Skip to content

Bump vite from 7.3.6 to 7.3.7 - #857

Merged
celdrake merged 1 commit into
mainfrom
dependabot/npm_and_yarn/vite-7.3.7
Oct 21, 2026
Merged

celdrake merged 1 commit into
mainfrom
dependabot/npm_and_yarn/vite-7.3.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor

Bumps vite from 7.3.6 to 7.3.7.

Release notes

Sourced from vite's releases.

v7.3.7

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.3.7 (2026-10-06)

Bug Fixes

  • deps: update launch-editor to v2.14.2 (#23654) (a0a3339)
  • html: filename passed to transformIndexHtml should not include queries (#23653) (8d479f9)
  • server: store ids to safeModulePaths rather than URLs (#23656) (f0d76c7)
Commits
  • 284f6b5 release: v7.3.7
  • f0d76c7 fix(server): store ids to safeModulePaths rather than URLs (#23656)
  • a0a3339 fix(deps): update launch-editor to v2.14.2 (#23654)
  • 8d479f9 fix(html): filename passed to transformIndexHtml should not include queries (...
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.6 to 7.3.7.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.7/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.7/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.3.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026
@coderabbitai

coderabbitai Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

Comment @coderabbitai help to get the list of available commands.

@celdrake
celdrake added this pull request to the merge queue Oct 21, 2026
Merged via the queue into main with commit d69e4cb Oct 21, 2026
11 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/vite-7.3.7 branch October 21, 2026 10:09
celdrake pushed a commit to celdrake/flightctl-ui that referenced this pull request Oct 21, 2026
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.6 to 7.3.7.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.7/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.7/packages/vite)

Made-with: Cursor

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.3.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit d69e4cb)
celdrake added a commit that referenced this pull request Oct 21, 2026
* EDM-4175: fix catalog empty-state messaging for catalog filters (#837)

* EDM-4175: fix catalog empty-state messaging for catalog filters

Treat selected Catalog filters as active filters when selecting the Software Catalog empty-state message. Add Cypress coverage for unfiltered and Catalog-filtered empty states.

* EDM-4175: address catalog review feedback

Scope the Catalog filter tree with a dedicated test id, merge Cypress setup hooks, and wait for catalog requests before asserting the unfiltered empty state.

---------

Co-authored-by: EfratIfergan <EfratIfergan@users.noreply.github.com>
(cherry picked from commit abd9cd3)
Made-with: Cursor

* EDM-6276: patch CVE-2026-102278 by updating brace-expansion to 1.1.21/5.0.12 (#838)

Resolves CVE-2026-102278 (Important/HIGH) in brace-expansion.
Updated brace-expansion from 1.1.18/5.0.9 to 1.1.21/5.0.12 via npm update.
Also covers EDM-6275, EDM-6277, EDM-6278 (rhem-1.2).

Made-with: Cursor
(cherry picked from commit 41926d1)

* EDM-3334: Prevent pending device list flicker (#788)

(cherry picked from commit 02083f4)
Made-with: Cursor

* EDM-3759: remove fleet name from template labels (#847)

Stop copying Fleet names into Kubernetes label values when building create payloads. Keep user-defined Fleet metadata labels and cover long-name regressions.

Fixes EDM-3759

Co-authored-by: EfratIfergan <EfratIfergan@users.noreply.github.com>
(cherry picked from commit 11a46e1)
Made-with: Cursor

* [EDM-5890]: use Flight Control for upstream route titles (#849)

* EDM-5890: Use Flight Control branding for upstream route titles

* EDM-5890: Keep upstream title branding in standalone routes

---------

Co-authored-by: EfratIfergan <EfratIfergan@users.noreply.github.com>
(cherry picked from commit d36aa20)
Made-with: Cursor

* [EDM-5891]: use a placeholder for new label input (#848)

* EDM-5891: use a placeholder for new label input

Treat the label format hint as placeholder text so new label inputs start empty. Preserve existing default label behavior for other editable controls and cover the regression in the approval-flow Cypress test.

* EDM-5891: use placeholders for editable label inputs

Remove the default label value from EditableLabelControl and use optional placeholders across all call sites so new entries start empty consistently.

* EDM-5891: handle empty OCI tags

Avoid trimming undefined tags during repository validation and cover the placeholder-driven empty tag case with a regression test.

---------

Co-authored-by: EfratIfergan <EfratIfergan@users.noreply.github.com>
(cherry picked from commit faf18a2)
Made-with: Cursor

* EDM-4073: Clarify 'Clear deprecation' action (#850)

Made-with: Cursor
(cherry picked from commit deea7d6)

* EDM-4002: Show validation error for invalid icon (#852)

* EDM-4002: Show validation error for invalid icon

Made-with: Cursor

* Make error accessible

Made-with: Cursor
(cherry picked from commit 2e25cf2)

* EDM-4126: Show empty state when no vulnerabilities exist (#845)

Made-with: Cursor
(cherry picked from commit 8171a68)

* EDM-4074: Truncate very long catalog item names (#773)

Made-with: Cursor
(cherry picked from commit b9f1133)

* EDM-6250: Prompt is configurable in AuthProviders (#854)

Made-with: Cursor
(cherry picked from commit 31cfc25)

* Bump github.com/getkin/kin-openapi from 0.145.0 to 0.149.0 in /proxy (#855)

Bumps [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) from 0.145.0 to 0.149.0.
- [Release notes](https://github.com/getkin/kin-openapi/releases)
- [Commits](getkin/kin-openapi@v0.145.0...v0.149.0)

Made-with: Cursor

---
updated-dependencies:
- dependency-name: github.com/getkin/kin-openapi
  dependency-version: 0.149.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit a603b90)

* Bump launch-editor from 2.14.1 to 2.14.2 (#856)

Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.14.1 to 2.14.2.
- [Commits](vitejs/launch-editor@v2.14.1...v2.14.2)

Made-with: Cursor

---
updated-dependencies:
- dependency-name: launch-editor
  dependency-version: 2.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 249b653)

* Bump vite from 7.3.6 to 7.3.7 (#857)

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.6 to 7.3.7.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.7/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.7/packages/vite)

Made-with: Cursor

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.3.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit d69e4cb)

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Efilaluck <73797477+EfratIfergan@users.noreply.github.com>
Co-authored-by: EfratIfergan <EfratIfergan@users.noreply.github.com>
Co-authored-by: Eldar101 <eldar101@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant