Update Node.js non-major dependencies - autoclosed

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Change	Age	Confidence
@alpinejs/morph (source)	3.14.9 -> 3.15.0
alpinejs (source)	3.14.9 -> 3.15.0
bootstrap (source)	5.3.6 -> 5.3.8

---

Release Notes

alpinejs/alpine (@​alpinejs/morph)

v3.15.0

Compare Source

Changed

• Improve CSP build #​4671
• Add Alpine.morphBetween() #​4629
• style: use let instead of var in x-model.js #​4645
• style: use let/const instead of var in debounce.js #​4644
• style: remove useless param #​4650
• feat(persist): add 'exports' field for proper ESM/CJS resolution #​4611
• Fix Chrome warning when using x-trap.inert #​4640
• Fixes license #​4647

twbs/bootstrap (bootstrap)

v5.3.8

Compare Source

What's Changed

• Streamline release prep script by @​mdo in #​41539
• Docs: restore local dev port to 9001 by @​chalin in #​41545
• Docs: use Example shortcode instead of divs with only .bd-example class by @​julien-deramond in #​41556
• Docs: fix scss autorecompile in dev mode by @​MaxLardenois in #​41574
• Fix color-contrast() function for WCAG 2.1 compliance by @​julien-deramond in #​41585
• OSSF Scorecard by @​mdo in #​41571
• Workflows: Use SHA-1 for third-party actions by @​julien-deramond in #​41595
• Docs: unminify downloadable example HTML files by @​julien-deramond in #​41637
• Docs: Add tooltips to buttons when <Example> is used, not just <Code> by @​louismaximepiton in #​41582
• Set cursor pointer on input search cancel button by @​mdo in #​41639
• CSS: Prevent spinner distortion in flex containers with multiline content by @​julien-deramond in #​41654
• Migrate MyGet script to GH actions by @​supergibbs in #​41583
• Revert "Attempt to return focus explicitly to dropdown trigger" by @​mdo in #​41668
• docs: Minor range example code optimization by @​coliff in #​41665
• Remove Themes from docs by @​mdo in #​41671
• Release v5.3.8 by @​mdo in #​41669

Dependencies

• Build(deps-dev): Bump the development-dependencies group with 3 updates by @​julien-deramond in #​41540
• Build(deps-dev): Bump the development-dependencies group with 2 updates by @​julien-deramond in #​41544
• Build(deps-dev): Bump stylelint-config-twbs-bootstrap from 16.0.0 to 16.1.0 by @​julien-deramond in #​41546
• Build(deps-dev): Bump the development-dependencies group with 5 updates by @​julien-deramond in #​41552
• Build(deps-dev): Bump the development-dependencies group with 4 updates by @​julien-deramond in #​41560
• Build(deps-dev): Bump the development-dependencies group with 3 updates by @​julien-deramond in #​41566
• Build(deps): Bump actions/upload-artifact from 4.6.1 to 4.6.2 by @​dependabot[bot] in #​41594
• Build(deps-dev): Bump the development-dependencies group with 4 updates by @​julien-deramond in #​41599
• Build(deps-dev): Bump the development-dependencies group with 2 updates by @​julien-deramond in #​41609
• Build(deps): Bump github/codeql-action from 3.29.2 to 3.29.3 by @​dependabot[bot] in #​41611
• Build(deps): Bump streetsidesoftware/cspell-action from 7.1.1 to 7.1.2 by @​dependabot[bot] in #​41610
• Build(deps-dev): Bump the development-dependencies group with 4 updates by @​julien-deramond in #​41621
• Build(deps): Bump streetsidesoftware/cspell-action from 7.1.2 to 7.2.0 by @​dependabot[bot] in #​41625
• Build(deps): Bump actions-cool/issues-helper from 3.6.0 to 3.6.2 by @​dependabot[bot] in #​41623
• Build(deps): Bump github/codeql-action from 3.29.3 to 3.29.4 by @​dependabot[bot] in #​41624
• Build(deps-dev): Bump the development-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​41626
• Build(deps): Bump github/codeql-action from 3.29.4 to 3.29.5 by @​dependabot[bot] in #​41640
• Build(deps): Bump tmp from 0.2.3 to 0.2.4 by @​dependabot[bot] in #​41649
• Build(deps): Bump github/codeql-action from 3.29.7 to 3.29.8 by @​dependabot[bot] in #​41657
• Build(deps): Bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​41655
• Build(deps): Bump github/codeql-action from 3.29.8 to 3.29.10 by @​dependabot[bot] in #​41664

New Contributors

• @​chalin made their first contribution in #​41545

Full Changelog: twbs/bootstrap@v5.3.7...v5.3.8

v5.3.7

Compare Source

📚 Documentation

• Fixed broken "View on GitHub" URLs
• Corrected HTML <head> content generated by the "Download examples" button
• Refined sanitizer documentation for clarity and completeness
• Improved accessibility in the "On this page" table of contents and section heading anchor links
• Relocated ads to the right sidebar to minimize content reflow
• Added a new section on the Download page for the Intelissence extension
• Clarified the "Via JavaScript" usage example for Accordion Collapse
• Made internal documentation improvements to support future maintenance (no visible user impact)
• Mention CDN integrity and crossorigin attributes in introduction page
• Enhance floating labels placeholder usage description
• Add example of showing dynamic range value with output

🎨 Sass

• Consolidated multiple 'none' values in the box-shadow Sass mixin for cleaner output

🤖 JavaScript

• Fixed popover and tooltip behavior with a trigger: "hover click" configuration

🤝 Contributions

• Added recommended VSCode extensions and settings configuration to the repository

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.