Bumps vite from 2.7.2 to 2.9.14.
Release notes
Sourced from vite's releases.
<h2>create-vite@2.9.4</h2>Please refer to CHANGELOG.md for details.
<h2>create-vite@2.9.3</h2>Please refer to CHANGELOG.md for details.
<h2>create-vite@2.9.2</h2>Please refer to CHANGELOG.md for details.
<h2>create-vite@2.9.1</h2>Please refer to CHANGELOG.md for details.
<h2>create-vite@2.9.0</h2>Please refer to CHANGELOG.md for details.
Changelog
Sourced from vite's changelog.
<h2>2.9.14 (2022-07-08)</h2><h2>2.9.13 (2022-06-27)</h2>
- fix: backport #8979, re-encode url to prevent fs.allow bypass (fixes #8498) (#8990) (
adb61c5), closes #8498 #8990- fix: reverts #8471 (
da77dee), closes #8471- fix(css): backport #7746 (
d4d89b9), closes #7746- fix(css): backport #8936 (#8977) (
84ec02a), closes #8936 #8977<h2>2.9.12 (2022-06-10)</h2> <h2>2.9.11 (2022-06-10)</h2>
- fix: backport #8804, /@fs/ dir traversal with escaped chars (fixes #8498) (#8805) (
e109d64), closes #8498 #8805- fix(wasm): support decoding data URL in Node < v16 (#8668) (
1afc1c2), closes #8668<h2>2.9.10 (2022-06-06)</h2>
- fix: backport respect server.headers in static middlewares (#8481) (
ab7dc1c), closes #8481- fix(dev): avoid FOUC when swapping out link tag (fix #7973) (#8495) (
01fa807), closes #7973 #8495<h2>2.9.9 (2022-05-11)</h2>
- feat: backport treat Astro file scripts as TS (#8151) (
9fdd0a3), closes #8151- feat: new hook
configurePreviewServer(#7658) (#8437) (7b972bc), closes #7658 #8437- fix: backport remove empty chunk css imports when using esnext (#8345) (
9fbc1a9), closes #8345- fix: EPERM error on Windows when processing dependencies (#8235) (
dfe4307), closes #8235- fix(css): remove
?usedhack (fixes #6421, #8245) (#8278) (#8471) (8d7bac4), closes #6421 #8245 #8278 #8471- chore(lint): sort for imports (#8113) (
4bd1531), closes #8113
- fix: add direct query to html-proxy css (fixes #8091) (#8094) (
a24b5e3), closes #8091 #8094- fix: graceful rename in windows (#8036) (
84496f8), closes #8036- fix: image-set with base64 images (fix #8028) (#8035) (
992aee2), closes #8028 #8035- fix: invalidate ssrError when HMR update occurs (#8052) (
22fa882), closes #8052- fix: use
strip-literalto strip string lterals (#8054) (b6fc3cd), closes #8054- perf(lib): reduce backtrack when injecting esbuild helpers (#8110) (
e5556ab), closes #8110
... (truncated)
Commits
release: v2.9.140d13630fix: backport #8979, re-encode url to prevent fs.allow bypass (fixes #8498) (...adb61c5fix(css): backport #8936 (#8977)84ec02afix(css): backport #7746d4d89b9fix: reverts #8471da77deerelease: v2.9.13d93ac8efix: backport #8804, /@fs/ dir traversal with escaped chars (fixes #8498) (#8...e109d64fix(wasm): support decoding data URL in Node < v16 (#8668)1afc1c2release: v2.9.1286a55d3fix: backport outdated optimized dep removed from module graph (#8534)c0d6c60- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by vitebot, a new releaser for vite since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)