Update npm package vite [SECURITY] (#8873)

hash-worker[bot] · CiaranMn · web-flow · commit 3dbbe7be7577 · 2026-06-24T09:58:13.000Z
Co-authored-by: hash-worker[bot] &lt;180894564+hash-worker[bot]@users.noreply.github.com&gt;
Co-authored-by: Ciaran Morinan &lt;c@hash.ai&gt;
diff --git a/.claude/hooks/package.json b/.claude/hooks/package.json
@@ -20,10 +20,10 @@
     "@local/eslint": "workspace:*",
     "@local/tsconfig": "workspace:*",
     "@types/node": "22.18.13",
-    "@vitest/coverage-istanbul": "4.1.7",
+    "@vitest/coverage-istanbul": "4.1.8",
     "eslint": "9.39.4",
     "tsx": "4.20.6",
     "typescript": "5.9.3",
-    "vitest": "4.1.7"
+    "vitest": "4.1.8"
   }
 }
diff --git a/apps/hash-ai-worker-ts/package.json b/apps/hash-ai-worker-ts/package.json
@@ -109,11 +109,11 @@
     "@types/node": "22.18.13",
     "@types/papaparse": "5.3.16",
     "@types/sanitize-html": "2.16.0",
-    "@vitest/coverage-istanbul": "4.1.7",
+    "@vitest/coverage-istanbul": "4.1.8",
     "eslint": "9.39.4",
     "rimraf": "6.1.3",
     "typescript": "5.9.3",
-    "vitest": "4.1.7",
+    "vitest": "4.1.8",
     "wait-on": "9.0.1"
   }
 }
diff --git a/apps/hash-api/package.json b/apps/hash-api/package.json
@@ -130,11 +130,11 @@
     "@types/mime-types": "2.1.4",
     "@types/nodemailer": "6.4.17",
     "@types/sanitize-html": "2.16.0",
-    "@vitest/coverage-istanbul": "4.1.7",
+    "@vitest/coverage-istanbul": "4.1.8",
     "eslint": "9.39.4",
     "rimraf": "6.1.3",
     "typescript": "5.9.3",
-    "vitest": "4.1.7",
+    "vitest": "4.1.8",
     "wait-on": "9.0.1"
   }
 }
diff --git a/apps/petrinaut-website/package.json b/apps/petrinaut-website/package.json
@@ -40,6 +40,6 @@
     "oxlint": "1.63.0",
     "oxlint-tsgolint": "0.22.1",
     "sharp": "0.34.5",
-    "vite": "8.0.12"
+    "vite": "8.1.0"
   }
 }
diff --git a/libs/@blockprotocol/type-system/typescript/package.json b/libs/@blockprotocol/type-system/typescript/package.json
@@ -64,7 +64,7 @@
     "@types/node": "22.18.13",
     "@types/react": "19.2.14",
     "@types/semver": "7.7.1",
-    "@vitest/coverage-istanbul": "4.1.7",
+    "@vitest/coverage-istanbul": "4.1.8",
     "eslint": "9.39.4",
     "react": "19.2.6",
     "rimraf": "6.1.3",
@@ -73,6 +73,6 @@
     "tsx": "4.20.6",
     "typescript": "5.9.3",
     "vite-plugin-wasm-pack": "0.1.12",
-    "vitest": "4.1.7"
+    "vitest": "4.1.8"
   }
 }
diff --git a/libs/@hashintel/ds-components/package.json b/libs/@hashintel/ds-components/package.json
@@ -97,7 +97,7 @@
     "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "@vitejs/plugin-react": "5.0.4",
-    "@vitest/browser-playwright": "4.1.7",
+    "@vitest/browser-playwright": "4.1.8",
     "bumpp": "^10.3.2",
     "case-anything": "3.1.0",
     "colorjs.io": "0.6.1",
@@ -111,10 +111,10 @@
     "tsup": "^8.5.1",
     "tsx": "4.20.6",
     "typescript": "5.9.3",
-    "vite": "7.3.2",
+    "vite": "7.3.5",
     "vite-plugin-dts": "4.5.4",
     "vite-plugin-svgr": "5.2.0",
-    "vitest": "4.1.7",
+    "vitest": "4.1.8",
     "vitest-browser-react": "^2.0.2",
     "zod": "4.4.3"
   },
diff --git a/libs/@hashintel/petrinaut-core/package.json b/libs/@hashintel/petrinaut-core/package.json
@@ -73,10 +73,10 @@
     "@typescript/native-preview": "7.0.0-dev.20260511.1",
     "oxlint": "1.63.0",
     "oxlint-tsgolint": "0.22.1",
-    "rolldown": "1.0.0",
+    "rolldown": "1.1.2",
     "rolldown-plugin-dts": "0.25.0",
     "typescript": "5.9.3",
-    "vite": "8.0.12",
-    "vitest": "4.1.7"
+    "vite": "8.1.0",
+    "vitest": "4.1.8"
   }
 }
diff --git a/libs/@hashintel/petrinaut/package.json b/libs/@hashintel/petrinaut/package.json
@@ -93,11 +93,11 @@
     "oxlint-tsgolint": "0.22.1",
     "react": "19.2.6",
     "react-dom": "19.2.6",
-    "rolldown": "1.0.0",
+    "rolldown": "1.1.2",
     "rolldown-plugin-dts": "0.25.0",
     "storybook": "10.3.6",
-    "vite": "8.0.12",
-    "vitest": "4.1.7"
+    "vite": "8.1.0",
+    "vitest": "4.1.8"
   },
   "peerDependencies": {
     "@hashintel/ds-components": "workspace:^",
diff --git a/libs/@hashintel/refractive/package.json b/libs/@hashintel/refractive/package.json
@@ -42,7 +42,7 @@
     "oxlint-tsgolint": "0.22.1",
     "rolldown-plugin-dts": "0.25.0",
     "storybook": "10.2.19",
-    "vite": "8.0.12"
+    "vite": "8.1.0"
   },
   "peerDependencies": {
     "react": "^19.0.0",
diff --git a/libs/@local/effect-dns/hickory/package.json b/libs/@local/effect-dns/hickory/package.json
@@ -21,11 +21,11 @@
   "devDependencies": {
     "@local/eslint": "workspace:*",
     "@local/tsconfig": "workspace:*",
-    "@vitest/coverage-istanbul": "4.1.7",
+    "@vitest/coverage-istanbul": "4.1.8",
     "eslint": "9.39.4",
     "rimraf": "6.1.3",
     "typescript": "5.9.3",
-    "vitest": "4.1.7"
+    "vitest": "4.1.8"
   },
   "napi": {
     "binaryName": "effect-dns-hickory",
diff --git a/libs/@local/graph/sdk/typescript/package.json b/libs/@local/graph/sdk/typescript/package.json
@@ -37,10 +37,10 @@
   "devDependencies": {
     "@local/eslint": "workspace:*",
     "@local/tsconfig": "workspace:*",
-    "@vitest/coverage-istanbul": "4.1.7",
+    "@vitest/coverage-istanbul": "4.1.8",
     "eslint": "9.39.4",
     "rimraf": "6.1.3",
     "typescript": "5.9.3",
-    "vitest": "4.1.7"
+    "vitest": "4.1.8"
   }
 }
diff --git a/libs/@local/harpc/client/typescript/package.json b/libs/@local/harpc/client/typescript/package.json
@@ -50,10 +50,10 @@
     "@local/tsconfig": "workspace:*",
     "@rust/harpc-wire-protocol": "workspace:*",
     "@types/node": "22.18.13",
-    "@vitest/coverage-istanbul": "4.1.7",
+    "@vitest/coverage-istanbul": "4.1.8",
     "eslint": "9.39.4",
     "rimraf": "6.1.3",
     "typescript": "5.9.3",
-    "vitest": "4.1.7"
+    "vitest": "4.1.8"
   }
 }
diff --git a/libs/@local/hash-backend-utils/package.json b/libs/@local/hash-backend-utils/package.json
@@ -82,10 +82,10 @@
     "@types/mime-types": "2.1.4",
     "@types/node": "22.18.13",
     "@types/wait-on": "5.3.4",
-    "@vitest/coverage-istanbul": "4.1.7",
+    "@vitest/coverage-istanbul": "4.1.8",
     "eslint": "9.39.4",
     "rimraf": "6.1.3",
     "typescript": "5.9.3",
-    "vitest": "4.1.7"
+    "vitest": "4.1.8"
   }
 }
diff --git a/libs/@local/hash-isomorphic-utils/package.json b/libs/@local/hash-isomorphic-utils/package.json
@@ -67,13 +67,13 @@
     "@types/lodash-es": "4.17.12",
     "@types/node": "22.18.13",
     "@types/pluralize": "0.0.33",
-    "@vitest/coverage-istanbul": "4.1.7",
+    "@vitest/coverage-istanbul": "4.1.8",
     "eslint": "9.39.4",
     "graphql": "16.11.0",
     "next": "15.5.18",
     "react": "19.2.6",
     "rimraf": "6.1.3",
     "typescript": "5.9.3",
-    "vitest": "4.1.7"
+    "vitest": "4.1.8"
   }
 }
diff --git a/tests/hash-backend-integration/package.json b/tests/hash-backend-integration/package.json
@@ -40,10 +40,10 @@
     "@local/eslint": "workspace:*",
     "@local/tsconfig": "workspace:*",
     "@types/node-fetch": "2.6.13",
-    "@vitest/coverage-istanbul": "4.1.7",
+    "@vitest/coverage-istanbul": "4.1.8",
     "eslint": "9.39.4",
     "rimraf": "6.1.3",
     "typescript": "5.9.3",
-    "vitest": "4.1.7"
+    "vitest": "4.1.8"
   }
 }
diff --git a/yarn.lock b/yarn.lock

Original file line number	Diff line number	Diff line change
`@@ -20,10 +20,10 @@`
`20`	`20`	`"@local/eslint": "workspace:*",`
`21`	`21`	`"@local/tsconfig": "workspace:*",`
`22`	`22`	`"@types/node": "22.18.13",`
`23`		`- "@vitest/coverage-istanbul": "4.1.7",`
	`23`	`+ "@vitest/coverage-istanbul": "4.1.8",`
`24`	`24`	`"eslint": "9.39.4",`
`25`	`25`	`"tsx": "4.20.6",`
`26`	`26`	`"typescript": "5.9.3",`
`27`		`- "vitest": "4.1.7"`
	`27`	`+ "vitest": "4.1.8"`
`28`	`28`	`}`
`29`	`29`	`}`
Original file line number	Diff line number	Diff line change
`@@ -109,11 +109,11 @@`
`109`	`109`	`"@types/node": "22.18.13",`
`110`	`110`	`"@types/papaparse": "5.3.16",`
`111`	`111`	`"@types/sanitize-html": "2.16.0",`
`112`		`- "@vitest/coverage-istanbul": "4.1.7",`
	`112`	`+ "@vitest/coverage-istanbul": "4.1.8",`
`113`	`113`	`"eslint": "9.39.4",`
`114`	`114`	`"rimraf": "6.1.3",`
`115`	`115`	`"typescript": "5.9.3",`
`116`		`- "vitest": "4.1.7",`
	`116`	`+ "vitest": "4.1.8",`
`117`	`117`	`"wait-on": "9.0.1"`
`118`	`118`	`}`
`119`	`119`	`}`
Original file line number	Diff line number	Diff line change
`@@ -130,11 +130,11 @@`
`130`	`130`	`"@types/mime-types": "2.1.4",`
`131`	`131`	`"@types/nodemailer": "6.4.17",`
`132`	`132`	`"@types/sanitize-html": "2.16.0",`
`133`		`- "@vitest/coverage-istanbul": "4.1.7",`
	`133`	`+ "@vitest/coverage-istanbul": "4.1.8",`
`134`	`134`	`"eslint": "9.39.4",`
`135`	`135`	`"rimraf": "6.1.3",`
`136`	`136`	`"typescript": "5.9.3",`
`137`		`- "vitest": "4.1.7",`
	`137`	`+ "vitest": "4.1.8",`
`138`	`138`	`"wait-on": "9.0.1"`
`139`	`139`	`}`
`140`	`140`	`}`
Original file line number	Diff line number	Diff line change
`@@ -40,6 +40,6 @@`
`40`	`40`	`"oxlint": "1.63.0",`
`41`	`41`	`"oxlint-tsgolint": "0.22.1",`
`42`	`42`	`"sharp": "0.34.5",`
`43`		`- "vite": "8.0.12"`
	`43`	`+ "vite": "8.1.0"`
`44`	`44`	`}`
`45`	`45`	`}`
Original file line number	Diff line number	Diff line change
`@@ -73,10 +73,10 @@`
`73`	`73`	`"@typescript/native-preview": "7.0.0-dev.20260511.1",`
`74`	`74`	`"oxlint": "1.63.0",`
`75`	`75`	`"oxlint-tsgolint": "0.22.1",`
`76`		`- "rolldown": "1.0.0",`
	`76`	`+ "rolldown": "1.1.2",`
`77`	`77`	`"rolldown-plugin-dts": "0.25.0",`
`78`	`78`	`"typescript": "5.9.3",`
`79`		`- "vite": "8.0.12",`
`80`		`- "vitest": "4.1.7"`
	`79`	`+ "vite": "8.1.0",`
	`80`	`+ "vitest": "4.1.8"`
`81`	`81`	`}`
`82`	`82`	`}`