chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@commitlint/config-conventional (source)	20.3.0 → 20.4.1			devDependencies	minor
@tsconfig/node24 (source)	24.0.0 → 24.0.4			devDependencies	patch
@types/node (source)	24.10.4 → 24.10.13			devDependencies	patch
@vitejs/plugin-vue (source)	6.0.3 → 6.0.4			devDependencies	patch
commitlint (source)	20.3.0 → 20.4.1			devDependencies	minor
eslint-plugin-prettier	5.5.4 → 5.5.5			devDependencies	patch
eslint-plugin-vue (source)	10.6.2 → 10.7.0			devDependencies	minor
globals	17.0.0 → 17.3.0			devDependencies	minor
node (source)	24.12.0 → 24.13.1				minor
postcss-html	1.8.0 → 1.8.1			devDependencies	patch
prettier (source)	3.7.4 → 3.8.1			devDependencies	minor
stylelint-config-recess-order	7.4.0 → 7.6.1			devDependencies	minor
typescript-eslint (source)	8.52.0 → 8.55.0			devDependencies	minor
vite (source)	7.3.0 → 7.3.1			devDependencies	patch
vitest (source)	4.0.16 → 4.0.18			devDependencies	patch
vue (source)	3.5.26 → 3.5.28			devDependencies	patch
vue-tsc (source)	3.2.1 → 3.2.4			devDependencies	patch

---

Release Notes

conventional-changelog/commitlint (@​commitlint/config-conventional)

v20.4.1

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.4.0

Compare Source

Features

• upgrade conventional commit packages #​4082 (#​4597) (3aaf0a6)

20.3.1 (2026-01-08)

Note: Version bump only for package @​commitlint/config-conventional

v20.3.1

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

tsconfig/bases (@​tsconfig/node24)

v24.0.4

Compare Source

v24.0.3

Compare Source

v24.0.2

Compare Source

v24.0.1

Compare Source

vitejs/vite-plugin-vue (@​vitejs/plugin-vue)

v6.0.4

Bug Fixes

• deps: update all non-major dependencies (#​709) (924b28e)
• deps: update all non-major dependencies (#​722) (8a95809)
• deps: update all non-major dependencies (#​726) (e69d751)

Miscellaneous Chores

• add metadata for vite-plugin-registry (#​730) (239eb6a)
• deps: update dependency rollup to ^4.57.1 (#​733) (cd0c8a8)
• deps: update upstream (#​727) (fa3ea0e)

conventional-changelog/commitlint (commitlint)

v20.4.1

Compare Source

Note: Version bump only for package commitlint

v20.4.0

Compare Source

Note: Version bump only for package commitlint

20.3.1 (2026-01-08)

Note: Version bump only for package commitlint

v20.3.1

Compare Source

Note: Version bump only for package commitlint

prettier/eslint-plugin-prettier (eslint-plugin-prettier)

v5.5.5

Compare Source

Patch Changes

• #​772 7264ed0 Thanks @​BPScott! - Bump prettier-linter-helpers dependency to v1.0.1

• #​776 77651a3 Thanks @​aswils! - fix: bump synckit for yarn PnP ESM issue

vuejs/eslint-plugin-vue (eslint-plugin-vue)

v10.7.0

Compare Source

Minor Changes

• Added new -error config variants, with all rules' severity set to error: strongly-recommended-error, recommended-error, vue2-strongly-recommended-error, vue2-recommended-error (along with their flat config equivalents) (#​2796)
• Added new vue/no-literals-in-template rule (#​3000)
• Added new vue/no-undef-directives rule (#​2990)
• Added new ignoreEOLComments option to vue/no-multi-spaces rule (#​2989)
• Changed vue/no-negated-v-if-condition suggestion to autofix (#​2984)
• Added TypeScript support for eslint-plugin-vue development (#​2916)

Patch Changes

• Fixed false positives in vue/define-props-destructuring rule when imported types are passed to defineProps (#​2995)
• Updated Vue 3 export names resources: added DirectiveModifiers (#​2996)
• Updated Vue 3 export names resources: added nodeOps and patchProp (#​2986)

sindresorhus/globals (globals)

v17.3.0

Compare Source

• Update globals (2026-02-01) (#​336) 295fba9

---

v17.2.0

Compare Source

• jasmine: Add throwUnless and throwUnlessAsync globals (#​335) 97f23a7

---

v17.1.0

Compare Source

• Add webpack and rspack globals (#​333) 65cae73

---

nodejs/node (node)

v24.13.1

Compare Source

v24.13.0: 2026-01-13, Version 24.13.0 'Krypton' (LTS), @​marco-ippolito

Compare Source

This is a security release.

Notable Changes

lib:

• (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797
• (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#748
  lib,permission:
• (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760
  src:
• (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773
  src,lib:
• (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759
  tls:
• (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796

Commits

• [2092785d01] - deps: update c-ares to v1.34.6 (Node.js GitHub Bot) #​60997
• [3e58b7f2af] - deps: update undici to 7.18.2 (Node.js GitHub Bot) #​61283
• [4ba536a5a6] - (CVE-2025-59465) lib: add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797
• [89adaa21fd] - (CVE-2025-55132) lib: disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#748
• [7302b4dae1] - (CVE-2025-55130) lib,permission: require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760
• [ac030753c4] - (CVE-2025-59466) src: rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773
• [20075692fe] - (CVE-2025-55131) src,lib: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759
• [20591b0618] - (CVE-2026-21637) tls: route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796

ota-meshi/postcss-html (postcss-html)

v1.8.1

Compare Source

What's Changed

• fix: crash in toJSON() due to document property. by @​ota-meshi in #​147

Full Changelog: ota-meshi/postcss-html@v1.8.0...v1.8.1

prettier/prettier (prettier)

v3.8.1

Compare Source

v3.8.0

Compare Source

diff

🔗 Release note

stormwarning/stylelint-config-recess-order (stylelint-config-recess-order)

v7.6.1

Compare Source

Patch Changes

• Remove invalid anchor-center property (#​458)
• Fix typo in scroll-behavior property (#​457)

v7.6.0

Compare Source

Minor Changes

• Add Anchor Positioning properties (#​449)
  • anchor-name
  • anchor-scope
  • anchor-center
  • position-area
  • position-anchor
  • position-try
  • position-try-order
  • position-try-fallbacks
  • position-visibility

v7.5.0

Compare Source

Minor Changes

• Add Corner Shape properties (#​442)
  Thanks @​aicest!
  • corner
  • longhand corner-* properties
  • corner-shape
  • longhand corner-*-shape properties

Patch Changes

• Add support for Stylelint v17 (#​447)

  Updated peerDependencies version ranges for stylelint and stylelint-order.

  Fixes #​446

typescript-eslint/typescript-eslint (typescript-eslint)

v8.55.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.54.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.53.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.53.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v7.3.1

Compare Source

Please refer to CHANGELOG.md for details.

vitest-dev/vitest (vitest)

v4.0.18

Compare Source

   🚀 Experimental Features

• experimental: Add onModuleRunner hook to worker.init  -  by @​sheremet-va in #​9286 (ea837)

   🐞 Bug Fixes

• Use meta.url in createRequire  -  by @​sheremet-va in #​9441 (e0572)
• browser: Hide injected data-testid attributes  -  by @​sheremet-va in #​9503 (f8989)
• ui: Process artifact attachments when generating HTML reporter  -  by @​macarie in #​9472 (22543)

    View changes on GitHub

v4.0.17

Compare Source

   🚀 Features

• Support openTelemetry for browser mode  -  by @​hi-ogawa in #​9180 (1ec3a)
• Support TRACEPARENT and TRACESTATE environment variables for OpenTelemetry context propagation  -  by @​Copilot, hi-ogawa and @​hi-ogawa in #​9295 (876cb)

   🐞 Bug Fixes

• Improve asymmetric matcher diff readability by unwrapping container matchers  -  by @​Copilot, sheremet-va, hi-ogawa and @​hi-ogawa in #​9330 (b2ec7)
• Improve runner error when importing outside of test context  -  by @​sheremet-va in #​9335 (2dd3d)
• Replace crypto.randomUUID to allow insecure environments (fix #​9…  -  by @​plusgut in #​9339 and #​9 (e6a3f)
• Handle null options in addEventHandler #​9371  -  by @​ThibautMarechal in #​9372 and #​9371 (40841)
• Typo in browser.provider error  -  by @​deammer in #​9394 (4b67f)
• browser:
  • Fix process.env and import.meta.env defines in inline project  -  by @​hi-ogawa in #​9239 (b70c9)
  • Fix upload File instance  -  by @​hi-ogawa in #​9294 (b6778)
  • Fix invalid project token for artifacts assets  -  by @​hi-ogawa in #​9321 (caa7d)
  • Log ErrorEvent.message when unhandled ErrorEvent.error is null  -  by @​hi-ogawa in #​9322 (5d84e)
  • Support fileParallelism on an instance  -  by @​sheremet-va in #​9328 (15006)
• coverage:
  • Remove unnecessary istanbul-lib-source-maps usage  -  by @​AriPerkkio in #​9344 (b0940)
  • Apply patch from istanbuljs/istanbuljs#837  -  by @​AriPerkkio and sapphi-red in #​9413 and #​837 (e05ce)
• fsModuleCache:
  • Don't store importers in cache  -  by @​sheremet-va in #​9422 (75136)
  • Add importers alongside importedModules  -  by @​sheremet-va in #​9423 (59f92)
• mocker:
  • Fix mock transform with class  -  by @​hi-ogawa in #​9421 (d390e)
• pool:
  • Validate environment options when reusing the worker  -  by @​sheremet-va in #​9349 (a8a88)
  • Handle worker start failures gracefully  -  by @​AriPerkkio in #​9337 (200da)
• reporter:
  • Report test module if it failed to run  -  by @​sheremet-va in #​9272 (c7888)
• runner:
  • Respect nested test.only within describe.only  -  by @​Ujjwaljain16 in #​9021 and #​9213 (55d5d)
• typecheck:
  • Improve error message when tsc outputs help text  -  by @​Ujjwaljain16 in #​9214 (7b10a)
• ui:
  • Detect gzip by magic numbers instead of Content-Type header in html reporter  -  by @​Copilot, hi-ogawa and @​hi-ogawa in #​9278 (dd033)
• webdriverio:
  • Fall back to WebDriver Classic #​9244  -  by @​JustasMonkev in #​9373 and #​9244 (c23dd)

    View changes on GitHub

vuejs/core (vue)

v3.5.28

Compare Source

Bug Fixes

• transition: avoid unexpected cancelled parameter in transition done callback (#​14391) (6798853)
• compiler-sfc: add resolution trying for .mts/.cts files (#​14402) (c09d41f), closes vuejs/router#2611
• compiler-sfc: no params were generated when using withDefaults (#​12823) (b0a1f05), closes #​12822
• reactivity: add __v_skip flag to EffectScope to prevent reactive conversion (#​14359) (48b7552), closes #​14357
• runtime-core: avoid retaining el on cached text vnodes during static traversal (#​14419) (4ace79a), closes #​14134
• runtime-core: prevent child component updates when style remains unchanged (#​12825) (57866b5), closes #​12826
• runtime-core: properly handle async component update before resolve (#​11619) (e71c26c), closes #​11617
• runtime-dom: handle null/undefined handler in withModifiers (#​14362) (261de54), closes #​14361
• teleport: properly handling disabled teleport target anchor (#​14417) (d7bcd85), closes #​14412
• transition-group: correct move translation under scale via element rect (#​14360) (0243a79), closes #​14356
• useTemplateRef: don't update setup ref for useTemplateRef key (#​12756) (fc40ca0), closes #​12749

v3.5.27

Compare Source

Bug Fixes

• compile-sfc: correctly handle variable shadowing in for loop for defineProps destructuring. (#​14296) (6a1bb50), closes #​14294
• compiler-sfc: handle indexed access types in declare global blocks (#​14260) (e4091fe), closes #​14236
• compiler-sfc: use correct scope when resolving indexed access types from external files (#​14297) (f0f0a21), closes #​14292
• reactivity: collection iteration should inherit iterator instance methods (#​12644) (3c8b2fc), closes #​12615
• runtime-core: skip patching reserved props for custom elements (#​14275) (19cc7e2), closes #​14274
• server-renderer: use ssrRenderClass helper for className attribute (#​14327) (a4708f3)
• ssr: handle v-bind modifiers during render attrs (#​14263) (c2f5964), closes #​14262

vuejs/language-tools (vue-tsc)

v3.2.4

Compare Source

language-core

• feat: place plugin configs under ctx.config and support type annotation via generics (#​5944) - Thanks to @​KazariEX!

workspace

• chore: publish to npm with OIDC (#​5912) - Thanks to @​ghiscoding!

v3.2.3

Compare Source

language-core

• feat: support configuration for language plugins (#​5678) - Thanks to @​KazariEX!
• fix: avoid defineModel breaking ast in lang="js" (#​5935) - Thanks to @​KazariEX!
• fix: infer object keys as string if it does not extend string (#​5933) - Thanks to @​serkodev!

typescript-plugin

• feat: correct rename behavior on same name shorthands in template (#​5907) - Thanks to @​KazariEX!
• fix: only forward quick info for original results without tags (#​5938) - Thanks to @​KazariEX!

vscode

• fix: correct indent for <style> and <script> tags (#​5925) - Thanks to @​serkodev!

v3.2.2

Compare Source

language-core

• fix: correct code features on v-bind shorthands of special attributes - Thanks to @​KazariEX!

language-plugin-pug

• feat: accurate Pug shorthand mapping (#​5906)
• fix: pre-map HTML to Pug offset attribute (#​5905)

language-service

• feat: strip ="" for boolean props completion edits (#​5888) - Thanks to @​KazariEX!
• fix: avoid duplicate directive modifiers in completion (#​5920) - Thanks to @​KazariEX!

typescript-plugin

• fix: only forward quick info and suggestion diagnostics for setup bindings (#​5892) - Thanks to @​KazariEX!

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/basics/vue-semantic-structure@172

commit: fadbecf