Repository navigation
chore(deps-dev): bump vite from 6.4.3 to 6.4.5 in /packages/puppeteer-cloudflare - #255
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![clanky-the-clanker[bot]](https://avatars.githubusercontent.com/in/5306670?s=60&v=4){kind=small}
There was a problem hiding this comment.
Superseded by the review of
05db0ef5.
This review, of 972e5b18
✅ Approved — This patch-level bump of a dev dependency has no findings. The other lockfile changes bring it back in line with package.json.
The decision is advisory: this review is a comment and never approves, blocks or requests changes on the pull request.
✅ All checks passed
📋 Code Quality: ✅ LGTM
The vite bump from 6.4.3 to 6.4.5 is a patch release with only the integrity hash and resolved URL changed. It is a dev dependency, so it does not reach the published package.
The lockfile also drops debug, @types/debug, @types/ms and ms, and moves devtools-protocol to 0.0.1666840. Neither change is unrelated: the head package.json already pins devtools-protocol at 0.0.1666840 and no longer lists debug. The regenerated lockfile simply catches up with package.json.
📝 Documentation: ✅ LGTM
No documentation changes are needed for this dependency bump.
Reviewed commit: 972e5b18
|
npm i https://pkg.pr.new/cloudflare/browser-run/@cloudflare/puppeteer@05db0ef5c91f8cb543e9af01a0a42597dd7bde97Published by this workflow run. New pushes and reruns update this comment. |
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.4.3 to 6.4.5. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v6.4.5/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.4.5/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 6.4.5 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]>
972e5b1 to
05db0ef
Compare
There was a problem hiding this comment.
✅ Approved — A patch-level bump of a dev dependency with no findings. The other lockfile changes bring it back in line with package.json.
The decision is advisory: this review is a comment and never approves, blocks or requests changes on the pull request.
✅ All checks passed
📋 Code Quality: ✅ LGTM
The vite bump from 6.4.3 to 6.4.5 is a patch release of a dev dependency. Only its version, resolved URL and integrity hash changed.
The other lockfile changes bring the lockfile back in line with the head package.json:
devtools-protocolis now pinned at0.0.1666840, matchingpackage.json.package.jsonno longer listsdebugor@types/debug, and no source file imports them, so dropping them along with the transitivemsand@types/msis safe.
The ^6.4.3 range for vite in package.json already allows 6.4.5.
📝 Documentation: ✅ LGTM
This dependency bump needs no documentation changes.
Reviewed commit: 05db0ef5
Bumps vite from 6.4.3 to 6.4.5.
Release notes
Sourced from vite's releases.
Changelog
Sourced from vite's changelog.
Commits
83ab40brelease: v6.4.591e40d7fix: checkserver.fsafter stripping query as well (#22160) (#23855)5f0d9a4release: v6.4.4eec6464fix(server): check resolved ids for transform access (#20410)e570d8dfix(server): store ids tosafeModulePathsrather than URLs (#23656)8afec69fix(deps): update launch-editor to v2.14.2 (#23654)19902cffix(html): filename passed to transformIndexHtml should not include queries (...