Skip to content

to main#1118

Merged
JoshuaVSherman merged 8 commits into
mainfrom
dev
Jun 19, 2026
Merged

to main#1118
JoshuaVSherman merged 8 commits into
mainfrom
dev

Conversation

@JoshuaVSherman

Copy link
Copy Markdown
Contributor

No description provided.

dependabot Bot and others added 8 commits June 17, 2026 02:45
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.0.14 to 8.0.16.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.16/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.0.16
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
The Smoketest job ("clean install without devDependencies") removes the
lockfile and re-resolves, floating vite-plugin-checker (^0.14.1) up to
0.14.3. That release ships a broken tarball: dist/client/index.js
require.resolve("../@runtime/main.js") fails because dist/@runtime/ is
missing from the publish, so the postinstall `vite build` aborts with
MODULE_NOT_FOUND. 0.14.1 ships the file; 0.14.3 is the latest so there
is no fixed upgrade. Pin exactly until upstream republishes.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
GHSA-96hv-2xvq-fx4p (memory-exhaustion DoS). Transitive, lockfile-only,
non-breaking. Clears the only high-severity audit finding.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
…-8.0.16

chore(deps): bump vite from 8.0.14 to 8.0.16
Adds venue:create/edit/delete (+ a Venues group) to the frontend
capability registry so admins can grant the venue caps to AI agents /
human admins from the Admin Users page. Mirrors the backend registry
(web-jam-back#819). No venue:read (reads gated by any venue write cap).
Enables the gig-outreach work (epic web-jam-back#818) and advances #1115.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
engines + .nvmrc -> 24.17.0. CircleCI image pinned at cimg/node:24.16-
browsers until 24.17-browsers is published. Also refreshes the
AppTemplate version snapshot which renders package.json version (the
2.9.10->2.9.11 bump broke it).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
feat(admin): add venue:* capabilities to Admin Users registry
@JoshuaVSherman JoshuaVSherman merged commit 84c3597 into main Jun 19, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant