From 3a4744402fa1e812e15f0816b21e93ef8ba34b92 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 30 Oct 2026 11:10:58 +0000
Subject: [PATCH] =?UTF-8?q?=E2=AC=86=EF=B8=8F(dependencies)=20update=20vit?=
 =?UTF-8?q?e=20to=20v6.4.5=20[SECURITY]?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Vite 6.4.5 fixes CVE-2026-118662 (GHSA-8g5g-mxqh-grgj). The backport
shipped in 6.4.4 was incomplete: files blocked by `server.fs.deny`, like
`.env` or certificates, could still be read from the dev server by adding
a query such as `?raw` to the URL. Only a dev server exposed to the
network is affected, but contributors may run it that way, so we upgrade
right away.
---
 packages/ui-components/package.json | 2 +-
 yarn.lock                           | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/packages/ui-components/package.json b/packages/ui-components/package.json
index 21d8c6ec..5dd59e66 100644
--- a/packages/ui-components/package.json
+++ b/packages/ui-components/package.json
@@ -158,7 +158,7 @@
     "tsx": "4.21.0",
     "typescript": "5.8.3",
     "typescript-eslint": "8.18.2",
-    "vite": "6.4.4",
+    "vite": "6.4.5",
     "vite-plugin-dts": "4.5.3",
     "vite-tsconfig-paths": "5.1.4",
     "vitest": "4.1.11",
diff --git a/yarn.lock b/yarn.lock
index 750d0899..6376aade 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -10335,10 +10335,10 @@ vite-tsconfig-paths@5.1.4:
     globrex "^0.1.2"
     tsconfck "^3.0.3"
 
-vite@6.4.4:
-  version "6.4.4"
-  resolved "https://registry.yarnpkg.com/vite/-/vite-6.4.4.tgz#ddcfd2e568dd4904a9154d8763f2d78a3e9bf443"
-  integrity sha512-xGjU/SyjeNyb0E4KxXBvYz/1C+3JXuujvf2hXNOtnlcE+58o5ajd9N2/n2VhkiJvpCP2qQasnUpx5PXNeI+p1Q==
+vite@6.4.5:
+  version "6.4.5"
+  resolved "https://registry.yarnpkg.com/vite/-/vite-6.4.5.tgz#8da9987120422f92e432b6d25535b82cee867dad"
+  integrity sha512-4enwjFfi4IwtEh0w+jPzpLVOFQiPHmmzPxcHXQOyEur47o6u0jE573DmGpjA+7irXoMLYRZD5ZaFUEneS3abPg==
   dependencies:
     esbuild "^0.25.0"
     fdir "^6.4.4"