chore(deps): bump the minor-and-patch group across 1 directory with 55 updates

[dependabot]

Bumps the minor-and-patch group with 55 updates in the / directory:

Package	From	To
vscode-languageserver-types	3.17.5	3.18.0
@axe-core/playwright	4.11.0	4.11.3
@noble/hashes	2.0.1	2.2.0
@playwright/test	1.59.1	1.61.0
@vitejs/plugin-vue	6.0.1	6.0.7
@vitest/coverage-v8	4.1.5	4.1.9
@vitest/web-worker	4.1.5	4.1.9
@vue/compiler-dom	3.5.29	3.5.38
@vue/compiler-sfc	3.5.29	3.5.38
@vue/test-utils	2.4.6	2.4.11
axe-core	4.11.0	4.12.1
browserslist-useragent-regexp	4.1.3	4.1.4
happy-dom	20.8.9	20.10.6
jimp	1.6.0	1.6.1
pino	10.1.0	10.3.1
pino-pretty	13.1.2	13.1.3
prettier	3.8.1	3.8.4
qs	6.14.2	6.15.2
requirejs	2.3.7	2.3.8
rollup-plugin-gzip	4.1.1	4.2.0
vite-plugin-node-polyfills	0.24.0	0.28.0
vitest	4.1.6	4.1.9
vue	3.5.29	3.5.38
vue-tsc	3.1.4	3.3.5
focus-trap	8.2.0	8.2.1
fuse.js	7.3.0	7.4.2
lodash-es	4.17.21	4.18.1
luxon	3.5.0	3.7.2
@types/luxon	3.7.1	3.7.2
vue-router	5.0.6	5.1.0
autoprefixer	10.4.22	10.5.0
babel-loader	10.0.0	10.1.1
glob	13.0.0	13.0.6
mini-css-extract-plugin	2.9.4	2.10.2
sass	1.94.1	1.101.0
semver	7.7.3	7.8.5
style-dictionary	5.1.1	5.5.0
stylelint	17.0.0	17.13.0
yaml	2.8.2	2.9.0
@typescript-eslint/parser	8.54.0	8.61.1
eslint-plugin-promise	7.2.1	7.3.0
eslint-plugin-vue	10.7.0	10.9.2
eslint-plugin-vuejs-accessibility	2.4.1	2.5.0
typescript-eslint	8.54.0	8.61.1
uuid	14.0.0	14.0.1
axios	1.15.0	1.18.0
fast-xml-parser	5.8.0	5.9.3
webdav	5.9.0	5.10.0
zod	4.3.6	4.4.3
@sentry/vue	10.51.0	10.59.0
@vue/shared	3.5.29	3.5.38
dompurify	3.4.2	3.4.11
katex	0.16.45	0.17.0
md-editor-v3	6.5.0	6.5.1
p-queue	9.2.0	9.3.0

Updates vscode-languageserver-types from 3.17.5 to 3.18.0

Release notes

Sourced from vscode-languageserver-types's releases.

release/protocol/3.18.0

No release notes provided.

release/types/3.18.0

Changes:

Feature Requests:

• #1691: Use NoInfer for better typing
• #1692: setImmediate Implementation in browser RAL for json-rpc is not ideal.
• #1698: RenameParams does not reference TextDocumentPositionParams interface in the JSON metamodel

Bugs:

• #752: Edits are applied twice
• #1717: Client requests textDocument/diagnostics before textDocument/didOpen
• #1693: Output channel leak when stopping LanguageClient
• #1581: Client error 'Failed to determine file type' after undoing rename with Cmd+Z
• #1548: Extra true in the output log when a language server disconnects

Others:

• #1785: Allow returning null in SemanticTokensFeatureShape.on handler
• #1784: SemanticTokensFeatureShape.on handler does not allow returning null
• #1780: Add getMessageString function to Diagnostic namespace
• #1779: Add 3.17 version check method for Diagnostic
• #1778: Merge next release into main
• #1777: Update lock files for dependencies
• #1775: Update dependencies and improve compatibility
• #1774: Bump qs from 6.15.0 to 6.15.2
• #1773: Implement TextDocumentSnapshot for delay open notifications
• #1772: Prevent pulling diagnostics on untitled documents
• #1770: Update documentation and fix lint errors
• #1767: Inline value documentation improvements
• #1769: Fix glob pattern documentation
• #1768: Make document color requests consistent with the specification
• #1766: Add optional MarkupContent support to diagnostics
• #1751: forgetDocument is crashing the extension host
• #1765: Fixes #1751: Prevent crash in forgetDocument when disposed
• #1752: fix: random pipe path length extends limit on macos
• #1764: Fixes double application of edits during renaming
• #1762: Bump brace-expansion from 5.0.3 to 5.0.6 in /client

... (truncated)

Commits

• 2cc5bf0 Prepare 3.18 release
• f5e23e2 Add getMessageString function to Diagnostic namespace (#1780)
• 3e8ab80 Add 3.17 version check method for Diagnostic (#1779)
• b21577c Merge next release into main (#1778)
• c08bcae Update dependencies and improve compatibility (#1775)
• f168f85 Update documentation and fix lint errors (#1770)
• c54b2fd Merge pull request #1767 from microsoft/dbaeumer/straight-gazelle-plum
• 2cf625f Add optional MarkupContent support to diagnostics (#1766)
• 0aa488d Inline value clarifications
• 85a9202 Migrate to ESLint 9 (#1747)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for vscode-languageserver-types since your current version.

Updates @axe-core/playwright from 4.11.0 to 4.11.3

Release notes

Sourced from @​axe-core/playwright's releases.

v4.11.3

What's Changed

• chore: add create-release workflow by @​Garbee in dequelabs/axe-core-npm#1326
• chore: merge master into develop by @​attest-team-ci in dequelabs/axe-core-npm#1324
• fix: Update axe-core to v4.11.4 by @​attest-team-ci in dequelabs/axe-core-npm#1330
• chore: RC v4.11.3 by @​github-actions[bot] in dequelabs/axe-core-npm#1332
• chore: release v4.11.3 by @​axe-core in dequelabs/axe-core-npm#1335

New Contributors

• @​axe-core made their first contribution in dequelabs/axe-core-npm#1335

Full Changelog: dequelabs/axe-core-npm@v4.11.2...v4.11.3

Release 4.11.2

Bug Fixes

• Update axe-core to v4.11.3 (#1306) (71c4179)
• wdio: support v9 wdio switchFrame and switchWindow (#1302) (4689273), closes #1164

Release 4.11.1

Bug Fixes

• reorder exports to place types first (#1261) (40d22e3), closes #1243
• Update axe-core to v4.11.1 (#1271) (77f577e)

Changelog

Sourced from @​axe-core/playwright's changelog.

4.11.3 (2026-04-29)

Bug Fixes

• Update axe-core to v4.11.4 (#1330) (eed87f5)

4.11.2 (2026-04-14)

Bug Fixes

• Update axe-core to v4.11.3 (#1306) (71c4179)
• wdio: support v9 wdio switchFrame and switchWindow (#1302) (4689273), closes #1164

4.11.1 (2026-01-09)

Bug Fixes

• reorder exports to place types first (#1261) (40d22e3), closes #1243
• Update axe-core to v4.11.1 (#1271) (77f577e)

Commits

• 25fbfd2 chore: release v4.11.3 (#1335)
• dad3572 chore: RC v4.11.3 (#1332)
• 582a7fc chore: RC v4.11.3
• eed87f5 fix: Update axe-core to v4.11.4 (#1330)
• 57c5437 chore: merge master into develop (#1324)
• da56b5d chore: add create-release workflow (#1326)
• 310de0a chore: Release 4.11.2 (#1323)
• 39d9967 chore: RC v4.11.2 (#1317)
• 7eb0bf2 chore: RC v4.11.2
• 71c4179 fix: Update axe-core to v4.11.3 (#1306)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​axe-core/playwright since your current version.

Updates @noble/hashes from 2.0.1 to 2.2.0

Release notes

Sourced from @​noble/hashes's releases.

2.2.0

• March 2026 self-audit (all files): no major issues found
  • Audited for spec compliance and security
  • Fix: dkLen=0 handling in pbkdf2, blake2, turboshake, kt
  • Fix: parallelHash with blockLen=0
  • Fix: argon2 progress callback now reaches 100%
  • Improve: digestInto no longer returns a value (better performance)
  • Improve: argon2, blake2 support non-4-divisible dkLen
• Fix all Byte Array types, to ensure proper work in both TypeScript 5.6 & TypeScript 5.9+
  • TS 5.6 has Uint8Array, while TS 5.9+ made it generic Uint8Array<ArrayBuffer>
  • This creates incompatibility of code between versions
  • Previously, it was hard to use and constantly emitted errors similar to TS2345
  • See typescript#62240 for more context
• sha3: speed-up by up to 50%. Contributed by @​ChALkeR in paulmillr/noble-hashes#126
• Fix compilation issues on TypeScript v6
• Make package Big Endian friendly. All tests pass on s390x
• Improve tree-shaking, reduce bundle sizes
• Add massive amounts of documentation everywhere

(We're skipping v2.1, to align with other noble packages)

Full Changelog: paulmillr/noble-hashes@2.0.1...2.2.0

Commits

• 81983c2 Release 2.2.0.
• 8883d32 Minor syntax fixes
• e5fedba Run prettier format on tests
• 72e2083 Changes related to March 2026 audit (new tests)
• fd9f580 Changes related to March 2026 audit (typed arrays)
• 9a216b5 Changes related to March 2026 audit
• 85e35d5 Clarify sha3.
• cc8ea40 Merge pull request #126 from ChALkeR/chalker/unroll/sha3/0/chi
• 46c3129 Bump typescript to 6.0.2
• ca90465 Bump devdeps.
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​noble/hashes since your current version.

Updates @playwright/test from 1.59.1 to 1.61.0

Release notes

Sourced from @​playwright/test's releases.

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();
// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
id: credentialId,
userHandle,
privateKey,
publicKey,
});
await context.credentials.install();
const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();

New APIs

Network

• apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

• New option artifactsDir in browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser.
• New option cursor in screencast.showActions() controls the cursor decoration rendered for pointer actions.
• The onFrame callback in screencast.start() now receives a timestamp of when the frame was presented by the browser.

Test runner

• The testOptions.video option now supports the same set of modes as trace: new 'on-all-retries', 'retain-on-first-failure' and 'retain-on-failure-and-retries' values. See the video modes table for which runs are recorded and kept in each mode.
• Supported expect.soft.poll(...).
• New fullConfig.argv — a snapshot of process.argv from the runner process, handy for reading custom arguments passed after the -- separator.
• New fullConfig.failOnFlakyTests mirrors the config option, so reporters can explain why a flaky run failed.
• testInfo.errors now lists each sub-error of an AggregateError as a separate entry.

... (truncated)

Commits

• 1cc5a90 cherry-pick(#41295): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...
• a6772bd cherry-pick(#41280): Revert "fix(trace-viewer): add keyboard navigation to `N...
• 8133dcf cherry-pick(#41283): docs: add Ubuntu 26.04 and Node.js 26.x to system requir...
• 812432e chore: mark v1.61.0 (#41277)
• ac05145 fix(fetch): report serverAddr and securityDetails for reused sockets (#41267)
• 056efc9 fix(trace-viewer): add keyboard navigation to NetworkFilters component (#41...
• 41f7b9a chore: fixes uncovered by the .NET 1.61 roll (#41266)
• ba50778 fix(mcp): assign caps as array for legacy --vision flag (#41253)
• b8ee5ae docs: release notes for v1.61 (#41261)
• 49c1f69 fix(trace viewer): load trace from a local file (#41263)
• Additional commits viewable in compare view

Updates @vitejs/plugin-vue from 6.0.1 to 6.0.7

Release notes

Sourced from @​vitejs/plugin-vue's releases.

plugin-vue@6.0.7

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.6

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.5

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.4

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.3

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.2

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​vitejs/plugin-vue's changelog.

6.0.7 (2026-05-15)

Features

• use carets for @rolldown/pluginutils version (#776) (941b651)

Bug Fixes

• deps: update all non-major dependencies (#762) (9e825b8)
• deps: update all non-major dependencies (#774) (77dc8bc)

6.0.6 (2026-04-13)

Features

• plugin-vue: propagate multiRoot for template-only vapor components (#745) (9e07ae9)

Bug Fixes

• deps: update all non-major dependencies (#738) (050c996)

Miscellaneous Chores

• deps: update dependency rollup to ^4.59.0 (#749) (a0e1ef8)
• remove unused deps (#760) (6d834d8)

6.0.5 (2026-03-12)

Miscellaneous Chores

• remove Vite 8 beta from supported range (#746) (b3f23e4)

6.0.4 (2026-02-02)

Bug Fixes

• deps: update all non-major dependencies (#709) (924b28e)
• deps: update all non-major dependencies (#722) (8a95809)
• deps: update all non-major dependencies (#726) (e69d751)

Miscellaneous Chores

• add metadata for vite-plugin-registry (#730) (239eb6a)
• deps: update dependency rollup to ^4.57.1 (#733) (cd0c8a8)
• deps: update upstream (#727) (fa3ea0e)

6.0.3 (2025-12-12)

Features

• add Vite 8 support (2080d41)

Bug Fixes

• deps: update all non-major dependencies (#707) (799f419)

... (truncated)

Commits

• f93aceb release: plugin-vue@6.0.7
• 941b651 feat: use carets for @rolldown/pluginutils version (#776)
• 77dc8bc fix(deps): update all non-major dependencies (#774)
• 9e825b8 fix(deps): update all non-major dependencies (#762)
• 51dbf4b release: plugin-vue@6.0.6
• 9e07ae9 feat(plugin-vue): propagate multiRoot for template-only vapor components (#745)
• 050c996 fix(deps): update all non-major dependencies (#738)
• 6d834d8 chore: remove unused deps (#760)
• a0e1ef8 chore(deps): update dependency rollup to ^4.59.0 (#749)
• 6ad6cc1 release: plugin-vue@6.0.5
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​vitejs/plugin-vue since your current version.

Updates @vitest/coverage-v8 from 4.1.5 to 4.1.9

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.9

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)
• browser:
  • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)
  • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)
• mocker:
  • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)
• pool:
  • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

• runner: Limit concurrency per task branch in addition to per leaf callbacks (backport)  -  by @​hi-ogawa in vitest-dev/vitest#10384 (4f0f2)

    View changes on GitHub

v4.1.6

   🐞 Bug Fixes

• browser: Provide project reference in ToMatchScreenshotResolvePath  -  by @​macarie and @​sheremet-va in vitest-dev/vitest#10138 (31882)
• Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options  -  by @​hi-ogawa, Codex and @​sheremet-va in vitest-dev/vitest#10196 (2847d)
• browser: Simplify orchestrator otel carrier  -  by @​hi-ogawa in vitest-dev/vitest#10285 (18af9)

   🏎 Performance

• Stringify diff objects only once  -  by @​sheremet-va in vitest-dev/vitest#10276 (9f7b1)

    View changes on GitHub

Commits

• a7a61e7 chore: release v4.1.9 (#10598)
• e61f2dd chore: release v4.1.8
• e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
• a09d472 chore: release v4.1.7
• a8fd24c chore: release v4.1.6
• See full diff in compare view

Updates @vitest/web-worker from 4.1.5 to 4.1.9

Release notes

Sourced from @​vitest/web-worker's releases.

v4.1.9

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)
• browser:
  • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)
  • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)
• mocker:
  • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)
• pool:
  • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

• runner: Limit concurrency per task branch in addition to per leaf callbacks (backport)  -  by @​hi-ogawa in vitest-dev/vitest#10384 (4f0f2)

    View changes on GitHub

v4.1.6

   🐞 Bug Fixes

• browser: Provide project reference in ToMatchScreenshotResolvePath  -  by @​macarie and @​sheremet-va in vitest-dev/vitest#10138 (31882)
• Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options  -  by @​hi-ogawa, Codex and @​sheremet-va in vitest-dev/vitest#10196 (2847d)
• browser: Simplify orchestrator otel carrier  -  by @​hi-ogawa in vitest-dev/vitest#10285 (18af9)

   🏎 Performance

• Stringify diff objects only once  -  by @​sheremet-va in vitest-dev/vitest#10276 (9f7b1)

    View changes on GitHub

Commits

• a7a61e7 chore: release v4.1.9 (#10598)
• e61f2dd chore: release v4.1.8
• a09d472 chore: release v4.1.7
• a8fd24c chore: release v4.1.6
• See full diff in compare view

Updates @vue/compiler-dom from 3.5.29 to 3.5.38

Release notes

Sourced from @​vue/compiler-dom's releases.

v3.5.38

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.37

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.35

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.34

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.33

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.32

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.31

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.30

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from @​vue/compiler-dom's changelog.

3.5.38 (2026-06-11)

3.5.37 (2026-06-11)

3.5.36 (2026-06-11)

Bug Fixes

• compiler-core: avoid crash on CDATA at the document root (#14916) (0ea17e2)
• compiler-core: prefix dynamic keys on v-memo elements (#14922) (68e978e), closes #14920
• compiler-sfc: handle vue-ignore on leading intersection/union type (#14950) (0dcd225), closes #12254
• compiler-sfc: respect var hoisting in props destructure (48ad452)
• reactivity: preserve watch callback return value when wrapped for once: true (#14902) (450a8a8)
• runtime-core: add dev warning for silent catch in compat mode and fix test description typo (#14891) (db3e117)
• runtime-core: force model update when reverted before sync (#14897) (7f76378), closes #13524
• runtime-core: skip async component callbacks after unmount (#14911) (5300ead)
• transition: avoid move transition for hidden v-show group children (#14895) (c11f6ee), closes #14894
• watch: trigger immediate callback for empty sources (#14914) (1f2ca7e), closes #14898

3.5.35 (2026-05-27)

Bug Fixes

• compiler-core: avoid double processing v-for keys with v-memo (#14861) (34a0ded), closes #14859
• compiler-sfc: resolve top-level exports from files registered as global types (#14805) (3d077f2), closes nuxt/nuxt#33694
• runtime-core: avoid repeated hydration mismatch checks (#14857) (170fc95), closes #14855
• runtime-core: skip idle persisted transition hooks in keep-alive moves (

[update-docs]

Thanks for opening this pull request! The maintainers of this repository would appreciate it if you would create a changelog item based on your changes.

[kw-security]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[DeepDiver1975]

Automated maintainer review (Claude Code review agent).

Summary: Grouped minor-and-patch dependency bump, 55 updates, manifest + pnpm-lock.yaml only (package.json across the workspace packages + lockfile). I verified every entry in the group table: all 55 are minor/patch by major version — no hidden major bumps. Two are pre-1.0 packages where a minor bump is technically semver-breaking and worth an eye (vite-plugin-node-polyfills 0.24.0 → 0.28.0, katex 0.16.45 → 0.17.0), but dependabot grouped them correctly.

Blocking — CI is red: build fails at pnpm check:types with a large batch of TypeScript errors, and check-tests-passed consequently fails. Examples from the build log:

• packages/design-system/src/components/OcTable/OcTable.vue — MouseEvent/FocusEvent not assignable to DragEvent.
• packages/web-app-files/src/components/Search/List.vue and SharedWithMeSection.vue — Item no longer has highlights / getDomSelector / shareRoles, and Item is not assignable to Resource. This strongly points at the fuse.js 7.3.0 → 7.4.2 bump changing its exported result/Item types.
• Multiple web-app-admin-settings / web-app-files views — unknown no longer narrows where it used to, suggesting tighter generics in one of the bumped type-emitting deps (candidates: fuse.js, vue 3.5.29 → 3.5.38, vue-tsc 3.1.4 → 3.3.5, @vue/*).

These are real type regressions surfaced by the group, not flaky infra. The PR cannot merge until the type errors are resolved — most likely by pinning/holding back the offending package(s) (start with fuse.js) or adapting the affected call sites in a follow-up.

Changelog: n/a — dependabot dependency bumps in this repo carry no changelog entry (consistent with recent merged dependabot PRs).

Verdict: Changes requested — fix the check:types failures before this can land. Not approving / not merging while CI is red.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud