Skip to content

build(deps): bump the web-production group across 1 directory with 8 updates - #81

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/modules/web/web-production-aa57cd536c
Open

build(deps): bump the web-production group across 1 directory with 8 updates#81
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/modules/web/web-production-aa57cd536c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the web-production group with 8 updates in the /modules/web directory:

Package From To
@vueuse/core 11.3.0 14.4.0
@vueuse/shared 11.3.0 14.4.0
axios 1.19.0 1.20.0
element-plus 2.8.5 2.14.5
hotkeys-js 3.13.15 4.0.7
pinia 2.3.1 4.0.3
vue 3.5.41 3.5.42
vue-router 4.6.4 5.3.0

Updates @vueuse/core from 11.3.0 to 14.4.0

Release notes

Sourced from @​vueuse/core's releases.

v14.4.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v14.3.0

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits
  • 24160f9 chore: release v14.4.0 (#5552)
  • 6aa9d6d fix(useDraggable): end drag on pointercancel (#5550)
  • 5fe4945 fix(useElementSize): prefill size based on box option (#5524)
  • 0f6d55d fix(useVirtualList): recompute range when item size changes (#5533)
  • 8f26673 test(useTransition): widen lower bound for WebKit test (#5540)
  • 2cad765 fix(useEventBus): use tryOnScopeDispose to avoid operating Vue internal API...
  • 653283c fix(useGamepad): keep updating remaining gamepads after one disconnects (#5523)
  • d39699c docs(useTextareaAutosize): restore demo textarea autosizing (#5532)
  • 8442658 fix(useFetch): ignore stale abort error after refetch succeeds (#5525)
  • bccb159 fix: accept array template ref bound to v-for as observer target (#5514)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​vueuse/core since your current version.


Updates @vueuse/shared from 11.3.0 to 14.4.0

Release notes

Sourced from @​vueuse/shared's releases.

v14.4.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v14.3.0

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits
  • 24160f9 chore: release v14.4.0 (#5552)
  • 4aa1803 feat(useDebounceFn): add flush and isPending to filter system (#5259)
  • 99c5df9 chore: release v14.3.0
  • c541332 chore: replace exports testing with tsnapi and tsdown-stale-guard (#5366)
  • 52d688f fix(directive): create disposable directive func cleanup of side effects unmo...
  • df72450 chore: update deps
  • 0d98998 fix: add explicit ./package.json export to all packages (#5343)
  • 3b7820d docs(refManualReset): add deep reactivity usage note (#5201)
  • 8c252c3 refactor: change primitive to shallowReadonly, rename readonly usage to `...
  • 11edb34 build: upgrade tsdown, migrate attw validation to tsdown (#5328)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​vueuse/shared since your current version.


Updates axios from 1.19.0 to 1.20.0

Release notes

Sourced from axios's releases.

v1.20.0 — August 19, 2026

This release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.

⚠️ Breaking Changes & Deprecations

  • HTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (#11082)

🔒 Security Fixes

  • Runtime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (#11141)

🐛 Bug Fixes

  • Interceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (#11087, #11118)
  • Request Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (#11109)
  • XHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (#11094, #11121)
  • Node.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (#11091)
  • Core Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (#11096)

🔧 Maintenance & Chores

  • Dependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (#11092, #11098, #11099, #11106, #11107, #11122, #11123, #11126, #11127, #11133, #11140, #11143, #11144)
  • Documentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (#11101, #11113, #11097, #11119)
  • Sponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (#11124, #11136, #11137)
  • CI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (#11128, #11152)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog (axios/axios@v1.19.0...v1.20.0)

Changelog

Sourced from axios's changelog.

Changelog

Commits
  • 84a9f3b chore(release): prepare release 1.20.0 (#11152)
  • e6824ee fix: core methodList, HTTP adapter errors, and add tests (#11096)
  • d8a919f fix(xhr): flush final progress during the live loadend dispatch (#11121)
  • 2d2a21a fix(interceptors): tolerate nullish handlers in syncHandlerEntries (#11118)
  • d19040b fix: harden runtime option handling (#11141)
  • e0a02dd chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...
  • d10cb3a chore(deps-dev): bump the development_dependencies group with 4 updates (#11143)
  • 2c94646 chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (#11133)
  • 76c12bc chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (#11140)
  • ba98559 docs: add ScrapingBee sponsor (#11137)
  • Additional commits viewable in compare view

Updates element-plus from 2.8.5 to 2.14.5

Release notes

Sourced from element-plus's releases.

2.14.5

2026-08-21

Features

Bug fixes

  • Components [form-item] add alert role to validation message (#24680 by @​lazerg)
  • Components [input] expose word limit count to screen readers (#24679 by @​lazerg)
  • Components [date-picker] keep disabled-date reactive in panels (#24708 by @​lazerg)
  • Components [textarea] prevent autosize scroll reset in Firefox (#24724 by @​rzzf)
  • Components [date-picker] remove keyboard navigation for quarters (#24726 by @​keeplearning66)
  • Components [loading] loading spinner jiggling issue on chrome (#24737 by @​jiangyi1985)
  • Components [tabs] ssr env setting the default value causes tab to flicker (#24742 by @​btea)
  • Components [select] match input wrapper transition (#24709 by @​lazerg)
  • Components [tree-v2] sync checked state after clearing keys (#24756 by @​rzzf)

2.14.4

2026-08-07

Features

Bug fixes

Refactors

2.14.3

... (truncated)

Changelog

Sourced from element-plus's changelog.

2.14.5

2026-08-21

Features

Bug fixes

  • Components [form-item] add alert role to validation message (#24680 by @​lazerg)
  • Components [input] expose word limit count to screen readers (#24679 by @​lazerg)
  • Components [date-picker] keep disabled-date reactive in panels (#24708 by @​lazerg)
  • Components [textarea] prevent autosize scroll reset in Firefox (#24724 by @​rzzf)
  • Components [date-picker] remove keyboard navigation for quarters (#24726 by @​keeplearning66)
  • Components [loading] loading spinner jiggling issue on chrome (#24737 by @​jiangyi1985)
  • Components [tabs] ssr env setting the default value causes tab to flicker (#24742 by @​btea)
  • Components [select] match input wrapper transition (#24709 by @​lazerg)
  • Components [tree-v2] sync checked state after clearing keys (#24756 by @​rzzf)

2.14.4

2026-08-07

Features

Bug fixes

Refactors

2.14.3

... (truncated)

Commits
  • ba62d63 Merge pull request #24761 from element-plus/dev
  • bd5662e chore: Update changelog 2.14.5 (#24762)
  • 56cecb1 fix(components): [tree-v2] sync checked state after clearing keys (#24756)
  • e34196a fix(components): [select] match input wrapper transition (#24709)
  • 147d870 fix(components): [tabs] ssr env setting the default value causes tab to flick...
  • 23d35d6 chore(deps): update dependency @​vueuse/core to v14.4.0 (#24634)
  • 72bea3f feat(theme-chalk): expose form item margin bottom variable (#24752)
  • 3b155df chore(deps): update dependency vue-tsc to v3.3.10 (#24745)
  • c42c1bd fix(components): [loading] loading spinner jiggling issue on chrome (#24737)
  • ebe5edb chore(deps): update pnpm to v11.22.0 (#24734)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for element-plus since your current version.


Updates hotkeys-js from 3.13.15 to 4.0.7

Release notes

Sourced from hotkeys-js's releases.

v4.0.7

Buy me a coffee npm bundle size npm version

Documentation v4.0.7: https://raw.githack.com/jaywcjlove/hotkeys/b2d66a7/index.html
Comparing Changes: jaywcjlove/hotkeys-js@v4.0.6...v4.0.7

npm i hotkeys-js@4.0.7
  • 🐞 fix: ensure hotkeys.trigger() fires wildcard (*) registered handlers (#547) 35e00c9 @​homayounmmdy

v4.0.6

Buy me a coffee npm bundle size npm version

Documentation v4.0.6: https://raw.githack.com/jaywcjlove/hotkeys/edeab39/index.html
Comparing Changes: jaywcjlove/hotkeys-js@v4.0.6...v4.0.6

npm i hotkeys-js@4.0.6
  • 🐞 fix: ensure hotkeys.trigger() fires wildcard (*) registered handlers (#547) 35e00c9 @​homayounmmdy

v4.0.5

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026
…updates

Bumps the web-production group with 8 updates in the /modules/web directory:

| Package | From | To |
| --- | --- | --- |
| [@vueuse/core](https://github.com/vueuse/vueuse/tree/HEAD/packages/core) | `11.3.0` | `14.4.0` |
| [@vueuse/shared](https://github.com/vueuse/vueuse/tree/HEAD/packages/shared) | `11.3.0` | `14.4.0` |
| [axios](https://github.com/axios/axios) | `1.19.0` | `1.20.0` |
| [element-plus](https://github.com/element-plus/element-plus) | `2.8.5` | `2.14.5` |
| [hotkeys-js](https://github.com/jaywcjlove/hotkeys-js) | `3.13.15` | `4.0.7` |
| [pinia](https://github.com/vuejs/pinia) | `2.3.1` | `4.0.3` |
| [vue](https://github.com/vuejs/core) | `3.5.41` | `3.5.42` |
| [vue-router](https://github.com/vuejs/router) | `4.6.4` | `5.3.0` |



Updates `@vueuse/core` from 11.3.0 to 14.4.0
- [Release notes](https://github.com/vueuse/vueuse/releases)
- [Commits](https://github.com/vueuse/vueuse/commits/v14.4.0/packages/core)

Updates `@vueuse/shared` from 11.3.0 to 14.4.0
- [Release notes](https://github.com/vueuse/vueuse/releases)
- [Commits](https://github.com/vueuse/vueuse/commits/v14.4.0/packages/shared)

Updates `axios` from 1.19.0 to 1.20.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.19.0...v1.20.0)

Updates `element-plus` from 2.8.5 to 2.14.5
- [Release notes](https://github.com/element-plus/element-plus/releases)
- [Changelog](https://github.com/element-plus/element-plus/blob/dev/CHANGELOG.en-US.md)
- [Commits](element-plus/element-plus@2.8.5...2.14.5)

Updates `hotkeys-js` from 3.13.15 to 4.0.7
- [Release notes](https://github.com/jaywcjlove/hotkeys-js/releases)
- [Commits](jaywcjlove/hotkeys-js@v3.13.15...v4.0.7)

Updates `pinia` from 2.3.1 to 4.0.3
- [Release notes](https://github.com/vuejs/pinia/releases)
- [Commits](vuejs/pinia@v2.3.1...v4.0.3)

Updates `vue` from 3.5.41 to 3.5.42
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.41...v3.5.42)

Updates `vue-router` from 4.6.4 to 5.3.0
- [Release notes](https://github.com/vuejs/router/releases)
- [Commits](vuejs/router@v4.6.4...v5.3.0)

---
updated-dependencies:
- dependency-name: "@vueuse/core"
  dependency-version: 14.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: web-production
- dependency-name: "@vueuse/shared"
  dependency-version: 14.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: web-production
- dependency-name: axios
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-production
- dependency-name: element-plus
  dependency-version: 2.14.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-production
- dependency-name: hotkeys-js
  dependency-version: 4.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: web-production
- dependency-name: pinia
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: web-production
- dependency-name: vue
  dependency-version: 3.5.42
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-production
- dependency-name: vue-router
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: web-production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/modules/web/web-production-aa57cd536c branch from c827c38 to 6554a8a Compare September 1, 2026 02:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants