Skip to content

chore(deps): bump the javascript-dependencies group with 4 updates#37

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/javascript-dependencies-7a1928e787
Open

chore(deps): bump the javascript-dependencies group with 4 updates#37
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/javascript-dependencies-7a1928e787

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Bumps the javascript-dependencies group with 4 updates: typescript, vite-plus, vue and @vitejs/plugin-vue.

Updates typescript from 5.9.3 to 6.0.3

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the release announcement.

Downloads are available on:

Commits
  • 050880c Bump version to 6.0.3 and LKG
  • eeae9dd 🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...
  • ad1c695 🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)
  • 0725fb4 🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...
  • 607a22a Bump version to 6.0.2 and LKG
  • 9e72ab7 🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...
  • 35ff23d 🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...
  • e175b69 Bump version to 6.0.1-rc and LKG
  • af4caac Update LKG
  • 8efd7e8 Merge remote-tracking branch 'origin/main' into release-6.0
  • Additional commits viewable in compare view

Updates vite-plus from 0.1.14 to 0.1.22

Release notes

Sourced from vite-plus's releases.

vite-plus v0.1.22

A critical Vitest browser-mode security fix, parallel vp add -g installs, a built-in oxlint rule to prefer vite-plus imports, and a new --git switch for vp create.

Highlights

  • Security: bundled vitest bumped to 4.1.6 to address GHSA-2h32-95rg-cppp (Critical, CVSS 9.6), an XSS to RCE chain via the otelCarrier query parameter in Vitest browser mode (#1633)
  • Parallel global install: vp add/install/update -g now installs packages concurrently with a progress bar and a --concurrency flag (default 5) (#1597)
  • Prefer vite-plus imports: new bundled oxlint rule rewrites vite/vitest imports to vite-plus, enabled by default in generated and migrated lint configs (#1408)
  • Git init on scaffold: vp create learns --git/--no-git (interactive prompt; auto-commits "Initial commit from Vite+") (#1484)

Features

  • Spawn npm for global installation in parallel with a progress bar and a --concurrency option (#1597), by @​liangmiQwQ
  • Add bundled oxlint rule to prefer vite-plus imports over vite/vitest (#1408), by @​Han5991
  • vp create: initialize a git repository and create an initial commit on scaffold (#1484), by @​ryohidaka
  • vp create: rename underscore-prefixed files (_gitignore, _npmrc, _yarnrc.yml) to dotfiles for @org/create bundled templates (#1574), by @​jong-kyung
  • Add VP_PR_VERSION env var to install unreleased PR builds via pkg.pr.new (#1578), by @​fengmk2

Fixes & Enhancements

  • Skip merging standalone .oxfmtrc/.oxlintrc config when the fmt:/lint: key is already declared in vite.config.ts (fixes duplicate-block regression in vp create fate) (#1601), by @​fengmk2
  • Suppress the VITE+ - The Unified Toolchain for the Web banner for vp lint --lsp, vp fmt --lsp, and vp fmt --stdin-filepath so stdout stays a pure LSP / formatter stream (#1619), by @​fengmk2
  • vp create: detect output directory when running in the current directory (#1606), by @​jong-kyung
  • vp update -g: skip installs when the recorded global package version already matches the npm-resolved version, and tolerate string/array outputs from npm view ... version --json (#1596), by @​leno23
  • vp create: preserve single-segment project path in updateWorkspaceConfig (#1582), by @​jong-kyung
  • vp env use: keep the change session-scoped on Windows (#1577), by @​fengmk2
  • vp rebuild: accept positional package names (#1564), by @​fengmk2
  • Adopt the new vite-task error formatter; errors now print as error: <top-level> plus * <source> chain lines, with bold-red highlight on a TTY (vite-task#390), by @​branchseer
  • vite-task: forward LOCALAPPDATA so Node's compile cache stays outside the workspace on Windows (vite-task#389), by @​branchseer
  • Bump vite-task to c945cc0 (#1628), by @​branchseer

Refactor

Docs

  • Add vitepress-plugin-llms to the docs site so the published docs include LLM-friendly outputs (/llms.txt) (#1625), by @​jong-kyung
  • Refresh home stats for oxlint, vite, and vitest (#1512), by @​nozomee
  • Mention vp env doctor in agent instructions (#1603), by @​leno23

Chore

... (truncated)

Commits
  • 12368da release: v0.1.22 (#1637)
  • 2a44bce chore: bump vite-task to c945cc0 (#1628)
  • f0ae621 feat(cli): spawn npm for global installation in parallel and refine output (#...
  • e80e241 revert: remove vp pm plugin command (#1623)
  • 3dc7c75 docs: mention env doctor in agent instructions (#1603)
  • 9e44db1 fix(cli): skip merging standalone oxfmt/oxlint config when key already in vit...
  • 9f718e7 fix(cli): detect create output in current directory (#1606)
  • 99d3e41 feat(cli): add oxlint rule to prefer vite-plus imports (#1408)
  • 5d68116 feat(cli): Initialize a git repository and create an initial commit on scaffo...
  • 023e700 test(cli): add --help case to config snap tests for npm10/yarn1/yarn4 (#1585)
  • Additional commits viewable in compare view

Updates vue from 3.5.31 to 3.5.34

Release notes

Sourced from vue's releases.

v3.5.34

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.33

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.32

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.34 (2026-05-06)

Bug Fixes

  • compiler-sfc: infer Vue ref wrapper types when source is unresolvable (#14758) (7f46fd4), closes #14729
  • compiler-sfc: preserve hash hrefs on <image> elements (#14756) (090b2e3)
  • compiler-sfc: resolve type re-exports inside declare global (#14766) (acfffe3)
  • reactivity: prevent orphan effect when created in a stopped scope (#14778) (c8e2d4a), closes #14777
  • runtime-core: avoid symbol coercion during props validation (#8539) (23d4fb5), closes #8487
  • suspense: avoid DOM leak with out-in transition in v-if fragment (#14762) (9667e0d), closes #14761

3.5.33 (2026-04-22)

Bug Fixes

3.5.32 (2026-04-03)

Bug Fixes

Reverts

Commits
  • 57545e9 release: v3.5.34
  • a3b2617 chore(deps): update dependency jsdom to ^29.1.1 (#14775)
  • 23d4fb5 fix(runtime-core): avoid symbol coercion during props validation (#8539)
  • 090b2e3 fix(compiler-sfc): preserve hash hrefs on \<image> elements (#14756)
  • 9667e0d fix(suspense): avoid DOM leak with out-in transition in v-if fragment (#14762)
  • c8e2d4a fix(reactivity): prevent orphan effect when created in a stopped scope (#14778)
  • 7f46fd4 fix(compiler-sfc): infer Vue ref wrapper types when source is unresolvable (#...
  • acfffe3 fix(compiler-sfc): resolve type re-exports inside declare global (#14766)
  • a037385 chore(deps): update build (#14759)
  • 0bc56ff chore(deps): update pnpm to v10.33.3 (#14760)
  • Additional commits viewable in compare view

Updates @vitejs/plugin-vue from 6.0.5 to 6.0.7

Release notes

Sourced from @​vitejs/plugin-vue's releases.

plugin-vue@6.0.7

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.6

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​vitejs/plugin-vue's changelog.

6.0.7 (2026-05-15)

Features

  • use carets for @rolldown/pluginutils version (#776) (941b651)

Bug Fixes

  • deps: update all non-major dependencies (#762) (9e825b8)
  • deps: update all non-major dependencies (#774) (77dc8bc)

6.0.6 (2026-04-13)

Features

  • plugin-vue: propagate multiRoot for template-only vapor components (#745) (9e07ae9)

Bug Fixes

  • deps: update all non-major dependencies (#738) (050c996)

Miscellaneous Chores

Commits
  • f93aceb release: plugin-vue@6.0.7
  • 941b651 feat: use carets for @rolldown/pluginutils version (#776)
  • 77dc8bc fix(deps): update all non-major dependencies (#774)
  • 9e825b8 fix(deps): update all non-major dependencies (#762)
  • 51dbf4b release: plugin-vue@6.0.6
  • 9e07ae9 feat(plugin-vue): propagate multiRoot for template-only vapor components (#745)
  • 050c996 fix(deps): update all non-major dependencies (#738)
  • 6d834d8 chore: remove unused deps (#760)
  • a0e1ef8 chore(deps): update dependency rollup to ^4.59.0 (#749)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the javascript-dependencies group with 4 updates: [typescript](https://github.com/microsoft/TypeScript), [vite-plus](https://github.com/voidzero-dev/vite-plus/tree/HEAD/packages/cli), [vue](https://github.com/vuejs/core) and [@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue).


Updates `typescript` from 5.9.3 to 6.0.3
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.3)

Updates `vite-plus` from 0.1.14 to 0.1.22
- [Release notes](https://github.com/voidzero-dev/vite-plus/releases)
- [Commits](https://github.com/voidzero-dev/vite-plus/commits/v0.1.22/packages/cli)

Updates `vue` from 3.5.31 to 3.5.34
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.31...v3.5.34)

Updates `@vitejs/plugin-vue` from 6.0.5 to 6.0.7
- [Release notes](https://github.com/vitejs/vite-plugin-vue/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-vue/blob/main/packages/plugin-vue/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-vue/commits/plugin-vue@6.0.7/packages/plugin-vue)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: javascript-dependencies
- dependency-name: vite-plus
  dependency-version: 0.1.22
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: javascript-dependencies
- dependency-name: vue
  dependency-version: 3.5.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: javascript-dependencies
- dependency-name: "@vitejs/plugin-vue"
  dependency-version: 6.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: javascript-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants