fix(deps): address CVE-2026-39363 in vite (#1584)

taymoor89 · web-flow · commit f69e63e9c665 · 2026-04-07T10:28:42.000+02:00
* feat(juno): add fix-vulnerability skill and update gitignore * fix(deps): address CVE-2026-39363 in vite - Updated vite to 7.3.2 across all packages and apps - Fixes Dependabot alert #201 * chore: add changeset for vite CVE-2026-39363 security fix * chore: remove skill file and revert gitignore changes
diff --git a/.changeset/fix-vite-cve-2026-39363.md b/.changeset/fix-vite-cve-2026-39363.md
@@ -0,0 +1,12 @@
+---
+"@cloudoperators/juno-communicator": patch
+"@cloudoperators/greenhouse-auth-provider": patch
+"@cloudoperators/juno-k8s-client": patch
+"@cloudoperators/juno-messages-provider": patch
+"@cloudoperators/juno-oauth": patch
+"@cloudoperators/juno-package-template": patch
+"@cloudoperators/juno-ui-components": patch
+"@cloudoperators/juno-url-state-provider": patch
+---
+
+fix: address CVE-2026-39363 vulnerability in vite
diff --git a/apps/carbon/package.json b/apps/carbon/package.json
@@ -59,7 +59,7 @@
     "prettier": "3.8.1",
     "tailwindcss": "4.2.1",
     "typescript": "5.9.3",
-    "vite": "7.3.1",
+    "vite": "7.3.2",
     "vite-plugin-svgr": "4.5.0",
     "vite-tsconfig-paths": "6.1.1",
     "vitest": "3.2.4"
diff --git a/apps/doop/package.json b/apps/doop/package.json
@@ -27,7 +27,7 @@
     "react-markdown": "10.1.0",
     "shadow-dom-testing-library": "1.13.1",
     "tailwindcss": "4.2.1",
-    "vite": "7.3.1",
+    "vite": "7.3.2",
     "vitest": "3.2.4",
     "zustand": "5.0.11"
   },
diff --git a/apps/example/package.json b/apps/example/package.json
@@ -28,7 +28,7 @@
     "postcss": "8.5.8",
     "shadow-dom-testing-library": "1.13.1",
     "tailwindcss": "4.2.1",
-    "vite": "7.3.1",
+    "vite": "7.3.2",
     "vitest": "3.2.4"
   },
   "dependencies": {
diff --git a/apps/greenhouse/package.json b/apps/greenhouse/package.json
@@ -31,7 +31,7 @@
     "remark-gfm": " 4.0.1",
     "shadow-dom-testing-library": "1.13.1",
     "tailwindcss": "4.2.1",
-    "vite": "7.3.1",
+    "vite": "7.3.2",
     "vite-plugin-svgr": "4.5.0",
     "vitest": "3.2.4",
     "zustand": "5.0.11"
diff --git a/apps/heureka/package.json b/apps/heureka/package.json
@@ -71,7 +71,7 @@
     "tailwindcss": "4.2.1",
     "react-error-boundary": "6.1.1",
     "typescript": "5.9.3",
-    "vite": "7.3.1",
+    "vite": "7.3.2",
     "vite-plugin-svgr": "4.5.0",
     "vite-tsconfig-paths": "6.1.1",
     "vitest": "3.2.4"
diff --git a/apps/supernova/package.json b/apps/supernova/package.json
@@ -28,7 +28,7 @@
     "jsdom": "26.1.0",
     "shadow-dom-testing-library": "1.13.1",
     "tailwindcss": "4.2.1",
-    "vite": "7.3.1",
+    "vite": "7.3.2",
     "vitest": "3.2.4",
     "zustand": "5.0.11"
   },
diff --git a/apps/template/package.json b/apps/template/package.json
@@ -53,7 +53,7 @@
     "prettier": "3.8.1",
     "tailwindcss": "4.2.1",
     "typescript": "5.9.3",
-    "vite": "7.3.1",
+    "vite": "7.3.2",
     "vite-tsconfig-paths": "6.1.1",
     "vitest": "3.2.4"
   }
diff --git a/packages/communicator/package.json b/packages/communicator/package.json
@@ -34,7 +34,7 @@
     "@types/node": "24.10.15",
     "jsdom": "26.1.0",
     "typescript": "5.9.3",
-    "vite": "7.3.1",
+    "vite": "7.3.2",
     "vite-plugin-dts": "4.5.4",
     "vitest": "3.2.4"
   }
diff --git a/packages/greenhouse-auth-provider/package.json b/packages/greenhouse-auth-provider/package.json
@@ -32,7 +32,7 @@
     "react": "19.2.4",
     "typescript": "5.9.3",
     "vitest": "3.2.4",
-    "vite": "7.3.1",
+    "vite": "7.3.2",
     "vite-plugin-dts": "4.5.4"
   },
   "scripts": {
diff --git a/packages/k8s-client/package.json b/packages/k8s-client/package.json
@@ -35,7 +35,7 @@
   ],
   "devDependencies": {
     "@cloudoperators/juno-config": "workspace:*",
-    "vite": "7.3.1",
+    "vite": "7.3.2",
     "vitest": "3.2.4",
     "vite-plugin-dts": "4.5.4"
   }
diff --git a/packages/messages-provider/package.json b/packages/messages-provider/package.json
@@ -29,7 +29,7 @@
     "react": "19.2.4",
     "react-dom": "19.2.4",
     "typescript": "5.9.3",
-    "vite": "7.3.1",
+    "vite": "7.3.2",
     "vite-plugin-dts": "4.5.4",
     "vitest": "3.2.4",
     "zustand": "5.0.11"
diff --git a/packages/oauth/package.json b/packages/oauth/package.json
@@ -22,7 +22,7 @@
     "@types/node": "24.10.15",
     "typescript": "5.9.3",
     "vitest": "3.2.4",
-    "vite": "7.3.1",
+    "vite": "7.3.2",
     "vite-plugin-dts": "4.5.4"
   },
   "dependencies": {
diff --git a/packages/template/package.json b/packages/template/package.json
@@ -33,7 +33,7 @@
     "@types/node": "24.10.15",
     "jsdom": "26.1.0",
     "typescript": "5.9.3",
-    "vite": "7.3.1",
+    "vite": "7.3.2",
     "vite-plugin-dts": "4.5.4",
     "vitest": "3.2.4"
   }
diff --git a/packages/ui-components/package.json b/packages/ui-components/package.json
@@ -49,7 +49,7 @@
     "storybook": "9.1.20",
     "tailwindcss": "4.2.1",
     "typescript": "5.9.3",
-    "vite": "7.3.1",
+    "vite": "7.3.2",
     "vite-plugin-dts": "4.5.4",
     "vite-plugin-glob": "0.3.2",
     "vite-plugin-svgr": "4.5.0",
diff --git a/packages/url-state-provider/package.json b/packages/url-state-provider/package.json
@@ -41,7 +41,7 @@
     "juri-cutlery": "1.0.0",
     "lz-string": "1.5.0",
     "typescript": "5.9.3",
-    "vite": "7.3.1",
+    "vite": "7.3.2",
     "vite-plugin-dts": "4.5.4",
     "vitest": "3.2.4"
   },
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

Original file line number	Diff line number	Diff line change
`@@ -53,7 +53,7 @@`
`53`	`53`	`"prettier": "3.8.1",`
`54`	`54`	`"tailwindcss": "4.2.1",`
`55`	`55`	`"typescript": "5.9.3",`
`56`		`- "vite": "7.3.1",`
	`56`	`+ "vite": "7.3.2",`
`57`	`57`	`"vite-tsconfig-paths": "6.1.1",`
`58`	`58`	`"vitest": "3.2.4"`
`59`	`59`	`}`
Original file line number	Diff line number	Diff line change
`@@ -34,7 +34,7 @@`
`34`	`34`	`"@types/node": "24.10.15",`
`35`	`35`	`"jsdom": "26.1.0",`
`36`	`36`	`"typescript": "5.9.3",`
`37`		`- "vite": "7.3.1",`
	`37`	`+ "vite": "7.3.2",`
`38`	`38`	`"vite-plugin-dts": "4.5.4",`
`39`	`39`	`"vitest": "3.2.4"`
`40`	`40`	`}`