Routine security updates. (Chainlit#1781)

* Routine security updates.

* Bump Node for CI to 23.3

* Consistently bump Vite, address CVE-2025-24010.

Author: dokterbob

.github/actions/pnpm-node-install/action.yaml

@@ -5,7 +5,7 @@ inputs:
   node-version:
     description: Node.js version
     required: true
-    default: '22.7.0'
+    default: '23.3.0'
   pnpm-version:
     description: pnpm version
     required: true

frontend/package.json

@@ -93,7 +93,7 @@
     "tailwindcss": "^3.4.16",
     "tslib": "^2.6.2",
     "typescript": "^5.2.2",
-    "vite": "^5.4.12",
+    "vite": "^5.4.14",
     "vite-plugin-svgr": "^4.2.0",
     "vite-tsconfig-paths": "^4.2.0",
     "vitest": "^0.34.4"
@@ -112,7 +112,9 @@
       "vite@>=4.0.0 <4.5.4": ">=4.5.4",
       "vite@>=4.0.0 <=4.5.3": ">=4.5.4",
       "rollup@>=3.0.0 <3.29.5": ">=3.29.5",
-      "rollup@>=4.0.0 <4.22.4": ">=4.22.4"
+      "rollup@>=4.0.0 <4.22.4": ">=4.22.4",
+      "cross-spawn@>=7.0.0 <7.0.5": ">=7.0.5",
+      "nanoid@<3.3.8": ">=3.3.8"
     }
   }
 }

frontend/pnpm-lock.yaml

@@ -14,9 +14,6 @@
     "build-storybook": "storybook build"
   },
   "dependencies": {
-    "react": "^18.3.1",
-    "react-dom": "^18.3.1",
-    "uuid": "^9.0.0",
     "@chainlit/app": "workspace:^",
     "@chainlit/react-client": "workspace:^",
     "class-variance-authority": "^0.7.1",
@@ -25,11 +22,14 @@
     "i18next": "^23.7.16",
     "lodash": "^4.17.21",
     "lucide-react": "^0.468.0",
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1",
     "react-i18next": "^14.0.0",
     "recoil": "^0.7.7",
     "sonner": "^1.2.3",
     "tailwind-merge": "^2.5.5",
-    "tailwindcss-animate": "^1.0.7"
+    "tailwindcss-animate": "^1.0.7",
+    "uuid": "^9.0.0"
   },
   "devDependencies": {
     "@storybook/addon-essentials": "^8.4.7",
@@ -52,7 +52,7 @@
     "storybook": "^8.4.7",
     "tailwindcss": "^3.4.16",
     "typescript": "^5.2.2",
-    "vite": "^4.4.9",
+    "vite": "^5.4.14",
     "vite-plugin-svgr": "^4.2.0",
     "vite-tsconfig-paths": "^4.2.0"
   },
@@ -75,7 +75,9 @@
       "vite@>=4.0.0 <4.5.4": ">=4.5.4",
       "vite@>=4.0.0 <=4.5.3": ">=4.5.4",
       "rollup@>=3.0.0 <3.29.5": ">=3.29.5",
-      "cookie@<0.7.0": ">=0.7.0"
+      "cookie@<0.7.0": ">=0.7.0",
+      "cross-spawn@>=7.0.0 <7.0.5": ">=7.0.5",
+      "nanoid@<3.3.8": ">=3.3.8"
     }
   }
 }