Bump the development-dependencies group in /web with 8 updates

[dependabot]

Bumps the development-dependencies group in /web with 8 updates:

Package	From	To
@types/node	22.10.5	22.10.7
@vue/eslint-config-typescript	14.2.0	14.3.0
pinia	2.3.0	2.3.1
sass	1.83.1	1.83.4
sass-embedded	1.83.1	1.83.4
typescript-eslint	8.19.1	8.20.0
vite	6.0.7	6.0.9
vite-plugin-node-polyfills	0.22.0	0.23.0

Updates @types/node from 22.10.5 to 22.10.7

Commits

• See full diff in compare view

Updates @vue/eslint-config-typescript from 14.2.0 to 14.3.0

Release notes

Sourced from @​vue/eslint-config-typescript's releases.

v14.3.0

New Features

• A completely new approach to set up the ESLint configurations with helpers like defineConfigWithVueTs and vueTsConfigs. Please read the documentation for more details. With this new API set, you can easily override type-aware linting rules without worrying its position in the config array. Therefore there would be fewer mysterious errors or slowdown in a heavily customized project.

[!NOTE] The old style ...vueTsEslintConfig() still works, there's no need to update to the new style if that has been working well in your project.

Bug Fixes

• fix: typo in index.ts by @​aparajita in vuejs/eslint-config-typescript#128

New Contributors

• @​aparajita made their first contribution in vuejs/eslint-config-typescript#128

Full Changelog: vuejs/eslint-config-typescript@v14.2.0...v14.3.0

Commits

• cdbecf6 14.3.0
• f7bd7b7 feat: a more intuitive way to configure and override (#123)
• 6296f39 fix: typo in index.ts (#128)
• 3a3b13c docs: revert README.md to drop use of defineConfig until it's actually ready
• See full diff in compare view

Updates pinia from 2.3.0 to 2.3.1

Commits

• 58a2302 release: pinia@2.3.1
• d14e1a7 fix(types): support for Vue 2.7
• fc8c28b chore: up deps
• 47e1ec9 chore: up happy-dom
• a91e06e chore: up rollup
• eb0a1fe chore: up pnpm
• 40d883d ci: fix indent and branch names (#2883)
• d405029 chore: github issues
• c82e089 docs: minor corrections (#2879)
• 2a9fd92 chore: remove repeated changelog (#2874)
• Additional commits viewable in compare view

Updates sass from 1.83.1 to 1.83.4

Release notes

Sourced from sass's releases.

Dart Sass 1.83.4

To install Sass 1.83.4, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.83.3

To install Sass 1.83.3, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.83.2

To install Sass 1.83.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Properly display deprecation IDs for the JS Sass API.

• Don't display deprecation IDs for user-defined deprecations.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.83.4

• No user-visible changes.

1.83.3

• No user-visible changes.

1.83.2

• Properly display deprecation IDs for the JS Sass API.

• Don't display deprecation IDs for user-defined deprecations.

Commits

• 89a5394 Fix more bugs in the sass-parser release process (#2491)
• 46686ed Merge pull request #2490 from sass/sass-parser-release
• 1261767 Use a file: dependency for local Sass development
• 173f39b Use the Dart Sass version for the sass-parser dependency
• ddb14b2 Fix deprecation ID displays in JS mode (#2483)
• b12b508 Compile sass-parser before deploying (#2489)
• b19b57f Merge pull request #2478 from sass/if
• 23ff19d Merge branch 'main' into if
• 8818d93 Properly override the sass-parser dependency on sass during release (#2487)
• adb7016 Merge pull request #2488 from sass/sdk-formatter
• Additional commits viewable in compare view

Updates sass-embedded from 1.83.1 to 1.83.4

Changelog

Sourced from sass-embedded's changelog.

1.83.4

• No user-visible changes.

1.83.3

• No user-visible changes.

1.83.2

• Properly display deprecation IDs for the JS Sass API.

• Don't display deprecation IDs for user-defined deprecations.

Commits

• 2b3c83f Update Dart Sass version and release
• 28d64e6 Update Dart Sass version and release
• 1bc1942 Update Dart Sass version and release
• 644128f Remove unneeded del development dependency (#355)
• 2b25ed8 Remove unused minipass development dependency (#357)
• See full diff in compare view

Updates typescript-eslint from 8.19.1 to 8.20.0

Release notes

Sourced from typescript-eslint's releases.

v8.20.0

8.20.0 (2025-01-13)

🚀 Features

• standardize debug namespaces to file paths (#10599)
• eslint-plugin: [no-misused-spread] add new rule (#10551)
• eslint-plugin: [no-deprecated] add allow options (#10585)
• eslint-plugin: [consistent-type-assertions] add arrayLiteralTypeAssertions options (#10565)

🩹 Fixes

• eslint-plugin: [no-shadow] ignore ordering of type declarations (#10593)
• eslint-plugin: [no-unnecessary-condition] don't flag optional chaining for union types with an unconstrained type parameters (#10602)

❤️ Thank You

• Josh Goldberg ✨
• Ronen Amiel
• YeonJuan @​yeonjuan

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.20.0 (2025-01-13)

🚀 Features

• eslint-plugin: [no-misused-spread] add new rule (#10551)

❤️ Thank You

• Josh Goldberg ✨

You can read about our versioning strategy and releases on our website.

Commits

• ea6fbea chore(release): publish 8.20.0
• a175189 docs(typescript-eslint): make jsdoc for config helper function consistent (#1...
• 04166e0 feat(eslint-plugin): [no-misused-spread] add new rule (#10551)
• See full diff in compare view

Updates vite from 6.0.7 to 6.0.9

Release notes

Sourced from vite's releases.

v6.0.9

This version contains a breaking change due to security fixes. See GHSA-vg6x-rcgg-rjx6 for more details.

Please refer to CHANGELOG.md for details.

v6.0.8

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.0.9 (2025-01-20)

• fix!: check host header to prevent DNS rebinding attacks and introduce server.allowedHosts (bd896fb)
• fix!: default server.cors: false to disallow fetching from untrusted origins (b09572a)
• fix: verify token for HMR WebSocket connection (029dcd6)

6.0.8 (2025-01-20)

• fix: avoid SSR HMR for HTML files (#19193) (3bd55bc), closes #19193
• fix: build time display 7m 60s (#19108) (cf0d2c8), closes #19108
• fix: don't resolve URL starting with double slash (#19059) (35942cd), closes #19059
• fix: ensure server.close() only called once (#19204) (db81c2d), closes #19204
• fix: resolve.conditions in ResolvedConfig was defaultServerConditions (#19174) (ad75c56), closes #19174
• fix: tree shake stringified JSON imports (#19189) (f2aed62), closes #19189
• fix: use shared sigterm callback (#19203) (47039f4), closes #19203
• fix(deps): update all non-major dependencies (#19098) (8639538), closes #19098
• fix(optimizer): use correct default install state path for yarn PnP (#19119) (e690d8b), closes #19119
• fix(types): improve ESBuildOptions.include / exclude type to allow readonly (string | RegExp)[] (ea53e70), closes #19146
• chore(deps): update dependency pathe to v2 (#19139) (71506f0), closes #19139

Commits

• a55f8ba release: v6.0.9
• bd896fb fix!: check host header to prevent DNS rebinding attacks and introduce `serve...
• 029dcd6 fix: verify token for HMR WebSocket connection
• b09572a fix!: default server.cors: false to disallow fetching from untrusted origins
• c0f72a6 release: v6.0.8
• f2aed62 fix: tree shake stringified JSON imports (#19189)
• db81c2d fix: ensure server.close() only called once (#19204)
• 47039f4 fix: use shared sigterm callback (#19203)
• 3bd55bc fix: avoid SSR HMR for HTML files (#19193)
• e690d8b fix(optimizer): use correct default install state path for yarn PnP (#19119)
• Additional commits viewable in compare view

Updates vite-plugin-node-polyfills from 0.22.0 to 0.23.0

Release notes

Sourced from vite-plugin-node-polyfills's releases.

v0.23.0

• Improve performance when not using globals
• Support Vite v6

Commits

• 8d68d4f Release v0.23.0
• 5f36379 Avoid creating an inject plugin when there are no shims to inject (#101)
• c40a478 Add support for Vite v6 (#114)
• ed544c3 Make it possible to run CI manually
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions