chore(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@nuxt/eslint-config (source)	^1.16.0 → ^1.17.0
@vue/compiler-sfc (source)	^3.5.40 → ^3.5.43
confbox	^0.2.4 → ^0.3.1
devalue	^5.8.2 → ^5.9.4
eslint (source)	^10.8.0 → ^10.11.0
eslint-plugin-perfectionist (source)	^5.10.0 → ^5.12.1
knip (source)	6.29.0 → 6.39.0
playwright-core (source)	^1.62.0 → ^1.63.0
pnpm (source)	10.34.5 → 10.34.6
tinyexec	^1.2.4 → ^1.3.1
undici (source)	^8.9.0 → ^8.11.2
unhead (source)	^3.2.3 → ^3.4.2
unplugin (source)	^3.3.0 → ^3.4.0
unrouting	^0.2.2 → ^0.2.3
vue (source)	^3.5.40 → ^3.5.43
vue-router (source)	^5.2.0 → ^5.3.1
vue-tsc (source)	^3.3.8 → ^3.3.11

---

Release Notes

nuxt/eslint (@​nuxt/eslint-config)

v1.17.0

Compare Source

   🚀 Features

• Update deps  -  by @​antfu (542fc)

   🐞 Bug Fixes

• eslint-config: Disallow comments as extra template root  -  by @​Norbiros in #​695 (c051f)
• eslint-plugin: Handle some bugs with spread operators  -  by @​danielroe in #​706 (fad9c)

    View changes on GitHub

vuejs/core (@​vue/compiler-sfc)

v3.5.43

Compare Source

Bug Fixes

• compiler-sfc: ignore comment delimiters inside strings and url() when parsing css vars (#​15548) (2fde323)
• compiler-sfc: prepend semicolon for await in switch case (#​15498) (9a1df69), closes #​15495
• compiler-sfc: restore await scope when leaving nested blocks (5409708), closes #​15465
• compiler-sfc: reuse parsed parent configs across tsconfig walks (fix #​15478) (#​15480) (d6febaa)
• hydration: run leave hooks for hydration placeholders (#​15431) (5dda192)
• reactivity: preserve readonly wrappers in array copy methods (#​15469) (599f35b)
• runtime-core: unmount v-once children after parent rerenders (#​15435) (d720338)
• shared: handle circular references in looseEqual (#​15499) (718f782), closes #​15496
• shared: preserve comment-like text in style values (#​15471) (b9456cb)
• suspense: don't drop nested suspense patches during hydration (#​15429) (76d42dc)
• suspense: keep the boundary pending while its branch is patched (#​15411) (bfcfe9e), closes #​7506
• suspense: patch a hydrating boundary's pending branch in place (#​15432) (2cde6f7)
• suspense: unmount the DOM an interrupted async component claimed (#​15430) (fb9b45c)
• types: keep optional props when a runtime prop uses a generic PropType (#​15523) (243aabc), closes #​9546

v3.5.42

Compare Source

Bug Fixes

• hydration: handle async component unmount before lazy hydration (#​15252) (6e1814a)
• hydration: handle moving unresolved async fragment (#​15263) (a72036f)
• runtime-core: avoid caching unmounted suspense children (#​15291) (b535917), closes #​15288
• runtime-core: keep .trim result when combined with .number v-model modifier (#​15346) (f8d42e1)
• runtime-core: resolve $el for dev root comment fragment (#​15313) (8654f35), closes #​12680
• runtime-dom: support !important on CSS custom properties in style binding (#​15348) (31da934)
• server-renderer: reject CR in attribute names (#​15266) (a2b40db)
• shared: correctly compare Map and Set values (#​15328) (ef82a26), closes #​15320
• suspense: don't treat the leaving branch as the fallback while its mount is pending (#​15333) (cd19745), closes #​15332
• v-model: re-sync select when model is overridden in change handler (#​15298) (6eaecc1), closes #​10505

v3.5.41

Compare Source

Bug Fixes

• compiler-core: preserve vnode lifecycle in stable v-for (#​11682) (02421cd), closes #​9239 #​12569
• compiler-sfc: handle transformed template AST after cache invalidation (#​15136) (a4440c0), closes #​15126 #​15128
• custom-element: preserve nested async mount order (#​15154) (71f9ff5), closes #​15153
• custom-element: warn when props override native properties (#​12125) (22b53ea), closes #​12124
• runtime-core: avoid re-fetching resource props with unchanged values (#​15105) (a7513a1)
• runtime-core: restore SSR setup state when handling async setup result (#​15114) (b6191cb), closes #​15113
• scheduler: avoid stack overflow when flushing very large post cb arrays (#​15143) (c04a45d), closes #​15142
• slots: handle nullish v-bind slot props (#​15177) (2506700)
• ssr: normalize hidden states during hydration (#​13125) (4e467d7)
• transition: support transition to teleport component child (#​11959) (77061fe), closes #​11910
• types: preserve defineModel inference with factory defaults (#​15097) (0516c43), closes #​15096
• v-model: preserve text input before hydration (#​14411) (2468464), closes #​14403

sveltejs/devalue (devalue)

v5.9.4

Compare Source

Patch Changes

• 067b125: perf: annotate module-level Object.freeze calls as pure so unused operation tables tree-shake

v5.9.3

Compare Source

Patch Changes

• 6861dbb: fix: avoid scanning sparse array holes in uneval traversal and shared-array population
• 9ec5130: fix: reject non-string null-prototype object keys in parse and unflatten to prevent bypassing the __proto__ check
• dae8153: fix: prevent unhandled internal rejections in stringifyAsync when serializing multiple promises
• 84f6f67: fix: prevent quadratic uneval output expansion for repeated strings and bigints
• 6861dbb: fix: avoid eager allocation when evaluating sparse arrays emitted by uneval
• 8f8d78e: fix: validate revived backing buffers before constructing typed arrays
• 46dc877: fix: serialize only the visible bytes of Node Buffers in stringify, stringifyAsync and uneval, preventing disclosure of unrelated data from their shared allocation pool

v5.9.2

Compare Source

Patch Changes

• 8b2a456: fix: reject out-of-bounds indices

v5.9.1

Compare Source

Patch Changes

• 39457ce: fix: uneval emits valid JS for graphs with more than 65534 repeated references
• 686e379: fix: emit valid JS for Node Buffer in uneval
• 376b65c: fix: preserve -0 in float typed arrays in uneval

v5.9.0

Compare Source

Minor Changes

• 07d6a38: feat: export filterArrayIndices, the array-index filtering used by the indicesOf stringify operation, so custom operations can reuse it instead of reimplementing it
• 07d6a38: feat: add pluggable operations option to parse/unflatten, allowing customization of how values are constructed while reviving (e.g. cross-realm or foreign-runtime revival)
• 5b53532: feat: add pluggable operations option to stringify/stringifyAsync, allowing customization of how values are introspected during serialization (e.g. side-effect-free or foreign-runtime serialization)

eslint/eslint (eslint)

v10.11.0

Compare Source

v10.10.0

Compare Source

v10.9.1

Compare Source

v10.9.0

Compare Source

v10.8.1

Compare Source

Bug Fixes

• 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#​21173) (dongkyu lee)
• 151ba3f fix: false positives in getter-return and accessor-pairs (#​21163) (Grit)
• 6898df9 fix: ignore meta-property names in id-denylist (#​21166) (Pixel)
• 4d7db66 fix: ignore meta-property names in id-match (#​21167) (Pixel)
• 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#​20935) (kuldeep kumar)

Documentation

• 7d0cbf8 docs: Update README (GitHub Actions Bot)
• 0a05812 docs: add missing backticks to no-duplicate-imports.js (#​21183) (Lee Daeun)
• 678c90b docs: Update README (GitHub Actions Bot)
• 8a10424 docs: Update README (GitHub Actions Bot)
• 69bb948 docs: Update README (GitHub Actions Bot)

Chores

• 0a14800 chore: update github/codeql-action action to v4.37.4 (#​21196) (renovate[bot])
• 05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#​21191) (Lazizbek Ergashev)
• 5611035 test: add error locations info to no-void (#​21185) (Lee Daeun)
• ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#​21176) (dependabot[bot])
• f131c03 chore: improve ecosystem test failure reporting (#​20937) (crimsonjay0)
• 1f6edde chore: update ecosystem plugins (#​21182) (ESLint Bot)
• d3266fb chore: unpin webpack dependency (#​21172) (Francesco Trotta)
• 65a6519 chore: add allowScripts field to package.json (#​21092) (GiHoon Noh)
• 22e5256 ci: add triage:no label to Dependabot PRs (#​21141) (lumir)
• 55c9038 ci: bump actions/labeler from 6 to 7 (#​21159) (dependabot[bot])
• 7280e78 chore: update dependency prettier to v3.9.6 (#​21162) (renovate[bot])
• eddbad6 test: fix failing ecosystem test for eslint-plugin-unicorn (#​21156) (Francesco Trotta)
• 60a178d chore: update ecosystem plugins (#​21150) (ESLint Bot)
• f9f61dc test: add error locations to no-unreachable (#​21151) (JIYEON)
• d086293 test: add error locations to no-undef (#​21147) (JIYEON)
• cc01b67 test: add error locations to no-useless-catch (#​21144) (devoil)
• 688e75e chore: add missing backticks in JSDoc (#​21143) (Bo Hyun Kim)
• 7c1e175 test: add error locations to require-await (#​21145) (Grit)
• 588a26d test: add error locations to no-extra-label (#​21139) (dongkyu lee)
• 059aa89 test: add error locations to no-useless-concat (#​21140) (dongkyu lee)
• 5a452a8 test: add error locations to no-const-assign (#​21138) (dongkyu lee)

azat-io/eslint-plugin-perfectionist (eslint-plugin-perfectionist)

v5.12.1

Compare Source

compare changes

🐞 Bug Fixes

• Make eslint an optional peer dependency
  (41b088e)

❤️ Contributors

• Dom Porada (@​porada)

v5.12.0

Compare Source

compare changes

🚀 Features

• Support oxlint without an eslint installation
  (5488d84)

🐞 Bug Fixes

• Honor eslint-disable directives with a description
  (e3d11cc)

❤️ Contributors

• Dom Porada (@​porada)
• Azat S. (@​azat-io)

v5.11.1

Compare Source

compare changes

🏎 Performance Improvements

• Build a sortable list's fix once instead of once per report
  (784725a)

🐞 Bug Fixes

• sort-modules: Detect decorator metadata dependencies without tsconfig
  (be18b94)
• Add safety semicolon when the next element continues an expression
  (bbb4db2)

❤️ Contributors

• Azat S. (@​azat-io)

v5.11.0

Compare Source

compare changes

🚀 Features

• sort-modules: Support custom module block nodes
  (077f5d4)

🐞 Bug Fixes

• sort-modules: Detect decorator metadata dependencies
  (dbcd0b8)
• sort-objects: Don't ignore callback dependencies by default
  (7fd2e9b)
• Don't fail on tsconfig files without input files
  (0418393)

❤️ Contributors

• Hugo (@​hugop95)
• Azat S. (@​azat-io)

v5.10.1

Compare Source

compare changes

🐞 Bug Fixes

• Fix crash in typescript 7
  (fbbc372)
• Fix complex comments cases not being auto-fixed correctly
  (7a35d8b)
• Respect ignored callback dependencies in nested calls
  (c9a119e)
• Take into account extended tsconfigs
  (93a267e)

❤️ Contributors

• Hugo (@​hugop95)

webpro-nl/knip (knip)

v6.39.0: Release 6.39.0

Compare Source

• Add Railway plugin (#​2026) (6da5576) - thanks @​jonahsnider!
• Update query snapshot (8877d3c)
• Fix excluded tags on entry re-exports (#​2062) (b22e275) - thanks @​devYRPauli!
• Update rolldown snapshot (3a45c80)
• Skip synthetic self-imports in Vue and Nuxt auto-import compilers (#​2067) (d912d80) - thanks @​bytedoe!
• fix(angular): keep other projects' inputs when one has no architect (#​2064) (af3f42e) - thanks @​Cayan!
• fix(vite): resolve nested HTML entry points in multi-page apps (#​1988) (4648aef) - thanks @​DreamLongYT!
• Improve Rstest plugin support (#​2068) (add8799) - thanks @​fi3ework!
• Handle profiles, formatters and require paths in Cucumber plugin (#​2065) (2ad39fc) - thanks @​giaBaoJS!
• fix(playwright): resolve globalSetup/globalTeardown from config dir (#​2076) (7060bb9) - thanks @​alokn!
• fix: read entry export tags under the re-exported names (#​2069) (1698683) - thanks @​devYRPauli!

v6.38.0: Release 6.38.0

Compare Source

• Include co-authors in docs contributor list (0c33410)
• Filter bots and agents from docs contributors (617f70d)
• Update Eve plugin conventions (#​2049) (260dbb9) - thanks @​matchai!
• Add args example to that doc page (50b271b)
• Add Turborepo plugin (#​2055) (e49d3db) - thanks @​changbaebang!
• Support import-x/* settings in ESLint plugin (#​2050) (1a34cf8) - thanks @​bytedoe!
• Resolve file option in Mocha configuration files (#​2051) (9b5c5f6) - thanks @​giaBaoJS!
• Support oxlint extends (#​2054) (a149a98) - thanks @​matthewnitschke-wk!
• Fix import.meta handling in built-in compilers (#​2059) (8b0c850) - thanks @​vdavid!
• Fix tag hints for enum and namespace members (#​2061) (8a8805e) - thanks @​devYRPauli!
• Flag unused member tags in tagged enums and namespaces (584e53f)
• feat: resolve MDX content mapper remarkPlugins (#​2060) (34dbccf) - thanks @​gioboa!
• Refactor and separate concerns w/ new typescript-content-mapper plugin (11e9450)
• Resolve mdx content mapper providerImportSource (7b58251)
• Fix config → entry in plop plugin (25a380c)

v6.37.0: Release 6.37.0

Compare Source

• fix(graphql-codegen): mark near-operation-file outputs as entries, not the documents directory (#​2048) (06a68fc) - thanks @​RobHannay!
• fix: enable JSX in the config loader (#​1959) (5b21dc9) - thanks @​addielaruee!
• Match binaries only to their actual dependency providers (c5bdb69)
• Preserve executable references across package manager commands (54af171)
• Correct binary provider metadata in Relay fixtures (e67dfcb)
• Separate shell binary expectations from reporting exemptions (resolve #​2022) (c1d7d75)
• Respect npx no-install flags before the executable (4237010)
• Update dependencies (038ea17)
• Remove npm auth check now that's in release-it (4aaf77c)
• Fix --format name resolution in the ESLint plugin (#​2046) (1269e98) - thanks @​bytedoe!

v6.36.0: Release 6.36.0

Compare Source

• Add @​tailwindcss/webpack as Tailwind plugin enabler (#​2027) (b5ac0cf) - thanks @​igas!
• Fix Next.js Turbopack loader dependencies (23419b4)
• Explain ambiguous star exports in traces (#​2025) (3c2c1a5) - thanks @​gioboa!
• Fix eslintrc parserOptions.parser handling in ESLint plugin (#​2028) (c79463c) - thanks @​bytedoe!
• fix(compilers): require word boundary around import keyword (#​2029) (68bbe51) - thanks @​thanadolps!
• fix: recover from corrupt cache file (#​2034) (30ff756) - thanks @​gioboa!
• fix: fix trailing comma on dependency removal (#​2033) (adfaf4f) - thanks @​gioboa!
• Document built-in compiler scope (a05e155)
• Add babel, khan and oxc to projects and optimize svgs (1c26560)
• Add section to test preview packages & extension (d911c18)
• Fix shared info/exclude handling in linked Git worktrees (#​2037) (c1f18d5) - thanks @​kenfdev!
• Shard Node specs on Windows and enable Bun test parallelism (66e966b)
• Add Varlock plugin support (#​2000) (e4fbf46) - thanks @​Joehoel!
• Apply NODE_OPTIONS inputs to package manager binaries (#​2038) (c8df8a2) - thanks @​giaBaoJS!
• Handle array form of import/resolver setting in ESLint plugin (#​2041) (a80d386) - thanks @​bytedoe!
• fix(node): add valueless Node CLI flags to boolean options (#​2042) (4c67685) - thanks @​shoutoutuoadi325!
• fix(typedoc): accept string form of plugin and theme options (#​2043) (ce387b0) - thanks @​giaBaoJS!
• Add textlint plugin (#​2039) (532dab5) - thanks @​anandghegde!
• fix: Correctly resolve Vitest setupFiles from nested configs (#​2040) (84a4943) - thanks @​CruseCtrl!
• Add n8n to projects (3f756a7)
• Resolve re-export traces to their defining bindings (43b3f9b)
• Show ambiguous, shadowed and converged exports (f1e97b9)
• Document export tracing and editor contention (0188e7d)
• Resolve local extends files in eslintrc configs (#​2044) (62b5bf5) - thanks @​bytedoe!
• docs: link each page to its own OG image (#​2045) (a85eb4e) - thanks @​bytedoe!
• fix: fix language server bundled knip fallback (#​2035) (882ba3a) - thanks @​gioboa!

v6.35.1: Release 6.35.1

Compare Source

• Exit with code 2 when a plugin config file fails to load (#​1947) (37b2642) - thanks @​WooWan!
• Fix sponsorship income calculations (0d9cf34)
• Update sponsors page (2659063)
• Fix npm alias attribution under Yarn PnP (resolve #​2024) (7be11aa)

v6.35.0: Release 6.35.0

Compare Source

• fix: track pnpm workspace override catalogs (#​1999) (c6497a1) - thanks @​gioboa!
• fix: track spreads under string-literal keys (#​2003) (9ce68ed) - thanks @​gioboa!
• fix: don't flag a tag that suppresses member issues (#​2004) (2e7d498) - thanks @​devYRPauli!
• fix: resolve Nuxt Virtual Component Imports (#​2006) (a21f972) - thanks @​gioboa!
• Update raw transfer problems doc with low RAM machines (#​2014) (3178940) - thanks @​s-h-a-d-o-w!
• fix: recognize pnpm stage as built-in (#​2015) (aaab35a) - thanks @​gioboa!
• fix: support object-form Rstest test environments (#​2010) (6c27aab) - thanks @​gioboa!
• fix: honor explicit entry export analysis (#​2012) (a092e40) - thanks @​gioboa!
• Document that pnpm.overrides is read from the root manifest only (f69a7f6)
• Compile source on demand (resolve #​1906) (3662c95)
• Update dependency bun to v1.4.2 (#​2019) (90b384d) - thanks @​renovate[bot]!
• feat: support configuring preprocessors in knip.json (#​1920) (16d03f7) - thanks @​bytedoe!
• Fix Windows paths in cache persistence and test fixtures (a4c7a93)
• fix: add a fallback to seach for lock file at cwd if its missing at the root level (#​2020) (f66c9f1) - thanks @​JayaKrishnaNamburu!
• fix: ignore raw Vite import globs (#​2017) (75d5628) - thanks @​gioboa!
• Edit docs re. cycles issue type/reporter (resolve #​2021) (f1e690b)
• Update dependencies (e2bd3fc)
• Resolve Vite public script entries (resolve #​2023) (1cc979b)
• Add mise plugin (resolve [#​2001](https://redirect.github.com/webpro-nl/knip/is

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.