chore(deps-dev): bump vite from 7.3.2 to 7.3.5 in /platforms/web/apps/web in the npm_and_yarn group across 1 directory

FORJAMIE.md

@@ -216,6 +216,10 @@ See also: `~/.codex/instructions/Learnings.md`
 
 ## Recent changes
 
+### 2026-06-19
+
+- **Web Vite security bump**: updated the web app Vite devDependency to 7.3.5 and refreshed `pnpm-lock.yaml` so frozen pnpm installs resolve the patched Vite version instead of retaining the previous 7.3.2 lockfile snapshot.
+
 ### 2026-05-07
 
 - **Hono security override completion**: tightened the root pnpm override from `hono@<4.12.7` to `hono@<4.12.16` and regenerated `pnpm-lock.yaml` so `@modelcontextprotocol/sdk@1.26.0` and `@hono/node-server@1.19.11` resolve Hono through `4.12.16`, closing the MCP runtime path left open by the direct Dependabot bump.

package.json

@@ -194,7 +194,7 @@
       "minimatch@>=10.0.0 <10.2.3": ">=10.2.3",
       "playwright": "1.58.2",
       "playwright-core": "1.58.2",
-      "vite": "7.3.2",
+      "vite": "7.3.5",
       "convict@<=6.2.4": ">=6.2.5",
       "brace-expansion@>=2.0.0 <2.0.3": ">=2.0.3",
       "brace-expansion@>=4.0.0 <5.0.5": ">=5.0.5",

platforms/web/apps/web/package.json

@@ -23,6 +23,6 @@
     "@vitejs/plugin-react": "5.1.3",
     "tailwindcss": "4.1.18",
     "tsx": "^4.7.0",
-    "vite": "7.3.2"
+    "vite": "7.3.5"
   }
 }