Skip to content

build(deps): bump the production-minor-patch group across 1 directory with 11 updates - #697

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/app/production-minor-patch-3539f19d1d
Closed

build(deps): bump the production-minor-patch group across 1 directory with 11 updates#697
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/app/production-minor-patch-3539f19d1d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-minor-patch group with 11 updates in the /app directory:

Package From To
@unhead/vue 3.4.1 3.4.3
bootstrap-icons 1.13.1 1.13.2
bootstrap-vue-next 1.2.1 1.2.2
cytoscape 3.34.3 3.34.4
dompurify 3.4.15 3.4.17
markdown-it 15.0.2 15.0.3
pinia 4.0.3 4.1.0
swagger-ui 5.33.0 5.33.3
swagger-ui-dist 5.33.0 5.33.3
vue 3.5.43 3.5.44
vue-router 5.3.1 5.4.0

Updates @unhead/vue from 3.4.1 to 3.4.3

Release notes

Sourced from @​unhead/vue's releases.

v3.4.3

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v3.4.2

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates bootstrap-icons from 1.13.1 to 1.13.2

Release notes

Sourced from bootstrap-icons's releases.

v1.13.2

What's Changed

Dependencies

New Contributors

Full Changelog: twbs/icons@v1.13.1...v1.13.2

Commits

Updates bootstrap-vue-next from 1.2.1 to 1.2.2

Release notes

Sourced from bootstrap-vue-next's releases.

bootstrapvuenext: v1.2.2

1.2.2 (2026-09-25)

Bug Fixes

  • BTable: remove stale sortAsc/sortDesc/sortDefault slot types (#3349) (8aa3af4)
Changelog

Sourced from bootstrap-vue-next's changelog.

1.2.2 (2026-09-25)

Bug Fixes

  • BTable: remove stale sortAsc/sortDesc/sortDefault slot types (#3349) (8aa3af4)
Commits

Updates cytoscape from 3.34.3 to 3.34.4

Release notes

Sourced from cytoscape's releases.

v3.34.4

Release version v3.34.4

Commits
  • e394aa8 3.34.4
  • 68cbcf4 Build 3.34.4
  • 89e2e47 Docs: Add 3.34.4 to versions.json
  • 1a1a30d Merge pull request #3530 from sergioperezcheco/fix/hierholzer-collection-subg...
  • 62122e8 Merge pull request #3520 from belomaxorka/fix/opaque-export-background
  • d0378eb Revert "Fix semitransparent border around png and jpg exports"
  • ca08466 Merge pull request #3532 from zensharma0512-a11y/fix/png-bg-edges
  • f610fb7 Fix semitransparent border around png and jpg exports
  • 57dc32d Fix Hierholzer traversal of collection subgraphs
  • 4c2e810 Fill the image export background with fillRect()
  • Additional commits viewable in compare view

Updates dompurify from 3.4.15 to 3.4.17

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.17

  • Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @​manus-pi
  • Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @​uttej-badwane
  • Fixed the SMIL attributeName guard in XHTML mode, thanks @​Koukyosyumei
  • Hardened several smaller edge cases (namespaces, literal-text elements, isValidAttribute()), thanks @​artiphishell
  • Added a purify-edge test runner as a compatibility check, thanks @​anzal1
  • Clarified the IN_PLACE documentation in the README about possible risks
  • Updated several dependencies

DOMPurify 3.4.16

  • Fixed a problem with IN_PLACE node removal when working with hooks, thanks @​manus-pi
  • Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @​h-t-m
  • Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @​ssi02014
  • Migrated from rollup to rolldown because performance, thanks @​ssi02014
  • Bumped several dependencies where possible
Commits

Updates markdown-it from 15.0.2 to 15.0.3

Changelog

Sourced from markdown-it's changelog.

[15.0.3] - 2026-10-16

Changed

  • Updated dependencies.

Fixed

  • Enforce the 999 Unicode code point limit for reference definition labels, partially addressing #1213.
  • Require whitespace before multiline reference titles.

Security

  • Fixed quadratic complexity when parsing multiline reference definitions.
  • Fixed quadratic complexity when parsing unclosed inline HTML comments, processing instructions, declarations and CDATA sections.
Commits

Updates pinia from 4.0.3 to 4.1.0

Commits

Updates swagger-ui from 5.33.0 to 5.33.3

Release notes

Sourced from swagger-ui's releases.

v5.33.3

5.33.3 (2026-10-15)

Bug Fixes

v5.33.2

5.33.2 (2026-10-12)

Bug Fixes

  • deps: bump dompurify from 3.4.13 to 3.4.16 (#11076) (3beee55)
  • json-schema-5: move early return after useCallback in models (#11082) (7f26236)

v5.33.1

5.33.1 (2026-10-01)

Bug Fixes

  • handle virtualization with path item references (#11069) (38f0ef0)
Commits
  • 38ca10e chore(release): cut the 5.33.3 release
  • f170383 fix(deps): bump swagger-client to v3.38.3 (#11096)
  • e89a91f chore(release): cut the 5.33.2 release
  • 7f26236 fix(json-schema-5): move early return after useCallback in models (#11082)
  • cfd955e chore(deps): bump postcss-selector-parser from 7.1.5 to 7.1.6 (#11083)
  • 553cf09 chore(deps-dev): bump joi from 17.13.7 to 17.13.8 (#11087)
  • d19e961 chore(deps): bump source-map-js from 1.2.1 to 1.2.2 (#11085)
  • 5672801 chore(deps): bump proxy-addr from 2.0.7 to 2.0.8 (#11086)
  • 2addfaf chore(deps): bump shell-quote from 1.10.0 to 1.12.0 (#11084)
  • 121c488 chore(deps): bump aquasecurity/trivy-action (#11079)
  • Additional commits viewable in compare view

Updates swagger-ui-dist from 5.33.0 to 5.33.3

Release notes

Sourced from swagger-ui-dist's releases.

v5.33.3

5.33.3 (2026-10-15)

Bug Fixes

v5.33.2

5.33.2 (2026-10-12)

Bug Fixes

  • deps: bump dompurify from 3.4.13 to 3.4.16 (#11076) (3beee55)
  • json-schema-5: move early return after useCallback in models (#11082) (7f26236)

v5.33.1

5.33.1 (2026-10-01)

Bug Fixes

  • handle virtualization with path item references (#11069) (38f0ef0)
Commits
  • 38ca10e chore(release): cut the 5.33.3 release
  • f170383 fix(deps): bump swagger-client to v3.38.3 (#11096)
  • e89a91f chore(release): cut the 5.33.2 release
  • 7f26236 fix(json-schema-5): move early return after useCallback in models (#11082)
  • cfd955e chore(deps): bump postcss-selector-parser from 7.1.5 to 7.1.6 (#11083)
  • 553cf09 chore(deps-dev): bump joi from 17.13.7 to 17.13.8 (#11087)
  • d19e961 chore(deps): bump source-map-js from 1.2.1 to 1.2.2 (#11085)
  • 5672801 chore(deps): bump proxy-addr from 2.0.7 to 2.0.8 (#11086)
  • 2addfaf chore(deps): bump shell-quote from 1.10.0 to 1.12.0 (#11084)
  • 121c488 chore(deps): bump aquasecurity/trivy-action (#11079)
  • Additional commits viewable in compare view

Updates vue from 3.5.43 to 3.5.44

Release notes

Sourced from vue's releases.

v3.5.44

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.44 (2026-10-13)

Bug Fixes

  • compat: expose _setupProxy for Vue 2.7 compiled script setup (fix #11164) (#15618) (f08059d)
  • compiler-core: parenthesise v-for key in v-memo cache guard (#15724) (d084b90), closes #15723
  • compiler-dom: correctly stringify 0 and false in v-html (#15571) (9f3b437)
  • compiler-dom: inject transition persisted for v-show in production (#15783) (89cb272)
  • compiler-sfc: error when defineModel prop options reference a destructured prop (#15604) (38012a5), closes #15602
  • custom-element: skip mounting an async custom element removed while its component loads (#15777) (0f8e7b4), closes #15775
  • hydration: observe children of a display: contents root in hydrateOnVisible (#15773) (7f688e8)
  • KeepAlive: unmount pruned current component when its vnode was cloned on mount (#15711) (92798ac), closes #15710
  • reactivity: avoid mutating native array iterators (#15703) (7f9d45d), closes #15643
  • reactivity: do not track deps in watcher callbacks run inside another effect (#15782) (db00fe9), closes #5009
  • reactivity: once watcher should stop when its callback throws (#15755) (ae4bd94)
  • reactivity: preserve shallow collection semantics (#15793) (b600466), closes #15792
  • runtime-core: detect new prop keys when comparing full props (#15634) (702fa61), closes #15632
  • runtime-core: keep async placeholder for block patching and pending component updates (#15554) (05ec25f), closes #15551
  • runtime-core: only flush jobs queued by the root render itself (#15757) (0bea14b), closes #6728
  • runtime-core: render nothing for an invalid v-for range in production (#15742) (ad19e7d)
  • runtime-dom: preserve v-show display for unchanged style strings (#15794) (c0a6d3f)
  • runtime-dom: treat playsinline as a boolean attribute (#15627) (a084e44)
  • server-renderer: propagate async setup errors (#15857) (6930374), closes #15716
  • ssr: honor falsy vnode content overrides (#15769) (c11c5c8)
  • suspense: mount resolved async component with its own namespace (#15640) (2a086a2), closes #15639
  • suspense: skip rendering async components unmounted while pending (4ab865a)
  • teleport: move targetStart and keep children before targetAnchor (#15818) (d3c6e02), closes #15817
  • transition-group: measure nested groups against their moving outer item (#15848) (1936c87), closes #5385 #1531
  • transition: handle comment-wrapped component roots (#15853) (ff35014), closes #6080 #5500
Commits

Updates vue-router from 5.3.1 to 5.4.0

Release notes

Sourced from vue-router's releases.

v5.4.0

   🚨 Breaking Changes

   🚀 Features

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits
  • 596d481 release: vue-router@5.4.0
  • 2970e8e chore: fix back extends
  • 16a62f8 chore(deps): upgrade dependencies (#2828)
  • b810a7e chore: remove unused types
  • a0efbde docs: adapt
  • 2c5fbd6 fix: resolve experimental guard redirects against target on history navigation
  • 6ef3163 refactor: allow undefined on optional param
  • 8e89a60 chore: comment
  • 72ceb99 refactor: absolute position
  • 57dd1d6 refactor: allow guards to return relative location
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the production-minor-patch group across 1 directory…
f67b489 
… with 11 updates

Bumps the production-minor-patch group with 11 updates in the /app directory:

| Package | From | To |
| --- | --- | --- |
| [@unhead/vue](https://github.com/unjs/unhead/tree/HEAD/packages/vue) | `3.4.1` | `3.4.3` |
| [bootstrap-icons](https://github.com/twbs/icons) | `1.13.1` | `1.13.2` |
| [bootstrap-vue-next](https://github.com/bootstrap-vue-next/bootstrap-vue-next/tree/HEAD/packages/bootstrap-vue-next) | `1.2.1` | `1.2.2` |
| [cytoscape](https://github.com/cytoscape/cytoscape.js) | `3.34.3` | `3.34.4` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.15` | `3.4.17` |
| [markdown-it](https://github.com/markdown-it/markdown-it) | `15.0.2` | `15.0.3` |
| [pinia](https://github.com/vuejs/pinia) | `4.0.3` | `4.1.0` |
| [swagger-ui](https://github.com/swagger-api/swagger-ui) | `5.33.0` | `5.33.3` |
| [swagger-ui-dist](https://github.com/swagger-api/swagger-ui) | `5.33.0` | `5.33.3` |
| [vue](https://github.com/vuejs/core) | `3.5.43` | `3.5.44` |
| [vue-router](https://github.com/vuejs/router) | `5.3.1` | `5.4.0` |



Updates `@unhead/vue` from 3.4.1 to 3.4.3
- [Release notes](https://github.com/unjs/unhead/releases)
- [Commits](https://github.com/unjs/unhead/commits/v3.4.3/packages/vue)

Updates `bootstrap-icons` from 1.13.1 to 1.13.2
- [Release notes](https://github.com/twbs/icons/releases)
- [Commits](twbs/icons@v1.13.1...v1.13.2)

Updates `bootstrap-vue-next` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/bootstrap-vue-next/bootstrap-vue-next/releases)
- [Changelog](https://github.com/bootstrap-vue-next/bootstrap-vue-next/blob/main/packages/bootstrap-vue-next/CHANGELOG.md)
- [Commits](https://github.com/bootstrap-vue-next/bootstrap-vue-next/commits/bootstrapvuenext-v1.2.2/packages/bootstrap-vue-next)

Updates `cytoscape` from 3.34.3 to 3.34.4
- [Release notes](https://github.com/cytoscape/cytoscape.js/releases)
- [Commits](cytoscape/cytoscape.js@v3.34.3...v3.34.4)

Updates `dompurify` from 3.4.15 to 3.4.17
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.15...3.4.17)

Updates `markdown-it` from 15.0.2 to 15.0.3
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@15.0.2...15.0.3)

Updates `pinia` from 4.0.3 to 4.1.0
- [Release notes](https://github.com/vuejs/pinia/releases)
- [Commits](vuejs/pinia@v4.0.3...v4.1.0)

Updates `swagger-ui` from 5.33.0 to 5.33.3
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Commits](swagger-api/swagger-ui@v5.33.0...v5.33.3)

Updates `swagger-ui-dist` from 5.33.0 to 5.33.3
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Commits](swagger-api/swagger-ui@v5.33.0...v5.33.3)

Updates `vue` from 3.5.43 to 3.5.44
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.43...v3.5.44)

Updates `vue-router` from 5.3.1 to 5.4.0
- [Release notes](https://github.com/vuejs/router/releases)
- [Commits](vuejs/router@v5.3.1...v5.4.0)

---
updated-dependencies:
- dependency-name: "@unhead/vue"
  dependency-version: 3.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: bootstrap-icons
  dependency-version: 1.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: bootstrap-vue-next
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: cytoscape
  dependency-version: 3.34.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: dompurify
  dependency-version: 3.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: markdown-it
  dependency-version: 15.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: pinia
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: swagger-ui
  dependency-version: 5.33.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: swagger-ui-dist
  dependency-version: 5.33.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: vue
  dependency-version: 3.5.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: vue-router
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github

dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 26, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/app/production-minor-patch-3539f19d1d branch October 26, 2026 16:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants