Bump adm-zip and @module-federation/vite in /module-federation

[dependabot]

Bumps adm-zip to 0.6.1 and updates ancestor dependency @module-federation/vite. These dependencies need to be updated together.

Updates adm-zip from 0.6.0 to 0.6.1

Release notes

Sourced from adm-zip's releases.

v0.6.1

Full Changelog: cthackers/adm-zip@v0.6.0...v0.6.1

• Updated dev dependencies
• Fixed uncaught crash in async decompression on malformed DEFLATE data
• Fixed addLocalFolder following symlinks out of the archived folder
• Stripped setuid/setgid/sticky bits from extracted file permissions
• Enforced the decompression size cap on the async path and for size 0
• Rejected archives with duplicate entry names
• Blocked extraction from writing through symlinks inside the target
• Routed malformed-header parse errors through the async callback
• Rejected zip entries whose declared data extent runs past the buffer
• Fixed addLocalFolderPromise hanging on empty folders and swallowing errors
• Fixed addLocalFolderAsync2 mangling local paths on Windows

Commits

• cb2cf9b Fixed addLocalFolderAsync2 mangling local paths on Windows
• 54902b6 Fixed addLocalFolderPromise hanging on empty folders and swallowing errors
• 73131bd Fixed CI
• 758898d Rejected zip entries whose declared data extent runs past the buffer
• 74b6e9f Routed malformed-header parse errors through the async callback
• eaa35fa Blocked extraction from writing through symlinks inside the target
• 1e015e3 Increment version
• 05101d4 Rejected archives with duplicate entry names
• 4916006 Enforced the decompression size cap on the async path and for size 0
• 6a63c33 Stripped setuid/setgid/sticky bits from extracted file permissions
• Additional commits viewable in compare view

Updates @module-federation/vite from 1.20.7 to 1.23.1

Release notes

Sourced from @​module-federation/vite's releases.

1.23.1

What's Changed

• fix: keep class-instance shared defaults wrapped by @​gioboa in module-federation/vite#1368
• fix(ssr): ignore import-like text in comments and strings in the temp-file loader by @​itaober in module-federation/vite#1365
• fix(ssr): let vm-evaluated remotes call createRequire(import.meta.url) by @​itaober in module-federation/vite#1366
• fix: seed shares behind unloaded providers by @​gioboa in module-federation/vite#1369
• fix: leave import map importers unwrapped by @​gioboa in module-federation/vite#1370
• fix(ssr): report the error behind SSR strategy fallbacks by @​itaober in module-federation/vite#1374
• perf(ssr): write temp-file SSR modules as .mjs by @​itaober in module-federation/vite#1375
• fix(ssr): apply resolvedShared to createRequire in remote SSR modules by @​itaober in module-federation/vite#1376
• chore: bump mfe deps 🥗 by @​gioboa in module-federation/vite#1378
• fix: clean up stale SSR temp-file generations by @​dmchoi77 in module-federation/vite#1379
• fix: avoid global replacement of SSR nested import URLs by @​dmchoi77 in module-federation/vite#1380
• fix: skip imports the resolver throws on while scanning expose dependencies by @​h11g in module-federation/vite#1382
• fix: clean up stale SSR VM module generations by @​dmchoi77 in module-federation/vite#1383
• fix: materialize shared subpath roots on warm cache by @​gioboa in module-federation/vite#1387
• fix: make Vite bundledDev safe for Module Federation by @​dmchoi77 in module-federation/vite#1389
• fix: resolve NodeNext star re-exports by @​gioboa in module-federation/vite#1393
• fix: Inherit plugin-level shareScope fallback by @​gioboa in module-federation/vite#1394

New Contributors

• @​itaober made their first contribution in module-federation/vite#1365

Full Changelog: module-federation/vite@1.23.0...1.23.1

1.23.0

What's Changed

• feat: add ssrFilename for SSR entry by @​gioboa in module-federation/vite#1329
• fix: defer shared bridging to getExposes to prevent init deadlock by @​RalphK66 in module-federation/vite#1325
• fix: honor noExternal for SSR runtime by @​gioboa in module-federation/vite#1328
• fix: keep seeded provider on same-version tie by @​gioboa in module-federation/vite#1333
• chore: bump deps 🐻 by @​gioboa in module-federation/vite#1334
• fix: resolve transitive shared fallbacks from their dependents by @​gu-stav in module-federation/vite#1332
• fix: gate SSR entry loader out of client builds by @​tonoizer in module-federation/vite#1337
• fix: coalesce non-eager loadShare wrappers into one chunk by @​gu-stav in module-federation/vite#1340
• fix: align allowNodeModulesSuffixMatch default with webpack and rspack by @​dmchoi77 in module-federation/vite#1338
• fix: align aliased shared keys with runtime requests by @​dmchoi77 in module-federation/vite#1339
• fix: preserve nested singleton React identity after #1333 by @​tonoizer in module-federation/vite#1335
• fix: wrap bare remote imports from node_modules by @​gioboa in module-federation/vite#1342
• fix: live binding for import:false exports by @​gioboa in module-federation/vite#1343
• fix: resolve virtual ids under bundledDev by @​gioboa in module-federation/vite#1345
• fix: expose dts afterGenerate in our package types by @​dmchoi77 in module-federation/vite#1346
• fix: keep SSR loader out of multi-environment client builds by @​tonoizer in module-federation/vite#1347
• fix: defer dynamic-only consume-only shares by @​gioboa in module-federation/vite#1349
• fix: never resolve a consume-only stub by @​gioboa in module-federation/vite#1350
• fix: ignore NODE_PATH when resolving shared packages by @​gu-stav in module-federation/vite#1351
• fix: work around dropped resolve options in rolldown by @​gu-stav in module-federation/vite#1353
• fix: pick the imported copy of transitive shared packages by @​gu-stav in module-federation/vite#1352
• perf: avoid repeated shared wrapper generation during dependency optimization by @​gu-stav in module-federation/vite#1354
• perf: reuse import analysis across plugin instances by @​gu-stav in module-federation/vite#1355

... (truncated)

Commits

• 1b3bc20 1.23.1
• 6dac760 fix: Inherit plugin-level shareScope fallback (#1394)
• 76e856a fix: resolve NodeNext star re-exports (#1393)
• 104613e fix: make Vite bundledDev safe for Module Federation (#1389)
• 801fcf6 fix: default bundledDev to eager bundling (#1388)
• 4df582d fix: materialize shared subpath roots on warm cache (#1387)
• dfa7815 fix: clean up stale SSR VM module generations (#1383)
• cddccea fix: skip imports the resolver throws on while scanning expose dependencies (...
• 33d807a fix: avoid global replacement of SSR nested import URLs (#1380)
• 10fdb86 fix(ssr): clean up stale temp-file generations (#1379)
• Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.