chore(deps-dev): bump the development-dependencies group across 1 directory with 11 updates

[dependabot]

Bumps the development-dependencies group with 10 updates in the / directory:

Package	From	To
@types/node	26.1.2	26.2.0
@types/plotly.js	3.0.10	3.0.13
@vitest/coverage-v8	4.1.10	4.1.11
electron	43.3.0	43.4.1
eslint	10.8.0	10.8.1
globals	17.9.0	17.11.0
happy-dom	20.11.1	20.11.6
sass-embedded	1.100.0	1.103.1
typescript-eslint	8.66.0	8.67.0
vue-tsc	3.3.9	3.3.10

Updates @types/node from 26.1.2 to 26.2.0

Commits

• See full diff in compare view

Updates @types/plotly.js from 3.0.10 to 3.0.13

Commits

• See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.10 to 4.1.11

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.11

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in vitest-dev/vitest#10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

Commits

• 9bd8d46 chore: release v4.1.11 (#10995)
• See full diff in compare view

Updates electron from 43.3.0 to 43.4.1

Release notes

Sourced from electron's releases.

electron v43.4.1

Release Notes for v43.4.1

Fixes

• Fixed DevTools popup and context menus not appearing when DevTools is hosted in a custom window via webContents.setDevToolsWebContents(). #52937 (Also in 44)
• Fixed registerFileProtocol and registerHttpProtocol returning readable responses to cross-origin no-cors fetches; they now return opaque responses like protocol.handle. #52853 (Also in 41, 42, 44)
• Fixed a WebContentsView staying blank after its window is shown when setBackgroundThrottling(false) was called while the window was hidden. #52864 (Also in 42, 44)
• Fixed a crash in systemPreferences.promptTouchID(reason) when an invalid reason value is passed. #52782 (Also in 42, 44)
• Fixed a crash when resolving a path inside a malformed ASAR archive that contains cyclic link entries. #52857 (Also in 42, 44)
• Fixed a crash with app.setLoginItemSettings if a non-UTF8 service name is used. #52944 (Also in 44)
• Fixed a memory leak when creating BrowserWindows. #52892 (Also in 42, 44)
• Fixed a possible crash (SIGABRT) during process exit when the process had loaded tls/https shortly before exiting, affecting app.exit() before ready and short-lived ELECTRON_RUN_AS_NODE / child_process.fork() scripts. #52870 (Also in 44)
• Fixed a possible main process crash at quit when a session was created from JavaScript that runs during shutdown. #52925 (Also in 44)
• Fixed a potential crash in contentTracing.stopRecording() when the trace file could not be written to the requested path. #52795 (Also in 42, 44)
• Fixed a rare crash in the main process when DevTools were opened and a garbage collection ran before the DevTools frontend finished loading. #52903 (Also in 44)
• Fixed a regression preventing from transparent frameless windows from being resized on Linux. #52947 (Also in 44)
• Fixed an npm install failure with no recovery path when the OS blocked the native zip extractor from loading (for example, Windows Smart App Control). #52845 (Also in 44)
• Fixed an issue on Windows where the app process could fail to exit after app.quit() while a shell.openExternal() or shell.openPath() call was still waiting on a system "Open with" dialog. #52897 (Also in 41, 44)
• Fixed crash in sharedTexture module when GPU context becomes unavailable. #52938 (Also in 44)
• Fixed custom V8 snapshots (electron-mksnapshot, and the loadBrowserProcessSpecificV8Snapshot fuse) having no effect in the main process on macOS arm64, Linux x64 and Windows x64. #52877 (Also in 42, 44)
• Fixed downloading files that live inside an asar archive, including saving a packed PDF from the built-in PDF viewer. #52826 (Also in 42, 44)
• Fixed the built-in PDF viewer not rendering documents in in-memory sessions (partitions without the persist: prefix). #52835 (Also in 44)
• Fixed windows opened by a sandboxed top-level frame not inheriting the opener's sandbox restrictions. #52848 (Also in 41, 42, 44)
• <webview> and window.open now inherit nodeIntegrationInWorker from the embedder, consistent with the other Node and sandbox preferences. #52830 (Also in 41, 42, 44)

Other Changes

• Backported fix for 524628213. #52868
• Backported fixes for 542224257, 542025190. #52842
• Backported fixes from upstream Chromium and V8. #52778
• Fixed Tray icons not appearing (and their menus not opening) on Linux desktops that address the StatusNotifierItem by its unique D-Bus name or via the org.freedesktop.StatusNotifierItem interface, such as GNOME with the AppIndicator extension, Cinnamon and XFCE. #52952
• Fixed an issue on macOS where a page's first use of speechSynthesis could block the main process for several hundred milliseconds. #52814
• Reduced idle main-process CPU wakeups caused by Node.js timers and immediates. #52905 (Also in 44)

electron v43.4.0

Release Notes for v43.4.0

Features

• Added webFrameMain.printToPDF() to allow printing individual frames to PDF from the main process. #52627 (Also in 42, 44)
• Fixed an issue where getDisplayMedia({ audio: { restrictOwnAudio: true } }) was ignored in setDisplayMediaRequestHandler, causing loopback audio to include local app playback. #52533 (Also in 44)

Fixes

• Fixed a browser process crash that could occur during Windows logoff, shutdown, or restart. #52620 (Also in 42, 44)
• Fixed a crash report when the X server or Wayland compositor exits while an app is running. #52685 (Also in 42, 44)
• Fixed a crash when quickly switching menus while the app is under heavy load. #52673 (Also in 42, 44)
• Fixed a potential crash when notifying user activation before the primary main frame was live. #52697 (Also in 42, 44)
• Fixed an issue where a JavaScript out-of-memory crash could be reported from inside the crash-key handler instead of at the out-of-memory site. #52725 (Also in 42, 44)
• Fixed the Linux system accent color intermittently not being applied (systemPreferences.getAccentColor() returning an empty string on some launches). #52575

Other Changes

... (truncated)

Commits

• 340bae1 ci: fix generating ffmpeg (#52961)
• 5d74fe3 fix: show DevTools popup menus for setDevToolsWebContents() frontends (#52937)
• 7bb1b8f refactor: SimpleURLLoaderWrapper managed by cppgc (#52934)
• ce2dc12 fix: prevent crash when GPU context unavailable in sharedTexture (#52938)
• d1afd78 chore: cleanup includes of Win32 headers (#52945)
• bfc9c62 chore: cherry-pick 3a02de271fd3 and 726eafecc145 from chromium (#52952)
• 524a3df fix: dangling rawptr NativeWindow::primary_web_contents_view_ (#52939)
• a2e9e45 ci: log Datadog upload failure instead of failing job (#52936)
• d593366 fix: transparent windows can be resized on Linux (#52947)
• 4a04028 fix: don't crash on non-UTF8 serviceName in app.setLoginItemSettings (#52944)
• Additional commits viewable in compare view

Updates eslint from 10.8.0 to 10.8.1

Release notes

Sourced from eslint's releases.

v10.8.1

Bug Fixes

• 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)
• 151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)
• 6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)
• 4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)
• 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

• 7d0cbf8 docs: Update README (GitHub Actions Bot)
• 0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)
• 678c90b docs: Update README (GitHub Actions Bot)
• 8a10424 docs: Update README (GitHub Actions Bot)
• 69bb948 docs: Update README (GitHub Actions Bot)

Chores

• 0a14800 chore: update github/codeql-action action to v4.37.4 (#21196) (renovate[bot])
• 05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191) (Lazizbek Ergashev)
• 5611035 test: add error locations info to no-void (#21185) (Lee Daeun)
• ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176) (dependabot[bot])
• f131c03 chore: improve ecosystem test failure reporting (#20937) (crimsonjay0)
• 1f6edde chore: update ecosystem plugins (#21182) (ESLint Bot)
• d3266fb chore: unpin webpack dependency (#21172) (Francesco Trotta)
• 65a6519 chore: add allowScripts field to package.json (#21092) (GiHoon Noh)
• 22e5256 ci: add triage:no label to Dependabot PRs (#21141) (lumir)
• 55c9038 ci: bump actions/labeler from 6 to 7 (#21159) (dependabot[bot])
• 7280e78 chore: update dependency prettier to v3.9.6 (#21162) (renovate[bot])
• eddbad6 test: fix failing ecosystem test for eslint-plugin-unicorn (#21156) (Francesco Trotta)
• 60a178d chore: update ecosystem plugins (#21150) (ESLint Bot)
• f9f61dc test: add error locations to no-unreachable (#21151) (JIYEON)
• d086293 test: add error locations to no-undef (#21147) (JIYEON)
• cc01b67 test: add error locations to no-useless-catch (#21144) (devoil)
• 688e75e chore: add missing backticks in JSDoc (#21143) (Bo Hyun Kim)
• 7c1e175 test: add error locations to require-await (#21145) (Grit)
• 588a26d test: add error locations to no-extra-label (#21139) (dongkyu lee)
• 059aa89 test: add error locations to no-useless-concat (#21140) (dongkyu lee)
• 5a452a8 test: add error locations to no-const-assign (#21138) (dongkyu lee)

Commits

• c049dc3 10.8.1
• a3f7826 Build: changelog update for 10.8.1
• 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173)
• 0a14800 chore: update github/codeql-action action to v4.37.4 (#21196)
• 7d0cbf8 docs: Update README
• 05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191)
• 5611035 test: add error locations info to no-void (#21185)
• ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176)
• f131c03 chore: improve ecosystem test failure reporting (#20937)
• 0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183)
• Additional commits viewable in compare view

Updates globals from 17.9.0 to 17.11.0

Release notes

Sourced from globals's releases.

v17.11.0

• Add react-native globals (#337) 61eafbf

---

sindresorhus/globals@v17.10.0...v17.11.0

v17.10.0

• Add GM_cookie to Greasemonkey globals (#349) f468407

---

sindresorhus/globals@v17.9.0...v17.10.0

Commits

• 8c59927 17.11.0
• 61eafbf Add react-native globals (#337)
• 7bed4af 17.10.0
• f468407 Add GM_cookie to Greasemonkey globals (#349)
• See full diff in compare view

Updates happy-dom from 20.11.1 to 20.11.6

Release notes

Sourced from happy-dom's releases.

v20.11.6

👷‍♂️ Patch fixes

• Updates docs for the global-registrator package - By @​capricorn86 in task #2300

v20.11.5

👷‍♂️ Patch fixes

• Allow explicit element types for querySelector (e.g. querySelector<HTMLInputElement>(".my-input")) - By @​cyphercodes

v20.11.4

👷‍♂️ Patch fixes

• Fixes the CORS check fetch() to match origins instead of host and protocol - By @​rexxars in task #1490

v20.11.3

👷‍♂️ Patch fixes

• Make document.links return a live HTMLCollection - By @​bangseongbeom in task #2299
• Copy labels array to prevent mutation of cached querySelectorAll result - By @​mixelburg in task #2226

v20.11.2

👷‍♂️ Patch fixes

• MutationObserver callback being GC'd due to orphaned WeakRef - By @​mixelburg in task #2264

Commits

• d43c106 fix: #2300 Updates docs for the global-registrator package (#2301)
• e978bc8 fix: Allow explicit element types for querySelector (#2283)
• 1bc1505 fix: #1490 Different ports/parent domains are different origins (#2286)
• 0378ff9 fix: #2299 Make document.links return a live HTMLCollection
• 16a6ea2 fix: #2226 Copy labels array to prevent mutation of cached querySelectorAll...
• 8cc734b chore: #2276 Update sponsors (#2277)
• 576a8bc fix: #2264 MutationObserver callback being GC'd due to orphaned WeakRef (#2...
• 084afd6 chore: #2251 Updates the contribution guidelines (#2252)
• See full diff in compare view

Updates sass-embedded from 1.100.0 to 1.103.1

Changelog

Sourced from sass-embedded's changelog.

1.103.1

• No user-visible changes.

1.103.0

• Potentially breaking compatibility fix: Colors now preserve "analogous sets" of missing channels during conversions, per the CSS spec. For example, color.to-space(lch(50% none none), lab) now returns lab(50% none none) instead of lab(50% 0 0).

1.102.0

• Use the 2.4 gamma transfer function for rec2020, as specified by the latest draft of CSS Color 4.

1.101.7

• No user-visible changes.

1.101.6

• No user-visible changes.

1.101.5

• No user-visible changes.

1.101.4

• Avoid emitting rgb() or rgba() functions with non-percent decimal channels. Older browsers only support integer values or (potentially decimal) percentages for these functions, so in order to preserve backwards-compatibility while retaining full precision for modern browsers, legacy colors that contain at least one non-integer channel will now use percentages for their channels (for example, rgb(0%, 100%, 50%) rather than rgb(0, 255, 127.5)).

• Fix a bug where the values of plain-CSS if() expressions were emitted using their meta.inspect() format rather than their CSS serialization format.

1.101.3

• No user-visible changes.

1.101.2

• Fix a bug where the deprecation warning for vendor-prefixed expression() functions would incorrectly indicate whether or not the function would be invalid Sass in Dart Sass 2.0.0.

... (truncated)

Commits

• ecc0802 Update Dart Sass version and release
• cb3b9f0 Bump dart-lang/setup-dart from 1 to 1.7.2 (#441)
• 0fd3bd0 Bump typescript from 6.0.3 to 7.0.2 (#438)
• 07d7803 Update Dart Sass version and release
• de6ceb9 Use gamma 2.40 for display-referred rec2020 (#418)
• 7932fd8 Update Dart Sass version and release
• 4377858 Bump actions/setup-node from 6 to 7 (#440)
• 3994086 Bump @​types/node from 25.9.5 to 26.1.1 (#437)
• e4321a1 Reformat with the latest Prettier (#436)
• 09219c4 Bump actions/checkout from 6 to 7 (#433)
• Additional commits viewable in compare view

Updates typescript-eslint from 8.66.0 to 8.67.0

Release notes

Sourced from typescript-eslint's releases.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

• typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.67.0 (2026-08-10)

🚀 Features

• typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

• Claude Sonnet 5
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 20a261f chore(release): publish 8.67.0
• c245fbb feat(typescript-eslint): export basic globs for using tseslint (#12105)
• 3b155bb chore: use typescript 7 for typechecking (#12601)
• See full diff in compare view

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in vitest-dev/vitest#10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

Commits

• 9bd8d46 chore: release v4.1.11 (#10995)
• 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
• See full diff in compare view

Updates vue-tsc from 3.3.9 to 3.3.10

Release notes

Sourced from vue-tsc's releases.

v3.3.10

language-core

• fix: ignore trailing whitespace after generic parameter commas - Thanks to @​KazariEX!
• fix: resolve v-for item type over generic sources (#6141) - Thanks to @​serkodev!
• fix: do not extract SFC blocks across inline Markdown code (#6145) - Thanks to @​lazerg!

language-service

• fix: serialize template data provider access across concurrent requests (#6154) - Thanks to @​serkodev!

tsc

• fix: support different extension sets across project references (#6146) - Thanks to @​lazerg!

typescript-plugin

• fix: resolve requests against the owning project (#6152) - Thanks to @​serkodev!

vscode

• feat: patch typescript.js via --require to support read-only file systems (#6149) - Thanks to @​serkodev!
• fix: isolate custom TypeScript plugin paths between profiles (#6148) - Thanks to @​serkodev!

Our Sponsors ❤️

... (truncated)

Changelog

Sourced from vue-tsc's changelog.

3.3.10 (2026-08-15)

language-core

• fix: ignore trailing whitespace after generic parameter commas - Thanks to @​KazariEX!
• fix: resolve v-for item type over generic sources (#6141) - Thanks to @​serkodev!
• fix: do not extract SFC blocks across inline Markdown code (#6145) - Thanks to @​lazerg!

language-service

• fix: serialize template data provider access across concurrent requests (#6154) - Thanks to @​serkodev!

tsc

• fix: support different extension sets across project references (#6146) - Thanks to @​lazerg!

typescript-plugin

• fix: resolve requests against the owning project (#6152) - Thanks to @​serkodev!

vscode

• feat: patch typescript.js via --require to support read-only file systems (#6149) - Thanks to @​serkodev!
• fix: isolate custom TypeScript plugin paths between profiles (#6148) - Thanks to @​serkodev!

Commits

• 977995f v3.3.10 (#6160)
• cb65247 fix(tsc): support different extension sets across project references (#6146)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.