build(deps): bump the npm-production group with 4 updates by dependabot[bot] · Pull Request #249 · Goopil/clusterkit

dependabot · 2026-11-09T05:21:37Z

Bumps the npm-production group with 4 updates: @vue/server-renderer, vue, tsdown and vite.

Updates @vue/server-renderer from 3.5.44 to 3.5.45

Release notes

Sourced from @vue/server-renderer's releases.

v3.5.45

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from @vue/server-renderer's changelog.

3.5.45 (2026-11-05)

Bug Fixes

compiler-core: copy loc in cloneLoc instead of recomputing it (#16092) (3cee79a), closes #16091

compiler-dom: preserve static boolean binding semantics (#16055) (05db7e8), closes #16051

compiler-sfc: respect catch and switch lexical scopes (fix #16098) (#16101) (0f20152)

hmr: retry reloads after pending async roots resolve (#16060) (fbaa794)

hydration: only update component el when replacing its host node (#16001) (51fd0cb)

KeepAlive: cache a resolved Suspense child right away (#16119) (716a29e)

KeepAlive: unmount a child deactivated before it was cached (#15981) (02d2c2b)

reactivity: run onScopeDispose in a stopped scope (#16108) (21dd33c)

runtime-core: anchor on the async placeholder when a component root has no el (#16122) (b5abf8c)

runtime-core: call directive mounted hooks with the latest binding (#16120) (6416207), closes #12460 #12482

runtime-core: remove the placeholder of an unmounted pending async component (#15982) (2b9a0bb)

runtime-core: render nothing for a component whose async setup rejects (#16111) (f64bfa5)

runtime-core: skip stopped error boundaries for async failures (#16061) (0326ed8)

runtime-dom: treat disablepictureinpicture and disableremoteplayback as boolean attributes (#15952) (ef81ddc)

suspense: do not mount the fallback after the boundary is unmounted (#15939) (4fd6a6b)

suspense: drop the unmount hooks of a pending branch when the boundary is unmounted (d04b662)

suspense: enter transitions nested in the pending branch on reveal (#16121) (b8074de), closes #12435 #15294

suspense: keep a discarded component marked unmounted (1dc8cdf)

suspense: keep the async root update retry across a discarded pending branch (#16107) (06bea73)

suspense: keep the internal cleanup of a discarded component (79b80b7)

suspense: keep the timeout counting when the root is switched again while pending (#16143) (a045acd)

suspense: patch same-root updates of nested boundaries in retained content (#16109) (2dbcea8), closes #15878

suspense: release parent dep on suspensible unmount (#15870) (46e5dbf)

suspense: resolve async deps whose pending cycle was discarded (#15980) (f7d0811)

suspense: resolve the boundary when an async setup rejects without an error handler in dev (#16110) (a14aa0b)

suspense: skip a root replacement in a retained nested boundary showing its fallback (#16125) (a47af77)

suspense: skip the out-in afterLeave of an unmounted boundary (#16115) (85e71c0), closes #11037 #11059

transition: handle leave immediately done in out-in mode (#11824) (70599b5), closes #15727

transition: switch modes around a keyed suspense boundary (#16124) (ff0b341)

types: add dialog closedby attribute (#16064) (24c9d0b)

v-model: respect number modifier for Set select values (0ff253b)

Performance Improvements

compiler-sfc: skip unused tsconfig include enumeration (#15899) (1612403), closes #15898

compiler-ssr: render static style attributes at compile time (#16010) (2629c89)

mark internal initializers as pure (#16012) (34fbeb1)

runtime-core: copy raw attrs when setup context attrs are passed as vnode props (#16129) (823c744)

Commits

8b479a8 release: v3.5.45
f64bfa5 fix(runtime-core): render nothing for a component whose async setup rejects (...
2629c89 perf(compiler-ssr): render static style attributes at compile time (#16010)
ef81ddc fix(runtime-dom): treat disablepictureinpicture and disableremoteplayback as ...
See full diff in compare view

Updates vue from 3.5.44 to 3.5.45

Release notes

Sourced from vue's releases.

v3.5.45

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.45 (2026-11-05)

Bug Fixes

compiler-core: copy loc in cloneLoc instead of recomputing it (#16092) (3cee79a), closes #16091

compiler-dom: preserve static boolean binding semantics (#16055) (05db7e8), closes #16051

compiler-sfc: respect catch and switch lexical scopes (fix #16098) (#16101) (0f20152)

hmr: retry reloads after pending async roots resolve (#16060) (fbaa794)

hydration: only update component el when replacing its host node (#16001) (51fd0cb)

KeepAlive: cache a resolved Suspense child right away (#16119) (716a29e)

KeepAlive: unmount a child deactivated before it was cached (#15981) (02d2c2b)

reactivity: run onScopeDispose in a stopped scope (#16108) (21dd33c)

runtime-core: anchor on the async placeholder when a component root has no el (#16122) (b5abf8c)

runtime-core: call directive mounted hooks with the latest binding (#16120) (6416207), closes #12460 #12482

runtime-core: remove the placeholder of an unmounted pending async component (#15982) (2b9a0bb)

runtime-core: render nothing for a component whose async setup rejects (#16111) (f64bfa5)

runtime-core: skip stopped error boundaries for async failures (#16061) (0326ed8)

runtime-dom: treat disablepictureinpicture and disableremoteplayback as boolean attributes (#15952) (ef81ddc)

suspense: do not mount the fallback after the boundary is unmounted (#15939) (4fd6a6b)

suspense: drop the unmount hooks of a pending branch when the boundary is unmounted (d04b662)

suspense: enter transitions nested in the pending branch on reveal (#16121) (b8074de), closes #12435 #15294

suspense: keep a discarded component marked unmounted (1dc8cdf)

suspense: keep the async root update retry across a discarded pending branch (#16107) (06bea73)

suspense: keep the internal cleanup of a discarded component (79b80b7)

suspense: keep the timeout counting when the root is switched again while pending (#16143) (a045acd)

suspense: patch same-root updates of nested boundaries in retained content (#16109) (2dbcea8), closes #15878

suspense: release parent dep on suspensible unmount (#15870) (46e5dbf)

suspense: resolve async deps whose pending cycle was discarded (#15980) (f7d0811)

suspense: resolve the boundary when an async setup rejects without an error handler in dev (#16110) (a14aa0b)

suspense: skip a root replacement in a retained nested boundary showing its fallback (#16125) (a47af77)

suspense: skip the out-in afterLeave of an unmounted boundary (#16115) (85e71c0), closes #11037 #11059

transition: handle leave immediately done in out-in mode (#11824) (70599b5), closes #15727

transition: switch modes around a keyed suspense boundary (#16124) (ff0b341)

types: add dialog closedby attribute (#16064) (24c9d0b)

v-model: respect number modifier for Set select values (0ff253b)

Performance Improvements

compiler-sfc: skip unused tsconfig include enumeration (#15899) (1612403), closes #15898

compiler-ssr: render static style attributes at compile time (#16010) (2629c89)

mark internal initializers as pure (#16012) (34fbeb1)

runtime-core: copy raw attrs when setup context attrs are passed as vnode props (#16129) (823c744)

Commits

8b479a8 release: v3.5.45
9f9b71c chore(deps): bump source-map-js from 1.2.1 to 1.2.2 (#16150)
1d718d2 chore(deps): update dependency @types/node to v26 (#16087)
68583ce chore(deps): bump undici from 8.9.0 to 8.12.3 (#16149)
91f2625 chore(deps): bump fast-uri from 3.1.0 to 3.1.9 (#16148)
a8ab1f8 chore(deps): update build (#15918)
a0d1388 chore(deps): update dependency minimatch to v11 [security] (#16145)
923f70d fix(deps): update compiler (#15920)
3cb1161 chore(deps): update lint (#15921)
0ce9e16 chore(deps): update dawidd6/action-download-artifact action to v28 (#16086)
Additional commits viewable in compare view

Updates tsdown from 0.23.4 to 0.23.5

Release notes

Sourced from tsdown's releases.

v0.23.5

Notes

rolldown-plugin-dts is now v0.29. tsdown passes dts options through to it unchanged, so its deprecations show up in your config too. Full details are in the rolldown-plugin-dts v0.29.0 release notes.

Migration

tsc-only dts options move under dts.tsc. The top-level build, incremental, parallel, eager, newContext and vue options still work but log a deprecation warning. Setting the same option at both levels throws an error. emitJs stays at the top level.
 export default defineConfig({
   dts: {
-    vue: true,
+    tsc: { vue: true },
   },
 })
tsgo (experimental, not covered by semver):

@typescript/native-preview is no longer supported. Install TypeScript 7.1+ (typescript@7.1.0-beta), or point tsgo.moduleUrl at another build.

On TypeScript 7.1+, tsgo.path is the API server executable, not the tsgo CLI. You usually don't need to set it.

Declaration maps come only from compilerOptions.declarationMap: true in tsconfig; the sourcemap option no longer enables them.

TypeScript 7.0 still works with a deprecation warning, but that backend will be removed soon.

   🚀 Features

css: Support css: false to disable built-in CSS handling - by @sxzzbot in rolldown/tsdown#1113 (181af)

dts: Upgrade rolldown-plugin-dts to v0.29, upgrade deps - by @sxzzbot in rolldown/tsdown#1121 (e12ab)

   🐞 Bug Fixes

css: Remove dangling requires and handle CSS extensions in chunk names - by @sxzzbot in rolldown/tsdown#1114 (c8ca3)

   🏎 Performance

deps: Read each package.json once when resolving dep subpaths - by @Cherry and @sxzzbot in rolldown/tsdown#1093 (4435a)

    View changes on GitHub

Commits

7a50502 chore: release v0.23.5
e12ab7f feat(dts): upgrade rolldown-plugin-dts to v0.29, upgrade deps (#1121)
4435a48 perf(deps): read each package.json once when resolving dep subpaths (#1093)
daf9083 docs(vue): link to CSS support from the Vue recipe (#1117)
c8ca303 fix(css): remove dangling requires and handle CSS extensions in chunk names (...
99b3b03 test(migrate): fold duplicate tsup default-value tests (#1116)
181af08 feat(css): support css: false to disable built-in CSS handling (#1113)
See full diff in compare view

Updates vite from 8.3.5 to 8.3.6

Release notes

Sourced from vite's releases.

v8.3.6

Bug Fixes

await overlapping plugin container close calls (#23935) (175bbeb)

build: resolve dynamic imports with queries appended when collecting CSS dependencies (#23909) (df36558)

build: use stable module ids in chunk import map hash signatures (fix #23975) (#23976) (8069835)

bundled-dev: allow named imports from Node built-ins (#23858) (4260c75)

bundled-dev: reload when hmr cannot run an entry again (#23849) (a236886)

deps: update @rollup/plugin-alias to v6.0.1 (#23862) (67c965b)

deps: update all non-major dependencies (#23896) (46b91c5)

deps: update all non-major dependencies (#23966) (b3cb057)

deps: update rolldown-related dependencies (#23868) (a63eb87)

deps: update rolldown-related dependencies (#23967) (0105733)

dev: escape ANSI escape sequence for server.forwardConsole (#23933) (4f340fd)

html: remove adjacent module tags on the first line (#23823) (eab1dc2)

ignore pnpm's .modules.yaml as a Vite Task input (#23634) (95c2daf)

optimizer: detect cache dir precisely (#23912) (cc9bc21)

optimizer: resolve subpath imports (#) with Vite's resolver (#23959) (0fdd81e)

respect build.sourcemap from environment (#23879) (82e7aa0)

server: escape HTML attributes (#23995) (a270391)

server: preserve $ patterns in static alias replacements (#23703) (1b6ed05)

ssr: convert external require against built-in modules to import for ssr.target=webworker (#23759) (a711f1c)

use top-level input for SSR build when build.ssr: true (#23898) (90bc034)

wasm: reject .wasm outside server.fs (#23914) (64e2467)

watch files that have a query or hash referenced with new URL(..., import.meta.url) (#23780) (e954a9c)

worker: keep chunks conflicted with unused workers that are still used by a live worker (#23956) (7139ef3)

Performance Improvements

build: remove preload link listeners on settle (fix #23920) (#23922) (8109efd)

css: index rendered modules once per output for cssScopeTo (#23889) (1b905e5)

Miscellaneous Chores

align charset case (#23863) (a976df3)

Build System

generate sourcemaps in import-meta-current-dirname plugin (#23904) (20d355a)

Changelog

Sourced from vite's changelog.

8.3.6 (2026-11-05)

Bug Fixes

await overlapping plugin container close calls (#23935) (175bbeb)

build: resolve dynamic imports with queries appended when collecting CSS dependencies (#23909) (df36558)

build: use stable module ids in chunk import map hash signatures (fix #23975) (#23976) (8069835)

bundled-dev: allow named imports from Node built-ins (#23858) (4260c75)

bundled-dev: reload when hmr cannot run an entry again (#23849) (a236886)

deps: update @rollup/plugin-alias to v6.0.1 (#23862) (67c965b)

deps: update all non-major dependencies (#23896) (46b91c5)

deps: update all non-major dependencies (#23966) (b3cb057)

deps: update rolldown-related dependencies (#23868) (a63eb87)

deps: update rolldown-related dependencies (#23967) (0105733)

dev: escape ANSI escape sequence for server.forwardConsole (#23933) (4f340fd)

html: remove adjacent module tags on the first line (#23823) (eab1dc2)

ignore pnpm's .modules.yaml as a Vite Task input (#23634) (95c2daf)

optimizer: detect cache dir precisely (#23912) (cc9bc21)

optimizer: resolve subpath imports (#) with Vite's resolver (#23959) (0fdd81e)

respect build.sourcemap from environment (#23879) (82e7aa0)

server: escape HTML attributes (#23995) (a270391)

server: preserve $ patterns in static alias replacements (#23703) (1b6ed05)

ssr: convert external require against built-in modules to import for ssr.target=webworker (#23759) (a711f1c)

use top-level input for SSR build when build.ssr: true (#23898) (90bc034)

wasm: reject .wasm outside server.fs (#23914) (64e2467)

watch files that have a query or hash referenced with new URL(..., import.meta.url) (#23780) (e954a9c)

worker: keep chunks conflicted with unused workers that are still used by a live worker (#23956) (7139ef3)

Performance Improvements

build: remove preload link listeners on settle (fix #23920) (#23922) (8109efd)

css: index rendered modules once per output for cssScopeTo (#23889) (1b905e5)

Miscellaneous Chores

align charset case (#23863) (a976df3)

Build System

generate sourcemaps in import-meta-current-dirname plugin (#23904) (20d355a)

Commits

0fd9a29 release: v8.3.6 (#23996)
eab1dc2 fix(html): remove adjacent module tags on the first line (#23823)
a270391 fix(server): escape HTML attributes (#23995)
7139ef3 fix(worker): keep chunks conflicted with unused workers that are still used b...
0fdd81e fix(optimizer): resolve subpath imports (#) with Vite's resolver (#23959)
8069835 fix(build): use stable module ids in chunk import map hash signatures (fix #2...
95c2daf fix: ignore pnpm's .modules.yaml as a Vite Task input (#23634)
b3cb057 fix(deps): update all non-major dependencies (#23966)
0105733 fix(deps): update rolldown-related dependencies (#23967)
90bc034 fix: use top-level input for SSR build when build.ssr: true (#23898)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-production group with 4 updates: [@vue/server-renderer](https://github.com/vuejs/core/tree/HEAD/packages/server-renderer), [vue](https://github.com/vuejs/core), [tsdown](https://github.com/rolldown/tsdown) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `@vue/server-renderer` from 3.5.44 to 3.5.45 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](https://github.com/vuejs/core/commits/v3.5.45/packages/server-renderer) Updates `vue` from 3.5.44 to 3.5.45 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](vuejs/core@v3.5.44...v3.5.45) Updates `tsdown` from 0.23.4 to 0.23.5 - [Release notes](https://github.com/rolldown/tsdown/releases) - [Commits](rolldown/tsdown@v0.23.4...v0.23.5) Updates `vite` from 8.3.5 to 8.3.6 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.6/packages/vite) --- updated-dependencies: - dependency-name: "@vue/server-renderer" dependency-version: 3.5.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: vue dependency-version: 3.5.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: tsdown dependency-version: 0.23.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production - dependency-name: vite dependency-version: 8.3.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-11-10T05:13:01Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot requested a review from Goopil as a code owner November 9, 2026 05:21

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 9, 2026

dependabot Bot closed this Nov 10, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/npm-production-82fd553034 branch November 10, 2026 05:13

Navigation Menu

Repository navigation

build(deps): bump the npm-production group with 4 updates - #249

build(deps): bump the npm-production group with 4 updates#249
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-82fd553034

dependabot Bot commented on behalf of github Nov 9, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Nov 10, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.5.45

3.5.45 (2026-11-05)

Bug Fixes

Performance Improvements

v3.5.45

3.5.45 (2026-11-05)

Bug Fixes

Performance Improvements

v0.23.5

Notes

Migration

🚀 Features

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

v8.3.6

Bug Fixes

Performance Improvements

Miscellaneous Chores

Build System

8.3.6 (2026-11-05)

Bug Fixes

Performance Improvements

Miscellaneous Chores

Build System

Uh oh!

dependabot Bot commented on behalf of github Nov 10, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Nov 9, 2026 •

edited

Loading