Skip to content

Bump vite from 6.4.2 to 6.4.3 in /frontend - #1899

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/vite-6.4.3
Open

Bump vite from 6.4.2 to 6.4.3 in /frontend#1899
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/vite-6.4.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps vite from 6.4.2 to 6.4.3.

Release notes

Sourced from vite's releases.

v6.4.3

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.3 (2026-06-01)

Commits

@dependabot dependabot Bot added scope/frontend Related to frontend changes type/dependencies A pull request/issue dedicated to updating the dependency(-ies) labels Jul 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 1, 2026 09:06
@dependabot dependabot Bot added scope/frontend Related to frontend changes type/dependencies A pull request/issue dedicated to updating the dependency(-ies) labels Jul 1, 2026
@kapybro kapybro Bot added status/triage/manual Manual triage in progress and removed status/triage/manual Manual triage in progress labels Jul 1, 2026
@kapybro

kapybro Bot commented Jul 1, 2026

Copy link
Copy Markdown

AI Summary

This issue proposes upgrading Vite from version 6.4.2 to 6.4.3 in the /frontend directory to address two Windows-specific path handling vulnerabilities. The update includes fixes to reject alternate Windows paths and UNC paths in the launch-editor-middleware, improving security by preventing potential path traversal risks. Dependabot will automatically handle merge conflicts, and the PR can be rebased or recreated if needed.

@kapybro kapybro Bot changed the title Bump vite from 6.4.2 to 6.4.3 in /frontend Update vite from 6.4.2 to 6.4.3 in frontend Jul 1, 2026
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.4.2 to 6.4.3.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.3/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v6.4.3/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 6.4.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot changed the title Update vite from 6.4.2 to 6.4.3 in frontend Bump vite from 6.4.2 to 6.4.3 in /frontend Jul 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/vite-6.4.3 branch from aa7d9dd to 3a13f01 Compare July 2, 2026 09:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

scope/frontend Related to frontend changes type/dependencies A pull request/issue dedicated to updating the dependency(-ies)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants