chore(deps): bump the production-dependencies group with 6 updates by dependabot[bot] · Pull Request #371 · berntpopp/VarLens

dependabot · 2026-08-10T09:17:27Z

Bumps the production-dependencies group with 6 updates:

Package	From	To
@fastify/rate-limit	`11.1.0`	`11.2.0`
@fastify/static	`10.1.2`	`10.1.3`
@vueuse/core	`14.3.0`	`14.4.0`
fastify	`5.10.0`	`5.11.2`
nanoid	`6.0.0`	`6.0.1`
vuetify	`4.1.7`	`4.1.8`

Updates @fastify/rate-limit from 11.1.0 to 11.2.0

Release notes

Sourced from @fastify/rate-limit's releases.

v11.2.0

⚠️ Security Release

Fix for GHSA-grpc-p53c-r64v

What's Changed

docs: fix broken links by @Fdawgs in fastify/fastify-rate-limit#454

chore: Bump @types/node from 25.9.4 to 26.0.1 in the dev-dependencies-typescript group by @dependabot[bot] in fastify/fastify-rate-limit#455

ci: pin actions to commit-hash by @Fdawgs in fastify/fastify-rate-limit#456

chore: Bump c8 from 11.0.0 to 12.0.0 by @dependabot[bot] in fastify/fastify-rate-limit#457

Full Changelog: fastify/fastify-rate-limit@v11.1.0...v11.2.0

Commits

92da964 Bumped v11.2.0
1aee036 Merge commit from fork
65e9965 chore: Bump c8 from 11.0.0 to 12.0.0 (#457)
d9d6100 ci: pin actions to commit-hash
a5c9630 chore: Bump @types/node in the dev-dependencies-typescript group (#455)
3998ebd docs: fix broken links
See full diff in compare view

Updates @fastify/static from 10.1.2 to 10.1.3

Commits

See full diff in compare view

Updates @vueuse/core from 14.3.0 to 14.4.0

Release notes

Sourced from @vueuse/core's releases.

v14.4.0

   🚀 Features

Update skills - by @OrbisK in vueuse/vueuse#5491 (f4758)

nuxt: Disable useColorMode auto import if @nuxtjs/color-mode is detected - by @OrbisK in vueuse/vueuse#5476 (60687)

nuxt: Generate nuxt module builder output layout - by @userquin and @43081j in vueuse/vueuse#5503 (40a1f)

onStartTyping: Add more configurable options for onStartTyping - by @LightQuanta and @9romise in vueuse/vueuse#5395 (1f2b7)

useDebounceFn: Add flush and isPending to filter system - by @pcoterecollective, @OrbisK and @antfu in vueuse/vueuse#5259 (4aa18)

useElementOverflow: New function - by @inside5545, 苏俊言, @antfu, @ilyaliao, @OrbisK, @43081j and @9romise in vueuse/vueuse#4094 (d49f5)

useSpeechRecognition: Expose confidence of latest result - by @SAY-5 in vueuse/vueuse#5398 (17dc9)

useVirtualList: Add options behavior, block and inline to exposed scrollTo method - by @laurens94, @OrbisK, @43081j and @ilyaliao in vueuse/vueuse#4905 (01875)

   🐞 Bug Fixes

Drop unnecessary PURE annotation to avoid Rollup warning - by @serkodev and @9romise in vueuse/vueuse#5388 (16933)

Accept array template ref bound to v-for as observer target - by @eldardada in vueuse/vueuse#5514 (bccb1)

Reintroduce package normalisation to nuxt package - by @43081j in vueuse/vueuse#5551 (c04c4)

docs: Fix typo 'feedbacks' to 'feedback' in work-with-ai.md - by @firstquarterlee in vueuse/vueuse#5447 (a4253)

nuxt: Register formatTimeAgo variants for auto-import - by @ilyaliao, @cursoragent and Claude Opus 5 in vueuse/vueuse#5492 (8a908)

skills: Correct broken relative links in generated function references - by @lazerg and @OrbisK in vueuse/vueuse#5549 (910db)

tests: Deduplicate ci test runs - by @Tofandel in vueuse/vueuse#5509 (5b272)

useBrowserLocation: Skip write-back watching on 'load' state - by @Tobias-Braun and @9romise in vueuse/vueuse#5485 (fbdd2)

useDraggable: End drag on pointercancel - by @ShreeBohara and Claude Opus 5 in vueuse/vueuse#5550 (6aa9d)

useElementSize: Prefill size based on box option - by @meta-syntax in vueuse/vueuse#5524 (5fe49)

useEventBus: Use tryOnScopeDispose to avoid operating Vue internal API - by @liangmiQwQ in vueuse/vueuse#5548 (2cad7)

useFetch: Ignore stale abort error after refetch succeeds - by @lazerg in vueuse/vueuse#5525 (84426)

useFuse: Trigger fuse ref after setCollection - by @ilyaliao, Claude Opus 5 and @cursoragent in vueuse/vueuse#5479 (3e10c)

useGamepad: Keep updating remaining gamepads after one disconnects - by @lazerg in vueuse/vueuse#5523 (65328)

usePointerSwipe: Handle pointercancel event to reset state and trigger onSwipeEnd - by @DORI2001, Dor Alagem and @43081j in vueuse/vueuse#5379 (4c08a)

useStyleTag: Avoid error when multiple components share the same id - by @ben-lau in vueuse/vueuse#5473 (6d913)

useVibrate: Make interval option optional - by @Aluomolo in vueuse/vueuse#5490 (305ee)

useVirtualList: Recompute range when item size changes - by @Antreesy in vueuse/vueuse#5533 (0f6d5)

useWebSocket: Sync status to 'CLOSED' after explicit close() - by @WuMingDao and @OrbisK in vueuse/vueuse#5471 (351bf)

    View changes on GitHub

Commits

24160f9 chore: release v14.4.0 (#5552)
6aa9d6d fix(useDraggable): end drag on pointercancel (#5550)
5fe4945 fix(useElementSize): prefill size based on box option (#5524)
0f6d55d fix(useVirtualList): recompute range when item size changes (#5533)
8f26673 test(useTransition): widen lower bound for WebKit test (#5540)
2cad765 fix(useEventBus): use tryOnScopeDispose to avoid operating Vue internal API...
653283c fix(useGamepad): keep updating remaining gamepads after one disconnects (#5523)
d39699c docs(useTextareaAutosize): restore demo textarea autosizing (#5532)
8442658 fix(useFetch): ignore stale abort error after refetch succeeds (#5525)
bccb159 fix: accept array template ref bound to v-for as observer target (#5514)
Additional commits viewable in compare view

Updates fastify from 5.10.0 to 5.11.2

Release notes

Sourced from fastify's releases.

v5.11.2

What's Changed

fix fastify version in fastify.js

Full Changelog: fastify/fastify@v5.11.1...v5.11.2

v5.11.1

What's Changed

fix: add http method override warning by @jean-michelet in fastify/fastify#6879

fix(types): allow explicit http2: false in server options by @Tony133 in fastify/fastify#6888

docs: clarify what attachValidation exposes on request.validationError by @basteez in fastify/fastify#6891

fix: do not force close in-flight connections when forceCloseConnections is 'idle' by @aquie00t in fastify/fastify#6889

New Contributors

@basteez made their first contribution in fastify/fastify#6891

Full Changelog: fastify/fastify@v5.11.0...v5.11.1

v5.11.0

What's Changed

chore: Bump markdownlint-cli2 from 0.22.1 to 0.23.0 by @dependabot[bot] in fastify/fastify#6839

fix: normalize method in findRoute by @Ram-blip in fastify/fastify#6838

docs: fix incorrect description for validateInput in Request.md by @thePranav-kpk in fastify/fastify#6823

feat: rfc10008 http query method by @climba03003 in fastify/fastify#6832

perf: reuse cached content types for response serialization by @gurgunday in fastify/fastify#6854

chore(sponsor): add n-ix by @Eomm in fastify/fastify#6852

ci: pin actions to commit-hash by @Fdawgs in fastify/fastify#6853

ci(dependabot): temporarily ignore typescript updates by @Tony133 in fastify/fastify#6869

style(types): enforce max line length by @jean-michelet in fastify/fastify#6864

docs(ecosystem): update fastify-prisma repo URL by @zrosenbauer in fastify/fastify#6724

docs(getting-started): align import with exported routes by @Solaris-star in fastify/fastify#6859

docs(server): fix contradictory requestIdHeader default by @sobol-sudo in fastify/fastify#6872

fix(validation): correctly update falsy values from validator by @jackjin1997 in fastify/fastify#6483

docs: specific warning suppression by @jean-michelet in fastify/fastify#6871

ci(links-check): pin linkinator server root to the workspace by @aquie00t in fastify/fastify#6877

docs: update TypeScript docs to reference Fastify 5.x by @Sasireddy001 in fastify/fastify#6880

docs: use async trailer handlers in Reply examples by @Ram-blip in fastify/fastify#6856

docs: fix logController migration example and links by @aquie00t in fastify/fastify#6876

fix: uncatchable throws in writeHead when using async hook by @climba03003 in fastify/fastify#6881

fix: honor quoted-string in Content-Type parameter values by @aquie00t in fastify/fastify#6865

chore(.npmrc): add min-release-age by @Fdawgs in fastify/fastify#6873

chore: Bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in fastify/fastify#6866

chore: Bump actions/labeler from 6.2.0 to 7.0.0 by @dependabot[bot] in fastify/fastify#6867

New Contributors

@Ram-blip made their first contribution in fastify/fastify#6838

@Solaris-star made their first contribution in fastify/fastify#6859

@sobol-sudo made their first contribution in fastify/fastify#6872

@jackjin1997 made their first contribution in fastify/fastify#6483

... (truncated)

Commits

043baf9 Bumped 5.11.2
2afc49b Bumped v5.11.1
9ba6d60 fix: do not force close in-flight connections on 'idle' (#6889)
74c44c9 docs: clarify what attachValidation exposes on request.validationError (#6891)
0f54a40 fix(types): allow explicit http2: false in server options (#6888)
0e9a3b3 fix: add http method override warning (#6879)
b93d611 Bumped v5.11.0
625d2b8 chore: Bump actions/labeler from 6.2.0 to 7.0.0 (#6867)
720355b chore: Bump actions/setup-node from 6.4.0 to 7.0.0 (#6866)
84b1158 chore(.npmrc): add min-release-age (#6873)
Additional commits viewable in compare view

Updates nanoid from 6.0.0 to 6.0.1

Release notes

Sourced from nanoid's releases.

6.0.1

Fixed docs.

Changelog

Sourced from nanoid's changelog.

6.0.1

Fixed docs.

Commits

9247b6d Release 6.0.1 version
880b117 Update dependencies
2ea9d64 Backport release in ChangeLog
1a1fee4 Update dependencies (#604)
41aceb1 simplify (#603)
b49a237 Update EM banner
c6246e0 Move back to latest pnpm 11
2b7d22e Update CI actions
a3d2eda Fix step name
0e570ee Make CI actions a little safer
Additional commits viewable in compare view

Updates vuetify from 4.1.7 to 4.1.8

Release notes

Sourced from vuetify's releases.

v4.1.8

[!IMPORTANT] Vuetify Needs Your Support! The OpenCollective funds dried up. We are currently unable to compensate our contributors for their continued work on the framework and the ecosystem tools.

If Vuetify is part of your stack, please consider sponsoring the project so we can continue delivering updates and fixes.

Sponsor via Open Collective

Even if you look with optimism into the future (despite the sad economic reality), it is not responsible to keep your largest open source dependency in this poor financial state. Vuetify is on the borrowed time - if anything happens to maintainers primary employment, they are more likely to drop off.

Every contribution helps us keep Vuetify alive and signals to maintainers that their effort is appreciated.

Thank you.

🔧 Bug Fixes

accept Vue 3.6 prereleases in the vue peer range (#23040) (831fb2d)

theme: correct color-scheme for light theme (#23071) (9df2c71), closes #22119

VFileUpload: avoid SSR hydration mismatch on empty file list (4cd5288), closes #23086

VNumberInput: strip grouping separator before parsing number (94e94a9), closes #23050

VOverlay: resolve ownership from the activator instead of aria-owns (a57ec6e), closes #23056

VOverlay: correct viewport size for "desktop view" on Android (8849b6b), closes #22124

Commits

0ccc125 chore(release): publish v4.1.8
a57ec6e fix(VOverlay): resolve ownership from the activator instead of aria-owns
831fb2d fix: accept Vue 3.6 prereleases in the vue peer range (#23040)
4cd5288 fix(VFileUpload): avoid SSR hydration mismatch on empty file list
8849b6b fix(VOverlay): correct viewport size for "desktop view" on Android
9df2c71 fix(theme): correct color-scheme for light theme (#23071)
94e94a9 fix(VNumberInput): strip grouping separator before parsing number
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [@fastify/rate-limit](https://github.com/fastify/fastify-rate-limit) | `11.1.0` | `11.2.0` | | [@fastify/static](https://github.com/fastify/fastify-static) | `10.1.2` | `10.1.3` | | [@vueuse/core](https://github.com/vueuse/vueuse/tree/HEAD/packages/core) | `14.3.0` | `14.4.0` | | [fastify](https://github.com/fastify/fastify) | `5.10.0` | `5.11.2` | | [nanoid](https://github.com/ai/nanoid) | `6.0.0` | `6.0.1` | | [vuetify](https://github.com/vuetifyjs/vuetify/tree/HEAD/packages/vuetify) | `4.1.7` | `4.1.8` | Updates `@fastify/rate-limit` from 11.1.0 to 11.2.0 - [Release notes](https://github.com/fastify/fastify-rate-limit/releases) - [Commits](fastify/fastify-rate-limit@v11.1.0...v11.2.0) Updates `@fastify/static` from 10.1.2 to 10.1.3 - [Release notes](https://github.com/fastify/fastify-static/releases) - [Commits](https://github.com/fastify/fastify-static/commits) Updates `@vueuse/core` from 14.3.0 to 14.4.0 - [Release notes](https://github.com/vueuse/vueuse/releases) - [Commits](https://github.com/vueuse/vueuse/commits/v14.4.0/packages/core) Updates `fastify` from 5.10.0 to 5.11.2 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.10.0...v5.11.2) Updates `nanoid` from 6.0.0 to 6.0.1 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@6.0.0...6.0.1) Updates `vuetify` from 4.1.7 to 4.1.8 - [Release notes](https://github.com/vuetifyjs/vuetify/releases) - [Commits](https://github.com/vuetifyjs/vuetify/commits/v4.1.8/packages/vuetify) --- updated-dependencies: - dependency-name: "@fastify/rate-limit" dependency-version: 11.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@fastify/static" dependency-version: 10.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@vueuse/core" dependency-version: 14.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: fastify dependency-version: 5.11.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: nanoid dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: vuetify dependency-version: 4.1.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-10T09:17:28Z

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2026-08-17T09:15:35Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot assigned berntpopp Aug 10, 2026

dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 10, 2026

dependabot Bot closed this Aug 17, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-74df760b17 branch August 17, 2026 09:15

Navigation Menu

chore(deps): bump the production-dependencies group with 6 updates - #371

chore(deps): bump the production-dependencies group with 6 updates#371
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-74df760b17

dependabot Bot commented on behalf of github Aug 10, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 10, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Aug 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v11.2.0

⚠️ Security Release

What's Changed

v14.4.0

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v5.11.2

What's Changed

v5.11.1

What's Changed

New Contributors

v5.11.0

What's Changed

New Contributors

6.0.1

6.0.1

v4.1.8

🔧 Bug Fixes

Uh oh!

dependabot Bot commented on behalf of github Aug 10, 2026

Labels

Uh oh!

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Aug 10, 2026 •

edited

Loading