fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #115 · neteye-platform/wpctf-website

renovate · 2026-10-17T13:20:51Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
@playwright/test (source)	devDependencies	patch	`1.64.0` → `1.64.1`
DavidAnson/markdownlint-cli2	repository	minor	`v0.23.3` → `v0.24.0`
astral-sh/ruff-pre-commit	repository	patch	`v0.17.1` → `v0.17.3`
astral-sh/uv-pre-commit	repository	patch	`0.13.1` → `0.13.6`
autoprefixer	devDependencies	patch	`10.6.1` → `10.6.2`
eslint (source)	devDependencies	minor	`10.12.0` → `10.14.0`
eslint-plugin-vue (source)	devDependencies	minor	`10.11.1` → `10.12.0`
node (source)	stage	minor	`26.12.0` → `26.13.0`
npm-run-all2	devDependencies	patch	`9.0.3` → `9.0.4`
pinia (source)	dependencies	minor	`4.0.3` → `4.1.0`
postcss (source)	overrides	patch	`8.5.30` → `8.5.32`
renovatebot/pre-commit-hooks	repository	minor	`44.164.10` → `44.205.1`
typescript-eslint (source)	devDependencies	minor	`8.71.2` → `8.72.1`
vite (source)	devDependencies	patch	`8.3.4` → `8.3.5`
vue-tsc (source)	devDependencies	patch	`3.3.13` → `3.3.14`

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

microsoft/playwright (@playwright/test)

`v1.64.1`

Compare Source

Bug Fixes

#43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
#43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

DavidAnson/markdownlint-cli2

`v0.24.0`

Compare Source

astral-sh/ruff-pre-commit

`v0.17.3`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.17.3

`v0.17.2`

Compare Source

See: https://github.com/astral-sh/ruff/releases/tag/0.17.2

astral-sh/uv-pre-commit

postcss/autoprefixer (autoprefixer)

`v10.6.2`

Compare Source

Added /* autoprefixer: ignore next warning */ (by @dualfroz).
Fixed losing unprefixed selectors in old browsers in grouping (by @ybai08).
Fixed selector duplicates on multiple Autoprefixer runs.
Fixed case-insensitive pseudo-selector prefixing (by @jakezwang).
Fixed -webkit-cross-fade() for images with numbers (by @mkantautas).
Fixed source maps for Grid prefixes (by @dualfroz).

eslint/eslint (eslint)

`v10.14.0`

Compare Source

Features

d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)

Bug Fixes

4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)
827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)
161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)
6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)
9155e14 fix: Update @humanfs/node dependency version (#21434) (Nicholas C. Zakas)
cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)
5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)

Documentation

0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)
dab466e docs: Update README (GitHub Actions Bot)
97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)
7697550 docs: Update README (GitHub Actions Bot)
0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)
0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)
e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)

Chores

0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)
6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])
a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)
67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)
276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])
449724e chore: update ecosystem plugins (#21420) (ESLint Bot)
8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])

`v10.13.0`

Compare Source

Features

48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

4783a68 docs: Update README (GitHub Actions Bot)
43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
47b7063 chore: update dependency @eslint/json to ^2.1.1 (#21398) (renovate[bot])
e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)

vuejs/eslint-plugin-vue (eslint-plugin-vue)

`v10.12.0`

Compare Source

New rules

Added new vue/no-content-outside-block rule (#3119)
Added new vue/no-define-model-default rule (#3146)
Added new vue/no-props-shadow rule (#3118)

New rule options

Added required option to vue/block-lang to report components that omit a required block entirely (#3125)
Added ignoreMixins option to vue/require-explicit-emits rule (#3141)

Fixed false negatives (may result in more lint issues)

Added support for refs detected by type information, such as refs returned from composables, to vue/no-ref-as-operand rule (#3144)
Fixed vue/no-dupe-keys not reporting defineModel() names that collide with a prop, another model, or a <script setup> variable (#3163)
Fixed vue/no-dupe-keys not reporting <script setup> variables that shadow a prop while aliasing a different one, such as const foo = toRef(props, 'bar') (#3124)
Fixed vue/no-multi-spaces not reporting multiple spaces in the tags of some top-level blocks, e.g. <script setup> (#3162)
Fixed vue/no-ref-as-operand and vue/no-ref-object-reactivity-loss to also check refs created with useTemplateRef() (#3154)
Fixed vue/no-unused-properties not reporting unused non-props properties in components that use $props as a whole (e.g. v-bind="$props") (#3161)
Fixed vue/padding-lines-in-component-definition to check every pair of adjacent properties, not only the first, when withinOption or withinEach is not set (#3155)
Fixed vue/require-default-prop, vue/no-boolean-default, vue/no-required-prop-with-default and vue/require-valid-default-prop not handling defaults that are passed to withDefaults() by reference or spread instead of an inline object literal (#3114)

Fixed false positives (may result in fewer lint issues)

Changed vue/singleline-html-element-content-newline and vue/multiline-html-element-content-newline rules to ignore router-link and nuxt-link elements by default (#3165)
Fixed vue/no-undef-properties false positives for properties returned via ...toRefs(reactive({ ... })) from setup() (#3134)
Fixed vue/require-typed-ref false positives when an explicit type annotation already applies to the ref() call (#3123)
Fixed vue/v-if-else-key false positive for components with a bound :key (#3150)

Other changes

Removed Reactivity Transform support from vue/no-ref-object-reactivity-loss, since the Reactivity Transform proposal was dropped from Vue (#3126)
Changed vue/html-self-closing to treat Vue's special <slot> and <template> elements as components (html.component option) instead of normal HTML elements (#3164)
Changed vue/attributes-order rule to provide a suggestion instead of an autofix when the fix would move a binding across v-bind="object" (#3145)
Improved performance of vue/no-reserved-component-names by no longer rebuilding its reserved name sets for every file (#3147)

nodejs/node (node)

`v26.13.0`: 2026-10-28, Version 26.13.0 'Lithium' (LTS), @richardlau

Compare Source

Notable Changes

This release marks the transition of Node.js 26.x into Long Term Support (LTS)
with the codename 'Lithium'. It will continue to receive updates through to
the end of April 2029.

Other than updating metadata, such as the process.release object, to reflect
that the release is LTS, no further changes from Node.js 26.12.1 are included.

If you are updating from an earlier Long Term Support release (e.g. Node.js 24
or 22 or earlier) please note that since Node.js 25 the official binaries for
Linux are linked against libatomic, which may need to be installed separately
depending on your Linux distribution.

`v26.12.1`: 2026-10-21, Version 26.12.1 (Current), @aduh95 prepared by @RafaelGSS

Compare Source

This is a security release.

Notable Changes

(CVE-2026-106069, CVE-2026-106072) tls: reject non-canonical IP addresses (Matteo Collina) – High
(CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell) – High
(CVE-2026-105483) tls: fix ip normalization regression (James M Snell) – High
(CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel) – High
(CVE-2026-111497) deps: brotli: cherry-pick 0ed4268 (Evgenii Kliuchnikov) – High
(CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell) – Medium
(CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan) – Medium
(CVE-2026-106070) zlib: avoid caching invalid ZIP local headers (Matteo Collina) – Low
(CVE-2026-106071) src: fix the fs permission tree node on wildcard nodes (James M Snell) – Low
(CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS) – Low
deps: V8: backport 93cd21e (Joyee Cheung)
crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
tls: reject chains containing blocked public keys (Ulises Gascon)
deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
tools: retry Gatekeeper check and stapling after notarization (Ryan Aslett)
crypto: harden X.509 conversion and formatting (Filip Skokan)

Commits

[818e4ca061] - crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel) #66877
[fd3c87ed43] - crypto: harden X.509 conversion and formatting (Filip Skokan) nodejs-private/node-private#966
[acffa610db] - crypto: reset random caches across snapshots (Filip Skokan) nodejs-private/node-private#987
[7895a5cd2d] - deps: update undici to 8.12.2 (Node.js GitHub Bot) #66721
[12daa54d2e] - deps: V8: backport 93cd21e (Joyee Cheung) nodejs-private/node-private#999
[6a8b3db7e2] - deps: update c-ares to 1.34.9 (Node.js GitHub Bot) #66868
[a6040b50d9] - deps: brotli: cherry-pick 0ed4268 (Evgenii Kliuchnikov) nodejs-private/node-private#1002
[6b78ea171d] - dns: validate resolve inputs for null bytes (James M Snell) nodejs-private/node-private#984
[0683ee5f7d] - http: ensure agent data guard works without I/O (James M Snell) nodejs-private/node-private#983
[e5cae10148] - Revert "module: synchronously load most ES modules" (Antoine du Hamel) #66786
[cc244131aa] - permission: check permission model in realpathSync (RafaelGSS) nodejs-private/node-private#973
[0392385841] - src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel) nodejs-private/node-private#1002
[c273a408c9] - src: fix the fs permission tree node on wildcard nodes (James M Snell) nodejs-private/node-private#986
[a2caddd20e] - tls: reject chains containing blocked public keys (Ulises Gascon) #66871
[ad788ccd07] - tls: reject non-canonical IP addresses (Matteo Collina) nodejs-private/node-private#982
[cd4b05469c] - tls: fix ip normalization regression (James M Snell) nodejs-private/node-private#985
[5fa440e0d7] - tools: retry Gatekeeper check and stapling after notarization (Ryan Aslett) #66855
[745ad77156] - zlib: avoid caching invalid ZIP local headers (Matteo Collina) nodejs-private/node-private#981

bcomnes/npm-run-all2 (npm-run-all2)

`v9.0.4`

Compare Source

Merged

fix: honor explicit nodeRun options and clarify Node API docs #255
Upgrade: Bump typescript from 6.0.3 to 7.0.2 #240
fix: avoid retaining argument placeholder regex state #258
fix: bump shell-quote to ^1.12.0- #260 #261
Upgrade: Bump neostandard from 0.13.0 to 0.14.1 #259
docs: fix default argument placeholder syntax #254
Group TypeScript Dependabot updates #263
Upgrade: Bump zizmorcore/zizmor-action from 0.6.4 to 0.7.1 #262
Upgrade: Bump @voxpelli/tsconfig from 16.2.1 to 17.0.0 #256
Upgrade: Bump codecov/codecov-action from 7.0.0 to 7.1.1 #252
Upgrade: Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 #250
Upgrade: Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 #248
Upgrade: Bump installed-check from 10.0.1 to 11.0.0 #246
Upgrade: Bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 #245

Commits

Add Zed and Codex worktree setup 9f54ec7
Rename agent instructions to AGENTS.md b06eac4

vuejs/pinia (pinia)

`v4.1.0`

Compare Source

🚀 Features

Add getStores() - by @Anoesj in #3194 (52fc9)
Warn when disposing a replaced store - by @Anoesj and @posva in #3193 (bf7ea)

🐞 Bug Fixes

Trigger shallow refs patched via object syntax - by @lvyanyan, @posva and JSap0914 in #2861 and #3177 (a4eb2)
hmr: Preserve runtime state of empty placeholder objects - by @lvyanyan in #2931 and #3175 (6a359)
nuxt: Resolve default storesDirs against each layer - by @ondrhn in #3185 (98587)
testing: Notify shallow refs on initial state - by @sergioperezcheco in #3187 (a1581)