Skip to content

build(deps): bump the production-minor-patch group across 1 directory with 12 updates - #699

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/app/production-minor-patch-18aa40bc70
Open

build(deps): bump the production-minor-patch group across 1 directory with 12 updates#699
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/app/production-minor-patch-18aa40bc70

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-minor-patch group with 12 updates in the /app directory:

Package From To
@unhead/vue 3.4.1 3.4.3
bootstrap-icons 1.13.1 1.13.2
bootstrap-vue-next 1.2.1 1.2.2
chart.js 4.5.1 4.6.1
cytoscape 3.34.3 3.34.4
dompurify 3.4.15 3.4.17
markdown-it 15.0.2 15.0.3
pinia 4.0.3 4.1.0
swagger-ui 5.33.0 5.34.0
swagger-ui-dist 5.33.0 5.34.0
vue 3.5.43 3.5.44
vue-router 5.3.1 5.4.0

Updates @unhead/vue from 3.4.1 to 3.4.3

Release notes

Sourced from @​unhead/vue's releases.

v3.4.3

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v3.4.2

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates bootstrap-icons from 1.13.1 to 1.13.2

Release notes

Sourced from bootstrap-icons's releases.

v1.13.2

What's Changed

Dependencies

New Contributors

Full Changelog: twbs/icons@v1.13.1...v1.13.2

Commits

Updates bootstrap-vue-next from 1.2.1 to 1.2.2

Release notes

Sourced from bootstrap-vue-next's releases.

bootstrapvuenext: v1.2.2

1.2.2 (2026-09-25)

Bug Fixes

  • BTable: remove stale sortAsc/sortDesc/sortDefault slot types (#3349) (8aa3af4)
Changelog

Sourced from bootstrap-vue-next's changelog.

1.2.2 (2026-09-25)

Bug Fixes

  • BTable: remove stale sortAsc/sortDesc/sortDefault slot types (#3349) (8aa3af4)
Commits

Updates chart.js from 4.5.1 to 4.6.1

Release notes

Sourced from chart.js's releases.

v4.6.1

Essential Links

  • #12355 fix: trusted publishing fix + version 4.6.1 bump

Thanks to @​etimberg

v4.6.0

Essential Links

  • #12354 chore: version bump to 4.6.0 to prepare for release
  • #12328 test: stabilize overlapping polar-area label fixture

Enhancements

  • #12238 Corrected spacing in pie/doughnut/polarArea (Fixes #10059)
  • #12130 Enable scale title stroke (12092)

Bugs Fixed

  • #12283 filler plugin fill extends past line when offset: true + index scale min/max
  • #12155 Fix early exit from clearStacks
  • #12142 Use integer canvas dimensions

Types

  • #12321 fix(types): allow scriptable and indexed grid tick widths

Documentation

  • #12258 Add a note that axis labels can span lines
  • #12134 docs: Add note about flexbox/grid layout responsivity issue
  • #12139 Fix amount of category scales count in docs

Development

  • #12306 Bump actions/setup-node from 6 to 7
  • #12303 Bump actions/checkout from 6 to 7

... (truncated)

Commits
  • 76d8cf8 fix: trusted publishing fix + version 4.6.1 bump (#12355)
  • 4e5443d chore: version bump to 4.6.0 to prepare for release (#12354)
  • 7169e65 fix(types): allow scriptable and indexed grid tick widths (#12321)
  • 714b48c test: stabilize overlapping polar-area labels across browsers (#12328)
  • 6a86e23 Bump actions/setup-node from 6 to 7 (#12306)
  • afb3d64 Bump actions/checkout from 6 to 7 (#12303)
  • 0db976c Bump pnpm/action-setup from 4.2.0 to 6.1.0 (#12307)
  • d2ddcf9 Specify build script for compressed size (#12310)
  • b972574 filler plugin fill extends past line when offset: true + index scale min/max ...
  • 0ad783f Use node 24 for CI (#12309)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for chart.js since your current version.


Updates cytoscape from 3.34.3 to 3.34.4

Release notes

Sourced from cytoscape's releases.

v3.34.4

Release version v3.34.4

Commits
  • e394aa8 3.34.4
  • 68cbcf4 Build 3.34.4
  • 89e2e47 Docs: Add 3.34.4 to versions.json
  • 1a1a30d Merge pull request #3530 from sergioperezcheco/fix/hierholzer-collection-subg...
  • 62122e8 Merge pull request #3520 from belomaxorka/fix/opaque-export-background
  • d0378eb Revert "Fix semitransparent border around png and jpg exports"
  • ca08466 Merge pull request #3532 from zensharma0512-a11y/fix/png-bg-edges
  • f610fb7 Fix semitransparent border around png and jpg exports
  • 57dc32d Fix Hierholzer traversal of collection subgraphs
  • 4c2e810 Fill the image export background with fillRect()
  • Additional commits viewable in compare view

Updates dompurify from 3.4.15 to 3.4.17

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.17

  • Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @​manus-pi
  • Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @​uttej-badwane
  • Fixed the SMIL attributeName guard in XHTML mode, thanks @​Koukyosyumei
  • Hardened several smaller edge cases (namespaces, literal-text elements, isValidAttribute()), thanks @​artiphishell
  • Added a purify-edge test runner as a compatibility check, thanks @​anzal1
  • Clarified the IN_PLACE documentation in the README about possible risks
  • Updated several dependencies

DOMPurify 3.4.16

  • Fixed a problem with IN_PLACE node removal when working with hooks, thanks @​manus-pi
  • Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @​h-t-m
  • Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @​ssi02014
  • Migrated from rollup to rolldown because performance, thanks @​ssi02014
  • Bumped several dependencies where possible
Commits

Updates markdown-it from 15.0.2 to 15.0.3

Changelog

Sourced from markdown-it's changelog.

[15.0.3] - 2026-10-16

Changed

  • Updated dependencies.

Fixed

  • Enforce the 999 Unicode code point limit for reference definition labels, partially addressing #1213.
  • Require whitespace before multiline reference titles.

Security

  • Fixed quadratic complexity when parsing multiline reference definitions.
  • Fixed quadratic complexity when parsing unclosed inline HTML comments, processing instructions, declarations and CDATA sections.
Commits

Updates pinia from 4.0.3 to 4.1.0

Commits

Updates swagger-ui from 5.33.0 to 5.34.0

Release notes

Sourced from swagger-ui's releases.

v5.34.0

5.34.0 (2026-10-19)

Features

v5.33.3

5.33.3 (2026-10-15)

Bug Fixes

v5.33.2

5.33.2 (2026-10-12)

Bug Fixes

  • deps: bump dompurify from 3.4.13 to 3.4.16 (#11076) (3beee55)
  • json-schema-5: move early return after useCallback in models (#11082) (7f26236)

v5.33.1

5.33.1 (2026-10-01)

Bug Fixes

  • handle virtualization with path item references (#11069) (38f0ef0)
Commits
  • a3d333d chore(release): cut the 5.34.0 release
  • fa20f4d feat(filter): support searching operations by path (#11095)
  • 2f91b75 feat(oas32): add support for additionalOperations (#11090)
  • 38ca10e chore(release): cut the 5.33.3 release
  • f170383 fix(deps): bump swagger-client to v3.38.3 (#11096)
  • e89a91f chore(release): cut the 5.33.2 release
  • 7f26236 fix(json-schema-5): move early return after useCallback in models (#11082)
  • cfd955e chore(deps): bump postcss-selector-parser from 7.1.5 to 7.1.6 (#11083)
  • 553cf09 chore(deps-dev): bump joi from 17.13.7 to 17.13.8 (#11087)
  • d19e961 chore(deps): bump source-map-js from 1.2.1 to 1.2.2 (#11085)
  • Additional commits viewable in compare view

Updates swagger-ui-dist from 5.33.0 to 5.34.0

Release notes

Sourced from swagger-ui-dist's releases.

v5.34.0

5.34.0 (2026-10-19)

Features

v5.33.3

5.33.3 (2026-10-15)

Bug Fixes

v5.33.2

5.33.2 (2026-10-12)

Bug Fixes

  • deps: bump dompurify from 3.4.13 to 3.4.16 (#11076) (3beee55)
  • json-schema-5: move early return after useCallback in models (#11082) (7f26236)

v5.33.1

5.33.1 (2026-10-01)

Bug Fixes

  • handle virtualization with path item references (#11069) (38f0ef0)
Commits
  • a3d333d chore(release): cut the 5.34.0 release
  • fa20f4d feat(filter): support searching operations by path (#11095)
  • 2f91b75 feat(oas32): add support for additionalOperations (#11090)
  • 38ca10e chore(release): cut the 5.33.3 release
  • f170383 fix(deps): bump swagger-client to v3.38.3 (#11096)
  • e89a91f chore(release): cut the 5.33.2 release
  • 7f26236 fix(json-schema-5): move early return after useCallback in models (#11082)
  • cfd955e chore(deps): bump postcss-selector-parser from 7.1.5 to 7.1.6 (#11083)
  • 553cf09 chore(deps-dev): bump joi from 17.13.7 to 17.13.8 (#11087)
  • d19e961 chore(deps): bump source-map-js from 1.2.1 to 1.2.2 (#11085)
  • Additional commits viewable in compare view

Updates vue from 3.5.43 to 3.5.44

Release notes

Sourced from vue's releases.

v3.5.44

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.44 (2026-10-13)

Bug Fixes

  • compat: expose _setupProxy for Vue 2.7 compiled script setup (fix #11164) (#15618) (f08059d)
  • compiler-core: parenthesise v-for key in v-memo cache guard (#15724) (d084b90), closes #15723
  • compiler-dom: correctly stringify 0 and false in v-html (#15571) (9f3b437)
  • compiler-dom: inject transition persisted for v-show in production (#15783) (89cb272)
  • compiler-sfc: error when defineModel prop options reference a destructured prop (#15604) (38012a5), closes #15602
  • custom-element: skip mounting an async custom element removed while its component loads (#15777) (0f8e7b4), closes #15775
  • hydration: observe children of a display: contents root in hydrateOnVisible (#15773) (7f688e8)
  • KeepAlive: unmount pruned current component when its vnode was cloned on mount (#15711) (92798ac), closes #15710
  • reactivity: avoid mutating native array iterators (#15703) (7f9d45d), closes #15643
  • reactivity: do not track deps in watcher callbacks run inside another effect (#15782) (db00fe9), closes #5009
  • reactivity: once watcher should stop when its callback throws (#15755) (ae4bd94)
  • reactivity: preserve shallow collection semantics (#15793) (b600466), closes #15792
  • runtime-core: detect new prop keys when comparing full props (#15634) (702fa61), closes #15632
  • runtime-core: keep async placeholder for block patching and pending component updates (#15554) (05ec25f), closes #15551
  • runtime-core: only flush jobs queued by the root render itself (#15757) (0bea14b), closes #6728
  • runtime-core: render nothing for an invalid v-for range in production (#15742) (ad19e7d)
  • runtime-dom: preserve v-show display for unchanged style strings (#15794) (c0a6d3f)
  • runtime-dom: treat playsinline as a boolean attribute (#15627) (a084e44)
  • server-renderer: propagate async setup errors (#15857) (6930374), closes #15716
  • ssr: honor falsy vnode content overrides (#15769) (c11c5c8)
  • suspense: mount resolved async component with its own namespace (#15640) (2a086a2), closes #15639
  • suspense: skip rendering async components unmounted while pending (4ab865a)
  • teleport: move targetStart and keep children before targetAnchor (#15818) (d3c6e02), closes #15817
  • transition-group: measure nested groups against their moving outer item (#15848) (1936c87), closes #5385 #1531
  • transition: handle comment-wrapped component roots (#15853) (ff35014), closes #6080 #5500
Commits

Updates vue-router from 5.3.1 to 5.4.0

Release notes

Sourced from vue-router's releases.

v5.4.0

   🚨 Breaking Changes

   🚀 Features

   🐞 Bug Fixes

   🏎 Performance

  • unplugin: Cache merged route overrides  -  by @​posva in

@dependabot
build(deps): bump the production-minor-patch group across 1 directory…
828ea04 
… with 12 updates

Bumps the production-minor-patch group with 12 updates in the /app directory:

| Package | From | To |
| --- | --- | --- |
| [@unhead/vue](https://github.com/unjs/unhead/tree/HEAD/packages/vue) | `3.4.1` | `3.4.3` |
| [bootstrap-icons](https://github.com/twbs/icons) | `1.13.1` | `1.13.2` |
| [bootstrap-vue-next](https://github.com/bootstrap-vue-next/bootstrap-vue-next/tree/HEAD/packages/bootstrap-vue-next) | `1.2.1` | `1.2.2` |
| [chart.js](https://github.com/chartjs/Chart.js) | `4.5.1` | `4.6.1` |
| [cytoscape](https://github.com/cytoscape/cytoscape.js) | `3.34.3` | `3.34.4` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.15` | `3.4.17` |
| [markdown-it](https://github.com/markdown-it/markdown-it) | `15.0.2` | `15.0.3` |
| [pinia](https://github.com/vuejs/pinia) | `4.0.3` | `4.1.0` |
| [swagger-ui](https://github.com/swagger-api/swagger-ui) | `5.33.0` | `5.34.0` |
| [swagger-ui-dist](https://github.com/swagger-api/swagger-ui) | `5.33.0` | `5.34.0` |
| [vue](https://github.com/vuejs/core) | `3.5.43` | `3.5.44` |
| [vue-router](https://github.com/vuejs/router) | `5.3.1` | `5.4.0` |



Updates `@unhead/vue` from 3.4.1 to 3.4.3
- [Release notes](https://github.com/unjs/unhead/releases)
- [Commits](https://github.com/unjs/unhead/commits/v3.4.3/packages/vue)

Updates `bootstrap-icons` from 1.13.1 to 1.13.2
- [Release notes](https://github.com/twbs/icons/releases)
- [Commits](twbs/icons@v1.13.1...v1.13.2)

Updates `bootstrap-vue-next` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/bootstrap-vue-next/bootstrap-vue-next/releases)
- [Changelog](https://github.com/bootstrap-vue-next/bootstrap-vue-next/blob/main/packages/bootstrap-vue-next/CHANGELOG.md)
- [Commits](https://github.com/bootstrap-vue-next/bootstrap-vue-next/commits/bootstrapvuenext-v1.2.2/packages/bootstrap-vue-next)

Updates `chart.js` from 4.5.1 to 4.6.1
- [Release notes](https://github.com/chartjs/Chart.js/releases)
- [Commits](chartjs/Chart.js@v4.5.1...v4.6.1)

Updates `cytoscape` from 3.34.3 to 3.34.4
- [Release notes](https://github.com/cytoscape/cytoscape.js/releases)
- [Commits](cytoscape/cytoscape.js@v3.34.3...v3.34.4)

Updates `dompurify` from 3.4.15 to 3.4.17
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.15...3.4.17)

Updates `markdown-it` from 15.0.2 to 15.0.3
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@15.0.2...15.0.3)

Updates `pinia` from 4.0.3 to 4.1.0
- [Release notes](https://github.com/vuejs/pinia/releases)
- [Commits](vuejs/pinia@v4.0.3...v4.1.0)

Updates `swagger-ui` from 5.33.0 to 5.34.0
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Commits](swagger-api/swagger-ui@v5.33.0...v5.34.0)

Updates `swagger-ui-dist` from 5.33.0 to 5.34.0
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Commits](swagger-api/swagger-ui@v5.33.0...v5.34.0)

Updates `vue` from 3.5.43 to 3.5.44
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.43...v3.5.44)

Updates `vue-router` from 5.3.1 to 5.4.0
- [Release notes](https://github.com/vuejs/router/releases)
- [Commits](vuejs/router@v5.3.1...v5.4.0)

---
updated-dependencies:
- dependency-name: "@unhead/vue"
  dependency-version: 3.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: bootstrap-icons
  dependency-version: 1.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: bootstrap-vue-next
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: chart.js
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: cytoscape
  dependency-version: 3.34.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: dompurify
  dependency-version: 3.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: markdown-it
  dependency-version: 15.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: pinia
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: swagger-ui
  dependency-version: 5.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: swagger-ui-dist
  dependency-version: 5.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: vue
  dependency-version: 3.5.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: vue-router
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants