Repository navigation
chore(deps): adopt released form0 packages and patch Vite - #31
Merged
Merged
Conversation
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
aragornii
changed the title
This was referenced Oct 21, 2026
Closed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adopt published form0-core 0.5.1 and form0-react 0.4.0, and remove the Vite security-audit blocker. The application stays on Vite 6, now 6.4.5; the tooling-only nested Vite copy moves from 8.3.0 to 8.3.5 with its required Rolldown/PostCSS dependencies. Both copies include the launch-editor advisory fixes. Application code, event configuration and existing overrides are unchanged.
Validation against a fresh independent install: lint and production build pass; production and all-dependency audits report zero. Nine actual Chromium scenarios pass across the three demo forms, standard/simplified pages, field editing and both overlays, using the configured real browser worker. Published React runtime files match the manually accepted binding candidate. Existing maintained dependency installations were preserved.
All seven new-head PR checks pass, including Node 22/24; explicit actual-head CodeQL review reports zero findings across 87 JS/TS and 17 Actions rules, with no open PR alerts. No merge or publication is performed by this change.