build(deps): bump the npm-minor-patch group across 1 directory with 10 updates by dependabot[bot] · Pull Request #64 · mcocdaa/MeetFlow

dependabot · 2026-10-08T09:10:05Z

Bumps the npm-minor-patch group with 10 updates in the /frontend directory:

Package	From	To
@lucide/vue	`1.46.0`	`1.52.0`
@milkdown/crepe	`7.22.1`	`7.22.2`
@milkdown/kit	`7.22.1`	`7.22.2`
dompurify	`3.4.15`	`3.4.16`
marked	`18.0.13`	`18.0.14`
vue	`3.5.42`	`3.5.43`
jsdom	`30.0.1`	`30.1.2`
vite	`8.3.0`	`8.3.2`
vitest	`5.0.0`	`5.0.3`
vue-tsc	`3.3.11`	`3.3.12`

Updates @lucide/vue from 1.46.0 to 1.52.0

Release notes

Sourced from @lucide/vue's releases.

Version 1.52.0

What's Changed

fix(icons): changed wifi-cog icon by @karsa-mistmere in lucide-icons/lucide#4952

Full Changelog: lucide-icons/lucide@1.51.0...1.52.0

Version 1.51.0

What's Changed

fix(site): persist icon customizer by @karsa-mistmere in lucide-icons/lucide#4944

chore(deps): Upgrade to vite 8 by @ericfennis in lucide-icons/lucide#4950

feat(icons): added rugby-ball icon by @dev-mralph in lucide-icons/lucide#3496

chore(deps): bump the react-deps group across 1 directory with 3 updates by @dependabot[bot] in lucide-icons/lucide#4951

fix(react-native): stop forwarding arbitrary rest props to child shape elements by @cipherprofessor in lucide-icons/lucide#4903

test(lucide-solid): add Vite and SolidStart integration fixtures by @ericfennis in lucide-icons/lucide#4884

feat(icons): add door-closed-cog icon by @ajaxjiang96 in lucide-icons/lucide#4905

feat(icons): add text-align-justify-* icons by @HectorZaGa in lucide-icons/lucide#4942

chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 in the github-actions group across 1 directory by @dependabot[bot] in lucide-icons/lucide#4939

chore(deps): Upgrade to vitest 5 by @ericfennis in lucide-icons/lucide#4953

feat(icons): added wind-arrow-up icon by @jamesgpearce in lucide-icons/lucide#4501

fix(github/actions): move to daily release flow by @karsa-mistmere in lucide-icons/lucide#4911

feat(@lucide/solid): Support for Solid 2.0 RC by @davedbase in lucide-icons/lucide#4751

chore(deps-dev): bump the angular-deps group across 1 directory with 10 updates by @dependabot[bot] in lucide-icons/lucide#4954

chore(deps): bump nuxt from 4.4.8 to 4.5.1 by @dependabot[bot] in lucide-icons/lucide#4949

feat(icons): added armenian-dram icon by @Elawphant in lucide-icons/lucide#4456

feat(icons): add kazakh-tenge icon by @hkayrad in lucide-icons/lucide#4925

New Contributors

@dev-mralph made their first contribution in lucide-icons/lucide#3496

@cipherprofessor made their first contribution in lucide-icons/lucide#4903

@HectorZaGa made their first contribution in lucide-icons/lucide#4942

@jamesgpearce made their first contribution in lucide-icons/lucide#4501

@davedbase made their first contribution in lucide-icons/lucide#4751

@Elawphant made their first contribution in lucide-icons/lucide#4456

@hkayrad made their first contribution in lucide-icons/lucide#4925

Full Changelog: lucide-icons/lucide@1.50.0...1.51.0

Version 1.50.0

What's Changed

fix(shared): escape attribute values in buildLucideSvg by @Saadanjum0 in lucide-icons/lucide#4940

fix(github/actions): use canonical metadata instructions for PR suggestions by @karsa-mistmere in lucide-icons/lucide#4910

fix(icons): replaced nut & nut-off with compliant designs by @karsa-mistmere in lucide-icons/lucide#4840

chore(deps-dev): bump @angular/router from 22.1.7 to 22.2.0 by @dependabot[bot] in lucide-icons/lucide#4945

chore(deps): bump next from 16.3.4 to 16.3.6 by @dependabot[bot] in lucide-icons/lucide#4946

chore(deps-dev): bump the svelte-deps group with 2 updates by @dependabot[bot] in lucide-icons/lucide#4918

test(integrations): add Vue integration fixtures for Vite, Nuxt and Vike by @ericfennis in lucide-icons/lucide#4882

feat(svelte): export context subpath by @vugarbbakhishov-hub in lucide-icons/lucide#4927

fix(lucide-preact): add Preact v11 compatibility by @JoviDeCroock in lucide-icons/lucide#4924

feat(icons): added layout-grid-circles icon by @karsa-mistmere in lucide-icons/lucide#4567

... (truncated)

Commits

09aa9c5 chore(deps): Upgrade to vite 8 (#4950)
b0b1a4f chore(deps): bump the vue-deps group with 3 updates (#4893)
e32a4a2 Fix type lucide-vue (#4883)
See full diff in compare view

Updates @milkdown/crepe from 7.22.1 to 7.22.2

Release notes

Sourced from @milkdown/crepe's releases.

v7.22.2

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @milkdown/crepe's changelog.

7.22.2

Patch Changes

0c2f425: Milkdown patch version release.

Feat

feat(preset-commonmark): make block container types extensible via ctx (#2465)

Fix

fix(ctx): clear the timeout when a timer settles (#2473)

fix: keep user-authored inline br when loading markdown (#2463)

fix(plugin-streaming): parse inline math in streamed content (#2464)

Chore

chore: bump up all dependencies (#2459)

chore: bump up prosemirror-highlight version to ^0.16.0 (#2460)

chore: bump up vitest version to v4.1.11 [SECURITY] (#2474)

Docs

docs: apply a comment writing standard across the repo (#2468)

Test

test(preset-commonmark): pin fragment serialization semantics (#2466)

Updated dependencies [0c2f425]

@milkdown/kit@7.22.2

Commits

bbb8bcb chore: version packages (#2477)
920cded docs: apply a comment writing standard across the repo (#2468)
e2ce4cf fix(plugin-streaming): parse inline math in streamed content (#2464)
See full diff in compare view

Updates @milkdown/kit from 7.22.1 to 7.22.2

Release notes

Sourced from @milkdown/kit's releases.

v7.22.2

Please refer to CHANGELOG.md for details.

Commits

See full diff in compare view

Updates dompurify from 3.4.15 to 3.4.16

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.16

Fixed a problem with IN_PLACE node removal when working with hooks, thanks @manus-pi

Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @h-t-m

Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @ssi02014

Migrated from rollup to rolldown because performance, thanks @ssi02014

Bumped several dependencies where possible

Commits

b9b9d80 release: 3.4.16 (#1636)
See full diff in compare view

Updates marked from 18.0.13 to 18.0.14

Release notes

Sourced from marked's releases.

v18.0.14

18.0.14 (2026-09-22)

Bug Fixes

allow indented lines in setext heading text (#4095) (7d05530)

decode numeric character references in text (#4076) (cead8de)

keep text after empty nested blockquote (#4101) (1b89557), closes #4098

preserve internal tabs in list item content (#4086) (e136da7)

strip whitespace when normalizing link reference labels (#4091) (c7ee43a)

support GFM protocol autolinks (#4067) (7f7a496)

Commits

ef0704c chore(release): 18.0.14 [skip ci]
23c82ad chore: update deps (#4108)
1b89557 fix: keep text after empty nested blockquote (#4101)
7f7a496 fix: support GFM protocol autolinks (#4067)
5196d98 docs: add commonmark and gfm as versions in demo (#4094)
de2320a docs: add marked-gitlab to known extensions (#4092)
7d05530 fix: allow indented lines in setext heading text (#4095)
c7ee43a fix: strip whitespace when normalizing link reference labels (#4091)
cead8de fix: decode numeric character references in text (#4076)
e136da7 fix: preserve internal tabs in list item content (#4086)
Additional commits viewable in compare view

Updates vue from 3.5.42 to 3.5.43

Release notes

Sourced from vue's releases.

v3.5.43

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.43 (2026-09-17)

Bug Fixes

compiler-sfc: ignore comment delimiters inside strings and url() when parsing css vars (#15548) (2fde323)

compiler-sfc: prepend semicolon for await in switch case (#15498) (9a1df69), closes #15495

compiler-sfc: restore await scope when leaving nested blocks (5409708), closes #15465

compiler-sfc: reuse parsed parent configs across tsconfig walks (fix #15478) (#15480) (d6febaa)

hydration: run leave hooks for hydration placeholders (#15431) (5dda192)

reactivity: preserve readonly wrappers in array copy methods (#15469) (599f35b)

runtime-core: unmount v-once children after parent rerenders (#15435) (d720338)

shared: handle circular references in looseEqual (#15499) (718f782), closes #15496

shared: preserve comment-like text in style values (#15471) (b9456cb)

suspense: don't drop nested suspense patches during hydration (#15429) (76d42dc)

suspense: keep the boundary pending while its branch is patched (#15411) (bfcfe9e), closes #7506

suspense: patch a hydrating boundary's pending branch in place (#15432) (2cde6f7)

suspense: unmount the DOM an interrupted async component claimed (#15430) (fb9b45c)

types: keep optional props when a runtime prop uses a generic PropType (#15523) (243aabc), closes #9546

Commits

5be58b4 release: v3.5.43
a0b61aa chore: remove and ignore generated git hooks
2fde323 fix(compiler-sfc): ignore comment delimiters inside strings and url() when pa...
599f35b fix(reactivity): preserve readonly wrappers in array copy methods (#15469)
55a2b45 chore(deps): update pnpm to v12 (#15439)
243aabc fix(types): keep optional props when a runtime prop uses a generic PropType (...
718f782 fix(shared): handle circular references in looseEqual (#15499)
9a1df69 fix(compiler-sfc): prepend semicolon for await in switch case (#15498)
d6febaa fix(compiler-sfc): reuse parsed parent configs across tsconfig walks (fix #15...
b9456cb fix(shared): preserve comment-like text in style values (#15471)
Additional commits viewable in compare view

Updates jsdom from 30.0.1 to 30.1.2

Release notes

Sourced from jsdom's releases.

v30.1.2

Updated URLs to support Unicode v18.0.0 in internationalized domain names.

Reduced package size and memory use for CSS property definitions. (@scttcper)

Fixed severe slowdowns when building large DOM trees, including SVG charts with D3, which regressed in v30.1.0. (@cmdcolin)

Fixed exponentially slow reads of empty inherited CSS custom properties in deeply nested documents, and custom properties incorrectly inheriting past an initial reset. (@scttcper)

Fixed getComputedStyle() returning stale results after editing stylesheet declarations, selectors, or media queries, including in imported stylesheets.

Fixed selector matching and computed styles after changes to form control checkedness, indeterminacy, selection, values, and validity, including during form resets and canceled clicks.

Fixed computed styles for :focus, :focus-visible, :focus-within, and selectors containing them after focus changes, including inside focus and blur listeners. (@asamuzaK)

Fixed element.focus() incorrectly focusing elements hidden by 'display', including through shadow hosts and slots, and elements excluded by shadow DOM slot assignment. (@asamuzaK)

Fixed getComputedStyle() throwing for elements without inline-style support, including XML and MathML elements.

Fixed a memory leak where stylesheet parsing retained the last parsed stylesheet's window after window.close().

Fixed memory growth from long-lived MutationObserver instances retaining bookkeeping for garbage-collected nodes. (@scttcper)

Fixed retained select.selectedOptions collections becoming stale after selection changes and form resets.

Fixed rejection of negative CSS sizing values, including for 'min-width', 'min-height', 'max-width', and 'max-height', which regressed in v30.1.0.

Fixed handling of deeply nested color-mix() expressions, including exceptions during color resolution. (@asamuzaK)

v30.1.1

Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (@asamuzaK)

Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (@asamuzaK)

Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (@asamuzaK)

Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (@scttcper)

Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (@FedgeNo)

Fixed !important handling when updating CSS longhands after shorthands, using variables or CSS-wide keywords, and assigning style properties directly. (@FedgeNo)

Fixed <noscript> parsing with includeNodeLocations: true or inside frames to honor the runScripts option.

Fixed the storageQuota option being ignored by frames.

Fixed encoding detection of HTML and XML byte input to honor XML encoding declarations and detect UTF-16 without a byte order mark.

Fixed exceptions caused by truncated charset parameters in <meta> elements, and encoding detection incorrectly using incomplete <meta> tags. (@FedgeNo)

Fixed XML serialization errors for namespaces named constructor, toString, __proto__, or "null", and incorrect reuse of namespace prefixes declared on sibling elements.

Fixed element.innerHTML and element.outerHTML in XML documents to reject invalid characters in attribute values and avoid stack overflows on large strings.

Fixed selector matching for :lang(), :nth-child(... of ...) after mutations, and :has() with duplicate IDs or nested logical pseudo-classes. (@asamuzaK)

v30.1.0

jsdom is feeling the AGI!

This release is dedicated to @scttcper, who unleashed @codex upon jsdom and found tons of performance improvements. Along the way, he found and fixed many correctness issues as well.

We really appreciate his thoughtful PRs, which did a great job following the project's contribution guidelines, and were clearly human-curated, with their PR descriptions edited to be brief and respectful of the maintainers' time.

Thanks to @scttcper, as well as all the other contributors of this release (most of whom were AI-assisted).

Added named access to elements on document, such as document.myForm for <form name="myForm">. (@vojtisprime11)

Added QuotaExceededError, including its use for storage quota errors and oversized crypto.getRandomValues() requests.

Added support for the relaxed DOM naming rules when creating elements, attributes, and document types.

Improved performance of DOM construction, tree mutations, range operations, and live collection access, especially on large documents. (@scttcper, @erezrokah)

Improved performance of getComputedStyle(), style changes, and CSS serialization. (@scttcper, @jhult)

Improved performance of event dispatch, form control and label lookups, and updates to <select> elements and radio button groups. (@scttcper)

Reduced memory use when creating and working with DOM nodes, attributes, event listeners, and mutation observers. (@scttcper)

Changed window.close() to preserve access to the document and its DOM through retained references.

Fixed element.querySelectorAll() returning no matches when the first part of the selector matches the element itself, which regressed in v30.0.0. (@asamuzaK)

Fixed case sensitivity in CSS attribute selectors, including selectors matching data-state="", title="", and other case-sensitive values. (@asamuzaK)

... (truncated)

Commits

a23bfb7 30.1.2
64a75d2 Update dependencies and dev dependencies
7bf9653 Invalidate styles after CSSOM and control state changes
fe9009c Update focused area handling
a8d28b3 Release windows retained by stylesheet parsing
05a2c01 Deduplicate generated CSS property metadata
1efa190 Reduce generated CSS property data
a372e12 Avoid Document named-property rebuilds after irrelevant tree mutations
b2cd235 Update css-color
0542d2b Release idle MutationObserver bookkeeping
Additional commits viewable in compare view

Updates vite from 8.3.0 to 8.3.2

Release notes

Sourced from vite's releases.

v8.3.2

Bug Fixes

build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)

bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)

bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)

deps: update all non-major dependencies (#23601) (9944fa6)

deps: update rolldown-related dependencies (#23602) (88c1741)

html: resolve percent-encoded srcset urls (#23609) (53f1ce7)

limit size of object and array printing via forwardConsole (#23565) (e64a587)

merge build.rolldownOptions.output.minify correctly (#23536) (bba3bb8)

optimize-deps: avoid "unsupported" warnings for browser:false mappings (#23590) (5e4b9ca)

optimizer: preserve excluded optional peer require fallbacks (#23600) (a2bd6fa)

pass queries to renderBuiltUrl (#23586) (744269e)

server: handle file watcher errors without crashing (#23503) (6894f5c)

server: release previous environments after initialization (#23499) (5a3a010)

ssr: encode whitespace in module runner sourceURL (#23513) (bbc8812)

worker: align worker urls in client and server when using terser (#23614) (24bd331)

Performance Improvements

avoid encoding intermediate source maps (#23461) (89574f6)

build: avoid quadratic link scan in the preload helper (#23510) (cf5c028)

only register time middleware when debug logging is enabled (#23621) (94d0080)

Documentation

fix dead og-image PNG links in vite6/vite7 changelog entries (#23594) (1929b4c)

Miscellaneous Chores

deps: update vitest monorepo to v5 (#23604) (24339f4)

Code Refactoring

use tinyexec instead of cross-spawn (#23583) (db915e5)

Tests

bundled-dev: accept a rolldown dev runtime with no helper imports (#23606) (634745d)

v8.3.1

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)

deps: update all non-major dependencies (#23537) (e8990c4)

deps: update rolldown-related dependencies (#23483) (9aecbbf)

handle server.ws: false in mergeConfig (#23511) (f68c0d5)

merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)

optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)

... (truncated)

Changelog

Sourced from vite's changelog.

8.3.2 (2026-10-01)

Bug Fixes

build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)

bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)

bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)

deps: update all non-major dependencies (#23601) (9944fa6)

deps: update rolldown-related dependencies (#23602) (88c1741)

html: resolve percent-encoded srcset urls (#23609) (53f1ce7)

limit size of object and array printing via forwardConsole (#23565) (e64a587)

merge build.rolldownOptions.output.minify correctly (#23536) (bba3bb8)

optimize-deps: avoid "unsupported" warnings for browser:false mappings (#23590) (5e4b9ca)

optimizer: preserve excluded optional peer require fallbacks (#23600) (a2bd6fa)

pass queries to renderBuiltUrl (#23586) (744269e)

server: handle file watcher errors without crashing (#23503) (6894f5c)

server: release previous environments after initialization (#23499) (5a3a010)

ssr: encode whitespace in module runner sourceURL (#23513) (bbc8812)

worker: align worker urls in client and server when using terser (#23614) (24bd331)

Performance Improvements

avoid encoding intermediate source maps (#23461) (89574f6)

build: avoid quadratic link scan in the preload helper (#23510) (cf5c028)

only register time middleware when debug logging is enabled (#23621) (94d0080)

Documentation

fix dead og-image PNG links in vite6/vite7 changelog entries (#23594) (1929b4c)

Miscellaneous Chores

deps: update vitest monorepo to v5 (#23604) (24339f4)

Code Refactoring

use tinyexec instead of cross-spawn (#23583) (db915e5)

Tests

bundled-dev: accept a rolldown dev runtime with no helper imports (#23606) (634745d)

8.3.1 (2026-09-24)

Bug Fixes

deps: update all non-major dependencies (#23482) (3c752c8)

deps: update all non-major dependencies (#23537) (e8990c4)

deps: update rolldown-related dependencies (#23483) (9aecbbf)

handle server.ws: false in mergeConfig (#23511) (f68c0d5)

merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)

optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)

... (truncated)

Commits

1003321 release: v8.3.2 (#23623)
24bd331 fix(worker): align worker urls in client and server when using terser (#23614)
94d0080 perf: only register time middleware when debug logging is enabled (#23621)
89574f6 perf: avoid encoding intermediate source maps (#23461)
5a3a010 fix(server): release previous environments after initialization (#23499)
1929b4c docs: fix dead og-image PNG links in vite6/vite7 changelog entries (#23594)
6894f5c fix(server): handle file watcher errors without crashing (#23503)
cf5c028 perf(build): avoid quadratic link scan in the preload helper (#23510)
bba3bb8 fix: merge build.rolldownOptions.output.minify correctly (#23536)
5e4b9ca fix(optimize-deps): avoid "unsupported" warnings for browser:false mappings (...
Additional commits viewable in compare view

Updates vitest from 5.0.0 to 5.0.3

Release notes

Sourced from vitest's releases.

v5.0.3

   🐞 Bug Fixes

Isolate result.status between repeats runs - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11218 (5dbeb)

Don't print an interceptor warning in browser mode - by @sheremet-va in vitest-dev/vitest#11377 (15cc0)

Don't retry when test.fails expectedly failed - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11219 (b2458)

Scope cache key generators to projects - by @ecoyoung in vitest-dev/vitest#11281 and vitest-dev/vitest#11301 (92ba7)

browser:

Delay server listen until tests start running - by @sheremet-va in vitest-dev/vitest#11366 (7d8ed)

Check mock path boundaries - by @saryn17, Ryosei Sato and @sheremet-va in vitest-dev/vitest#11361 and vitest-dev/vitest#11362 (1c388)

Keep config of browser-consumed environments - by @kasperpeulen and Claude in vitest-dev/vitest#11378 (aafc0)

Ignore page crash while cancelling - by @sheremet-va in vitest-dev/vitest#11386 (7c367)

toMatchScreenshot uses wrong reference on retried tests - by @macarie in vitest-dev/vitest#11393 (c22ab)

cache:

Revalidate imports of cached modules - by @sheremet-va in vitest-dev/vitest#11381 (38f98)

deps:

Pin why-is-node-running to 3.2.1 to avoid users running into ERR_PNPM_TRUST_DOWNGRADE - by @AriPerkkio in vitest-dev/vitest#11403 (f6c9a)

expect:

Pass current equality testers to expect.extend asymmetric matchers - by @hi-ogawa, Hiroshi Ogawa and Claude in vitest-dev/vitest#11401 (3e794)

jsdom:

Support Blob on jsdom 30.1 - by @sheremet-va in vitest-dev/vitest#11379 (6c49b)

pool:

Preserve unique pool ids when groupOrder is set - by @mtorp in vitest-dev/vitest#11392 (50312)

ui:

Split-pane handle overlapping iframe - by @macarie in vitest-dev/vitest#11221 (f91db)

vitest:

Remove root temp dir on close - by @abhinav-phi in vitest-dev/vitest#11248 (7c711)

vm:

Do not optimize deps from index.html - by @ezefernandezyf, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11329 and vitest-dev/vitest#11360 (caf28)

Don't reuse scripts across vite environments - by @MO2k4, Martin Oehlert and Claude in vitest-dev/vitest#11395 (346d3)

    View changes on GitHub

v5.0.2

   🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in vitest-dev/vitest#11343

…0 updates Bumps the npm-minor-patch group with 10 updates in the /frontend directory: | Package | From | To | | --- | --- | --- | | [@lucide/vue](https://github.com/lucide-icons/lucide/tree/HEAD/packages/vue) | `1.46.0` | `1.52.0` | | [@milkdown/crepe](https://github.com/Milkdown/milkdown/tree/HEAD/packages/crepe) | `7.22.1` | `7.22.2` | | [@milkdown/kit](https://github.com/Milkdown/milkdown/tree/HEAD/packages/milkdown) | `7.22.1` | `7.22.2` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.4.15` | `3.4.16` | | [marked](https://github.com/markedjs/marked) | `18.0.13` | `18.0.14` | | [vue](https://github.com/vuejs/core) | `3.5.42` | `3.5.43` | | [jsdom](https://github.com/jsdom/jsdom) | `30.0.1` | `30.1.2` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.0` | `5.0.3` | | [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.3.11` | `3.3.12` | Updates `@lucide/vue` from 1.46.0 to 1.52.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.52.0/packages/vue) Updates `@milkdown/crepe` from 7.22.1 to 7.22.2 - [Release notes](https://github.com/Milkdown/milkdown/releases) - [Changelog](https://github.com/Milkdown/milkdown/blob/main/packages/crepe/CHANGELOG.md) - [Commits](https://github.com/Milkdown/milkdown/commits/v7.22.2/packages/crepe) Updates `@milkdown/kit` from 7.22.1 to 7.22.2 - [Release notes](https://github.com/Milkdown/milkdown/releases) - [Commits](https://github.com/Milkdown/milkdown/commits/v7.22.2/packages/milkdown) Updates `dompurify` from 3.4.15 to 3.4.16 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.4.15...3.4.16) Updates `marked` from 18.0.13 to 18.0.14 - [Release notes](https://github.com/markedjs/marked/releases) - [Commits](markedjs/marked@v18.0.13...v18.0.14) Updates `vue` from 3.5.42 to 3.5.43 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](vuejs/core@v3.5.42...v3.5.43) Updates `jsdom` from 30.0.1 to 30.1.2 - [Release notes](https://github.com/jsdom/jsdom/releases) - [Commits](jsdom/jsdom@v30.0.1...v30.1.2) Updates `vite` from 8.3.0 to 8.3.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.2/packages/vite) Updates `vitest` from 5.0.0 to 5.0.3 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest) Updates `vue-tsc` from 3.3.11 to 3.3.12 - [Release notes](https://github.com/vuejs/language-tools/releases) - [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md) - [Commits](https://github.com/vuejs/language-tools/commits/v3.3.12/packages/tsc) --- updated-dependencies: - dependency-name: "@lucide/vue" dependency-version: 1.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: "@milkdown/crepe" dependency-version: 7.22.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@milkdown/kit" dependency-version: 7.22.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: dompurify dependency-version: 3.4.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: marked dependency-version: 18.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: vue dependency-version: 3.5.43 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: jsdom dependency-version: 30.1.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: vite dependency-version: 8.3.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: vitest dependency-version: 5.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: vue-tsc dependency-version: 3.3.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-08T09:10:30Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults
Review profile: CHILL
Plan: Advanced
Run ID: 04f533e5-1b7c-4c9f-b83d-73d71229475a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 8, 2026

mcocdaa merged commit 9990ca9 into main Oct 8, 2026
4 checks passed

mcocdaa deleted the dependabot/npm_and_yarn/frontend/npm-minor-patch-dc071c5bf2 branch October 8, 2026 09:33

Navigation Menu

Repository navigation

build(deps): bump the npm-minor-patch group across 1 directory with 10 updates - #64

build(deps): bump the npm-minor-patch group across 1 directory with 10 updates#64
mcocdaa merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/npm-minor-patch-dc071c5bf2

dependabot Bot commented on behalf of github Oct 8, 2026

Feat

Fix

Chore

Docs

Test

Uh oh!

coderabbitai Bot commented Oct 8, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 8, 2026

Version 1.52.0

What's Changed

Version 1.51.0

What's Changed

New Contributors

Version 1.50.0

What's Changed

v7.22.2

7.22.2

Patch Changes

Feat

Fix

Chore

Docs

Test

v7.22.2

DOMPurify 3.4.16

v18.0.14

18.0.14 (2026-09-22)

Bug Fixes

v3.5.43

3.5.43 (2026-09-17)

Bug Fixes

v30.1.2

v30.1.1

v30.1.0

v8.3.2

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

Code Refactoring

Tests

v8.3.1

Bug Fixes

8.3.2 (2026-10-01)

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

Code Refactoring

Tests

8.3.1 (2026-09-24)

Bug Fixes

v5.0.3

🐞 Bug Fixes

View changes on GitHub

v5.0.2

🐞 Bug Fixes

Uh oh!

coderabbitai Bot commented Oct 8, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant