Bump the client-v3-npm group across 1 directory with 22 updates by dependabot[bot] · Pull Request #1450 · dreamteamprod/DigiScript

dependabot · 2026-10-19T09:42:48Z

Bumps the client-v3-npm group with 22 updates in the /client-v3 directory:

Package	From	To
bootstrap-vue-next	`1.2.1`	`1.2.2`
dompurify	`3.4.15`	`3.4.17`
marked	`18.0.13`	`18.1.1`
vue	`3.5.43`	`3.5.44`
vue-router	`5.3.1`	`5.4.0`
yjs	`13.6.32`	`13.6.33`
@playwright/test	`1.63.0`	`1.64.1`
@types/lodash	`4.17.25`	`4.17.26`
@types/node	`26.6.2`	`26.6.5`
@typescript-eslint/eslint-plugin	`8.70.1`	`8.71.2`
@typescript-eslint/parser	`8.70.1`	`8.71.2`
@vitejs/plugin-vue	`6.0.9`	`6.0.10`
@vitest/ui	`4.1.11`	`4.1.12`
eslint	`10.11.0`	`10.13.0`
eslint-plugin-prettier	`5.5.6`	`5.5.7`
eslint-plugin-vue	`10.11.0`	`10.11.1`
globals	`17.12.0`	`17.13.0`
prettier	`3.9.8`	`3.9.10`
sass	`1.104.0`	`1.105.2`
typescript-eslint	`8.70.1`	`8.71.2`
vite	`8.3.0`	`8.3.4`
vitest	`4.1.11`	`4.1.12`

Updates bootstrap-vue-next from 1.2.1 to 1.2.2

Release notes

Sourced from bootstrap-vue-next's releases.

bootstrapvuenext: v1.2.2

1.2.2 (2026-09-25)

Bug Fixes

BTable: remove stale sortAsc/sortDesc/sortDefault slot types (#3349) (8aa3af4)

Changelog

Sourced from bootstrap-vue-next's changelog.

1.2.2 (2026-09-25)

Bug Fixes

BTable: remove stale sortAsc/sortDesc/sortDefault slot types (#3349) (8aa3af4)

Commits

0776789 chore(main): release bootstrapvuenext 1.2.2 (#3352)
8aa3af4 fix(BTable): remove stale sortAsc/sortDesc/sortDefault slot types (#3349)
52372d2 refactor: isAction computed property for clarity (#3346)
See full diff in compare view

Updates dompurify from 3.4.15 to 3.4.17

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.17

Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @manus-pi

Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @uttej-badwane

Fixed the SMIL attributeName guard in XHTML mode, thanks @Koukyosyumei

Hardened several smaller edge cases (namespaces, literal-text elements, isValidAttribute()), thanks @artiphishell

Added a purify-edge test runner as a compatibility check, thanks @anzal1

Clarified the IN_PLACE documentation in the README about possible risks

Updated several dependencies

DOMPurify 3.4.16

Fixed a problem with IN_PLACE node removal when working with hooks, thanks @manus-pi

Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @h-t-m

Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @ssi02014

Migrated from rollup to rolldown because performance, thanks @ssi02014

Bumped several dependencies where possible

Commits

a77a3e7 release: 3.4.17 (#1672)
b9b9d80 release: 3.4.16 (#1636)
See full diff in compare view

Updates marked from 18.0.13 to 18.1.1

Release notes

Sourced from marked's releases.

v18.1.1

18.1.1 (2026-10-12)

Bug Fixes

cli: honor an explicitly empty string input (#4113) (ec3a4e5)

end blockquote before a lazy line after a heading, hr or html block (#4115) (9e64a6a)

keep a backslash in a code span from hiding emphasis (#4117) (6a57018)

keep a decoded character reference from forming a new one (#4111) (6bbac0c), closes #38 #112

let indented and type 3-5 html blocks interrupt a paragraph (#4124) (eaa1fff)

make walkTokens linear by appending values in place (#4121) (627d9ae), closes #4120

match pre, script, style and textarea as whole tag names (#4114) (0db74cb)

preserve enclosing link state after parsing images (#4123) (cc07bb9)

respect tab stops in list continuation indentation (#4119) (4bd2528)

Performance Improvements

avoid repeated raw string copies in nested lists (#4082) (7e8754d)

v18.1.0

18.1.0 (2026-10-05)

Bug Fixes

avoid cubic backtracking on unicode whitespace in a link destination (#4106) (0d20220)

load CLI configs with top-level await (#4100) (c61543e)

reject unbalanced parentheses in link destinations (#4107) (3363c99)

Features

add linkParenPossible to lexer state to fail fast for link token generation (#4070) (4ee44f7)

v18.0.14

18.0.14 (2026-09-22)

Bug Fixes

allow indented lines in setext heading text (#4095) (7d05530)

decode numeric character references in text (#4076) (cead8de)

keep text after empty nested blockquote (#4101) (1b89557), closes #4098

preserve internal tabs in list item content (#4086) (e136da7)

strip whitespace when normalizing link reference labels (#4091) (c7ee43a)

support GFM protocol autolinks (#4067) (7f7a496)

Commits

cdbdc01 chore(release): 18.1.1 [skip ci]
2134976 docs: add AGENTS.md (#4125)
699a969 chore(deps-dev): bump handlebars from 4.7.9 to 4.7.10 (#4133)
6a57018 fix: keep a backslash in a code span from hiding emphasis (#4117)
eaa1fff fix: let indented and type 3-5 html blocks interrupt a paragraph (#4124)
7e8754d perf: avoid repeated raw string copies in nested lists (#4082)
cc07bb9 fix: preserve enclosing link state after parsing images (#4123)
627d9ae fix: make walkTokens linear by appending values in place (#4121)
4bd2528 fix: respect tab stops in list continuation indentation (#4119)
9e64a6a fix: end blockquote before a lazy line after a heading, hr or html block (#4115)
Additional commits viewable in compare view

Updates vue from 3.5.43 to 3.5.44

Release notes

Sourced from vue's releases.

v3.5.44

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.44 (2026-10-13)

Bug Fixes

compat: expose _setupProxy for Vue 2.7 compiled script setup (fix #11164) (#15618) (f08059d)

compiler-core: parenthesise v-for key in v-memo cache guard (#15724) (d084b90), closes #15723

compiler-dom: correctly stringify 0 and false in v-html (#15571) (9f3b437)

compiler-dom: inject transition persisted for v-show in production (#15783) (89cb272)

compiler-sfc: error when defineModel prop options reference a destructured prop (#15604) (38012a5), closes #15602

custom-element: skip mounting an async custom element removed while its component loads (#15777) (0f8e7b4), closes #15775

hydration: observe children of a display: contents root in hydrateOnVisible (#15773) (7f688e8)

KeepAlive: unmount pruned current component when its vnode was cloned on mount (#15711) (92798ac), closes #15710

reactivity: avoid mutating native array iterators (#15703) (7f9d45d), closes #15643

reactivity: do not track deps in watcher callbacks run inside another effect (#15782) (db00fe9), closes #5009

reactivity: once watcher should stop when its callback throws (#15755) (ae4bd94)

reactivity: preserve shallow collection semantics (#15793) (b600466), closes #15792

runtime-core: detect new prop keys when comparing full props (#15634) (702fa61), closes #15632

runtime-core: keep async placeholder for block patching and pending component updates (#15554) (05ec25f), closes #15551

runtime-core: only flush jobs queued by the root render itself (#15757) (0bea14b), closes #6728

runtime-core: render nothing for an invalid v-for range in production (#15742) (ad19e7d)

runtime-dom: preserve v-show display for unchanged style strings (#15794) (c0a6d3f)

runtime-dom: treat playsinline as a boolean attribute (#15627) (a084e44)

server-renderer: propagate async setup errors (#15857) (6930374), closes #15716

ssr: honor falsy vnode content overrides (#15769) (c11c5c8)

suspense: mount resolved async component with its own namespace (#15640) (2a086a2), closes #15639

suspense: skip rendering async components unmounted while pending (4ab865a)

teleport: move targetStart and keep children before targetAnchor (#15818) (d3c6e02), closes #15817

transition-group: measure nested groups against their moving outer item (#15848) (1936c87), closes #5385 #1531

transition: handle comment-wrapped component roots (#15853) (ff35014), closes #6080 #5500

Commits

bf5f0dd release: v3.5.44
6930374 fix(server-renderer): propagate async setup errors (#15857)
8e8c547 chore(deps): update all non-major dependencies (#15585)
4cb0ca8 chore(deps): update playground (#15685)
e38478f chore(deps): update dawidd6/action-download-artifact action to v27 (#15768)
1caed5a chore(deps): update compiler (#15586)
a49f451 chore(deps): update lint (#15680)
219b858 chore(deps): update build (#15679)
ff35014 fix(transition): handle comment-wrapped component roots (#15853)
d084b90 fix(compiler-core): parenthesise v-for key in v-memo cache guard (#15724)
Additional commits viewable in compare view

Updates vue-router from 5.3.1 to 5.4.0

Release notes

Sourced from vue-router's releases.

v5.4.0

   🚨 Breaking Changes

experimental: Normalize query values to arrays - by @posva in vuejs/router#2824 (f1fbc)

   🚀 Features

Accept a prebuilt matcher in createRouter - by @danielroe in vuejs/router#2804 (9de96)

UseScrollRestoration and onRouteRendered - by @posva in vuejs/router#2805 (e3dde)

Diagnose experimental beforeEnter migration - by @posva (b695c)

experimental:

Warn about legacy optional param removal - by @posva in vuejs/router#2818 (c2f92)

Extract hash params with definePage - by @posva (dbf2d)

Configure required and default hash params - by @posva (cef5c)

Never decode the hash, protect-only encoding - by @posva in vuejs/router#2760 (aca2c)

Allow custom regexp for path params in definePage - by @posva in vuejs/router#2822 (3a192)

router:

Restore hashes and top by default - by @posva (7c385)

   🐞 Bug Fixes

Resolve experimental guard redirects against target on history navigation - by @posva (2c5fb)

experimental:

Keep declared case of static prefix in MatcherPatternPathStar.build() - by @contactjawad in vuejs/router#2798 (4dc6b)

Make hash params optional and nullable - by @posva (d9a4c)

Exclude defaults from required hash params - by @posva (346e2)

Align hash parameter parsing with queries - by @posva (cf251)

Keep last hash param instead of throwing - by @posva (d1e8a)

Disallow required with a default for query params - by @posva (f60e9)

Make query params with a default optional on push - by @posva (fb604)

Do not inherit params, query, or hash on redirects - by @posva (02a92)

history:

Invalidate obsolete scroll positions - by @posva and @liuly0322 in vuejs/router#2814 (071f1)

unplugin:

Sanitize named view in definePage import - by @giaBaoJS in vuejs/router#2809 (0711d)

Keep hex character codes in param segments regexp - by @kwy404 in vuejs/router#2811 (07663)

   🏎 Performance

unplugin: Cache merged route overrides - by @posva in vuejs/router#2821 (732b7)

    View changes on GitHub

Commits

596d481 release: vue-router@5.4.0
2970e8e chore: fix back extends
16a62f8 chore(deps): upgrade dependencies (#2828)
b810a7e chore: remove unused types
a0efbde docs: adapt
2c5fbd6 fix: resolve experimental guard redirects against target on history navigation
6ef3163 refactor: allow undefined on optional param
8e89a60 chore: comment
72ceb99 refactor: absolute position
57dd1d6 refactor: allow guards to return relative location
Additional commits viewable in compare view

Updates yjs from 13.6.32 to 13.6.33

Release notes

Sourced from yjs's releases.

v13.6.33

set currentTarget of deep events right before calling observers - fixes #768, closes #801 713a2895

Thanks to @aartrost & @dikshit-n for the fixes!

yjs/yjs@v13.6.32...v13.6.33

Commits

9ea3a4f 13.6.33
713a289 set currentTarget of deep events right before calling observers - fixes #768,...
See full diff in compare view

Updates @playwright/test from 1.63.0 to 1.64.1

Release notes

Sourced from @playwright/test's releases.

v1.64.1

Bug Fixes

#43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0

#43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:
const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"
Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:
playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'
🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:
// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
</tr></table>

... (truncated)

Commits

cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
866cbb8 chore: mark v1.64.1 (#43354)
1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
Additional commits viewable in compare view

Updates @types/lodash from 4.17.25 to 4.17.26

Commits

See full diff in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.70.1 to 8.71.2

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)

eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)

eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)

eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)

eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)

type-utils: match linked packages and packages with missing version in TypeOrValueSpecifier (#12948)

❤️ Thank You

Abraham Guo

Brad Zacher @bradzacher

Evyatar Daud @StyleShit

Josh Goldberg

Vinccool96

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)

eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)

eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)

eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)

eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)

eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)

eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)

project-service: throttle cleanup when opening files (#12934)

type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

Diptajoy Mistry @diptomistry

Evyatar Daud @StyleShit

Josh Goldberg

Josh Goldberg ✨

Medhansh Poojari

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.71.2 (2026-10-12)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)

eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)

eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)

eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)

eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)

❤️ Thank You

Abraham Guo

Brad Zacher @bradzacher

Josh Goldberg

Vinccool96

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.1 (2026-10-05)

🩹 Fixes

eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)

eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)

eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)

eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)

eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)

eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)

eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)

❤️ Thank You

Diptajoy Mistry @diptomistry

Evyatar Daud @StyleShit

Josh Goldberg

Josh Goldberg ✨

Medhansh Poojari

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.0 (2026-09-28)

🚀 Features

... (truncated)

Commits

7488d68 chore(release): publish 8.71.2
d28bd0a fix(eslint-plugin): [prefer-optional-chain] safe fix when the chain ends with...
f4c77f4 fix(eslint-plugin): [no-unnecessary-type-parameters] parenthesize constraint ...
8ba1919 fix(eslint-plugin): [no-unused-vars] ignore type-only refs for after-used (#1...
29d25fa fix(eslint-plugin): [no-unnecessary-type-parameters] count instantiated mappe...
76786e8 test(eslint-plugin): [max-params] update TSFunctionType report location for E...
7062987 fix(eslint-plugin): [no-unused-vars] avoid false-positives when not using our...
d57b8da chore(release): publish 8.71.1
e8593b2 fix(eslint-plugin): [no-unnecessary-type-parameters] count instantiated mappe...
2211d3f fix(eslint-plugin): [prefer-optional-chain] check the constrained type (#12953)
Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.70.1 to 8.71.2

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)

eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)

eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)

eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)

eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)

type-utils: match linked packages and packages with missing version in TypeOrValueSpecifier (#12948)

❤️ Thank You

Abraham Guo

Brad Zacher @bradzacher

Evyatar Daud @StyleShit

Josh Goldberg

Vinccool96

Younsang Na @nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)

eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)

eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)

eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)

eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)

eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)

eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)

project-service: throttle cleanup when opening files (#12934)

type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

Diptajoy Mistry @diptomistry

Evyatar Daud @StyleShit

Josh Goldberg

Josh Goldberg ✨

Medhansh Poojari

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.71.2 (2026-10-12)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.1 (2026-10-05)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.0 (2026-09-28)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

7488d68 chore(release): publish 8.71.2
d57b8da chore(release): publish 8.71.1
8695664 chore(release): publish 8.71.0
See full diff in compare view

Updates @vitejs/plugin-vue from 6.0.9 to 6.0.10

Release notes

Sourced from @vitejs/plugin-vue's releases.

plugin-vue@6.0.10

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @vitejs/plugin-vue's changelog.

6.0.10 (2026-10-10)

Bug Fixes

plugin-vue: compile transformed normal scripts outside vapor mode (#857) (7b63e3c)

plugin-vue: correct AST reuse checks and allow Vue 3.6 RC (ccc06dd)

Documentation

plugin-vue: clarify compiler initialization hooks (55d0cab)

Commits

a03675e release: plugin-vue@6.0.10
7b63e3c fix(plugin-vue): compile transformed normal scripts outside vapor mode (#857)

github-actions · 2026-10-19T09:43:27Z