Skip to content

build(deps): bump the frontend-major group across 1 directory with 5 updates - #7

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-major-f294d0dce3
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-major-f294d0dce3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026 •

Copy link
Copy Markdown

Bumps the frontend-major group with 5 updates in the /frontend directory:

Package From To
@aparajita/capacitor-secure-storage 7.1.6 8.0.1
@capacitor-mlkit/barcode-scanning 7.5.0 8.2.1
@vitest/coverage-v8 4.1.11 5.0.5
happy-dom 20.11.2 21.0.4
vitest 4.1.11 5.0.5

Updates @aparajita/capacitor-secure-storage from 7.1.6 to 8.0.1

Changelog

Sourced from @​aparajita/capacitor-secure-storage's changelog.

8.0.1 (2026-09-23)

Bug Fixes

  • android: read the clear prefix option under the name the JS layer sends (8adef50), closes #27
  • ensure the prefix is never blank (b122b2d), closes #27
  • point at unversioned symlink (9af9d1e)

8.0.0 (2026-02-10)

⚠ BREAKING CHANGES

  • complete Capacitor 8 upgrade configuration

Features

  • add CocoaPods support and complete demo restructure (4b4b143)
  • complete Capacitor 8 upgrade configuration (c9131e1)
  • demo: migrate iOS to Swift Package Manager (f6bd936)
  • ios: migrate to Swift Package Manager (8801801)
  • restructure demo into shared source with CocoaPods and SPM variants (50e4e35)

Bug Fixes

  • don’t lint before building demo (83de475)

8.0.0 (2026-02-04)

⚠ BREAKING CHANGES

  • complete Capacitor 8 upgrade configuration

Features

  • complete Capacitor 8 upgrade configuration (c9131e1)
  • demo: migrate iOS to Swift Package Manager (f6bd936)
  • ios: migrate to Swift Package Manager (8801801)

Bug Fixes

  • don’t lint before building demo (83de475)
Commits
  • 3b0d314 chore(release): 8.0.1
  • 5b0d6c2 chore: sync demo files
  • b122b2d fix: ensure the prefix is never blank
  • 6036460 chore: pnpm updated its config
  • 3ea110c chore: serena was updated, rewrote config
  • 47dc1b4 chore: migrate settings from package.json
  • 9af9d1e fix: point at unversioned symlink
  • 95b3c07 Merge pull request #28 from jeremy-friesen-qs/fix/clear-items-with-prefix-opt...
  • 8adef50 fix(android): read the clear prefix option under the name the JS layer sends
  • 43bc5c3 chore: fix pnpm bug in ionic cli
  • Additional commits viewable in compare view

Updates @capacitor-mlkit/barcode-scanning from 7.5.0 to 8.2.1

Release notes

Sourced from @​capacitor-mlkit/barcode-scanning's releases.

@​capacitor-mlkit/barcode-scanning@​8.2.1

Patch Changes

@​capacitor-mlkit/barcode-scanning@​8.1.1

Patch Changes

@​capacitor-mlkit/barcode-scanning@​8.1.0

Minor Changes

Patch Changes

@​capacitor-mlkit/barcode-scanning@​8.0.1

Patch Changes

@​capacitor-mlkit/barcode-scanning@​8.0.0

Major Changes

Patch Changes

Commits
  • 0fcd197 chore(release): publish (#357)
  • 7f1a366 chore: align all package versions via the changesets fixed group
  • 3e875a4 fix(barcode-scanning): deliver the scan(...) result via appRestoredResult...
  • 75ff3ed chore: upgrade to changesets/action@v2 and @changesets/cli@3 (#353)
  • 9f39a7e docs(barcode-scanning): cross-link embedded camera view from camera-visibilit...
  • 4a514f5 chore(release): publish (#348)
  • bcf95e2 docs: mention the new Barcode Scanner plugin as an SPM alternative (#350)
  • 40527f5 fix(barcode-scanning): resolve the interface orientation from the view's wind...
  • 84ed8bf chore(deps): update @capacitor/cli to 8.5.0
  • 898000d chore(barcode-scanning): add example app
  • Additional commits viewable in compare view

Updates @vitest/coverage-v8 from 4.1.11 to 5.0.5

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates happy-dom from 20.11.2 to 21.0.4

Release notes

Sourced from happy-dom's releases.

v21.0.4

👷‍♂️ Patch fixes

  • Fixed a code injection vulnerability in the ESM compiler - By @​capricorn86
  • Fixed cross-origin isolation so opaque-origin data: iframes cannot access their parent or top window - By @​capricorn86

v21.0.3

👷‍♂️ Patch fixes

  • Fixes security vulnerability where authorization header was forwarded when redirecting - By @​capricorn86

v21.0.2

👷‍♂️ Patch fixes

v21.0.1

👷‍♂️ Patch fixes

v21.0.0

💣 Breaking Changes

  • Disables CSS and IFrame loading by default to prevent server-side request forgery (SSRF) - By @​capricorn86
    • An attacker could embed <iframe> or <link rel="stylesheet"> elements in untrusted HTML to make Happy DOM send HTTP requests from the server to attacker-chosen URLs, including internal services. This could allow access to otherwise unreachable endpoints or trigger unintended actions, depending on the application and its network access.
    • The settings property disableCSSFileLoading has been deprecated
    • Added the new settings properties enableCSSFileLoading and enableIframePageLoading
    • If you don't believe that you are at risk, you can keep the same behavior as in <=v20.14.6 by sending in { enableCSSFileLoading: true, enableIframePageLoading: true } as broswer settings (e.g. new Window({ settings }));

v20.14.6

👷‍♂️ Patch fixes

v20.14.5

👷‍♂️ Patch fixes

v20.14.4

👷‍♂️ Patch fixes

  • End comments at the first comment end tag when it overlaps a comment start tag - By @​hampustagerud in task #2407

v20.14.3

👷‍♂️ Patch fixes

v20.14.2

👷‍♂️ Patch fixes

  • Fixes regression where not all CSS variables where resolved in getComputedStyle() - By @​klaesra in task #2344

v20.14.1

👷‍♂️ Patch fixes

v20.14.0

... (truncated)

Commits
  • fd16352 fix: Fixed a code injection vulnerability in the ESM compiler (#2537)
  • 75ab0fb fix: Fixed cross-origin isolation so opaque-origin data: iframes cannot acces...
  • 875ef5c fix: Fixes security vulnerability where authorization header was forwarded wh...
  • 1f3ffdf fix: Fixes SSRF security vulnerability by doing a target-origin bypass in the...
  • f55c7e0 chore: Update security documentation (#2509)
  • 2b91e68 fix: Adds alias for enabling CSS and iframe loading in server-renderer (#2503)
  • 0a99c75 BREAKING CHANGE: Disables CSS and IFrame loading by default (#2502)
  • f21dbd7 fix: Fixes cookie scope forgery vulnerability (#2477)
  • 0d4cdbe fix: #2409 Preserve character references in comment data (#2410)
  • 9c920a4 fix: #2407 End comments at the first comment end tag when it overlaps a com...
  • Additional commits viewable in compare view

Updates vitest from 4.1.11 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 22, 2026
…updates

Bumps the frontend-major group with 5 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@aparajita/capacitor-secure-storage](https://github.com/aparajita/capacitor-secure-storage) | `7.1.6` | `8.0.1` |
| [@capacitor-mlkit/barcode-scanning](https://github.com/capawesome-team/capacitor-mlkit) | `7.5.0` | `8.2.1` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.11` | `5.0.5` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `20.11.2` | `21.0.4` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.11` | `5.0.5` |



Updates `@aparajita/capacitor-secure-storage` from 7.1.6 to 8.0.1
- [Changelog](https://github.com/aparajita/capacitor-secure-storage/blob/main/CHANGELOG.md)
- [Commits](aparajita/capacitor-secure-storage@v7.1.6...v8.0.1)

Updates `@capacitor-mlkit/barcode-scanning` from 7.5.0 to 8.2.1
- [Release notes](https://github.com/capawesome-team/capacitor-mlkit/releases)
- [Commits](https://github.com/capawesome-team/capacitor-mlkit/compare/@capacitor-mlkit/barcode-scanning@7.5.0...@capacitor-mlkit/barcode-scanning@8.2.1)

Updates `@vitest/coverage-v8` from 4.1.11 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8)

Updates `happy-dom` from 20.11.2 to 21.0.4
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.11.2...v21.0.4)

Updates `vitest` from 4.1.11 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

---
updated-dependencies:
- dependency-name: "@aparajita/capacitor-secure-storage"
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: frontend-major
- dependency-name: "@capacitor-mlkit/barcode-scanning"
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: frontend-major
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-major
- dependency-name: happy-dom
  dependency-version: 21.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-major
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump the frontend-major group in /frontend with 5 updates build(deps): bump the frontend-major group across 1 directory with 5 updates Nov 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/frontend-major-f294d0dce3 branch from 860f5f6 to 1d52bad Compare November 1, 2026 16:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants