Skip to content

Bump vite dependency to resolve CVE-2025-58752#47

Merged
vigneshwerv merged 7 commits intodevfrom
resolve-cve-npm-vite
Oct 2, 2025
Merged

Bump vite dependency to resolve CVE-2025-58752#47
vigneshwerv merged 7 commits intodevfrom
resolve-cve-npm-vite

Conversation

@vigneshwerv
Copy link
Copy Markdown
Contributor

No description provided.

id: yarn-cache-dir-path
run: echo "dir=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
run: |
corepack enable
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Adding this now 'cause I've upgraded this repo to use yarn@4 instead of yarn@1. This is line with the rest of codebase

Comment thread package.json
"name": "@fragment-dev/node-client",
"sideEffects": false,
"scripts": {
"postinstall": "chmod 644 dist/esm/src/bin.js",
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yarn berry seems to have a bug that resets the permissions on the bin file. I resorted to following the solution mentioned in this comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

niceee

@vigneshwerv vigneshwerv merged commit 5b72de6 into dev Oct 2, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants