chore(deps-dev): bump vite from 5.4.21 to 8.2.2 in /client in the npm_and_yarn group across 1 directory - #3
Open
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/client/npm_and_yarn-788cdcced7
branch
2 times, most recently
from
August 24, 2026 09:27
07e8437 to
290c7c0
Compare
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/client/npm_and_yarn-788cdcced7
branch
from
August 24, 2026 18:17
290c7c0 to
f1808d5
Compare
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/client/npm_and_yarn-788cdcced7
branch
from
August 25, 2026 13:46
f1808d5 to
18e7ae1
Compare
BillyOutlast
pushed a commit
that referenced
this pull request
Aug 25, 2026
…iteration 43) Closes A3 #3/#4: atmosphere AND speech guards no longer trust forgeable Yjs clientIDs — SETs and DELETEs both gate on the delivering connection's HMAC-verified role/user. Corrective broadcasts rate-limited per connection (5/min then close 4008); persistence debounced 1s with flush on shutdown. Red tests reproduced forged-GM-clientID acceptance before the fix; live smoke verified eviction+restore, disconnect, zero mid-debounce writes. 66 relay tests passing (20 new). Co-Authored-By: Claude <noreply@anthropic.com>
BillyOutlast
pushed a commit
that referenced
this pull request
Aug 25, 2026
…teration 60) Closes A4 #2/#3: inspiration grant/revoke is now gm/admin/service-only (403 INSPIRATION_GM_ONLY) — the per-turn self-grant advantage mint is dead; new revoke surface. Escape-grapple verifies the named grappler via a session-level holder map (ledger-fallback for legacy holds), 409 NOT_YOUR_GRAPPLER before any spend; forced escapes respect attribution too; rewind rebuilds holders from surviving events. 6 tests red-first reproducing both exploits live; cargo 379/19. Co-Authored-By: Claude <noreply@anthropic.com>
Bumps the npm_and_yarn group with 1 update in the /client directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `vite` from 5.4.21 to 8.2.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 8.2.2 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/client/npm_and_yarn-788cdcced7
branch
from
August 25, 2026 23:43
18e7ae1 to
7267191
Compare
|
BillyOutlast
pushed a commit
that referenced
this pull request
Aug 31, 2026
…eration 42) The condition-ring module (iteration 25) deliberately dropped invisible and petrified as 'engine-only' — but the engine now wires both mechanically (iteration 41: Invisible grants advantage on its own attacks; Petrified is incapacitated, auto-fails STR/DEX saves, grants advantage to attackers). Added both to THEMED_CONDITIONS + CONDITION_RING_THEMES (invisible = cyan-300 ScanEye, 10.5:1; petrified = zinc-300 Gem, 10.3:1 — both WCAG-AA vs --tavern-bg) and to CONDITION_PRIORITY (petrified at #3 after paralyzed, invisible at #7 after blinded). Updated the 4 stale 'engine-only' doc comments (module header, themedConditions, hasThemedCondition, TacticalCanvas ring comment) and the 2 DOM tests that pinned the old drop behavior. 4 new unit tests + 2 new DOM tests — vitest 799 (was 795), tsc clean, build 4.66s.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 1 update in the /client directory: vite.
Updates
vitefrom 5.4.21 to 8.2.2Release notes
Sourced from vite's releases.
... (truncated)
Changelog
Sourced from vite's changelog.
... (truncated)
Commits
de1111arelease: v8.2.2cb77e2atest(ssr): add destructing assignment case for moduleRunnerTransform (#23308)9db0b61fix(ssr): rewrite computed key of destructing parameter (#23307)8413052fix: respectresolve.preserveSymlinkswhen resolving root (fix #23197) (#23...05a003efix(config): resolve sourcemap paths against sourcemap location (#23239)495d9fffeat(deps): widen@vitejs/devtoolspeer range to v0.5.0 (#23302)1d9fa39refactor: use JSON import attributes instead of readFileSync in constants (#2...2804636fix(css): don't pass empty targets to lightningcss (#23295)599b44btest(module-runner): simplify server-hmr tests (#23300)4a261f2test(module-runner): add TLA circular import case (#23299)