chore(deps): bump the vue-dependencies group with 5 updates by dependabot[bot] · Pull Request #115 · ashcoft/nextcloud-cad-viewer

dependabot · 2026-05-19T06:42:38Z

Bumps the vue-dependencies group with 5 updates:

Package	From	To
vue	`3.5.31`	`3.5.34`
vue-i18n	`10.0.8`	`11.4.4`
vue-router	`4.6.4`	`5.0.7`
vue-eslint-parser	`9.4.3`	`10.4.0`
vue-tsc	`2.2.12`	`3.3.0`

Updates vue from 3.5.31 to 3.5.34

Release notes

Sourced from vue's releases.

v3.5.34

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.33

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.32

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.34 (2026-05-06)

Bug Fixes

compiler-sfc: infer Vue ref wrapper types when source is unresolvable (#14758) (7f46fd4), closes #14729

compiler-sfc: preserve hash hrefs on <image> elements (#14756) (090b2e3)

compiler-sfc: resolve type re-exports inside declare global (#14766) (acfffe3)

reactivity: prevent orphan effect when created in a stopped scope (#14778) (c8e2d4a), closes #14777

runtime-core: avoid symbol coercion during props validation (#8539) (23d4fb5), closes #8487

suspense: avoid DOM leak with out-in transition in v-if fragment (#14762) (9667e0d), closes #14761

3.5.33 (2026-04-22)

Bug Fixes

compiler-sfc: handle nested :deep in selector pseudos (#14725) (bb9d265), closes #14724

reactivity: unlink effect scopes on out-of-order off (#14734) (e7659be), closes #14733

runtime-dom: preserve textarea resize dimensions (#14747) (11fb2fd), closes #14741

teleport: don't move teleport children if not mounted (#14702) (6a61f44), closes #14701

transition: preserve placeholder for conditional explicit default slots (#14748) (45990ce), closes #14727

3.5.32 (2026-04-03)

Bug Fixes

runtime-core: prevent currentInstance leak into sibling render during async setup re-entry (#14668) (f166353), closes #14667

teleport: handle updates before deferred mount (#14642) (32b44f1), closes #14640

types: allow customRef to have different getter/setter types (#14639) (e20ddb0)

types: use private branding for shallowReactive (#14641) (302c47a), closes #14638 #14493

Reverts

Revert "fix(server-renderer): cleanup component effect scopes after SSR render" (#14674) (219d83b), closes #14674 #14669

Commits

57545e9 release: v3.5.34
a3b2617 chore(deps): update dependency jsdom to ^29.1.1 (#14775)
23d4fb5 fix(runtime-core): avoid symbol coercion during props validation (#8539)
090b2e3 fix(compiler-sfc): preserve hash hrefs on \<image> elements (#14756)
9667e0d fix(suspense): avoid DOM leak with out-in transition in v-if fragment (#14762)
c8e2d4a fix(reactivity): prevent orphan effect when created in a stopped scope (#14778)
7f46fd4 fix(compiler-sfc): infer Vue ref wrapper types when source is unresolvable (#...
acfffe3 fix(compiler-sfc): resolve type re-exports inside declare global (#14766)
a037385 chore(deps): update build (#14759)
0bc56ff chore(deps): update pnpm to v10.33.3 (#14760)
Additional commits viewable in compare view

Updates vue-i18n from 10.0.8 to 11.4.4

Release notes

Sourced from vue-i18n's releases.

v11.4.4

What's Changed

⚡ Improvement Features

fix(security): harden javascript URL sanitization by @kazupon in intlify/vue-i18n#2503

Full Changelog: intlify/vue-i18n@v11.4.3...v11.4.4

v11.4.3

What's Changed

💥 Breaking Changes

chore!: drop Node.js 20 support by @kazupon in intlify/vue-i18n#2478

🔒 Security Fixes

security(ci): harden workflows and add zizmor audit by @kazupon in intlify/vue-i18n#2490

Full Changelog: intlify/vue-i18n@v11.4.2...v11.4.3

v11.4.2

What's Changed

⚡ Improvement Features

fix(formatter): pass component children as slots by @kazupon in intlify/vue-i18n#2474

Full Changelog: intlify/vue-i18n@v11.4.1...v11.4.2

v11.4.1

What's Changed

⚡ Improvement Features

fix(i18n-t): pass component children as slots by @kazupon in intlify/vue-i18n#2473

Full Changelog: intlify/vue-i18n@v11.4.0...v11.4.1

v11.4.0

What's Changed

🌟 Features

feat: support isolated scope by @kazupon in intlify/vue-i18n#2468

... (truncated)

Changelog

Sourced from vue-i18n's changelog.

v12.0.0-alpha.4 (2026-05-17T15:23:54Z)

This changelog is generated by GitHub Releases

What's Changed

🌟 Features

Part options support for $n by @mauryapari in intlify/vue-i18n#2170

feat: Part options support $d by @mauryapari in intlify/vue-i18n#2177

feat: compatible Vue3 vapor mode by @kazupon in intlify/vue-i18n#2299

feat(message-compiler): support escape sequence by @kazupon in intlify/vue-i18n#2394

feat!: Support automatic pluralization with Intl.PluralRules by @kazupon in intlify/vue-i18n#2400

feat: support isolated scope by @kazupon in intlify/vue-i18n#2404

🐛 Bug Fixes

fix: cannot resolve the ast messages which has json path by @kazupon in intlify/vue-i18n#2157

fix(typing): n() & d() output depending "part" option by @pinguet62 in intlify/vue-i18n#2193

Fix declaration order in Number formatting with options ResourceKeys must be before OptionsType by @louis49 in intlify/vue-i18n#2205

Fix: Adjust stub file paths for accurate resolution during rolldown build by @babu-ch in intlify/vue-i18n#2217

fix: revert vue devtools timeline listening code by @kazupon in intlify/vue-i18n#2359

fix(core-base): throw error when has string prototype key by @kazupon in intlify/vue-i18n#2402

fix(core-base): key paths containing javascript built-ins are handled inconsistently by @kazupon in intlify/vue-i18n#2403

fix: wrong $d type by @kazupon in intlify/vue-i18n#2405

fix: export conditions for node.js by @kazupon in intlify/vue-i18n#2408

fix: te returns false if the key contains a do by @kazupon in intlify/vue-i18n#2409

fix: modifiers skip missing translation keys by @kazupon in intlify/vue-i18n#2412

fix: Numeric named parameter overwrites plural parameter in pluralization by @kazupon in intlify/vue-i18n#2413

fix: Suppressing automatic locale fallback with ! breaks n/$n and d/$d formatting by @kazupon in intlify/vue-i18n#2418

fix: Resource Keys completion does not work with global messages and $t by @kazupon in intlify/vue-i18n#2421

fix: $n overloads use DefineNumberFormat instead of DefineDateTimeFormat by @babu-ch in intlify/vue-i18n#2459

fix: linked messages fail to resolve keys containing dots by @babu-ch in intlify/vue-i18n#2458

fix: backport CVE-2025-53892 (escapeParameterHtml DOM XSS hardening) to master by @vulgraph in intlify/vue-i18n#2470

💥 Breaking Changes

breaking: update component injection APIs for drop legacy by @kazupon in intlify/vue-i18n#2176

breaking: change MissingHandler 2nd parameter by @kazupon in intlify/vue-i18n#2358

breaking: deprecate register* global functions in favor of createI18n options by @kazupon in intlify/vue-i18n#2445

chore!: drop Node.js 20 support by @kazupon in intlify/vue-i18n#2487

⚡ Improvement Features

fix: update slot key filtering to exclude internal keys by @edison1105 in intlify/vue-i18n#2167

fix: improvement n and $n typings by @kazupon in intlify/vue-i18n#2174

Named, list, modifier examples by @mauryapari in intlify/vue-i18n#2186

fix: error on duplicate useI18n calling on local scope by @kazupon in intlify/vue-i18n#2204

fix: typo by @kazupon in intlify/vue-i18n#2222

Emit INVALID_TOKEN_IN_PLACEHOLDER on invalid palceholder token by @lutejka in intlify/vue-i18n#2252

fix: include vitest/node types to fix Vitest 4 type errors by @haoqunjiang in intlify/vue-i18n#2303

fix: useI18n implementation with provide-inject fully by @kazupon in intlify/vue-i18n#2357

refactor: reduce variable assignments and function calls by @BobbieGoede in intlify/vue-i18n#2392

fix: display message commpiler error strictly by @kazupon in intlify/vue-i18n#2410

fix: te function returns false although fallback exists by @kazupon in intlify/vue-i18n#2416

fix: Usage of n() and $n() with undefined should not throw errors by @kazupon in intlify/vue-i18n#2417

... (truncated)

Commits

99fd4bc release: v11.4.4
c9e1513 release: v11.4.3
478e894 chore!: drop Node.js 20 support (#2478)
7d618ff release: v11.4.2
7073775 release: v11.4.1
72e25ce release: v11.4.0
9280f21 release: v11.3.2
4089096 release: v11.3.1
5556517 fix: $n overloads use DefineNumberFormat instead of `DefineDateTimeFormat...
241f589 release: v11.3.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vue-i18n since your current version.

Updates vue-router from 4.6.4 to 5.0.7

Release notes

Sourced from vue-router's releases.

v5.0.7

   🚀 Features

Upgrade to babel 8 - by @posva (8d3e6)

Make defineParamParser() more intuitive - by @posva (8715b)

Upgrade @vue/devtools-api - by @posva (87c3a)

matcher: Hint at params: {} workaround in discarded params warning - by @posva and shanliuling in vuejs/router#2689 (c2b13)

param-parsers: Add include/exclude options - by @posva (91cde)

   🐞 Bug Fixes

matcher:

Finalize param token before processing escaped colon - by @babu-ch and @posva in vuejs/router#2654 (20521)

query:

Use Object.create(null) to prevent prototype pollution - by @wdskuki, wdsmini and @posva in vuejs/router#2661 (be88c)

resolve:

Omit empty optional params from resolved params - by @babu-ch and @posva in vuejs/router#2434 (1ef09)

types:

Wire RouteNamedMap via generated routes.d.ts - by @posva in vuejs/router#2700 (aef99)

unplugin:

Avoid generating empty routes - by @FrontEndDog and @posva in vuejs/router#2642 (10a8b)

Apply definePage path-param parser overrides - by @posva in vuejs/router#2699 (c8074)

volar:

Drop runtime @vue/language-core import - by @danielroe in vuejs/router#2710 (8af50)

    View changes on GitHub

v5.0.6

   🐞 Bug Fixes

Missing closing quote in generated import - by @zjy040525 and @posva in vuejs/router#2688 (32f78)

    View changes on GitHub

v5.0.5

   🚀 Features

Enable standard schema param parsers - by @posva (ea8e3)

Normalize param parsers once - by @posva (48087)

   🐞 Bug Fixes

Track definePage imports per-file to fix named view race condition - by @posva (11191)

Avoid double decoding hash on string location - by @posva (1578c)

    View changes on GitHub

v5.0.4

   🐞 Bug Fixes

... (truncated)

Commits

ddd20c3 release: vue-router@5.0.7
91cdec3 feat(param-parsers): add include/exclude options
8af50c9 fix(volar): drop runtime @vue/language-core import (#2710)
b840cd6 chore(ci): set least-privilege workflow token permissions (#2708)
51c1672 chore(release): use @clack/prompts
af77a7c chore: playground param type
641200a refactor(param-parsers): simplify defineParamParser
9b9896e chore: comments
d41897b refactor: wip of defineParamParser
17d51fb chore: logs
Additional commits viewable in compare view

Updates vue-eslint-parser from 9.4.3 to 10.4.0

Release notes

Sourced from vue-eslint-parser's releases.

v10.4.0

⚙️ Changes

feat: updated scope analyzer to mark variables as used to prevent false positives with no-useless-assignment by @ota-meshi in vuejs/vue-eslint-parser#288

Full Changelog: vuejs/vue-eslint-parser@v10.3.0...v10.4.0

v10.3.0

✨ Enhancements

Allow ESLint v10 as peer dependency by @FloEdelmann in vuejs/vue-eslint-parser#277

⚙️ Infrastructure Updates

test: move to vitest by @9romise in vuejs/vue-eslint-parser#269

feat: migrate to tsdown by @9romise in vuejs/vue-eslint-parser#266

Full Changelog: vuejs/vue-eslint-parser@v10.2.0...v10.3.0

v10.2.0

✨ Enhancements

refactor: drop lodash by @9romise in vuejs/vue-eslint-parser#268

Full Changelog: vuejs/vue-eslint-parser@v10.1.4...v10.2.0

v10.1.4

🐛 Bug Fixes

Fix comments order by @waynzh in vuejs/vue-eslint-parser#265

Full Changelog: vuejs/vue-eslint-parser@v10.1.3...v10.1.4

v10.1.3

🐛 Bug Fixes

Fix text token type in {{...}} with invalid expression by @woongsikchoi in vuejs/vue-eslint-parser#257

Full Changelog: vuejs/vue-eslint-parser@v10.1.2...v10.1.3

v10.1.2

🐛 Bug Fixes

Fix <textarea> content after }} causes invalid vue/no-parsing-error by @woongsikchoi in vuejs/vue-eslint-parser#256

Full Changelog: vuejs/vue-eslint-parser@v10.1.1...v10.1.2

v10.1.1

🐛 Bug Fixes

Fix wrong scope for generic attribute by @ota-meshi in vuejs/vue-eslint-parser#254

... (truncated)

Commits

199607f 10.4.0
20c2ed3 feat: updated scope analyzer to mark variables as used to prevent false posit...
fb0c8c6 10.3.0
1bf7ff5 chore: update test script
595c26d chore: use eslint v10 (#286)
67baef8 Allow ESLint v10 as peer dependency (#277)
ad2e815 test: update example title (#284)
df81b8f refactor: replace fs-extra with node:fs, cleanup dev deps (#281)
b310823 feat: upgrade tsdown, enable exports (#278)
52c3373 test: use vitest snapshot testing, update snapshot (#279)
Additional commits viewable in compare view

Updates vue-tsc from 2.2.12 to 3.3.0

Release notes

Sourced from vue-tsc's releases.

v3.3.0

Features

Refined Autocomplete for Component Props

Previously, we inferred props used for autocomplete from the component itself's type, which did not work well with components whose props need to be inferred dynamically, such as generics or discriminated unions.

Now, we have improved this feature to better align with TS behavior. See the following example:
<script lang="ts" setup>
  defineProps<
    | { type: "foo"; foo: string }
    | { type: "bar"; bar: string }
  >();
</script>
&lt;template>
<Self type="foo" :| />

<Self type="bar" :| />

</template>
When triggering completions at the two positions above, we will now get the props that are actually available in each corresponding case.

(PR: #5709)

Check Required Fallthrough Attributes

Consider the following structure:

<script lang="ts" setup>
  defineProps<{
    foo: string;
    bar: string;
  }>();
</script>

<script lang="ts" setup>
  import Basic from "./basic.vue";
</script>
&lt;template>
</tr></table>

... (truncated)

Changelog

Sourced from vue-tsc's changelog.

3.3.0 (2026-05-18)

language-core

feat: check required fallthrough attributes (#6049) - Thanks to @KazariEX!

fix: penetrate v-if branch fragments when collecting single root nodes - Thanks to @KazariEX!

refactor: rename Sfc APIs to IR - Thanks to @KazariEX!

language-service

fix: reuse ASTs for define assignment suggestions - Thanks to @KazariEX!

fix: re-support html.customData (#5910) - Thanks to @Bomberus!

fix: strip ="" only for plain boolean props completion edits - Thanks to @KazariEX!

fix: reset to default data provider after running with vue data provider - Thanks to @KazariEX!

typescript-plugin

feat: refine props completion logic to follow TS behavior (#5709) - Thanks to @KazariEX!

vscode

fix: include extraFileExtensions in tsserver configure request payload (#6048) - Thanks to @KazariEX!

fix: write typescript plugins at build time (#6050) - Thanks to @KazariEX!

fix: avoid infinite diagnostics on Vue files when project diagnostics is enabled (#6051) - Thanks to @KazariEX!

3.2.9 (2026-05-14)

language-core

fix: do not process inline markdown syntax in semantic-aware segments (#6038) - Thanks to @KazariEX!

perf: rewrite a subset of template node transforms (#5769) - Thanks to @KazariEX!

vscode

fix: trigger file rename edits when moving folders with Vue files (#6046) - Thanks to @KazariEX!

workspace

chore: bump volar services to 0.0.71 (#6043) - Thanks to @TRIS-H!

3.2.8 (2026-05-04)

language-core

fix: replace inline code blocks after sfc blocks processing (#6024) - Thanks to @KazariEX!

fix: support navigation for kebab-case declarations in GlobalComponents (#6026) - Thanks to @Gehbt!

language-service

feat: support TS module resolution for SCSS @import navigation (#6033) - Thanks to @KazariEX!

... (truncated)

Commits

1088dce v3.3.0 (#6052)
c8e90e4 v3.2.9 (#6045)
ae6f658 chore: refine package publish file lists
2d029c7 chore: bump deps
618bd6b v3.2.8 (#6036)
a7092ed v3.2.7 (#6018)
1e54c84 chore: bump typescript to 6.0.3 (#6017)
a954b9c fix(component-meta): preserve non-ASCII characters in prop default values (#6...
94907be v3.2.6 (#5996)
ee5041d v3.2.5 (#5974)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vue-tsc since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the vue-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [vue](https://github.com/vuejs/core) | `3.5.31` | `3.5.34` | | [vue-i18n](https://github.com/intlify/vue-i18n/tree/HEAD/packages/vue-i18n) | `10.0.8` | `11.4.4` | | [vue-router](https://github.com/vuejs/router) | `4.6.4` | `5.0.7` | | [vue-eslint-parser](https://github.com/vuejs/vue-eslint-parser) | `9.4.3` | `10.4.0` | | [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `2.2.12` | `3.3.0` | Updates `vue` from 3.5.31 to 3.5.34 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](vuejs/core@v3.5.31...v3.5.34) Updates `vue-i18n` from 10.0.8 to 11.4.4 - [Release notes](https://github.com/intlify/vue-i18n/releases) - [Changelog](https://github.com/intlify/vue-i18n/blob/master/CHANGELOG.md) - [Commits](https://github.com/intlify/vue-i18n/commits/v11.4.4/packages/vue-i18n) Updates `vue-router` from 4.6.4 to 5.0.7 - [Release notes](https://github.com/vuejs/router/releases) - [Commits](vuejs/router@v4.6.4...v5.0.7) Updates `vue-eslint-parser` from 9.4.3 to 10.4.0 - [Release notes](https://github.com/vuejs/vue-eslint-parser/releases) - [Commits](vuejs/vue-eslint-parser@v9.4.3...v10.4.0) Updates `vue-tsc` from 2.2.12 to 3.3.0 - [Release notes](https://github.com/vuejs/language-tools/releases) - [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md) - [Commits](https://github.com/vuejs/language-tools/commits/v3.3.0/packages/tsc) --- updated-dependencies: - dependency-name: vue dependency-version: 3.5.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: vue-dependencies - dependency-name: vue-i18n dependency-version: 11.4.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: vue-dependencies - dependency-name: vue-router dependency-version: 5.0.7 dependency-type: direct:production update-type: version-update:semver-major dependency-group: vue-dependencies - dependency-name: vue-eslint-parser dependency-version: 10.4.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: vue-dependencies - dependency-name: vue-tsc dependency-version: 3.3.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: vue-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript JavaScript related changes labels May 19, 2026

dependabot Bot requested a review from ashcoft as a code owner May 19, 2026 06:42

dependabot Bot added dependencies Pull requests that update a dependency file javascript JavaScript related changes labels May 19, 2026

ashcoft merged commit 2048766 into master May 19, 2026
6 of 27 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/vue-dependencies-b92afe8e69 branch May 19, 2026 10:04

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the vue-dependencies group with 5 updates#115

chore(deps): bump the vue-dependencies group with 5 updates#115
ashcoft merged 1 commit into
masterfrom
dependabot/npm_and_yarn/vue-dependencies-b92afe8e69

dependabot Bot commented on behalf of github May 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github May 19, 2026

v3.5.34

v3.5.33

v3.5.32

3.5.34 (2026-05-06)

Bug Fixes

3.5.33 (2026-04-22)

Bug Fixes

3.5.32 (2026-04-03)

Bug Fixes

Reverts

v11.4.4

What's Changed

⚡ Improvement Features

v11.4.3

What's Changed

💥 Breaking Changes

🔒 Security Fixes

v11.4.2

What's Changed

⚡ Improvement Features

v11.4.1

What's Changed

⚡ Improvement Features

v11.4.0

What's Changed

🌟 Features

v12.0.0-alpha.4 (2026-05-17T15:23:54Z)

What's Changed

🌟 Features

🐛 Bug Fixes

💥 Breaking Changes

⚡ Improvement Features

v5.0.7

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v5.0.6

🐞 Bug Fixes

View changes on GitHub

v5.0.5

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v5.0.4

🐞 Bug Fixes

v10.4.0

⚙️ Changes

v10.3.0

✨ Enhancements

⚙️ Infrastructure Updates

v10.2.0

✨ Enhancements

v10.1.4

🐛 Bug Fixes

v10.1.3

🐛 Bug Fixes

v10.1.2

🐛 Bug Fixes

v10.1.1

🐛 Bug Fixes

v3.3.0

Features

Refined Autocomplete for Component Props

Check Required Fallthrough Attributes

3.3.0 (2026-05-18)

language-core

language-service

typescript-plugin

vscode

3.2.9 (2026-05-14)

language-core

vscode

workspace

3.2.8 (2026-05-04)

language-core

language-service

Uh oh!

Uh oh!