An open index of dependabot pull requests across open source projects.

Bump the npm_and_yarn group across 6 directories with 14 updates

Merged
Number: #10
Type: Pull Request
State: Merged
Author: dependabot[bot] dependabot[bot]
Association: None
Comments: 0
Created: September 05, 2025 at 07:05 PM UTC
(2 months ago)
Updated: September 05, 2025 at 07:11 PM UTC
(2 months ago)
Merged: September 05, 2025 at 07:11 PM UTC
(2 months ago)
by ibiscum
Time to Close: 7 minutes
Labels:
dependencies javascript
Description:

Bumps the npm_and_yarn group with 6 updates in the /Chapter12/Exercise12.01 directory:

Package From To
vite 3.1.8 7.1.4
@vitejs/plugin-vue 3.1.2 6.0.1
@cypress/request 2.88.10 3.0.9
cypress 10.10.0 15.1.0
axios 0.21.4 1.11.0
start-server-and-test 1.14.0 2.1.0

Bumps the npm_and_yarn group with 6 updates in the /Chapter12/Exercise12.02 directory:

Package From To
vite 3.1.8 7.1.4
@vitejs/plugin-vue 3.1.2 6.0.1
@cypress/request 2.88.10 3.0.9
cypress 10.10.0 15.1.0
axios 0.21.4 1.11.0
start-server-and-test 1.14.0 2.1.0

Bumps the npm_and_yarn group with 6 updates in the /Chapter12/Exercise12.03 directory:

Package From To
vite 3.1.8 7.1.4
@vitejs/plugin-vue 3.1.2 6.0.1
@cypress/request 2.88.10 3.0.9
cypress 10.10.0 15.1.0
axios 0.21.4 1.11.0
start-server-and-test 1.14.0 2.1.0

Bumps the npm_and_yarn group with 6 updates in the /Chapter12/Exercise12.04 directory:

Package From To
vite 3.1.8 7.1.4
@vitejs/plugin-vue 3.1.2 6.0.1
@cypress/request 2.88.10 3.0.9
cypress 10.10.0 15.1.0
axios 0.21.4 1.11.0
start-server-and-test 1.14.0 2.1.0

Bumps the npm_and_yarn group with 1 update in the /Chapter13/Exercise13.01 directory: vite.
Bumps the npm_and_yarn group with 1 update in the /Chapter13/Exercise13.03 directory: vite.

Updates vite from 3.1.8 to 7.1.4

Release notes

Sourced from vite's releases.

v7.1.4

Please refer to CHANGELOG.md for details.

v7.1.3

Please refer to CHANGELOG.md for details.

v7.1.2

Please refer to CHANGELOG.md for details.

v7.1.1

Please refer to CHANGELOG.md for details.

create-vite@7.1.1

Please refer to CHANGELOG.md for details.

plugin-legacy@7.1.0

Please refer to CHANGELOG.md for details.

create-vite@7.1.0

Please refer to CHANGELOG.md for details.

v7.1.0

Please refer to CHANGELOG.md for details.

v7.1.0-beta.1

Please refer to CHANGELOG.md for details.

v7.1.0-beta.0

Please refer to CHANGELOG.md for details.

v7.0.6

Please refer to CHANGELOG.md for details.

v7.0.5

Please refer to CHANGELOG.md for details.

v7.0.4

Please refer to CHANGELOG.md for details.

v7.0.3

Please refer to CHANGELOG.md for details.

create-vite@7.0.3

Please refer to CHANGELOG.md for details.

v7.0.2

Please refer to CHANGELOG.md for details.

create-vite@7.0.2

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

7.1.4 (2025-09-01)

Bug Fixes

Miscellaneous Chores

  • remove unused constants entry from rolldown.config.ts (#20710) (537fcf9)

Code Refactoring

  • remove unnecessary minify parameter from finalizeCss (#20701) (8099582)

7.1.3 (2025-08-19)

Features

  • cli: add Node.js version warning for unsupported versions (#20638) (a1be1bf)
  • generate code frame for parse errors thrown by terser (#20642) (a9ba017)
  • support long lines in generateCodeFrame (#20640) (1559577)

Bug Fixes

  • deps: update all non-major dependencies (#20634) (4851cab)
  • optimizer: incorrect incompatible error (#20439) (446fe83)
  • support multiline new URL(..., import.meta.url) expressions (#20644) (9ccf142)

Performance Improvements

Miscellaneous Chores

Code Refactoring

Tests

7.1.2 (2025-08-12)

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite since your current version.


Updates @vitejs/plugin-vue from 3.1.2 to 6.0.1

Release notes

Sourced from @​vitejs/plugin-vue's releases.

plugin-vue@6.0.1

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.0

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.0-beta.2

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.0-beta.1

Please refer to CHANGELOG.md for details.

plugin-vue@6.0.0-beta.0

Please refer to CHANGELOG.md for details.

plugin-vue@5.2.4

Please refer to CHANGELOG.md for details.

plugin-vue@5.2.3

Please refer to CHANGELOG.md for details.

plugin-vue@5.2.2

Please refer to CHANGELOG.md for details.

plugin-vue@5.2.1

Please refer to CHANGELOG.md for details.

plugin-vue@5.2.0

Please refer to CHANGELOG.md for details.

plugin-vue@5.1.5

Please refer to CHANGELOG.md for details.

plugin-vue@5.1.4

Please refer to CHANGELOG.md for details.

plugin-vue@5.1.3

Please refer to CHANGELOG.md for details.

plugin-vue@5.1.2

Please refer to CHANGELOG.md for details.

plugin-vue@5.1.1

Please refer to CHANGELOG.md for details.

plugin-vue-jsx@5.1.1

Please refer to CHANGELOG.md for details.

plugin-vue@5.1.0

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from @​vitejs/plugin-vue's changelog.

6.0.1 (2025-07-28)

Bug Fixes

  • deps: update all non-major dependencies (#618) (46f6c99)
  • deps: update all non-major dependencies (#624) (fe03fa2)
  • deps: update all non-major dependencies (#629) (b969637)
  • deps: update all non-major dependencies (#633) (aa56ad1)
  • deps: update all non-major dependencies (#636) (5f471a3)
  • hmr: ignore non-js modules (#625) (f899ad3)

Performance Improvements

Miscellaneous Chores

  • deps: update dependency rollup to ^4.44.2 (#623) (76bf4c4)
  • deps: update dependency rollup to ^4.45.1 (#630) (4fd92b9)
  • group commits by category in changelog (#620) (1a32018)

Build System

6.0.0 (2025-06-24)

Bug Fixes

  • deps: update all non-major dependencies (#590) (43426c8)
  • deps: update all non-major dependencies (#600) (a4c32a8)
  • deps: update all non-major dependencies (#605) (67534e5)
  • deps: update all non-major dependencies (#609) (98c52eb)

Miscellaneous Chores

  • add description and keywords field to package.json (#604) (67ab76b)
  • deps: update dependency rollup to ^4.41.1 (#591) (256ac31)
  • deps: update dependency rollup to ^4.43.0 (#601) (a495edf)
  • remove Vite 7 beta from supported range (#598) (c7ddd62)

Code Refactoring

6.0.0-beta.2 (2025-06-06)

⚠ BREAKING CHANGES

  • bump required node version to 20.19+, 22.12+ and drop CJS build (#596)

Features

... (truncated)

Commits

Updates @cypress/request from 2.88.10 to 3.0.9

Release notes

Sourced from @​cypress/request's releases.

v3.0.9

3.0.9 (2025-07-24)

Bug Fixes

  • update patch version of form-data to address new critical Snyk vulnerability (a2f3199)

v3.0.8

3.0.8 (2025-03-04)

Bug Fixes

  • deps: update dependency qs to v6.14.0 (16066b6)

v3.0.7

3.0.7 (2024-12-09)

Bug Fixes

  • deps: update dependency qs to v6.13.1 (00d1835)

v3.0.6

3.0.6 (2024-10-29)

Bug Fixes

  • deps: update dependency tough-cookie to v5 (65ad82c)

v3.0.5

3.0.5 (2024-09-09)

Bug Fixes

  • deps: update dependency form-data to v4 (6b90580)

v3.0.4

3.0.4 (2024-09-05)

Bug Fixes

  • deps: update dependency form-data to ~2.5.0 (87b5e92)

v3.0.3

3.0.3 (2024-09-05)

... (truncated)

Commits
  • 3cffd53 Merge pull request #88 from ahayes91/update-form-data
  • 7c424d5 chore: fix lint issue
  • 7f6fdec chore: remove test now that we are on form-data 4.0.4
  • a2f3199 fix: update patch version of form-data to address new critical Snyk vulnerabi...
  • a1252dd Merge pull request #84 from cypress-io/renovate/qs-6.x
  • 16066b6 fix(deps): update dependency qs to v6.14.0
  • 5fd0770 Merge pull request #83 from cypress-io/renovate/cimg-node-18.x
  • b42b322 chore(deps): update node.js to v18.20.7
  • e79201a Merge pull request #80 from cypress-io/renovate/cimg-node-18.x
  • 0e4e875 Merge pull request #81 from cypress-io/renovate/qs-6.x
  • Additional commits viewable in compare view

Updates cypress from 10.10.0 to 15.1.0

Release notes

Sourced from cypress's releases.

v15.1.0

Changelog: https://docs.cypress.io/app/references/changelog#15.1.0

v15.0.0

Changelog: https://docs.cypress.io/app/references/changelog#15.0.0

v14.5.4

Changelog: https://docs.cypress.io/app/references/changelog#14-5-4

v14.5.3

Changelog: https://docs.cypress.io/app/references/changelog#14-5-3

v14.5.2

Changelog: https://docs.cypress.io/app/references/changelog#14-5-2

v14.5.1

Changelog: https://docs.cypress.io/app/references/changelog#14-5-1

v14.5.0

Changelog: https://docs.cypress.io/app/references/changelog#14-5-0

v14.4.1

Changelog: https://docs.cypress.io/app/references/changelog#14-4-1

v14.4.0

Changelog: https://docs.cypress.io/app/references/changelog#14-4-0

v14.3.3

Changelog: https://docs.cypress.io/app/references/changelog#14-3-3

v14.3.2

Changelog: https://docs.cypress.io/app/references/changelog#14-3-2

v14.3.1

Changelog: https://docs.cypress.io/app/references/changelog#14-3-1

v14.3.0

Changelog: https://docs.cypress.io/app/references/changelog#14-3-0

v14.2.1

Changelog: https://docs.cypress.io/app/references/changelog#14-2-1

v14.2.0

Changelog: https://docs.cypress.io/app/references/changelog#14-2-0

v14.1.0

Changelog: https://docs.cypress.io/app/references/changelog#14-1-0

v14.0.3

Changelog: https://docs.cypress.io/app/references/changelog#14-0-3

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by cypress-npm-publisher, a new releaser for cypress since your current version.


Updates axios from 0.21.4 to 1.11.0

Release notes

Sourced from axios's releases.

Release v1.11.0

Release notes:

Bug Fixes

  • form-data npm pakcage (#6970) (e72c193)
  • prevent RangeError when using large Buffers (#6961) (a2214ca)
  • types: resolve type discrepancies between ESM and CJS TypeScript declaration files (#6956) (8517aa1)

Contributors to this release

Release v1.10.0

Release notes:

Bug Fixes

  • adapter: pass fetchOptions to fetch function (#6883) (0f50af8)
  • form-data: convert boolean values to strings in FormData serialization (#6917) (5064b10)
  • package: add module entry point for React Native; (#6933) (3d343b8)

Features

Contributors to this release

Release v1.9.0

Release notes:

Bug Fixes

  • core: fix the Axios constructor implementation to treat the config argument as optional; (#6881) (6c5d4cd)
  • fetch: fixed ERR_NETWORK mapping for Safari browsers; (#6767) (dfe8411)
  • headers: allow iterable objects to be a data source for the set method; (#6873) (1b1f9cc)
  • headers: fix getSetCookie by using 'get' method for caseless access; (#6874) (d4f7df4)
  • headers: fixed support for setting multiple header values from an iterated source; (#6885) (f7a3b5e)
  • http: send minimal end multipart boundary (#6661) (987d2e2)
  • types: fix autocomplete for adapter config (#6855) (e61a893)

... (truncated)

Changelog

Sourced from axios's changelog.

1.11.0 (2025-07-22)

Bug Fixes

  • form-data npm pakcage (#6970) (e72c193)
  • prevent RangeError when using large Buffers (#6961) (a2214ca)
  • types: resolve type discrepancies between ESM and CJS TypeScript declaration files (#6956) (8517aa1)

Contributors to this release

1.10.0 (2025-06-14)

Bug Fixes

  • adapter: pass fetchOptions to fetch function (#6883) (0f50af8)
  • form-data: convert boolean values to strings in FormData serialization (#6917) (5064b10)
  • package: add module entry point for React Native; (#6933) (3d343b8)

Features

Contributors to this release

1.9.0 (2025-04-24)

Bug Fixes

  • core: fix the Axios constructor implementation to treat the config argument as optional; (#6881) (6c5d4cd)
  • fetch: fixed ERR_NETWORK mapping for Safari browsers; (#6767) (dfe8411)
  • headers: allow iterable objects to be a data source for the set method; (#6873) (1b1f9cc)
  • headers: fix getSetCookie by using 'get' method for caseless access; (#6874) (d4f7df4)

... (truncated)

Commits
  • b76c4ac chore(release): v1.11.0 (#6974)
  • e72c193 fix: form-data npm pakcage (#6970)
  • 8517aa1 fix(types): resolve type discrepancies between ESM and CJS TypeScript declara...
  • a2214ca fix: prevent RangeError when using large Buffers (#6961)
  • 6161947 refactor: use spread operator instead of '.apply()' (#6938)
  • a1d16dd refactor: use an object spread instead of Object.assign (#6939)
  • 07183cd chore(sponsor): update sponsor block (#6952)
  • ef36347 docs(CONTRIBUTING): update docs link for accuracy (#6894)
  • b29bd6a chore(sponsor): update sponsor block (#6948)
  • a406a93 chore(sponsor): update sponsor block (#6937)
  • Additional commits viewable in compare view

Updates start-server-and-test from 1.14.0 to 2.1.0

Release notes

Sourced from start-server-and-test's releases.

v2.1.0

2.1.0 (2025-09-04)

Features

v2.0.13

2.0.13 (2025-08-03)

Bug Fixes

  • deps: update dependency wait-on to v8.0.4 (#405) (6385e1d)

v2.0.12

2.0.12 (2025-05-15)

Bug Fixes

  • deps: update dependency debug to v4.4.1 (#403) (b3b82c0)

v2.0.11

2.0.11 (2025-03-13)

Bug Fixes

  • deps: update dependency wait-on to v8.0.3 (#400) (005ee08)

v2.0.10

2.0.10 (2025-01-14)

Bug Fixes

  • deps: update dependency wait-on to v8.0.2 (#399) (a514875)

v2.0.9

2.0.9 (2024-12-11)

Bug Fixes

  • deps: update dependency debug to v4.4.0 (#397) (0f057d7)

v2.0.8

2.0.8 (2024-09-16)

... (truncated)

Commits
  • b399fec feat: support axios proxy (#402)
  • 6385e1d fix(deps): update dependency wait-on to v8.0.4 (#405)
  • b3b82c0 fix(deps): update dependency debug to v4.4.1 (#403)
  • 005ee08 fix(deps): update dependency wait-on to v8.0.3 (#400)
  • a514875 fix(deps): update dependency wait-on to v8.0.2 (#399)
  • 0f057d7 fix(deps): update dependency debug to v4.4.0 (#397)
  • fe1c25d fix(deps): update dependency wait-on to v8.0.1
  • d814a72 fix(deps): update dependency wait-on to v8 (#386)
  • 78c6f53 fix(deps): update dependency debug to v4.3.7
  • 8ebb70b fix(deps): update dependency debug to v4.3.6
  • Additional commits viewable in compare view

Updates esbuild from 0.15.11 to 0.25.9

Release notes

Sourced from esbuild's releases.

v0.25.9

  • Better support building projects that use Yarn on Windows (#3131, #3663)

    With this release, you can now use esbuild to bundle projects that use Yarn Plug'n'Play on Windows on drives other than the C: drive. The problem was as follows:

    1. Yarn in Plug'n'Play mode on Windows stores its global module cache on the C: drive
    2. Some developers put their projects on the D: drive
    3. Yarn generates relative paths that use ../.. to get from the project directory to the cache directory
    4. Windows-style paths don't support directory traversal between drives via .. (so D:\.. is just D:)
    5. I didn't have access to a Windows machine for testing this edge case

    Yarn works around this edge case by pretending Windows-style paths beginning with C:\ are actually Unix-style paths beginning with /C:/, so the ../.. path segments are able to navigate across drives inside Yarn's implementation. This was broken for a long time in esbuild but I finally got access to a Windows machine and was able to debug and fix this edge case. So you should now be able to bundle these projects with esbuild.

  • Preserve parentheses around function expressions (#4252)

    The V8 JavaScript VM uses parentheses around function expressions as an optimization hint to immediately compile the function. Otherwise the function would be lazily-compiled, which has additional overhead if that function is always called immediately as lazy compilation involves parsing the function twice. You can read V8's blog post about this for more details.

    Previously esbuild did not represent parentheses around functions in the AST so they were lost during compilation. With this change, esbuild will now preserve parentheses around function expressions when they are present in the original source code. This means these optimization hints will not be lost when bundling with esbuild. In addition, esbuild will now automatically add this optimization hint to immediately-invoked function expressions. Here's an example:

    // Original code
    const fn0 = () => 0
    const fn1 = (() => 1)
    console.log(fn0, function() { return fn1() }())
    

    // Old output const fn0 = () => 0; const fn1 = () => 1; console.log(fn0, function() { return fn1(); }());

    // New output const fn0 = () => 0; const fn1 = (() => 1); console.log(fn0, (function() { return fn1(); })());

    Note that you do not want to wrap all function expressions in parentheses. This optimization hint should only be used for functions that are called on initial load. Using this hint for functions that are not called on initial load will unnecessarily delay the initial load. Again, see V8's blog post linked above for details.

  • Update Go from 1.23.10 to 1.23.12 (#4257, #4258)

    This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain false positive reports (specifically CVE-2025-4674 and CVE-2025-47907) from vulnerability scanners that only detect which version of the Go compiler esbuild uses.

v0.25.8

  • Fix another TypeScript parsing edge case (#4248)

    This fixes a regression with a change in the previous release that tries to more accurately parse TypeScript arrow functions inside the ?: operator. The regression specifically involves parsing an arrow function containing a #private identifier inside the middle of a ?: ternary operator inside a class body. This was fixed by propagating private identifier state into the parser clone used to speculatively parse the arrow function body. Here is an example of some affected code:

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2022

This changelog documents all esbuild versions published in the year 2022 (versions 0.14.11 through 0.16.12).

0.16.12

  • Loader defaults to js for extensionless files (#2776)

    Certain packages contain files without an extension. For example, the yargs package contains the file yargs/yargs which has no extension. Node, Webpack, and Parcel can all understand code that imports yargs/yargs because they assume that the file is JavaScript. However, esbuild was previously unable to understand this code because it relies on the file extension to tell it how to interpret the file. With this release, esbuild will now assume files without an extension are JavaScript files. This can be customized by setting the loader for "" (the empty string, representing files without an extension) to another loader. For example, if you want files without an extension to be treated as CSS instead, you can do that like this:

    • CLI:

      esbuild --bundle --loader:=css
      
    • JS:

      esbuild.build({
        bundle: true,
        loader: { '': 'css' },
      })
      
    • Go:

      api.Build(api.BuildOptions{
        Bundle: true,
        Loader: map[string]api.Loader{"": api.LoaderCSS},
      })
      

    In addition, the "type" field in package.json files now only applies to files with an explicit .js, .jsx, .ts, or .tsx extension. Previously it was incorrectly applied by esbuild to all files that had an extension other than .mjs, .mts, .cjs, or .cts including extensionless files. So for example an extensionless file in a "type": "module" package is now treated as CommonJS instead of ESM.

0.16.11

  • Avoid a syntax error in the presence of direct eval (#2761)

    The behavior of nested function declarations in JavaScript depends on whether the code is run in strict mode or not. It would be problematic if esbuild preserved nested function declarations in its output because then the behavior would depend on whether the output was run in strict mode or not instead of respecting the strict mode behavior of the original source code. To avoid this, esbuild transforms nested function declarations to preserve the intended behavior of the original source code regardless of whether the output is run in strict mode or not:

    // Original code
    if (true) {
      function foo() {}
      console.log(!!foo)
      foo = null
      console.log(!!foo)
    }
    

... (truncated)

Commits
  • 195e05c publish 0.25.9 to npm
  • 3dac33f fix #3131, fix #3663: yarnpnp + windows + D drive
  • 0f2c5c8 mock fs now supports multiple volumes on windows
  • 100a51e split out yarnpnp snapshot tests
  • 13aace3 remove C: assumption from windows snapshot tests
  • f1f413f fix #4252: preserve parentheses around functions
  • 1bc8091 fix #4257, close #4258: go 1.23.10 => 1.23.12
  • bc52135 move the go compiler ve...

    Description has been truncated

Pull Request Statistics
Commits:
1
Files Changed:
12
Additions:
+10656
Deletions:
-5814
Package Dependencies
Package:
axios
Ecosystem:
npm
Version Change:
0.21.4 → 1.11.0
Update Type:
Major
Package:
vite
Ecosystem:
npm
Version Change:
3.1.8 → 7.1.4
Update Type:
Major
Package:
cypress
Ecosystem:
npm
Version Change:
10.10.0 → 15.1.0
Update Type:
Major
Ecosystem:
npm
Version Change:
3.1.2 → 6.0.1
Update Type:
Major
Ecosystem:
npm
Version Change:
1.14.0 → 2.1.0
Update Type:
Major
Ecosystem:
npm
Version Change:
2.88.10 → 3.0.9
Update Type:
Major
Technical Details
ID: 7029315
UUID: 2803422482
Node ID: PR_kwDOPoDs486nGNUS
Host: GitHub
Repository: ibiscum/Frontend-Development-Projects-with-Vue.js-3
Merge State: Unknown