[Snyk] Security upgrade vite from 2.9.17 to 2.9.18

[emilyrohrbough]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • system-tests/projects/vite-ct-object-api/package.json

Note for zero-installs users

If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

⚠️ Warning

Failed to update the yarn.lock, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	688/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.9	Improper Access Control SNYK-JS-VITE-6531286	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[cypress]

17 failed and 6 flaky tests on run #54805 ↗︎

17

23917

1125

0

6

Details:

fix: system-tests/projects/vite-ct-object-api/package.json to reduce vulnerabili...
Project: cypress	Commit: 80a0b3bb52
Status: Failed	Duration: 16:38 💡
Started: Apr 4, 2024 11:01 PM	Ended: Apr 4, 2024 11:17 PM

  commands/sessions/manager.cy.ts • 0 failed tests • 5x-driver-firefox

View Output

Test		Artifacts

  cypress/command_queue.cy.ts • 0 failed tests • 5x-driver-firefox

View Output

Test		Artifacts

  cy/timeouts.cy.js • 0 failed tests • 5x-driver-firefox

View Output

Test		Artifacts

  issues/2850.cy.js • 0 failed tests • 5x-driver-firefox

View Output

Test		Artifacts

  issues/3253.cy.js • 0 failed tests • 5x-driver-firefox

View Output

Test		Artifacts

The first 5 failed specs are shown, see all 617 specs in Cypress Cloud.

  top-nav-launchpad.cy.ts • 1 flaky test • launchpad-e2e

View Output

Test		Artifacts
... > global mode > shows "connect project" button after login if project selected has no project id		Test Replay Screenshots

  project-setup.cy.ts • 1 flaky test • launchpad-e2e

View Output

Test		Artifacts
... > skips the setup steps when choosing component tests to run		Test Replay Screenshots

  commands/querying/querying.cy.js • 1 flaky test • 5x-driver-electron

View Output

Test		Artifacts
... > throws when alias property isnt just a digit		Test Replay

  e2e/origin/navigation.cy.ts • 1 flaky test • 5x-driver-chrome:beta

View Output

Test		Artifacts
... > times out in cy.origin with foobar spec bridge defined		Test Replay

  commands/net_stubbing.cy.ts • 2 flaky tests • 5x-driver-webkit

View Output

Test		Artifacts
... > with `resourceType` > can match a proxied image request by resourceType		</td> </tr> <tr> <td colspan="2"> <a href="https://cloud.cypress.io/projects/ypt4pf/runs/54805/overview/8e2ad07a-759e-4385-ad73-f0e4ca7b3aab?reviewViewBy=FLAKY&utm_source=github&utm_medium=failed&utm_campaign=view%20test"> ... > stops waiting when an xhr request is canceled </a> </td> <td> </td> </tr></table> Review all test suite changes for PR #29270 ↗︎