chore(deps): bump the npm-minor-patch group across 1 directory with 6 updates by dependabot[bot] · Pull Request #75 · WKJBryan/Grafyn

dependabot · 2026-06-04T08:08:55Z

Bumps the npm-minor-patch group with 6 updates in the /frontend directory:

Package	From	To
dompurify	`3.4.7`	`3.4.8`
vue	`3.5.26`	`3.5.35`
@vitejs/plugin-vue	`6.0.3`	`6.0.7`
@vue/test-utils	`2.4.6`	`2.4.11`
msw	`2.12.7`	`2.14.6`
prettier	`3.7.4`	`3.8.3`

Updates dompurify from 3.4.7 to 3.4.8

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.8

Cleaned up the repository root, renamed some and removed unneeded files

Fixed an issue with handling of Trusted Types policies, thanks @fulstadev

Fixed the node iterator for better template scrubbing, thanks @IamLeandrooooo

Included formerly missing LICENSE-MPL in published npm package, thanks @asamuzaK

Bumped several dependencies where possible

Commits

bcdd828 release: 3.4.8 (#1439)
See full diff in compare view

Updates vue from 3.5.26 to 3.5.35

Release notes

Sourced from vue's releases.

v3.5.35

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.34

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.33

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.32

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.31

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.30

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.29

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.28

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.27

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.35 (2026-05-27)

Bug Fixes

compiler-core: avoid double processing v-for keys with v-memo (#14861) (34a0ded), closes #14859

compiler-sfc: resolve top-level exports from files registered as global types (#14805) (3d077f2), closes nuxt/nuxt#33694

runtime-core: avoid repeated hydration mismatch checks (#14857) (170fc95), closes #14855

runtime-core: skip idle persisted transition hooks in keep-alive moves (#14865) (80fc139), closes #14031

server-renderer: propagate sync errors from ssrRenderSuspense (#14804) (4760997), closes nuxt/nuxt#28162

teleport: skip child unmount when pending mount discarded (#14876) (#14877) (584beb1)

Performance Improvements

reactivity: skip type checks for cached proxies (#14860) (5734fe9)

runtime-dom: optimize array event handler dispatch (#14828) (bb18dc8)

server-renderer: avoid materializing iterables in ssrRenderList (#14821) (1b7a2cc)

3.5.34 (2026-05-06)

Bug Fixes

compiler-sfc: infer Vue ref wrapper types when source is unresolvable (#14758) (7f46fd4), closes #14729

compiler-sfc: preserve hash hrefs on <image> elements (#14756) (090b2e3)

compiler-sfc: resolve type re-exports inside declare global (#14766) (acfffe3)

reactivity: prevent orphan effect when created in a stopped scope (#14778) (c8e2d4a), closes #14777

runtime-core: avoid symbol coercion during props validation (#8539) (23d4fb5), closes #8487

suspense: avoid DOM leak with out-in transition in v-if fragment (#14762) (9667e0d), closes #14761

3.5.33 (2026-04-22)

Bug Fixes

compiler-sfc: handle nested :deep in selector pseudos (#14725) (bb9d265), closes #14724

reactivity: unlink effect scopes on out-of-order off (#14734) (e7659be), closes #14733

runtime-dom: preserve textarea resize dimensions (#14747) (11fb2fd), closes #14741

teleport: don't move teleport children if not mounted (#14702) (6a61f44), closes #14701

transition: preserve placeholder for conditional explicit default slots (#14748) (45990ce), closes #14727

3.5.32 (2026-04-03)

Bug Fixes

runtime-core: prevent currentInstance leak into sibling render during async setup re-entry (#14668) (f166353), closes #14667

... (truncated)

Commits

8be32d6 release: v3.5.35
80fc139 fix(runtime-core): skip idle persisted transition hooks in keep-alive moves (...
d6c7371 ci: use backup action for size report comments
bb18dc8 perf(runtime-dom): optimize array event handler dispatch (#14828)
5734fe9 perf(reactivity): skip type checks for cached proxies (#14860)
584beb1 fix(teleport): skip child unmount when pending mount discarded (#14876) (#14877)
34a0ded fix(compiler-core): avoid double processing v-for keys with v-memo (#14861)
170fc95 fix(runtime-core): avoid repeated hydration mismatch checks (#14857)
1b7a2cc perf(server-renderer): avoid materializing iterables in ssrRenderList (#14821)
3d077f2 fix(compiler-sfc): resolve top-level exports from files registered as global ...
Additional commits viewable in compare view

Updates @vitejs/plugin-vue from 6.0.3 to 6.0.7

Release notes

Sourced from @vitejs/plugin-vue's releases.

plugin-vue@6.0.7

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.6

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.5

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @vitejs/plugin-vue's changelog.

6.0.7 (2026-05-15)

Features

use carets for @rolldown/pluginutils version (#776) (941b651)

Bug Fixes

deps: update all non-major dependencies (#762) (9e825b8)

deps: update all non-major dependencies (#774) (77dc8bc)

6.0.6 (2026-04-13)

Features

plugin-vue: propagate multiRoot for template-only vapor components (#745) (9e07ae9)

Bug Fixes

deps: update all non-major dependencies (#738) (050c996)

Miscellaneous Chores

deps: update dependency rollup to ^4.59.0 (#749) (a0e1ef8)

remove unused deps (#760) (6d834d8)

6.0.5 (2026-03-12)

Miscellaneous Chores

remove Vite 8 beta from supported range (#746) (b3f23e4)

6.0.4 (2026-02-02)

Bug Fixes

deps: update all non-major dependencies (#709) (924b28e)

deps: update all non-major dependencies (#722) (8a95809)

deps: update all non-major dependencies (#726) (e69d751)

Miscellaneous Chores

add metadata for vite-plugin-registry (#730) (239eb6a)

deps: update dependency rollup to ^4.57.1 (#733) (cd0c8a8)

deps: update upstream (#727) (fa3ea0e)

Commits

f93aceb release: plugin-vue@6.0.7
941b651 feat: use carets for @rolldown/pluginutils version (#776)
77dc8bc fix(deps): update all non-major dependencies (#774)
9e825b8 fix(deps): update all non-major dependencies (#762)
51dbf4b release: plugin-vue@6.0.6
9e07ae9 feat(plugin-vue): propagate multiRoot for template-only vapor components (#745)
050c996 fix(deps): update all non-major dependencies (#738)
6d834d8 chore: remove unused deps (#760)
a0e1ef8 chore(deps): update dependency rollup to ^4.59.0 (#749)
6ad6cc1 release: plugin-vue@6.0.5
Additional commits viewable in compare view

Updates @vue/test-utils from 2.4.6 to 2.4.11

Release notes

Sourced from @vue/test-utils's releases.

v2.4.11

compare changes

🩹 Fixes

Drop legacy Mutation Event listener entries (#2844)

Handle setData() correctly for components using both setup() and data() (#2846)

Export GlobalMountOptions type (#2851)

Set spec-compliant event.code on keydown/keyup (#2850)

❤️ Contributors

Cédric Exbrayat (@cexbrayat)

Renato de Leão (@renatodeleao)

Matt Van Horn (@mvanhorn)

Carsten Brachem (@cbrachem)

Ahmad Hanan (@AhmadHannan037)

Paul Cochrane (@paultcochrane)

Arpit Jain (@arpitjain099)

v2.4.10

compare changes

🩹 Fixes

Restore text()/html() for single-root components (#2835)

❤️ Contributors

Cédric Exbrayat (@cexbrayat)

Lorenz van Herwaarden (@lorenzvanherwaarden)

v2.4.9

compare changes

🩹 Fixes

Tolerate duplicate attachTo cleanup (#2830)

📖 Documentation

Document release process (#2834)

🏡 Chore

Migrate renovate config (5d37934)

🤖 CI

Pin github actions to commit hashes (75dcef3)

... (truncated)

Commits

5e48e1e v2.4.11
b73ee1d chore(deps): update dependency oxfmt to v0.53.0
39e32ec chore(deps): update all non-major dependencies to v17.0.7 (#2881)
0621772 chore(deps): update actions/checkout digest to df4cb1c (#2880)
81fde07 chore(deps): update all non-major dependencies (#2879)
4ad4255 chore(deps): update dependency oxfmt to v0.52.0 (#2878)
8d3d26e chore(deps): update pnpm to v11.3.0 (#2877)
bc79eff chore(deps): update all non-major dependencies (#2876)
58db8f7 chore(deps): update all non-major dependencies (#2874)
9ad31cb chore: enable renovate minimum release age for npm
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @vue/test-utils since your current version.

Updates msw from 2.12.7 to 2.14.6

Release notes

Sourced from msw's releases.

v2.14.6 (2026-05-11)

Bug Fixes

defineNetwork: prevent event forwarding manually (#2740) (ccb40e08e3ef1dd80da217f74a1093be260a3f51) @kettanaito

v2.14.5 (2026-05-08)

Bug Fixes

ws: remove all frame listeners on client closure (#2739) (91a5d4131ceae9250acc40e0fa44b3c64f030d3e) @kettanaito

v2.14.4 (2026-05-07)

Bug Fixes

add finalize API for handler cleanup (#2738) (a288f5452970da6537ff31fce6b7f99eb620e563) @kettanaito

v2.14.3 (2026-05-04)

Bug Fixes

prevent frame abort listener leak (#2737) (c4567d2a398fb3315cebea4b66e9b79022ad569c) @kettanaito

v2.14.2 (2026-04-29)

Bug Fixes

export the NetworkApi type (#2734) (f0c03214b59f906ca8e92e3f0bb5d08fdf7d6f5e) @kettanaito

v2.14.1 (2026-04-29)

Bug Fixes

export default handler controllers (#2733) (f8dc874a236a4bd376c23cce9dd55ed59b8279e2) @kettanaito

v2.14.0 (2026-04-29)

Features

support ws.onUpgrade for handling connection upgrades (#2732) (e00e4d693db34884a316f659b8dcfb507cd79dce) @kettanaito

Bug Fixes

do not clone user-provided responses (#2731) (6953307c8061626d31a3651e69d47c885c0e4b76) @kettanaito

HttpResponse: forward cookies only when response is used (#2728) (30668e68f403535636bfb8dc12c64299d9c1c6e6) @kettanaito

v2.13.6 (2026-04-24)

Bug Fixes

... (truncated)

Commits

2befc51 chore(release): v2.14.6
ccb40e0 fix(defineNetwork): prevent event forwarding manually (#2740)
c07e09b chore(release): v2.14.5
91a5d41 fix(ws): remove all frame listeners on client closure (#2739)
d697485 chore(release): v2.14.4
a288f54 fix: add finalize API for handler cleanup (#2738)
de18888 chore(release): v2.14.3
c4567d2 fix: prevent frame abort listener leak (#2737)
4bc4a5c chore(release): v2.14.2
f0c0321 fix: export the NetworkApi type (#2734)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for msw since your current version.

Updates prettier from 3.7.4 to 3.8.3

Release notes

Sourced from prettier's releases.

3.8.3

SCSS: Prevent trailing comma in if() function (prettier/prettier#18471 by @kovsu)

🔗 Changelog

3.8.2

Support Angular v21.2

🔗 Changelog

3.8.1

Include available printers in plugin type declarations (#18706 by @porada)

🔗 Changelog

3.8.0

Support Angular v21.1

diff

🔗 Release note "Prettier 3.8: Support for Angular v21.1"

Changelog

Sourced from prettier's changelog.

3.8.3

diff

SCSS: Prevent trailing comma in `if()` function (#18471 by `@kovsu`)

// Input
$value: if(sass(false): 1; else: -1);
// Prettier 3.8.2
$value: if(
sass(false): 1; else: -1,
);
// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

3.8.2

diff

Angular: Support Angular v21.2 (#18722, #19034 by `@fisker`)

Exhaustive typechecking with @default never;

<!-- Input -->
@switch (foo) {
  @case (1) {}
  @default never;
}
<!-- Prettier 3.8.1 -->
SyntaxError: Incomplete block "default never". If you meant to write the @ character, you should use the "&#64;" HTML entity instead. (3:3)
<!-- Prettier 3.8.2 -->
@switch (foo) {
@case (1) {}
@default never;
}

arrow function and instanceof expressions.

</tr></table>

... (truncated)

Commits

d7108a7 Release 3.8.3
177f908 Prevent trailing comma in SCSS if() function (#18471)
1cd4066 Release @prettier/plugin-oxc@0.1.4
a8700e2 Update oxc-parser to v0.125.0
752157c Fix tests
053fd41 Bump Prettier dependency to 3.8.2
904c636 Clean changelog_unreleased
dc1f7fc Update dependents count
b31557c Release 3.8.2
96bbaed Support Angular v21.2 (#18722)
Additional commits viewable in compare view

dependabot · 2026-06-04T08:08:56Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

… updates Bumps the npm-minor-patch group with 6 updates in the /frontend directory: | Package | From | To | | --- | --- | --- | | [dompurify](https://github.com/cure53/DOMPurify) | `3.4.7` | `3.4.8` | | [vue](https://github.com/vuejs/core) | `3.5.26` | `3.5.35` | | [@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue) | `6.0.3` | `6.0.7` | | [@vue/test-utils](https://github.com/vuejs/test-utils) | `2.4.6` | `2.4.11` | | [msw](https://github.com/mswjs/msw) | `2.12.7` | `2.14.6` | | [prettier](https://github.com/prettier/prettier) | `3.7.4` | `3.8.3` | Updates `dompurify` from 3.4.7 to 3.4.8 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.4.7...3.4.8) Updates `vue` from 3.5.26 to 3.5.35 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](vuejs/core@v3.5.26...v3.5.35) Updates `@vitejs/plugin-vue` from 6.0.3 to 6.0.7 - [Release notes](https://github.com/vitejs/vite-plugin-vue/releases) - [Changelog](https://github.com/vitejs/vite-plugin-vue/blob/main/packages/plugin-vue/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-vue/commits/plugin-vue@6.0.7/packages/plugin-vue) Updates `@vue/test-utils` from 2.4.6 to 2.4.11 - [Release notes](https://github.com/vuejs/test-utils/releases) - [Commits](vuejs/test-utils@v2.4.6...v2.4.11) Updates `msw` from 2.12.7 to 2.14.6 - [Release notes](https://github.com/mswjs/msw/releases) - [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md) - [Commits](mswjs/msw@v2.12.7...v2.14.6) Updates `prettier` from 3.7.4 to 3.8.3 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.7.4...3.8.3) --- updated-dependencies: - dependency-name: "@vitejs/plugin-vue" dependency-version: 6.0.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@vue/test-utils" dependency-version: 2.4.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: dompurify dependency-version: 3.4.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: msw dependency-version: 2.14.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: prettier dependency-version: 3.8.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: vue dependency-version: 3.5.35 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-11T08:07:34Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/npm-minor-patch-92cf88fab6 branch from 17184e1 to 19d2e82 Compare June 9, 2026 09:32

dependabot Bot closed this Jun 11, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/frontend/npm-minor-patch-92cf88fab6 branch June 11, 2026 08:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the npm-minor-patch group across 1 directory with 6 updates#75

chore(deps): bump the npm-minor-patch group across 1 directory with 6 updates#75
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/npm-minor-patch-92cf88fab6

dependabot Bot commented on behalf of github Jun 4, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 4, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

DOMPurify 3.4.8

v3.5.35

v3.5.34

v3.5.33

v3.5.32

v3.5.31

v3.5.30

v3.5.29

v3.5.28

v3.5.27

3.5.35 (2026-05-27)

Bug Fixes

Performance Improvements

3.5.34 (2026-05-06)

Bug Fixes

3.5.33 (2026-04-22)

Bug Fixes

3.5.32 (2026-04-03)

Bug Fixes

plugin-vue@6.0.7

plugin-vue@6.0.6

plugin-vue@6.0.5

plugin-vue@6.0.4

6.0.7 (2026-05-15)

Features

Bug Fixes

6.0.6 (2026-04-13)

Features

Bug Fixes

Miscellaneous Chores

6.0.5 (2026-03-12)

Miscellaneous Chores

6.0.4 (2026-02-02)

Bug Fixes

Miscellaneous Chores

v2.4.11

🩹 Fixes

❤️ Contributors

v2.4.10

🩹 Fixes

❤️ Contributors

v2.4.9

🩹 Fixes

📖 Documentation

🏡 Chore

🤖 CI

v2.14.6 (2026-05-11)

Bug Fixes

v2.14.5 (2026-05-08)

Bug Fixes

v2.14.4 (2026-05-07)

Bug Fixes

v2.14.3 (2026-05-04)

Bug Fixes

v2.14.2 (2026-04-29)

Bug Fixes

v2.14.1 (2026-04-29)

Bug Fixes

v2.14.0 (2026-04-29)

Features

Bug Fixes

v2.13.6 (2026-04-24)

Bug Fixes

3.8.3

3.8.2

3.8.1

3.8.0

3.8.3

SCSS: Prevent trailing comma in if() function (#18471 by @​kovsu)

3.8.2

Angular: Support Angular v21.2 (#18722, #19034 by @​fisker)

Uh oh!

dependabot Bot commented on behalf of github Jun 4, 2026

Labels

Uh oh!

dependabot Bot commented on behalf of github Jun 11, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 4, 2026 •

edited

Loading

SCSS: Prevent trailing comma in `if()` function (#18471 by `@kovsu`)

Angular: Support Angular v21.2 (#18722, #19034 by `@fisker`)