⬆️ deps: Update dependencies (non-major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
pnpm (source)	10.14.0 -> 10.15.0			packageManager	minor
quick-xml	0.38.1 -> 0.38.3			dependencies	patch
regex	1.11.1 -> 1.11.2			dependencies	patch
serde_json	1.0.142 -> 1.0.143			dependencies	patch
thiserror	2.0.15 -> 2.0.16			dependencies	patch
vite (source)	7.1.2 -> 7.1.3			devDependencies	patch
vue (source)	3.5.18 -> 3.5.19			devDependencies	patch

---

Release Notes

pnpm/pnpm (pnpm)

v10.15.0

Compare Source

Minor Changes

• Added the cleanupUnusedCatalogs configuration. When set to true, pnpm will remove unused catalog entries during installation #​9793.
• Automatically load pnpmfiles from config dependencies that are named @*/pnpm-plugin-* #​9780.
• pnpm config get now prints an INI string for an object value #​9797.
• pnpm config get now accepts property paths (e.g. pnpm config get catalog.react, pnpm config get .catalog.react, pnpm config get 'packageExtensions["@​babel/parser"].peerDependencies["@​babel/types"]'), and pnpm config set now accepts dot-leading or subscripted keys (e.g. pnpm config set .ignoreScripts true).
• pnpm config get --json now prints a JSON serialization of config value, and pnpm config set --json now parses the input value as JSON.

Patch Changes

• Semi-breaking. When automatically installing missing peer dependencies, prefer versions that are already present in the direct dependencies of the root workspace package #​9835.
• When executing the pnpm create command, must verify whether the node version is supported even if a cache already exists #​9775.
• When making requests for the non-abbreviated packument, add */* to the Accept header to avoid getting a 406 error on AWS CodeArtifact #​9862.
• The standalone exe version of pnpm works with glibc 2.26 again #​9734.
• Fix a regression in which pnpm dlx pkg --help doesn't pass --help to pkg #​9823.

tafia/quick-xml (quick-xml)

v0.38.3

Compare Source

Bug Fixes

• #​895: Fix incorrect normalization of \rX EOL sequences where X is a char which is
  UTF-8 encoded as [c2 xx], except [c2 85].

Misc Changes

• #​895: Add new xml10_content() and xml11_content() methods which behaves the same as
  html_content() and xml_content() methods, but express intention more clearly.

v0.38.2

Compare Source

New Features

• #​893: Implement FusedIterator for NamespaceBindingsIter.
• #​893: Make NamespaceResolver public.
• #​893: Add NsReader::resolver() for access to namespace resolver.

Misc Changes

• #​893: Rename PrefixIter to NamespaceBindingsIter.

rust-lang/regex (regex)

v1.11.2

Compare Source

===================
This is a new patch release of regex with some minor fixes. A larger number
of typo or lint fix patches were merged. Also, we now finally recommend using
std::sync::LazyLock.

Improvements:

• BUG #​1217:
  Switch recommendation from once_cell to std::sync::LazyLock.
• BUG #​1225:
  Add DFA::set_prefilter to regex-automata.

Bug fixes:

• BUG #​1165:
  Remove std dependency from perf-literal-multisubstring crate feature.
• BUG #​1165:
  Clarify the meaning of (?R)$ in the documentation.
• BUG #​1281:
  Remove fuzz/ and record/ directories from published crate on crates.io.

serde-rs/json (serde_json)

v1.0.143

Compare Source

• Implement Clone and Debug for serde_json::Map iterators (#​1264, thanks @​xlambein)
• Implement Default for CompactFormatter (#​1268, thanks @​SOF3)
• Implement FromStr for serde_json::Map (#​1271, thanks @​mickvangelderen)

dtolnay/thiserror (thiserror)

v2.0.16

Compare Source

• Add to "no-std" crates.io category (#​429)

vitejs/vite (vite)

v7.1.3

Compare Source

Features

• cli: add Node.js version warning for unsupported versions (#​20638) (a1be1bf)
• generate code frame for parse errors thrown by terser (#​20642) (a9ba017)
• support long lines in generateCodeFrame (#​20640) (1559577)

Bug Fixes

• deps: update all non-major dependencies (#​20634) (4851cab)
• optimizer: incorrect incompatible error (#​20439) (446fe83)
• support multiline new URL(..., import.meta.url) expressions (#​20644) (9ccf142)

Performance Improvements

• cli: dynamically import resolveConfig (#​20646) (f691f57)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​20633) (98b92e8)

Code Refactoring

• replace startsWith with strict equality (#​20603) (42816de)
• use import in worker threads (#​20641) (530687a)

Tests

• remove checkNodeVersion test (#​20647) (731d3e6)

vuejs/core (vue)

v3.5.19

Compare Source

Bug Fixes

• compiler-core: adjacent v-else should cause a compiler error (#​13699) (911e670), closes #​13698
• compiler-core: prevent cached array children from retaining detached dom nodes (#​13691) (7f60ef8), closes element-plus/element-plus#21408 #​13211
• compiler-sfc: improve type inference for generic type aliases types (#​12876) (d9dd628), closes #​12872
• compiler-sfc: throw mismatched script langs error before invoking babel (#​13194) (0562548), closes #​13193
• compiler-ssr: disable v-memo transform in ssr vdom fallback branch (#​13725) (0a202d8), closes #​13724
• devtools: clear performance measures (#​13701) (c875019), closes #​13700
• hmr: prevent updating unmounting component during HMR rerender (#​13775) (6e5143d), closes #​13771 #​13772
• hydration: also set vShow name if __FEATURE_PROD_HYDRATION_MISMATCH_DETAILS__ flag is enabled (#​13777) (439e1a5), closes #​13744
• reactivity: warn on nested readonly ref update during unwrapping (#​12141) (1498821)
• runtime-core: avoid setting direct ref of useTemplateRef in dev (#​13449) (4a2953f)
• runtime-core: improve consistency of PublicInstanceProxyHandlers.has (#​13507) (d7283f3)
• suspense: don't immediately resolve suspense on last dep unmount (#​13456) (a871315), closes #​13453
• transition: handle KeepAlive + transition leaving edge case (#​13152) (3190b17), closes #​13153

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codspeed-hq]

CodSpeed Performance Report

Merging #556 will not alter performance

_{Comparing renovate/dependencies-(non-major) (f86256f) with main (9f78b40)}

Summary

✅ 30 untouched benchmarks