Skip to content

chore(deps): Bump the prod-dependencies group across 1 directory with 7 updates - #289

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-e662e9da72
Open

chore(deps): Bump the prod-dependencies group across 1 directory with 7 updates#289
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-e662e9da72

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-dependencies group with 7 updates in the / directory:

Package From To
@vue/devtools-api 8.1.5 8.2.1
@vueuse/components 14.3.0 14.4.0
@vueuse/core 14.3.0 14.4.0
chartjs-plugin-trendline 3.2.4 3.2.9
maplibre-gl 6.0.0 6.1.0
vue 3.5.39 3.5.40
vue-router 5.1.0 5.2.0

Updates @vue/devtools-api from 8.1.5 to 8.2.1

Release notes

Sourced from @​vue/devtools-api's releases.

v8.2.1

   🐞 Bug Fixes

    View changes on GitHub

v8.2.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @vueuse/components from 14.3.0 to 14.4.0

Release notes

Sourced from @​vueuse/components's releases.

v14.4.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @vueuse/core from 14.3.0 to 14.4.0

Release notes

Sourced from @​vueuse/core's releases.

v14.4.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 24160f9 chore: release v14.4.0 (#5552)
  • 6aa9d6d fix(useDraggable): end drag on pointercancel (#5550)
  • 5fe4945 fix(useElementSize): prefill size based on box option (#5524)
  • 0f6d55d fix(useVirtualList): recompute range when item size changes (#5533)
  • 8f26673 test(useTransition): widen lower bound for WebKit test (#5540)
  • 2cad765 fix(useEventBus): use tryOnScopeDispose to avoid operating Vue internal API...
  • 653283c fix(useGamepad): keep updating remaining gamepads after one disconnects (#5523)
  • d39699c docs(useTextareaAutosize): restore demo textarea autosizing (#5532)
  • 8442658 fix(useFetch): ignore stale abort error after refetch succeeds (#5525)
  • bccb159 fix: accept array template ref bound to v-for as observer target (#5514)
  • Additional commits viewable in compare view

Updates chartjs-plugin-trendline from 3.2.4 to 3.2.9

Release notes

Sourced from chartjs-plugin-trendline's releases.

v3.2.9

What's Changed

Full Changelog: Makanz/chartjs-plugin-trendline@v3.2.8...v3.2.9

v3.2.8

What's Changed

Full Changelog: Makanz/chartjs-plugin-trendline@v3.2.5...v3.2.8

Commits
  • fdf2136 Merge pull request #151 from Makanz/fix/security-brace-expansion-js-yaml
  • 2d490f1 fix: bump to v3.2.9, override brace-expansion + js-yaml (CVE-2026-13149, GHSA...
  • 5f07845 Merge pull request #148 from Makanz/fix/projection-near-zero-slope-147
  • a5f5d32 fix: update .gitignore to include 'nul' and remove SIMPLIFY_PLAN.md
  • 621beae Merge pull request #150 from Makanz/fix/ws-security-cve-2026-48779
  • 524ef18 fix: bump to v3.2.8, override ws transitive dep (CVE-2026-48779)
  • 5c4e1e2 Merge pull request #149 from Makanz/fix/js-yaml-security
  • 2e43eca fix: bump js-yaml override to >=3.15.0, patch v3.2.7
  • a97f25e test: add regression tests for issue #147 time-scale slope threshold
  • 232faab fix: use relative threshold for near-zero slope detection in projection
  • Additional commits viewable in compare view

Updates maplibre-gl from 6.0.0 to 6.1.0

Release notes

Sourced from maplibre-gl's releases.

v6.1.0

✨ Features and improvements

  • Add support for updating an ImageSource with an already-decoded image (HTMLImageElement, HTMLCanvasElement, ImageBitmap or ImageData) directly via ImageSource.updateImage({image}), skipping the network request (#7944) (by @​mondsichtung)
  • Add GeoJSONSource.getClusterOptions to get a source's current cluster options (cluster, clusterMaxZoom, clusterRadius) (#7948) (by @​lazerg)
  • Support global-state expressions in sky.*, light.* and projection.type properties (#7966, #7967, #7968) (by @​CommanderStorm)
  • Add MapOptions.rotateSpeed and MapOptions.pitchSpeed, the degrees the bearing/pitch change per pixel dragged (#7949) (by @​clement-igonet)
  • Show a grab cursor over draggable markers, including on non-interactive maps (#8019) (by @​hugosmoreira)

🐞 Bug fixes

  • Use role=img for non-interactive default markers and role=button when they become interactive (#7790) (by @​cat0825)
  • Fix an error thrown when a paint property transitions between arrays of different length (#6606) (by @​HarelM)
  • Fix renderer crash when RasterTileSource.setTiles/setUrl is called while the source contains errored tiles (#7911) (by @​lazerg)
  • Fix 3D buildings disappearing when the camera pitches up to look near the horizon, by growing tile-culling bounds as the frustum's bottom edge (from pitch and FOV) approaches horizontal (#7633) (by @​clement-igonet)
  • Fix globe latitude precision on some GPUs (e.g. Mali) by reformulating the mercator-to-sphere Y coordinate algebraically (exp + rational arithmetic instead of atan/sin/cos), avoiding float32 cancellation and imprecise hardware transcendentals near the equator; the runtime GPU atan-error measurement/correction this superseded has also been removed (#7419) (by @​clement-igonet)
  • Fix a race in RasterTileSource.loadTile and ImageSource.load where a tile/image aborted during an awaited transformRequest passed an undefined AbortController into the image request queue, crashing it with TypeError: Cannot read properties of undefined (reading 'signal') (#8004) (by @​jan-grzybek)
  • Fix setTerrain not destroying the previously active terrain when switching to a new configuration, which leaked its GPU resources and left the old source still configured as a terrain source (#7990) (by @​lazerg)
  • Fix fill and line layers being rendered twice near the antimeridian on globe when looking at poles or when zoomed out (#6248) (by @​pabueco)
Changelog

Sourced from maplibre-gl's changelog.

6.1.0

✨ Features and improvements

  • Add support for updating an ImageSource with an already-decoded image (HTMLImageElement, HTMLCanvasElement, ImageBitmap or ImageData) directly via ImageSource.updateImage({image}), skipping the network request (#7944) (by @​mondsichtung)
  • Add GeoJSONSource.getClusterOptions to get a source's current cluster options (cluster, clusterMaxZoom, clusterRadius) (#7948) (by @​lazerg)
  • Support global-state expressions in sky.*, light.* and projection.type properties (#7966, #7967, #7968) (by @​CommanderStorm)
  • Add MapOptions.rotateSpeed and MapOptions.pitchSpeed, the degrees the bearing/pitch change per pixel dragged (#7949) (by @​clement-igonet)
  • Show a grab cursor over draggable markers, including on non-interactive maps (#8019) (by @​hugosmoreira)

🐞 Bug fixes

  • Use role=img for non-interactive default markers and role=button when they become interactive (#7790) (by @​cat0825)
  • Fix an error thrown when a paint property transitions between arrays of different length (#6606) (by @​HarelM)
  • Fix renderer crash when RasterTileSource.setTiles/setUrl is called while the source contains errored tiles (#7911) (by @​lazerg)
  • Fix 3D buildings disappearing when the camera pitches up to look near the horizon, by growing tile-culling bounds as the frustum's bottom edge (from pitch and FOV) approaches horizontal (#7633) (by @​clement-igonet)
  • Fix globe latitude precision on some GPUs (e.g. Mali) by reformulating the mercator-to-sphere Y coordinate algebraically (exp + rational arithmetic instead of atan/sin/cos), avoiding float32 cancellation and imprecise hardware transcendentals near the equator; the runtime GPU atan-error measurement/correction this superseded has also been removed (#7419) (by @​clement-igonet)
  • Fix a race in RasterTileSource.loadTile and ImageSource.load where a tile/image aborted during an awaited transformRequest passed an undefined AbortController into the image request queue, crashing it with TypeError: Cannot read properties of undefined (reading 'signal') (#8004) (by @​jan-grzybek)
  • Fix setTerrain not destroying the previously active terrain when switching to a new configuration, which leaked its GPU resources and left the old source still configured as a terrain source (#7990) (by @​lazerg)
  • Fix fill and line layers being rendered twice near the antimeridian on globe when looking at poles or when zoomed out (#6248) (by @​pabueco)
Commits
  • 3d50bcf Bump js version to 6.1.0 (#8058)
  • 5d50057 chore(deps-dev): bump rollup from 4.62.2 to 4.62.3 (#8055)
  • 8ad192c chore(deps-dev): bump globals from 17.7.0 to 17.8.0 (#8056)
  • b143343 fix: clip z0 tile at antimeridian on globe to prevent double rendering (#7896)
  • 7e8e1e4 Add a Vitest bench lane for micro benchmarks (#8047)
  • 985df32 Show grab cursor for draggable markers (#8023)
  • cb32014 chore(deps-dev): bump postcss from 8.5.22 to 8.5.23 (#8042)
  • 1ab477c chore(deps-dev): bump eslint from 10.7.0 to 10.8.0 in the eslint group (#8040)
  • cb98660 Fix npm run benchmark (#8027)
  • b2e4cc1 chore(deps): bump github/codeql-action/analyze from 4.37.2 to 4.37.3 (#8036)
  • Additional commits viewable in compare view

Updates vue from 3.5.39 to 3.5.40

Release notes

Sourced from vue's releases.

v3.5.40

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.40 (2026-07-16)

Bug Fixes

Commits

Updates vue-router from 5.1.0 to 5.2.0

Release notes

Sourced from vue-router's releases.

v5.2.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): Bump the prod-dependencies group across 1 directory with…
ebc97ed 
… 7 updates

Bumps the prod-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@vue/devtools-api](https://github.com/vuejs/devtools/tree/HEAD/packages/devtools-api) | `8.1.5` | `8.2.1` |
| [@vueuse/components](https://github.com/vueuse/vueuse/tree/HEAD/packages/components) | `14.3.0` | `14.4.0` |
| [@vueuse/core](https://github.com/vueuse/vueuse/tree/HEAD/packages/core) | `14.3.0` | `14.4.0` |
| [chartjs-plugin-trendline](https://github.com/Makanz/chartjs-plugin-trendline) | `3.2.4` | `3.2.9` |
| [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) | `6.0.0` | `6.1.0` |
| [vue](https://github.com/vuejs/core) | `3.5.39` | `3.5.40` |
| [vue-router](https://github.com/vuejs/router) | `5.1.0` | `5.2.0` |



Updates `@vue/devtools-api` from 8.1.5 to 8.2.1
- [Release notes](https://github.com/vuejs/devtools/releases)
- [Commits](https://github.com/vuejs/devtools/commits/v8.2.1/packages/devtools-api)

Updates `@vueuse/components` from 14.3.0 to 14.4.0
- [Release notes](https://github.com/vueuse/vueuse/releases)
- [Commits](https://github.com/vueuse/vueuse/commits/v14.4.0/packages/components)

Updates `@vueuse/core` from 14.3.0 to 14.4.0
- [Release notes](https://github.com/vueuse/vueuse/releases)
- [Commits](https://github.com/vueuse/vueuse/commits/v14.4.0/packages/core)

Updates `chartjs-plugin-trendline` from 3.2.4 to 3.2.9
- [Release notes](https://github.com/Makanz/chartjs-plugin-trendline/releases)
- [Changelog](https://github.com/Makanz/chartjs-plugin-trendline/blob/main/changelog.md)
- [Commits](Makanz/chartjs-plugin-trendline@v3.2.4...v3.2.9)

Updates `maplibre-gl` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/maplibre/maplibre-gl-js/releases)
- [Changelog](https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md)
- [Commits](maplibre/maplibre-gl-js@v6.0.0...v6.1.0)

Updates `vue` from 3.5.39 to 3.5.40
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.39...v3.5.40)

Updates `vue-router` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/vuejs/router/releases)
- [Commits](vuejs/router@v5.1.0...v5.2.0)

---
updated-dependencies:
- dependency-name: "@vue/devtools-api"
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: "@vueuse/components"
  dependency-version: 14.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: "@vueuse/core"
  dependency-version: 14.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: chartjs-plugin-trendline
  dependency-version: 3.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: maplibre-gl
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: vue
  dependency-version: 3.5.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: vue-router
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants