chore(deps): bump the production-dependencies group with 6 updates

[dependabot]

Bumps the production-dependencies group with 6 updates:

Package	From	To
@paypal/paypal-js	9.5.0	9.6.0
@stripe/stripe-js	9.1.0	9.2.0
@vitejs/plugin-vue	6.0.5	6.0.6
primevue	4.5.4	4.5.5
vite	8.0.5	8.0.8
vue-i18n	11.3.1	11.3.2

Updates @paypal/paypal-js from 9.5.0 to 9.6.0

Release notes

Sourced from @​paypal/paypal-js's releases.

@​paypal/paypal-js@​9.6.0

Minor Changes

• 6dee5e0: Add Google Pay component types to v6 SDK
• bec655c: Added eligibility API typings for Card Fields and created card fields test file for its types

Patch Changes

• 3524480: Prevent prototype polluction security risk for sdkBaseUrl destructuring of the prototype change by adding Object.prototype.hasOwnProperty.call()

Changelog

Sourced from @​paypal/paypal-js's changelog.

9.6.0

Minor Changes

• 6dee5e0: Add Google Pay component types to v6 SDK
• bec655c: Added eligibility API typings for Card Fields and created card fields test file for its types

Patch Changes

• 3524480: Prevent prototype polluction security risk for sdkBaseUrl destructuring of the prototype change by adding Object.prototype.hasOwnProperty.call()

Commits

• 561eef1 Version Packages (#868)
• fd4d818 Merge branch 'main' into feature/4229-card-fields-eligibility-types
• 6dee5e0 feat(types): add typescript types for googlepay (#855)
• 3524480 fix: prevent prototype pollution vulnerability with sdkBaseUrl param (#877)
• f9310dc Updated tests to check eligibility values
• d902c96 Updated V6 Card Fields types to be cammelCase
• 568ea3c Merge branch 'main' into feature/4229-card-fields-eligibility-types
• 48b27ba Added type tests for card fields
• 16579f6 Update eligibility types to account for advanced_cards object in the response
• See full diff in compare view

Updates @stripe/stripe-js from 9.1.0 to 9.2.0

Release notes

Sourced from @​stripe/stripe-js's releases.

v9.2.0

New features

• add contactDetails element (#915)

Changed

• Bump lodash from 4.17.23 to 4.18.1 (#913)
• Bump lodash from 4.17.23 to 4.18.1 in /examples/rollup (#912)

Commits

• 932b86d v9.2.0
• 2ee498b add contactDetails element (#915)
• a3ca844 Bump lodash from 4.17.23 to 4.18.1 (#913)
• eed149d Bump lodash from 4.17.23 to 4.18.1 in /examples/rollup (#912)
• See full diff in compare view

Updates @vitejs/plugin-vue from 6.0.5 to 6.0.6

Release notes

Sourced from @​vitejs/plugin-vue's releases.

plugin-vue@6.0.6

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​vitejs/plugin-vue's changelog.

6.0.6 (2026-04-13)

Features

• plugin-vue: propagate multiRoot for template-only vapor components (#745) (9e07ae9)

Bug Fixes

• deps: update all non-major dependencies (#738) (050c996)

Miscellaneous Chores

• deps: update dependency rollup to ^4.59.0 (#749) (a0e1ef8)
• remove unused deps (#760) (6d834d8)

Commits

• 51dbf4b release: plugin-vue@6.0.6
• 9e07ae9 feat(plugin-vue): propagate multiRoot for template-only vapor components (#745)
• 050c996 fix(deps): update all non-major dependencies (#738)
• 6d834d8 chore: remove unused deps (#760)
• a0e1ef8 chore(deps): update dependency rollup to ^4.59.0 (#749)
• See full diff in compare view

Updates primevue from 4.5.4 to 4.5.5

Release notes

Sourced from primevue's releases.

PrimeVue 4.5.5

What's Changed

• fix: use ordered list for Timeline component to improve accessibility by @​montgomery1944 in primefaces/primevue#8155

New Contributors

• @​montgomery1944 made their first contribution in primefaces/primevue#8155

Full Changelog: primefaces/primevue@4.5.4...4.5.5

Changelog

Sourced from primevue's changelog.

4.5.5 (2026-04-08)

Full Changelog

Implemented New Features and Enhancements:

• Timeline: use ordered list for Timeline component to improve accessibility #8155

Fixed bugs:

• Tree: add filteredNodes to Tree filter event and forward filter event in TreeSelect #8525
• PrimeIcons: Missing EXPAND key in PrimeIcons #8524
• broken zIndex with global primevue zIndex undefined #8523
• Galleria ZIndex Clear throws error when container is unmounted in fullscreen #8519
• Splitter does not re-initialize when SplitterPanel :size prop changes reactively #8517
• AutoComplete enter key behavior #8516
• TieredMenu: popup menu does not reposition when triggered from different elements #8509
• Select: option selection can run when overlay is already hidden #8508
• Date column filters cannot take in strings to compare #8506
• DataTable cannot handle sparse arrays #8503
• Tooltip elements are not being removed from the DOM when hideDelay is active #8480
• Splitter does not initialize panels added dynamically via v-if after mount #8477
• Tab: TabPanel slot types missing scope when asChild is true #8470
• DatePicker Range throws TypeError on days before 12/1/1969 #8469
• DatePicker manual input fails when using custom AM/PM locale labels #8462
• DataTable Column Filter Overlay requires double click to close after internal interaction #8460
• Autocomplete's clear event not emitted when clicking the clear X button #8459
• MultiSelect with optionValue object and display="chip" removes 2 chips instead of 1 #8456
• DatePicker: externally updated modelValue can open with incorrect header year #8455
• InputNumber: Cursor freezes after first digit when using currency="PYG" and locale="es-PY" #8453
• DataTable/VirtualScroller: Table errors when virtual loading true and no loading slot provided #8451
• DatePicker throws error when v-model is initialized with string value #8450
• DatePicker: year-change event emits inconsistent month values depending on navigation method #8436
• Select options still selectable after dropdown is hidden #8431
• Select - Filter - Only able to type one character when Input is not focused #8427
• FileUpload: TypeError on drag events when component unmounts #8424
• FormField.d.ts exports duplicate FormEmits type colliding with Form #8420
• TreeTable: missing types #8419
• ScrollPanel: horizontal scroll bar goes outside the content div when scrollXRatio is too small #8415
• Datepicker overlay loses focus capture when selecting different month or year #8402
• InputOTP allows paste when readonly #8401
• TieredMenu: hasSubmenu holds items (array) instead of boolean #8397
• InputNumber allows paste input when disabled #8391
• Splitter seperator role should be on gutter-handle not gutter #8381
• Step and StepPanel not reactive after mount #8377
• SpeedDial: MenuItem disabled not working at all #8375
• TreeTable: TreeNode children are not sorted #8361
• Tree: Expose dropPosition or relativePosition in node-drop event #8360
• Tree Drag and Drop Does Not Prevent Dropping a Node Into Itself or Descendants #8353
• Wrong step values in nested Stepper (Horizontal in Vertical) #8310

... (truncated)

Commits

• 66dde67 chore: version 4.5.5 released
• 625bab0 fix: nested splitter calc defects
• 83c2750 Fixed #8265 - DataTable writes to localStorage on every reactive change in he...
• 489913a Fixed #8278 - DataTable row expansion remains open on page change
• cebb8ed Fixed #8280 - Select an option in MultiSelect/DatePicker within DataTable not...
• e96df81 Fixed #8288 - AutoComplete doesnt accept mouse selections inside Datatables
• f4a0100 Fixed #8523 - broken zIndex with global primevue zIndex undefined
• f8511e0 Fixed #8519 - Galleria ZIndex Clear throws error when container is unmounted ...
• 103fd6b Fixed #8178 - Password always has aria-haspopup set to true
• 8ef1a67 Fixed #8218 - DataTable: fixing tabindex initialization with initial selectio...
• Additional commits viewable in compare view

Updates vite from 8.0.5 to 8.0.8

Release notes

Sourced from vite's releases.

v8.0.8

Please refer to CHANGELOG.md for details.

v8.0.7

Please refer to CHANGELOG.md for details.

v8.0.6

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.0.8 (2026-04-09)

Features

• update rolldown to 1.0.0-rc.15 (#22201) (6baf587)

Bug Fixes

• avoid dns.getDefaultResultOrder temporary (#22202) (15f1c15)
• ssr: class property keys hoisting matching imports (#22199) (e137601)

8.0.7 (2026-04-07)

Bug Fixes

• use sync dns.getDefaultResultOrder instead of dns.promises (#22185) (5c05b04)

8.0.6 (2026-04-07)

Features

• update rolldown to 1.0.0-rc.13 (#22097) (51d3e48)

Bug Fixes

• css: avoid mutating sass error multiple times (#22115) (d5081c2)
• optimize-deps: hoist CJS interop assignment (#22156) (17a8f9e)

Performance Improvements

• early return in getLocalhostAddressIfDiffersFromDNS when DNS order is verbatim (#22151) (56ec256)

Miscellaneous Chores

• create-vite: remove unnecessary DOM.Iterable (#22168) (bdc53ab)
• replace remaining prettier script (#22179) (af71fb2)

Commits

• 6e585dc release: v8.0.8
• e137601 fix(ssr): class property keys hoisting matching imports (#22199)
• 15f1c15 fix: avoid dns.getDefaultResultOrder temporary (#22202)
• 6baf587 feat: update rolldown to 1.0.0-rc.15 (#22201)
• fdb2e6f release: v8.0.7
• 5c05b04 fix: use sync dns.getDefaultResultOrder instead of dns.promises (#22185)
• 7b3086f release: v8.0.6
• af71fb2 chore: replace remaining prettier script (#22179)
• 51d3e48 feat: update rolldown to 1.0.0-rc.13 (#22097)
• 17a8f9e fix(optimize-deps): hoist CJS interop assignment (#22156)
• Additional commits viewable in compare view

Updates vue-i18n from 11.3.1 to 11.3.2

Release notes

Sourced from vue-i18n's releases.

v11.3.2

What's Changed

🐛 Bug Fixes

• fix(core): avoid register* functions tree-shaking for intlify/core by @​kazupon in intlify/vue-i18n#2464

⚡ Improvement Features

• perf(core-base): avoid translation timeline measurement without devtools by @​kazupon in intlify/vue-i18n#2465

Full Changelog: intlify/vue-i18n@v11.3.1...v11.3.2

Commits

• 9280f21 release: v11.3.2
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions