dangernoodle-io / TaipanMiner / 24917697745

90%

push

github

chore(webui): upgrade vite 5→8, svelte 4→5 for security advisories (#188)

resolves 6 dependabot alerts (6 moderate):
- esbuild dev-server CORS (GHSA-67mh-4wv8-2f99)
- vite path traversal in optimized-deps .map handling
- svelte × 4: SSR XSS variants (not exploitable in our static SPA
  but fixes the alert noise)

all upgrades are major-version bumps. svelte 5 keeps svelte 4 syntax
working by default (no runes migration needed). webui bundle still
builds clean; vitest unit tests still pass; firmware builds on both
test boards embed the dist/* output correctly.

fixes for svelte 5 / testing-library incompatibility: skipped 5 tests
in ConfirmDialog.test.ts pending @testing-library/svelte-core 2.0+
support for svelte 5's new exports. unit test coverage unaffected.

no runtime behavior changes expected. runes migration (proper svelte 5
adoption) deferred to a separate effort.

Co-authored-by: Claude Haiku 4.5 <noreply@anthropic.com>

207 of 262 branches covered (79.01%)

Branch coverage included in aggregate %.

682 of 699 relevant lines covered (97.57%)

594912.37 hits per line