
#### Important
- **Breaking change: The minimum supported Node version is now 10.16.0**
- Fix [CVE-2025-47935](https://www.cve.org/CVERecord?id=CVE-2025-47935 ) ([GHSA-44fp-w29j-9vj5](https://redirect.github.com/expressjs/multer/security/advisories/GHSA-44fp-w29j-9vj5 ))
- Fix [CVE-2025-47944](https://www.cve.org/CVERecord?id=CVE-2025-47944 ) ([GHSA-4pg4-qvpc-4q3h](https://redirect.github.com/expressjs/multer/security/advisories/GHSA-4pg4-qvpc-4q3h ))
#### What's Changed
- 🐛 drain stream. fixes regression in node 18, remove old CI, set minimum node version, fix readme badges, add .npmrc
- fix: handle two busboy error events
- ♻️ fully drain stream
- 🥅 explicitly handle req error
- 🚨 lint:fix
- ⬆️ bump mocha
- docs: include release 2.0.0 details
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xNi4wIiwidXBkYXRlZEluVmVyIjoiNDAuMTYuMCIsInRhcmdldEJyYW5jaCI6ImNhbmFyeSIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
2025-05-20 02:07:39 +00:00
renovate
1be83dc330
chore: bump up express version to v5 ( #11333 )
...
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [express](https://expressjs.com/ ) ([source](https://redirect.github.com/expressjs/express )) | [`^4.21.2` -> `^5.0.0`](https://renovatebot.com/diffs/npm/express/4.21.2/5.1.0 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
| [@types/express](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/express ) ([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/express )) | [`^4` -> `^5.0.0`](https://renovatebot.com/diffs/npm/@types%2fexpress/4.17.21/5.0.1 ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) | [](https://docs.renovatebot.com/merge-confidence/ ) |
---
### Release Notes
<details>
<summary>expressjs/express (express)</summary>
### [`v5.1.0`](https://redirect.github.com/expressjs/express/blob/HEAD/History.md#510--2025-03-31 )
[Compare Source](https://redirect.github.com/expressjs/express/compare/5.0.1...v5.1.0 )
\========================
- Add support for `Uint8Array` in `res.send()`
- Add support for ETag option in `res.sendFile()`
- Add support for multiple links with the same rel in `res.links()`
- Add funding field to package.json
- perf: use loop for acceptParams
- refactor: prefix built-in node module imports
- deps: remove `setprototypeof`
- deps: remove `safe-buffer`
- deps: remove `utils-merge`
- deps: remove `methods`
- deps: remove `depd`
- deps: `debug@^4.4.0`
- deps: `body-parser@^2.2.0`
- deps: `router@^2.2.0`
- deps: `content-type@^1.0.5`
- deps: `finalhandler@^2.1.0`
- deps: `qs@^6.14.0`
- deps: `server-static@2.2.0`
- deps: `type-is@2.0.1`
### [`v5.0.1`](https://redirect.github.com/expressjs/express/blob/HEAD/History.md#501--2024-10-08 )
[Compare Source](https://redirect.github.com/expressjs/express/compare/v5.0.0...5.0.1 )
\==========
- Update `cookie` semver lock to address [CVE-2024-47764](https://nvd.nist.gov/vuln/detail/CVE-2024-47764 )
### [`v5.0.0`](https://redirect.github.com/expressjs/express/blob/HEAD/History.md#500--2024-09-10 )
[Compare Source](https://redirect.github.com/expressjs/express/compare/4.21.2...v5.0.0 )
\=========================
- remove:
- `path-is-absolute` dependency - use `path.isAbsolute` instead
- breaking:
- `res.status()` accepts only integers, and input must be greater than 99 and less than 1000
- will throw a `RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000.` for inputs outside this range
- will throw a `TypeError: Invalid status code: ${code}. Status code must be an integer.` for non integer inputs
- deps: send@1.0.0
- `res.redirect('back')` and `res.location('back')` is no longer a supported magic string, explicitly use `req.get('Referrer') || '/'`.
- change:
- `res.clearCookie` will ignore user provided `maxAge` and `expires` options
- deps: cookie-signature@^1.2.1
- deps: debug@4.3.6
- deps: merge-descriptors@^2.0.0
- deps: serve-static@^2.1.0
- deps: qs@6.13 .0
- deps: accepts@^2.0.0
- deps: mime-types@^3.0.0
- `application/javascript` => `text/javascript`
- deps: type-is@^2.0.0
- deps: content-disposition@^1.0.0
- deps: finalhandler@^2.0.0
- deps: fresh@^2.0.0
- deps: body-parser@^2.0.1
- deps: send@^1.1.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ). View the [repository job log](https://developer.mend.io/github/toeverything/AFFiNE ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMDcuMSIsInVwZGF0ZWRJblZlciI6IjM5LjIwNy4xIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5IiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
2025-04-01 02:24:11 +00:00
pengx17
fad49bb070
feat(editor): audio block ( #10947 )
...
AudioMedia entity for loading & controlling a single audio media
AudioMediaManagerService: Global audio state synchronization across tabs
AudioAttachmentService + AudioAttachmentBlock for manipulating AttachmentBlock in affine - e.g., filling transcription (using mock endpoint for now)
Added AudioBlock + AudioPlayer for rendering audio block in affine (new transcription block whose renderer is provided in affine)
fix AF-2292
fix AF-2337
2025-03-20 12:46:15 +00:00
