fix(deps): update all non-major dependencies with stable versions (patch)#802
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
fix(deps): update all non-major dependencies with stable versions (patch)#802renovate[bot] wants to merge 1 commit intomainfrom
renovate[bot] wants to merge 1 commit intomainfrom
Conversation
7047972 to
781b8bc
Compare
781b8bc to
8f8a23c
Compare
988a40f to
0374511
Compare
e2df9e9 to
946fd3f
Compare
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
946fd3f to
696b223
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^1.1.10→^1.1.11^24.10.13→^24.10.15^2.16.0→^2.16.1^6.0.4→^6.0.5^10.4.24→^10.4.27^9.39.2→^9.39.4^3.3.3→^3.3.4>=13.0.5→>=13.0.6](https://renovatebot.com/diffs/npm/glob@>=10.2.0 <10.5.0/13.0.5/13.0.6)>=10.2.3→>=10.2.4^8.5.6→^8.5.8^6.0.5→^6.0.11>=4.59.0→>=4.59.1](https://renovatebot.com/diffs/npm/rollup@>=4.0.0 <4.59.0/4.59.0/4.59.1)^2.17.1→^2.17.2>=6.24.0→>=6.24.1>=7.24.0→>=7.24.5](https://renovatebot.com/diffs/npm/undici@>=7.0.0 <7.24.0/7.24.0/7.24.5)^8.0.6→^8.0.7^3.5.28→^3.5.30^3.2.4→^3.2.6Release Notes
floating-ui/floating-ui (@floating-ui/vue)
v1.1.11Patch Changes
@floating-ui/dom@1.7.6,@floating-ui/utils@0.2.11vitejs/vite-plugin-vue (@vitejs/plugin-vue)
v6.0.5Miscellaneous Chores
postcss/autoprefixer (autoprefixer)
v10.4.27Compare Source
package.json.v10.4.26Compare Source
v10.4.25Compare Source
eslint/eslint (eslint)
v9.39.4Compare Source
Bug Fixes
f18f6c8fix: update dependency minimatch to ^3.1.5 (#20564) (Milos Djermanovic)a3c868ffix: update dependency @eslint/eslintrc to ^3.3.4 (#20554) (Milos Djermanovic)234d005fix: minimatch security vulnerability patch for v9.x (#20549) (Andrej Beles)b1b37eefix: updateajvto6.14.0to address security vulnerabilities (#20538) (루밀LuMir)Documentation
4675152docs: add deprecation notice partial (#20520) (Milos Djermanovic)Chores
b8b4eb1chore: update dependencies for ESLint v9.39.4 (#20596) (Francesco Trotta)71b2f6bchore: package.json update for @eslint/js release (Jenkins)1d16c2fci: pin Node.js 25.6.1 (#20563) (Milos Djermanovic)v9.39.3Compare Source
Bug Fixes
791bf8dfix: restore TypeScript 4.0 compatibility in types (#20504) (sethamus)Chores
8594a43chore: upgrade @eslint/js@9.39.3 (#20529) (Milos Djermanovic)9ceef92chore: package.json update for @eslint/js release (Jenkins)af498c6chore: ignore/docs/v9.xin link checker (#20453) (Milos Djermanovic)isaacs/node-glob (glob@>=10.2.0 <10.5.0)
v13.0.6Compare Source
isaacs/minimatch (minimatch@<10.2.3)
v10.2.4Compare Source
postcss/postcss (postcss)
v8.5.8Compare Source
Processor#version.v8.5.7Compare Source
btd/rollup-plugin-visualizer (rollup-plugin-visualizer)
v6.0.11Compare Source
v6.0.8Compare Source
rollup/rollup (rollup@>=4.0.0 <4.59.0)
v4.59.1Compare Source
2026-03-21
Bug Fixes
Pull Requests
apostrophecms/apostrophe (sanitize-html)
v2.17.2Compare Source
Changes
htmlparser2from 8.x to 10.1.0. This improves security by correctly decoding zero-padded numeric character references (e.g.,&#​0000001) that previously bypassedjavascript:URL detection. Also fixes double-encoding of entities inside raw text elements liketextareaandoption.nodejs/undici (undici@<6.24.0)
v6.24.1Compare Source
Full Changelog: nodejs/undici@v6.24.0...v6.24.1
vuejs/devtools (vite-plugin-vue-devtools)
v8.0.7Compare Source
🚀 Features
built-in- by @skirtles-code in #1036 (35de5)🐞 Bug Fixes
displayNamefor functional components - by @skirtles-code in #1046 (20efd)computedandinjectleak via mixins - by @skirtles-code in #1050 (ecca7)View changes on GitHub
vuejs/core (vue)
v3.5.30Compare Source
Bug Fixes
entitiesto @vue/compat deps to fix CJS edge cases (#12514) (e725a67), closes #10609Setwith initial reactive values edge case (#12393) (5dc27ca), closes #8647v3.5.29Compare Source
Bug Fixes
vuejs/language-tools (vue-tsc)
v3.2.6Compare Source
language-core
$slotstype in template correctly withdefineSlots(#5984) - Thanks to @KazariEX!v-for(#5987) - Thanks to @ascott18!vscode
v3.2.5Compare Source
language-core
language-service
language-plugin-pug
workspace
pluginsoption - Thanks to @KazariEX!Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) in timezone America/New_York, Automerge - Monday through Friday ( * * * * 1-5 ) in timezone America/New_York.
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.