chore(deps): bump dependencies to patched versions

Bump hono to 4.12.30, pixi.js to 8.19.0, @sveltejs/vite-plugin-svelte to
7.2.0, svelte to 5.56.6, vite to 8.1.5, vitest to 4.1.10, and wrangler to
4.112.0. Declare ws as a direct dev dependency at ^8.21.0 since the test
harness imports it, replacing the vulnerable transitive resolution.

Resolves advisories for hono (<4.12.25), vite (<=8.0.15), ws (<8.21.0),
undici (<7.28.0), and esbuild (<0.28.1) via updated transitive
resolutions. Drop the package-level pnpm.onlyBuiltDependencies list,
which duplicated the workspace allowBuilds approvals.
This commit is contained in:
tiennm99 committed 2026-07-17 17:56:43 +07:00
1 parent ecc5808457
commit 34e85622a6
2 files changed
+383 -381

No files matched your search

+8 -10
View File
@@ -13,17 +13,15 @@
"test:watch": "vitest --config vitest.config.js"
},
"dependencies": {
"hono": "^4.12.22",
"pixi.js": "^8.18.1"
"hono": "^4.12.30",
"pixi.js": "^8.19.0"
},
"devDependencies": {
"@sveltejs/vite-plugin-svelte": "^7.1.2",
"svelte": "^5.55.9",
"vite": "^8.0.14",
"vitest": "^4.1.7",
"wrangler": "^4.94.0"
},
"pnpm": {
"onlyBuiltDependencies": ["esbuild", "sharp", "workerd"]
"@sveltejs/vite-plugin-svelte": "^7.2.0",
"svelte": "^5.56.6",
"vite": "^8.1.5",
"vitest": "^4.1.10",
"wrangler": "^4.112.0",
"ws": "^8.21.0"
}
}
+375 -371
View File
File diff suppressed because it is too large. Load diff