Skip to content

chore(deps): bump the npm-dependencies group across 1 directory with 8 updates - #164

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-a6457e8990
Open

chore(deps): bump the npm-dependencies group across 1 directory with 8 updates#164
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-a6457e8990

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 8 updates in the / directory:

Package From To
@types/node 26.6.5 26.6.6
vue-tsc 3.3.13 3.3.14
tsdown 0.23.1 0.23.4
@lucide/vue 1.63.0 1.64.0
@nuxtjs/color-mode 4.0.1 4.1.0
@tanstack/vue-virtual 3.13.49 3.13.50
@tauri-apps/plugin-deep-link 2.6.2 2.6.3
nuxt 4.6.2 4.6.3

Updates @types/node from 26.6.5 to 26.6.6

Commits

Updates vue-tsc from 3.3.13 to 3.3.14

Release notes

Sourced from vue-tsc's releases.

v3.3.14

language-core

  • fix: isolate template virtual code from setup control flow (d31557b)
  • fix: re-assert dot-value bindings in template closures (4524874) (f9c908f) (b65e458)
  • fix: avoid TS2454 from the withDotValue assertion (c774144)
  • fix: use a const type parameter in __VLS_unwrap to keep literal bindings on TS 7.1 (ce6c1de)
  • fix: avoid never slot props for dynamic slot names in generic components (7957e7f)
  • fix: omit emitted events from inherited attrs of generic components (2d94d89)
  • fix: check bindings of generic directive hooks (0cb7d92)
  • fix: wrap the v-model assignment target in parentheses (9bb1dc9)
  • fix: type the $event parameter of inline handlers explicitly (d3b42a1)
  • fix: type unknown components without diagnostic filters (b3909a3)
  • fix: keep leading @ts-nocheck and /// <reference> effective in script setup (c2e2e6f)
  • fix: declare component context vars before slot code (b7c773d)
  • fix: avoid non-null assertion in JS slot codegen (5633525)
  • fix: restore tag navigation for barrel imports (6358d15)
  • fix: map the whole hyphenated directive name in the auto-import access (beb0151)

language-service

  • fix: prevent crash on malformed html.customData configuration (3961653)

typescript-plugin

  • fix: show unwrapped type when hovering setup refs in template (c742c14)

Contributors: @​johnsoncodehk, @​lazerg, @​ValentinYoushkevich, @​so1ve, @​WangKepeople

Changelog

Sourced from vue-tsc's changelog.

3.3.14 (2026-10-30)

language-core

  • fix: isolate template virtual code from setup control flow (d31557b)
  • fix: re-assert dot-value bindings in template closures (4524874) (f9c908f) (b65e458)
  • fix: avoid TS2454 from the withDotValue assertion (c774144)
  • fix: use a const type parameter in __VLS_unwrap to keep literal bindings on TS 7.1 (ce6c1de)
  • fix: avoid never slot props for dynamic slot names in generic components (7957e7f)
  • fix: omit emitted events from inherited attrs of generic components (2d94d89)
  • fix: check bindings of generic directive hooks (0cb7d92)
  • fix: wrap the v-model assignment target in parentheses (9bb1dc9)
  • fix: type the $event parameter of inline handlers explicitly (d3b42a1)
  • fix: type unknown components without diagnostic filters (b3909a3)
  • fix: keep leading @ts-nocheck and /// <reference> effective in script setup (c2e2e6f)
  • fix: declare component context vars before slot code (b7c773d)
  • fix: avoid non-null assertion in JS slot codegen (5633525)
  • fix: restore tag navigation for barrel imports (6358d15)
  • fix: map the whole hyphenated directive name in the auto-import access (beb0151)

language-service

  • fix: prevent crash on malformed html.customData configuration (3961653)

typescript-plugin

  • fix: show unwrapped type when hovering setup refs in template (c742c14)

Contributors: @​johnsoncodehk, @​lazerg, @​ValentinYoushkevich, @​so1ve, @​WangKepeople

Commits
  • df80037 v3.3.14
  • d31557b fix(language-core): isolate template virtual code from setup control flow (#6...
  • b3909a3 fix(language-core): type unknown components without diagnostic filters (fix #...
  • 845975c chore: bump @volar/* to 2.4.30
  • 0cb7d92 fix(language-core): check bindings of generic directive hooks (#6291)
  • See full diff in compare view

Updates tsdown from 0.23.1 to 0.23.4

Release notes

Sourced from tsdown's releases.

v0.23.4

   🚀 Features

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v0.23.3

   🐞 Bug Fixes

    View changes on GitHub

v0.23.2

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 83b6fb5 chore: release v0.23.4
  • 8e22a34 chore: upgrade deps, hoist regex patterns
  • f925e52 perf: use tinyps in hooks (#1112)
  • 17bd0fc fix(config): ignore empty env file paths and scope env deps per watcher
  • 5800398 feat(cjs): warn when platform is ignored for the CJS format (#1111)
  • 5d55836 feat(config): support multiple env files (#1110)
  • 75a78ce fix(css): inline ?inline CSS imported from dependencies (#1109)
  • a853d19 fix(attw): apply profiles to file-based problems (#1108)
  • 53638e8 chore: release v0.23.3
  • 0344c4f fix: downgrade rolldown-plugin-dts to 0.28 to restore TypeScript 7.0 support ...
  • Additional commits viewable in compare view

Updates @lucide/vue from 1.63.0 to 1.64.0

Release notes

Sourced from @​lucide/vue's releases.

Version 1.64.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.63.0...1.64.0

Commits

Updates @nuxtjs/color-mode from 4.0.1 to 4.1.0

Release notes

Sourced from @​nuxtjs/color-mode's releases.

v4.1.0

v4.1.0 is the next minor release.

👉 Changelog

compare changes

🚀 Enhancements

  • support @nuxt/vite-server (#478)
  • support nuxt v5 (#479)
  • allow cookieAttrs to be set and overridden via runtime config (#434)

🔥 Performance

  • defer non-critical client plugin work until after hydration (#490)

🩹 Fixes

  • use useCookie option names for cookieAttrs (#432) (#432, #435)

💅 Refactors

  • migrate from semver to verkit (#473)

📖 Documentation

  • configuration: add disableTransition option (#481)
  • add missing bugs metadata (#428)

🏡 Chore

  • add Amp orb setup script (#491)
  • exempt first-party packages from pnpm minimumReleaseAge (#456)

✅ Tests

  • add browser tests for client plugin (#489)

🤖 CI

  • release with danielroe/uppt (#492)
  • use pnpm/setup and devEngines (#469)
  • add explicit permissions (70a1711)
  • add agent-scan workflow to flag bot-authored PRs (50a7cb0)

🎉 New Contributors

... (truncated)

Commits

Updates @tanstack/vue-virtual from 3.13.49 to 3.13.50

Release notes

Sourced from @​tanstack/vue-virtual's releases.

@​tanstack/vue-virtual@​3.13.50

Patch Changes

Changelog

Sourced from @​tanstack/vue-virtual's changelog.

3.13.50

Patch Changes

Commits

Updates @tauri-apps/plugin-deep-link from 2.6.2 to 2.6.3

Release notes

Sourced from @​tauri-apps/plugin-deep-link's releases.

deep-link-js v2.6.3

[2.6.3]

  • c92bb67d (#3382 by @​Amjad50) The iOS associated domains entitlement is no longer overwritten on build: the plugin now only replaces its applinks: entries and keeps the other entries your app adds, such as webcredentials: for passkeys.

  • 8dc878fe (#3383 by @​mvanhorn) On Linux, register and unregister no longer fail when update-desktop-database is not installed. A warning is logged and the MIME cache update is skipped.

  • 46397767 (#3711 by @​FabianLars) Fixed a compilation error with rust-ini v0.21.3.

  • c92bb67d (#3382 by @​Amjad50) Fixed the iOS CFBundleURLTypes generation: every configured custom URL scheme is now registered, including schemes listed next to https/http in the same mobile entry, and web link entries no longer produce an empty URL type.

    The generated iOS CFBundleURLName is now $(PRODUCT_BUNDLE_IDENTIFIER).{scheme}.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-deep-link@2.6.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 6.5kB README.md
npm notice 4.7kB dist-js/index.cjs
npm notice 4.0kB dist-js/index.d.ts
npm notice 4.6kB dist-js/index.js
npm notice 801B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-deep-link
npm notice version: 2.6.3
npm notice filename: tauri-apps-plugin-deep-link-2.6.3.tgz
npm notice package size: 4.9 kB
npm notice unpacked size: 21.5 kB
npm notice shasum: d7f47990f0247ab6c09636a0a274251ced224e6b
npm notice integrity: sha512-L+fjyGe5RPBtf[...]7VyiecBBdiy/A==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=3529332341
npm notice Your package is being processed and may take a few minutes to become available.
+ @tauri-apps/plugin-deep-link@2.6.3

deep-link v2.6.3

[2.6.3]

... (truncated)

Commits
  • 1281906 publish new versions (#3712)
  • 52fa775 chore(deps): update rust crate rand to 0.10 (#3738)
  • 1331ca4 chore(deps): update rust crate rfd to 0.17 (#3737)
  • 385f60c chore(deps): update rust crate base64 to 0.23 (#3515)
  • 8e04d30 chore(deps): update dependency @​tauri-apps/cli to v2.12.4 (#3717)
  • 34ed7d3 chore(deps): update dependency @​rollup/plugin-terser to v1.0.2 (#3733)
  • c75459d chore(deps): update dependency rollup to v4.64.12 (#3715)
  • df59420 chore(deps): update webpki-roots crates (lockfile-only) (#3723)
  • 11211c3 fix(window-state): stop macOS overlay windows changing size on every restore ...
  • f36ba7b feat(notification): add Android chronometer support (#3282)
  • Additional commits viewable in compare view

Updates nuxt from 4.6.2 to 4.6.3

Release notes

Sourced from nuxt's releases.

v4.6.3

v4.6.3 is the next patch release.

👉 Changelog

compare changes

🚨 Security fixes

🔥 Performance

  • vite: skip compiling plain style blocks in the server build (#36711)
  • nitro,nuxt,rspack,webpack: bundle esm vue + reuse caches (#36710)
  • vite: avoid quadratic nested dir check for fs.allow (#36702)
  • nuxt: server render internal custom links without RouterLink (#36707)
  • nuxt: skip unneeded typed routes generation (#36645)

🩹 Fixes

  • nitro: don't share prerender hints with self-fetched requests (#36705)
  • nuxt: defer app scope cleanup on external navigation (#36713)
  • nuxt: prevent useCookie CookieStore sync from rewriting with refresh (#36673)
  • nuxt: only return redirects from navigateTo while middleware runs (#36650)
  • nuxt: remove purged entries from _asyncData (#36709)
  • vite: skip quoted import.meta keys + limit replace to client dev (#36703)
  • nuxt: hide RouteLocationRaw from navigateTo's public return type (#36691)
  • nuxt: tree-shake auto-imported #app composables (#36696)
  • nuxt: don't treat constrained route rules as covering dynamic pages (#36701)
  • nuxt: include shared/ in build cache hash (#36704)
  • nuxt: hash keyed function ids + page import names relative to rootDir (#36697)
  • nuxt: encode page paths before matching route rule keys (#36683)
  • nuxt: handle rejected updateCallbackDone of aborted view transition (#36639)
  • ui-templates: keep loading shader proportions on narrow screens (#36654)
  • nuxt: reject case-dependent route rule constraints w/ sensitive: false (#36708)
  • nuxt: don't case-fold regex constraints in route rule keys (#36694)
  • nuxt: normalise page prefix when finding route rule exceptions (#36685)
  • vite: mirror ssr invalidations for created and deleted files (634cba64c)
  • nitro: keep noScripts wildcard patterns single-segment (fa323db7d)
  • deps: update unrouting to v0.3.1 (#36663)
  • nuxt: avoid self-referencing nuxt/schema augmentation (#36633)
  • nuxt: let nightly runtime resolve its own nuxt/* imports (#36632)
  • nuxt: don't warn for vite+ vite.config files (#36628)

... (truncated)

Commits
  • 1b09d0c v4.6.3 (#36651)
  • 4fd54ff test: list NUXT_B4023 as main-only
  • 45463f8 fix(nitro,nuxt): handle dot segments in request paths
  • 57da2ae fix(nuxt): apply redirect route rules to page islands
  • c655a32 fix(nuxt): defer app scope cleanup on external navigation (#36713)
  • e2179ce fix(nuxt): prevent useCookie CookieStore sync from rewriting with refresh (#3...
  • f818b2e fix(nuxt): only return redirects from navigateTo while middleware runs (#36...
  • f5ae355 perf(nitro,nuxt,rspack,webpack): bundle esm vue + reuse caches (#36710)
  • 6761ca2 fix(nuxt): remove purged entries from _asyncData (#36709)
  • 8ef5ede fix(nuxt): hide RouteLocationRaw from navigateTo's public return type (#36691)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the npm-dependencies group across 1 directory with …
93d3acd 
…8 updates

Bumps the npm-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.5` | `26.6.6` |
| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.3.13` | `3.3.14` |
| [tsdown](https://github.com/rolldown/tsdown) | `0.23.1` | `0.23.4` |
| [@lucide/vue](https://github.com/lucide-icons/lucide/tree/HEAD/packages/vue) | `1.63.0` | `1.64.0` |
| [@nuxtjs/color-mode](https://github.com/nuxt-modules/color-mode) | `4.0.1` | `4.1.0` |
| [@tanstack/vue-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/vue-virtual) | `3.13.49` | `3.13.50` |
| [@tauri-apps/plugin-deep-link](https://github.com/tauri-apps/plugins-workspace) | `2.6.2` | `2.6.3` |
| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.6.2` | `4.6.3` |



Updates `@types/node` from 26.6.5 to 26.6.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `vue-tsc` from 3.3.13 to 3.3.14
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.3.14/packages/tsc)

Updates `tsdown` from 0.23.1 to 0.23.4
- [Release notes](https://github.com/rolldown/tsdown/releases)
- [Commits](rolldown/tsdown@v0.23.1...v0.23.4)

Updates `@lucide/vue` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.64.0/packages/vue)

Updates `@nuxtjs/color-mode` from 4.0.1 to 4.1.0
- [Release notes](https://github.com/nuxt-modules/color-mode/releases)
- [Commits](nuxt-modules/color-mode@v4.0.1...v4.1.0)

Updates `@tanstack/vue-virtual` from 3.13.49 to 3.13.50
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/vue-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/vue-virtual@3.13.50/packages/vue-virtual)

Updates `@tauri-apps/plugin-deep-link` from 2.6.2 to 2.6.3
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@deep-link-v2.6.2...deep-link-v2.6.3)

Updates `nuxt` from 4.6.2 to 4.6.3
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v4.6.3/packages/nuxt)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: vue-tsc
  dependency-version: 3.3.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: tsdown
  dependency-version: 0.23.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@lucide/vue"
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@nuxtjs/color-mode"
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@tanstack/vue-virtual"
  dependency-version: 3.13.50
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@tauri-apps/plugin-deep-link"
  dependency-version: 2.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: nuxt
  dependency-version: 4.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the chore maintenance, dependency updates, code cleanup label Nov 2, 2026
@coderabbitai

coderabbitai Bot commented Nov 2, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 8b0fe633-6224-4388-8b75-959a128513c9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

chore maintenance, dependency updates, code cleanup

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants