Update dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@intlify/unplugin-vue-i18n (source)	11.2.4 → 11.2.5
@tsconfig/node24 (source)	24.0.4 → 24.0.5
@types/jsdom (source)	^28.0.0 → ^30.0.0
@typescript-eslint/eslint-plugin (source)	8.65.0 → 8.69.0
@typescript-eslint/parser (source)	8.65.0 → 8.69.0
@vitejs/plugin-legacy (source)	8.2.2 → 8.2.3
@vitest/coverage-istanbul (source)	4.1.10 → 4.1.11
@vitest/eslint-plugin	1.6.24 → 1.6.27
core-js (source)	3.49.0 → 3.50.0
eslint (source)	10.8.0 → 10.9.1
pinia (source)	4.0.2 → 4.0.3
vite (source)	8.2.0 → 8.2.2
vitest (source)	4.1.10 → 4.1.11
vue (source)	3.5.40 → 3.5.42
vue-i18n (source)	11.4.8 → 11.4.10
vue-router (source)	5.2.0 → 5.3.0

---

Release Notes

intlify/bundle-tools (@​intlify/unplugin-vue-i18n)

v11.2.5

Compare Source

What's Changed

⚡ Improvement Features

• fix(unplugin-vue-i18n): invalidate glob locale modules on Vite HMR by @​kazupon in #​603

👕 Refactoring

• chore(release): generate changelog before tagging by @​kazupon in #​607

Full Changelog: intlify/bundle-tools@v11.2.4...v11.2.5

tsconfig/bases (@​tsconfig/node24)

v24.0.5

Compare Source

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.69.0

Compare Source

🚀 Features

• eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#​12603)

🩹 Fixes

• eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#​12727)
• eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#​12741)
• eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#​12731)

❤️ Thank You

• Abdu Alim Arlikhozhaev @​Arlikhozhaev
• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• wonbeanie @​wonbeanie

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.68.0

Compare Source

🚀 Features

• eslint-plugin: [strict-void-return] add fix suggestions (#​12086)

🩹 Fixes

• eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#​12739)
• eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#​12646)
• eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#​12711)
• eslint-plugin: [unified-signatures] report identical signatures (#​12678)
• eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#​12707)
• eslint-plugin: [unified-signatures] deduplicate types in report (#​12656)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Hugo @​hugop95
• Niki @​phaux
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.67.0

Compare Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

Compare Source

🩹 Fixes

• eslint-plugin: [class-literal-property-style] preserve type annotations and don't drop decorators (#​12617)
• eslint-plugin: [no-unnecessary-type-parameters] check MappedType key remapping (#​12588)
• eslint-plugin: [no-useless-default-assignment] don't report defaults used by other overloads (#​12607)
• eslint-plugin: [prefer-nullish-coalescing] handle shadowed Boolean calls (#​12591)
• eslint-plugin: [no-unnecessary-type-conversion] ignore shadowed built-ins (#​12590)

❤️ Thank You

• Evyatar Daud @​StyleShit
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.69.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.68.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.67.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

vitejs/vite (@​vitejs/plugin-legacy)

v8.2.3

Bug Fixes

• build: make client chunkImportMap work with sharedPlugins: true (#​23184) (15f0307)
• deps: update all non-major dependencies (#​23069) (4c07b74)
• deps: update all non-major dependencies (#​23136) (14454fd)
• deps: update rolldown-related dependencies (#​23070) (7ac6f7f)

vitest-dev/vitest (@​vitest/coverage-istanbul)

v4.1.11

Compare Source

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in #​10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in #​10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in #​10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in #​10974 (fe5a1)

    View changes on GitHub

vitest-dev/eslint-plugin-vitest (@​vitest/eslint-plugin)

v1.6.27

Compare Source

   🐞 Bug Fixes

• valid-title:
  • Refine the reportEmptyTitle message  -  by @​ysknsid25 in #​941 (08973)
  • Handle missing argument in valid-title rule  -  by @​ysknsid25 in #​942 (ef700)

    View changes on GitHub

v1.6.26

Compare Source

   🐞 Bug Fixes

• Detect test modes in options objects  -  by @​Guflly in #​937 (68454)

    View changes on GitHub

v1.6.25

Compare Source

   🐞 Bug Fixes

• valid-expect: Support expect.assert members  -  by @​happykawayigt and Guan Tong in #​936 (bc37d)

    View changes on GitHub

zloirock/core-js (core-js)

v3.50.0

Compare Source

• Changes v3.49.0...v3.50.0 (138 commits)
• Joint iteration proposal:
  • Built-ins:
    • Iterator.zip
    • Iterator.zipKeyed
  • Moved to stable ES, May 2026 TC39 meeting
  • Added es. namespace modules, /es/ and /stable/ namespace entries
• Iterator chunking proposal:
  • Built-ins:
    • Iterator.prototype.chunks
    • Iterator.prototype.windows
  • Throw a TypeError instead of RangeError on non-integer number chunkSize / windowSize, following tc39/proposal-iterator-chunking/#​30
  • Moved to stage 3, May 2026 TC39 meeting
  • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
• Added Iterator includes stage 3 proposal:
  • Added built-in:
    • Iterator.prototype.includes
• Added Iterator join stage 3 proposal:
  • Added built-in:
    • Iterator.prototype.join
• Added Await dictionary of Promises stage 3 proposal:
  • Added built-ins:
    • Promise.allKeyed
    • Promise.allSettledKeyed
• Throw a RangeError on finite unsafe integer limit in Iterator.prototype.{ drop, take }, following tc39/ecma262/#​3776
• Use PromiseResolve semantics in Promise.try, following tc39/ecma262/#​3883
• Added detection of missed Webkit ~ Safari < 26.2 Iterator.prototype.flatMap bug case, #​1538
• Deno 2.9+ replaces Object.prototype.__proto__ instead of removing it, so the feature detection updated
• Fixed JSON.stringify polyfill with an array replacer - keys order now follows the replacer, inherited and non-enumerable properties are no longer ignored, #​1539
• Make URL / URLSearchParams parsing a little more correct (char sets, percent coding, etc)
• Ensure opaque paths always roundtrip in URL polyfill (still without adding to feature detection), whatwg/url#844
• Fix URL#toJSON when URL#toString is reassigned after core-js is imported
• Fixed possible crash on some keys in Symbol.for
• Some get-iterator / get-iterator-method fixes
• Fixed String.prototype.{ match, search } polyfills conversion order
• Added missed MAX_SAFE_INTEGER excess check in Array.from and { Map, Object }.groupBy polyfills
• Improved the way of inner iterators cleaning in iterator helpers
• Improved accuracy of Math.{ asinh, cbrt, log1p } polyfills with big and small values
• Improved performance of Uint8Array base64 methods
• Improved performance of escape
• Slight performance improvement for engines with native Array.prototype.fill on ArrayBuffer constructor and %TypedArray%.prototype.fill
• Clarify supported Node versions in package.json of some missed packages (just to satisfy publint)
• Compat data improvements:
  • Following tc39/ecma262/#​3776, Iterator.prototype.{ drop, take } properly supported from:
    • V8 ~ Chrome 150
    • Safari 27.0
    • Bun 1.4.0
  • Following tc39/ecma262/#​3883, Promise.try marked as not properly supported in all engines
  • Iterator.prototype.{ chunks, windows } marked as shipped in FF154
  • Iterator.prototype.includes marked as shipped in FF154
  • Iterator.prototype.includes marked as shipped in Bun 1.4.0
  • Iterator.prototype.join marked as shipped in FF154
  • Array.prototype.includes WebKit bug marked as fixed in:
    • Safari 27.0
    • Bun 1.3.12
  • queueMicrotask Bun bug marked as fixed in Bun 1.4.0
  • Added Node 26.0 compat data mapping
  • Added Deno 2.7.8, Deno 2.8.0, and Deno 2.9.4 compat data mapping
  • Updated Electron 42 and added 43, 44, and 45 compat data mapping
  • Added Samsung Browser 30 compat data mapping
  • Added Oculus Quest Browser 144+ compat data mapping
  • Added Opera for Android 97, 98, 99, and 100 compat data mapping

eslint/eslint (eslint)

v10.9.1

Compare Source

v10.9.0

Compare Source

v10.8.1

Compare Source

Bug Fixes

• 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#​21173) (dongkyu lee)
• 151ba3f fix: false positives in getter-return and accessor-pairs (#​21163) (Grit)
• 6898df9 fix: ignore meta-property names in id-denylist (#​21166) (Pixel)
• 4d7db66 fix: ignore meta-property names in id-match (#​21167) (Pixel)
• 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#​20935) (kuldeep kumar)

Documentation

• 7d0cbf8 docs: Update README (GitHub Actions Bot)
• 0a05812 docs: add missing backticks to no-duplicate-imports.js (#​21183) (Lee Daeun)
• 678c90b docs: Update README (GitHub Actions Bot)
• 8a10424 docs: Update README (GitHub Actions Bot)
• 69bb948 docs: Update README (GitHub Actions Bot)

Chores

• 0a14800 chore: update github/codeql-action action to v4.37.4 (#​21196) (renovate[bot])
• 05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#​21191) (Lazizbek Ergashev)
• 5611035 test: add error locations info to no-void (#​21185) (Lee Daeun)
• ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#​21176) (dependabot[bot])
• f131c03 chore: improve ecosystem test failure reporting (#​20937) (crimsonjay0)
• 1f6edde chore: update ecosystem plugins (#​21182) (ESLint Bot)
• d3266fb chore: unpin webpack dependency (#​21172) (Francesco Trotta)
• 65a6519 chore: add allowScripts field to package.json (#​21092) (GiHoon Noh)
• 22e5256 ci: add triage:no label to Dependabot PRs (#​21141) (lumir)
• 55c9038 ci: bump actions/labeler from 6 to 7 (#​21159) (dependabot[bot])
• 7280e78 chore: update dependency prettier to v3.9.6 (#​21162) (renovate[bot])
• eddbad6 test: fix failing ecosystem test for eslint-plugin-unicorn (#​21156) (Francesco Trotta)
• 60a178d chore: update ecosystem plugins (#​21150) (ESLint Bot)
• f9f61dc test: add error locations to no-unreachable (#​21151) (JIYEON)
• d086293 test: add error locations to no-undef (#​21147) (JIYEON)
• cc01b67 test: add error locations to no-useless-catch (#​21144) (devoil)
• 688e75e chore: add missing backticks in JSDoc (#​21143) (Bo Hyun Kim)
• 7c1e175 test: add error locations to require-await (#​21145) (Grit)
• 588a26d test: add error locations to no-extra-label (#​21139) (dongkyu lee)
• 059aa89 test: add error locations to no-useless-concat (#​21140) (dongkyu lee)
• 5a452a8 test: add error locations to no-const-assign (#​21138) (dongkyu lee)

vuejs/pinia (pinia)

v4.0.3

Compare Source

   🚀 Features

• nuxt: Declare Nuxt 5 compatibility  -  by @​onmax in #​3166 (a94de)
• playground: Update to @​vue/repl v4  -  by @​posva in #​3163 (b19f9)

   🐞 Bug Fixes

• Guard VUE_PROD_DEVTOOLS in dist output  -  by @​ShreeBohara and Claude Fable 5 in #​3168 (37144)
• ssr: Replace reactive Set/Map state on hydration instead of unioning it  -  by @​winklemad in #​3162 (5bdf2)
• types: Avoid reserved .vue at the end of name  -  by @​posva (b0249)

    View changes on GitHub

vitejs/vite (vite)

v8.2.2

Compare Source

Features

• deps: widen @vitejs/devtools peer range to v0.5.0 (#​23302) (495d9ff)

Bug Fixes

• bundled-dev: handle lazy request error (#​23291) (3ba026d)
• bundled-dev: hot update through circular imports instead of reloading (#​23259) (3dbddef)
• config: resolve sourcemap paths against sourcemap location (#​23239) (05a003e)
• css: don't pass empty targets to lightningcss (#​23295) (2804636)
• define: fix match escaped dots to support $-prefixed define keys (#​23249) (dcf88bd)
• deps: update all non-major dependencies (#​23217) (ba958bd)
• deps: update rolldown-related dependencies (#​23218) (83ecb2c)
• module-runner: exclude completed modules from in-flight cycle detection (fix #​22999) (#​23009) (d9b10a9)
• optimizer: close custom extension analysis bundles (#​23207) (8fb7675)
• reduce Windows 8.3-short-name detection false-positives (#​23066) (02cffa9)
• respect resolve.preserveSymlinks when resolving root (fix #​23197) (#​23198) (8413052)
• ssr: rewrite computed key of destructing parameter (#​23307) (9db0b61)
• vite: update outdated upstream file links in license comments (#​23285) (c0f2fc6)

Documentation

• build: note cssTarget precedence (#​23200) (a20a35e)

Miscellaneous Chores

• fix ts errors in build test cases (#​23209) (a0cfcf7)

Code Refactoring

• use JSON import attributes instead of readFileSync in constants (#​23258) (1d9fa39)
• use named regex constants over inline literals (#​22964) (5c1c6c6)

Tests

• define: close rolldown bundler after generate (#​23231) (b4d66fe)
• module-runner: add TLA circular import case (#​23299) (4a261f2)
• module-runner: simplify server-hmr tests (#​23300) (599b44b)
• ssr: add destructing assignment case for moduleRunnerTransform (#​23308) (cb77e2a)

Build System

• use JSON import attributes instead of readFIleSync in rolldown configs (#​23251) (d615bcd)

v8.2.1

Compare Source

Bug Fixes

• build: make client chunkImportMap work with sharedPlugins: true (#​23184) (15f0307)
• bundled-dev: inject client script tag before chunk scripts (#​23161) (eac0cc8)
• css: don't re-run lightningcss visitor during minify (fix #​23146) (#​23147) (de041a7)
• deps: update all non-major dependencies (#​23136) (14454fd)
• deps: update rolldown-related dependencies (#​23070) (7ac6f7f)
• don't mutate the user config when resolving the lib entry from the top-level input (#​23135) (b4bf596)
• handle shebang ending with uncommon line terminators (#​23038) (17f7b2f)
• server: use a random port when port is 0 (#​23158) (fddf4ea)

Performance Improvements

• css: look up pure CSS chunks through a Set (#​23114) (1331b0b)

Documentation

• build: fix incomplete @default for build.minify (#​23177) (ef02435)

Miscellaneous Chores

• deps: update dependency rolldown-plugin-dts to ^0.28.0 (#​23137) (4adc1e7)
• deps: update dependency strip-literal to v4 (#​23140) (9db65ce)

Code Refactoring

• bundled-dev: avoid injecting server values in the bundle (#​22967) (23b8a08)
• bundled-dev: remove rolldown lazy stub module workaround (#​23129) (e72036e)

Tests

• bundled-dev: enable sourcemap playgrounds (#​23080) (c2155fe)
• reduce logs (#​23138) (7673c02)

vuejs/core (vue)

v3.5.42

Compare Source

Bug Fixes

• hydration: handle async component unmount before lazy hydration (#​15252) (6e1814a)
• hydration: handle moving unresolved async fragment (#​15263) (a72036f)
• runtime-core: avoid caching unmounted suspense children (#​15291) (b535917), closes #​15288
• runtime-core: keep .trim result when combined with .number v-model modifier (#​15346) (f8d42e1)
• runtime-core: resolve $el for dev root comment fragment (#​15313) (8654f35), closes #​12680
• runtime-dom: support !important on CSS custom properties in style binding (#​15348) (31da934)
• server-renderer: reject CR in attribute names (#​15266) (a2b40db)
• shared: correctly compare Map and Set values (#​15328) (ef82a26), closes #​15320
• suspense: don't treat the leaving branch as the fallback while its mount is pending (#​15333) (cd19745), closes #​15332
• v-model: re-sync select when model is overridden in change handler (#​15298) (6eaecc1), closes #​10505

v3.5.41

Compare Source

Bug Fixes

• compiler-core: preserve vnode lifecycle in stable v-for (#​11682) (02421cd), closes #​9239 #​12569
• compiler-sfc: handle transformed template AST after cache invalidation (#​15136) (a4440c0), closes #​15126 #​15128
• custom-element: preserve nested async mount order (#​15154) (71f9ff5), closes #​15153
• custom-element: warn when props override native properties (#​12125) (22b53ea), closes #​12124
• runtime-core: avoid re-fetching resource props with unchanged values (#​15105) (a7513a1)
• runtime-core: restore SSR setup state when handling async setup result (#​15114) (b6191cb), closes #​15113
• scheduler: avoid stack overflow when flushing very large post cb arrays (#​15143) (c04a45d), closes #​15142
• slots: handle nullish v-bind slot props (#​15177) (2506700)
• ssr: normalize hidden states during hydration (#​13125) (4e467d7)
• transition: support transition to teleport component child (#​11959) (77061fe), closes #​11910
• types: preserve defineModel inference with factory defaults (#​15097) (0516c43), closes #​15096
• v-model: preserve text input before hydration (#​14411) (2468464), closes #​14403

intlify/vue-i18n (vue-i18n)

v11.4.10

Compare Source

What's Changed

🐛 Bug Fixes

• fix(core-base): avoid throwing on AST keys in devtools groupId by @​kazupon in #​2603

Full Changelog: intlify/vue-i18n@v11.4.9...v11.4.10

v11.4.9

Compare Source

What's Changed

🐛 Bug Fixes

• fix(core-base): invalidate locale chain cache when fallback changes by @​kazupon in #​2577
• fix(core-base): fallbackWithSimple uses map keys and skips default by @​kazupon in #​2580

⚡ Improvement Features

• fix(vue-i18n-core): preserve tree-shaking with Vapor by @​kazupon in #​2578
• fix(shared): avoid retaining array message references by @​Togetic in #​2571

👕 Refactoring

• chore(release): generate changelog in the tagged commit by [@​kazupon](https

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 4am on the first day of the month"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud