v2.3.5
[2.3.5] - 2026-08-20
🛠️ Bug Fixes
cb0838e— 🐛 [fix] Resolve remaining Sonar findings
⚡️ [fix] Replace placeholder matching with a deterministic single-pass tokenizer that preserves literal and generated placeholder rendering.
♿️ [fix] Use explicit high-contrast light and dark surfaces for plugin filter chips.
74375d6— 💚 [fix] Restore release check formatting
📦 Dependencies
5e4cfa2— ⬆️ [build] Migrate toolchain and dependencies to npm 12
⬆️ [build] Refresh all compatible direct and transitive packages, remove unused incompatible tools, and regenerate the npm 12 lockfile.
🔒️ [build] Enforce strict lifecycle-script review with exact approvals and eliminate the audited dependency vulnerabilities.
👷 [ci] Pin npm 12 on compatible CI and release lanes, preserve Node 20 consumer coverage, and restrict release commits to version files.
🐛 [fix] Repair upgraded Vue, Nuxt, package-lint, actionlint, and maintenance-script compatibility.
🎨 [style] Apply the updated shared Prettier and Stylelint configurations across tracked sources and fixtures.
-
6a6bfda— ⬆️ [build] Update npm_and_yarn dependencies -
4de6933— ⬆️ [build] Update npm_and_yarn dependencies -
967054f— ⬆️ [build] Update npm_and_yarn dependencies -
b352276— ⬆️ [build] Update npm_and_yarn dependencies -
7199b4a— ⬆️ [build] Update npm_and_yarn dependencies -
8a6b8dd— ⬆️ [build] Update npm_and_yarn dependencies -
d1c4427— ⬆️ [build] Update npm_and_yarn dependencies -
bacc44b— ⬆️ [build] Update npm_and_yarn dependencies -
94f791b— ⬆️ [build] Update npm_and_yarn dependencies -
4effd48— [dependency] Update the npm_and_yarn group across 1 directory with 2 updates
[dependency] Updates the npm_and_yarn group with 2 updates in the / directory: @apidevtools/json-schema-ref-parser and undici.
Updates @apidevtools/json-schema-ref-parser from 11.1.0 to 14.2.1
Updates undici from 7.25.0 to 7.28.0
Updates undici from 6.26.0 to 6.27.0
updated-dependencies:
- dependency-name: "@apidevtools/json-schema-ref-parser"
dependency-version: 14.2.1
dependency-type: indirect
dependency-group: npm_and_yarn - dependency-name: undici
dependency-version: 7.28.0
dependency-type: indirect
dependency-group: npm_and_yarn - dependency-name: undici
dependency-version: 6.27.0
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] support@github.com
[dependency] Updates the npm_and_yarn group with 4 updates in the / directory: form-data, js-yaml, launch-editor and markdown-it.
Updates form-data from 4.0.5 to 4.0.6
Updates js-yaml from 4.1.1 to 4.2.0
Updates launch-editor from 2.13.2 to 2.14.1
Updates markdown-it from 14.1.1 to 14.2.0
updated-dependencies:
- dependency-name: form-data
dependency-version: 4.0.6
dependency-type: indirect
dependency-group: npm_and_yarn - dependency-name: js-yaml
dependency-version: 4.2.0
dependency-type: indirect
dependency-group: npm_and_yarn - dependency-name: launch-editor
dependency-version: 2.14.1
dependency-type: indirect
dependency-group: npm_and_yarn - dependency-name: markdown-it
dependency-version: 14.2.0
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
[dependency] Updates the npm_and_yarn group with 2 updates in the / directory: esbuild and nuxt.
Updates esbuild from 0.28.0 to 0.28.1
Updates nuxt from 4.4.6 to 4.4.8
updated-dependencies:
- dependency-name: esbuild
dependency-version: 0.28.1
dependency-type: direct:production
dependency-group: npm_and_yarn - dependency-name: nuxt
dependency-version: 4.4.8
dependency-type: direct:development
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
676e66e— [dependency] Update shell-quote in the npm_and_yarn group across 1 directory
[dependency] Updates the npm_and_yarn group with 1 update in the / directory: shell-quote.
Updates shell-quote from 1.8.3 to 1.8.4
updated-dependencies:
- dependency-name: shell-quote
dependency-version: 1.8.4
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] support@github.com
🛡️ Security
abe0483— 🔒️ [fix] Clear release security and compatibility gates
🐛 [fix] Bound placeholder and trailing-reference parsing, add explicit button types, and improve filter-chip contrast.
🧪 [test] Replace the fixed hover delay with observable state synchronization.
🔒️ [ci] Disable third-party install scripts, explicitly prepare Nuxt, deny unnecessary macOS native rebuilds, and pin remote bundle analysis.
🦖 [ci] Verify the packed CLI and production dependency audit on Node 20 while running the refreshed development suite on Node 22 and newer.
⬆️ [build] Align repository Node version files with Node 26.7.0.
ea3a9f9— 👷 [ci] Use shared workflow callers
👷 [ci] Switches the Dependabot auto-merge caller to workflow-templates@main and replaces local security and maintenance workflows with shared reusable callers.
⬆️ [build] Updates eslint-config-nick2bad4u to the published caller override version and records any peer dependency needed for the shared ESLint config to load.
🛠️ Other Changes
[dependency] Update shell-quote 1.8.4 in the npm_and_yarn group across 1 directory
4166033— Update Codecov action to v7.0.0
🧹 Chores
98820cf— Release v2.3.5