From 3babad796e977c0c1b0e4a9212e6fcfb98a0f487 Mon Sep 17 00:00:00 2001 From: Matthias Mair Date: Mon, 27 Oct 2025 21:09:51 +0100 Subject: [PATCH] fix medium sec issues in frontend dependencies (#10686) * bump @playwright/test to address https://github.com/inventree/InvenTree/security/dependabot/242 * bump vite to address https://github.com/inventree/InvenTree/security/dependabot/243 * remove splitVendorChunkPlugin --- src/frontend/package.json | 4 +-- src/frontend/vite.config.ts | 3 +- src/frontend/yarn.lock | 64 ++++++++++++++++++------------------- 3 files changed, 35 insertions(+), 36 deletions(-) diff --git a/src/frontend/package.json b/src/frontend/package.json index b56f61cc99..82e25fa63d 100644 --- a/src/frontend/package.json +++ b/src/frontend/package.json @@ -112,7 +112,7 @@ "@lingui/babel-plugin-lingui-macro": "^5.3.1", "@lingui/cli": "^5.3.1", "@lingui/macro": "^5.3.1", - "@playwright/test": "^1.52.0", + "@playwright/test": "1.56.0", "@types/node": "^24.3.0", "@types/qrcode": "^1.5.5", "@types/react": "^19.1.10", @@ -128,7 +128,7 @@ "rollup": "^4.0.0", "rollup-plugin-license": "^3.5.3", "typescript": "^5.8.2", - "vite": "^6.2.6", + "vite": "7.1.11", "vite-plugin-babel-macros": "^1.0.6", "vite-plugin-dts": "^4.5.3", "vite-plugin-externals": "^0.6.2", diff --git a/src/frontend/vite.config.ts b/src/frontend/vite.config.ts index 610d55a667..a658d92aa7 100644 --- a/src/frontend/vite.config.ts +++ b/src/frontend/vite.config.ts @@ -3,7 +3,7 @@ import { codecovVitePlugin } from '@codecov/vite-plugin'; import { vanillaExtractPlugin } from '@vanilla-extract/vite-plugin'; import react from '@vitejs/plugin-react'; import license from 'rollup-plugin-license'; -import { defineConfig, splitVendorChunkPlugin } from 'vite'; +import { defineConfig } from 'vite'; import istanbul from 'vite-plugin-istanbul'; import { __INVENTREE_VERSION_INFO__ } from './version-info'; @@ -32,7 +32,6 @@ export default defineConfig(({ command, mode }) => { } }), vanillaExtractPlugin(), - splitVendorChunkPlugin(), license({ sourcemap: true, thirdParty: { diff --git a/src/frontend/yarn.lock b/src/frontend/yarn.lock index c6314f666f..38d9bc6734 100644 --- a/src/frontend/yarn.lock +++ b/src/frontend/yarn.lock @@ -1347,12 +1347,12 @@ dependencies: "@octokit/openapi-types" "^22.2.0" -"@playwright/test@^1.52.0": - version "1.55.0" - resolved "https://registry.yarnpkg.com/@playwright/test/-/test-1.55.0.tgz#080fa6d9ee6d749ff523b1c18259572d0268b963" - integrity sha512-04IXzPwHrW69XusN/SIdDdKZBzMfOT9UNT/YiJit/xpy2VuAoB8NHc8Aplb96zsWDddLnbkPL3TsmrS04ZU2xQ== +"@playwright/test@1.56.0": + version "1.56.0" + resolved "https://registry.yarnpkg.com/@playwright/test/-/test-1.56.0.tgz#891fe101bddf3eee3dd609e7a145f705dc0f3054" + integrity sha512-Tzh95Twig7hUwwNe381/K3PggZBZblKUe2wv25oIpzWLr6Z0m4KgV1ZVIjnR6GM9ANEqjZD7XsZEa6JL/7YEgg== dependencies: - playwright "1.55.0" + playwright "1.56.0" "@reduxjs/toolkit@1.x.x || 2.x.x": version "2.8.2" @@ -2947,7 +2947,7 @@ fast-equals@^4.0.3: resolved "https://registry.npmjs.org/fast-equals/-/fast-equals-4.0.3.tgz" integrity sha512-G3BSX9cfKttjr+2o1O22tYMLq0DPluZnYtq1rXumE1SpL/F/SLIfHx08WYQoWSIpeMYf8sRbJ8++71+v6Pnxfg== -fdir@^6.4.3, fdir@^6.4.4, fdir@^6.5.0: +fdir@^6.4.3, fdir@^6.5.0: version "6.5.0" resolved "https://registry.yarnpkg.com/fdir/-/fdir-6.5.0.tgz#ed2ab967a331ade62f18d077dae192684d50d350" integrity sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg== @@ -4013,17 +4013,17 @@ pkg-types@^2.0.1: exsolve "^1.0.1" pathe "^2.0.3" -playwright-core@1.55.0: - version "1.55.0" - resolved "https://registry.yarnpkg.com/playwright-core/-/playwright-core-1.55.0.tgz#ec8a9f8ef118afb3e86e0f46f1393e3bea32adf4" - integrity sha512-GvZs4vU3U5ro2nZpeiwyb0zuFaqb9sUiAJuyrWpcGouD8y9/HLgGbNRjIph7zU9D3hnPaisMl9zG9CgFi/biIg== +playwright-core@1.56.0: + version "1.56.0" + resolved "https://registry.yarnpkg.com/playwright-core/-/playwright-core-1.56.0.tgz#14b40ea436551b0bcefe19c5bfb8d1804c83739c" + integrity sha512-1SXl7pMfemAMSDn5rkPeZljxOCYAmQnYLBTExuh6E8USHXGSX3dx6lYZN/xPpTz1vimXmPA9CDnILvmJaB8aSQ== -playwright@1.55.0: - version "1.55.0" - resolved "https://registry.yarnpkg.com/playwright/-/playwright-1.55.0.tgz#7aca7ac3ffd9e083a8ad8b2514d6f9ba401cc78b" - integrity sha512-sdCWStblvV1YU909Xqx0DhOjPZE4/5lJsIS84IfN9dAZfcl/CIZ5O8l3o0j7hPMjDvqoTF8ZUcc+i/GL5erstA== +playwright@1.56.0: + version "1.56.0" + resolved "https://registry.yarnpkg.com/playwright/-/playwright-1.56.0.tgz#71c533c61da33e95812f8c6fa53960e073548d9a" + integrity sha512-X5Q1b8lOdWIE4KAoHpW3SE8HvUB+ZZsUoN64ZhjnN8dOb1UpujxBtENGiZFE+9F/yhzJwYa+ca3u43FeLbboHA== dependencies: - playwright-core "1.55.0" + playwright-core "1.56.0" optionalDependencies: fsevents "2.3.2" @@ -4051,7 +4051,7 @@ postcss@8.4.49: picocolors "^1.1.1" source-map-js "^1.2.1" -postcss@^8.5.3, postcss@^8.5.6: +postcss@^8.5.6: version "8.5.6" resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.5.6.tgz#2825006615a619b4f62a9e7426cc120b349a8f3c" integrity sha512-3Ybi1tAuwAP9s0r1UQ2J4n5Y0G05bJkpUIO0/bI9MhwmD70S5aTWbXGBwxHrelT+XM1k6dM0pk+SwNkpTRN7Pg== @@ -4432,7 +4432,7 @@ rollup-plugin-license@^3.5.3: spdx-expression-validate "~2.0.0" spdx-satisfies "~5.0.1" -rollup@^4.0.0, rollup@^4.34.9, rollup@^4.43.0: +rollup@^4.0.0, rollup@^4.43.0: version "4.52.0" resolved "https://registry.yarnpkg.com/rollup/-/rollup-4.52.0.tgz#5a906bf98f7c7a2c08d2b18fbfa52955552423d7" integrity sha512-+IuescNkTJQgX7AkIDtITipZdIGcWF0pnVvZTWStiazUmcGA2ag8dfg0urest2XlXUi9kuhfQ+qmdc5Stc3z7g== @@ -4757,7 +4757,7 @@ tiny-invariant@^1.3.3: resolved "https://registry.yarnpkg.com/tiny-invariant/-/tiny-invariant-1.3.3.tgz#46680b7a873a0d5d10005995eb90a70d74d60127" integrity sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg== -tinyglobby@^0.2.13, tinyglobby@^0.2.15: +tinyglobby@^0.2.15: version "0.2.15" resolved "https://registry.yarnpkg.com/tinyglobby/-/tinyglobby-0.2.15.tgz#e228dd1e638cea993d2fdb4fcd2d4602a79951c2" integrity sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ== @@ -5014,6 +5014,20 @@ vite-plugin-istanbul@^6.0.2: source-map "^0.7.4" test-exclude "^6.0.0" +vite@7.1.11: + version "7.1.11" + resolved "https://registry.yarnpkg.com/vite/-/vite-7.1.11.tgz#4d006746112fee056df64985191e846ebfb6007e" + integrity sha512-uzcxnSDVjAopEUjljkWh8EIrg6tlzrjFUfMcR1EVsRDGwf/ccef0qQPRyOrROwhrTDaApueq+ja+KLPlzR/zdg== + dependencies: + esbuild "^0.25.0" + fdir "^6.5.0" + picomatch "^4.0.3" + postcss "^8.5.6" + rollup "^4.43.0" + tinyglobby "^0.2.15" + optionalDependencies: + fsevents "~2.3.3" + "vite@^5.0.0 || ^6.0.0 || ^7.0.0", "vite@^5.0.0 || ^6.0.0 || ^7.0.0-0": version "7.1.6" resolved "https://registry.yarnpkg.com/vite/-/vite-7.1.6.tgz#336806d29983135677f498a05efb0fd46c5eef2d" @@ -5028,20 +5042,6 @@ vite-plugin-istanbul@^6.0.2: optionalDependencies: fsevents "~2.3.3" -vite@^6.2.6: - version "6.4.1" - resolved "https://registry.yarnpkg.com/vite/-/vite-6.4.1.tgz#afbe14518cdd6887e240a4b0221ab6d0ce733f96" - integrity sha512-+Oxm7q9hDoLMyJOYfUYBuHQo+dkAloi33apOPP56pzj+vsdJDzr+j1NISE5pyaAuKL4A3UD34qd0lx5+kfKp2g== - dependencies: - esbuild "^0.25.0" - fdir "^6.4.4" - picomatch "^4.0.2" - postcss "^8.5.3" - rollup "^4.34.9" - tinyglobby "^0.2.13" - optionalDependencies: - fsevents "~2.3.3" - vscode-uri@^3.0.8: version "3.1.0" resolved "https://registry.npmjs.org/vscode-uri/-/vscode-uri-3.1.0.tgz"