Bump the npm_and_yarn group across 12 directories with 42 updates

Open

Number: #12
Type: Pull Request
State: Open

Author:

dependabot[bot]
Association: None
Comments: 0

Created: September 10, 2025 at 08:05 PM UTC
(2 days ago)

Updated: September 10, 2025 at 08:05 PM UTC
(2 days ago)

Labels:
dependencies javascript

Description:

Bumps the npm_and_yarn group with 21 updates in the /chapter-02/2.5 directory:

Package	From	To
vue	`3.0.3`	`3.5.21`
@babel/traverse	`7.12.9`	`7.28.4`
ansi-regex	`3.0.0`	`3.0.1`
ansi-regex	`4.1.0`	`4.1.1`
ansi-regex	`5.0.0`	`5.0.1`
async	`2.6.3`	`2.6.4`
body-parser	`1.19.0`	`1.20.3`
express	`4.17.1`	`4.21.2`
qs	`6.5.2`	`6.5.3`
browserify-sign	`4.2.1`	`4.2.3`
cipher-base	`1.0.4`	`1.0.6`
decode-uri-component	`0.2.0`	`0.2.2`
dns-packet	`1.3.1`	`1.3.4`
ejs	`2.7.4`	`removed`
@vue/cli-plugin-babel	`4.5.9`	`5.0.9`
@vue/cli-plugin-eslint	`4.5.9`	`5.0.9`
@vue/cli-plugin-router	`4.5.19`	`5.0.9`
@vue/cli-plugin-vuex	`4.5.19`	`5.0.9`
@vue/cli-service	`4.5.9`	`5.0.9`
@vue/eslint-config-airbnb	`5.1.0`	`5.3.0`
minimist	`1.2.5`	`1.2.8`
tmp	`0.0.33`	`removed`
eslint	`6.8.0`	`9.35.0`

Bumps the npm_and_yarn group with 19 updates in the /chapter-03/3_10 directory:

Package	From	To
vue	`3.0.4`	`3.5.21`
@babel/traverse	`7.12.9`	`7.28.4`
ansi-regex	`3.0.0`	`3.0.1`
ansi-regex	`4.1.0`	`4.1.1`
ansi-regex	`5.0.0`	`5.0.1`
async	`2.6.3`	`2.6.4`
body-parser	`1.19.0`	`1.20.3`
express	`4.17.1`	`4.21.2`
qs	`6.5.2`	`6.5.3`
browserify-sign	`4.2.1`	`4.2.3`
cipher-base	`1.0.4`	`1.0.6`
decode-uri-component	`0.2.0`	`0.2.2`
dns-packet	`1.3.1`	`1.3.4`
ejs	`2.7.4`	`removed`
@vue/cli-plugin-babel	`4.5.9`	`5.0.9`
@vue/cli-plugin-eslint	`4.5.9`	`5.0.9`
@vue/cli-service	`4.5.9`	`5.0.9`
@vue/eslint-config-airbnb	`5.1.0`	`5.3.0`
minimist	`1.2.5`	`1.2.8`
tmp	`0.0.33`	`removed`
eslint	`6.8.0`	`9.35.0`

Bumps the npm_and_yarn group with 19 updates in the /chapter-03/3_11 directory:

Package	From	To
vue	`3.0.4`	`3.5.21`
@babel/traverse	`7.12.9`	`7.28.4`
ansi-regex	`3.0.0`	`3.0.1`
ansi-regex	`4.1.0`	`4.1.1`
ansi-regex	`5.0.0`	`5.0.1`
async	`2.6.3`	`2.6.4`
body-parser	`1.19.0`	`1.20.3`
express	`4.17.1`	`4.21.2`
qs	`6.5.2`	`6.5.3`
browserify-sign	`4.2.1`	`4.2.3`
cipher-base	`1.0.4`	`1.0.6`
decode-uri-component	`0.2.0`	`0.2.2`
dns-packet	`1.3.1`	`1.3.4`
ejs	`2.7.4`	`removed`
@vue/cli-plugin-babel	`4.5.9`	`5.0.9`
@vue/cli-plugin-eslint	`4.5.9`	`5.0.9`
@vue/cli-service	`4.5.9`	`5.0.9`
@vue/eslint-config-airbnb	`5.1.0`	`5.3.0`
minimist	`1.2.5`	`1.2.8`
tmp	`0.0.33`	`removed`
eslint	`6.8.0`	`9.35.0`

Bumps the npm_and_yarn group with 19 updates in the /chapter-03/3_9 directory:

Package	From	To
vue	`3.0.4`	`3.5.21`
@babel/traverse	`7.12.9`	`7.28.4`
ansi-regex	`3.0.0`	`3.0.1`
ansi-regex	`4.1.0`	`4.1.1`
ansi-regex	`5.0.0`	`5.0.1`
async	`2.6.3`	`2.6.4`
body-parser	`1.19.0`	`1.20.3`
express	`4.17.1`	`4.21.2`
qs	`6.5.2`	`6.5.3`
browserify-sign	`4.2.1`	`4.2.3`
cipher-base	`1.0.4`	`1.0.6`
decode-uri-component	`0.2.0`	`0.2.2`
dns-packet	`1.3.1`	`1.3.4`
ejs	`2.7.4`	`removed`
@vue/cli-plugin-babel	`4.5.9`	`5.0.9`
@vue/cli-plugin-eslint	`4.5.9`	`5.0.9`
@vue/cli-service	`4.5.9`	`5.0.9`
@vue/eslint-config-airbnb	`5.1.0`	`5.3.0`
minimist	`1.2.5`	`1.2.8`
tmp	`0.0.33`	`removed`
eslint	`6.8.0`	`9.35.0`

Bumps the npm_and_yarn group with 17 updates in the /chapter-04/4_4 directory:

Package	From	To
vue	`3.0.4`	`3.5.21`
@babel/traverse	`7.12.9`	`7.28.4`
ansi-regex	`3.0.0`	`3.0.1`
ansi-regex	`4.1.0`	`4.1.1`
ansi-regex	`5.0.0`	`5.0.1`
async	`2.6.3`	`2.6.4`
body-parser	`1.19.0`	`1.20.3`
express	`4.17.1`	`4.21.2`
qs	`6.5.2`	`6.5.3`
browserify-sign	`4.2.1`	`4.2.3`
cipher-base	`1.0.4`	`1.0.6`
decode-uri-component	`0.2.0`	`0.2.2`
dns-packet	`1.3.1`	`1.3.4`
ejs	`2.7.4`	`removed`
@vue/cli-plugin-babel	`4.5.9`	`5.0.9`
@vue/cli-plugin-eslint	`4.5.9`	`5.0.9`
@vue/cli-service	`4.5.9`	`5.0.9`
@vue/eslint-config-airbnb	`5.1.0`	`5.3.0`
minimist	`1.2.5`	`1.2.8`

Bumps the npm_and_yarn group with 17 updates in the /chapter-04/4_5 directory:

Package	From	To
vue	`3.0.4`	`3.5.21`
@babel/traverse	`7.12.9`	`7.28.4`
ansi-regex	`3.0.0`	`3.0.1`
ansi-regex	`4.1.0`	`4.1.1`
ansi-regex	`5.0.0`	`5.0.1`
async	`2.6.3`	`2.6.4`
body-parser	`1.19.0`	`1.20.3`
express	`4.17.1`	`4.21.2`
qs	`6.5.2`	`6.5.3`
browserify-sign	`4.2.1`	`4.2.3`
cipher-base	`1.0.4`	`1.0.6`
decode-uri-component	`0.2.0`	`0.2.2`
dns-packet	`1.3.1`	`1.3.4`
ejs	`2.7.4`	`removed`
@vue/cli-plugin-babel	`4.5.9`	`5.0.9`
@vue/cli-plugin-eslint	`4.5.9`	`5.0.9`
@vue/cli-service	`4.5.9`	`5.0.9`
@vue/eslint-config-airbnb	`5.1.0`	`5.3.0`
minimist	`1.2.5`	`1.2.8`

Bumps the npm_and_yarn group with 17 updates in the /chapter-04/4_6 directory:

Package	From	To
vue	`3.0.4`	`3.5.21`
@babel/traverse	`7.12.9`	`7.28.4`
ansi-regex	`3.0.0`	`3.0.1`
ansi-regex	`4.1.0`	`4.1.1`
ansi-regex	`5.0.0`	`5.0.1`
async	`2.6.3`	`2.6.4`
body-parser	`1.19.0`	`1.20.3`
express	`4.17.1`	`4.21.2`
qs	`6.5.2`	`6.5.3`
browserify-sign	`4.2.1`	`4.2.3`
cipher-base	`1.0.4`	`1.0.6`
decode-uri-component	`0.2.0`	`0.2.2`
dns-packet	`1.3.1`	`1.3.4`
ejs	`2.7.4`	`removed`
@vue/cli-plugin-babel	`4.5.9`	`5.0.9`
@vue/cli-plugin-eslint	`4.5.9`	`5.0.9`
@vue/cli-service	`4.5.9`	`5.0.9`
@vue/eslint-config-airbnb	`5.1.0`	`5.3.0`
minimist	`1.2.5`	`1.2.8`

Bumps the npm_and_yarn group with 17 updates in the /chapter-04/4_7 directory:

Package	From	To
vue	`3.0.4`	`3.5.21`
@babel/traverse	`7.12.9`	`7.28.4`
ansi-regex	`3.0.0`	`3.0.1`
ansi-regex	`4.1.0`	`4.1.1`
ansi-regex	`5.0.0`	`5.0.1`
async	`2.6.3`	`2.6.4`
body-parser	`1.19.0`	`1.20.3`
express	`4.17.1`	`4.21.2`
qs	`6.5.2`	`6.5.3`
browserify-sign	`4.2.1`	`4.2.3`
cipher-base	`1.0.4`	`1.0.6`
decode-uri-component	`0.2.0`	`0.2.2`
dns-packet	`1.3.1`	`1.3.4`
ejs	`2.7.4`	`removed`
@vue/cli-plugin-babel	`4.5.9`	`5.0.9`
@vue/cli-plugin-eslint	`4.5.9`	`5.0.9`
@vue/cli-service	`4.5.9`	`5.0.9`
@vue/eslint-config-airbnb	`5.1.0`	`5.3.0`
minimist	`1.2.5`	`1.2.8`

Bumps the npm_and_yarn group with 17 updates in the /chapter-04/4_8 directory:

Package	From	To
vue	`3.0.4`	`3.5.21`
@babel/traverse	`7.12.9`	`7.28.4`
ansi-regex	`3.0.0`	`3.0.1`
ansi-regex	`4.1.0`	`4.1.1`
ansi-regex	`5.0.0`	`5.0.1`
async	`2.6.3`	`2.6.4`
body-parser	`1.19.0`	`1.20.3`
express	`4.17.1`	`4.21.2`
qs	`6.5.2`	`6.5.3`
browserify-sign	`4.2.1`	`4.2.3`
cipher-base	`1.0.4`	`1.0.6`
decode-uri-component	`0.2.0`	`0.2.2`
dns-packet	`1.3.1`	`1.3.4`
ejs	`2.7.4`	`removed`
@vue/cli-plugin-babel	`4.5.9`	`5.0.9`
@vue/cli-plugin-eslint	`4.5.9`	`5.0.9`
@vue/cli-service	`4.5.9`	`5.0.9`
@vue/eslint-config-airbnb	`5.1.0`	`5.3.0`
minimist	`1.2.5`	`1.2.8`

Bumps the npm_and_yarn group with 17 updates in the /chapter-04/4_9 directory:

Package	From	To
vue	`3.0.4`	`3.5.21`
@babel/traverse	`7.12.9`	`7.28.4`
ansi-regex	`3.0.0`	`3.0.1`
ansi-regex	`4.1.0`	`4.1.1`
ansi-regex	`5.0.0`	`5.0.1`
async	`2.6.3`	`2.6.4`
body-parser	`1.19.0`	`1.20.3`
express	`4.17.1`	`4.21.2`
qs	`6.5.2`	`6.5.3`
browserify-sign	`4.2.1`	`4.2.3`
cipher-base	`1.0.4`	`1.0.6`
decode-uri-component	`0.2.0`	`0.2.2`
dns-packet	`1.3.1`	`1.3.4`
ejs	`2.7.4`	`removed`
@vue/cli-plugin-babel	`4.5.9`	`5.0.9`
@vue/cli-plugin-eslint	`4.5.9`	`5.0.9`
@vue/cli-service	`4.5.9`	`5.0.9`
@vue/eslint-config-airbnb	`5.1.0`	`5.3.0`
minimist	`1.2.5`	`1.2.8`

Bumps the npm_and_yarn group with 22 updates in the /chapter-08/8.6 directory:

Package	From	To
vue	`2.6.11`	`3.0.0`
@babel/traverse	`7.10.4`	`7.28.4`
ansi-regex	`3.0.0`	`3.0.1`
ansi-regex	`4.1.0`	`4.1.1`
ansi-regex	`5.0.0`	`5.0.1`
ajv	`6.12.2`	`6.12.6`
async	`2.6.3`	`2.6.4`
body-parser	`1.19.0`	`1.20.3`
express	`4.17.1`	`4.21.2`
qs	`6.5.2`	`6.5.3`
browserify-sign	`4.2.0`	`4.2.3`
cipher-base	`1.0.4`	`1.0.6`
decode-uri-component	`0.2.0`	`0.2.2`
dns-packet	`1.3.1`	`1.3.4`
ejs	`2.7.4`	`removed`
@vue/cli-plugin-babel	`4.4.6`	`5.0.9`
@vue/cli-plugin-eslint	`4.4.6`	`5.0.9`
@vue/cli-service	`4.4.6`	`5.0.9`
@vue/eslint-config-airbnb	`5.1.0`	`5.3.0`
minimist	`1.2.5`	`1.2.8`
tmp	`0.0.33`	`removed`
eslint	`6.8.0`	`9.35.0`
eslint-plugin-vue	`6.2.2`	`10.4.0`
vue-template-compiler	`2.6.11`	`2.7.16`

Bumps the npm_and_yarn group with 9 updates in the /chapter-09/09.2 directory:

Package	From	To
vue	`3.0.0`	`3.5.21`
json5	`1.0.1`	`1.0.2`
loader-utils	`1.4.0`	`1.4.2`
serialize-javascript	`2.1.2`	`4.0.0`
terser-webpack-plugin	`1.4.3`	`1.4.6`
tmp	`0.0.33`	`removed`
eslint	`6.8.0`	`9.35.0`
eslint-plugin-vue	`6.2.2`	`10.4.0`
y18n	`4.0.0`	`4.0.3`

Updates vue from 3.0.3 to 3.5.21

Release notes

Sourced from vue's releases.

v3.5.21

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.20

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.19

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.18

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.17

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.16

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.15

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.14

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.13

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.12

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.11

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.10

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.9

For stable releases, please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vue's changelog.

3.5.21 (2025-09-02)

Bug Fixes

compiler-core: force dynamic slots when slot referencing scope vars (#9427) (99d54b2), closes #9380

compiler-sfc: check lang before attempt to compile script (#13508) (55922ff), closes #8368

compiler-sfc: support ${configDir} in paths for TypeScript 5.5+ (#13491) (8696e34), closes #13484

compiler-sfc: support global augments with named exports (#13789) (35da3c6)

custom-element: prevent defineCustomElement from mutating the options object (#13791) (e322436)

hmr: prevent __VUE_HMR_RUNTIME__ from being overwritten by vue runtime in 3rd-party libraries (#13817) (1392734), closes vitejs/vite-plugin-vue#644

hmr: prevent update unmounting component during HMR reload (#13815) (ef20b86), closes vitejs/vite-plugin-vue#599

runtime-core: disable tracking block in h function (#8213) (8f6b505), closes #6913

runtime-core: use separate emits caches for components and mixins (#11661) (15fc75f)

Suspence: handle Suspense + KeepAlive HMR updating edge case (#13076) (5d75a17), closes #13075

Teleport: hydrate disabled Teleport with undefined target (#11235) (00978f7), closes #11230

templateRef: prevent unnecessary set ref on dynamic ref change or component unmount (#12642) (93ba107), closes #12639

watch: use maximum depth for duplicates (#13434) (f2699a5)

Performance Improvements

improve regexp performance with non-capturing groups (#13567) (1e8b65a)

3.5.20 (2025-08-25)

Bug Fixes

runtime-dom: add name to vShow for prop mismatch check (#13806) (1031e8d), closes #13805 re-fix #13744 revert #13777

3.5.19 (2025-08-21)

Bug Fixes

compiler-core: adjacent v-else should cause a compiler error (#13699) (911e670), closes #13698

compiler-core: prevent cached array children from retaining detached dom nodes (#13691) (7f60ef8), closes element-plus/element-plus#21408 #13211

compiler-sfc: improve type inference for generic type aliases types (#12876) (d9dd628), closes #12872

compiler-sfc: throw mismatched script langs error before invoking babel (#13194) (0562548), closes #13193

compiler-ssr: disable v-memo transform in ssr vdom fallback branch (#13725) (0a202d8), closes #13724

devtools: clear performance measures (#13701) (c875019), closes #13700

hmr: prevent updating unmounting component during HMR rerender (#13775) (6e5143d), closes #13771 #13772

hydration: also set vShow name if __FEATURE_PROD_HYDRATION_MISMATCH_DETAILS__ flag is enabled (#13777) (439e1a5), closes #13744

reactivity: warn on nested readonly ref update during unwrapping (#12141) (1498821)

runtime-core: avoid setting direct ref of useTemplateRef in dev (#13449) (4a2953f)

... (truncated)

Commits

4b6cb1f release: v3.5.21
5d75a17 fix(Suspence): handle Suspense + KeepAlive HMR updating edge case (#13076)
55922ff fix(compiler-sfc): check lang before attempt to compile script (#13508)
1e8b65a perf: improve regexp performance with non-capturing groups (#13567)
f2699a5 fix(watch): use maximum depth for duplicates (#13434)
99d54b2 fix(compiler-core): force dynamic slots when slot referencing scope vars (#9427)
15fc75f fix(runtime-core): use separate emits caches for components and mixins (#11661)
4810f14 chore(types): compatible with TS 5.8 (#12973)
7171def refactor: remove canary release workflows (#13794)
26bce3d chore: update side effect annotations to use standardized format (#13839)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vue since your current version.

Updates @babel/traverse from 7.12.9 to 7.28.4

Release notes

Sourced from @babel/traverse's releases.

v7.28.4 (2025-09-05)

Thanks @gwillen and @mrginglymus for your first PRs!

:house: Internal

babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types

#17493 Update Jest to v30.1.1 (@JLHwung)

babel-plugin-transform-regenerator

#17455 chore: Clean up transform-regenerator (@liuxingbaoyu)

babel-core

#17474 Switch to @jridgewell/remapping (@mrginglymus)

Committers: 5

Babel Bot (@babel-bot)

Bill Collins (@mrginglymus)

Glenn Willen (@gwillen)

Huáng Jùnliàng (@JLHwung)

@liuxingbaoyu

v7.28.3 (2025-08-14)

:eyeglasses: Spec Compliance

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

#17443 [static blocks] Do not inject new static fields after static code (@nicolo-ribaudo)

:bug: Bug Fix

babel-parser

#17465 fix(parser/typescript): parse import("./a", {with:{},}) (@easrng)

#17478 fix(parser): stop subscript parsing on async arrow (@JLHwung)

:nail_care: Polish

babel-plugin-transform-regenerator, babel-plugin-transform-runtime

#17363 Do not save last yield in call in temp var (@nicolo-ribaudo)

:memo: Documentation

#17448 move eslint-{parser,plugin} docs to the website (@JLHwung)

:house: Internal

#17454 Enable type checking for scripts and babel-worker.cjs (@JLHwung)

:microscope: Output optimization

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

#17444 Optimize do expression output (@JLHwung)

Committers: 5

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Jam Balaya (@JamBalaya56562)

Nicolò Ribaudo (@nicolo-ribaudo)

easrng (@easrng)

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.28.4 (2025-09-05)

:house: Internal

babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types

#17493 Update Jest to v30.1.1 (@JLHwung)

babel-plugin-transform-regenerator

#17455 chore: Clean up transform-regenerator (@liuxingbaoyu)

babel-core

#17474 Switch to @jridgewell/remapping (@mrginglymus)

v7.28.3 (2025-08-14)

:eyeglasses: Spec Compliance

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

#17443 [static blocks] Do not inject new static fields after static code (@nicolo-ribaudo)

:bug: Bug Fix

babel-parser

#17465 fix(parser/typescript): parse import("./a", {with:{},}) (@easrng)

#17478 fix(parser): stop subscript parsing on async arrow (@JLHwung)

:nail_care: Polish

babel-plugin-transform-regenerator, babel-plugin-transform-runtime

#17363 Do not save last yield in call in temp var (@nicolo-ribaudo)

:memo: Documentation

#17448 move eslint-{parser,plugin} docs to the website (@JLHwung)

:house: Internal

#17454 Enable type checking for scripts and babel-worker.cjs (@JLHwung)

:microscope: Output optimization

babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

#17444 Optimize do expression output (@JLHwung)

v7.28.2 (2025-07-24)

:bug: Bug Fix

babel-types

#17445 [babel 7] Make operator param in t.tsTypeOperator optional (@nicolo-ribaudo)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

#17441 fix: regeneratorDefine compatibility with es5 strict mode (@liuxingbaoyu)

v7.28.1 (2025-07-12)

:bug: Bug Fix

babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator

#17426 fix: regenerator correctly handles throw outside of try (@liuxingbaoyu)

:memo: Documentation

babel-types

#17422 Add missing FunctionParameter docs (@JLHwung)

... (truncated)

Commits

35055e3 v7.28.4
b41f8cd Update Jest to v30.1.1 (#17493)
22493b6 Improve @babel/traverse typings (#17485)
18d88b8 Improve @babel/core typings (#17471)
ef155f5 v7.28.3
741cbd2 chore: fix various typos across codebase (#17476)
5051613 Type-check .d.ts file with strict: true (#17461)
ccc5fae v7.28.0
4b4e7e2 Create babel-helper-globals (#17297)
cf5ae03 LVal coverage updates (Part 2) (#17391)
Additional commits viewable in compare view

Updates ansi-regex from 3.0.0 to 3.0.1

Commits

f545bdb 3.0.1
c57d4c2 fix a few old XO issues for backport
419250f Fix potential ReDoS (#37)
See full diff in compare view

Updates ansi-regex from 4.1.0 to 4.1.1

Commits

f545bdb 3.0.1
c57d4c2 fix a few old XO issues for backport
419250f Fix potential ReDoS (#37)
See full diff in compare view

Updates ansi-regex from 5.0.0 to 5.0.1

Commits

f545bdb 3.0.1
c57d4c2 fix a few old XO issues for backport
419250f Fix potential ReDoS (#37)
See full diff in compare view

Updates async from 2.6.3 to 2.6.4

Changelog

Sourced from async's changelog.

v2.6.4

Fix potential prototype pollution exploit (#1828)

Commits

c6bdaca Version 2.6.4
8870da9 Update built files
4df6754 update changelog
8f7f903 Fix prototype pollution vulnerability (#1828)
See full diff in compare view

Maintainer changes

This version was pushed to npm by hargasinski, a new releaser for async since your current version.

Updates body-parser from 1.19.0 to 1.20.3

Release notes

Sourced from body-parser's releases.

1.20.3

What's Changed

Important

deps: qs@6.13.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/body-parser#522

ci: fix errors in ci github action for node 8 and 9 by @inigomarquinez in expressjs/body-parser#523

fix: pin to node@22.4.1 by @wesleytodd in expressjs/body-parser#527

deps: qs@6.12.3 by @melikhov-dev in expressjs/body-parser#521

Add OSSF Scorecard badge by @bjohansebas in expressjs/body-parser#531

Linter by @UlisesGascon in expressjs/body-parser#534

Release: 1.20.3 by @UlisesGascon in expressjs/body-parser#535

New Contributors

@inigomarquinez made their first contribution in expressjs/body-parser#522

@melikhov-dev made their first contribution in expressjs/body-parser#521

@bjohansebas made their first contribution in expressjs/body-parser#531

@UlisesGascon made their first contribution in expressjs/body-parser#534

Full Changelog: https://github.com/expressjs/body-parser/compare/1.20.2...1.20.3

1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

perf: skip value escaping when unnecessary

deps: raw-body@2.5.2

1.20.1

deps: qs@6.11.0

perf: remove unnecessary object clone

1.20.0

Fix error message for json parse whitespace in strict

Fix internal error when inflated body exceeds limit

Prevent loss of async hooks context

Prevent hanging when request already read

deps: depd@2.0.0

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

deps: http-errors@2.0.0

deps: depd@2.0.0

deps: statuses@2.0.1

deps: on-finished@2.4.1

deps: qs@6.10.3

... (truncated)

Changelog

Sourced from body-parser's changelog.

1.20.3 / 2024-09-10

deps: qs@6.13.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

1.20.2 / 2023-02-21

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

perf: skip value escaping when unnecessary

deps: raw-body@2.5.2

1.20.1 / 2022-10-06

deps: qs@6.11.0

perf: remove unnecessary object clone

1.20.0 / 2022-04-02

Fix error message for json parse whitespace in strict

Fix internal error when inflated body exceeds limit

Prevent loss of async hooks context

Prevent hanging when request already read

deps: depd@2.0.0

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

deps: http-errors@2.0.0

deps: depd@2.0.0

deps: statuses@2.0.1

deps: on-finished@2.4.1

deps: qs@6.10.3

deps: raw-body@2.5.1

deps: http-errors@2.0.0

1.19.2 / 2022-02-15

deps: bytes@3.1.2

deps: qs@6.9.7

Fix handling of __proto__ keys

deps: raw-body@2.4.3

deps: bytes@3.1.2

1.19.1 / 2021-12-10

... (truncated)

Commits

1752951 1.20.3
39744cf chore: linter (#534)
b2695c4 Merge commit from fork
ade0f3f add scorecard to readme (#531)
99a1bd6 deps: qs@6.12.3 (#521)
9478591 fix: pin to node@22.4.1
83db46a ci: fix errors in ci github action for node 8 and 9 (#523)
9d4e212 chore: add support for OSSF scorecard reporting (#522)
ee91374 1.20.2
368a93a Fix strict json error message on Node.js 19+
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.

Updates express from 4.17.1 to 4.21.2

Release notes

Sourced from express's releases.

4.21.2

What's Changed

Add funding field (v4) by @bjohansebas in expressjs/express#6065

deps: path-to-regexp@0.1.11 by @blakeembrey in expressjs/express#5956

deps: bump path-to-regexp@0.1.12 by @jonchurch in expressjs/express#6209

Release: 4.21.2 by @UlisesGascon in expressjs/express#6094

Full Changelog: https://github.com/expressjs/express/compare/4.21.1...4.21.2

4.21.1

What's Changed

Backport a fix for CVE-2024-47764 to the 4.x branch by @joshbuker in expressjs/express#6029

Release: 4.21.1 by @UlisesGascon in expressjs/express#6031

Full Changelog: https://github.com/expressjs/express/compare/4.21.0...4.21.1

4.21.0

What's Changed

Deprecate "back" magic string in redirects by @blakeembrey in expressjs/express#5935

finalhandler@1.3.1 by @wesleytodd in expressjs/express#5954

fix(deps): serve-static@1.16.2 by @wesleytodd in expressjs/express#5951

Upgraded dependency qs to 6.13.0 to match qs in body-parser by @agadzinski93 in expressjs/express#5946

New Contributors

@agadzinski93 made their first contribution in expressjs/express#5946

Full Changelog: https://github.com/expressjs/express/compare/4.20.0...4.21.0

4.20.0

What's Changed

Importan...
Description has been truncated

Pull Request Statistics

Commits:
1

Files Changed:
24

Additions:
+129764

Deletions:
-116659

Package Dependencies

Package:
eslint

Ecosystem:
npm

Version Change:
6.8.0 → 9.35.0

Update Type:
Major

Package:
@babel/traverse

Ecosystem:
npm

Version Change:
7.12.9 → 7.28.4

Update Type:
Minor

Package:
express

Ecosystem:
npm

Version Change:
4.17.1 → 4.21.2

Update Type:
Minor

Package:
vue

Ecosystem:
npm

Version Change:
3.0.3 → 3.5.21

Update Type:
Minor

Package:
decode-uri-component

Ecosystem:
npm

Version Change:
0.2.0 → 0.2.2

Update Type:
Patch

Package:
async

Ecosystem:
npm

Version Change:
2.6.3 → 2.6.4

Update Type:
Patch

Package:
browserify-sign

Ecosystem:
npm

Version Change:
4.2.1 → 4.2.3

Update Type:
Patch

Package:
minimist

Ecosystem:
npm

Version Change:
1.2.5 → 1.2.8

Update Type:
Patch

Package:
ejs

Ecosystem:
npm

Version Change:
2.7.4 → removed

Package:
qs

Ecosystem:
npm

Version Change:
6.5.2 → 6.5.3

Update Type:
Patch

Package:
dns-packet

Ecosystem:
npm

Version Change:
1.3.1 → 1.3.4

Update Type:
Patch

Package:
ansi-regex

Ecosystem:
npm

Version Change:
3.0.0 → 3.0.1

Update Type:
Patch

Package:
body-parser

Ecosystem:
npm

Version Change:
1.19.0 → 1.20.3

Update Type:
Minor

Package:
@vue/cli-service

Ecosystem:
npm

Version Change:
4.5.9 → 5.0.9

Update Type:
Major

Package:
@vue/cli-plugin-babel

Ecosystem:
npm

Version Change:
4.5.9 → 5.0.9

Update Type:
Major

Package:
@vue/cli-plugin-eslint

Ecosystem:
npm

Version Change:
4.5.9 → 5.0.9

Update Type:
Major

Package:
@vue/cli-plugin-router

Ecosystem:
npm

Version Change:
4.5.19 → 5.0.9

Update Type:
Major

Package:
@vue/cli-plugin-vuex

Ecosystem:
npm

Version Change:
4.5.19 → 5.0.9

Update Type:
Major

Package:
tmp

Ecosystem:
npm

Version Change:
0.0.33 → removed

Package:
@vue/eslint-config-airbnb

Ecosystem:
npm

Version Change:
5.1.0 → 5.3.0

Update Type:
Minor

Package:
cipher-base

Ecosystem:
npm

Version Change:
1.0.4 → 1.0.6

Update Type:
Patch

Security Advisories

cookie accepts cookie name, path, and domain with out of bounds characters

GHSA-pxg6-pf52-xh8x CVE-2024-47764 LOW

### Impact The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. For example, `serialize("userName=<script>alert('XSS3')</script>; Max-Age=25920...

Actions

View on GitHub View Repository All Dependabot PRs

Technical Details

ID:	`7445932`
UUID:	`2816708016`
Node ID:	`PR_kwDOPrPMbc6n442w`
Host:	GitHub
Repository:	ibiscum/Vue.js-3.0-Cookbook
Merge State:	Unknown

Bump the npm_and_yarn group across 12 directories with 42 updates

v3.5.21

v3.5.20

v3.5.19

v3.5.18

v3.5.17

v3.5.16

v3.5.15

v3.5.14

v3.5.13

v3.5.12

v3.5.11

v3.5.10

v3.5.9

3.5.21 (2025-09-02)

Bug Fixes

Performance Improvements

3.5.20 (2025-08-25)

Bug Fixes

3.5.19 (2025-08-21)

Bug Fixes

v7.28.4 (2025-09-05)

:house: Internal

Committers: 5

v7.28.3 (2025-08-14)

:eyeglasses: Spec Compliance

:bug: Bug Fix

:nail_care: Polish

:memo: Documentation

:house: Internal

:microscope: Output optimization

Committers: 5

v7.28.4 (2025-09-05)

:house: Internal

v7.28.3 (2025-08-14)

:eyeglasses: Spec Compliance

:bug: Bug Fix

:nail_care: Polish

:memo: Documentation

:house: Internal

:microscope: Output optimization

v7.28.2 (2025-07-24)

:bug: Bug Fix

v7.28.1 (2025-07-12)

:bug: Bug Fix

:memo: Documentation

v2.6.4

1.20.3

What's Changed

Important

Other changes

New Contributors

1.20.2

1.20.1

1.20.0

1.20.3 / 2024-09-10

1.20.2 / 2023-02-21

1.20.1 / 2022-10-06

1.20.0 / 2022-04-02

1.19.2 / 2022-02-15

1.19.1 / 2021-12-10

4.21.2

What's Changed

4.21.1

What's Changed

4.21.0

What's Changed

New Contributors

4.20.0

What's Changed

Importan... Description has been truncated

Pull Request Statistics

Package Dependencies

Security Advisories

cookie accepts cookie name, path, and domain with out of bounds characters

Actions

Technical Details

Importan...
Description has been truncated