chore(deps): update patches after 7 days

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
esbuild	0.27.1 → 0.27.2
vue (source)	3.5.25 → 3.5.26
wxt (source)	0.20.11 → 0.20.13

---

Release Notes

evanw/esbuild (esbuild)

v0.27.2

Compare Source

• Allow import path specifiers starting with #/ (#​4361)

  Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

  This change was contributed by @​hybrist.

• Automatically add the -webkit-mask prefix (#​4357, #​4358)

  This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:

  /* Original code */
  main {
    mask: url(x.png) center/5rem no-repeat
  }
  
  /* Old output (with --target=chrome110) */
  main {
    mask: url(x.png) center/5rem no-repeat;
  }
  
  /* New output (with --target=chrome110) */
  main {
    -webkit-mask: url(x.png) center/5rem no-repeat;
    mask: url(x.png) center/5rem no-repeat;
  }

  This change was contributed by @​BPJEnnova.

• Additional minification of switch statements (#​4176, #​4359)

  This release contains additional minification patterns for reducing switch statements. Here is an example:

  // Original code
  switch (x) {
    case 0:
      foo()
      break
    case 1:
    default:
      bar()
  }
  
  // Old output (with --minify)
  switch(x){case 0:foo();break;case 1:default:bar()}
  
  // New output (with --minify)
  x===0?foo():bar();

• Forbid using declarations inside switch clauses (#​4323)

  This is a rare change to remove something that was previously possible. The Explicit Resource Management proposal introduced using declarations. These were previously allowed inside case and default clauses in switch statements. This had well-defined semantics and was already widely implemented (by V8, SpiderMonkey, TypeScript, esbuild, and others). However, it was considered to be too confusing because of how scope works in switch statements, so it has been removed from the specification. This edge case will now be a syntax error. See tc39/proposal-explicit-resource-management#215 and rbuckton/ecma262#14 for details.

  Here is an example of code that is no longer allowed:

  switch (mode) {
    case 'read':
      using readLock = db.read()
      return readAll(readLock)
  
    case 'write':
      using writeLock = db.write()
      return writeAll(writeLock)
  }

  That code will now have to be modified to look like this instead (note the additional { and } block statements around each case body):

  switch (mode) {
    case 'read': {
      using readLock = db.read()
      return readAll(readLock)
    }
    case 'write': {
      using writeLock = db.write()
      return writeAll(writeLock)
    }
  }

  This is not being released in one of esbuild's breaking change releases since this feature hasn't been finalized yet, and esbuild always tracks the current state of the specification (so esbuild's previous behavior was arguably incorrect).

vuejs/core (vue)

v3.5.26

Compare Source

Bug Fixes

• compat: fix compat handler of draggable (#​12445) (ed85953), closes #​12444
• compat: handle v-model deprecation warning with missing appContext (#​14203) (945a543), closes #​14202
• compiler-sfc: demote const reactive bindings used in v-model (#​14214) (e24ff7d), closes #​11265 #​11275
• compiler-ssr: handle ssr attr fallthrough when preserve whitespace (#​12304) (4783118), closes #​8072
• hmr: handle cached text node update (#​14134) (69ce3c7), closes #​14127
• keep-alive: use resolved component name for async components in cache pruning (#​14212) (dfe667c), closes #​14210
• runtime-core: ensure correct anchor el for deeper unresolved async components (#​14182) (f5b3bf2), closes #​14173
• runtime-core: handle patch stable fragment edge case (#​12411) (94aeb64), closes #​12410
• runtime-core: pass component instance to flushPreFlushCbs on unmount (#​14221) (e857e12), closes #​14215

Performance Improvements

• compiler-core: use binary-search to get line and column (#​14222) (1904053)

wxt-dev/wxt (wxt)

v0.20.13: wxt v0.20.13

Compare Source

compare changes

🚀 Enhancements

• Remove script element immediately in injectScript (#​1761)
• Add modifyScript option to injectScript (#​1762)
• Make injectScript return the created script element (#​1838)
• Support .wxtrc config file (#​1833)

🩹 Fixes

• Make injectScript wait until script is actually loaded (#​1763)
• Don't return promises from unlisted scripts that do not have an async main function (#​1907)

💅 Refactors

• Use script.text instead of innerHTML in injectScript (#​1764)

❤️ Contributors

• Rxliuli (@​rxliuli)
• Sebastian Landwehr [email protected]
• Johan Kiviniemi (@​ion1)

v0.20.12: wxt v0.20.12

Compare Source

compare changes

🚀 Enhancements

• Remove data-wxt-* attributes (#​1913)
• Default to using use_dynamic_url: true for content script css files (#​1993)

🩹 Fixes

• Wxt normal logs are drowned by [email protected] ads (#​1883)
• Optimize splitShadowRootCss (#​1934)
• wxt prepare fails with the error "vite_ssr_exportName is not defined" when using Vite 7 (#​1884)

🏡 Chore

• Use linkedom a test instead of happy-dom (#​1957)
• Add support for vite-node v5 (#​2001)
• Upgrade dev and non-major prod dependencies (#​2000)
• dev-deps: Upgrade happy-dom to address CVE-2025-61927 (#​2002)

❤️ Contributors

• Aaron (@​aklinker1)
• Jaguar Zhou (@​aiktb)
• Alexander Harding [email protected]
• Florian Kühne (@​ZerGo0)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.