chore(deps): update all non-major dependencies with stable version (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update	Pending
@evilmartians/lefthook	^1.6.8 -> ^1.6.10					devDependencies	patch
@rushstack/eslint-patch (source)	^1.10.1 -> ^1.10.2					devDependencies	patch
@typescript-eslint/eslint-plugin (source)	^7.6.0 -> ^7.7.0					devDependencies	patch	7.7.1
@typescript-eslint/parser (source)	^7.6.0 -> ^7.7.0					devDependencies	patch	7.7.1
cypress (source)	^13.7.2 -> ^13.7.3					devDependencies	patch
eslint-plugin-cypress	^2.15.1 -> ^2.15.2					devDependencies	patch
eslint-plugin-vue (source)	^9.24.1 -> ^9.25.0					devDependencies	patch
node (source)	18.20.1 -> 18.20.2						patch
node (source)	18.20.1 -> 18.20.2					volta	patch
postcss-custom-properties (source)	^13.3.6 -> ^13.3.7					devDependencies	patch	13.3.8
sass	^1.74.1 -> ^1.75.0					devDependencies	patch
typescript (source)	^5.4.4 -> ^5.4.5					devDependencies	patch
vite (source)	^5.2.8 -> ^5.2.9					devDependencies	patch	5.2.10
vite-plugin-vue-devtools (source)	^7.0.25 -> ^7.0.27					devDependencies	patch
vue (source)	^3.4.21 -> ^3.4.23					dependencies	patch	3.4.25 (+1)
vue-router	^4.3.0 -> ^4.3.2					devDependencies	patch

---

Release Notes

cypress-io/eslint-plugin-cypress (eslint-plugin-cypress)

v2.15.2

Compare Source

nodejs/node (node)

v18.20.2: 2024-04-10, Version 18.20.2 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes

• CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows

Commits

• [6627222409] - src: disallow direct .bat and .cmd file spawning (Ben Noordhuis) nodejs-private/node-private#564

csstools/postcss-plugins (postcss-custom-properties)

v13.3.7

Compare Source

April 11, 2024

• Improve handling of cross references between computed values of custom properties

vuejs/core (vue)

v3.4.23

Compare Source

Bug Fixes

• runtime-core: fix regression for $attrs tracking in slots (6930e60), closes #​10710
• runtime-core: use same internal object mechanism for slots (6df53d8), closes #​10709

v3.4.22

Compare Source

Bug Fixes

• compat: fix $options mutation + adjust private API initialization (d58d133), closes #​10626 #​10636
• compile-sfc: analyze v-bind shorthand usage in template (#​10518) (e5919d4), closes #​10515
• compiler-core: fix loc.source for end tags with whitespace before > (16174da), closes #​10694 #​10695
• compiler-core: fix v-bind shorthand for component :is (04af950), closes #​10469 #​10471
• compiler-sfc: :is() and :where() in compound selectors (#​10522) (660cadc), closes #​10511
• compiler-sfc: also search for .tsx when type import's extension is omitted (#​10637) (34106bc), closes #​10635
• compiler-sfc: fix defineModel coercion for boolean + string union types (#​9603) (0cef65c), closes #​9587 #​10676
• compiler-sfc: fix universal selector scope (#​10551) (54a6afa), closes #​10548
• compiler-sfc: use options module name if options provide runtimeModuleName options (#​10457) (e76d743), closes #​10454
• custom-element: avoid setting attr to null if it is removed (#​9012) (b49306a), closes #​9006 #​10324
• hydration: properly handle optimized mode during hydrate node (#​10638) (2ec06fd), closes #​10607
• reactivity: computed should not be detected as true by isProxy (#​10401) (9da34d7)
• reactivity: fix hasOwnProperty key coercion edge cases (969c5fb)
• reactivity: fix tracking when hasOwnProperty is called with non-string value (c3c5dc9), closes #​10455 #​10464
• runtime-core: fix errorHandler causes an infinite loop during execution (#​9575) (ab59bed)
• runtime-core: handle invalid values in callWithAsyncErrorHandling (53d15d3)
• runtime-core: show hydration mismatch details for non-rectified mismatches too when PROD_HYDRATION_MISMATCH_DETAILS is set (#​10599) (0dea7f9)
• runtime-dom: v-model string/number coercion for multiselect options (#​10576) (db374e5)
• runtime-dom: fix css v-bind for suspensed components (#​8523) (67722ba), closes #​8520
• runtime-dom: force update v-model number with leading 0 (#​10506) (15ffe8f), closes #​10503 #​10615
• runtime-dom: sanitize wrongly passed string value as event handler (#​8953) (7ccd453), closes #​8818
• ssr: don't render v-if comments in TransitionGroup (#​6732) (5a96267), closes #​6715
• Transition: ensure the KeepAlive children unmount w/ out-in mode (#​10632) (fc99e4d), closes #​10620
• TransitionGroup: avoid set transition hooks for comment nodes and text nodes (#​9421) (140a768), closes #​4621 #​4622 #​5153 #​5168 #​7898 #​9067
• types: avoid merging object union types when using withDefaults (#​10596) (37ba93c), closes #​10594

Performance Improvements

• add __NO_SIDE_EFFECTS__ comments (#​9053) (d46df6b)
• optimize component props/slots internal object checks (6af733d)
• ssr: avoid calling markRaw on component instance proxy (4bc9f39)
• ssr: optimize setup context creation for ssr in v8 (ca84316)

vuejs/router (vue-router)

v4.3.2

Compare Source

Please refer to CHANGELOG.md for details.

v4.3.1

Compare Source

Please refer to CHANGELOG.md for details.

---

Configuration

📅 Schedule: Branch creation - "before 5am every weekday" in timezone America/New_York, Automerge - "every weekday" in timezone America/New_York.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[kongponents-bot]

🎉 This PR is included in version 2.12.3 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀