chore(deps): Bump the prod-dependencies group with 5 updates by dependabot[bot] · Pull Request #64 · Laixer/FunderMapsReport

dependabot · 2026-07-28T12:42:55Z

Bumps the prod-dependencies group with 5 updates:

Package	From	To
@vue/devtools-api	`8.1.5`	`8.2.1`
chartjs-plugin-trendline	`3.2.4`	`3.2.8`
mapbox-gl	`3.25.0`	`3.27.0`
vue	`3.5.39`	`3.5.40`
vue-router	`5.1.0`	`5.2.0`

Updates @vue/devtools-api from 8.1.5 to 8.2.1

Release notes

Sourced from @vue/devtools-api's releases.

v8.2.1

   🐞 Bug Fixes

core: Avoid bundling Vite and Vue Router types in declarations - by @webfansplz (8f51a)

    View changes on GitHub

v8.2.0

   🚀 Features

devtools-api: Add no-op stub under node export condition - by @danielroe in vuejs/devtools#1114 (435e6)

   🐞 Bug Fixes

client: Disable pin reorder buttons at list bounds - by @SaKaNa-Y in vuejs/devtools#1105 (87d38)

    View changes on GitHub

Commits

4419695 chore: release v8.2.1
0dea144 chore: release v8.2.0
435e607 feat(devtools-api): add no-op stub under node export condition (#1114)
See full diff in compare view

Updates chartjs-plugin-trendline from 3.2.4 to 3.2.8

Release notes

Sourced from chartjs-plugin-trendline's releases.

v3.2.8

What's Changed

fix: restrict release workflow to main branch only by @Makanz in Makanz/chartjs-plugin-trendline#132

Fix/serialize javascript v3.2.5 by @Makanz in Makanz/chartjs-plugin-trendline#131

fix: remove npm upgrade step (Node.js 22 already has npm 10.x with OI… by @Makanz in Makanz/chartjs-plugin-trendline#133

fix: only trigger release workflow on tag pushes, not branch pushes by @Makanz in Makanz/chartjs-plugin-trendline#134

fix: patch @babel/preset-env to 7.29.5 (CVE-2026-44728) by @Makanz in Makanz/chartjs-plugin-trendline#135

Improve CI/CD pipelines with modern tooling and security best practices by @Makanz in Makanz/chartjs-plugin-trendline#127

refactor: replace 11 individual params with options object in addTrendlineLabel by @Makanz in Makanz/chartjs-plugin-trendline#136

refactor: extract validateFiniteCoords helper in drawing.js by @Makanz in Makanz/chartjs-plugin-trendline#137

feat: add canvas accessibility support for trendline descriptions by @Makanz in Makanz/chartjs-plugin-trendline#138

chore: update dev dependencies (babel-jest, jest, rollup) by @Makanz in Makanz/chartjs-plugin-trendline#139

refactor: simplify beforeInit legend logic in plugin.js by @Makanz in Makanz/chartjs-plugin-trendline#140

docs: fix AGENTS.md — webpack → rollup by @Makanz in Makanz/chartjs-plugin-trendline#141

refactor: extract collectDataPoints from addFitter by @Makanz in Makanz/chartjs-plugin-trendline#142

refactor: extract calculateProjectedCoordinates from addFitter by @Makanz in Makanz/chartjs-plugin-trendline#143

refactor: extract BaseFitter base class by @Makanz in Makanz/chartjs-plugin-trendline#144

refactor: simplify browser detection in index.js by @Makanz in Makanz/chartjs-plugin-trendline#145

fix: bump @babel/core to 7.29.6+ (CVE-2026-49356) by @Makanz in Makanz/chartjs-plugin-trendline#146

fix: bump js-yaml override to >=3.15.0 (v3.2.7) by @Makanz in Makanz/chartjs-plugin-trendline#149

fix: bump to v3.2.8, security fix for ws (CVE-2026-48779) by @Makanz in Makanz/chartjs-plugin-trendline#150

fix: use relative threshold for near-zero slope detection in projection by @Makanz in Makanz/chartjs-plugin-trendline#148

Full Changelog: Makanz/chartjs-plugin-trendline@v3.2.5...v3.2.8

Commits

5f07845 Merge pull request #148 from Makanz/fix/projection-near-zero-slope-147
a5f5d32 fix: update .gitignore to include 'nul' and remove SIMPLIFY_PLAN.md
621beae Merge pull request #150 from Makanz/fix/ws-security-cve-2026-48779
524ef18 fix: bump to v3.2.8, override ws transitive dep (CVE-2026-48779)
5c4e1e2 Merge pull request #149 from Makanz/fix/js-yaml-security
2e43eca fix: bump js-yaml override to >=3.15.0, patch v3.2.7
a97f25e test: add regression tests for issue #147 time-scale slope threshold
232faab fix: use relative threshold for near-zero slope detection in projection
213e7bb Merge pull request #146 from Makanz/fix/babel-core-security
8bbf14e fix: bump @babel/core to ^7.29.6 (CVE-2026-49356)
Additional commits viewable in compare view

Updates mapbox-gl from 3.25.0 to 3.27.0

Release notes

Sourced from mapbox-gl's releases.

v3.27.0

Features and improvements ✨

Upgrade to Typescript 7

Add cross-source HD roads elevation for symbols

Improve character rotation logic for some CJK characters in vertical text rendering mode

Bug fixes 🐞

Fix raster-array out of bounds assertion error for non-mecator projections

Fix error when object-property strings were used in expressions

Fix wrong access token used on multi-map environments

Fix number-format dropping min/max-fraction-digits when they were 0

Fix line-aligned label placement during globe-mercator transition

Fix crash when using style expressions with prototype-derived keys

Fix atlas cache returning another scope images

Fix Style#{get,set,remove}FeatureState with {target: {layerId}} so imported-layer targets resolve against their own fragment's sources instead of the root style's

Fix missing building along tile borders

Fix dynamic imports in UMD

Fix import.meta crash under modern bundlers

Fix setPaintProperty on symbol properties with a transition duration of 0

v3.27.0-rc.1

Features and improvements ✨

Upgrade to Typescript 7

Add cross-source HD roads elevation for symbols

Improve character rotation logic for some CJK characters in vertical text rendering mode

Bug fixes 🐞

Fix raster-array out of bounds assertion error for non-mecator projections

Fix error when object-property strings were used in expressions

Fix wrong access token used on multi-map environments

Fix number-format dropping min/max-fraction-digits when they were 0

Fix line-aligned label placement during globe-mercator transition

Fix crash when using style expressions with prototype-derived keys

Fix atlas cache returning another scope images

Fix Style#{get,set,remove}FeatureState with {target: {layerId}} so imported-layer targets resolve against their own fragment's sources instead of the root style's

Fix missing building along tile borders

Fix dynamic imports in UMD

v3.26.0

Breaking changes ⚠️

Remove transition and interpolated flags from the camera-projection style property — enum properties cannot be transitioned, so these flags were incorrect.

Features and improvements ✨

Make published TypeScript declarations self-contained, fixing consumer builds that failed with skipLibCheck: false.

... (truncated)

Changelog

Sourced from mapbox-gl's changelog.

3.27.0

Features and improvements ✨

Upgrade to Typescript 7

Add cross-source HD roads elevation for symbols

Improve character rotation logic for some CJK characters in vertical text rendering mode

Bug fixes 🐞

Fix raster-array out of bounds assertion error for non-mecator projections

Fix error when object-property strings were used in expressions

Fix wrong access token used on multi-map environments

Fix number-format dropping min/max-fraction-digits when they were 0

Fix line-aligned label placement during globe-mercator transition

Fix crash when using style expressions with prototype-derived keys

Fix atlas cache returning another scope images

Fix Style#{get,set,remove}FeatureState with {target: {layerId}} so imported-layer targets resolve against their own fragment's sources instead of the root style's

Fix missing building along tile borders

Fix dynamic imports in UMD

Fix import.meta crash under modern bundlers

Fix setPaintProperty on symbol properties with a transition duration of 0

3.26.0

Breaking changes ⚠️

Remove transition and interpolated flags from the camera-projection style property — enum properties cannot be transitioned, so these flags were incorrect.

Features and improvements ✨

Make published TypeScript declarations self-contained, fixing consumer builds that failed with skipLibCheck: false.

Improve terrain raycast accuracy for mouse events, camera fitting, and other pointer interactions.

Improve landmark model LOD switching with size-based distance heuristics for better rendering performance.

Bug fixes 🐞

Fix hd-road-markup elevated lines rendering flat with zero-exaggeration terrain.

Fix viewport-y symbol sorting causing a Vertex buffer is not big enough for the draw call error when a symbol bucket had multiple segments.

Fix multilinestrings not displaying labels correctly.

Fix parametric colors sometimes loading the wrong cached image.

Commits

0603110 Bump version to v3.27.0 and update changelog
03eec2c [Backport release/v0.27] [MAPS3D-2272] Fix SD/HD FRC parse-skip
1220278 Add docs for RequestTransformFunction
1ca2368 Symbol UBO uniforms update with 0-duration transition
637eef2 Default to a module worker to fix import.meta crash under
280a9be Bump version to v3.27.0-rc.1 and changelog
6c4a8e7 Fix dynamic imports in UMD
4e476ec Improves character rotation logic for some CJK characters in Vertical text re...
19fa8f9 Bump vite from 8.1.3 to 8.1.4 (internal-16024)
cda2313 Bump the eslint-dependencies group with 3 updates (internal-16021)
Additional commits viewable in compare view

Updates vue from 3.5.39 to 3.5.40

Release notes

Sourced from vue's releases.

v3.5.40

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.40 (2026-07-16)

Bug Fixes

compiler-core: avoid leaking slot branch keys (#15051) (20c9d26), closes #15048

hydration: pass namespace when patching dynamic props (#15082) (e0d2723), closes #15081 #15050

reactivity: handle effect removal during scope stop (#15084) (378f978), closes #15083

runtime-core: skip lazy hydration for detached roots (#15092) (97f3525), closes #15091

runtime-core: unwind dangling blocks when slot content throws (#15071) (ddc132d), closes #15070

runtime-dom: respect current select model type (#15010) (eb89e93), closes #15009

server-renderer: handle errors in optimized component renders (#12601) (474907c), closes #12575

server-renderer: remove package dependency cycle (#15063) (4d35eca)

shared: prevent SSR comment escaping from creating closing delimiters (#15045) (bd962bb)

types: don't constrain component $el type to Element (#15040) (164460a)

Commits

fa2885d release: v3.5.40
20c9d26 fix(compiler-core): avoid leaking slot branch keys (#15051)
7da6334 Revert "fix(runtime-core): pause tracking when invoking function refs" (#15094)
90aecb1 chore(deps): update all non-major dependencies (#15026)
97f3525 fix(runtime-core): skip lazy hydration for detached roots (#15092)
fe1c0f8 chore(deps): update test (#15025)
e41c45a chore(deps): update dependency conventional-changelog to v8 (#15078)
3eb66a9 chore(deps): update actions/cache action to v6 (#15076)
40178dd chore(deps): update lint (#15075)
7f122b9 chore(deps): update dependency conventional-changelog-angular to v9 (#15079)
Additional commits viewable in compare view

Updates vue-router from 5.1.0 to 5.2.0

Release notes

Sourced from vue-router's releases.

v5.2.0

   🚀 Features

Add helpful diagnostics - by @posva in vuejs/router#2737 (628fe)

   🐞 Bug Fixes

Allow pinia 4 - by @posva (16535)

scroll: Ignore stale async scrollBehavior results - by @baozjj and @cursoragent in vuejs/router#2730 (303df)

unplugin: Reject invalid hex digits in [x+hh] character codes - by @greymoth-jp in vuejs/router#2744 (4d967)

    View changes on GitHub

Commits

6e5f8d2 release: vue-router@5.2.0
1653533 fix: allow pinia 4
f634b2f docs: improve compat
d4319be chore: up ts where possible
b5b5f94 ci: pin image
680e905 ci: update playwright image
385ca6b chore: up lint, babel and others
92ff264 chore: up deps minor and patches
feed382 ci: bump the actions group with 3 updates (#2745)
4d96741 fix(unplugin): reject invalid hex digits in [x+hh] character codes (#2744)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [@vue/devtools-api](https://github.com/vuejs/devtools/tree/HEAD/packages/devtools-api) | `8.1.5` | `8.2.1` | | [chartjs-plugin-trendline](https://github.com/Makanz/chartjs-plugin-trendline) | `3.2.4` | `3.2.8` | | [mapbox-gl](https://github.com/mapbox/mapbox-gl-js) | `3.25.0` | `3.27.0` | | [vue](https://github.com/vuejs/core) | `3.5.39` | `3.5.40` | | [vue-router](https://github.com/vuejs/router) | `5.1.0` | `5.2.0` | Updates `@vue/devtools-api` from 8.1.5 to 8.2.1 - [Release notes](https://github.com/vuejs/devtools/releases) - [Commits](https://github.com/vuejs/devtools/commits/v8.2.1/packages/devtools-api) Updates `chartjs-plugin-trendline` from 3.2.4 to 3.2.8 - [Release notes](https://github.com/Makanz/chartjs-plugin-trendline/releases) - [Changelog](https://github.com/Makanz/chartjs-plugin-trendline/blob/main/changelog.md) - [Commits](Makanz/chartjs-plugin-trendline@v3.2.4...v3.2.8) Updates `mapbox-gl` from 3.25.0 to 3.27.0 - [Release notes](https://github.com/mapbox/mapbox-gl-js/releases) - [Changelog](https://github.com/mapbox/mapbox-gl-js/blob/main/CHANGELOG.md) - [Commits](mapbox/mapbox-gl-js@v3.25.0...v3.27.0) Updates `vue` from 3.5.39 to 3.5.40 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](vuejs/core@v3.5.39...v3.5.40) Updates `vue-router` from 5.1.0 to 5.2.0 - [Release notes](https://github.com/vuejs/router/releases) - [Commits](vuejs/router@v5.1.0...v5.2.0) --- updated-dependencies: - dependency-name: "@vue/devtools-api" dependency-version: 8.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies - dependency-name: chartjs-plugin-trendline dependency-version: 3.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-dependencies - dependency-name: mapbox-gl dependency-version: 3.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies - dependency-name: vue dependency-version: 3.5.40 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-dependencies - dependency-name: vue-router dependency-version: 5.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 28, 2026

Navigation Menu

Uh oh!

chore(deps): Bump the prod-dependencies group with 5 updates - #64

chore(deps): Bump the prod-dependencies group with 5 updates#64
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-975070fa05

dependabot Bot commented on behalf of github Jul 28, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v8.2.1

🐞 Bug Fixes

View changes on GitHub

v8.2.0

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v3.2.8

What's Changed

v3.27.0

Features and improvements ✨

Bug fixes 🐞

v3.27.0-rc.1

Features and improvements ✨

Bug fixes 🐞

v3.26.0

Breaking changes ⚠️

Features and improvements ✨

3.27.0

Features and improvements ✨

Bug fixes 🐞

3.26.0

Breaking changes ⚠️

Features and improvements ✨

Bug fixes 🐞

v3.5.40

3.5.40 (2026-07-16)

Bug Fixes

v5.2.0

🚀 Features

🐞 Bug Fixes

View changes on GitHub

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 28, 2026 •

edited

Loading