[Snyk] Security upgrade vite from 4.4.2 to 4.5.3

[WontonSam]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	209/1000 Why? Confidentiality impact: High, Integrity impact: None, Availability impact: None, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: High, Attack Vector: Network, EPSS: 0.01055, Social Trends: No, Days since published: 0, Reachable: No, Transitive dependency: No, Is Malicious: No, Business Criticality: High, Provider Urgency: Medium, Package Popularity Score: 98, Impact: 5.99, Likelihood: 3.48, Score Version: V5	Improper Access Control SNYK-JS-VITE-6531286	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: vite

The new version differs by 118 commits.

• aac695e release: v4.5.3
• 96a7f3a fix: `fs.deny` with globs with directories (#16250)
• d0360c1 release: v4.5.2
• eeec23b fix: fs deny for case insensitive systems (#15653)
• c075115 release: v4.5.1
• 41bb354 fix: backport #15223, proxy html path should be encoded (#15226)
• f7f53aa docs: adjust sponsor logo
• 4d29cfe docs: link to ViteConf replay (#14970)
• 2004a67 docs: remix sponsor logo
• 055d2b8 release: v4.5.0
• ed7bdc5 feat: scan .marko files (#14669)
• 45595ef feat: backport mdx as known js source (#14560) (#14670)
• 520139c feat(ssr): backport ssr.resolve.conditions and ssr.resolve.externalConditions (#14498) (#14668)
• ad7466c docs: redirect vite.dev to vitejs.dev
• b50db04 release: v4.4.11
• 54e1275 revert: "fix: use string manipulation instead of regex to inject esbuild helpers
• f3a3e77 release: v4.4.10
• f8b9adb fix: restore builtins list
• 104971d fix(resolve): support submodules of optional peer deps (#14489)
• 0c6d289 fix(analysis): warnings for dynamic imports that use static template literals (#14458)
• 269aa43 fix(import-analysis): preserve importedUrls import order (#14465)
• 6f6e5de fix: handle errors during `hasWorkspacePackageJSON` function (#14394)
• 8bc1f9d feat: improve deno and bun support (#14379)
• 3d63ae6 fix(manifest): preserve pure css chunk assets (#14297)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
cachimanboutique	❌ Failed (Inspect)			Apr 4, 2024 4:03pm
website	❌ Failed (Inspect)			Apr 4, 2024 4:03pm