[dependabot]

Bumps the all group in /web with 8 updates:

Package	From	To
@types/node	26.6.1	26.6.2
vitest	5.0.1	5.0.2
jsdom	30.1.0	30.1.1
eslint-plugin-vue	10.11.0	10.11.1
prettier	3.9.8	3.9.9
typescript	5.9.3	7.0.2
typescript-eslint	8.70.0	8.70.1
vite	8.3.0	8.3.1

Updates @types/node from 26.6.1 to 26.6.2

Commits

• See full diff in compare view

Updates vitest from 5.0.1 to 5.0.2

Release notes

Sourced from vitest's releases.

v5.0.2

   🐞 Bug Fixes

• Bind process in case global is overwritten  -  by @​AriPerkkio in vitest-dev/vitest#11343 (0b792)
• detect-async-leaks:
  • Ignore process.stdio handles  -  by @​AriPerkkio in vitest-dev/vitest#11333 (0fd6b)
• expect:
  • Fix toMatchObject with asymmetric matchers  -  by @​ShreeBohara, Claude Opus 5, @​hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in vitest-dev/vitest#11100 (42523)
• jsdom:
  • Fix Request with Blob body on jsdom 28+  -  by @​harshit-d3v in vitest-dev/vitest#11295 (d1c3e)
• reporter:
  • agent to respect --silent  -  by @​Raj4478 and @​AriPerkkio in vitest-dev/vitest#11271 (5b95e)
• reporters:
  • Handle concurrent createReport calls  -  by @​7rulnik in vitest-dev/vitest#11278 (e8e55)
  • hanging-process to use ESM entrypoint  -  by @​AriPerkkio in vitest-dev/vitest#11316 (4e91e)
• spy:
  • Fix stack overflow when spying Set.prototype.add  -  by @​fengmk2 in vitest-dev/vitest#11299 (a0a93)
• ui:
  • Persist authentication cookie beyond current browser session  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11066 (f8819)

    View changes on GitHub

Commits

• 428e2e5 chore: release v5.0.2 (#11357)
• 0b79231 fix: bind process in case global is overwritten (#11343)
• 597df56 docs: correct stale config defaults (#11354)
• ea1c44f docs: sequence.setupFiles default is 'list' (#11351)
• 0fd6b97 fix(detect-async-leaks): ignore process.stdio handles (#11333)
• 4e91e56 fix(reporters): hanging-process to use ESM entrypoint (#11316)
• 1a57929 docs(browser): fix locators.exact default (#11338)
• 5b95efb fix(reporter): agent to respect --silent (#11271)
• f58a209 docs: correct benchmark.exclude and watch defaults (#11268)
• d1c3ecc fix(jsdom): fix Request with Blob body on jsdom 28+ (#11295)
• Additional commits viewable in compare view

Updates jsdom from 30.1.0 to 30.1.1

Release notes

Sourced from jsdom's releases.

v30.1.1

• Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (@​asamuzaK)
• Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (@​asamuzaK)
• Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (@​asamuzaK)
• Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (@​scttcper)
• Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (@​FedgeNo)
• Fixed !important handling when updating CSS longhands after shorthands, using variables or CSS-wide keywords, and assigning style properties directly. (@​FedgeNo)
• Fixed <noscript> parsing with includeNodeLocations: true or inside frames to honor the runScripts option.
• Fixed the storageQuota option being ignored by frames.
• Fixed encoding detection of HTML and XML byte input to honor XML encoding declarations and detect UTF-16 without a byte order mark.
• Fixed exceptions caused by truncated charset parameters in <meta> elements, and encoding detection incorrectly using incomplete <meta> tags. (@​FedgeNo)
• Fixed XML serialization errors for namespaces named constructor, toString, __proto__, or "null", and incorrect reuse of namespace prefixes declared on sibling elements.
• Fixed element.innerHTML and element.outerHTML in XML documents to reject invalid characters in attribute values and avoid stack overflows on large strings.
• Fixed selector matching for :lang(), :nth-child(... of ...) after mutations, and :has() with duplicate IDs or nested logical pseudo-classes. (@​asamuzaK)

Commits

• 0a117f4 30.1.1
• 103f67d Remove unnecessary window cleanup from API tests
• cdda00a Test HTTP/2 document and subresource loading
• 7ab92ce Update @​asamuzakjp/dom-selector to v9.2.1
• d940c20 Share jsdom settings across descendant windows
• 6ba40cb Fix and simplify option propagation
• 3b3be70 Preserve CSS priorities across declaration updates
• 97b2758 Align focusing and unfocusing with HTML
• b7b460b Update w3c-xmlserializer to v6
• 71d562f Update html-encoding-sniffer to v7
• Additional commits viewable in compare view

Updates eslint-plugin-vue from 10.11.0 to 10.11.1

Release notes

Sourced from eslint-plugin-vue's releases.

v10.11.1

Patch Changes

• Fixed vue/no-ref-object-reactivity-loss false negatives for values gotten in an immediately invoked function expression (IIFE) (#3115)
• Fixed vue/no-unused-properties false positive for props explicitly typed as never (#3113)
• Fixed vue/require-default-prop to no longer require a default value for defineModel (#3138)

Changelog

Sourced from eslint-plugin-vue's changelog.

10.11.1

Patch Changes

• Fixed vue/no-ref-object-reactivity-loss false negatives for values gotten in an immediately invoked function expression (IIFE) (#3115)
• Fixed vue/no-unused-properties false positive for props explicitly typed as never (#3113)
• Fixed vue/require-default-prop to no longer require a default value for defineModel (#3138)

Commits

• ec9c53a Version Packages (#3139)
• 50ffb7f docs: explain how to apply the configs to a subset of files (#3122)
• ad239b4 fix(no-unused-properties): ignore props typed as never (#3113)
• 24cb5bc fix(no-ref-object-reactivity-loss): improve IIFE handling (#3115)
• ef6f53e fix(require-default-prop): don't report on defineModel (#3138)
• 121030c Format changelog
• See full diff in compare view

Updates prettier from 3.9.8 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

• Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

Commits

• cdd17f2 Release 3.9.9
• dc7b896 Disable singleDollarTextMath in mdast-util-math (#20140)
• f9be58f Git blame ignore 3.9.8
• 88470cb Bump Prettier dependency to 3.9.8
• 9559cab Clean changelog_unreleased
• 4fc8ee8 Update dependents count
• See full diff in compare view

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).
• fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

• npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

• npm

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).

Downloads are available on:

• npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

• fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

• npm

Commits

• 1e4744d Merge branch 'main' into ts7-release
• a5a219cmicrosoft/typescript-go#4558
• ecfe30d Update status localization
• 5de25b5 Hide executable name in TypeScript status
• d7ce74a Show bundled TypeScript version for packaged servers
• 29be66a Correct TS 7 release version to 7.0.2
• ed2bd1b Merge branch 'main' into ts7-release
• 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
• 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
• d4eaca5microsoft/typescript-go#4549
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates typescript-eslint from 8.70.0 to 8.70.1

Release notes

Sourced from typescript-eslint's releases.

v8.70.1

8.70.1 (2026-09-21)

🩹 Fixes

• ast-spec: narrow import attribute keys to identifiers and strings (#12879)
• eslint-plugin: [no-useless-default-assignment] avoid false positives on tuples with a rest element (#12768)
• eslint-plugin: [no-unnecessary-type-parameters] handle type precedence in the suggestion fixer (#12637)
• eslint-plugin: [no-explicit-any] use unknown[] for bare any rest parameters (#12818)
• eslint-plugin: [no-generated-empty-object-type] don't report a mapped type whose keys are not resolved yet (#12854)
• eslint-plugin: [no-misused-spread] omit WeakMap spread suggestions (#12850)
• eslint-plugin: [no-unnecessary-type-assertion] false positive for empty object asserted to a type alias of Record (#12869)
• eslint-plugin: [no-meaningless-void-operator] allow void on assignment expressions (#12873)
• eslint-plugin: [await-thenable] prevent autofix from breaking code when removing await (#12716)
• eslint-plugin: [no-unnecessary-parameter-property-assignment] account for parameter reassignment (#12880)
• eslint-plugin: [unbound-method] treat Intl.Collator.prototype.compare as spec-bound (#12845)
• eslint-plugin: [no-unnecessary-condition] handle union-keyed index access on the left-hand side of nullish assignment (#12747)
• eslint-plugin: [no-useless-default-assignment] convert the fixer to a suggestion fixer (#12826)
• eslint-plugin: [no-misused-promises] handle multiple Promise constituents (#12904)
• rule-tester: test the final autofix output instead of the first pass (#12867)
• scope-manager: merge implicit global definitions (#12809)
• type-utils: match package specifiers on whole path components (#12838)
• typescript-estree: resolve symlinked paths when matching files to projects (#12725)
• typescript-estree: add missing < token opening type arguments (#12821)
• typescript-estree: require string literal import attribute values (#12894)
• website: prevent playground from breaking down after opening link with the .js file type (#12777)

❤️ Thank You

• Amin @​amiin-dev
• Brad Zacher @​bradzacher
• Cameron
• Diptajoy Mistry @​diptomistry
• Evyatar Daud @​StyleShit
• Grit @​Grit03
• Hugo @​hugop95
• Josh Goldberg ✨
• Michael Naumov @​mnaoumov
• Mikhail Baev @​baevm
• Om Rawat
• overlookmotel
• Sanath @​sansynx
• Shinji
• stoicism @​stoicism02
• Vinccool96
• Younsang Na @​nayounsang
• 김채영 @​cchaeyoung
• 송재욱

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.70.1 (2026-09-21)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 23d38ce chore(release): publish 8.70.1
• eb42d9b chore: cleanup and fix Nx dependencies and missing tasks (#12897)
• 8c80531 chore: fix typos in comments and docs (#12846)
• b6b86a1 chore: migrate to nx 23.2.0 (#12843)
• See full diff in compare view

Updates vite from 8.3.0 to 8.3.1

Release notes

Sourced from vite's releases.

v8.3.1

Bug Fixes

• deps: update all non-major dependencies (#23482) (3c752c8)
• deps: update all non-major dependencies (#23537) (e8990c4)
• deps: update rolldown-related dependencies (#23483) (9aecbbf)
• handle server.ws: false in mergeConfig (#23511) (f68c0d5)
• merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)
• optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)
• optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)
• server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)
• sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

• merge prereleases in changelog (#23466) (99bd9d1)
• optimizer: add debug log when waiting for dep before init (#23566) (63567c7)
• update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

• assets regexp use non-capture (#23491) (f4b4431)
• remove duplicate configurations (#23532) (9abd99b)
• replace find with some (#23554) (af7cdf6)

Changelog

Sourced from vite's changelog.

8.3.1 (2026-09-24)

Bug Fixes

• deps: update all non-major dependencies (#23482) (3c752c8)
• deps: update all non-major dependencies (#23537) (e8990c4)
• deps: update rolldown-related dependencies (#23483) (9aecbbf)
• handle server.ws: false in mergeConfig (#23511) (f68c0d5)
• merge build.rolldownOptions.output.comments correctly (#23514) (4aba8d8)
• optimizer: don't skip imports whose binding starts with type (#23540) (39330f4)
• optimizer: resolve pending discovered dep processing on close before init (#23567) (5f89433)
• server: avoid reinitializing watcher when adding file after server close (#23572) (6f831f9)
• sourcemap: skip URL source roots when injecting sources content (#23519) (04fc30a)

Miscellaneous Chores

• merge prereleases in changelog (#23466) (99bd9d1)
• optimizer: add debug log when waiting for dep before init (#23566) (63567c7)
• update optimizeDeps.include comment (#23489) (6a84c72)

Code Refactoring

• assets regexp use non-capture (#23491) (f4b4431)
• remove duplicate configurations (#23532) (9abd99b)
• replace find with some (#23554) (af7cdf6)

Commits

• 39ddf7c release: v8.3.1 (#23573)
• f68c0d5 fix: handle server.ws: false in mergeConfig (#23511)
• 6f831f9 fix(server): avoid reinitializing watcher when adding file after server close...
• 04fc30a fix(sourcemap): skip URL source roots when injecting sources content (#23519)
• 5f89433 fix(optimizer): resolve pending discovered dep processing on close before ini...
• 63567c7 chore(optimizer): add debug log when waiting for dep before init (#23566)
• e8990c4 fix(deps): update all non-major dependencies (#23537)
• af7cdf6 refactor: replace find with some (#23554)
• 39330f4 fix(optimizer): don't skip imports whose binding starts with type (#23540)
• 9abd99b refactor: remove duplicate configurations (#23532)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions