Bump the npm-minor-and-patch group across 1 directory with 2 updates

[dependabot]

Bumps the npm-minor-and-patch group with 2 updates in the / directory: mqtt5-wasm and vue.

Updates mqtt5-wasm from 1.0.0 to 1.3.0

Changelog

Sourced from mqtt5-wasm's changelog.

[mqtt5 0.25.0] / [mqttv5-cli 0.23.0] / [mqtt5-wasm 1.3.0] - 2026-03-15

Added

• QUIC connection migration - Client and server support for seamless network address changes
  • MqttClient::migrate() triggers connection migration via Endpoint::rebind() to a new UDP socket
  • Server-side detection via ClientHandler::check_quic_migration() polling Connection::remote_address() after each packet
  • ResourceMonitor::update_connection_ip() atomically transitions per-IP connection tracking
  • All streams, subscriptions, and sessions survive migration transparently
  • Non-QUIC transports return a descriptive error; not-connected state returns NotConnected

[mqtt5-protocol 0.11.0] / [mqtt5 0.24.0] / [mqttv5-cli 0.22.0] / [mqtt5-wasm 1.2.0] - 2026-03-14

Added

• Server redirect via CONNACK - Load balancer support using MQTT v5.0 UseAnotherServer (0x9C) reason code
  • LoadBalancerConfig with consistent-hash backend selection based on client ID
  • BrokerConfig::with_load_balancer() and --load-balancer-backend CLI flag (repeatable)
  • Client automatically follows up to 3 redirect hops
  • Both UseAnotherServer and ServerMoved (0x9D) reason codes handled
  • WASM broker support via addLoadBalancerBackend()/clearLoadBalancerBackends() on BrokerConfig
  • WASM client returns structured {type: "redirect", url: "..."} error for application-level handling
  • MqttError::UseAnotherServer variant for clean redirect error propagation
  • TLS redirect preserves CA certificate configuration across redirect hops
  • Empty client IDs distribute across backends via monotonic counter (not static hash)

Fixed

• select_backend panic on empty backends - Returns Option<&str> instead of indexing empty vec

[mqtt5-protocol 0.10.0] / [mqtt5 0.23.0] / [mqttv5-cli 0.21.0] / [mqtt5-wasm 1.1.0] - 2026-03-13

Added

• Per-client outbound rate limiting - max_outbound_rate_per_client config limits messages/second delivered to each subscriber; hot-reloadable via SIGHUP (native) and config change (WASM)
• PublishAction event hooks - on_client_publish now returns PublishAction (Continue, Handled, Transform) for intercepting and modifying publishes before routing
• ServerDeliveryStrategy config - Broker-side QUIC delivery strategy (ControlOnly, PerTopic, PerPublish) replaces client-driven stream strategy for server-to-client data paths
• Datagram type discrimination - QUIC datagram receiver distinguishes MQTT packets from non-MQTT datagrams instead of treating all as errors
• Unidirectional QUIC streams - Data streams changed from bidirectional to unidirectional for server-to-client delivery, reducing resource overhead
• QUIC flow control tuning - Configurable stream receive window (256KB), connection receive window (1MB), and send window (1MB)
• Stale subscription cleanup - Router periodically removes subscriptions for disconnected clients during storage cleanup cycle
• --quic-delivery-strategy CLI flag - Broker CLI option to set server delivery strategy
• --trace-dir bench flag - Per-message trace CSV output for latency analysis with topic, sequence, stream ID, and timing columns
• Bench HOL blocking metrics - inter_topic_spread, detrended_correlation, spike_isolation_ratio, and inter_arrival_cluster_ratio metrics in HOL mode JSON output
• Bench payload sequence numbers - Raw payload format now encodes a 4-byte sequence number at offset 8 for message ordering analysis
• WebSocket bridge support - WASM broker addBridgeWebSocket() and BridgeConnection.connect_ws() for WebSocket-based bridge connections

Changed

• BREAKING: PublishPacket.stream_id - New stream_id: Option<u64> field on PublishPacket and Message (mqtt5-protocol)

... (truncated)

Commits

• See full diff in compare view

Updates vue from 3.5.32 to 3.5.33

Release notes

Sourced from vue's releases.

v3.5.33

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.33 (2026-04-22)

Bug Fixes

• compiler-sfc: handle nested :deep in selector pseudos (#14725) (bb9d265), closes #14724
• reactivity: unlink effect scopes on out-of-order off (#14734) (e7659be), closes #14733
• runtime-dom: preserve textarea resize dimensions (#14747) (11fb2fd), closes #14741
• teleport: don't move teleport children if not mounted (#14702) (6a61f44), closes #14701
• transition: preserve placeholder for conditional explicit default slots (#14748) (45990ce), closes #14727

Commits

• 3310eea release: v3.5.33
• bb9d265 fix(compiler-sfc): handle nested :deep in selector pseudos (#14725)
• 60402cd Revert "chore(deps): update pnpm/action-setup action to v6" (#14749)
• 11fb2fd fix(runtime-dom): preserve textarea resize dimensions (#14747)
• 974e2d2 chore(deps): update test (#14713)
• 45990ce fix(transition): preserve placeholder for conditional explicit default slots ...
• 6a61f44 fix(teleport): don't move teleport children if not mounted (#14702)
• e7659be fix(reactivity): unlink effect scopes on out-of-order off (#14734)
• 268115d chore: update pnpm config (#14694)
• 24f26f4 chore(deps): update pnpm/action-setup action to v6 (#14716)
• Additional commits viewable in compare view