Skip to content

build(deps-dev): bump the development group across 1 directory with 16 updates - #235

Merged
DavidHLP merged 5 commits into
mainfrom
dependabot/npm_and_yarn/development-100b4f8489
Oct 5, 2026
Merged

build(deps-dev): bump the development group across 1 directory with 16 updates#235
DavidHLP merged 5 commits into
mainfrom
dependabot/npm_and_yarn/development-100b4f8489

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 3, 2026 •
edited by DavidHLP
Loading

Copy link
Copy Markdown
Contributor

Sync note — 2026-10-05 · head 212a3c47e

Merged main (through #236) into this branch and regenerated pnpm-lock.yaml from the merged manifests rather than hand-merging generated output.

  • The KaTeX drift this branch previously carried is gone: it now inherits the workspace katex: 0.18.9 override instead of resolving the deprecated katex 0.18.11. grep -c "katex@0.18.11" pnpm-lock.yaml is 0 and the deprecated: line is gone.
  • The first push of this sync failed CI with ERR_PNPM_LOCKFILE_CONFIG_MISMATCH: the committed lockfile snapshot was missing the katex override entry, because the lockfile was staged before the regeneration rewrote it. 212a3c47e re-stages the regenerated file; its overrides block now matches pnpm-workspace.yaml key for key, which is the comparison pnpm performs.
  • Local checks at 212a3c47e (Node 26.7.0 / pnpm 11.24.0): pnpm install --frozen-lockfile; console lint + type-check + 622 tests; management lint + type-check + 488 tests + i18n; packages/auth-core 74 tests; packages/markdown-utils 59 tests. Both apps built and passed the isolated preview smoke under the upgraded toolchain (playwright 1.63.0, vitest 5, jsdom 30).
  • The 16 development-group bumps are the only remaining package.json change in this PR.

Bumps the development group with 16 updates in the / directory:

Package From To
@vue/test-utils 2.5.0 2.5.1
jsdom 25.0.1 30.1.1
playwright 1.60.0 1.63.0
vitest 4.1.9 5.0.2
@iconify-json/lucide 1.2.134 1.2.137
@types/node 22.20.0 26.6.3
@vitest/coverage-v8 4.1.9 5.0.2
@vue/tsconfig 0.7.0 0.9.1
eslint 10.10.0 10.11.0
eslint-plugin-vue 10.11.0 10.11.1
knip 6.36.0 6.38.0
prettier 3.9.7 3.9.9
vite 8.0.16 8.3.1
vue-tsc 2.2.12 3.3.11
@vitest/ui 5.0.1 5.0.2
happy-dom 15.11.7 20.14.5

Updates @vue/test-utils from 2.5.0 to 2.5.1

Release notes

Sourced from @​vue/test-utils's releases.

v2.5.1

What's Changed

New Contributors

Full Changelog: vuejs/test-utils@v2.5.0...v2.5.1

Commits

Updates jsdom from 25.0.1 to 30.1.1

Release notes

Sourced from jsdom's releases.

v30.1.1

  • Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (@​asamuzaK)
  • Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (@​asamuzaK)
  • Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (@​asamuzaK)
  • Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (@​scttcper)
  • Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (@​FedgeNo)
  • Fixed !important handling when updating CSS longhands after shorthands, using variables or CSS-wide keywords, and assigning style properties directly. (@​FedgeNo)
  • Fixed <noscript> parsing with includeNodeLocations: true or inside frames to honor the runScripts option.
  • Fixed the storageQuota option being ignored by frames.
  • Fixed encoding detection of HTML and XML byte input to honor XML encoding declarations and detect UTF-16 without a byte order mark.
  • Fixed exceptions caused by truncated charset parameters in <meta> elements, and encoding detection incorrectly using incomplete <meta> tags. (@​FedgeNo)
  • Fixed XML serialization errors for namespaces named constructor, toString, __proto__, or "null", and incorrect reuse of namespace prefixes declared on sibling elements.
  • Fixed element.innerHTML and element.outerHTML in XML documents to reject invalid characters in attribute values and avoid stack overflows on large strings.
  • Fixed selector matching for :lang(), :nth-child(... of ...) after mutations, and :has() with duplicate IDs or nested logical pseudo-classes. (@​asamuzaK)

v30.1.0

jsdom is feeling the AGI!

This release is dedicated to @​scttcper, who unleashed @​codex upon jsdom and found tons of performance improvements. Along the way, he found and fixed many correctness issues as well.

We really appreciate his thoughtful PRs, which did a great job following the project's contribution guidelines, and were clearly human-curated, with their PR descriptions edited to be brief and respectful of the maintainers' time.

Thanks to @​scttcper, as well as all the other contributors of this release (most of whom were AI-assisted).

  • Added named access to elements on document, such as document.myForm for <form name="myForm">. (@​vojtisprime11)
  • Added QuotaExceededError, including its use for storage quota errors and oversized crypto.getRandomValues() requests.
  • Added support for the relaxed DOM naming rules when creating elements, attributes, and document types.
  • Improved performance of DOM construction, tree mutations, range operations, and live collection access, especially on large documents. (@​scttcper, @​erezrokah)
  • Improved performance of getComputedStyle(), style changes, and CSS serialization. (@​scttcper, @​jhult)
  • Improved performance of event dispatch, form control and label lookups, and updates to <select> elements and radio button groups. (@​scttcper)
  • Reduced memory use when creating and working with DOM nodes, attributes, event listeners, and mutation observers. (@​scttcper)
  • Changed window.close() to preserve access to the document and its DOM through retained references.
  • Fixed element.querySelectorAll() returning no matches when the first part of the selector matches the element itself, which regressed in v30.0.0. (@​asamuzaK)
  • Fixed case sensitivity in CSS attribute selectors, including selectors matching data-state="", title="", and other case-sensitive values. (@​asamuzaK)
  • Fixed document.querySelector() failing to find a matching element when an earlier element has the same ID but does not match the rest of the selector. (@​vojtisprime11)
  • Fixed :focus matching in shadow trees. (@​asamuzaK)
  • Fixed DOM insertion and replacement, including valid document.replaceChildren() calls, invalid document element and doctype placements, and mutations during element.replaceWith().
  • Fixed the ordering of script execution, custom element callbacks, iframe loading, and mutation observer notifications during DOM insertion, including in shadow trees.
  • Fixed queued events and navigation continuing after window.close() or iframe removal, and prevented new scripts, resource loads, timers, and animation frames from starting in destroyed documents. (@​scttcper)
  • Fixed parent documents waiting indefinitely for loading to finish when a child iframe removes itself during loading.
  • Fixed request cancellation across redirects, during pending requestInterceptor() callbacks, and when reusing an XMLHttpRequest after aborting it.
  • Fixed resource loading and JSDOM.fromURL() potentially hanging when response handling throws and response stream cleanup does not finish.
  • Fixed successful cached resource loads being treated as aborted.
  • Fixed getComputedStyle() and document.styleSheets using the wrong stylesheet order after inserting or updating <style> elements.
  • Fixed getComputedStyle() ignoring nested @import and @media rules in imported stylesheets, and returning stale results after imports finish loading.
  • Fixed style invalidation, stylesheet removal, and frame source updates in shadow trees.
  • Fixed repeated getComputedStyle() calls changing case-sensitive background URLs, and inconsistent resolution of border shorthands containing system colors. (@​scttcper)
  • Fixed computed border widths, including borderless elements incorrectly reporting 16px, which regressed in v30.0.0. (@​Alberto-BaseNet)
  • Fixed getComputedStyle() to resolve 'font-weight' keywords to numeric values. (@​tianrking)
  • Fixed getComputedStyle() to convert lengths to pixels inside CSS math functions containing percentages, and to resolve percentages in 'font-size' math functions. (@​soroushm)

... (truncated)

Commits
  • 0a117f4 30.1.1
  • 103f67d Remove unnecessary window cleanup from API tests
  • cdda00a Test HTTP/2 document and subresource loading
  • 7ab92ce Update @​asamuzakjp/dom-selector to v9.2.1
  • d940c20 Share jsdom settings across descendant windows
  • 6ba40cb Fix and simplify option propagation
  • 3b3be70 Preserve CSS priorities across declaration updates
  • 97b2758 Align focusing and unfocusing with HTML
  • b7b460b Update w3c-xmlserializer to v6
  • 71d562f Update html-encoding-sniffer to v7
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for jsdom since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates playwright from 1.60.0 to 1.63.0

Release notes

Sourced from playwright's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits
  • 1b025d7 chore: mark v1.63.0 (#42569)
  • 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
  • 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
  • e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
  • 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
  • 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
  • 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
  • 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
  • 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
  • bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
  • Additional commits viewable in compare view

Updates vitest from 4.1.9 to 5.0.2

Release notes

Sourced from vitest's releases.

v5.0.2

   🐞 Bug Fixes

    View changes on GitHub

v5.0.1

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates @iconify-json/lucide from 1.2.134 to 1.2.137

Commits

Updates @types/node from 22.20.0 to 26.6.3

Commits

Updates @vitest/coverage-v8 from 4.1.9 to 5.0.2

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.2

   🐞 Bug Fixes

    View changes on GitHub

v5.0.1

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates @vue/tsconfig from 0.7.0 to 0.9.1

Release notes

Sourced from @​vue/tsconfig's releases.

v0.9.1

Notable Changes

  • Align the TypeScript peer dependency requirement with the documentation (>= 5.8, including TypeScript 6)

Full Changelog: vuejs/tsconfig@v0.9.0...v0.9.1

v0.9.0

Noticeable Changes

  • feat: update lib to ES2022 by @​Slessi in vuejs/tsconfig#41
  • chore: move noUncheckedIndexedAccess from base config to the lib config [fa4423b]
    • This is because noUncheckedIndexedAccess may have false positives, making it hard for existing codebases to upgrade.
    • But for new codebases, it’s still recommended to enable this flag from the beginning.

New Contributors

Full Changelog: vuejs/tsconfig@v0.8.1...v0.9.0

v0.8.1

fix: do not turn on exactOptionalPropertyTypes for now [a235c5f]

Full Changelog: vuejs/tsconfig@v0.8.0...v0.8.1

v0.8.0

Breaking Changes

If you experience a significant number of type errors in your projects after upgrading to this version, you might want to consider a gradual approach to adopting the new options:

  • After upgrading to @vue/tsconfig, use supress-ts-errors (npx suppress-ts-errors && npx suppress-ts-errors vue src/**/*.vue) to insert @ts-expect-error comments in your current codebase.
  • This way, the stricter configuration will only apply to any new code you add, allowing you to address the existing errors later when you have more time.

Full Changelog: vuejs/tsconfig@v0.7.0...v0.8.0

Commits
  • dc7af0b 0.9.1
  • e73ef3c fix: align typescript peer dependency with documentation
  • 3569685 0.9.0
  • fa4423b chore: move noUncheckedIndexedAccess from base config to the lib config
  • 051d720 docs: update TypeScript version requirement
  • 3db886a feat: update lib to ES2022 (#41)
  • df9d3d4 docs: note the default value of types in TS 6+ has been changed to []
  • 0e39087 docs: note that strict mode is on by default in TS 6
  • ae3b1dc chore: make GitHub render tsconfig.*.json as JSONC
  • 4a223b2 0.8.1
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​vue/tsconfig since your current version.


Updates eslint from 10.10.0 to 10.11.0

Release notes

Sourced from eslint's releases.

v10.11.0

Features

  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
  • 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
  • d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
  • b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
  • 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
  • 6c789ff docs: Update README (GitHub Actions Bot)
  • 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

Chores

  • 520dd77 perf: Implement fast paths in critical areas (#21210) (Nicholas C. Zakas)
  • 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330) (Francesco Trotta)
  • 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331) (renovate[bot])
  • 24310e3 chore: update ecosystem plugins (#21324) (ESLint Bot)
  • 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318) (dependabot[bot])
  • ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#21221) (Nicholas C. Zakas)
  • c832660 chore: Upgrade Stylelint to the latest version in docs (#21245) (Jung Hyeon Jun)
  • f9f88fc chore: update ecosystem plugins (#21308) (ESLint Bot)
  • fc81076 ci: add more types integration tests (#20395) (Nitin Kumar)
Commits
  • 3c0b7c6 10.11.0
  • 321f0a7 Build: changelog update for 10.11.0
  • 520dd77 perf: Implement fast paths in critical areas (#21210)
  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312)
  • 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330)
  • 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331)
  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311)
  • 24310e3 chore: update ecosystem plugins (#21324)
  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21...
  • 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318)
  • Additional commits viewable in compare view

Updates eslint-plugin-vue from 10.11.0 to 10.11.1

Release notes

Sourced from eslint-plugin-vue's releases.

v10.11.1

Patch Changes

  • Fixed vue/no-ref-object-reactivity-loss false negatives for values gotten in an immediately invoked function expression (IIFE) (#3115)
  • Fixed vue/no-unused-properties false positive for props explicitly typed as never (#3113)
  • Fixed vue/require-default-prop to ...

    Description has been truncated

    Validation update

    • Synced this branch with main at 1303bb0, resolved package-manifest/lockfile conflicts without changing source code, and retained the Dependabot-selected Vitest 5.0.2. DOMPurify remains 3.4.16.
    • On remote Node 22.23.3 / pnpm 11.25.0: frozen install and workspace lint/type-check/tests passed; Console 77 files / 622 tests and Management 68 files / 488 tests passed. Auth-core test:coverage passed its existing thresholds (54.57% statements, 46.56% branches, 50.00% functions, 57.84% lines against 46/43/39/49). Both application builds passed.
    • Hosted CI run 37252015465 passed for exact head a36617b; applicable frontend, auth-core, security, i18n and static-contract jobs passed. Backend/contract/docker jobs were path-skipped.
    • This PR remains Draft until the planned Lucide replacement PR build: migrate icon dependencies to @lucide/vue #236 is delivered; build: migrate icon dependencies to @lucide/vue #236 is currently Draft because the safe browser preview is unavailable.

@dependabot
build(deps-dev): bump the development group across 1 directory with 1…
7379b7c 
…6 updates

Bumps the development group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@vue/test-utils](https://github.com/vuejs/test-utils) | `2.5.0` | `2.5.1` |
| [jsdom](https://github.com/jsdom/jsdom) | `25.0.1` | `30.1.1` |
| [playwright](https://github.com/microsoft/playwright) | `1.60.0` | `1.63.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.9` | `5.0.2` |
| [@iconify-json/lucide](https://github.com/iconify/icon-sets) | `1.2.134` | `1.2.137` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.0` | `26.6.3` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.9` | `5.0.2` |
| [@vue/tsconfig](https://github.com/vuejs/tsconfig) | `0.7.0` | `0.9.1` |
| [eslint](https://github.com/eslint/eslint) | `10.10.0` | `10.11.0` |
| [eslint-plugin-vue](https://github.com/vuejs/eslint-plugin-vue) | `10.11.0` | `10.11.1` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.36.0` | `6.38.0` |
| [prettier](https://github.com/prettier/prettier) | `3.9.7` | `3.9.9` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.3.1` |
| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `2.2.12` | `3.3.11` |
| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `5.0.1` | `5.0.2` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `15.11.7` | `20.14.5` |



Updates `@vue/test-utils` from 2.5.0 to 2.5.1
- [Release notes](https://github.com/vuejs/test-utils/releases)
- [Commits](vuejs/test-utils@v2.5.0...v2.5.1)

Updates `jsdom` from 25.0.1 to 30.1.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v25.0.1...v30.1.1)

Updates `playwright` from 1.60.0 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.63.0)

Updates `vitest` from 4.1.9 to 5.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/vitest)

Updates `@iconify-json/lucide` from 1.2.134 to 1.2.137
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `@types/node` from 22.20.0 to 26.6.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 4.1.9 to 5.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/coverage-v8)

Updates `@vue/tsconfig` from 0.7.0 to 0.9.1
- [Release notes](https://github.com/vuejs/tsconfig/releases)
- [Commits](vuejs/tsconfig@v0.7.0...v0.9.1)

Updates `eslint` from 10.10.0 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.10.0...v10.11.0)

Updates `eslint-plugin-vue` from 10.11.0 to 10.11.1
- [Release notes](https://github.com/vuejs/eslint-plugin-vue/releases)
- [Changelog](https://github.com/vuejs/eslint-plugin-vue/blob/master/CHANGELOG.md)
- [Commits](vuejs/eslint-plugin-vue@v10.11.0...v10.11.1)

Updates `knip` from 6.36.0 to 6.38.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.38.0/packages/knip)

Updates `prettier` from 3.9.7 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.7...3.9.9)

Updates `vite` from 8.0.16 to 8.3.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.1/packages/vite)

Updates `vue-tsc` from 2.2.12 to 3.3.11
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.3.11/packages/tsc)

Updates `@vitest/ui` from 5.0.1 to 5.0.2
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.2/packages/ui)

Updates `happy-dom` from 15.11.7 to 20.14.5
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v15.11.7...v20.14.5)

---
updated-dependencies:
- dependency-name: "@vue/test-utils"
  dependency-version: 2.5.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
- dependency-name: jsdom
  dependency-version: 30.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development
- dependency-name: playwright
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: vitest
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development
- dependency-name: "@iconify-json/lucide"
  dependency-version: 1.2.137
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
- dependency-name: "@types/node"
  dependency-version: 26.6.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development
- dependency-name: "@vue/tsconfig"
  dependency-version: 0.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: eslint
  dependency-version: 10.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: eslint-plugin-vue
  dependency-version: 10.11.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
- dependency-name: knip
  dependency-version: 6.38.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
- dependency-name: vite
  dependency-version: 8.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: vue-tsc
  dependency-version: 3.3.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development
- dependency-name: "@vitest/ui"
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
- dependency-name: happy-dom
  dependency-version: 20.14.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 3, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@DavidHLP
DavidHLP marked this pull request as draft October 5, 2026 01:36
DavidHLP and others added 2 commits October 5, 2026 11:05
@DavidHLP @claude
Merge remote-tracking branch 'origin/main' into dependabot/npm_and_ya…
03cccca 
…rn/development-100b4f8489

Brings in #236 (lucide-vue-next -> @lucide/vue) and the katex 0.18.9
workspace override, and resolves the pnpm-lock.yaml conflict by
regenerating the file from the merged manifests rather than hand-merging
generated output.

Effect on this PR's own change: the 16 development-group bumps are the only
remaining package.json deltas, and the KaTeX drift this branch previously
carried is gone - it now inherits the workspace pin instead of resolving the
deprecated katex 0.18.11.

Verified on this merge (local, Node 26.7.0 / pnpm 11.24.0):
`pnpm install --frozen-lockfile` succeeds; `grep -c "katex@0.18.11"
pnpm-lock.yaml` is 0 and the `deprecated:` line is gone; console
lint/type-check/622 tests, management lint/type-check/488 tests plus i18n
check, packages/auth-core 74 tests, packages/markdown-utils 59 tests; both
apps built and passed the isolated preview smoke driven by the upgraded
playwright 1.63.0.

Co-Authored-By: Claude Code <noreply@anthropic.com>
@DavidHLP @claude
fix(deps): record the katex override in the lockfile snapshot
212a3c4 
The pnpm-lock.yaml merge resolution staged the branch-side file before the
regeneration rewrote it, so the committed snapshot was missing the
`katex: 0.18.9` entry that pnpm-workspace.yaml declares. CI rejects that
inconsistency up front:

  [ERR_PNPM_LOCKFILE_CONFIG_MISMATCH] Cannot proceed with the frozen
  installation. The current "overrides" configuration doesn't match the
  value found in the lockfile

Re-staged the regenerated lockfile. Its `overrides` block now matches
pnpm-workspace.yaml key for key, which is the check CI performs.

Co-Authored-By: Claude Code <noreply@anthropic.com>
@DavidHLP
DavidHLP marked this pull request as ready for review October 5, 2026 03:11
@DavidHLP
DavidHLP merged commit c3194bc into main Oct 5, 2026
15 checks passed
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 5, 2026 •
edited
Loading

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-05T03:12:18.142502Z 212a3c4 Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/development-100b4f8489 branch October 5, 2026 03:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@DavidHLP