4.7.5

Fixed

• uppy upgraded to v6. @uppy/core and @uppy/xhr-upload now sit on ^6.0.0, bumped together — @uppy/xhr-upload@6 peer-depends on a matching @uppy/core major, so the packages cannot move independently. @uppy/locales moves to ^5.2.0.
• Removed the unused @uppy/vue dependency. It was declared in package.json but never imported anywhere in the source, and its v4 line pulls in @uppy/dashboard, @uppy/webcam, @uppy/status-bar and @uppy/screen-capture as peers — none of which VueFinder uses. Dropping it removes four phantom peer requirements from installs.

No public API changed, and nothing in uppy's v6 breaking-change list touches VueFinder's surface: the removals there are @uppy/utils, @uppy/store-default, @uppy/companion-client and @uppy/provider-views (merged into @uppy/core subpaths), a Companion websocket token change, and isTouchDevice. This should be a drop-in upgrade.

Internal

• The upload flow now has real test coverage. Previously it had none — no unit tests, no e2e — so a uploader dependency bump could only be checked by hand. The new suite drives the actual @uppy/core and @uppy/xhr-upload packages through RemoteDriver.configureUploader and asserts the endpoint, the path meta, auth headers, the upload event lifecycle, network-error handling, and maxFileSize enforcement.
• dependabot.yml now groups @uppy/* across major, minor and patch updates, so future uppy majors arrive as a single installable PR instead of several mutually unresolvable ones.

Full Changelog: 4.7.4...4.7.5