Skip to content

⬆️(deps): Bump the minor-and-patch group across 1 directory with 5 updates#2163

Merged
lissy93 merged 1 commit into
masterfrom
dependabot/npm_and_yarn/minor-and-patch-36330a9568
May 23, 2026
Merged

⬆️(deps): Bump the minor-and-patch group across 1 directory with 5 updates#2163
lissy93 merged 1 commit into
masterfrom
dependabot/npm_and_yarn/minor-and-patch-36330a9568

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 22, 2026

Bumps the minor-and-patch group with 5 updates in the / directory:

Package From To
dompurify 3.4.3 3.4.5
simple-icons 16.19.0 16.20.0
@vitest/ui 4.1.6 4.1.7
sass 1.99.0 1.100.0
vue-tsc 3.2.9 3.3.1

Updates dompurify from 3.4.3 to 3.4.5

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.5

  • Fixed a bypass caused by the new HTML element selectedcontent added in 3.4.4, thanks @​KabirAcharya

Note that this is a security release for an issue introduced in 3.4.4 and should be upgraded to immediately.

DOMPurify 3.4.4

  • Added the selectedcontent element to default allow-list, thanks @​lukewarlow
  • Added the command and commandfor attributes to default allowed-list, thanks @​lukewarlow
  • Added better template scrubbing for IN_PLACE operations, thanks @​DEMON1A
  • Added stronger checks for cross-realm windows, thanks @​DEMON1A & @​fg0x0
  • Updated demo website and made sure it uses the latest from main
  • Updated existing workflows, fuzzer, dependabot, etc., added more tests
  • Bumped several dependencies where possible

🚨 This release had been flagged as deprecated, please use DOMPurify 3.4.5 instead 🚨

Commits

Updates simple-icons from 16.19.0 to 16.20.0

Release notes

Sourced from simple-icons's releases.

Release 16.20.0

1 new icon

Commits

Updates @vitest/ui from 4.1.6 to 4.1.7

Release notes

Sourced from @​vitest/ui's releases.

v4.1.7

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates sass from 1.99.0 to 1.100.0

Release notes

Sourced from sass's releases.

Dart Sass 1.100.0

To install Sass 1.100.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Writing two compound selectors adjacent to one another without any whitespace between them, such as [class]a, is now deprecated. This was always an error in CSS and Sass only supported it by mistake.

    See the Sass website for details.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.100.0

  • Writing two compound selectors adjacent to one another without any whitespace between them, such as [class]a, is now deprecated. This was always an error in CSS and Sass only supported it by mistake.

    See the Sass website for details.

Commits
  • 5fd18c7 Bump node engine requirement to >=20.19.0 and chokidar requirement to ^5.0.0 ...
  • 8c1d984 Deprecate adjacent compound selectors (#2765)
  • 8e5f718 Bump postcss from 8.5.12 to 8.5.13 in /pkg/sass-parser (#2767)
  • 1447f9b Bump postcss from 8.5.8 to 8.5.12 in /pkg/sass-parser (#2766)
  • See full diff in compare view

Updates vue-tsc from 3.2.9 to 3.3.1

Release notes

Sourced from vue-tsc's releases.

v3.3.1

language-core

  • fix: avoid extraneous children error for conditional slots (#6056) - Thanks to @​KazariEX!

language-service

  • refactor: replace scanner-based missing props hints detection with AST traversal - Thanks to @​KazariEX!

typescript-plugin

  • fix: get component prop details from symbols - Thanks to @​KazariEX!
  • fix: skip unchecked JS identifiers in component props (#6055) - Thanks to @​KazariEX!

vscode

  • fix: resolve typescript plugin path from resolved server path (#6058) - Thanks to @​KazariEX!

Our Sponsors ❤️

... (truncated)

Changelog

Sourced from vue-tsc's changelog.

3.3.1 (2026-05-19)

language-core

  • fix: avoid extraneous children error for conditional slots (#6056) - Thanks to @​KazariEX!

language-service

  • refactor: replace scanner-based missing props hints detection with AST traversal - Thanks to @​KazariEX!

typescript-plugin

  • fix: get component prop details from symbols - Thanks to @​KazariEX!
  • fix: skip unchecked JS identifiers in component props (#6055) - Thanks to @​KazariEX!

vscode

  • fix: resolve typescript plugin path from resolved server path (#6058) - Thanks to @​KazariEX!

3.3.0 (2026-05-18)

language-core

  • feat: check required fallthrough attributes (#6049) - Thanks to @​KazariEX!
  • fix: penetrate v-if branch fragments when collecting single root nodes - Thanks to @​KazariEX!
  • refactor: rename Sfc APIs to IR - Thanks to @​KazariEX!

language-service

  • fix: reuse ASTs for define assignment suggestions - Thanks to @​KazariEX!
  • fix: re-support html.customData (#5910) - Thanks to @​Bomberus!
  • fix: strip ="" only for plain boolean props completion edits - Thanks to @​KazariEX!
  • fix: reset to default data provider after running with vue data provider - Thanks to @​KazariEX!

typescript-plugin

  • feat: refine props completion logic to follow TS behavior (#5709) - Thanks to @​KazariEX!

vscode

  • fix: include extraFileExtensions in tsserver configure request payload (#6048) - Thanks to @​KazariEX!
  • fix: write typescript plugins at build time (#6050) - Thanks to @​KazariEX!
  • fix: avoid infinite diagnostics on Vue files when project diagnostics is enabled (#6051) - Thanks to @​KazariEX!
Commits

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 22, 2026

Assignees

The following users could not be added as assignees: Lissy93. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: 📦 Dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot requested a review from lissy93 as a code owner May 22, 2026 09:34
@netlify
Copy link
Copy Markdown

netlify Bot commented May 22, 2026

Deploy Preview for dashy-dev ready!

Name Link
🔨 Latest commit 684a8ad
🔍 Latest deploy log https://app.netlify.com/projects/dashy-dev/deploys/6a117ef71d015900082bc07a
😎 Deploy Preview https://deploy-preview-2163--dashy-dev.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

…dates

Bumps the minor-and-patch group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.3` | `3.4.5` |
| [simple-icons](https://github.com/simple-icons/simple-icons) | `16.19.0` | `16.20.0` |
| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `4.1.6` | `4.1.7` |
| [sass](https://github.com/sass/dart-sass) | `1.99.0` | `1.100.0` |
| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.2.9` | `3.3.1` |



Updates `dompurify` from 3.4.3 to 3.4.5
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.3...3.4.5)

Updates `simple-icons` from 16.19.0 to 16.20.0
- [Release notes](https://github.com/simple-icons/simple-icons/releases)
- [Commits](simple-icons/simple-icons@16.19.0...16.20.0)

Updates `@vitest/ui` from 4.1.6 to 4.1.7
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.7/packages/ui)

Updates `sass` from 1.99.0 to 1.100.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.99.0...1.100.0)

Updates `vue-tsc` from 3.2.9 to 3.3.1
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.3.1/packages/tsc)

---
updated-dependencies:
- dependency-name: "@vitest/ui"
  dependency-version: 4.1.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: dompurify
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sass
  dependency-version: 1.100.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: simple-icons
  dependency-version: 16.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vue-tsc
  dependency-version: 3.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title ⬆️(deps): Bump the minor-and-patch group with 5 updates ⬆️(deps): Bump the minor-and-patch group across 1 directory with 5 updates May 23, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-36330a9568 branch from ac620a0 to 684a8ad Compare May 23, 2026 10:18
@lissy93 lissy93 merged commit 619e000 into master May 23, 2026
15 checks passed
@lissy93 lissy93 deleted the dependabot/npm_and_yarn/minor-and-patch-36330a9568 branch May 23, 2026 12:06
This was referenced May 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant