Skip to content

Bump the all-dependencies group across 1 directory with 11 updates - #193

Merged
utarwyn merged 1 commit into
mainfrom
dependabot/npm_and_yarn/all-dependencies-1fa9cc6a6d
Oct 20, 2026
Merged

Bump the all-dependencies group across 1 directory with 11 updates#193
utarwyn merged 1 commit into
mainfrom
dependabot/npm_and_yarn/all-dependencies-1fa9cc6a6d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 11 updates in the / directory:

Package From To
altcha 3.2.3 3.4.0
vue 3.5.43 3.5.44
vue-router 5.3.1 5.4.0
@vitejs/plugin-vue 6.0.9 6.0.10
eslint 10.11.0 10.13.0
eslint-plugin-vue 10.11.0 10.11.1
eslint-plugin-vuejs-accessibility 2.6.0 2.6.2
prettier 3.9.8 3.9.10
sass 1.104.1 1.105.2
typescript-eslint 8.70.0 8.71.2
vue-tsc 3.3.11 3.3.13

Updates altcha from 3.2.3 to 3.4.0

Release notes

Sourced from altcha's releases.

v3.4.0

Changes:

  • Fix: ./i18n/* export types condition points to dist/i18n/*.d.ts instead of the non-existent dist/external/*.d.ts #200
  • Fix: support the form attribute to associate the widget with a <form> it is not nested in #201

v3.3.0

This release fixes the widget's proof-of-work code to match the fixed altcha-lib (v2.6.0). It fixes a key-derivation mismatch that caused valid solutions to be rejected, and a verification bypass in altcha/lib. Upgrading is recommended.

Security

  • verifySolution bypass (altcha/lib). If the challenge had no keySignature, or the verifier passed no hmacKeySignatureSecret, verifySolution re-derived the key from the submitted counter but never checked it against the signed keyPrefix. Any counter, for example 0, together with its derived key verified without doing any work. The derived key must now also match keyPrefix. altcha-lib fixed this in e2a6daf (v2.3.2), but the fix never reached the widget's copy of this code until now.
  • Obfuscation plugin key exposure. obfuscate() used the published keyPrefix as its AES key. If keyPrefixLength was overridden, part or all of that key could be published. It now encrypts with the full derived key and publishes only half of it. With default options the output format is the same, so existing obfuscated strings still decode.

Fixes

  • SHA key derivation. Each round now hashes the full digest from the previous round, and the result is cut to keyLength once at the end. This is what altcha-lib and all server ports do. Before, the widget's solutions were rejected (invalidSolution) for SHA-384 or SHA-512 with cost > 1, and for any SHA-* challenge with keyLength below the digest size and cost > 1. The default (SHA-256, keyLength 32) was not affected.
  • PBKDF2 key length. PBKDF2/* now supports any keyLength. Before, only 16, 24 and 32 worked.
  • Algorithm names. The built-in deriveKey functions reject names they don't support. Before, unknown PBKDF2/* names fell back to SHA-256, and SCRYPT and ARGON2ID ignored the name. Each function now accepts only its own exact names:
    • SHA-256, SHA-384, SHA-512
    • PBKDF2/SHA-256, PBKDF2/SHA-384, PBKDF2/SHA-512
    • SCRYPT
    • ARGON2ID
  • Input validation (altcha/lib):
    • createChallenge checks cost, keyLength, memoryCost, parallelism, counter, counterMode, expiresAt, hmacAlgorithm and the secrets.
    • createChallenge also checks the key prefix. keyPrefix must be a non-empty hex string, and it is lowercased before signing. keyPrefixLength must be a positive integer smaller than the derived key.
    • verifySolution returns invalidSolution for a malformed derivedKey (it must be lowercase hex) or counter (it must be an integer the counter mode can encode), instead of throwing or coercing the value.
    • solveChallenge throws immediately on an invalid keyPrefix instead of running until the timeout.
    • hexToBuffer rejects non-hex characters.
    • Canonical JSON keeps a __proto__ key, so an injected key now breaks the signature.
    • verifyServerSignature:
      • checks payload.algorithm against SHA-1, SHA-256, SHA-384 and SHA-512;
      • requires hmacSecret;
      • returns invalidSignature when the signature is missing;
      • checks expiry against the current time without rounding it down to whole seconds, so the up to 1 second of grace is gone.

Upgrade notes

Challenges that are already in flight with these settings will not verify across the upgrade.

  • Calls that used to work and now throw:
    • verifySolution without hmacSignatureSecret, or with an empty one.
    • createChallenge with hmacSignatureSecret: '' or null.
    • createChallenge with hmacKeySignatureSecret but no hmacSignatureSecret.
    • createChallenge with an empty or non-hex keyPrefix.
    • createChallenge with a keyPrefixLength that is not smaller than the derived key.
    • Any built-in deriveKey with an unsupported algorithm name.
Changelog

Sourced from altcha's changelog.

[3.4.0] - 2026-10-15

  • Fix: ./i18n/* export types condition points to dist/i18n/*.d.ts instead of the non-existent dist/external/*.d.ts #200
  • Fix: support the form attribute to associate the widget with a <form> it is not nested in #201

[3.3.0] - 2026-10-05

  • Fix: SHA key derivation hashes the full digest each round and truncates once, matching altcha-lib and the server ports (SHA-384/512 and any keyLength below the digest size with cost > 1 previously failed server verification)
  • Fix: PBKDF2 supports any keyLength (uses deriveBits instead of an AES-GCM key)
  • Fix: built-in deriveKey functions reject unsupported algorithm names
  • Fix: verifySolution requires the re-derived key to match the signed keyPrefix, rejects malformed derivedKey/counter values, and validates secrets and hmacAlgorithm
  • Fix: createChallenge validates its options (keyPrefixLength below the derived key length, non-empty hex keyPrefix lowercased before signing, positive integer cost/keyLength, valid counter and expiresAt)
  • Fix: solveChallenge fails fast on an invalid keyPrefix
  • Fix: hexToBuffer rejects non-hex input; canonical JSON keeps __proto__ keys
  • Fix: verifyServerSignature validates algorithm and hmacSecret, handles a missing signature, and uses exact expiry
  • Fix: obfuscation plugin encrypts with the full derived key instead of a keyPrefixLength-sized prefix

[3.2.4] - 2026-09-30

  • Fix: unhandled AbortError when audio challenge play() is interrupted by pause() #199
Commits

Updates vue from 3.5.43 to 3.5.44

Release notes

Sourced from vue's releases.

v3.5.44

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.44 (2026-10-13)

Bug Fixes

  • compat: expose _setupProxy for Vue 2.7 compiled script setup (fix #11164) (#15618) (f08059d)
  • compiler-core: parenthesise v-for key in v-memo cache guard (#15724) (d084b90), closes #15723
  • compiler-dom: correctly stringify 0 and false in v-html (#15571) (9f3b437)
  • compiler-dom: inject transition persisted for v-show in production (#15783) (89cb272)
  • compiler-sfc: error when defineModel prop options reference a destructured prop (#15604) (38012a5), closes #15602
  • custom-element: skip mounting an async custom element removed while its component loads (#15777) (0f8e7b4), closes #15775
  • hydration: observe children of a display: contents root in hydrateOnVisible (#15773) (7f688e8)
  • KeepAlive: unmount pruned current component when its vnode was cloned on mount (#15711) (92798ac), closes #15710
  • reactivity: avoid mutating native array iterators (#15703) (7f9d45d), closes #15643
  • reactivity: do not track deps in watcher callbacks run inside another effect (#15782) (db00fe9), closes #5009
  • reactivity: once watcher should stop when its callback throws (#15755) (ae4bd94)
  • reactivity: preserve shallow collection semantics (#15793) (b600466), closes #15792
  • runtime-core: detect new prop keys when comparing full props (#15634) (702fa61), closes #15632
  • runtime-core: keep async placeholder for block patching and pending component updates (#15554) (05ec25f), closes #15551
  • runtime-core: only flush jobs queued by the root render itself (#15757) (0bea14b), closes #6728
  • runtime-core: render nothing for an invalid v-for range in production (#15742) (ad19e7d)
  • runtime-dom: preserve v-show display for unchanged style strings (#15794) (c0a6d3f)
  • runtime-dom: treat playsinline as a boolean attribute (#15627) (a084e44)
  • server-renderer: propagate async setup errors (#15857) (6930374), closes #15716
  • ssr: honor falsy vnode content overrides (#15769) (c11c5c8)
  • suspense: mount resolved async component with its own namespace (#15640) (2a086a2), closes #15639
  • suspense: skip rendering async components unmounted while pending (4ab865a)
  • teleport: move targetStart and keep children before targetAnchor (#15818) (d3c6e02), closes #15817
  • transition-group: measure nested groups against their moving outer item (#15848) (1936c87), closes #5385 #1531
  • transition: handle comment-wrapped component roots (#15853) (ff35014), closes #6080 #5500
Commits

Updates vue-router from 5.3.1 to 5.4.0

Release notes

Sourced from vue-router's releases.

v5.4.0

   🚨 Breaking Changes

   🚀 Features

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits
  • 596d481 release: vue-router@5.4.0
  • 2970e8e chore: fix back extends
  • 16a62f8 chore(deps): upgrade dependencies (#2828)
  • b810a7e chore: remove unused types
  • a0efbde docs: adapt
  • 2c5fbd6 fix: resolve experimental guard redirects against target on history navigation
  • 6ef3163 refactor: allow undefined on optional param
  • 8e89a60 chore: comment
  • 72ceb99 refactor: absolute position
  • 57dd1d6 refactor: allow guards to return relative location
  • Additional commits viewable in compare view

Updates @vitejs/plugin-vue from 6.0.9 to 6.0.10

Release notes

Sourced from @​vitejs/plugin-vue's releases.

plugin-vue@6.0.10

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​vitejs/plugin-vue's changelog.

6.0.10 (2026-10-10)

Bug Fixes

  • plugin-vue: compile transformed normal scripts outside vapor mode (#857) (7b63e3c)
  • plugin-vue: correct AST reuse checks and allow Vue 3.6 RC (ccc06dd)

Documentation

  • plugin-vue: clarify compiler initialization hooks (55d0cab)
Commits
  • a03675e release: plugin-vue@6.0.10
  • 7b63e3c fix(plugin-vue): compile transformed normal scripts outside vapor mode (#857)
  • ccc06dd fix(plugin-vue): correct AST reuse checks and allow Vue 3.6 RC
  • 55d0cab docs(plugin-vue): clarify compiler initialization hooks
  • See full diff in compare view

Updates eslint from 10.11.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
  • 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
  • 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
  • b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
  • 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
  • e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)

v10.12.0

Features

  • 4618052 feat: handle astral letters in new-cap (#21357) (sary)
  • 4ec5168 feat: allow SourceCode#getText() to accept tokens and comments (#21340) (electrohyun)

Bug Fixes

  • bc51eee fix: prefer-arrow-callback false positive in conditional test (#21373) (Daniel Pinto)
  • bbff86c fix: skip lines with multiple comments in max-lines-per-function (#21332) (xbinaryx)
  • efc4d6b fix: astral letters in consistent-return, no-eval, no-invalid-this (#21360) (lumir)
  • 93de066 fix: prefer-exponentiation-operator autofix for async function base (#21322) (Vladimir Babin)
  • 02e34ff fix: add missing space after else in curly autofix (#21355) (Pixel)
  • b14b8bc fix: correct id-length message for long private names (#21348) (Pixel)
  • 69aac01 fix: support TSFunctionType in getFunctionHeadLoc (#21335) (xbinaryx)
  • 686630e fix: no-loss-of-precision false positive with 0.e5 (#21337) (sethamus)

Documentation

  • 67eb586 docs: Update README (GitHub Actions Bot)
  • 5370d7e docs: clarify one-var separateRequires matches any require() call (#21192) (sethamus)
  • 8816c1d docs: Update README (GitHub Actions Bot)
  • 3d2e7ce docs: fix typo in no-unused-expressions documentation (#21346) (bytedoe)

Chores

  • 152067f chore: update ecosystem plugins (#21362) (ESLint Bot)
  • b56d58e chore: update github/codeql-action action to v4.38.2 (#21376) (renovate[bot])
  • bfaea12 perf: cache normalized config globals per languageOptions (#21364) (James Ross)
  • 322209e ci: avoid Nx cache in ecosystem tests and disable failing test (#21369) (Francesco Trotta)
  • d166567 chore: update dependency prettier to v3.9.9 (#21371) (renovate[bot])
  • 29585ce chore: update dependency eslint-plugin-expect-type to ^0.7.0 (#21359) (renovate[bot])
  • 39d79ba chore: update github/codeql-action action to v4.38.1 (#21354) (renovate[bot])

... (truncated)

Commits

Updates eslint-plugin-vue from 10.11.0 to 10.11.1

Release notes

Sourced from eslint-plugin-vue's releases.

v10.11.1

Patch Changes

Changelog

Sourced from eslint-plugin-vue's changelog.

10.11.1

Patch Changes

Commits

Updates eslint-plugin-vuejs-accessibility from 2.6.0 to 2.6.2

Release notes

Sourced from eslint-plugin-vuejs-accessibility's releases.

v2.6.2

What's Changed

New Contributors

Full Changelog: vue-a11y/eslint-plugin-vuejs-accessibility@v2.6.1...v2.6.2

v2.6.1

What's Changed

Full Changelog: vue-a11y/eslint-plugin-vuejs-accessibility@v2.6.0...v2.6.1

Commits
  • b616194 v2.6.2
  • 60b7816 fix(form-control-has-label): recognize title attribute per WCAG H65 (#1486)
  • 6db86fc v2.6.1
  • c5c0fcf chore: limit jest workers to 2 to speed up execution
  • e687a61 perf(no-redundant-roles): check for an explicit role before resolving implici...
  • See full diff in compare view

Updates prettier from 3.9.8 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

  • Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

3.9.9

  • Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

Commits
  • 1172b82 Release 3.9.10
  • d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
  • 953b908 Bump Prettier dependency to 3.9.9
  • ad8a6bf Clean changelog_unreleased
  • cdd17f2 Release 3.9.9
  • dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
  • f9be58f Git blame ignore 3.9.8
  • 88470cb Bump Prettier dependency to 3.9.8
  • 9559cab Clean changelog_unreleased
  • 4fc8ee8 Update dependents count
  • See full diff in compare view

Updates sass from 1.104.1 to 1.105.2

Release notes

Sourced from sass's releases.

Dart Sass 1.105.2

To install Sass 1.105.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Node.js Embedded Host

  • Fix a deadlock when the async compiler fails to start.

See the full changelog for changes in earlier releases.

Dart Sass 1.105.1

To install Sass 1.105.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Improve error messages for @extends across different media queries.

See the full changelog for changes in earlier releases.

Dart Sass 1.105.0

To install Sass 1.105.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Add support for first-class modules. These can be accessed using the new meta.load() and meta.get-module() functions, and may be passed as the $module argument to numerous eisting sass:meta functions.

  • Add the meta.css() mixin, which includes CSS from a first-class module.

JS API

  • Add a SassModule class and a corresponding Value.assertModule() method.

Dart API

  • Add a SassModule class and a corresponding Value.assertModule() method.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.105.2

Node.js Embedded Host

  • Fix a deadlock when the async compiler fails to start.

1.105.1

  • Improve error messages for @extends across different media queries.

1.105.0

  • Add support for first-class modules. These can be accessed using the new meta.load() and meta.get-module() functions, and may be passed as the $module argument to numerous eisting sass:meta functions.

  • Add the meta.css() mixin, which includes CSS from a first-class module.

JS API

  • Add a SassModule class and a corresponding Value.assertModule() method.

Dart API

  • Add a SassModule class and a corresponding Value.assertModule() method.
Commits
  • 00a0d79 Add a changelog entry for sass/embedded-host-node#449 (#2882)
  • 83fdf35 Fix the git pr merge invocation in GitHUb actions (#2881)
  • c9868b4 Try setting dependabot merge authorship with -A (#2873)
  • f10cdde Check out sass/sass with clone-linked-repo whenever possible (#2871)
  • db3c666 Merge pull request #2869 from sass/extend-media-errors
  • 2ac4515 Improve span boundaries for media queries and selectors
  • 706cfbf Fix InterpolationMap._expandInterpolationSpanRight()
  • 792a948 Bump bufbuild/buf-action from 1.5.0 to 1.6.0 in /.github/util/initialize (#2870)
  • 61ab702 Improve errors for @extend across media queries
  • 288d4e2 Auto-merge dependabot PRs as the Sass bot account (#2866)
  • Additional commits viewable in compare view

Updates typescript-eslint from 8.70.0 to 8.71.2

Release notes

Sourced from typescript-eslint's releases.

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

  • eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)
  • eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)
  • eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)
  • eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)
  • eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 20, 2026
@dependabot @utarwyn
Bump the all-dependencies group across 1 directory with 11 updates
265ef4d 
Bumps the all-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [altcha](https://github.com/altcha-org/altcha) | `3.2.3` | `3.4.0` |
| [vue](https://github.com/vuejs/core) | `3.5.43` | `3.5.44` |
| [vue-router](https://github.com/vuejs/router) | `5.3.1` | `5.4.0` |
| [@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue) | `6.0.9` | `6.0.10` |
| [eslint](https://github.com/eslint/eslint) | `10.11.0` | `10.13.0` |
| [eslint-plugin-vue](https://github.com/vuejs/eslint-plugin-vue) | `10.11.0` | `10.11.1` |
| [eslint-plugin-vuejs-accessibility](https://github.com/vue-a11y/eslint-plugin-vuejs-accessibility) | `2.6.0` | `2.6.2` |
| [prettier](https://github.com/prettier/prettier) | `3.9.8` | `3.9.10` |
| [sass](https://github.com/sass/dart-sass) | `1.104.1` | `1.105.2` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.0` | `8.71.2` |

Updates `altcha` from 3.2.3 to 3.4.0
- [Release notes](https://github.com/altcha-org/altcha/releases)
- [Changelog](https://github.com/altcha-org/altcha/blob/main/CHANGELOG.md)
- [Commits](altcha-org/altcha@v3.2.3...v3.4.0)

Updates `vue` from 3.5.43 to 3.5.44
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.43...v3.5.44)

Updates `vue-router` from 5.3.1 to 5.4.0
- [Release notes](https://github.com/vuejs/router/releases)
- [Commits](vuejs/router@v5.3.1...v5.4.0)

Updates `@vitejs/plugin-vue` from 6.0.9 to 6.0.10
- [Release notes](https://github.com/vitejs/vite-plugin-vue/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-vue/blob/main/packages/plugin-vue/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-vue/commits/plugin-vue@6.0.10/packages/plugin-vue)

Updates `eslint` from 10.11.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.11.0...v10.13.0)

Updates `eslint-plugin-vue` from 10.11.0 to 10.11.1
- [Release notes](https://github.com/vuejs/eslint-plugin-vue/releases)
- [Changelog](https://github.com/vuejs/eslint-plugin-vue/blob/master/CHANGELOG.md)
- [Commits](vuejs/eslint-plugin-vue@v10.11.0...v10.11.1)

Updates `eslint-plugin-vuejs-accessibility` from 2.6.0 to 2.6.2
- [Release notes](https://github.com/vue-a11y/eslint-plugin-vuejs-accessibility/releases)
- [Changelog](https://github.com/vue-a11y/eslint-plugin-vuejs-accessibility/blob/main/CHANGELOG.md)
- [Commits](vue-a11y/eslint-plugin-vuejs-accessibility@v2.6.0...v2.6.2)

Updates `prettier` from 3.9.8 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.8...3.9.10)

Updates `sass` from 1.104.1 to 1.105.2
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.104.1...1.105.2)

Updates `typescript-eslint` from 8.70.0 to 8.71.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: altcha
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: vue
  dependency-version: 3.5.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: vue-router
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: "@vitejs/plugin-vue"
  dependency-version: 6.0.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: eslint-plugin-vue
  dependency-version: 10.11.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: eslint-plugin-vuejs-accessibility
  dependency-version: 2.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: sass
  dependency-version: 1.105.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.71.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@utarwyn
utarwyn force-pushed the dependabot/npm_and_yarn/all-dependencies-1fa9cc6a6d branch from 801e17c to 265ef4d Compare October 20, 2026 20:16
@utarwyn

utarwyn commented Oct 20, 2026

Copy link
Copy Markdown
Member

Check vuejs/language-tools#6267 👀
We need to stick to vue-tsc v3.3.11

@utarwyn
utarwyn merged commit 30a4f09 into main Oct 20, 2026
1 check passed
@utarwyn
utarwyn deleted the dependabot/npm_and_yarn/all-dependencies-1fa9cc6a6d branch October 20, 2026 20:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@utarwyn utarwyn utarwyn approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@utarwyn