Skip to content

build(deps): bump the web-minor group across 1 directory with 9 updates - #87

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/web-minor-6eb7b307f4
Open

build(deps): bump the web-minor group across 1 directory with 9 updates#87
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/web-minor-6eb7b307f4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the web-minor group with 9 updates in the /web directory:

Package From To
dompurify 3.4.15 3.4.16
element-plus 2.14.5 2.14.7
vue 3.5.42 3.5.43
@types/node 26.5.0 26.6.4
@vue/test-utils 2.5.0 2.5.1
@vue/tsconfig 0.5.1 0.9.1
typescript-eslint 8.70.0 8.71.0
vite 8.3.0 8.3.2
vitest 5.0.0 5.0.3

Updates dompurify from 3.4.15 to 3.4.16

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.16

  • Fixed a problem with IN_PLACE node removal when working with hooks, thanks @​manus-pi
  • Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @​h-t-m
  • Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @​ssi02014
  • Migrated from rollup to rolldown because performance, thanks @​ssi02014
  • Bumped several dependencies where possible
Commits

Updates element-plus from 2.14.5 to 2.14.7

Release notes

Sourced from element-plus's releases.

2.14.7

2026-09-30

Bug fixes

  • Build restore workspace context for package publishing (#24934 by @​rzzf)
  • Components [time-picker] avoid triggering change twice when clearing (#24841 by @​patienry)
  • Improvement(components): [image-viewer] add grab cursor to image viewer (#24903 by @​ixyzorg)

2.14.6

2026-09-18

Features

Bug fixes

Changelog

Sourced from element-plus's changelog.

2.14.7

2026-09-30

Bug fixes

  • Build restore workspace context for package publishing (#24934 by @​rzzf)
  • Components [time-picker] avoid triggering change twice when clearing (#24841 by @​patienry)
  • Improvement(components): [image-viewer] add grab cursor to image viewer (#24903 by @​ixyzorg)

2.14.6

2026-09-18

Features

Bug fixes

Commits
  • 77d5c32 Merge pull request #24942 from element-plus/dev
  • ff6b12d chore: Update changelog 2.14.7 (#24943)
  • 307b91c fix(components): [time-picker] avoid triggering change twice when clearing ...
  • f78ce0a chore(deps): update all patch devdependencies to ^5.0.2 (#24925)
  • 95b63f3 chore(deps): update dawidd6/action-download-artifact action to v27 (#24938)
  • 06efb57 chore(deps): update pnpm to v12.8.1 (#24937)
  • 1bfc79c chore(deps): update dependency lint-staged to v17.6.0 (#24931)
  • 80af5a1 fix(build): restore workspace context for package publishing (#24934)
  • 92d3e8f chore(deps): update dependency @​types/node to ^24.19.0 (#24930)
  • 7780bc6 chore(deps): update dawidd6/action-download-artifact action to v25 (#24932)
  • Additional commits viewable in compare view

Updates vue from 3.5.42 to 3.5.43

Release notes

Sourced from vue's releases.

v3.5.43

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.43 (2026-09-17)

Bug Fixes

  • compiler-sfc: ignore comment delimiters inside strings and url() when parsing css vars (#15548) (2fde323)
  • compiler-sfc: prepend semicolon for await in switch case (#15498) (9a1df69), closes #15495
  • compiler-sfc: restore await scope when leaving nested blocks (5409708), closes #15465
  • compiler-sfc: reuse parsed parent configs across tsconfig walks (fix #15478) (#15480) (d6febaa)
  • hydration: run leave hooks for hydration placeholders (#15431) (5dda192)
  • reactivity: preserve readonly wrappers in array copy methods (#15469) (599f35b)
  • runtime-core: unmount v-once children after parent rerenders (#15435) (d720338)
  • shared: handle circular references in looseEqual (#15499) (718f782), closes #15496
  • shared: preserve comment-like text in style values (#15471) (b9456cb)
  • suspense: don't drop nested suspense patches during hydration (#15429) (76d42dc)
  • suspense: keep the boundary pending while its branch is patched (#15411) (bfcfe9e), closes #7506
  • suspense: patch a hydrating boundary's pending branch in place (#15432) (2cde6f7)
  • suspense: unmount the DOM an interrupted async component claimed (#15430) (fb9b45c)
  • types: keep optional props when a runtime prop uses a generic PropType (#15523) (243aabc), closes #9546
Commits
  • 5be58b4 release: v3.5.43
  • a0b61aa chore: remove and ignore generated git hooks
  • 2fde323 fix(compiler-sfc): ignore comment delimiters inside strings and url() when pa...
  • 599f35b fix(reactivity): preserve readonly wrappers in array copy methods (#15469)
  • 55a2b45 chore(deps): update pnpm to v12 (#15439)
  • 243aabc fix(types): keep optional props when a runtime prop uses a generic PropType (...
  • 718f782 fix(shared): handle circular references in looseEqual (#15499)
  • 9a1df69 fix(compiler-sfc): prepend semicolon for await in switch case (#15498)
  • d6febaa fix(compiler-sfc): reuse parsed parent configs across tsconfig walks (fix #15...
  • b9456cb fix(shared): preserve comment-like text in style values (#15471)
  • Additional commits viewable in compare view

Updates @types/node from 26.5.0 to 26.6.4

Commits

Updates @vue/test-utils from 2.5.0 to 2.5.1

Release notes

Sourced from @​vue/test-utils's releases.

v2.5.1

What's Changed

New Contributors

Full Changelog: vuejs/test-utils@v2.5.0...v2.5.1

Commits

Updates @vue/tsconfig from 0.5.1 to 0.9.1

Release notes

Sourced from @​vue/tsconfig's releases.

v0.9.1

Notable Changes

  • Align the TypeScript peer dependency requirement with the documentation (>= 5.8, including TypeScript 6)

Full Changelog: vuejs/tsconfig@v0.9.0...v0.9.1

v0.9.0

Noticeable Changes

  • feat: update lib to ES2022 by @​Slessi in vuejs/tsconfig#41
  • chore: move noUncheckedIndexedAccess from base config to the lib config [fa4423b]
    • This is because noUncheckedIndexedAccess may have false positives, making it hard for existing codebases to upgrade.
    • But for new codebases, it’s still recommended to enable this flag from the beginning.

New Contributors

Full Changelog: vuejs/tsconfig@v0.8.1...v0.9.0

v0.8.1

fix: do not turn on exactOptionalPropertyTypes for now [a235c5f]

Full Changelog: vuejs/tsconfig@v0.8.0...v0.8.1

v0.8.0

Breaking Changes

If you experience a significant number of type errors in your projects after upgrading to this version, you might want to consider a gradual approach to adopting the new options:

  • After upgrading to @vue/tsconfig, use supress-ts-errors (npx suppress-ts-errors && npx suppress-ts-errors vue src/**/*.vue) to insert @ts-expect-error comments in your current codebase.
  • This way, the stricter configuration will only apply to any new code you add, allowing you to address the existing errors later when you have more time.

Full Changelog: vuejs/tsconfig@v0.7.0...v0.8.0

v0.7.0

Breaking Changes

  • Set skipLibCheck: false in tsconfig.lib.json [cee76cf]
  • Require Vue.js >= 3.4

Full Changelog: vuejs/tsconfig@v0.6.0...v0.7.0

v0.6.0

Notable Changes

... (truncated)

Commits
  • dc7af0b 0.9.1
  • e73ef3c fix: align typescript peer dependency with documentation
  • 3569685 0.9.0
  • fa4423b chore: move noUncheckedIndexedAccess from base config to the lib config
  • 051d720 docs: update TypeScript version requirement
  • 3db886a feat: update lib to ES2022 (#41)
  • df9d3d4 docs: note the default value of types in TS 6+ has been changed to []
  • 0e39087 docs: note that strict mode is on by default in TS 6
  • ae3b1dc chore: make GitHub render tsconfig.*.json as JSONC
  • 4a223b2 0.8.1
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​vue/tsconfig since your current version.


Updates typescript-eslint from 8.70.0 to 8.71.0

Release notes

Sourced from typescript-eslint's releases.

v8.71.0

8.71.0 (2026-09-28)

🚀 Features

  • eslint-plugin: [no-unsafe-enum-assignment] add rule (#12732)

🩹 Fixes

  • eslint-plugin: [switch-exhaustiveness-check] always sort literal cases in stable order (#12885)
  • eslint-plugin: [unbound-method] respect this: void on class properties (7fce9127d)
  • eslint-plugin: [no-unnecessary-type-assertion] specialize generic assertion report message (#12832)
  • eslint-plugin: [no-misused-promises] handle a return outside of any function (#12912)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.70.1

8.70.1 (2026-09-21)

🩹 Fixes

  • ast-spec: narrow import attribute keys to identifiers and strings (#12879)
  • eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)
  • eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)
  • eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)
  • eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)
  • eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)
  • eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)
  • eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)
  • eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)
  • eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)
  • eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)
  • eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)
  • eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)
  • eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)
  • rule-tester: test the final autofix output instead of the first pass (#12867)
  • scope-manager: merge implicit global definitions (#12809)
  • type-utils: match package specifiers on whole path components (#12838)
  • typescript-estree: resolve symlinked paths when matching files to projects (#12725)
  • typescript-estree: add missing < token opening type arguments (#12821)

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.71.0 (2026-09-28)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.70.1 (2026-09-21)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates vite from 8.3.0 to 8.3.2

Release notes

Sourced from vite's releases.

v8.3.2

Bug Fixes

  • build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)
  • bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)
  • bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)
  • deps: update all non-major dependencies (#23601) (9944fa6)
  • deps: update rolldown-related dependencies (#23602) (88c1741)
  • html: resolve percent-encoded srcset urls (#23609) (53f1ce7)
  • limit size of object and array printing via forwardConsole (#23565) (e64a587)
  • merge build.rolldownOptions.output.minify correctly (#23536) (bba3bb8)
  • optimize-deps: avoid "unsupported" warnings for browser:false mappings (#23590) (5e4b9ca)
  • optimizer: preserve excluded optional peer require fallbacks (#23600) (a2bd6fa)
  • pass queries to renderBuiltUrl (#23586) (744269e)
  • server: handle file watcher errors without crashing (#23503) (6894f5c)
  • server: release previous environments after initialization (#23499) (5a3a010)
  • ssr: encode whitespace in module runner sourceURL (#23513) (bbc8812)
  • worker: align worker urls in client and server when using terser (#23614) (24bd331)

Performance Improvements

  • avoid encoding intermediate source maps (#23461) (89574f6)
  • build: avoid quadratic link scan in the preload helper (#23510) (cf5c028)
  • only register time middleware when debug logging is enabled (#23621) (94d0080)

Documentation

  • fix dead og-image PNG links in vite6/vite7 changelog entries (#23594) (1929b4c)

Miscellaneous Chores

Code Refactoring

Tests

  • bundled-dev: accept a rolldown dev runtime with no helper imports (#23606) (634745d)

v8.3.1

Bug Fixes

  • deps: update all non-major dependencies (#23482) (3c752c8)
  • deps: update all non-major dependencies (#23537) (e8990c4)
  • deps: update rolldown-related dependencies (#23483) (9aecbbf)
  • handle server.ws: false in mergeConfig (#23511) (f68c0d5)
  • merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)
  • optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)

... (truncated)

Changelog

Sourced from vite's changelog.

8.3.2 (2026-10-01)

Bug Fixes

  • build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)
  • bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)
  • bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)
  • deps: update all non-major dependencies (#23601) (9944fa6)
  • deps: update rolldown-related dependencies (#23602) (88c1741)
  • html: resolve percent-encoded srcset urls (#23609) (53f1ce7)
  • limit size of object and array printing via forwardConsole (#23565) (e64a587)
  • merge build.rolldownOptions.output.minify correctly (#23536) (bba3bb8)
  • optimize-deps: avoid "unsupported" warnings for browser:false mappings (#23590) (5e4b9ca)
  • optimizer: preserve excluded optional peer require fallbacks (#23600) (a2bd6fa)
  • pass queries to renderBuiltUrl (#23586) (744269e)
  • server: handle file watcher errors without crashing (#23503) (6894f5c)
  • server: release previous environments after initialization (#23499) (5a3a010)
  • ssr: encode whitespace in module runner sourceURL (#23513) (bbc8812)
  • worker: align worker urls in client and server when using terser (#23614) (24bd331)

Performance Improvements

  • avoid encoding intermediate source maps (#23461) (89574f6)
  • build: avoid quadratic link scan in the preload helper (#23510) (cf5c028)
  • only register time middleware when debug logging is enabled (#23621) (94d0080)

Documentation

  • fix dead og-image PNG links in vite6/vite7 changelog entries (#23594) (1929b4c)

Miscellaneous Chores

Code Refactoring

Tests

  • bundled-dev: accept a rolldown dev runtime with no helper imports (#23606) (634745d)

8.3.1 (2026-09-24)

Bug Fixes

  • deps: update all non-major dependencies (#23482) (3c752c8)
  • deps: update all non-major dependencies (#23537) (e8990c4)
  • deps: update rolldown-related dependencies (#23483) (9aecbbf)
  • handle server.ws: false in mergeConfig (#23511) (f68c0d5)
  • merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)
  • optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)

... (truncated)

Commits
  • 1003321 release: v8.3.2 (#23623)
  • 24bd331 fix(worker): align worker urls in client and server when using terser (#23614)
  • 94d0080 perf: only register time middleware when debug logging is enabled (#23621)
  • 89574f6 perf: avoid encoding intermediate source maps (#23461)
  • 5a3a010 fix(server): release previous environments after initialization (#23499)
  • 1929b4c docs: fix dead og-image PNG links in vite6/vite7 changelog entries (#23594)
  • 6894f5c fix(server): handle file watcher errors without crashing (#23503)
  • cf5c028 perf(build): avoid quadratic link scan in the preload helper (#23510)
  • bba3bb8 fix: merge build.rolldownOptions.output.minify correctly (#23536)
  • 5e4b9ca fix(optimize-deps): avoid "unsupported" warnings for browser:false mappings (...
  • Additional commits viewable in compare view

Updates vitest from 5.0.0 to 5.0.3

Release notes

Sourced from vitest's releases.

v5.0.3

   🐞 Bug Fixes

    View changes on GitHub

v5.0.2

   🐞 Bug Fixes

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 29, 2026
@dependabot dependabot Bot changed the title chore(deps): Bump the web-minor group across 1 directory with 9 updates chore(deps): bump the web-minor group across 1 directory with 9 updates Oct 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/web/web-minor-6eb7b307f4 branch from aa653fc to ee0f5f8 Compare October 6, 2026 06:08
@dependabot
build(deps): bump the web-minor group across 1 directory with 9 updates
81b682f 
Bumps the web-minor group with 9 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.15` | `3.4.16` |
| [element-plus](https://github.com/element-plus/element-plus) | `2.14.5` | `2.14.7` |
| [vue](https://github.com/vuejs/core) | `3.5.42` | `3.5.43` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.0` | `26.6.4` |
| [@vue/test-utils](https://github.com/vuejs/test-utils) | `2.5.0` | `2.5.1` |
| [@vue/tsconfig](https://github.com/vuejs/tsconfig) | `0.5.1` | `0.9.1` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.0` | `8.71.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.0` | `5.0.3` |



Updates `dompurify` from 3.4.15 to 3.4.16
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.15...3.4.16)

Updates `element-plus` from 2.14.5 to 2.14.7
- [Release notes](https://github.com/element-plus/element-plus/releases)
- [Changelog](https://github.com/element-plus/element-plus/blob/dev/CHANGELOG.en-US.md)
- [Commits](element-plus/element-plus@2.14.5...2.14.7)

Updates `vue` from 3.5.42 to 3.5.43
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.42...v3.5.43)

Updates `@types/node` from 26.5.0 to 26.6.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vue/test-utils` from 2.5.0 to 2.5.1
- [Release notes](https://github.com/vuejs/test-utils/releases)
- [Commits](vuejs/test-utils@v2.5.0...v2.5.1)

Updates `@vue/tsconfig` from 0.5.1 to 0.9.1
- [Release notes](https://github.com/vuejs/tsconfig/releases)
- [Commits](vuejs/tsconfig@v0.5.1...v0.9.1)

Updates `typescript-eslint` from 8.70.0 to 8.71.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.0/packages/typescript-eslint)

Updates `vite` from 8.3.0 to 8.3.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.2/packages/vite)

Updates `vitest` from 5.0.0 to 5.0.3
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.6.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: web-minor
- dependency-name: "@vue/test-utils"
  dependency-version: 2.5.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-minor
- dependency-name: "@vue/tsconfig"
  dependency-version: 0.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: web-minor
- dependency-name: dompurify
  dependency-version: 3.4.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-minor
- dependency-name: element-plus
  dependency-version: 2.14.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-minor
- dependency-name: typescript-eslint
  dependency-version: 8.70.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-minor
- dependency-name: vite
  dependency-version: 8.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-minor
- dependency-name: vitest
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-minor
- dependency-name: vue
  dependency-version: 3.5.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the web-minor group across 1 directory with 9 updates build(deps): bump the web-minor group across 1 directory with 9 updates Oct 7, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/web/web-minor-6eb7b307f4 branch from ee0f5f8 to 81b682f Compare October 7, 2026 16:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants