Bump the frontend-dependencies group across 1 directory with 24 updates

[dependabot]

Bumps the frontend-dependencies group with 24 updates in the /frontend/app directory:

Package	From	To
@primeuix/themes	2.0.3	3.0.0
js-cookie	3.0.5	3.0.8
keycloak-js	26.2.3	26.2.4
pinia	3.0.4	4.0.2
primeicons	7.0.0	8.0.0
primevue	4.5.4	5.0.0
vue	3.5.30	3.5.40
vue-router	4.5.1	5.2.0
@eslint/js	9.39.4	10.0.1
@types/node	25.5.0	26.1.1
@vitejs/plugin-vue	5.2.4	6.0.8
@vue/test-utils	2.4.6	2.4.11
dependency-cruiser	17.3.10	18.1.0
eslint	9.39.4	10.7.0
eslint-plugin-vue	10.8.0	10.9.2
globals	17.4.0	17.7.0
jsdom	26.1.0	29.1.1
sass	1.89.2	1.101.0
typescript	5.7.3	7.0.2
typescript-eslint	8.58.0	8.64.0
vite	6.4.2	8.1.5
vitest	3.2.4	4.1.10
vue-eslint-parser	10.4.0	10.4.1
vue-tsc	3.2.6	3.3.7

Updates @primeuix/themes from 2.0.3 to 3.0.0

Commits

• See full diff in compare view

Updates js-cookie from 3.0.5 to 3.0.8

Release notes

Sourced from js-cookie's releases.

v3.0.8

• Restore ES5 compatibility, inadvertently broken in 3.0.7 - #959
• Lift Node version restriction, inadvertently restricted to >= 20 in 3.0.7 - #956

v3.0.7

• Prevent cookie attribute injection: CVE-2026-46625 (eb3c40e)
• Add Partitioned attribute to readme (b994768)
• Publish to npm registry via trusted publisher exclusively (4dc71be)
• Ensure consistent behaviour for get('name') + get() (1953d30)

Commits

• d7a1096 Craft v3.0.8 release
• 248e685 Use existing Chrome with puppeteer
• fc04269 Remove QUnit related workaround in Grunt config
• 265a685 Tidy up package lock file
• 478e591 Disable Node deprecation DEP0044 for release workflow
• 331d524 Fix node version config for E2E test job
• 11d773d Ensure ECMAScript compatibility
• d788646 Remove engines property from package
• e7d9a4d Fix typo in test assertion message
• b5fca24 Make credentials use explicit in release workflow
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for js-cookie since your current version.

Updates keycloak-js from 26.2.3 to 26.2.4

Release notes

Sourced from keycloak-js's releases.

26.2.4

Commits

• dabf89c Set version to 26.2.4
• 7abc00c Add release notes for 26.2.4 (#298)
• 7c1d5ed Close in-app browser before awaiting token exchange in Cordova adapter (#285)
• c4c4d8f Bump @​keycloak/keycloak-admin-client from 26.5.7 to 26.6.1 (#296)
• 59ab675 Bump @​types/node from 25.5.2 to 25.6.0 (#295)
• 0541a72 Bump @​types/node from 25.5.0 to 25.5.2 (#292)
• 8a842d3 Bump @​keycloak/keycloak-admin-client from 26.5.6 to 26.5.7 (#291)
• 569b021 Bump @​playwright/test from 1.58.2 to 1.59.1 (#290)
• 94a3fb7 Bump @​keycloak/keycloak-admin-client from 26.5.5 to 26.5.6 (#286)
• 2f98347 Bump @​types/node from 25.4.0 to 25.5.0 (#284)
• Additional commits viewable in compare view

Updates pinia from 3.0.4 to 4.0.2

Commits

• ae4e3b2 release: pinia@4.0.2 @​pinia/testing@​2.0.1
• 0203b2d ci: fix size check
• 39aae41 refactor: build configuration (#3158)
• 75009b0 release: pinia@4.0.1
• 2ed563c chore: update pinia readme
• fb21766 fix: Re-add missing types exports field (#3154)
• d797385 fix(ci): pin pnpm to 11.7.0 to match action-setup bootstrap
• bd3d9b3 ci: install pnpm standalone to avoid self-switch crash in release
• acad9f2 ci: pin pnpm version in release workflow
• 1374c9d release: pinia@4.0.0 @​pinia/testing@​2.0.0 @​pinia/nuxt@​1.0.0
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for pinia since your current version.

Updates primeicons from 7.0.0 to 8.0.0

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by mert.sincan, a new releaser for primeicons since your current version.

Updates primevue from 4.5.4 to 5.0.0

Release notes

Sourced from primevue's releases.

PrimeVue 4.5.5

What's Changed

• fix: use ordered list for Timeline component to improve accessibility by @​montgomery1944 in primefaces/primevue#8155

New Contributors

• @​montgomery1944 made their first contribution in primefaces/primevue#8155

Full Changelog: primefaces/primevue@4.5.4...4.5.5

Changelog

Sourced from primevue's changelog.

Changelog

4.5.5 (2026-04-08)

Full Changelog

Implemented New Features and Enhancements:

• Timeline: use ordered list for Timeline component to improve accessibility #8155

Fixed bugs:

• Tree: add filteredNodes to Tree filter event and forward filter event in TreeSelect #8525
• PrimeIcons: Missing EXPAND key in PrimeIcons #8524
• broken zIndex with global primevue zIndex undefined #8523
• Galleria ZIndex Clear throws error when container is unmounted in fullscreen #8519
• Splitter does not re-initialize when SplitterPanel :size prop changes reactively #8517
• AutoComplete enter key behavior #8516
• TieredMenu: popup menu does not reposition when triggered from different elements #8509
• Select: option selection can run when overlay is already hidden #8508
• Date column filters cannot take in strings to compare #8506
• DataTable cannot handle sparse arrays #8503
• Tooltip elements are not being removed from the DOM when hideDelay is active #8480
• Splitter does not initialize panels added dynamically via v-if after mount #8477
• Tab: TabPanel slot types missing scope when asChild is true #8470
• DatePicker Range throws TypeError on days before 12/1/1969 #8469
• DatePicker manual input fails when using custom AM/PM locale labels #8462
• DataTable Column Filter Overlay requires double click to close after internal interaction #8460
• Autocomplete's clear event not emitted when clicking the clear X button #8459
• MultiSelect with optionValue object and display="chip" removes 2 chips instead of 1 #8456
• DatePicker: externally updated modelValue can open with incorrect header year #8455
• InputNumber: Cursor freezes after first digit when using currency="PYG" and locale="es-PY" #8453
• DataTable/VirtualScroller: Table errors when virtual loading true and no loading slot provided #8451
• DatePicker throws error when v-model is initialized with string value #8450
• DatePicker: year-change event emits inconsistent month values depending on navigation method #8436
• Select options still selectable after dropdown is hidden #8431
• Select - Filter - Only able to type one character when Input is not focused #8427
• FileUpload: TypeError on drag events when component unmounts #8424
• FormField.d.ts exports duplicate FormEmits type colliding with Form #8420
• TreeTable: missing types #8419
• ScrollPanel: horizontal scroll bar goes outside the content div when scrollXRatio is too small #8415
• Datepicker overlay loses focus capture when selecting different month or year #8402
• InputOTP allows paste when readonly #8401
• TieredMenu: hasSubmenu holds items (array) instead of boolean #8397
• InputNumber allows paste input when disabled #8391
• Splitter seperator role should be on gutter-handle not gutter #8381
• Step and StepPanel not reactive after mount #8377
• SpeedDial: MenuItem disabled not working at all #8375
• TreeTable: TreeNode children are not sorted #8361
• Tree: Expose dropPosition or relativePosition in node-drop event #8360

... (truncated)

Commits

• See full diff in compare view

Updates vue from 3.5.30 to 3.5.40

Release notes

Sourced from vue's releases.

v3.5.40

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.39

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.38

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.37

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.35

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.34

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.33

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.32

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.31

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.40 (2026-07-16)

Bug Fixes

• compiler-core: avoid leaking slot branch keys (#15051) (20c9d26), closes #15048
• hydration: pass namespace when patching dynamic props (#15082) (e0d2723), closes #15081 #15050
• reactivity: handle effect removal during scope stop (#15084) (378f978), closes #15083
• runtime-core: skip lazy hydration for detached roots (#15092) (97f3525), closes #15091
• runtime-core: unwind dangling blocks when slot content throws (#15071) (ddc132d), closes #15070
• runtime-dom: respect current select model type (#15010) (eb89e93), closes #15009
• server-renderer: handle errors in optimized component renders (#12601) (474907c), closes #12575
• server-renderer: remove package dependency cycle (#15063) (4d35eca)
• shared: prevent SSR comment escaping from creating closing delimiters (#15045) (bd962bb)
• types: don't constrain component $el type to Element (#15040) (164460a)

3.5.39 (2026-06-25)

Bug Fixes

• compiler-core: correct filter rewrite recursion (#14959) (be7ce31)
• hydration: force patch dynamic props when hydrating (#9083) (024cf06), closes #9033
• hydration: respect data-allow-mismatch on conditional branches (#12801) (164af63), closes #12782
• reactivity: avoid triggering effects when set fails (#14964) (e450973)
• runtime-core: handle non-isomorphic block element update (#15002) (932ddd0), closes #6385
• runtime-core: normalize function children for elements and Teleport (#9108) (2f374cd), closes #9107
• runtime-core: pause tracking when invoking function refs (#14985) (3ac052b)
• runtime-core: preserve once event listener name (#8341) (87b73b6), closes #8342
• runtime-dom: preserve option modifier event names (#8338) (4b659e6), closes #8334
• ssr: dedupe inherited scope ids during vnode rendering (#15005) (027da6b), closes #12159 #12175
• ssr: resolve nested async teleport content (#9431) (31d0f23), closes #6207
• teleport: handle teleport unmount edge case (#12705) (671997a), closes #12702
• types: support named tuple emits (#12676) (232f402), closes #12673
• types: validate defineModel defaults (#14968) (747f57e), closes #14966

3.5.38 (2026-06-11)

3.5.37 (2026-06-11)

3.5.36 (2026-06-11)

Bug Fixes

• compiler-core: avoid crash on CDATA at the document root (#14916) (0ea17e2)
• compiler-core: prefix dynamic keys on v-memo elements (#14922) (68e978e), closes #14920
• compiler-sfc: handle vue-ignore on leading intersection/union type (#14950) (0dcd225), closes #12254
• compiler-sfc: respect var hoisting in props destructure (48ad452)
• reactivity: preserve watch callback return value when wrapped for once: true (#14902) (450a8a8)
• runtime-core: add dev warning for silent catch in compat mode and fix test description typo (#14891) (db3e117)

... (truncated)

Commits

• fa2885d release: v3.5.40
• 20c9d26 fix(compiler-core): avoid leaking slot branch keys (#15051)
• 7da6334 Revert "fix(runtime-core): pause tracking when invoking function refs" (#15094)
• 90aecb1 chore(deps): update all non-major dependencies (#15026)
• 97f3525 fix(runtime-core): skip lazy hydration for detached roots (#15092)
• fe1c0f8 chore(deps): update test (#15025)
• e41c45a chore(deps): update dependency conventional-changelog to v8 (#15078)
• 3eb66a9 chore(deps): update actions/cache action to v6 (#15076)
• 40178dd chore(deps): update lint (#15075)
• 7f122b9 chore(deps): update dependency conventional-changelog-angular to v9 (#15079)
• Additional commits viewable in compare view

Updates vue-router from 4.5.1 to 5.2.0

Release notes

Sourced from vue-router's releases.

v5.2.0

   🚀 Features

• Add helpful diagnostics  -  by @​posva in vuejs/router#2737 (628fe)

   🐞 Bug Fixes

• Allow pinia 4  -  by @​posva (16535)
• scroll: Ignore stale async scrollBehavior results  -  by @​baozjj and @​cursoragent in vuejs/router#2730 (303df)
• unplugin: Reject invalid hex digits in [x+hh] character codes  -  by @​greymoth-jp in vuejs/router#2744 (4d967)

    View changes on GitHub

v5.1.0

   🚀 Features

• Typed definePage params.path  -  by @​posva in vuejs/router#2716 (d65de)
• Strict type for definePage param default  -  by @​posva (0ae10)
• Support raw param parsers  -  by @​posva (eadec)
• Force array type raw param parsers  -  by @​posva (7a68b)
• Allow overriding the global Router type  -  by @​posva (1cd93)
• Emit runtime warning for invalid format in query params  -  by @​posva (8259a)
• Override useRouter() return with experimental types config  -  by @​posva (39a34)
• Allow string as a param parser for convenience  -  by @​posva (be37b)

   🐞 Bug Fixes

• Fix auto import fixes and make experimental esm only  -  by @​posva (db3a6)
• Deterministic param parser types order  -  by @​posva (bf0fc)
• Avoid importing unused param parsers  -  by @​posva (41c00)
• Filter invalid query params without failing to match  -  by @​posva (db717)
• Detect not set format  -  by @​posva (aa89e)
• Allow undefined values for params in query  -  by @​posva (4726e)
• experimental: Repeatable params in subsegments  -  by @​posva (84664)
• types: Add vite as optional peer dependency  -  by @​ForgottenR, @​posva and shihuijie in vuejs/router#2712 (facbf)

    View changes on GitHub

v5.0.7

   🚀 Features

• Upgrade to babel 8  -  by @​posva (8d3e6)
• Make defineParamParser() more intuitive  -  by @​posva (8715b)
• Upgrade @vue/devtools-api  -  by @​posva (87c3a)
• matcher: Hint at params: {} workaround in discarded params warning  -  by @​posva and shanliuling in vuejs/router#2689 (c2b13)
• param-parsers: Add include/exclude options  -  by @​posva (91cde)

   🐞 Bug Fixes

• matcher:

... (truncated)

Commits

• 6e5f8d2 release: vue-router@5.2.0
• 1653533 fix: allow pinia 4
• f634b2f docs: improve compat
• d4319be chore: up ts where possible
• b5b5f94 ci: pin image
• 680e905 ci: update playwright image
• 385ca6b chore: up lint, babel and others
• 92ff264 chore: up deps minor and patches
• feed382 ci: bump the actions group with 3 updates (#2745)
• 4d96741 fix(unplugin): reject invalid hex digits in [x+hh] character codes (#2744)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vue-router since your current version.

Updates @eslint/js from 9.39.4 to 10.0.1

Release notes

Sourced from @​eslint/js's releases.

v10.0.1

Bug Fixes

• c87d5bd fix: update eslint (#20531) (renovate[bot])
• d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)
• 04c2147 fix: update error message for unused suppressions (#20496) (fnx)
• 38b089c fix: update dependency @​eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

• 5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)
• 6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)
• b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

• e5c281f chore: updates for v9.39.3 release (Jenkins)
• 8c3832a chore: update @​typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)
• 8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)
• 37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)
• da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)
• 84fb885 chore: package.json update for @​eslint/js release (Jenkins)
• 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

• f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)
• a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)
• c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)
• fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)
• 3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)
• 501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])
• ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)
• 96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)
• c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)
• 208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)
• a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)
• a89059d feat!: Program range span entire source text (#20133) (Pixel998)
• 39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)
• f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)
• aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)
• f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)
• 4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)
• 523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)
• 454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)
• 4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)
• f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)
• c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

• bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)
• 290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)
• 43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits

• 84fb885 chore: package.json update for @​eslint/js release
• 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
• f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
• b4b3127 chore: package.json update for @​eslint/js release
• 0b14059 chore: package.json update for @​eslint/js release
• fa31a60 feat!: add name to configs (#20015)
• 1e2cad5 chore: package.json update for @​eslint/js release
• 454a292 feat!: update eslint:recommended configuration (#20210)
• c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
• See full diff in compare view

Updates @types/node from 25.5.0 to 26.1.1

Commits

• See full diff in compare view

Updates @vitejs/plugin-vue from 5.2.4 to 6.0.8

Release notes

Sourced from @​vitejs/plugin-vue's releases.

plugin-vue@6.0.8

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.7

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.6

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.5

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.4

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.3

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.2

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.1

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.0

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.0-beta.2

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.0-beta.1

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.0-beta.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​vitejs/plugin-vue's changelog.

6.0.8 (2026-07-14)

Features

• plugin-vue: add forced vapor mode option (#766) (d59c3c0)

Bug Fixes

• deps: update all non-major dependencies (#781) (d369e5a)

6.0.7 (2026-05-15)

Features

• use carets for @rolldown/pluginutils version (#776) (941b651)

Bug Fixes

• deps: update all non-major dependencies (#762) (9e825b8)
• deps: update all non-major dependencies (#774) (77dc8bc)

6.0.6 (2026-04-13)

Features

• plugin-vue: propagate multiRoot for template-only vapor components (#745) (9e07ae9)

Bug Fixes

• deps: update all non-major dependencies (#738) (050c996)

Miscellaneous Chores

• deps: update dependency rollup to ^4.59.0 (#749) (a0e1ef8)
• remove unused deps (#760) (6d834d8)

6.0.5 (2026-03-12)

Miscellaneous Chores

• remove Vite 8 beta from supported range (#746) (b3f23e4)

6.0.4 (2026-02-02)

Bug Fixes

• deps: update all non-major ...

  Description has been truncated