Skip to content

chore(deps): bump the production-minor-patch group across 1 directory with 9 updates - #632

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/app/production-minor-patch-ab4696e7c8
Closed

chore(deps): bump the production-minor-patch group across 1 directory with 9 updates#632
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/app/production-minor-patch-ab4696e7c8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-minor-patch group with 9 updates in the /app directory:

Package From To
@unhead/vue 3.2.3 3.3.2
@vueuse/core 14.3.0 14.4.0
bootstrap-vue-next 0.45.8 0.46.1
cytoscape 3.34.0 3.34.1
dompurify 3.4.12 3.4.13
pinia 4.0.2 4.0.3
swagger-ui 5.32.11 5.32.13
swagger-ui-dist 5.32.11 5.32.13
vue 3.5.40 3.5.41

Updates @unhead/vue from 3.2.3 to 3.3.2

Release notes

Sourced from @​unhead/vue's releases.

v3.3.2

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v3.3.1

   🐞 Bug Fixes

    View changes on GitHub

v3.3.0

Projects using the Unhead Bundler with Vite 6 or 7, webpack, Rspack, Rollup, or another build without Rolldown no longer receive oxc-parser from @unhead/bundler. Builds that use Unhead transforms must install it directly.

📝 Migration

pnpm add -D oxc-parser

Runtime-only Unhead projects and builds with Rolldown installed need no change.

   🚨 Breaking Changes

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates @vueuse/core from 14.3.0 to 14.4.0

Release notes

Sourced from @​vueuse/core's releases.

v14.4.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 24160f9 chore: release v14.4.0 (#5552)
  • 6aa9d6d fix(useDraggable): end drag on pointercancel (#5550)
  • 5fe4945 fix(useElementSize): prefill size based on box option (#5524)
  • 0f6d55d fix(useVirtualList): recompute range when item size changes (#5533)
  • 8f26673 test(useTransition): widen lower bound for WebKit test (#5540)
  • 2cad765 fix(useEventBus): use tryOnScopeDispose to avoid operating Vue internal API...
  • 653283c fix(useGamepad): keep updating remaining gamepads after one disconnects (#5523)
  • d39699c docs(useTextareaAutosize): restore demo textarea autosizing (#5532)
  • 8442658 fix(useFetch): ignore stale abort error after refetch succeeds (#5525)
  • bccb159 fix: accept array template ref bound to v-for as observer target (#5514)
  • Additional commits viewable in compare view

Updates bootstrap-vue-next from 0.45.8 to 0.46.1

Release notes

Sourced from bootstrap-vue-next's releases.

bootstrapvuenext: v0.46.1

0.46.1 (2026-08-14)

Bug Fixes

  • BFormValidFeedback: read global defaults from its own key (#3265) (83099a9)

nuxt: v0.46.1

0.46.1 (2026-08-14)

Dependencies

  • The following workspace dependencies were updated
    • devDependencies
      • bootstrap-vue-next bumped to 0.46.1
    • peerDependencies
      • bootstrap-vue-next bumped to 0.46.1

bootstrapvuenext: v0.46.0

0.46.0 (2026-08-12)

⚠ BREAKING CHANGES

  • orchestrator_composables: disallow object of nested refs, instead prefer single mayberef object
  • orchestrator_composables: nested ref resolution causing props passed in to be called when used by toValue, we no longer use toValue and instead simplify into a ref fixes bootstrap-vue-next/bootstrap-vue-next#2937
  • orchestrator_composables: internally keep track via a object&map instead of massive array
  • BFormRating: aria text of ambiguous 'x' clarified to be 'clear rating'
  • ESM only package. Remove cjs variant (previously mislabeled as umd)

Features

  • BFormRating: add props for i18n aria text (9f65405)
  • BFormRating: aria text of ambiguous 'x' clarified to be 'clear rating' (9f65405)
  • bootstrap mcp monorepo package with eslint support (9f65405)
  • ESM only package. Remove cjs variant (previously mislabeled as umd) (9f65405)
  • mcp: add docs-backed migration resources and planning tools (9f65405)
  • nuxt-integrations: automatically detect and use nuxtimg internally for images (option disabled) (9f65405)
  • nuxt-integrations: automatically detect nuxtjs/color-mode and add bootstrap defaults (option disabled) (9f65405)

Bug Fixes

  • BFormGroup: rename computed floating to isFloating to avoid prop shadow (#3252) (3b85ead)
  • BFormGroup: slot default scope ariaDescribedBy set to actual value (9f65405)
  • BFormTags: use isLimitReached computed instead of props.limit in template (9f65405)
  • change BFormCheckbox uncheckedValue default from false to null (d208f60)
  • orchestrator_composables: nested ref resolution causing props passed in to be called when used by toValue, we no longer use toValue and instead simplify into a ref fixes bootstrap-vue-next/bootstrap-vue-next#2937 (9f65405)

... (truncated)

Changelog

Sourced from bootstrap-vue-next's changelog.

0.46.1 (2026-08-14)

Bug Fixes

  • BFormValidFeedback: read global defaults from its own key (#3265) (83099a9)

0.46.0 (2026-08-12)

⚠ BREAKING CHANGES

  • orchestrator_composables: disallow object of nested refs, instead prefer single mayberef object
  • orchestrator_composables: nested ref resolution causing props passed in to be called when used by toValue, we no longer use toValue and instead simplify into a ref fixes bootstrap-vue-next/bootstrap-vue-next#2937
  • orchestrator_composables: internally keep track via a object&map instead of massive array
  • BFormRating: aria text of ambiguous 'x' clarified to be 'clear rating'
  • ESM only package. Remove cjs variant (previously mislabeled as umd)

Features

  • BFormRating: add props for i18n aria text (9f65405)
  • BFormRating: aria text of ambiguous 'x' clarified to be 'clear rating' (9f65405)
  • bootstrap mcp monorepo package with eslint support (9f65405)
  • ESM only package. Remove cjs variant (previously mislabeled as umd) (9f65405)
  • mcp: add docs-backed migration resources and planning tools (9f65405)
  • nuxt-integrations: automatically detect and use nuxtimg internally for images (option disabled) (9f65405)
  • nuxt-integrations: automatically detect nuxtjs/color-mode and add bootstrap defaults (option disabled) (9f65405)

Bug Fixes

  • BFormGroup: rename computed floating to isFloating to avoid prop shadow (#3252) (3b85ead)
  • BFormGroup: slot default scope ariaDescribedBy set to actual value (9f65405)
  • BFormTags: use isLimitReached computed instead of props.limit in template (9f65405)
  • change BFormCheckbox uncheckedValue default from false to null (d208f60)
  • orchestrator_composables: nested ref resolution causing props passed in to be called when used by toValue, we no longer use toValue and instead simplify into a ref fixes bootstrap-vue-next/bootstrap-vue-next#2937 (9f65405)

Performance Improvements

  • floating-ui: update floating-ui/vue v2, allows getter function insteaed of needing an excess ref (9f65405)

Code Refactoring

  • orchestrator_composables: disallow object of nested refs, instead prefer single mayberef object (9f65405)
  • orchestrator_composables: internally keep track via a object&map instead of massive array (9f65405)

0.45.10 (2026-08-05)

... (truncated)

Commits
  • 22f615d chore: release main (#3266)
  • 83099a9 fix(BFormValidFeedback): read global defaults from its own key (#3265)
  • 4df7b4e chore: release main (#3251)
  • d208f60 fix: change BFormCheckbox uncheckedValue default from false to null
  • 3b85ead fix(BFormGroup): rename computed floating to isFloating to avoid prop sha...
  • 9f65405 feat: bootstrap mcp monorepo package with eslint support
  • 7804dc1 chore: release main (#3243)
  • 51c19e4 fix: BNavbarNav not respecting tag prop (#3242)
  • 95a2184 chore: release main (#3236)
  • 82218a3 fix: remove invalid aria-multiselectable attribute from BTable table element ...
  • See full diff in compare view

Updates cytoscape from 3.34.0 to 3.34.1

Release notes

Sourced from cytoscape's releases.

v3.34.1

Release version v3.34.1

Commits
  • 2510141 3.34.1
  • b76d9e1 Build 3.34.1
  • 9ebbac6 Docs: Add 3.34.1 to versions.json
  • 1a0f4de Merge pull request #3498 from Jaybhade/fix/astar-open-set-priority
  • 65e4bb1 test: use single quotes in the weighted A* path assertion
  • 069b464 Resort the A* open set when a queued node gets a lower score
  • f16dd20 Recompute round-polygon corners when node size or corner radius changes
  • e3e421c Cherry pick to main: Merge pull request #3491 from fedarko/fix-scroll-base
  • 39f638e Patch: Pinch-to-zoom throws "Cannot read properties of undefined (reading 'em...
  • See full diff in compare view
Attestation changes

This version has no provenance attestation, while the previous version (3.34.0) was attested. Review the package versions before updating.


Updates dompurify from 3.4.12 to 3.4.13

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.13

  • Fixed an issue with hook removal during IN_PLACE sanitization, thanks @​koyokr
  • Fixed an issue with hooks potentially bypassing the clone guard, thanks @​AkshayjainG
  • Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @​AkshayjainG
  • Bumped several dependencies where possible
Commits

Updates pinia from 4.0.2 to 4.0.3

Commits

Updates swagger-ui from 5.32.11 to 5.32.13

Release notes

Sourced from swagger-ui's releases.

v5.32.13

5.32.13 (2026-08-11)

Bug Fixes

  • a11y: add aria-labels to copy-to-clipboard buttons (#10842) (e6ce7d8)
  • a11y: add skip-to-operations link, banner and main landmarks (#10849) (92669ea)
  • a11y: close Authorization popup with Escape key and backdrop click (#10987) (311b0d2)
  • a11y: name and state for dark-mode toggle button (#10848) (13a90fa)
  • a11y: restore icon visibility in Windows High Contrast Mode (#10846) (edec467)
  • a11y: topbar logo and dark-mode toggle visible in HCM (#10847) (6beaebd)
  • a11y: use for model titles to convey emphasis semantically (#10876) (b4501b6)
  • ci: bump cycjimmy/semantic-release-action to v6.0.0 (#11001) (9b3eacb)
  • ci: fix Trivy security scan and add dependency vulnerability scan (#10996) (ff221a8)
  • style: reduce padding on inline code blocks in markdown (#7569) (#10789) (a1a6cdc)

Huge thanks to our contributors who made this release happen: @​bmatar, @​yogeshwaran-c, @​jonnyjackson26, @​rkdfx, and @​adrianodpdiaz

v5.32.12

5.32.12 (2026-08-03)

Bug Fixes

Commits
  • 2a33d78 chore(release): cut the 5.32.13 release
  • 9b3eacb fix(ci): bump cycjimmy/semantic-release-action to v6.0.0 (#11001)
  • 5fd1674 chore(deps): bump docker/build-push-action (#10998)
  • 19302a9 chore(deps): bump dependabot/fetch-metadata (#10997)
  • a1a6cdc fix(style): reduce padding on inline code blocks in markdown (#7569) (#10789)
  • e6ce7d8 fix(a11y): add aria-labels to copy-to-clipboard buttons (#10842)
  • 92669ea fix(a11y): add skip-to-operations link, banner and main landmarks (#10849)
  • edec467 fix(a11y): restore icon visibility in Windows High Contrast Mode (#10846)
  • 311b0d2 fix(a11y): close Authorization popup with Escape key and backdrop click (#10987)
  • 6beaebd fix(a11y): topbar logo and dark-mode toggle visible in HCM (#10847)
  • Additional commits viewable in compare view

Updates swagger-ui-dist from 5.32.11 to 5.32.13

Release notes

Sourced from swagger-ui-dist's releases.

v5.32.13

5.32.13 (2026-08-11)

Bug Fixes

  • a11y: add aria-labels to copy-to-clipboard buttons (#10842) (e6ce7d8)
  • a11y: add skip-to-operations link, banner and main landmarks (#10849) (92669ea)
  • a11y: close Authorization popup with Escape key and backdrop click (#10987) (311b0d2)
  • a11y: name and state for dark-mode toggle button (#10848) (13a90fa)
  • a11y: restore icon visibility in Windows High Contrast Mode (#10846) (edec467)
  • a11y: topbar logo and dark-mode toggle visible in HCM (#10847) (6beaebd)
  • a11y: use for model titles to convey emphasis semantically (#10876) (b4501b6)
  • ci: bump cycjimmy/semantic-release-action to v6.0.0 (#11001) (9b3eacb)
  • ci: fix Trivy security scan and add dependency vulnerability scan (#10996) (ff221a8)
  • style: reduce padding on inline code blocks in markdown (#7569) (#10789) (a1a6cdc)

Huge thanks to our contributors who made this release happen: @​bmatar, @​yogeshwaran-c, @​jonnyjackson26, @​rkdfx, and @​adrianodpdiaz

v5.32.12

5.32.12 (2026-08-03)

Bug Fixes

Commits
  • 2a33d78 chore(release): cut the 5.32.13 release
  • 9b3eacb fix(ci): bump cycjimmy/semantic-release-action to v6.0.0 (#11001)
  • 5fd1674 chore(deps): bump docker/build-push-action (#10998)
  • 19302a9 chore(deps): bump dependabot/fetch-metadata (#10997)
  • a1a6cdc fix(style): reduce padding on inline code blocks in markdown (#7569) (#10789)
  • e6ce7d8 fix(a11y): add aria-labels to copy-to-clipboard buttons (#10842)
  • 92669ea fix(a11y): add skip-to-operations link, banner and main landmarks (#10849)
  • edec467 fix(a11y): restore icon visibility in Windows High Contrast Mode (#10846)
  • 311b0d2 fix(a11y): close Authorization popup with Escape key and backdrop click (#10987)
  • 6beaebd fix(a11y): topbar logo and dark-mode toggle visible in HCM (#10847)
  • Additional commits viewable in compare view

Updates vue from 3.5.40 to 3.5.41

Release notes

Sourced from vue's releases.

v3.5.41

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.41 (2026-08-05)

Bug Fixes

Commits

Dependabot will resolve...

Description has been truncated

… with 9 updates

Bumps the production-minor-patch group with 9 updates in the /app directory:

| Package | From | To |
| --- | --- | --- |
| [@unhead/vue](https://github.com/unjs/unhead/tree/HEAD/packages/vue) | `3.2.3` | `3.3.2` |
| [@vueuse/core](https://github.com/vueuse/vueuse/tree/HEAD/packages/core) | `14.3.0` | `14.4.0` |
| [bootstrap-vue-next](https://github.com/bootstrap-vue-next/bootstrap-vue-next/tree/HEAD/packages/bootstrap-vue-next) | `0.45.8` | `0.46.1` |
| [cytoscape](https://github.com/cytoscape/cytoscape.js) | `3.34.0` | `3.34.1` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.12` | `3.4.13` |
| [pinia](https://github.com/vuejs/pinia) | `4.0.2` | `4.0.3` |
| [swagger-ui](https://github.com/swagger-api/swagger-ui) | `5.32.11` | `5.32.13` |
| [swagger-ui-dist](https://github.com/swagger-api/swagger-ui) | `5.32.11` | `5.32.13` |
| [vue](https://github.com/vuejs/core) | `3.5.40` | `3.5.41` |



Updates `@unhead/vue` from 3.2.3 to 3.3.2
- [Release notes](https://github.com/unjs/unhead/releases)
- [Commits](https://github.com/unjs/unhead/commits/v3.3.2/packages/vue)

Updates `@vueuse/core` from 14.3.0 to 14.4.0
- [Release notes](https://github.com/vueuse/vueuse/releases)
- [Commits](https://github.com/vueuse/vueuse/commits/v14.4.0/packages/core)

Updates `bootstrap-vue-next` from 0.45.8 to 0.46.1
- [Release notes](https://github.com/bootstrap-vue-next/bootstrap-vue-next/releases)
- [Changelog](https://github.com/bootstrap-vue-next/bootstrap-vue-next/blob/main/packages/bootstrap-vue-next/CHANGELOG.md)
- [Commits](https://github.com/bootstrap-vue-next/bootstrap-vue-next/commits/nuxt-v0.46.1/packages/bootstrap-vue-next)

Updates `cytoscape` from 3.34.0 to 3.34.1
- [Release notes](https://github.com/cytoscape/cytoscape.js/releases)
- [Commits](cytoscape/cytoscape.js@v3.34.0...v3.34.1)

Updates `dompurify` from 3.4.12 to 3.4.13
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.12...3.4.13)

Updates `pinia` from 4.0.2 to 4.0.3
- [Release notes](https://github.com/vuejs/pinia/releases)
- [Commits](vuejs/pinia@v4.0.2...v4.0.3)

Updates `swagger-ui` from 5.32.11 to 5.32.13
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Commits](swagger-api/swagger-ui@v5.32.11...v5.32.13)

Updates `swagger-ui-dist` from 5.32.11 to 5.32.13
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Commits](swagger-api/swagger-ui@v5.32.11...v5.32.13)

Updates `vue` from 3.5.40 to 3.5.41
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.40...v3.5.41)

---
updated-dependencies:
- dependency-name: "@unhead/vue"
  dependency-version: 3.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: "@vueuse/core"
  dependency-version: 14.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: bootstrap-vue-next
  dependency-version: 0.46.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: cytoscape
  dependency-version: 3.34.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: dompurify
  dependency-version: 3.4.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: pinia
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: swagger-ui
  dependency-version: 5.32.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: swagger-ui-dist
  dependency-version: 5.32.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: vue
  dependency-version: 3.5.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github

dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 24, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/app/production-minor-patch-ab4696e7c8 branch August 24, 2026 16:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants