Open dependabot[bot] opened 1 day ago
The latest updates on your projects. Learn more about Vercel for Git ↗︎
Name | Status | Preview | Comments | Updated (UTC) |
---|---|---|---|---|
analytics-dashboard | ✅ Ready (Inspect) | Visit Preview | 💬 Add feedback | Sep 27, 2024 3:07pm |
Bumps rollup and vite. These dependencies needed to be updated together. Updates
rollup
from 2.77.3 to 2.79.2Changelog
Sourced from rollup's changelog.
... (truncated)
Commits
c9bd03d
2.79.248aef33
fix: resolve DOM Clobbering CVE-2024-43788 (backport to v2) (#5677)69ff418
2.79.104dce1b
Update changelog159137e
fix: typo docs and contributors link in CONTRIBUTING.md (#4639)e1392b3
Update type definition of resolveId (#4641)7836357
Improve performance of chunk naming collision check (#4643)71d20c9
Reduce permissions for repl-artefacts.yml workflow (#4630)8193ea5
Adapt workflow to use Node 14 sub-version to work with branch protection8477f8f
2.79.0Updates
vite
from 3.0.8 to 3.2.11Changelog
Sourced from vite's changelog.
... (truncated)
Commits
45b8644
release: v3.2.115d1d81e
fix(importAnalysis): backport #13712, strip url base before passing as safeMo...2ddd854
fix: backport #18115, DOM Clobbering ina6da450
fix: backport #18112, fs raw query1a8728f
release: v3.2.105910f13
release: v3.2.989c7c64
fix: port #16250 to v3 (#16253)8352b75
release: v3.2.899080ca
fix: port #15653 to v3 (#15655)494f36b
release: v3.2.7Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show