From 273b7228bb82438027e372394c228268e65e01e0 Mon Sep 17 00:00:00 2001 From: Saagar Patel Date: Tue, 21 Apr 2026 13:16:06 +0200 Subject: [PATCH] chore(deps): bump @vitejs/plugin-react from 4.7.0 to 5.2.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Supersedes #16 — Dependabot PR blocked by branch-name governance. Re-created on a codex-compliant branch per docs/SECURITY.md. v5 is a major release but our usage is vanilla: vite.config.ts line 12 is a bare `plugins: [react()]` with no babel options, no include/ exclude patterns, no jsxImportSource override. The project already satisfies every v5 requirement: - Vite 7 (v5 requires >= 5) - React 19 (v5 supports 18/19) - Node 20 (v5 requires >= 20) - tsconfig uses the standard "react-jsx" transform Validated locally: - pnpm install resolves to @vitejs/plugin-react 5.2.0 - pnpm build: 638ms, dist/ produced with expected shape - pnpm test: 127/127 pass (Fast Refresh behavior unchanged) - pnpm typecheck: clean Co-Authored-By: Claude Opus 4.7 (1M context) --- package.json | 2 +- pnpm-lock.yaml | 141 +++++++++++++++++++++++++++++++------------------ 2 files changed, 90 insertions(+), 53 deletions(-) diff --git a/package.json b/package.json index 350f96f..fb36b67 100644 --- a/package.json +++ b/package.json @@ -108,7 +108,7 @@ "@commitlint/cz-commitlint": "^19.8.1", "@types/react": "^19.1.8", "@types/react-dom": "^19.1.6", - "@vitejs/plugin-react": "^4.6.0", + "@vitejs/plugin-react": "^5.2.0", "commitizen": "^4.3.1", "husky": "^9.1.7", "typescript": "~5.8.3", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 2b62bdd..f240232 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -81,8 +81,8 @@ importers: specifier: ^8.46.1 version: 8.56.0(eslint@9.39.2(jiti@2.6.1))(typescript@5.8.3) "@vitejs/plugin-react": - specifier: ^4.6.0 - version: 4.7.0(vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(yaml@2.8.2)) + specifier: ^5.2.0 + version: 5.2.0(vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(yaml@2.8.2)) "@vitest/coverage-v8": specifier: ^3.2.4 version: 3.2.4(vitest@3.2.4(@types/node@25.2.3)(jiti@2.6.1)(jsdom@27.4.0)(yaml@2.8.2)) @@ -185,6 +185,13 @@ packages: } engines: { node: ">=6.9.0" } + "@babel/code-frame@7.29.0": + resolution: + { + integrity: sha512-9NhCeYjq9+3uxgdtp20LSiJXJvN0FeCtNGpJxuMFZ1Kv3cWUNb6DOhJwUvcVCzKGR66cw4njwM6hrJLqgOwbcw==, + } + engines: { node: ">=6.9.0" } + "@babel/compat-data@7.28.6": resolution: { @@ -192,17 +199,17 @@ packages: } engines: { node: ">=6.9.0" } - "@babel/core@7.28.6": + "@babel/core@7.29.0": resolution: { - integrity: sha512-H3mcG6ZDLTlYfaSNi0iOKkigqMFvkTKlGUYlD8GW7nNOYRrevuA46iTypPyv+06V3fEmvvazfntkBU34L0azAw==, + integrity: sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA==, } engines: { node: ">=6.9.0" } - "@babel/generator@7.28.6": + "@babel/generator@7.29.1": resolution: { - integrity: sha512-lOoVRwADj8hjf7al89tvQ2a1lf53Z+7tiXMgpZJL3maQPDxh0DgLMN62B2MKUOFcoodBHLMbDM6WAbKgNy5Suw==, + integrity: sha512-qsaF+9Qcm2Qv8SRIMMscAvG4O3lJ0F1GuMo5HR/Bp02LopNgnZBC/EkbevHFeGs4ls/oPz9v+Bsmzbkbe+0dUw==, } engines: { node: ">=6.9.0" } @@ -279,6 +286,14 @@ packages: engines: { node: ">=6.0.0" } hasBin: true + "@babel/parser@7.29.2": + resolution: + { + integrity: sha512-4GgRzy/+fsBa72/RZVJmGKPmZu9Byn8o4MoLpmNe1m8ZfYnz5emHLQz3U4gLud6Zwl0RZIcgiLD7Uq7ySFuDLA==, + } + engines: { node: ">=6.0.0" } + hasBin: true + "@babel/plugin-transform-react-jsx-self@7.27.1": resolution: { @@ -311,10 +326,10 @@ packages: } engines: { node: ">=6.9.0" } - "@babel/traverse@7.28.6": + "@babel/traverse@7.29.0": resolution: { - integrity: sha512-fgWX62k02qtjqdSNTAGxmKYY/7FSL9WAS1o2Hu5+I5m9T0yxZzr4cnrfXQ/MX0rIifthCSs6FKTlzYbJcPtMNg==, + integrity: sha512-4HPiQr0X7+waHfyXPZpWPfWL/J7dcN1mx9gL6WdQVMbPnF3+ZhSMs8tCxN7oHddJE9fhNE7+lxdnlyemKfJRuA==, } engines: { node: ">=6.9.0" } @@ -325,6 +340,13 @@ packages: } engines: { node: ">=6.9.0" } + "@babel/types@7.29.0": + resolution: + { + integrity: sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==, + } + engines: { node: ">=6.9.0" } + "@bcoe/v8-coverage@1.0.2": resolution: { @@ -1405,10 +1427,10 @@ packages: engines: { node: ">=18" } hasBin: true - "@rolldown/pluginutils@1.0.0-beta.27": + "@rolldown/pluginutils@1.0.0-rc.3": resolution: { - integrity: sha512-+d0F4MKMCbeVUJwG96uQ4SgAznZNSq93I3V+9NHA4OpvqG8mRCpGdKmK8l/dl02h2CCDHwW2FqilnTyDcAnqjA==, + integrity: sha512-eybk3TjzzzV97Dlj5c+XrBFW57eTNhzod66y9HrBlzJ6NsCrWCp/2kaPS3K9wJmurBC0Tdw4yPjXKZqlznim3Q==, } "@rollup/rollup-android-arm-eabi@4.59.0": @@ -2080,14 +2102,14 @@ packages: } engines: { node: ^18.18.0 || ^20.9.0 || >=21.1.0 } - "@vitejs/plugin-react@4.7.0": + "@vitejs/plugin-react@5.2.0": resolution: { - integrity: sha512-gUu9hwfWvvEDBBmgtAowQCojwZmJ5mcLn3aufeCsitijs3+f2NsrPtlAWIR6OPiqljl96GVCUbLe0HyqIpVaoA==, + integrity: sha512-YmKkfhOAi3wsB1PhJq5Scj3GXMn3WvtQ/JC0xoopuHoXSdmtdStOpFrYaT1kie2YgFBcIe64ROzMYRjCrYOdYw==, } - engines: { node: ^14.18.0 || >=16.0.0 } + engines: { node: ^20.19.0 || >=22.12.0 } peerDependencies: - vite: ^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 + vite: ^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0 "@vitest/coverage-v8@3.2.4": resolution: @@ -5573,10 +5595,10 @@ packages: integrity: sha512-w2GsyukL62IJnlaff/nRegPQR94C/XXamvMWmSHRJ4y7Ts/4ocGRmTHvOs8PSE6pB3dWOrD/nueuU5sduBsQ4w==, } - react-refresh@0.17.0: + react-refresh@0.18.0: resolution: { - integrity: sha512-z6F7K9bV85EfseRCp2bzrpyQ0Gkw1uLoCel9XBVWPg/TjRj94SkJzUTGfOa4bs7iJvBWtQG0Wq7wnI0syw3EBQ==, + integrity: sha512-QgT5//D3jfjJb6Gsjxv0Slpj23ip+HtOpnNgnb2S5zU3CB26G/IDPGoy4RJB42wzFE46DRsstbW6tKHoKbhAxw==, } engines: { node: ">=0.10.0" } @@ -6938,19 +6960,25 @@ snapshots: js-tokens: 4.0.0 picocolors: 1.1.1 + "@babel/code-frame@7.29.0": + dependencies: + "@babel/helper-validator-identifier": 7.28.5 + js-tokens: 4.0.0 + picocolors: 1.1.1 + "@babel/compat-data@7.28.6": {} - "@babel/core@7.28.6": + "@babel/core@7.29.0": dependencies: - "@babel/code-frame": 7.28.6 - "@babel/generator": 7.28.6 + "@babel/code-frame": 7.29.0 + "@babel/generator": 7.29.1 "@babel/helper-compilation-targets": 7.28.6 - "@babel/helper-module-transforms": 7.28.6(@babel/core@7.28.6) + "@babel/helper-module-transforms": 7.28.6(@babel/core@7.29.0) "@babel/helpers": 7.28.6 - "@babel/parser": 7.28.6 + "@babel/parser": 7.29.2 "@babel/template": 7.28.6 - "@babel/traverse": 7.28.6 - "@babel/types": 7.28.6 + "@babel/traverse": 7.29.0 + "@babel/types": 7.29.0 "@jridgewell/remapping": 2.3.5 convert-source-map: 2.0.0 debug: 4.4.3 @@ -6960,10 +6988,10 @@ snapshots: transitivePeerDependencies: - supports-color - "@babel/generator@7.28.6": + "@babel/generator@7.29.1": dependencies: - "@babel/parser": 7.28.6 - "@babel/types": 7.28.6 + "@babel/parser": 7.29.2 + "@babel/types": 7.29.0 "@jridgewell/gen-mapping": 0.3.13 "@jridgewell/trace-mapping": 0.3.31 jsesc: 3.1.0 @@ -6980,17 +7008,17 @@ snapshots: "@babel/helper-module-imports@7.28.6": dependencies: - "@babel/traverse": 7.28.6 - "@babel/types": 7.28.6 + "@babel/traverse": 7.29.0 + "@babel/types": 7.29.0 transitivePeerDependencies: - supports-color - "@babel/helper-module-transforms@7.28.6(@babel/core@7.28.6)": + "@babel/helper-module-transforms@7.28.6(@babel/core@7.29.0)": dependencies: - "@babel/core": 7.28.6 + "@babel/core": 7.29.0 "@babel/helper-module-imports": 7.28.6 "@babel/helper-validator-identifier": 7.28.5 - "@babel/traverse": 7.28.6 + "@babel/traverse": 7.29.0 transitivePeerDependencies: - supports-color @@ -7005,38 +7033,42 @@ snapshots: "@babel/helpers@7.28.6": dependencies: "@babel/template": 7.28.6 - "@babel/types": 7.28.6 + "@babel/types": 7.29.0 "@babel/parser@7.28.6": dependencies: "@babel/types": 7.28.6 - "@babel/plugin-transform-react-jsx-self@7.27.1(@babel/core@7.28.6)": + "@babel/parser@7.29.2": + dependencies: + "@babel/types": 7.29.0 + + "@babel/plugin-transform-react-jsx-self@7.27.1(@babel/core@7.29.0)": dependencies: - "@babel/core": 7.28.6 + "@babel/core": 7.29.0 "@babel/helper-plugin-utils": 7.28.6 - "@babel/plugin-transform-react-jsx-source@7.27.1(@babel/core@7.28.6)": + "@babel/plugin-transform-react-jsx-source@7.27.1(@babel/core@7.29.0)": dependencies: - "@babel/core": 7.28.6 + "@babel/core": 7.29.0 "@babel/helper-plugin-utils": 7.28.6 "@babel/runtime@7.28.6": {} "@babel/template@7.28.6": dependencies: - "@babel/code-frame": 7.28.6 - "@babel/parser": 7.28.6 - "@babel/types": 7.28.6 + "@babel/code-frame": 7.29.0 + "@babel/parser": 7.29.2 + "@babel/types": 7.29.0 - "@babel/traverse@7.28.6": + "@babel/traverse@7.29.0": dependencies: - "@babel/code-frame": 7.28.6 - "@babel/generator": 7.28.6 + "@babel/code-frame": 7.29.0 + "@babel/generator": 7.29.1 "@babel/helper-globals": 7.28.0 - "@babel/parser": 7.28.6 + "@babel/parser": 7.29.2 "@babel/template": 7.28.6 - "@babel/types": 7.28.6 + "@babel/types": 7.29.0 debug: 4.4.3 transitivePeerDependencies: - supports-color @@ -7046,6 +7078,11 @@ snapshots: "@babel/helper-string-parser": 7.27.1 "@babel/helper-validator-identifier": 7.28.5 + "@babel/types@7.29.0": + dependencies: + "@babel/helper-string-parser": 7.27.1 + "@babel/helper-validator-identifier": 7.28.5 + "@bcoe/v8-coverage@1.0.2": {} "@cacheable/memory@2.0.7": @@ -7804,7 +7841,7 @@ snapshots: - react-native-b4a - supports-color - "@rolldown/pluginutils@1.0.0-beta.27": {} + "@rolldown/pluginutils@1.0.0-rc.3": {} "@rollup/rollup-android-arm-eabi@4.59.0": optional: true @@ -8227,14 +8264,14 @@ snapshots: "@typescript-eslint/types": 8.56.0 eslint-visitor-keys: 5.0.0 - "@vitejs/plugin-react@4.7.0(vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(yaml@2.8.2))": + "@vitejs/plugin-react@5.2.0(vite@7.3.1(@types/node@25.2.3)(jiti@2.6.1)(yaml@2.8.2))": dependencies: - "@babel/core": 7.28.6 - "@babel/plugin-transform-react-jsx-self": 7.27.1(@babel/core@7.28.6) - "@babel/plugin-transform-react-jsx-source": 7.27.1(@babel/core@7.28.6) - "@rolldown/pluginutils": 1.0.0-beta.27 + "@babel/core": 7.29.0 + "@babel/plugin-transform-react-jsx-self": 7.27.1(@babel/core@7.29.0) + "@babel/plugin-transform-react-jsx-source": 7.27.1(@babel/core@7.29.0) + "@rolldown/pluginutils": 1.0.0-rc.3 "@types/babel__core": 7.20.5 - react-refresh: 0.17.0 + react-refresh: 0.18.0 vite: 7.3.1(@types/node@25.2.3)(jiti@2.6.1)(yaml@2.8.2) transitivePeerDependencies: - supports-color @@ -10297,7 +10334,7 @@ snapshots: react-is@17.0.2: {} - react-refresh@0.17.0: {} + react-refresh@0.18.0: {} react@19.2.3: {}