fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@snyk/protect	1.1306.1 → 1.1306.2
buefy (source)	3.0.8 → 3.0.9
cypress (source)	15.18.1 → 15.19.0
eslint-plugin-vue (source)	10.9.2 → 10.10.0
prettier (source)	3.9.5 → 3.9.6
vue (source)	3.5.39 → 3.5.40
webpack-dev-server	5.2.5 → 5.2.6

---

Release Notes

snyk/snyk (@​snyk/protect)

v1.1306.2

Compare Source

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their
needs. For details please see this documentation

Bug Fixes

• language-server: Improved authentication handling in the Snyk Language Server, which powers Snyk's IDE integrations. (3afb07a)
• deps: Updates dependencies to fix vulnerabilities:
  • SNYK-GOLANG-GOOGLEGOLANGORGGRPCINTERNALXDSRBAC-18172577 (11d1660)

v1.1306.1

Compare Source

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their
needs. For details please see this documentation

Bug Fixes

• deps: Updates dependencies to fix vulnerabilities:
  • CVE-2026-41907 (6775c1e)
  • CVE-2026-13149,
    CVE-2026-59869 (7673263)
  • CVE-2026-59873,
    CVE-2026-39244 (9bf7ce7)

buefy/buefy (buefy)

v3.0.9

Compare Source

Features

• Add new BTree component for rendering hierarchical data with checkbox selection support.

Fixes

• Fix BTabs, BSteps, and BCarousel tab ordering when items are inserted dynamically (e.g. via v-for splice after mount). Tabs now sort by DOM position instead of registration order.
• #​4299 Fix BField hasAddons not detecting multiple slot children when they are rendered via v-for (Vue wraps them in a Fragment VNode).
• Fix BSteps mobile breakpoint to use the SCSS variable instead of a hardcoded pixel value.
• Fix form element iconSize not returning a value for is-medium fields, causing icons to be incorrectly sized.

Chores & Dependency Updates

• Resolve security vulnerabilities in dependencies.
• Bump rimraf to v6 to fix a build crash caused by brace-expansion's missing default export.

cypress-io/cypress (cypress)

v15.19.0

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-19-0

vuejs/eslint-plugin-vue (eslint-plugin-vue)

v10.10.0

Compare Source

prettier/prettier (prettier)

v3.9.6

Compare Source

vuejs/core (vue)

v3.5.40

Compare Source

Bug Fixes

• compiler-core: avoid leaking slot branch keys (#​15051) (20c9d26), closes #​15048
• hydration: pass namespace when patching dynamic props (#​15082) (e0d2723), closes #​15081 #​15050
• reactivity: handle effect removal during scope stop (#​15084) (378f978), closes #​15083
• runtime-core: skip lazy hydration for detached roots (#​15092) (97f3525), closes #​15091
• runtime-core: unwind dangling blocks when slot content throws (#​15071) (ddc132d), closes #​15070
• runtime-dom: respect current select model type (#​15010) (eb89e93), closes #​15009
• server-renderer: handle errors in optimized component renders (#​12601) (474907c), closes #​12575
• server-renderer: remove package dependency cycle (#​15063) (4d35eca)
• shared: prevent SSR comment escaping from creating closing delimiters (#​15045) (bd962bb)
• types: don't constrain component $el type to Element (#​15040) (164460a)

webpack/webpack-dev-server (webpack-dev-server)

v5.2.6

Compare Source

Patch Changes

• fix: allow undefined as the Server constructor options argument again (by @​bjohansebas in #​5695)

  Restores accepting undefined (defaulting it to {}) for the options
  argument, so passing a webpack config's optional devServer field type-checks and works as before.

• Protect the built-in state-changing routes (/webpack-dev-server/invalidate and /webpack-dev-server/open-editor) against cross-site request forgery. Requests are now checked with Sec-Fetch-Site (falling back to an Origin/Host comparison when it is absent), so a cross-site page can no longer trigger a rebuild or open a file in the editor. Same-origin requests, user-initiated navigations, and non-browser clients (e.g. curl) are unaffected. (by @​bjohansebas in #​5698)

• Handle malformed Host and Origin header values gracefully when validating requests. (by @​bjohansebas in #​5699)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: frontend/package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: jonprentice.me@0.1.0
npm error Found: @babel/eslint-parser@7.29.7
npm error node_modules/@babel/eslint-parser
npm error   dev @babel/eslint-parser@"8.0.1" from the root project
npm error
npm error Could not resolve dependency:
npm error dev @babel/eslint-parser@"8.0.1" from the root project
npm error
npm error Conflicting peer dependency: @babel/core@8.0.1
npm error node_modules/@babel/core
npm error   peer @babel/core@"^8.0.0" from @babel/eslint-parser@8.0.1
npm error   node_modules/@babel/eslint-parser
npm error     dev @babel/eslint-parser@"8.0.1" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-07-31T01_42_34_244Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-07-31T01_42_34_244Z-debug-0.log

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric	Results
Duplication	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[cloudflare-workers-and-pages]

Deploying jonprentice-me with    Cloudflare Pages

Latest commit:	8ec9bdd
Status:	⚡️  Build in progress...

View logs