From eeec1dedb9e298fbedffbd57b989c4bf971721c2 Mon Sep 17 00:00:00 2001 From: Philipp Date: Tue, 6 Oct 2026 12:40:00 +0200 Subject: [PATCH 01/12] Update build tooling to Vite 8 - Vite 3 -> 8, @vitejs/plugin-vue 3 -> 6, vite-plugin-css-injected-by-js 2 -> 5. - Regenerate package-lock.json. This removes the vulnerable dev dependencies that Dependabot reports (vite, esbuild, rollup, postcss, nanoid, js-yaml, minimatch, brace-expansion, flatted). - Rename vite.config.js to vite.config.mjs. Vite 8 loads a .js config in a package without "type": "module" as CommonJS, and the CSS plugin is ESM only. "type": "module" is not an option because it breaks require() of the UMD file. - Select the build with --mode instead of the LIB_NAME variable. This also works on Windows. - Remove the "publish" script. npm runs a script with that name after every npm publish, so it started a second publish. The new "prepack" script builds dist before npm pack and npm publish. - Add eslint-plugin-vue and eslint-plugin-import, which the avidofood ESLint config needs, and add a "lint" script. ESLint stays on 8 because eslint-config-airbnb-base does not support ESLint 9. - Add Vitest 5, @vue/test-utils and jsdom for the tests in the next commit. - Add .nvmrc (Node 24). Vite 8 and Vitest 5 need Node 20.19+ or 22.12+. - Normalize the repository URL. Co-Authored-By: Claude Opus 5.5 --- .nvmrc | 1 + demo/resources/js/App.vue | 1 + package-lock.json | 7370 ++++++++++++++++++++----------------- package.json | 25 +- vite.config.js | 62 - vite.config.mjs | 64 + 6 files changed, 4098 insertions(+), 3425 deletions(-) create mode 100644 .nvmrc delete mode 100644 vite.config.js create mode 100644 vite.config.mjs diff --git a/.nvmrc b/.nvmrc new file mode 100644 index 0000000..a45fd52 --- /dev/null +++ b/.nvmrc @@ -0,0 +1 @@ +24 diff --git a/demo/resources/js/App.vue b/demo/resources/js/App.vue index 7183beb..264c72f 100644 --- a/demo/resources/js/App.vue +++ b/demo/resources/js/App.vue @@ -1,3 +1,4 @@ +