fix(deps): update npm minor/patch (ui)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@iconify-json/lucide	1.2.116 → 1.2.117
@tailwindcss/vite (source)	4.3.2 → 4.3.3
@types/node (source)	25.9.4 → 25.9.5
@vitejs/plugin-vue (source)	6.0.7 → 6.0.8
@vitest/coverage-v8 (source)	4.1.9 → 4.1.10
knip (source)	6.24.0 → 6.27.0
postcss (source)	8.5.16 → 8.5.19
tailwindcss (source)	4.3.2 → 4.3.3
vite (source)	8.1.3 → 8.1.5
vitest (source)	4.1.9 → 4.1.10
vue (source)	3.5.39 → 3.5.40
vue-router (source)	5.1.0 → 5.2.0

---

Release Notes

tailwindlabs/tailwindcss (@​tailwindcss/vite)

v4.3.3

Compare Source

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#​20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#​20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#​20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#​20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#​20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#​20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#​20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#​20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#​20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#​20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#​20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#​20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#​20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#​20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#​20336)

vitejs/vite-plugin-vue (@​vitejs/plugin-vue)

v6.0.8

Features

• plugin-vue: add forced vapor mode option (#​766) (d59c3c0)

Bug Fixes

• deps: update all non-major dependencies (#​781) (d369e5a)

vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.10

Compare Source

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in #​10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in #​10661 (bae52)

    View changes on GitHub

webpro-nl/knip (knip)

v6.27.0: Release 6.27.0

Compare Source

• Add Temporal plugin (98191a0)
• Handle -d alias for react-email dir argument (53d1fec)
• Expand pnpm script references with forwarded arguments (33e9799)
• Treat path-shaped script tokens as file references, extend known global binaries (d9508c2)
• Mark tsdown neverBundle dependencies as referenced (5fd863b)
• Support TanStack Start in tanstack-router plugin (bd63cd8)
• Mark vite ssr.external dependencies as referenced (91de938)
• Expand bun, npm, and yarn script references with forwarded arguments (b5a3176)
• Add Latitude as sponsor (4267675)
• Regenerate plugin list in docs (1d2cdff)
• Support Vue 2 template auto-imports (close #​1881) (2157f39)
• Ignore block-commented stylesheet imports (resolve #​1880, close #​1882) (a627f53)
• Support TypeScript 5.0 narrowing for ssr.external (989292f)
• Resolve local binaries from bun run (5e9a7f0)
• Support Vitest inline project config extensions (f682327)
• Resolve package names from aliased node_modules paths (c273d5f)
• Support Tailwind CSS URL imports (57a4770)
• Resolve unbuilt workspace package exports (close #​1877) (1b0a2c0)
• Skip unresolved imports of gitignored generated files (605c904)
• Attribute imports of aliased packages to the declared dependency (d05e775)
• Flag unresolvable imports of transitive peer deps as unlisted (resolve #​1883) (18f0bff)
• Don't count ambient module declarations in script files as imports (e52aecf)
• Update rolldown snapshot (a63e927)
• Remove obsolete workarounds from ecosystem tests (a521cf7)
• Handle snapshotSerializers in Vitest plugin (resolve #​1884) (b597de9)
• Set the stage (c059c2b)

v6.26.0: Release 6.26.0

Compare Source

• ci: add path filters (#​1871) (4249935) - thanks @​trueberryless!
• Add CodeRabbit as gold sponsor (1da09fd)
• Fix up docs a bit more (39125a7)
• Don't report ambient declaration files as unused (aed361c)
• Register oclif command files as entries (3b4d58c)
• Add electron-vite plugin (d92107e)
• Add esbuild plugin (ef3b601)
• Ignore more globally available binaries (8292981)
• Resolve #-imports to source when node condition is unbuilt (resolve #​1873) (f2713ed)
• Ignore gh as a globally available binary (a6f0772)
• Resolve Vitest benchmark files as entries (5742913)
• Extract shared Vue auto-import machinery into plugins/_vue (7301075)
• Scope compiler extensions per workspace (5e6f82b)
• Resolve auto-imported components in the Vue SFC compiler (009aad8)
• Add plugins for the Vue auto-import ecosystem (f638c83)
• Enable Vue SFC compiler on unplugin-vue and @​vitejs/plugin-vue (9396ab1)
• Recognize vite-plugin-vue-meta-layouts (same layouts convention) (3ceee89)
• Add vite-plugin-pages and unplugin-icons plugins (9bc1754)
• Add vite-plugin-pwa and @​intlify/unplugin-vue-i18n plugins (45dea0a)
• Dog, food. (e1249ad)
• Update query snapshot (a45941d)
• Don't misread Nitro route types as Vue component auto-imports (43aecd5)
• Read oxlint jsPlugins from vite-plus vite.config and .oxlintrc.json (589ffda)
• Add vite-plus plugin for run.tasks and staged scripts (f041c19)
• Support @​vite-pwa/nuxt PWA config in nuxt.config (8fa7b11)
• Add @​vite-pwa/assets-generator plugin (4254f7d)
• Add @​nuxtjs/i18n plugin (dfb9acb)
• Read plugin entries from vite.config options and index.html (d533da8)
• Fix false positives in VitePress, next-mdx and unplugin-vue-i18n plugins (b99702a)
• Respect optional peers in pnpm and Yarn packageExtensions (aab080b)
• Detect babel plugins in the Storybook config (5dea975)
• Add shared AST helpers for imported calls and first property values (c84bb7a)
• Inline trivial resolveFromAST wrappers and normalize orval and sst (620079d)
• Extract inline resolveFromAST implementations to dedicated files (b5231c1)
• Normalize resolveFromAST files to a uniform contract (fc1ba0f)
• chore: migrate to Astro 7 and Sätteri (#​1875) (f256a5b) - thanks @​trueberryless!
• Show contributor count on docs homepage (6b8454a)
• Exclude gitignored package entry points (606e5d0)
• Add Tauri plugin (199180d)
• Add Laravel plugin (1974533)
• Add Quasar plugin (a220729)

v6.25.0: Release 6.25.0

Compare Source

• fix: derive package name from package.json under Yarn nodeLinker: pnpm store (#​1852) (3764605) - thanks @​blowery!
• Pick up types used in module augmentations via path aliases (resolve #​1850) (9cc5a41)
• feat: add support for packageExtensions in yarn and pnpm (#​1847) (61d3164) - thanks @​trueberryless!
• fix(ci): do not run integration on forks (#​1855) (d23c10d) - thanks @​trueberryless!
• chore(ci): improve security through specific permissions (#​1856) (1eb42e6) - thanks @​trueberryless!
• chore(ci): add concurrency blocks (#​1857) (3bf3d11) - thanks @​trueberryless!
• fix(next): resolve src/ entry patterns like Next.js does (#​1859) (6e6a509) - thanks @​dayongkr!
• Fix Bun test defaults (#​1860) (2ac4c04) - thanks @​jakeleventhal!
• Extend agentic guidelines re. plugins (da606eb)
• Support rspack and path aliases in require.context (d231d67)
• Support path aliases in import.meta.glob (resolve #​1821) (fc7bb1e)
• Register MDX compiler in Storybook plugin (6f18138)
• Resolve TypeDoc customCss and customJs files (105687d)
• Resolve inline Babel presets/plugins in Jest transform (38e4a4a)
• Mark graphql-codegen generated outputs as entries (1255369)
• Add Fumadocs plugin (77c2142)
• Support next.config.mts in Next.js plugin (0f27e77)
• Add script command parser built on unbash (195510c)
• Gate Bun test entries on an actual bun test invocation (92903ec)
• Detect Node.js test runner via script command parser (a0bfe7b)
• Extract shared command walker for bash-parser and plugins (1301475)
• Normalize aliased glob patterns to posix for Win (23b4a74)
• Resolve inherited tsconfig paths from the extended config's directory (resolve #​1866) (e3f0e5c)
• Handle var interpolations in shell cmd scripts (resolve #​1867) (9422d06)
• Update query snapshot (5e192e9)
• Add support for Prettier overrides (#​1869) (5dc7f12) - thanks @​remcohaszing!
• Handle Serverless esbuild inject entries (#​1865) (46111ef) - thanks @​jakeleventhal!
• docs: add links to Discord and Contributing in issue templates (#​1868) (5ab3483) - thanks @​trueberryless!
• Add eve (Vercel framework) plugin (#​1864) (20cd970) - thanks @​jakeleventhal!
• Add circular dependencies as opt-in cycles issue type (resolve #​1734) (#​1812) (1b0ed6b)
• chore(ci): remove redundant tag triggers (#​1863) (c61d008) - thanks @​trueberryless!
• Fix up docs a bit (89a2d8d)

postcss/postcss (postcss)

v8.5.19

Compare Source

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

v8.5.18

Compare Source

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

v8.5.17

Compare Source

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

vitejs/vite (vite)

v8.1.5

Compare Source

Please refer to CHANGELOG.md for details.

v8.1.4

Compare Source

Features

• legacy: prefer oxc as minifier (fix #​21973) (#​22468) (ab5dafa)

Bug Fixes

• build: add workaround for building on stackblitz (#​22840) (575c32c)
• build: keep import.meta.url in preload function as-is (#​22839) (f1f90ed)
• deps: update all non-major dependencies (#​22865) (d4295a9)
• deps: update rolldown-related dependencies (#​22866) (7cf07e4)
• html: avoid backtracking in import-only check (#​22848) (b5868c0)
• optimizer: avoid optimizer run for transform request before init (#​22852) (72a5e21)
• ssr: align named export function call stacktrace column with Node (#​22829) (173a1b6)
• strip pure CSS chunk imports when chunkImportMap is enabled (#​22841) (648bd04)

Documentation

• fix incorrect @default for server.cors (#​22859) (70435b2)

Miscellaneous Chores

• deps: update dependency postcss-modules to v9 (#​22867) (a9539d6)

Code Refactoring

• eliminate ineffectiveDynamicImport warn (#​22876) (ea22fb3)

Tests

• avoid warnings (#​22851) (af21ab6)

Build System

• remove the custom onLog function (#​22878) (2c4a217)
• replace deprecated onwarn with onLog (#​22741) (c581b55)

vuejs/core (vue)

v3.5.40

Compare Source

Bug Fixes

• compiler-core: avoid leaking slot branch keys (#​15051) (20c9d26), closes #​15048
• hydration: pass namespace when patching dynamic props (#​15082) (e0d2723), closes #​15081 #​15050
• reactivity: handle effect removal during scope stop (#​15084) (378f978), closes #​15083
• runtime-core: skip lazy hydration for detached roots (#​15092) (97f3525), closes #​15091
• runtime-core: unwind dangling blocks when slot content throws (#​15071) (ddc132d), closes #​15070
• runtime-dom: respect current select model type (#​15010) (eb89e93), closes #​15009
• server-renderer: handle errors in optimized component renders (#​12601) (474907c), closes #​12575
• server-renderer: remove package dependency cycle (#​15063) (4d35eca)
• shared: prevent SSR comment escaping from creating closing delimiters (#​15045) (bd962bb)
• types: don't constrain component $el type to Element (#​15040) (164460a)

vuejs/router (vue-router)

v5.2.0

Compare Source

   🚀 Features

• Add helpful diagnostics  -  by @​posva in #​2737 (628fe)

   🐞 Bug Fixes

• Allow pinia 4  -  by @​posva (16535)
• scroll: Ignore stale async scrollBehavior results  -  by @​baozjj and @​cursoragent in #​2730 (303df)
• unplugin: Reject invalid hex digits in [x+hh] character codes  -  by @​greymoth-jp in #​2744 (4d967)

    View changes on GitHub

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
drydock-website	Ready	Preview, Comment	Jul 19, 2026 2:54pm
drydockdemo-website	Ready	Preview, Comment	Jul 19, 2026 2:54pm

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

📝 Walkthrough

Walkthrough

This PR updates dependency versions in ui/package.json. Runtime dependencies, development and testing tools, and pinned transitive dependency overrides are upgraded. The project version remains 1.5.1.

🚥 Pre-merge checks | ✅ 2

✅ Passed checks (2 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/npm-minor-patch-ui

---

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@ui/package.json`:
- Around line 49-65: The dependency versions in ui/package-lock.json are out of
sync with the updated ui/package.json entries for vitest, `@vitest/coverage-v8`,
`@vitejs/plugin-vue`, and vite, so the lockfile will install older packages in CI.
Regenerate ui/package-lock.json from the updated package manifest and verify the
resolved versions match the package.json bumps, then rerun the Vitest coverage
command to confirm the install and test setup are consistent.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: c9a1b1f8-f8e3-40f0-aa74-4a8888671568

📥 Commits

Reviewing files that changed from the base of the PR and between 1badc49 and e0d82b5.

📒 Files selected for processing (1)

• ui/package.json

[vercel]

Deployment failed with the following error:

Resource is limited - try again in 24 hours (more than 100, code: "api-deployments-free-per-day").

Learn More: https://vercel.com/codeswhat?upgradeToPro=build-rate-limit

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: ui/package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: @vue/server-renderer@3.5.39
npm error Found: vue@3.5.40
npm error node_modules/vue
npm error   vue@"3.5.40" from the root project
npm error   peerOptional vue@"^2.7.0 || ^3.2.25" from @vue-macros/common@3.1.2
npm error   node_modules/@vue-macros/common
npm error   5 more (@vue/test-utils, pinia, vue-i18n, @vitejs/plugin-vue, vue-router)
npm error
npm error Could not resolve dependency:
npm error peer vue@"3.5.39" from @vue/server-renderer@3.5.39
npm error node_modules/@vue/server-renderer
npm error   peerOptional @vue/server-renderer@"3.x" from @vue/test-utils@2.4.11
npm error   node_modules/@vue/test-utils
npm error     dev @vue/test-utils@"2.4.11" from the root project
npm error
npm error Conflicting peer dependency: vue@3.5.39
npm error node_modules/vue
npm error   peer vue@"3.5.39" from @vue/server-renderer@3.5.39
npm error   node_modules/@vue/server-renderer
npm error     peerOptional @vue/server-renderer@"3.x" from @vue/test-utils@2.4.11
npm error     node_modules/@vue/test-utils
npm error       dev @vue/test-utils@"2.4.11" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-07-19T14_49_30_886Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-07-19T14_49_30_886Z-debug-0.log