fix(deps): update npm dependencies updates

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@eslint/js (source)	9.37.0 → 9.39.2
@quasar/app-vite (source)	2.4.0 → 2.4.1
autoprefixer	10.4.21 → 10.4.24
cypress (source)	15.5.* → 15.10.*
dotenv	17.2.* → 17.3.*
eslint (source)	9.37.0 → 9.39.2
eslint-plugin-vue (source)	10.5.0 → 10.8.0
globals	16.4.0 → 16.5.0
jscpd	4.0.5 → 4.0.8
prettier (source)	3.6.2 → 3.8.1
quasar (source)	2.18.5 → 2.18.6
release-it	19.0.* → 19.2.*
vite-plugin-checker	^0.10.3 → ^0.12.0
vue (source)	3.5.20 → 3.5.28
vue-eslint-parser	10.2.0 → 10.3.0
vue-router (source)	4.5.1 → 4.6.4

---

Release Notes

eslint/eslint (@​eslint/js)

v9.39.2

Compare Source

v9.39.1

Compare Source

v9.39.0

Compare Source

v9.38.0

Compare Source

Features

• ce40f74 feat: update complexity rule to only highlight function header (#​20048) (Atul Nair)
• e37e590 feat: correct no-loss-of-precision false positives with e notation (#​20187) (Francesco Trotta)

Bug Fixes

• 50c3dfd fix: improve type support for isolated dependencies in pnpm (#​20201) (Francesco Trotta)
• a1f06a3 fix: correct SourceCode typings (#​20114) (Pixel998)

Documentation

• 462675a docs: improve web accessibility by hiding non-semantic character (#​20205) (루밀LuMir)
• c070e65 docs: correct formatting in no-irregular-whitespace rule documentation (#​20203) (루밀LuMir)
• b39e71a docs: Update README (GitHub Actions Bot)
• cd39983 docs: move custom-formatters type descriptions to nodejs-api (#​20190) (Percy Ma)

Chores

• d17c795 chore: upgrade @​eslint/js@​9.38.0 (#​20221) (Milos Djermanovic)
• 25d0e33 chore: package.json update for @​eslint/js release (Jenkins)
• c82b5ef refactor: Use types from @​eslint/core (#​20168) (Nicholas C. Zakas)
• ff31609 ci: add Node.js 25 to ci.yml (#​20220) (루밀LuMir)
• 004577e ci: bump github/codeql-action from 3 to 4 (#​20211) (dependabot[bot])
• eac71fb test: remove use of nodejsScope option of eslint-scope from tests (#​20206) (Milos Djermanovic)
• 4168a18 chore: fix typo in legacy-eslint.js (#​20202) (Sweta Tanwar)
• 205dbd2 chore: fix typos (#​20200) (ntnyq)
• dbb200e chore: use team member's username when name is not available in data (#​20194) (Milos Djermanovic)
• 8962089 chore: mark deprecated rules as available until v11.0.0 (#​20184) (Pixel998)

quasarframework/quasar (@​quasar/app-vite)

v2.4.1

Compare Source

Changes

• feat(app-vite;app-webpack): vue-router v5 support (#​18222)
• feat(app-vite): Add --silent option to prepare command (#​18213)
• fix(app-vite): improve pnpm monorepo support for capacitor (#​18218)
• fix(config): update electron-builder config outdated link (#​18225)

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If you are interested in supporting this project, please consider the following:

• Becoming a sponsor on Github
• One-off donation via PayPal

postcss/autoprefixer (autoprefixer)

v10.4.24

Compare Source

• Made Autoprefixer a little faster (by @​Cherry).

v10.4.23

Compare Source

• Reduced dependencies (by @​hyperz111).

v10.4.22

Compare Source

• Fixed stretch prefixes on new Can I Use database.
• Updated fraction.js.

cypress-io/cypress (cypress)

v15.10.0

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-10-0

v15.9.0

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-9-0

v15.8.2

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-8-2

v15.8.1

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-8-1

v15.8.0

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-8-0

v15.7.1

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-7-1

v15.7.0

Compare Source

v15.6.0

Compare Source

Changelog: https://docs.cypress.io/app/references/changelog#15-6-0

motdotla/dotenv (dotenv)

v17.3.1

Compare Source

Changed

• Fix as2 example command in README and update spanish README

v17.3.0

Compare Source

Added

• Add a new README section on dotenv’s approach to the agentic future.

Changed

• Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

v17.2.4

Compare Source

Changed

• Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#​915)

• Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.

eslint/eslint (eslint)

v9.39.2

Compare Source

v9.39.1

Compare Source

v9.39.0

Compare Source

v9.38.0

Compare Source

Features

• ce40f74 feat: update complexity rule to only highlight function header (#​20048) (Atul Nair)
• e37e590 feat: correct no-loss-of-precision false positives with e notation (#​20187) (Francesco Trotta)

Bug Fixes

• 50c3dfd fix: improve type support for isolated dependencies in pnpm (#​20201) (Francesco Trotta)
• a1f06a3 fix: correct SourceCode typings (#​20114) (Pixel998)

Documentation

• 462675a docs: improve web accessibility by hiding non-semantic character (#​20205) (루밀LuMir)
• c070e65 docs: correct formatting in no-irregular-whitespace rule documentation (#​20203) (루밀LuMir)
• b39e71a docs: Update README (GitHub Actions Bot)
• cd39983 docs: move custom-formatters type descriptions to nodejs-api (#​20190) (Percy Ma)

Chores

• d17c795 chore: upgrade @​eslint/js@​9.38.0 (#​20221) (Milos Djermanovic)
• 25d0e33 chore: package.json update for @​eslint/js release (Jenkins)
• c82b5ef refactor: Use types from @​eslint/core (#​20168) (Nicholas C. Zakas)
• ff31609 ci: add Node.js 25 to ci.yml (#​20220) (루밀LuMir)
• 004577e ci: bump github/codeql-action from 3 to 4 (#​20211) (dependabot[bot])
• eac71fb test: remove use of nodejsScope option of eslint-scope from tests (#​20206) (Milos Djermanovic)
• 4168a18 chore: fix typo in legacy-eslint.js (#​20202) (Sweta Tanwar)
• 205dbd2 chore: fix typos (#​20200) (ntnyq)
• dbb200e chore: use team member's username when name is not available in data (#​20194) (Milos Djermanovic)
• 8962089 chore: mark deprecated rules as available until v11.0.0 (#​20184) (Pixel998)

vuejs/eslint-plugin-vue (eslint-plugin-vue)

v10.8.0

Compare Source

Minor Changes

• Added more Promise functions to vue/no-async-in-computed-properties (#​3020)

• Added ignoreVBindObject option to vue/attributes-order (#​3012)

• Added allowEmptyAlias option to vue/valid-v-for (#​3011)

• Added ESLint v10 as an allowed peer dependency (needs eslint-parser-vue v10.3.0) (#​2962)

• Added new destructure: "only-when-assigned" option to vue/define-props-destructuring and changed default value from destructure: "always" to destructure: "only-when-assigned" (#​3009)

Patch Changes

• Fixed vue/no-unused-vars to detect components passed as slot props (#​3008)

v10.7.0

Compare Source

Minor Changes

• Added new -error config variants, with all rules' severity set to error: strongly-recommended-error, recommended-error, vue2-strongly-recommended-error, vue2-recommended-error (along with their flat config equivalents) (#​2796)
• Added new vue/no-literals-in-template rule (#​3000)
• Added new vue/no-undef-directives rule (#​2990)
• Added new ignoreEOLComments option to vue/no-multi-spaces rule (#​2989)
• Changed vue/no-negated-v-if-condition suggestion to autofix (#​2984)
• Added TypeScript support for eslint-plugin-vue development (#​2916)

Patch Changes

• Fixed false positives in vue/define-props-destructuring rule when imported types are passed to defineProps (#​2995)
• Updated Vue 3 export names resources: added DirectiveModifiers (#​2996)
• Updated Vue 3 export names resources: added nodeOps and patchProp (#​2986)

v10.6.2

Compare Source

Patch Changes

• Fixed false positives in non-intersecting conditions in vue/no-duplicate-class-names and correctly detect duplicates in combining expressions (#​2980)
• Fixed false positives for TSImportType in vue/script-indent rule (#​2969)
• Improved performance and type safety in vue/prefer-use-template-ref (#​2982)

v10.6.1

Compare Source

Patch Changes

• Fixed false positives for comments outside <template> in vue/no-multiple-template-root rule (#​2964)

v10.6.0

Compare Source

Minor Changes

• Updated vue/no-import-compiler-macros to clarify that macros are not allowed outside <script setup> (#​2938)

• Added new vue/no-duplicate-class-names rule (#​2934)

Patch Changes

• Fixed vue/no-v-html rule to allow ignoring call expressions (#​2950)

• Improved vue/define-macros-order error messages to distinguish between macro placement and ordering issues (#​2953)

• Updated dependency postcss-selector-parser to v7.1.0 (#​2947)

v10.5.1

Compare Source

Patch Changes

• Fixed vue/no-negated-v-if-condition rule to swap entire elements (#​2941)

sindresorhus/globals (globals)

v16.5.0

Compare Source

• Update globals (2025-11-01) (#​316) 6d441ca
• Add Vue, Svelte, and Astro globals (#​314) ea31521

---

kucherenko/jscpd (jscpd)

v4.0.8

Compare Source

v4.0.7

Compare Source

v4.0.6

Compare Source

prettier/prettier (prettier)

v3.8.1

Compare Source

v3.8.0

Compare Source

diff

🔗 Release note

v3.7.4

Compare Source

diff

LWC: Avoid quote around interpolations (#​18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>

<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>

<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#​18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;

// Prettier 3.7.3
type Foo = /** comment */ (/** comment */ a | b) | c;

// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#​18395 by @​fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);

// Prettier 3.7.3 (first format)
type X = (A | B) &
  (// comment
  A | B);

// Prettier 3.7.3 (second format)
type X = (
  | A
  | B // comment
) &
  (A | B);

// Prettier 3.7.4
type X = (A | B) &
  // comment
  (A | B);

v3.7.3

Compare Source

diff

API: Fix prettier.getFileInfo() change that breaks VSCode extension (#​18375 by @​fisker)

An internal refactor accidentally broke the VSCode extension plugin loading.

v3.7.2

Compare Source

diff

JavaScript: Fix string print when switching quotes (#​18351 by @​fisker)

// Input
console.log("A descriptor\\'s .kind must be \"method\" or \"field\".")

// Prettier 3.7.1
console.log('A descriptor\\'s .kind must be "method" or "field".');

// Prettier 3.7.2
console.log('A descriptor\\\'s .kind must be "method" or "field".');

JavaScript: Preserve quote for embedded HTML attribute values (#​18352 by @​kovsu)

// Input
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

// Prettier 3.7.1
const html = /* HTML */ ` <div class=${styles.banner}></div> `;

// Prettier 3.7.2
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;

TypeScript: Fix comment in empty type literal (#​18364 by @​fisker)

// Input
export type XXX = {
  // tbd
};

// Prettier 3.7.1
export type XXX = { // tbd };

// Prettier 3.7.2
export type XXX = {
  // tbd
};

v3.7.1

Compare Source

diff

API: Fix performance regression in doc printer (#​18342 by @​fisker)

Prettier 3.7.1 can be very slow when formatting big files, the regression has been fixed.

v3.7.0

Compare Source

diff

🔗 Release Notes

release-it/release-it (release-it)

v19.2.4

Compare Source

• chore: update dependencies to resolve security vulnerabilities (#​1273) (b45dd1a) - thanks @​Yeom-JinHo!
• Update a few dev deps (cd8acdc)

v19.2.3

Compare Source

• Reuse generated changelog (316dbfa)
• Remove obsolete eslint compat packages/config (f6cc8f3)
• Update remark-preset-webpro and fix broken links (6e6dd4b)

v19.2.2

Compare Source

• Improve getChangelog method (7a56364)

v19.2.1

Compare Source

• Improve commit prompt (b7aca7c)
• Remedy potential edge case in template helper (5c0a6ee)

v19.2.0

Compare Source

• Add option to exit gracefully (e1f825d)
• Update dependencies (424c9f6)
• Auto-format docs (06f41bb)
• fix: add shell mode for npm commands on windows (#​1266) (382e346) - thanks @​julienbenac!
• Feat: Add publishPackageManager config option in NPM plugin to allow using different package manager for publishing (e.g. Bun) (#​1169) (0dafc0b) - thanks @​chrispader!
• Only use --workspaces=false with npm (12bb89c)
• Fix up docs/types a bit (05a5986)
• Format (c9d6ebf)

v19.1.0

Compare Source

• Ignore .npmrc (8ccd060)
• Update lockfile (c4cd2ba)
• Support interactive shell in non-CI mode for 2FA flow (resolve #​1263) (a10b20d)
• Add --workspaces=false to get rid of the null/matches error (14a4907)
• Remove npm config env var warnings (b8c1247)
• doc(readme): add release-it-beautiful-changelog plugin to list of plugins (#​1261) (1b68c21)
• Add 403 to consider resource alive (7969849)

v19.0.6

Compare Source

• Update list of projects using release-it (92b49d3)
• Bump github/codeql-action from 2 to 4 (#​1253) (21309d3) - thanks @​dependabot[bot]!
• Bump actions/setup-node from 5 to 6 (#​1255) (3fbaab1) - thanks @​dependabot[bot]!
• Test in node 24 (7a12b12)
• Upgrade c12 (resolve #​1254) (1f48d03)

fi3ework/vite-plugin-checker (vite-plugin-checker)

v0.12.0

Compare Source

   🚀 Features

• biome: Add watchPath option  -  by @​tokoroga-dokkoi in #​590 (8732c)

   🐞 Bug Fixes

• deps:
  • Update dependency tinyglobby to ^0.2.15  -  in #​592 (2a455)
  • Update dependency vue to ^3.5.22  -  in #​595 (e141c)
  • Update dependency vitepress to ^1.6.4  -  in #​593 (ba3c5)
  • Update dependency vue to ^3.5.24  -  in #​608 (b72bb)

    View changes on GitHub

v0.11.0

Compare Source

   🚨 Breaking Changes

• Use node built-in instead of strip-ansi  -  by @​danielroe in #​588 (66a10)

   🚀 Features

• oxlint: Add support for oxlint  -  by @​raidorev in #​578 (61408)

   🐞 Bug Fixes

• Address merge conflict with strip-ansi  -  by @​danielroe (bac91)
• deps: Update dependency strip-ansi to ^7.1.2  -  in #​587 (5ddc1)

    View changes on GitHub

vuejs/core (vue)

v3.5.28

Compare Source

Bug Fixes

• transition: avoid unexpected cancelled parameter in transition done callback (#​14391) (6798853)
• compiler-sfc: add resolution trying for .mts/.cts files (#​14402) (c09d41f), closes vuejs/router#2611
• compiler-sfc: no params were generated when using withDefaults (#​12823) (b0a1f05), closes #​12822
• reactivity: add __v_skip flag to EffectScope to prevent reactive conversion (#​14359) (48b7552), closes #​14357
• runtime-core: avoid retaining el on cached text vnodes during static traversal (#​14419) (4ace79a), closes #​14134
• runtime-core: prevent child component updates when style remains unchanged (#​12825) (57866b5), closes #​12826
• runtime-core: properly handle async component update before resolve (#​11619) (e71c26c), closes #​11617
• runtime-dom: handle null/undefined handler in withModifiers (#​14362) (261de54), closes #​14361
• teleport: properly handling disabled teleport target anchor (#​14417) (d7bcd85), closes #​14412
• transition-group: correct move translation under scale via element rect (#​14360) (0243a79), closes #​14356
• useTemplateRef: don't update setup ref for useTemplateRef key (#​12756) (fc40ca0), closes #​12749

v3.5.27

Compare Source

Bug Fixes

• compile-sfc: correctly handle variable shadowing in for loop for defineProps destructuring. (#​14296) (6a1bb50), closes #​14294
• compiler-sfc: handle indexed access types in declare global blocks (#​14260) (e4091fe), closes #​14236
• compiler-sfc: use correct scope when resolving indexed access types from external files (#​14297) (f0f0a21), closes #​14292
• reactivity: collection iteration should inherit iterator instance methods (#​12644) (3c8b2fc), closes #​12615
• runtime-core: skip patching reserved props for custom elements (#​14275) (19cc7e2), closes #​14274
• server-renderer: use ssrRenderClass helper for className attribute (#​14327) (a4708f3)
• ssr: handle v-bind modifiers during render attrs (#​14263) (c2f5964), closes #​14262

v3.5.26

Compare Source

Bug Fixes

• compat: fix compat handler of draggable (#​12445) (ed85953), closes #​12444
• compat: handle v-model deprecation warning with missing appContext (#​14203) (945a543), closes #​14202
• compiler-sfc: demote const reactive bindings used in v-model (#​14214) (e24ff7d), closes #​11265 #​11275
• compiler-ssr: handle ssr attr fallthrough when preserve whitespace (#​12304) (4783118), closes #​8072
• hmr: handle cached text node update (#​14134) (69ce3c7), closes #​14127
• keep-alive: use resolved component name for async components in cache pruning (#​14212) (dfe667c), closes #​14210
• runtime-core: ensure correct anchor el for deeper unresolved async components (#​14182) (f5b3bf2), closes #​14173
• runtime-core: handle patch stable fragment edge case (#​12411) (94aeb64), closes #​12410
• runtime-core: pass component instance to flushPreFlushCbs on unmount (#​14221) (e857e12), closes #​14215

Performance Improvements

• compiler-core: use binary-search to get line and column (#​14222) (1904053)

v3.5.25

Compare Source

Bug Fixes

• compiler: share logic for comments and whitespace (#​13550) (2214f7a)
• provide: warn when using provide after mounting (#​13954) (247b2c2), closes #​13921 #​13924
• reactivity: correctly wrap iterated array items to preserve their readonly status (#​14120) (301020b)
• reactivity: toRef edge cases for ref unwrapping (#​12420) (0d2357e)
• runtime-core: keep options API typing intact when expose is used (#​14118) (8f82f23), closes #​14117 vuejs/language-tools#5069
• suspense: defer clearing fallback vnode el in case it has dirs ([#&[DepShield] (CVSS 8.8) Vulnerability due to usage of minimist:1.2.0 #8

---

Configuration

📅 Schedule: Branch creation - "before 8am on monday" in timezone Europe/Paris, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.