[dependabot]

Bumps the web-minor-and-patch group with 6 updates in the /apps/web directory:

Package	From	To
eslint	10.13.0	10.14.0
eslint-plugin-vue	10.11.1	10.12.0
globals	17.13.0	17.14.0
typescript-eslint	8.72.0	8.72.1
vitest	5.0.5	5.1.0
vue-tsc	3.3.13	3.3.14

Updates eslint from 10.13.0 to 10.14.0

Release notes

Sourced from eslint's releases.

v10.14.0

Features

• d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)

Bug Fixes

• 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)
• 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)
• 161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)
• 6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)
• 9155e14 fix: Update @​humanfs/node dependency version (#21434) (Nicholas C. Zakas)
• cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)
• 5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)

Documentation

• 0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)
• dab466e docs: Update README (GitHub Actions Bot)
• 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)
• 7697550 docs: Update README (GitHub Actions Bot)
• 0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)
• 0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)
• e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)

Chores

• 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)
• 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])
• a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)
• 67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)
• 276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])
• 449724e chore: update ecosystem plugins (#21420) (ESLint Bot)
• 8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])

Commits

• 12cbff4 10.14.0
• 6b696e7 Build: changelog update for 10.14.0
• 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462)
• 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460)
• 0f94f47 docs: remove zh-hans from docs language switcher (#21437)
• dab466e docs: Update README
• 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449)
• 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452)
• 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450)
• 161558a fix: handle LS, PS and empty hashbang comments (#21419)
• Additional commits viewable in compare view

Updates eslint-plugin-vue from 10.11.1 to 10.12.0

Release notes

Sourced from eslint-plugin-vue's releases.

v10.12.0

New rules

• Added new vue/no-content-outside-block rule (#3119)
• Added new vue/no-define-model-default rule (#3146)
• Added new vue/no-props-shadow rule (#3118)

New rule options

• Added required option to vue/block-lang to report components that omit a required block entirely (#3125)
• Added ignoreMixins option to vue/require-explicit-emits rule (#3141)

Fixed false negatives (may result in more lint issues)

• Added support for refs detected by type information, such as refs returned from composables, to vue/no-ref-as-operand rule (#3144)
• Fixed vue/no-dupe-keys not reporting defineModel() names that collide with a prop, another model, or a <script setup> variable (#3163)
• Fixed vue/no-dupe-keys not reporting <script setup> variables that shadow a prop while aliasing a different one, such as const foo = toRef(props, 'bar') (#3124)
• Fixed vue/no-multi-spaces not reporting multiple spaces in the tags of some top-level blocks, e.g. <script setup> (#3162)
• Fixed vue/no-ref-as-operand and vue/no-ref-object-reactivity-loss to also check refs created with useTemplateRef() (#3154)
• Fixed vue/no-unused-properties not reporting unused non-props properties in components that use $props as a whole (e.g. v-bind="$props") (#3161)
• Fixed vue/padding-lines-in-component-definition to check every pair of adjacent properties, not only the first, when withinOption or withinEach is not set (#3155)
• Fixed vue/require-default-prop, vue/no-boolean-default, vue/no-required-prop-with-default and vue/require-valid-default-prop not handling defaults that are passed to withDefaults() by reference or spread instead of an inline object literal (#3114)

Fixed false positives (may result in fewer lint issues)

• Changed vue/singleline-html-element-content-newline and vue/multiline-html-element-content-newline rules to ignore router-link and nuxt-link elements by default (#3165)
• Fixed vue/no-undef-properties false positives for properties returned via ...toRefs(reactive({ ... })) from setup() (#3134)
• Fixed vue/require-typed-ref false positives when an explicit type annotation already applies to the ref() call (#3123)
• Fixed vue/v-if-else-key false positive for components with a bound :key (#3150)

Other changes

• Removed Reactivity Transform support from vue/no-ref-object-reactivity-loss, since the Reactivity Transform proposal was dropped from Vue (#3126)
• Changed vue/html-self-closing to treat Vue's special <slot> and \<template> elements as components (html.component option) instead of normal HTML elements (#3164)
• Changed vue/attributes-order rule to provide a suggestion instead of an autofix when the fix would move a binding across v-bind="object" (#3145)
• Improved performance of vue/no-reserved-component-names by no longer rebuilding its reserved name sets for every file (#3147)

Changelog

Sourced from eslint-plugin-vue's changelog.

10.12.0

New rules

• Added new vue/no-content-outside-block rule (#3119)
• Added new vue/no-define-model-default rule (#3146)
• Added new vue/no-props-shadow rule (#3118)

New rule options

• Added required option to vue/block-lang to report components that omit a required block entirely (#3125)
• Added ignoreMixins option to vue/require-explicit-emits rule (#3141)

Fixed false negatives (may result in more lint issues)

• Added support for refs detected by type information, such as refs returned from composables, to vue/no-ref-as-operand rule (#3144)
• Fixed vue/no-dupe-keys not reporting defineModel() names that collide with a prop, another model, or a <script setup> variable (#3163)
• Fixed vue/no-dupe-keys not reporting <script setup> variables that shadow a prop while aliasing a different one, such as const foo = toRef(props, 'bar') (#3124)
• Fixed vue/no-multi-spaces not reporting multiple spaces in the tags of some top-level blocks, e.g. <script setup> (#3162)
• Fixed vue/no-ref-as-operand and vue/no-ref-object-reactivity-loss to also check refs created with useTemplateRef() (#3154)
• Fixed vue/no-unused-properties not reporting unused non-props properties in components that use $props as a whole (e.g. v-bind="$props") (#3161)
• Fixed vue/padding-lines-in-component-definition to check every pair of adjacent properties, not only the first, when withinOption or withinEach is not set (#3155)
• Fixed vue/require-default-prop, vue/no-boolean-default, vue/no-required-prop-with-default and vue/require-valid-default-prop not handling defaults that are passed to withDefaults() by reference or spread instead of an inline object literal (#3114)

Fixed false positives (may result in fewer lint issues)

• Changed vue/singleline-html-element-content-newline and vue/multiline-html-element-content-newline rules to ignore router-link and nuxt-link elements by default (#3165)
• Fixed vue/no-undef-properties false positives for properties returned via ...toRefs(reactive({ ... })) from setup() (#3134)
• Fixed vue/require-typed-ref false positives when an explicit type annotation already applies to the ref() call (#3123)
• Fixed vue/v-if-else-key false positive for components with a bound :key (#3150)

Other changes

• Removed Reactivity Transform support from vue/no-ref-object-reactivity-loss, since the Reactivity Transform proposal was dropped from Vue (#3126)
• Changed vue/html-self-closing to treat Vue's special <slot> and \<template> elements as components (html.component option) instead of normal HTML elements (#3164)
• Changed vue/attributes-order rule to provide a suggestion instead of an autofix when the fix would move a binding across v-bind="object" (#3145)
• Improved performance of vue/no-reserved-component-names by no longer rebuilding its reserved name sets for every file (#3147)

Commits

• f2a0cb5 Version Packages (#3153)
• 9814050 fix(no-dupe-keys): detect defineModel() name collisions (#3163)
• 1741d59 fix(no-multi-spaces): check tags of all top-level blocks (#3162)
• d743582 fix(no-unused-properties): report unused non-props along $props (#3161)
• d2a1f76 fix(padding-lines-in-component-definition): check every property pair when `w...
• 2a7ad86 fix: recognize useTemplateRef() (#3154)
• 515614e fix(attributes-order): change unsafe autofix to suggestion (#3145)
• 9175cc5 feat: remove Reactivity Transform support (#3126)
• f115fd6 refactor: migrate block-lang to TypeScript (#3209)
• 30a2a53 refactor: migrate class name and valid-next-tick rules to TypeScript (#3202)
• Additional commits viewable in compare view

Updates globals from 17.13.0 to 17.14.0

Release notes

Sourced from globals's releases.

v17.14.0

• Update globals (2026-11-01) (#355) 7abfb5d

---

sindresorhus/globals@v17.13.0...v17.14.0

Commits

• 3080111 17.14.0
• c61cc23 Tweaks
• 7abfb5d Update globals (2026-11-01) (#355)
• See full diff in compare view

Updates typescript-eslint from 8.72.0 to 8.72.1

Release notes

Sourced from typescript-eslint's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

• eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)
• eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)
• typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.72.1 (2026-10-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 4ad6b75 chore(release): publish 8.72.1
• 7757694 chore: cleanup typecheck & build and fix race condition (#13071)
• See full diff in compare view

Updates vitest from 5.0.5 to 5.1.0

Release notes

Sourced from vitest's releases.

v5.1.0

   🚀 Features

• Add --last-failed to run only failed tests  -  by @​sheremet-va in vitest-dev/vitest#11558 (82f63)
• Support Temporal.Instant and Temporal.ZonedDateTime in vi.setSystemTime()  -  by @​Prajwal2246, Prajwal2246, Claude Opus 5.5 (1M context), @​hi-ogawa and Codex (GPT-6) in vitest-dev/vitest#11321 (f150f)
• Introduce --since-last-run flag  -  by @​sheremet-va in vitest-dev/vitest#11516 (08bd9)
• Expose per-retry/repeat attempt result  -  by @​hi-ogawa, Codex (GPT-6) and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11232 (21be4)
• Support fake timers for node:timers and node:timers/promise  -  by @​hi-ogawa, OpenCode and Codex (GPT-6) in vitest-dev/vitest#10899 (fbe97)
• Allow coverage providers to store data in fs module cache  -  by @​AriPerkkio in vitest-dev/vitest#11747 (54a2b)
• Interactively review failed snapshots  -  by @​macarie and @​hi-ogawa in vitest-dev/vitest#11325 (54e5b)
• browser:
  • Mock modules through an import map  -  by @​sheremet-va in vitest-dev/vitest#11534 (707f8)
  • Drop experimental label from trace view  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11518 (44c3c)
  • Introduce experimental pointer API  -  by @​macarie in vitest-dev/vitest#10780 (5dc09)
  • Capture aria snapshot in trace view  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11492 (0cc39)
  • Show trace steps timeline on terminal on test failure  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11594 (973dc)
  • Add failure-only trace view mode  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11612 (d5d7d)
  • Enable failure-only trace view by default  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11766 (f37b6)
• coverage:
  • V8 to support ignoreNode option  -  by @​erickserra and @​AriPerkkio in vitest-dev/vitest#11688 (e02db)
• experimental:
  • Add trace timeline for node  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11753 (4e985)
  • Add message option to vi.waitFor and vi.waitUntil  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11754 (fd145)

   🐞 Bug Fixes

• Rerun setup files after --changed filtering  -  by @​sheremet-va in vitest-dev/vitest#11621 (3a39c)
• Return the mock to concurrent imports  -  by @​sheremet-va in vitest-dev/vitest#11623 (1453b)
• Don't fail on console log pending at teardown  -  by @​sheremet-va in vitest-dev/vitest#11619 (a60b8)
• Reference chai types in every d.ts chunk  -  by @​sheremet-va in vitest-dev/vitest#11618 (fb150)
• Detect mock factory cycles that form later  -  by @​sheremet-va in vitest-dev/vitest#11642 (e9554)
• Skip fs module cache for typed import.meta.glob  -  by @​sheremet-va in vitest-dev/vitest#11666 (79501)
• Run tests that import a deleted file  -  by @​sheremet-va in vitest-dev/vitest#11669 (80aa1)
• Keep syntax highlighting in code frames  -  by @​sheremet-va in vitest-dev/vitest#11705 (d39f5)
• Respect CLI filters when prewarming browsers  -  by @​sheremet-va and Benjamin Tang in vitest-dev/vitest#11706 (10947)
• Read cached source as utf-8  -  by @​juan-fernandez in vitest-dev/vitest#11682 and vitest-dev/vitest#11709 (867a5)
• Inherit watch from the root config in projects  -  by @​nstepien and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11724 (77c12)
• Prefix expect.poll message to all errors  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11756 (cab58)
• Support api.port 0  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11641 (3667c)
• Show attempts in test error logs of retried tests  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11696 (77a94)
• Preserve rootDir in project paths  -  by @​btea in vitest-dev/vitest#11816 (bf96d)
• browser:
  • Change default port to 23315  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11640 (a2ec4)
  • Advance fake timers in actions and expect.element  -  by @​julienw, @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11242 (68190)
  • Drop trace view warning without html reporter  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11665 (e6407)
  • Detect shared chunks via the optimizer  -  by @​sheremet-va in vitest-dev/vitest#11661 (e2e9c)
  • Clear screenshot stability timeout  -  by @​sheremet-va in vitest-dev/vitest#11659 (fbe37)
  • Measure prepare duration with one clock  -  by @​sheremet-va in vitest-dev/vitest#11667 (a3ed4)
  • Keep failure screenshot per attempt  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11694 (a5022)
  • Print trace timeline of each attempt  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11695 (27229)

... (truncated)

Commits

• 7a38449 chore: release v5.1.0 (#11838)
• a5ec316 fix(vm): keep assignable accessor globals writable in node environment (#11834)
• e46c6c1 refactor: share trace types and utils (#11825)
• 9e23ce5 refactor(snapshot): unify review update with SnapshotState update (#11790)
• a0e33cc chore: eliminate lint error (#11822)
• fd145d8 feat(experimental): add message option to vi.waitFor and vi.waitUntil (#11754)
• 4e98551 feat(experimental): add trace timeline for node (#11753)
• bf96dad fix: preserve rootDir in project paths (#11816)
• 54e5b8a feat: interactively review failed snapshots (#11325)
• 4277075 fix(expect): keep soft .resolves/.rejects error location (#11792)
• Additional commits viewable in compare view

Updates vue-tsc from 3.3.13 to 3.3.14

Release notes

Sourced from vue-tsc's releases.

v3.3.14

language-core

• fix: isolate template virtual code from setup control flow (d31557b)
• fix: re-assert dot-value bindings in template closures (4524874) (f9c908f) (b65e458)
• fix: avoid TS2454 from the withDotValue assertion (c774144)
• fix: use a const type parameter in __VLS_unwrap to keep literal bindings on TS 7.1 (ce6c1de)
• fix: avoid never slot props for dynamic slot names in generic components (7957e7f)
• fix: omit emitted events from inherited attrs of generic components (2d94d89)
• fix: check bindings of generic directive hooks (0cb7d92)
• fix: wrap the v-model assignment target in parentheses (9bb1dc9)
• fix: type the $event parameter of inline handlers explicitly (d3b42a1)
• fix: type unknown components without diagnostic filters (b3909a3)
• fix: keep leading @ts-nocheck and /// <reference> effective in script setup (c2e2e6f)
• fix: declare component context vars before slot code (b7c773d)
• fix: avoid non-null assertion in JS slot codegen (5633525)
• fix: restore tag navigation for barrel imports (6358d15)
• fix: map the whole hyphenated directive name in the auto-import access (beb0151)

language-service

• fix: prevent crash on malformed html.customData configuration (3961653)

typescript-plugin

• fix: show unwrapped type when hovering setup refs in template (c742c14)

Contributors: @​johnsoncodehk, @​lazerg, @​ValentinYoushkevich, @​so1ve, @​WangKepeople

Changelog

Sourced from vue-tsc's changelog.

3.3.14 (2026-10-30)

language-core

• fix: isolate template virtual code from setup control flow (d31557b)
• fix: re-assert dot-value bindings in template closures (4524874) (f9c908f) (b65e458)
• fix: avoid TS2454 from the withDotValue assertion (c774144)
• fix: use a const type parameter in __VLS_unwrap to keep literal bindings on TS 7.1 (ce6c1de)
• fix: avoid never slot props for dynamic slot names in generic components (7957e7f)
• fix: omit emitted events from inherited attrs of generic components (2d94d89)
• fix: check bindings of generic directive hooks (0cb7d92)
• fix: wrap the v-model assignment target in parentheses (9bb1dc9)
• fix: type the $event parameter of inline handlers explicitly (d3b42a1)
• fix: type unknown components without diagnostic filters (b3909a3)
• fix: keep leading @ts-nocheck and /// <reference> effective in script setup (c2e2e6f)
• fix: declare component context vars before slot code (b7c773d)
• fix: avoid non-null assertion in JS slot codegen (5633525)
• fix: restore tag navigation for barrel imports (6358d15)
• fix: map the whole hyphenated directive name in the auto-import access (beb0151)

language-service

• fix: prevent crash on malformed html.customData configuration (3961653)

typescript-plugin

• fix: show unwrapped type when hovering setup refs in template (c742c14)

Contributors: @​johnsoncodehk, @​lazerg, @​ValentinYoushkevich, @​so1ve, @​WangKepeople

Commits

• df80037 v3.3.14
• d31557b fix(language-core): isolate template virtual code from setup control flow (#6...
• b3909a3 fix(language-core): type unknown components without diagnostic filters (fix #...
• 845975c chore: bump @volar/* to 2.4.30
• 0cb7d92 fix(language-core): check bindings of generic directive hooks (#6291)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions