Use ^ prefix on Vite version
m
matheus
Hi team,
I noticed that Strapi uses a fixed version of Vite (https://github.com/strapi/strapi/blob/f93d6eabe52aa7681655cfa08eedbc3708dbb90d/packages/core/strapi/package.json#L168), which means that once a new vulnerability is discovered, we can't patch it until you guys patch and release a new Strapi version, or we override the package's version on our end.
Could the
^
prefix be added to the Vite version? This would allow package managers to use the latest compatible version, so we can patch the vulnerabilities without depending on a new Strapi release.Thanks in advance.