Skip to content

Bump the mineures group with 10 updates - #34

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mineures-8b765b3a91
Closed

Bump the mineures group with 10 updates#34
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mineures-8b765b3a91

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the mineures group with 10 updates:

Package From To
@quasar/extras 2.0.3 2.0.4
dompurify 3.4.13 3.4.14
fastify 5.12.0 5.12.1
mermaid 11.16.1 11.17.0
quasar 2.24.0 2.26.0
@quasar/app-vite 3.5.0 3.8.0
concurrently 10.0.4 10.0.5
eslint 10.8.1 10.9.0
vitest 4.1.10 4.1.11
vue-tsc 3.3.9 3.3.11

Updates @quasar/extras from 2.0.3 to 2.0.4

Release notes

Sourced from @​quasar/extras's releases.

@​quasar/extras-v2.0.4

Changes

  • material-symbols-outlined -> v367
  • material-symbols-rounded -> v368
  • material-symbols-sharp -> v364
  • Heads up on the Material Symbols upgrade: Google removed the file_map icon upstream, so symOutlinedFileMap, symRoundedFileMap and symSharpFileMap are no longer exported. If you import any of them, switch to another icon before upgrading. The same upgrade adds *DisplayAdd, *DriveFusiontable, *GlobeClock and *TerminalAdd to all three families.

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

Commits
  • a261ceb chore(extras): bump version
  • 9ee0ca0 feat(extras): upgrade icon libs
  • ef7cf33 fix(app-vite): resolve /src-capacitor deps from /src in every mode, not just ...
  • 5d2aa38 docs(ui): sweep scenarios must clear the --ios run before handoff
  • cbb5b5b test(ui): lock the multiple-masks pattern across its threshold #7920
  • 79914dc docs(QInput): document the multiple-masks computed pattern #7920
  • eb609c2 docs(QInput): warn about combining mask with maxlength #15706
  • 4d14d53 fix(use-mask): re-anchor the caret after a dynamic mask change #7777
  • 65a62a2 fix(QInput): drop a stale debounced emission when the mask restores the model...
  • 889c508 test(regression-sweep): S16 tabs need mobile-arrows for the iOS run
  • Additional commits viewable in compare view

Updates dompurify from 3.4.13 to 3.4.14

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions
Commits

Updates fastify from 5.12.0 to 5.12.1

Release notes

Sourced from fastify's releases.

v5.12.1

⚠️ Security release

What's Changed

Full Changelog: fastify/fastify@v5.12.0...v5.12.1

Commits

Updates mermaid from 11.16.1 to 11.17.0

Release notes

Sourced from mermaid's releases.

mermaid@11.17.0

Minor Changes

Patch Changes

  • #7847 215fe89 Thanks @​filipsajdak! - fix(c4): named attributes such as $tags, $link and $sprite are no longer clobbered to undefined when they arrive in an earlier positional slot of Person/System/Container/Component/Boundary/Rel statements.

  • #7871 8d874c4 Thanks @​knsv-bot! - fix(flowchart): stop dagre layout from spamming warn-level logs on every node/edge/cluster

  • #8071 b3d1f63 Thanks @​pbrolin47! - fix(block): sibling blocks overlapping in block diagrams when one has a label wider than 200px

  • #7870 71b8843 Thanks @​knsv-bot! - fix: a RangeError: Invalid array length crash when rendering certain edges.

  • #7924 9cbef5d Thanks @​nightt5879! - fix(treeView): icons disappearing after strict security sanitization.

  • #7850 a34cbf0 Thanks @​aloisklink! - fix(block): allow classdefs to update text color

  • #7937 f9cbe1e Thanks @​filipsajdak! - fix(dagre): let a diagram's own nodeSpacing/rankSpacing take effect in the unified dagre layout

  • #8005 90eeece Thanks @​pbrolin47! - fix(flowchart): reverts the behavior change from #7672 (fix/4648-directions), since arrows between subgraphs are broken

  • #7951 afa2f80 Thanks @​aloisklink! - perf: use fastdom to batch DOM measurements (up to 25% speedup)

  • Updated dependencies [e848423]:

    • @​mermaid-js/parser@​1.2.1
Commits
  • 293b1c1 Merge pull request #8074 from mermaid-js/changeset-release/master
  • f484a36 Version Packages
  • 0a07bf6 Bump layout-elk version (#8078)
  • 1127c5f Merge pull request #8071 from mermaid-js/release/11.17.0
  • 8628ef1 docs: remove C4 typescript conversion changeset
  • 349ebd3 docs: remove non-user visible changeset
  • b5a744a docs: scope to all v11.17.0 changeset messages
  • 4150c73 Make changesets less verbose
  • 7ba4b6f [autofix.ci] apply automated fixes
  • b3d1f63 Fixed block rendering due to failing SS in applitools
  • Additional commits viewable in compare view

Updates quasar from 2.24.0 to 2.26.0

Release notes

Sourced from quasar's releases.

quasar-v2.26.0

[!IMPORTANT] A few behavior changes worth checking before you upgrade:

  • QEditor no longer emits a placeholder attribute (it was not valid on a div). Custom CSS targeting .q-editor__content[placeholder] must switch to [aria-placeholder].
  • QSelect renders its fall-through attributes only on the focus target, no longer also on the .q-field__native wrapper. Selectors or tests that matched the wrapper copy (or relied on the attribute matching two elements) need updating.
  • The touch/hover behavior of QTooltip, context menus, the touch directives and the slider family is now decided per interaction instead of by the mobile UA. Hybrid devices change the most: touchscreen laptops and tablets with a mouse gain hover tooltips and right-click context menus, mobile UAs gain keyboard support on QSlider/QRange/QKnob, and QRange stops emitting UA-dependent SSR markup.
  • QDialog dismisses its backdrop on mousedown instead of click, so a press on the backdrop with a menu open closes only the menu on desktop too, matching what touch already did.
  • QSlider/QRange/QKnob de-duplicate their emissions: change fires only when an interaction actually moved the value, and a parent that does not sync the model prop back hears each value once per interaction rather than once per press/release/click.
  • Firefox now matches QField's autofill styling: the stylesheet moved from :-webkit-autofill to the standard :autofill, so the q-autofill keyframe and $input-autofill-color apply there for the first time.

New

  • feat(QMenu): open on hover -> new hover, hover-delay and hover-hide-delay props, also forwarded by QBtnDropdown (in split mode hovering either button opens it). A hover-open never steals focus from where you are typing, ESC still dismisses, submenus keep the chain open while the pointer travels between them, and touch devices keep tap-toggling. No effect when context-menu is set (#6776)
  • feat(QRange): new min-range and max-range props -> constrain the width of the selection. Out-of-limits model values are coerced like inner-min/inner-max already do, dragging and the keyboard clamp each thumb to what the other thumb allows, and a minimum width blocks thumb crossover (#18182, #2100). Based on PR #18182 by Teodor Atroshenko (thexeos)
  • feat(QTable): new footer slot -> renders a real <tfoot> element, so a totals/summary row can be made sticky through CSS. Works in default and virtual-scroll modes (not in grid mode) (#7570)
  • feat(date): support the ISO week year -> new getISOWeekYear() util and the Moment/Day.js-compatible GGGG/GG format tokens, so masks like YYYY-[W]ww no longer render the wrong pairing at year boundaries (Jan 1st 2022 was formatted as 2022-W52 instead of 2021-W52) (#17088, credit: psevertson)
  • feat(Ripple): cancel an "early" ripple once the gesture can no longer end in a tap -> a touch that turns into a scroll/pan, or a pressed pointer dragged off the element, now fades the ripple out instead of leaving a full one behind with no click ever happening. On touch, painting waits 100ms (was 50ms) so flick-scrolls are cancelled before anything becomes visible
  • feat(ui): correct the CSS vendor prefixes across the stylesheet -> printing keeps the QCheckbox/QRadio/QToggle backgrounds in Firefox and Safari (print-color-adjust), Firefox gains the QField autofill styling (:autofill), the QFile/QUploader file button styling (::file-selector-button) and the QPagination input styling (appearance), while prefixes no engine reads any more are gone

Fixes

  • fix(ui): accept class, style, key and ref on components in JSX/TSX -> the exported component types did not carry Vue's PublicProps, so TSX rejected the universal props. Templates were never affected (#8690)
  • fix(QTooltip): decide the touch UX per interaction instead of per device -> mouse and pen hover show the tooltip on any device, so touchscreen laptops, tablets with a mouse and hovering styluses get hover tooltips the mobile-UA check denied them, while a touch press keeps the exact mobile behavior (#14763)
  • fix(QTooltip): give a pressed stylus the touch UX -> a pencil held against the anchor got hover semantics and no selection suppression, because a pen reports the same pointerType whether it hovers or touches
  • fix(QTooltip): ignore focus moving within the anchor -> QBtn shuffles focus to an internal helper after every press, so clicking a QBtn with a tooltip flash-hid it on desktop
  • fix(useAnchor): serve context menus by capability instead of by mobile UA -> tablets with a mouse gain right-click context menus, the keyboard context-menu key works on mobile UAs, and touchscreen laptops get the same 300ms long-press with selection suppression phones have instead of engine-dependent native timing
  • fix(TouchHold/TouchRepeat): suppress text selection per interaction, not per device -> a touchscreen laptop no longer shows selection artifacts during a long-press, and a mouse press on a mobile UA no longer suppresses selection it never needed
  • fix(QSlider/QRange/QKnob): wire taps, presses and the keyboard on every platform -> mobile UAs rendered a focusable track that ignored arrow keys, and desktop had no click handler so assistive-tech clicks did nothing
  • fix(QSlider/QRange/QKnob): hand each value to a non-syncing parent once -> a controlled model that rejects the update heard the same value re-emitted by the press, the release and the compatibility click
  • fix(ui/slider): emit change only when the interaction changed the value -> pressing End with the thumb already at the maximum, clicking the value the slider already had, or dragging away and back all fired a spurious change
  • fix(QKnob): emit change only when a user adjustment lands a new value -> mounting, every parent model write and range clamping used to fire it, contradicting its own API description
  • fix(QRange): don't leave a thumb's focus ring behind after a track tap -> on touch nothing ever blurs the internal focus state, so the ring stayed on the tapped thumb through scrolling and taps elsewhere
  • fix(ui/slider): keep marker tick values float-exact on fractional steps -> a fractional step drifted (0.1 + 0.1 + 0.1 = 0.30000000000000004), so marker-labels rendered the drifted number and marker-label-* slot lookups missed
  • fix(ui): act on backdrop press so an open menu is dismissed alone -> with a menu open inside a QDialog, the first press on the backdrop closes only the menu on desktop too. Non-primary buttons are ignored
  • fix(QInfiniteScroll): resume polling when a scroll lock releases with the page at the top -> a window-target QInfiniteScroll that mounted, was re-keyed or left disable while a Dialog or overlay Drawer held the scroll lock never polled again (#18520)
  • fix(QInfiniteScroll): do not auto-load a window scroll target from inside a fixed-positioned subtree -> content in a Dialog or fullscreen overlay never contributes to the document's scroll extent, so every done() triggered the next load forever (and reverse mode jumped the page behind the overlay to the bottom on mount). Such a placement now warns once, points at the scroll-target prop and revives itself if the fixed positioning goes away (#18520)
  • fix(QSelect): render fall-through attributes only on the focus target -> attributes like QTable's rows-per-page aria-label matched two elements and broke strict single-element queries (Playwright getByLabel, Testing Library getBy*); the wrapper copy was invalid ARIA as well (#18519)
  • fix(QSelect): always render the hidden form element, like QInput does -> a QSelect with name/for set but a null or empty model rendered no element at all, so querySelector('[name=x]') could not find it. Form submission and validation are unaffected (#17951)
  • fix(QEditor): clicking the placeholder focuses the field on Chrome -> the placeholder rule now reads the aria-placeholder the component already renders, and the invalid placeholder attribute is no longer emitted (#18511)
  • fix(QDrawer): hide the opposite drawer again when showing one in mobile behavior -> both drawers could end up on screen at once, stacking two backdrops
  • fix(QDrawer): apply role and aria-* attributes to the aside element -> they landed on the inner scrolling div, so naming or re-typing the landmark through QDrawer was impossible (#18059)
  • fix(QField): hide shadow-text on blur while the field has an error -> an invalid field kept showing the shadow text after blur, overlapped with the label (#17155)
  • fix(QInput): let the textarea line-height follow the font-size -> .q-textarea pinned its rows to 18px, so a bigger font gave cramped, overlapping lines that apps had to override with !important. The default layout is unchanged (#16772)
  • fix(QItem): let overline/caption labels, header labels and side sections follow the item color -> an active (.q-router-link--active) or custom-colored item kept gray secondary text. Derived from currentColor via color-mix() at the same emphasis levels, with the legacy values kept as fallbacks (#18300)
  • fix(QExpansionItem): keep the header icon/toggle colors when using switch-toggle-side (#18008)

Other

  • docs(QDate): the events and options array forms (and the String handed to their function forms) are always compared as YYYY/MM/DD -- the mask prop never applies to them. Documented on the API instead of changing it; the function form remains the customization point (#16735)
  • docs(QDrawer): behavior, breakpoint, show-if-above, persistent and no-mini-animation were documented by example only. Adds a "Desktop and mobile behavior" section and corrects show-if-above, which was described as initial-render-only when it actually re-shows the drawer every time the layout goes back above the breakpoint
  • Regression coverage for the capability-based interaction rework: six cross-engine sweep scenarios (tooltip pointer wiring and pen lifecycle, context-menu ownership arbitration, backdrop press, the slider tap/keyboard burst, per-interaction selection suppression) plus a touch-capable Chromium pass in the matrix, and hardened QSlider/QRange suites

Donations

... (truncated)

Commits
  • a4652bf chore(ui): bump version
  • 91d3aa6 chore(app-vite): bump version
  • 8a996db chore(vite-plugin): bump version
  • 598aefb fix(docs): correct CSS vendor prefixes on the website
  • 973f02b feat(ui): correct CSS vendor prefixes across the stylesheet without needing p...
  • 32576a3 fix(docs): DocLink with anchor only
  • 932fe47 feat(app-vite): JSX/TSX support through build.vueJsx #8690
  • 04797c7 fix(ui): accept class/style/key/ref on components in JSX/TSX #8690
  • ceda4f4 feat(Ripple): cancel "early" ripples once the gesture can no longer end in a tap
  • 6869a4c fix(QEditor): on chrome, clicking on placeholder should focus the field; also...
  • Additional commits viewable in compare view

Updates @quasar/app-vite from 3.5.0 to 3.8.0

Release notes

Sourced from @​quasar/app-vite's releases.

@​quasar/app-vite-v3.8.0

Changes

  • feat(app-vite): build -> new vueJsx option for writing components with JSX/TSX (.jsx/.tsx files, or <script lang="jsx|tsx"> blocks in .vue files). Vite compiles JSX itself but assumes the React runtime, so any such file previously died on an unresolved react/jsx-runtime. Setting quasar.config file > build > vueJsx to true points Vite (Oxc) at Vue's JSX runtime instead, in the Vite pipeline and in the browser scripts that Rolldown builds on its own (BEX scripts, the custom PWA service worker), and adds the matching jsx / jsxImportSource to the generated .quasar/tsconfig.json on TypeScript projects. No extra dependency is involved; pass an options object to override the defaults, or "preserve" to hand the transformation to a Vite plugin such as @vitejs/plugin-vue-jsx (which adds the Vue specific JSX sugar: v-model, v-show, v-slots). Quasar components are fully typed in JSX/TSX with Quasar UI v2.26+ (#8690)
  • fix(app-vite): bex -> bridge.send() now resolves with the payload that the responder returned. The bridge awaited the response internally but threw the result away, so every send() resolved with undefined and the only way to get data back from the other end was to send a second message in the opposite direction (#18517)

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

@​quasar/app-vite-v3.7.0

Changes

  • fix(app-vite): boot files & preFetch -> behavior change: urlPath is now the router-facing URL in every mode. It is path + query (+ hash) as Vue Router sees it, without the publicPath prefix and without hash mode's # wrapper, so you can match it against your routes or feed it straight to router.resolve(). Previously its shape depended on where it was read (raw req.url on the server, window.location on the client), which made every string check mode-dependent: the documented auth-guard example (urlPath.startsWith('/login')) infinite-reload-looped in hash mode and under a non-default publicPath. On top of that, the client-side preFetch hook read window.location during beforeResolve, before vue-router commits the navigation, so every hook saw the PREVIOUS page's URL and a redirect() guarded by urlPath looped until vue-router aborted the navigation. If you need the raw browser URL, use window.location (client-side) or ssrContext.req.url (server-side). The publicPath param is also now passed to the two addPreFetchHooks() call sites that were missing it (SPA-family modes, and SSR/SSG client-side rendered pages), where hooks received undefined (#16423)
  • fix(app-vite): capacitor -> dependencies installed in /src-capacitor are now resolvable from /src code in every mode, not only when running in Capacitor mode. Capacitor plugins ship web implementations, so shared code may import them behind an import.meta.env.QUASAR_CAPACITOR_MODE guard (the guarded branch is dead-code eliminated in production builds) -- that import previously failed to resolve in SPA/PWA/SSR builds. The generated TypeScript compilerOptions.paths mirror this whenever Capacitor mode is installed (#17681)
  • fix(app-vite): ssr/ssg -> Map, Set, Date, RegExp, BigInt and undefined values now survive in the serialized store state. The state was serialized as plain JSON, so Map/Set collapsed to empty objects, Date degraded to a string and undefined values were dropped from window.__INITIAL_STATE__; it is now emitted as a live JS expression, making SSR/SSG state behave identically to SPA mode. HTML-unsafe character escaping is unchanged, and no client runtime or hydration change is needed. Measured cost is roughly 3x the serialization time, which in absolute terms is 34us vs 102us for a 12KB state (about 1ms at 120KB); apps needing full control keep ssr.manualStoreSerialization / manualStoreHydration (#11382)

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

@​quasar/app-vite-v3.6.1

Changes

  • fix(app-vite): ext add/remove, mode add -> the flow no longer aborts half-way on pnpm v11+. pnpm v11 turned "Ignored build scripts" into a fatal error (v10 only warned), so any dependency with an unapproved build script anywhere in your project made the CLI's pnpm add/pnpm install exit non-zero even though the packages did install -- quasar ext add then stopped with the App Extension package installed and registered as a devDependency but its install script (prompts, rendered templates, quasar.extensions.json entry) never run, leaving the project in a half-applied state. Same for quasar mode add capacitor/electron and the Vue DevTools / store-provider installs. Nothing is silently built -- pnpm still prints its "Ignored build scripts" notice and still refuses to run those scripts, so you can approve them with pnpm approve-builds whenever you want to
  • fix(app-vite): a failing command now reports what actually went wrong when the CLI's output is piped (test harness, shell script, IDE task runner) instead of replacing the real error with a TypeError: stdin.setRawMode is not a function crash -- which also skipped the failure banner and left the terminal switched to the alternate screen buffer. As a bonus, the alternate-screen escape sequences are no longer written into piped logs

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

@​quasar/app-vite-v3.6.0

New

  • feat(app-vite): capacitor -> new iosBuildScheme config for iOS builds. The CLI used to hardcode the default "App" Xcode scheme and App.xcworkspace, so building failed for anyone who renamed the project in Xcode. It now passes your scheme to xcodebuild and looks for <scheme>.xcworkspace (defaults to App, so nothing changes unless you set it) (#7947)

Fixes

  • fix(app-vite): dev -> Vite's devServer.host: true ("listen on all addresses") is now accepted. Everything downstream expected a string, so address verification, APP_URL and external-IP detection all misbehaved; it is normalized to 0.0.0.0 (#16601)
  • fix(app-vite): build -> the build summary is now displayed when building with --ide. The handoff to the external tool short-circuited the run before the summary was ever printed (#17422)

Other

  • Now bundles @quasar/render-ssr-error v2.2.6 -> the SSR error page can be pinch-zoomed; it previously shipped a user-scalable=no, maximum-scale=1 viewport, failing WCAG 2.1 AA 1.4.4

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

Commits
  • 91d3aa6 chore(app-vite): bump version
  • 8a996db chore(vite-plugin): bump version
  • 598aefb fix(docs): correct CSS vendor prefixes on the website
  • 973f02b feat(ui): correct CSS vendor prefixes across the stylesheet without needing p...
  • 32576a3 fix(docs): DocLink with anchor only
  • 932fe47 feat(app-vite): JSX/TSX support through build.vueJsx #8690
  • 04797c7 fix(ui): accept class/style/key/ref on components in JSX/TSX #8690
  • ceda4f4 feat(Ripple): cancel "early" ripples once the gesture can no longer end in a tap
  • 6869a4c fix(QEditor): on chrome, clicking on placeholder should focus the field; also...
  • 2e01ec6 test(ui): park the real cursor away from (0,0) in browser-mode runs
  • Additional commits viewable in compare view

Updates concurrently from 10.0.4 to 10.0.5

Release notes

Sourced from concurrently's releases.

v10.0.5

What's Changed

New Contributors

Full Changelog: open-cli-tools/concurrently@v10.0.4...v10.0.5

Commits
  • 1b8cbeb 10.0.5
  • 544dba0 docs: make linter happy
  • 667b701 deps: update several dev deps
  • f67c57c vscode: use installed TS version
  • dbb5617 fix: expand wildcards from package.json5 when package.json is missing (#608)
  • 9f90a1a fix: correctly output non-ASCII text on Windows (#604)
  • 94415cc ci: fix publishing to latest/backport
  • See full diff in compare view

Updates eslint from 10.8.1 to 10.9.0

Release notes

Sourced from eslint's releases.

v10.9.0

Features

  • 08de88e feat: handle underflow in no-loss-of-precision (#21218) (Rithish S)
  • 55db479 feat: add checkConditionalExpressions to no-unmodified-loop-condition (#21175) (sethamus)

Bug Fixes

  • 2ba3025 fix: prevent unsafe no-var autofix with hoisted functions (#21213) (sethamus)
  • 8e69622 fix: Prevent no-var autofix when var is shadowed by catch parameter (#21204) (Yang Hyeonjong)
  • 684b579 fix: prefer-template invalid autofix creates a tagged template call (#21207) (김채영)

Documentation

  • 9ef407a docs: use eslint.config.* wherever config file names are listed (#21216) (Marry (Subin Yang))
  • 87f66f4 docs: Update README (GitHub Actions Bot)
  • 585ef37 docs: update architecture documentation (#21112) (Francesco Trotta)
  • f3993b0 docs: Update README (GitHub Actions Bot)
  • ffc87d6 docs: fix broken links in Further Reading sections (#21203) (Minsu)
  • 1a761e1 docs: update moved JSX specification links (#21198) (Imran Mustafa)
  • 4d00ca4 docs: update ESLint peer dependency to ^10.0.0 in shareable configs (#21202) (lumir)
  • 510d1a2 docs: Update README (GitHub Actions Bot)

Chores

  • 899dbf1 chore: update github/codeql-action action to v4.37.7 (#21243) (renovate[bot])
  • 9aa3873 chore: update ecosystem plugins (#21235) (ESLint Bot)
  • dc1e7a8 chore: update ecosystem plugins (#21208) (ESLint Bot)
  • f878d21 ci: bump pnpm/action-setup from 6.0.9 to 6.0.10 (#21200) (dependabot[bot])
  • 4891e50 ci: bump github/codeql-action from 4.37.4 to 4.37.6 (#21199) (dependabot[bot])
Commits

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 9bd8d46 chore: release v4.1.11 (#10995)
  • 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
  • See full diff in compare view

Updates vue-tsc from 3.3.9 to 3.3.11

Release notes

Sourced from vue-tsc's releases.

v3.3.11

language-core

  • fix: generate full fragment props for type checking (#6155) - Thanks to @​serkodev!

language-service

  • fix: invalidate tag and prop casing detection after template changes (#6172) - Thanks to @​serkodev!
  • refactor: make name casing detection reactive (#6173) - Thanks to @​KazariEX!

component-meta

  • fix: invalidate module resolution caches when deleting files (#6163) - Thanks to @​serkodev!

tsc

  • fix: make extension retry errors serializable across IPC (#6162) - Thanks to @​KazariEX!

vscode

Our Sponsors ❤️

... (truncated)

Changelog

Sourced from vue-tsc's changelog.

3.3.11 (2026-08-21)

language-core

  • fix: generate full fragment props for type checking (#6155) - Thanks to @​serkodev!

language-service

  • fix: invalidate tag and prop casing detection after template changes (#6172) - Thanks to @​serkodev!
  • refactor: make name casing detection reactive (#6173) - Thanks to @​KazariEX!

component-meta

  • fix: invalidate module resolution caches when deleting files (#6163) - Thanks to @​serkodev!

tsc

  • fix: make extension retry errors serializable across IPC (#6162) - Thanks to @​KazariEX!

vscode

@dependabot
Bump the mineures group with 10 updates
96df002 
Bumps the mineures group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [@quasar/extras](https://github.com/quasarframework/quasar) | `2.0.3` | `2.0.4` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.13` | `3.4.14` |
| [fastify](https://github.com/fastify/fastify) | `5.12.0` | `5.12.1` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.16.1` | `11.17.0` |
| [quasar](https://github.com/quasarframework/quasar) | `2.24.0` | `2.26.0` |
| [@quasar/app-vite](https://github.com/quasarframework/quasar) | `3.5.0` | `3.8.0` |
| [concurrently](https://github.com/open-cli-tools/concurrently) | `10.0.4` | `10.0.5` |
| [eslint](https://github.com/eslint/eslint) | `10.8.1` | `10.9.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` |
| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.3.9` | `3.3.11` |


Updates `@quasar/extras` from 2.0.3 to 2.0.4
- [Release notes](https://github.com/quasarframework/quasar/releases)
- [Commits](https://github.com/quasarframework/quasar/compare/@quasar/extras-v2.0.3...@quasar/extras-v2.0.4)

Updates `dompurify` from 3.4.13 to 3.4.14
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.13...3.4.14)

Updates `fastify` from 5.12.0 to 5.12.1
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.12.0...v5.12.1)

Updates `mermaid` from 11.16.1 to 11.17.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.16.1...mermaid@11.17.0)

Updates `quasar` from 2.24.0 to 2.26.0
- [Release notes](https://github.com/quasarframework/quasar/releases)
- [Commits](quasarframework/quasar@quasar-v2.24.0...quasar-v2.26.0)

Updates `@quasar/app-vite` from 3.5.0 to 3.8.0
- [Release notes](https://github.com/quasarframework/quasar/releases)
- [Commits](https://github.com/quasarframework/quasar/compare/@quasar/app-vite-v3.5.0...@quasar/app-vite-v3.8.0)

Updates `concurrently` from 10.0.4 to 10.0.5
- [Release notes](https://github.com/open-cli-tools/concurrently/releases)
- [Commits](open-cli-tools/concurrently@v10.0.4...v10.0.5)

Updates `eslint` from 10.8.1 to 10.9.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.8.1...v10.9.0)

Updates `vitest` from 4.1.10 to 4.1.11
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest)

Updates `vue-tsc` from 3.3.9 to 3.3.11
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.3.11/packages/tsc)

---
updated-dependencies:
- dependency-name: "@quasar/extras"
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mineures
- dependency-name: dompurify
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mineures
- dependency-name: fastify
  dependency-version: 5.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mineures
- dependency-name: mermaid
  dependency-version: 11.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mineures
- dependency-name: quasar
  dependency-version: 2.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mineures
- dependency-name: "@quasar/app-vite"
  dependency-version: 3.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: mineures
- dependency-name: concurrently
  dependency-version: 10.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: mineures
- dependency-name: eslint
  dependency-version: 10.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: mineures
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: mineures
- dependency-name: vue-tsc
  dependency-version: 3.3.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: mineures
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 25, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/mineures-8b765b3a91 branch August 25, 2026 01:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants