build(deps): bump the frontend group across 1 directory with 24 updates by dependabot[bot] · Pull Request #512 · ESA-Blueshell/website

dependabot · 2026-08-10T01:05:46Z

Bumps the frontend group with 24 updates in the /services/frontend directory:

Package	From	To
axios	`1.18.1`	`1.19.0`
libphonenumber-js	`1.13.9`	`1.13.10`
marked	`18.0.4`	`18.0.7`
vue	`3.5.39`	`3.5.40`
vue-router	`5.1.0`	`5.2.0`
vuetify	`4.1.5`	`4.1.7`
@eslint/eslintrc	`3.3.5`	`3.3.6`
@hey-api/openapi-ts	`0.97.3`	`0.99.0`
@playwright/test	`1.60.0`	`1.62.1`
@types/luxon	`3.7.2`	`3.7.3`
@types/node	`26.1.1`	`26.1.2`
@typescript-eslint/eslint-plugin	`8.64.0`	`8.65.0`
@typescript-eslint/parser	`8.64.0`	`8.65.0`
@vitejs/plugin-vue	`6.0.7`	`6.0.8`
@vue/compiler-dom	`3.5.39`	`3.5.40`
@vue/server-renderer	`3.5.39`	`3.5.40`
@vue/typescript-plugin	`3.3.7`	`3.3.9`
eslint	`10.7.0`	`10.8.0`
eslint-plugin-vue	`10.9.2`	`10.10.0`
globals	`17.7.0`	`17.9.0`
sass	`1.101.0`	`1.102.0`
typescript-eslint	`8.64.0`	`8.65.0`
vite	`8.1.5`	`8.2.0`
vue-tsc	`3.3.7`	`3.3.9`

Updates axios from 1.18.1 to 1.19.0

Release notes

Sourced from axios's releases.

v1.19.0 - July 22, 2026

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

🔒 Security Fixes

Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (GHSA-hmw2-7cc7-3qxx). (#11028)

🚀 New Features

Configuration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors, adapters, and serializers. (#11043, #11081)

Header Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (#11051)

HTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (#11067)

🐛 Bug Fixes

Form Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (#11006, #11018)

Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (#11029, #11053)

Cancellation: Propagated already-aborted input signals immediately when composing abort signals. (#11035)

Header Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (#11036, #11037)

URL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (#11024, #11038)

Progress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (#11039, #11040)

Error and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (#11044, #11059)

Content-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (#11061)

Synchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (#11071)

🔧 Maintenance & Chores

Dependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (#11031, #11055, #11056, #11058, #11079, #11080, #11088, #11089, #11090)

Build Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (#11054)

Form Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (#11062)

Developer Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (#11032, #11073)

Documentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (#11041, #11068, #11076, #11078)

Publishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (#11083, #11095)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve Axios:

@afonsojramos (#11028)

@MahinAnowar (#11006)

@yassertawfik4 (#11024)

@AnandSundar (#11029)

@lin-hongkuan (#11035)

@Wali007-lab (#11054)

@magicdawn (#11043)

@andrewkernel (#11053)

@Sagargupta16 (#11059)

@Rpaudel379 (#11078)

... (truncated)

Changelog

Sourced from axios's changelog.

v1.19.0 — July 22, 2026

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

🔒 Security Fixes

Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (GHSA-hmw2-7cc7-3qxx). (#11028)

🚀 New Features

Configuration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors, adapters, and serializers. (#11043, #11081)

Header Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (#11051)

HTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (#11067)

🐛 Bug Fixes

Form Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (#11006, #11018)

Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (#11029, #11053)

Cancellation: Propagated already-aborted input signals immediately when composing abort signals. (#11035)

Header Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (#11036, #11037)

URL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (#11008, #11038)

Progress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (#11039, #11040)

Error and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (#11044, #11059)

Content-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (#11061)

Synchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (#11071)

🔧 Maintenance & Chores

Dependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (#11031, #11055, #11056, #11058, #11079, #11080, #11088, #11089, #11090)

Build Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (#11054)

Form Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (#11062)

Developer Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (#11032, #11073)

Documentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (#11041, #11068, #11076, #11078)

Publishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (#11083, #11095)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve Axios:

@afonsojramos (#11028)

@MahinAnowar (#11006)

@yassertawfik4 (#11024)

@AnandSundar (#11029)

@lin-hongkuan (#11035)

@Wali007-lab (#11054)

@magicdawn (#11043)

@andrewkernel (#11053)

@Sagargupta16 (#11059)

... (truncated)

Commits

311fcc5 chore(release): prepare release 1.19.0 (#11095)
cb4fd74 chore(deps): bump axios from 1.16.1 to 1.18.1 in /docs (#11088)
004c93a chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 in the github-action...
122edde chore(deps-dev): bump the development_dependencies group with 3 updates (#11089)
c44f8d0 ci: use bundled npm for v1 publish (#11083)
878bb29 fix(sandbox): resolve TypeError on constant variable path assignment (#11073)
a092bae fix(core): synchronous interceptors swallow errors and proceed with request (...
3041b8f feat(HttpStatusCode): add missing 520 status code (#11067)
58b16c8 refactor(helpers): extract duplicated setFormDataHeaders into a shared helper...
3077e62 feat(types): Allow the Params property to be typed, instead of any (#11081)
Additional commits viewable in compare view

Updates libphonenumber-js from 1.13.9 to 1.13.10

Changelog

Sourced from libphonenumber-js's changelog.

1.13.10 / 30.7.2026

Updated metadata to version 9.0.36:

Updated alternate formatting data for country calling code(s): 995

Updated phone metadata for region code(s): BD, EH, FO, GE, IL, LI, MA, ML, NO, SJ

Updated short number metadata for region code(s): FO, IT

Updated carrier data for country calling code(s): 47 (en), 61 (en), 212 (en), 256 (en), 298 (en), 423 (en), 972 (en), 995 (en)

Commits

See full diff in compare view

Updates marked from 18.0.4 to 18.0.7

Release notes

Sourced from marked's releases.

v18.0.7

18.0.7 (2026-07-21)

Bug Fixes

Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexes (#4014) (f945fc5), closes #3991

Avoid O(n^2) masked source rebuild in inline tokenizer (#4017) (9154f8f)

keep empty list after blockquote as a sibling block (#4004) (3f144a0)

preserve code spans adjacent to tildes (#4012) (0de7188)

Recognize setext headings whose first line starts with # (#4015) (f056437), closes #1

treat a line of only tabs as a blank line between paragraphs (#4007) (bc2f121)

v18.0.6

18.0.6 (2026-07-09)

Bug Fixes

Avoid O(n^2) backtracking in inline link href regex (#4013) (a009808)

Fix ordered lists after blockquotes (#4003) (33928d0)

keep trailing text on HTML block close line for PI, declarations, and CDATA (#3991) (bbb84c8)

v18.0.5

18.0.5 (2026-06-04)

Bug Fixes

parse empty list item with trailing space (#3984) (b55410f)

Commits

a8971a1 chore(release): 18.0.7 [skip ci]
d899c2e chore(deps): bump actions/setup-node from 6 to 7 (#4025)
7fbf82e chore(deps-dev): bump semantic-release from 25.0.7 to 25.0.8 (#4026)
738edf2 chore(deps-dev): bump brace-expansion from 5.0.2 to 5.0.6 (#4027)
9154f8f fix: Avoid O(n^2) masked source rebuild in inline tokenizer (#4017)
f945fc5 fix: Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexe...
3f144a0 fix: keep empty list after blockquote as a sibling block (#4004)
0de7188 fix: preserve code spans adjacent to tildes (#4012)
f056437 fix: Recognize setext headings whose first line starts with # (#4015)
12bfa94 chore(deps-dev): bump semantic-release from 25.0.5 to 25.0.7 (#4020)
Additional commits viewable in compare view

Updates vue from 3.5.39 to 3.5.40

Release notes

Sourced from vue's releases.

v3.5.40

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.40 (2026-07-16)

Bug Fixes

compiler-core: avoid leaking slot branch keys (#15051) (20c9d26), closes #15048

hydration: pass namespace when patching dynamic props (#15082) (e0d2723), closes #15081 #15050

reactivity: handle effect removal during scope stop (#15084) (378f978), closes #15083

runtime-core: skip lazy hydration for detached roots (#15092) (97f3525), closes #15091

runtime-core: unwind dangling blocks when slot content throws (#15071) (ddc132d), closes #15070

runtime-dom: respect current select model type (#15010) (eb89e93), closes #15009

server-renderer: handle errors in optimized component renders (#12601) (474907c), closes #12575

server-renderer: remove package dependency cycle (#15063) (4d35eca)

shared: prevent SSR comment escaping from creating closing delimiters (#15045) (bd962bb)

types: don't constrain component $el type to Element (#15040) (164460a)

Commits

fa2885d release: v3.5.40
20c9d26 fix(compiler-core): avoid leaking slot branch keys (#15051)
7da6334 Revert "fix(runtime-core): pause tracking when invoking function refs" (#15094)
90aecb1 chore(deps): update all non-major dependencies (#15026)
97f3525 fix(runtime-core): skip lazy hydration for detached roots (#15092)
fe1c0f8 chore(deps): update test (#15025)
e41c45a chore(deps): update dependency conventional-changelog to v8 (#15078)
3eb66a9 chore(deps): update actions/cache action to v6 (#15076)
40178dd chore(deps): update lint (#15075)
7f122b9 chore(deps): update dependency conventional-changelog-angular to v9 (#15079)
Additional commits viewable in compare view

Updates vue-router from 5.1.0 to 5.2.0

Release notes

Sourced from vue-router's releases.

v5.2.0

   🚀 Features

Add helpful diagnostics - by @posva in vuejs/router#2737 (628fe)

   🐞 Bug Fixes

Allow pinia 4 - by @posva (16535)

scroll: Ignore stale async scrollBehavior results - by @baozjj and @cursoragent in vuejs/router#2730 (303df)

unplugin: Reject invalid hex digits in [x+hh] character codes - by @greymoth-jp in vuejs/router#2744 (4d967)

    View changes on GitHub

Commits

6e5f8d2 release: vue-router@5.2.0
1653533 fix: allow pinia 4
f634b2f docs: improve compat
d4319be chore: up ts where possible
b5b5f94 ci: pin image
680e905 ci: update playwright image
385ca6b chore: up lint, babel and others
92ff264 chore: up deps minor and patches
feed382 ci: bump the actions group with 3 updates (#2745)
4d96741 fix(unplugin): reject invalid hex digits in [x+hh] character codes (#2744)
Additional commits viewable in compare view

Updates vuetify from 4.1.5 to 4.1.7

Release notes

Sourced from vuetify's releases.

v4.1.7

🔧 Bug Fixes

elevation: hover-elevation prop should not require elevation (378f593)

VAutocomplete,VCombobox: camelize item props for prepend icon and avatar (8a20623), closes #20989

VProgressLinear,VIconBtn: avoid Vite v8 dropping transition timing (f23af8a), closes #23046

VStepperVerticalItem: unnecessary error color to step content (fce4eaa), closes #23032

VStepperWindow/VTouch: guard against double teardown (#23030) (54a2b6a)

VTextField: respect hide-details="auto" with counter (#22620) (a94efe4), closes #19998

v4.1.6

🔧 Bug Fixes

defaults: keep nested root defaults through teleport reset (#23015) (3ad37e6), closes #23009 #22506 #21814

VDataTableVirtual: avoid scroll glitches with expanded rows (#23014) (bb6d1ef), closes #20457

VDialog: defer auto-focus until the inner field is focusable (8908e7e), closes #18456

VDialog/VField/etc.: correct focus resolution in Shadow DOM (#23027) (27504ff)

VImg: handle image ref deferred by Nuxt page transition (0f72baf), closes #23011

VList: resolve keyboard navigation inside an open Shadow DOM (#23024) (48628c6)

VListItem/VChip/VDatePickerHeader: only attach click when interactive (#23028) (47492b6), closes #22854

VOverlay: unnecessary target attribute for CSS transitions (#22190) (e56352a)

VSelect: release focus on first click outside (ff966d2), closes #22828

VSelect: only focus first item when menu is opened with keyboard (4bb9151), closes #22283

VSelect/VAutocomplete/VCombobox: reliable list with selection (#23029) (745dc9a), closes #22531 #22539 #21404 #20482

VVirtualScroll: trim leading items when appending to bottom (1ac7cb7), closes #20959

VVirtualScroll: recalculate visible items on item resize (#22938) (7bd046e), closes #22937

Commits

053542d chore(release): publish v4.1.7
a94efe4 fix(VTextField): respect hide-details="auto" with counter (#22620)
f23af8a fix(VProgressLinear,VIconBtn): avoid Vite v8 dropping transition timing
8306637 docs: update roadmap, announce v3.13.0 as LTS
378f593 fix(elevation): hover-elevation prop should not require elevation
8a20623 fix(VAutocomplete,VCombobox): camelize item props for prepend icon and avatar
fce4eaa fix(VStepperVerticalItem): unnecessary error color to step content
54a2b6a fix(VStepperWindow/VTouch): guard against double teardown (#23030)
f5d76f8 chore(release): publish v4.1.6
745dc9a fix(VSelect/VAutocomplete/VCombobox): reliable list with selection (#23029)
Additional commits viewable in compare view

Updates @eslint/eslintrc from 3.3.5 to 3.3.6

Release notes

Sourced from @eslint/eslintrc's releases.

eslintrc: v3.3.6

3.3.6 (2026-07-10)

Bug Fixes

update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)

Changelog

Sourced from @eslint/eslintrc's changelog.

3.3.6 (2026-07-10)

Bug Fixes

update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)

Commits

b433a22 chore: release 3.3.6 🚀 (#236)
0c5de74 fix: update js-yaml to 4.3.0 to address security vulnerability (#235)
94837a4 docs: Update README sponsors
dbae1a1 docs: Update README sponsors
19fe72a docs: Update README sponsors
92ebd17 docs: Update README sponsors
3ba4c8c ci: add Node.js 26 to CI (#231)
f8d268a docs: Update README sponsors
6e20867 docs: Update README sponsors
6d722b6 docs: Update README sponsors
Additional commits viewable in compare view

Updates @hey-api/openapi-ts from 0.97.3 to 0.99.0

Changelog

Sourced from @hey-api/openapi-ts's changelog.

0.99.0

Minor Changes

BREAKING plugin: rename .symbols to .imports (#4052) (57fac5e) by @mrlubos

To better represent its functionality, the plugin.symbols property has been renamed to plugin.imports.

BREAKING config: merge duplicate plugin configurations (089ed2e) by @mrlubos

Plugin duplicates behavior

If you specified the same plugin multiple times, only the last instance would be used. We eventually added a warning for this behavior, but that didn't treat the root issue. This release changes that by merging duplicate plugin configurations.

BREAKING plugin(@hey-api/schemas): widen schema type in nameBuilder to unknown (#4076) (98ce35e) by @mrlubos

BREAKING plugin: remove .external() method (#4052) (57fac5e) by @mrlubos

Removed plugin.external() function

This function was used to reference external symbols. All plugins now use the Imports API, which allows you to reference external symbols in a type-safe way through plugin.imports.

Patch Changes

api: replace ~ fields with $ (#4086) (d5ca286) by @mrlubos

config: add Presets API (3b4ee7a) by @mrlubos

plugin(@hey-api/client-angular): fix: send an empty object request body when explicitly provided in flat parameters mode (#4070) (ab522ef) by @matthewjamesadam

client: use getBaseUrl() function to determine default value (#3772) (4026955) by @mrlubos

plugin(zod): improve discriminator handling (680b947) by @mrlubos

plugin(@tanstack/preact-query): fix: strip initialData from the inferred result types for infinite query options (7a4b0cf) by @mrlubos

plugin(@tanstack/solid-query): fix: strip initialData from the inferred result types for infinite query options (7a4b0cf) by @mrlubos

plugin(valibot): support custom regular expression error messages with x-pattern-message (#4117) (3ed3afb) by @pullfrog

plugin(@hey-api/client-next): fix: send an empty object request body when explicitly provided in flat parameters mode (#4070) (f6d4512) by @matthewjamesadam

plugin(@hey-api/client-axios): fix: send an empty object request body when explicitly provided in flat parameters mode (#4070) (f6d4512) by @matthewjamesadam

plugin(zod): support creating optional request schemas (11315c7) by @mrlubos

plugin(@tanstack/react-query): fix: strip initialData from the inferred result types for infinite query options (7a4b0cf) by @mrlubos

plugin(@hey-api/client-ky): fix: send an empty object request body when explicitly provided in flat parameters mode (#4070) (f6d4512) by @matthewjamesadam

... (truncated)

Commits

8f3eb72 ci: release
3ed3afb docs: add changesets
66bc2b7 feat: support x-pattern-message extension in Zod and Valibot validator plugins
7b83c97 test: update snapshots
020df93 feat(faker): first implementation
a3338ac test: update snapshots
307e020 test: update snapshots
835c230 chore: more cleanup
1490b05 test: update snapshots
9e6bdde chore: clean up
Additional commits viewable in compare view

Updates @playwright/test from 1.60.0 to 1.62.1

Release notes

Sourced from @playwright/test's releases.

v1.62.1

Bug Fixes

#41989 [Regression]: tsconfig "extends" bare specifier isn't resolved via node_modules walk-up like tsc (fatal since 1.62)

#41998 [Regression]: directory-form tsconfig project references ("path": "../pkg") fail to resolve (fatal since 1.62)

#41985 Accessibility snapshot drops button name when text is nested inside spans with aria-hidden SVG

#42000 [Regression]: page.evaluate() arg of a branded primitive type (string & { brand }) no longer type-checks since 1.62

#42013 [BUG]Image-type actionable elements are not presented in the snapshot.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:
test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});
Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:
const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });
Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:
// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });
</tr></table>

... (truncated)

Commits

26a9e47 cherry-pick(#42043): docs: release notes for v1.62 Python, Java, and .NET (#4...

Bumps the frontend group with 24 updates in the /services/frontend directory: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `1.18.1` | `1.19.0` | | [libphonenumber-js](https://gitlab.com/catamphetamine/libphonenumber-js) | `1.13.9` | `1.13.10` | | [marked](https://github.com/markedjs/marked) | `18.0.4` | `18.0.7` | | [vue](https://github.com/vuejs/core) | `3.5.39` | `3.5.40` | | [vue-router](https://github.com/vuejs/router) | `5.1.0` | `5.2.0` | | [vuetify](https://github.com/vuetifyjs/vuetify/tree/HEAD/packages/vuetify) | `4.1.5` | `4.1.7` | | [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.5` | `3.3.6` | | [@hey-api/openapi-ts](https://github.com/hey-api/hey-api/tree/HEAD/packages/openapi-ts) | `0.97.3` | `0.99.0` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.60.0` | `1.62.1` | | [@types/luxon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/luxon) | `3.7.2` | `3.7.3` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.1` | `26.1.2` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.64.0` | `8.65.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.64.0` | `8.65.0` | | [@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue) | `6.0.7` | `6.0.8` | | [@vue/compiler-dom](https://github.com/vuejs/core/tree/HEAD/packages/compiler-dom) | `3.5.39` | `3.5.40` | | [@vue/server-renderer](https://github.com/vuejs/core/tree/HEAD/packages/server-renderer) | `3.5.39` | `3.5.40` | | [@vue/typescript-plugin](https://github.com/vuejs/language-tools/tree/HEAD/packages/typescript-plugin) | `3.3.7` | `3.3.9` | | [eslint](https://github.com/eslint/eslint) | `10.7.0` | `10.8.0` | | [eslint-plugin-vue](https://github.com/vuejs/eslint-plugin-vue) | `10.9.2` | `10.10.0` | | [globals](https://github.com/sindresorhus/globals) | `17.7.0` | `17.9.0` | | [sass](https://github.com/sass/dart-sass) | `1.101.0` | `1.102.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.64.0` | `8.65.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.5` | `8.2.0` | | [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.3.7` | `3.3.9` | Updates `axios` from 1.18.1 to 1.19.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.18.1...v1.19.0) Updates `libphonenumber-js` from 1.13.9 to 1.13.10 - [Changelog](https://gitlab.com/catamphetamine/libphonenumber-js/blob/master/CHANGELOG.md) - [Commits](https://gitlab.com/catamphetamine/libphonenumber-js/commits/master) Updates `marked` from 18.0.4 to 18.0.7 - [Release notes](https://github.com/markedjs/marked/releases) - [Commits](markedjs/marked@v18.0.4...v18.0.7) Updates `vue` from 3.5.39 to 3.5.40 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](vuejs/core@v3.5.39...v3.5.40) Updates `vue-router` from 5.1.0 to 5.2.0 - [Release notes](https://github.com/vuejs/router/releases) - [Commits](vuejs/router@v5.1.0...v5.2.0) Updates `vuetify` from 4.1.5 to 4.1.7 - [Release notes](https://github.com/vuetifyjs/vuetify/releases) - [Commits](https://github.com/vuetifyjs/vuetify/commits/v4.1.7/packages/vuetify) Updates `@eslint/eslintrc` from 3.3.5 to 3.3.6 - [Release notes](https://github.com/eslint/eslintrc/releases) - [Changelog](https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md) - [Commits](eslint/eslintrc@eslintrc-v3.3.5...eslintrc-v3.3.6) Updates `@hey-api/openapi-ts` from 0.97.3 to 0.99.0 - [Release notes](https://github.com/hey-api/hey-api/releases) - [Changelog](https://github.com/hey-api/hey-api/blob/main/packages/openapi-ts/CHANGELOG.md) - [Commits](https://github.com/hey-api/hey-api/commits/@hey-api/openapi-ts@0.99.0/packages/openapi-ts) Updates `@playwright/test` from 1.60.0 to 1.62.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.60.0...v1.62.1) Updates `@types/luxon` from 3.7.2 to 3.7.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/luxon) Updates `@types/node` from 26.1.1 to 26.1.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 8.64.0 to 8.65.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.64.0 to 8.65.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/parser) Updates `@vitejs/plugin-vue` from 6.0.7 to 6.0.8 - [Release notes](https://github.com/vitejs/vite-plugin-vue/releases) - [Changelog](https://github.com/vitejs/vite-plugin-vue/blob/main/packages/plugin-vue/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-vue/commits/plugin-vue@6.0.8/packages/plugin-vue) Updates `@vue/compiler-dom` from 3.5.39 to 3.5.40 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](https://github.com/vuejs/core/commits/v3.5.40/packages/compiler-dom) Updates `@vue/server-renderer` from 3.5.39 to 3.5.40 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](https://github.com/vuejs/core/commits/v3.5.40/packages/server-renderer) Updates `@vue/typescript-plugin` from 3.3.7 to 3.3.9 - [Release notes](https://github.com/vuejs/language-tools/releases) - [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md) - [Commits](https://github.com/vuejs/language-tools/commits/v3.3.9/packages/typescript-plugin) Updates `eslint` from 10.7.0 to 10.8.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.7.0...v10.8.0) Updates `eslint-plugin-vue` from 10.9.2 to 10.10.0 - [Release notes](https://github.com/vuejs/eslint-plugin-vue/releases) - [Changelog](https://github.com/vuejs/eslint-plugin-vue/blob/master/CHANGELOG.md) - [Commits](vuejs/eslint-plugin-vue@v10.9.2...v10.10.0) Updates `globals` from 17.7.0 to 17.9.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.7.0...v17.9.0) Updates `sass` from 1.101.0 to 1.102.0 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.101.0...1.102.0) Updates `typescript-eslint` from 8.64.0 to 8.65.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/typescript-eslint) Updates `vite` from 8.1.5 to 8.2.0 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/create-vite@8.2.0/packages/vite) Updates `vue-tsc` from 3.3.7 to 3.3.9 - [Release notes](https://github.com/vuejs/language-tools/releases) - [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md) - [Commits](https://github.com/vuejs/language-tools/commits/v3.3.9/packages/tsc) --- updated-dependencies: - dependency-name: axios dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend - dependency-name: libphonenumber-js dependency-version: 1.13.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: marked dependency-version: 18.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: vue dependency-version: 3.5.40 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: vue-router dependency-version: 5.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend - dependency-name: vuetify dependency-version: 4.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: "@eslint/eslintrc" dependency-version: 3.3.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend - dependency-name: "@hey-api/openapi-ts" dependency-version: 0.99.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: "@playwright/test" dependency-version: 1.62.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: "@types/luxon" dependency-version: 3.7.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend - dependency-name: "@types/node" dependency-version: 26.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.65.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: "@typescript-eslint/parser" dependency-version: 8.65.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: "@vitejs/plugin-vue" dependency-version: 6.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend - dependency-name: "@vue/compiler-dom" dependency-version: 3.5.40 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend - dependency-name: "@vue/server-renderer" dependency-version: 3.5.40 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend - dependency-name: "@vue/typescript-plugin" dependency-version: 3.3.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend - dependency-name: eslint dependency-version: 10.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: eslint-plugin-vue dependency-version: 10.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: globals dependency-version: 17.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: sass dependency-version: 1.102.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: typescript-eslint dependency-version: 8.65.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: vite dependency-version: 8.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: vue-tsc dependency-version: 3.3.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-10T21:31:26Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026

dependabot Bot closed this Aug 10, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/services/frontend/frontend-c0237cf680 branch August 10, 2026 21:31

Navigation Menu

Uh oh!

build(deps): bump the frontend group across 1 directory with 24 updates - #512

build(deps): bump the frontend group across 1 directory with 24 updates#512
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/services/frontend/frontend-c0237cf680

dependabot Bot commented on behalf of github Aug 10, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.19.0 - July 22, 2026

🔒 Security Fixes

🚀 New Features

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

v1.19.0 — July 22, 2026

🔒 Security Fixes

🚀 New Features

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

1.13.10 / 30.7.2026

v18.0.7

18.0.7 (2026-07-21)

Bug Fixes

v18.0.6

18.0.6 (2026-07-09)

Bug Fixes

v18.0.5

18.0.5 (2026-06-04)

Bug Fixes

v3.5.40

3.5.40 (2026-07-16)

Bug Fixes

v5.2.0

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v4.1.7

🔧 Bug Fixes

v4.1.6

🔧 Bug Fixes

eslintrc: v3.3.6

3.3.6 (2026-07-10)

Bug Fixes

3.3.6 (2026-07-10)

Bug Fixes

0.99.0

Minor Changes

Plugin duplicates behavior

Removed plugin.external() function

Patch Changes

v1.62.1

Bug Fixes

v1.62.0

🧱 New component testing model

🛑 Cancel operations with AbortSignal

🖼️ WebP screenshots

Uh oh!

dependabot Bot commented on behalf of github Aug 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 10, 2026 •

edited

Loading

Removed `plugin.external()` function