fix(vite): update vite to fix CVE (#14326)

jsparkdev · web-flow · commit c24a8f42a174 · 2025-09-08T17:52:41.000+02:00
diff --git a/.changeset/lazy-clowns-stand.md b/.changeset/lazy-clowns-stand.md
@@ -0,0 +1,16 @@
+---
+'@astrojs/cloudflare': patch
+'@astrojs/alpinejs': patch
+'@astrojs/markdoc': patch
+'@astrojs/netlify': patch
+'@astrojs/preact': patch
+'@astrojs/svelte': patch
+'@astrojs/react': patch
+'@astrojs/solid-js': patch
+'@astrojs/mdx': patch
+'@astrojs/vue': patch
+'astro': patch
+'@astrojs/db': patch
+---
+
+Updates `vite` version to fix CVE
diff --git a/packages/astro/package.json b/packages/astro/package.json
@@ -168,7 +168,7 @@
     "unist-util-visit": "^5.0.0",
     "unstorage": "^1.17.0",
     "vfile": "^6.0.3",
-    "vite": "^6.3.5",
+    "vite": "^6.3.6",
     "vitefu": "^1.1.1",
     "xxhash-wasm": "^1.1.0",
     "yargs-parser": "^21.1.1",
diff --git a/packages/db/package.json b/packages/db/package.json
@@ -89,6 +89,6 @@
     "cheerio": "1.1.2",
     "expect-type": "^1.2.2",
     "typescript": "^5.9.2",
-    "vite": "^6.3.5"
+    "vite": "^6.3.6"
   }
 }
diff --git a/packages/integrations/alpinejs/package.json b/packages/integrations/alpinejs/package.json
@@ -41,7 +41,7 @@
     "@playwright/test": "1.55.0",
     "astro": "workspace:*",
     "astro-scripts": "workspace:*",
-    "vite": "^6.3.5"
+    "vite": "^6.3.6"
   },
   "publishConfig": {
     "provenance": true
diff --git a/packages/integrations/cloudflare/package.json b/packages/integrations/cloudflare/package.json
@@ -40,7 +40,7 @@
     "@astrojs/underscore-redirects": "workspace:*",
     "@cloudflare/workers-types": "^4.20250903.0",
     "tinyglobby": "^0.2.14",
-    "vite": "^6.3.5",
+    "vite": "^6.3.6",
     "wrangler": "4.33.2"
   },
   "peerDependencies": {
diff --git a/packages/integrations/markdoc/package.json b/packages/integrations/markdoc/package.json
@@ -79,7 +79,7 @@
     "astro-scripts": "workspace:*",
     "devalue": "^5.1.1",
     "linkedom": "^0.18.12",
-    "vite": "^6.3.5"
+    "vite": "^6.3.6"
   },
   "engines": {
     "node": "18.20.8 || ^20.3.0 || >=22.0.0"
diff --git a/packages/integrations/mdx/package.json b/packages/integrations/mdx/package.json
@@ -69,7 +69,7 @@
     "remark-toc": "^9.0.0",
     "shiki": "^3.12.0",
     "unified": "^11.0.5",
-    "vite": "^6.3.5"
+    "vite": "^6.3.6"
   },
   "engines": {
     "node": "18.20.8 || ^20.3.0 || >=22.0.0"
diff --git a/packages/integrations/netlify/package.json b/packages/integrations/netlify/package.json
@@ -47,7 +47,7 @@
     "@vercel/nft": "^0.30.1",
     "esbuild": "^0.25.0",
     "tinyglobby": "^0.2.14",
-    "vite": "^6.3.5"
+    "vite": "^6.3.6"
   },
   "peerDependencies": {
     "astro": "^5.7.0"
diff --git a/packages/integrations/preact/package.json b/packages/integrations/preact/package.json
@@ -38,7 +38,7 @@
     "@preact/preset-vite": "^2.10.2",
     "@preact/signals": "^2.3.1",
     "preact-render-to-string": "^6.6.1",
-    "vite": "^6.3.5"
+    "vite": "^6.3.6"
   },
   "devDependencies": {
     "astro": "workspace:*",
diff --git a/packages/integrations/react/package.json b/packages/integrations/react/package.json
@@ -41,7 +41,7 @@
   "dependencies": {
     "@vitejs/plugin-react": "^4.7.0",
     "ultrahtml": "^1.6.0",
-    "vite": "^6.3.5"
+    "vite": "^6.3.6"
   },
   "devDependencies": {
     "@types/react": "^18.3.24",
diff --git a/packages/integrations/solid/package.json b/packages/integrations/solid/package.json
@@ -34,7 +34,7 @@
     "dev": "astro-scripts dev \"src/**/*.ts\""
   },
   "dependencies": {
-    "vite": "^6.3.5",
+    "vite": "^6.3.6",
     "vite-plugin-solid": "^2.11.8"
   },
   "devDependencies": {
diff --git a/packages/integrations/svelte/package.json b/packages/integrations/svelte/package.json
@@ -37,7 +37,7 @@
   "dependencies": {
     "@sveltejs/vite-plugin-svelte": "^5.1.1",
     "svelte2tsx": "^0.7.42",
-    "vite": "^6.3.5"
+    "vite": "^6.3.6"
   },
   "devDependencies": {
     "astro": "workspace:*",
diff --git a/packages/integrations/vue/package.json b/packages/integrations/vue/package.json
@@ -39,7 +39,7 @@
     "@vitejs/plugin-vue": "5.2.1",
     "@vitejs/plugin-vue-jsx": "^4.2.0",
     "@vue/compiler-sfc": "^3.5.21",
-    "vite": "^6.3.5",
+    "vite": "^6.3.6",
     "vite-plugin-vue-devtools": "^7.7.7"
   },
   "devDependencies": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

Original file line number	Diff line number	Diff line change
`@@ -89,6 +89,6 @@`
`89`	`89`	`"cheerio": "1.1.2",`
`90`	`90`	`"expect-type": "^1.2.2",`
`91`	`91`	`"typescript": "^5.9.2",`
`92`		`- "vite": "^6.3.5"`
	`92`	`+ "vite": "^6.3.6"`
`93`	`93`	`}`
`94`	`94`	`}`