From 744793b35a0aaa0975548324a73a6ba0eed465e1 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 23 Oct 2026 19:44:38 +0000
Subject: [PATCH] chore(deps): update dependency vite to v7.3.7 [security]

---
 apps/builder/package.json                                    | 2 +-
 .../src/export/templates/typescript-react-vite/package.json  | 2 +-
 package.json                                                 | 2 +-
 pnpm-workspace.yaml                                          | 5 +++--
 4 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/apps/builder/package.json b/apps/builder/package.json
index 8054aed6..7b271f1e 100644
--- a/apps/builder/package.json
+++ b/apps/builder/package.json
@@ -116,7 +116,7 @@
     "prettier-plugin-tailwindcss": "0.6.14",
     "tailwindcss": "^4.2.2",
     "typescript": "^5.9.3",
-    "vite": "7.3.2",
+    "vite": "7.3.7",
     "vite-plugin-top-level-await": "^1.6.0",
     "vite-plugin-wasm": "^3.6.0",
     "vitest": "^4.1.0"
diff --git a/apps/builder/src/export/templates/typescript-react-vite/package.json b/apps/builder/src/export/templates/typescript-react-vite/package.json
index ab7cd805..6111b9df 100644
--- a/apps/builder/src/export/templates/typescript-react-vite/package.json
+++ b/apps/builder/src/export/templates/typescript-react-vite/package.json
@@ -33,6 +33,6 @@
     "eslint-plugin-react-refresh": "^0.4.5",
     "tailwindcss": "^4.0.0",
     "typescript": "^5.8.2",
-    "vite": "^7.3.2"
+    "vite": "^7.3.7"
   }
 }
diff --git a/package.json b/package.json
index d15e99bc..20ea778e 100644
--- a/package.json
+++ b/package.json
@@ -86,7 +86,7 @@
     "prettier": "3.6.2",
     "prettier-plugin-tailwindcss": "0.6.14",
     "tsup": "^8.5.1",
-    "vite": "7.3.2",
+    "vite": "7.3.7",
     "vitest": "^4.1.0"
   },
   "engines": {
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 961ecd34..6b5ab715 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -1,4 +1,3 @@
-# Workspace adapter folders under packages/adapter-* publish as @openzeppelin/adapter-*.
 shamefullyHoist: true
 packages:
   # Include all packages in the packages directory
@@ -14,6 +13,8 @@ minimumReleaseAgeExclude:
   - '@openzeppelin/*'
   - 'vitest'
   - '@vitest/*'
+  # Renovate security update: vite@7.3.7
+  - vite@7.3.7
 overrides:
   # @metamask/eth-json-rpc-provider published no `license` field (and no LICENSE
   # file) for 1.0.0-2.1.0; 2.2.0 onwards are ISC and ship the licence text.
@@ -22,7 +23,7 @@ overrides:
   # dist/*.js -- and 2.2.0 still exports that type, so crossing the major here is
   # type-only. Reached via @coinbase/wallet-sdk from @wagmi/connectors.
   '@metamask/eth-json-rpc-provider': ^2.2.0
-  vite: 7.3.2
+  vite: 7.3.7
   use-sync-external-store: ^1.2.0
   valtio: ^1.13.2
   '@paulmillr/qr': 'npm:qr@^0.5.0'