Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 14 updates - #384

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-873c29b2c0
Open

chore(deps): bump the production-dependencies group across 1 directory with 14 updates#384
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-873c29b2c0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 14 updates in the / directory:

Package From To
@fastify/rate-limit 11.1.0 11.2.0
@fastify/static 10.1.2 10.1.3
@node-rs/argon2 2.0.2 2.1.0
@vueuse/core 14.3.0 14.4.0
fastify 5.10.0 5.12.1
kysely 0.29.4 0.29.5
nanoid 6.0.0 6.0.1
pg 8.22.0 8.23.0
pg-query-stream 4.16.0 4.17.0
pinia 4.0.2 4.0.3
piscina 5.3.0 5.3.2
stream-json 3.5.0 3.6.0
vue-router 5.2.0 5.3.0
vuetify 4.1.7 4.1.12

Updates @fastify/rate-limit from 11.1.0 to 11.2.0

Release notes

Sourced from @​fastify/rate-limit's releases.

v11.2.0

⚠️ Security Release

What's Changed

Full Changelog: fastify/fastify-rate-limit@v11.1.0...v11.2.0

Commits

Updates @fastify/static from 10.1.2 to 10.1.3

Release notes

Sourced from @​fastify/static's releases.

v10.1.3

What's Changed

Full Changelog: fastify/fastify-static@v10.1.2...v10.1.3

Commits

Updates @node-rs/argon2 from 2.0.2 to 2.1.0

Commits
  • 3b28965 chore(release): publish
  • 64b9227 chore(deps): lock file maintenance (#1182)
  • b0ea4a0 perf(argon2): simdutf8, crate PHC decode, argon2-rust 1.1 (#1189)
  • 2b8b617 feat(argon2): switch backend to argon2-rust (#1188)
  • 05156db chore(deps): update rust crate jsonwebtoken to v11 (#1177)
  • 1933745 chore: upgrade all npm deps (#1187)
  • 317e00e chore(deps): update cross-platform-actions/action action to v1.4.0 (#1185)
  • 284ee70 chore(deps): update dependency oxfmt to ^0.63.0 (#1186)
  • 54d5564 chore(deps): update dependency oxfmt to ^0.62.0 (#1183)
  • 23aad38 chore(deps): update yarn to v4.18.0 (#1180)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​node-rs/argon2 since your current version.


Updates @vueuse/core from 14.3.0 to 14.4.0

Release notes

Sourced from @​vueuse/core's releases.

v14.4.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • 24160f9 chore: release v14.4.0 (#5552)
  • 6aa9d6d fix(useDraggable): end drag on pointercancel (#5550)
  • 5fe4945 fix(useElementSize): prefill size based on box option (#5524)
  • 0f6d55d fix(useVirtualList): recompute range when item size changes (#5533)
  • 8f26673 test(useTransition): widen lower bound for WebKit test (#5540)
  • 2cad765 fix(useEventBus): use tryOnScopeDispose to avoid operating Vue internal API...
  • 653283c fix(useGamepad): keep updating remaining gamepads after one disconnects (#5523)
  • d39699c docs(useTextareaAutosize): restore demo textarea autosizing (#5532)
  • 8442658 fix(useFetch): ignore stale abort error after refetch succeeds (#5525)
  • bccb159 fix: accept array template ref bound to v-for as observer target (#5514)
  • Additional commits viewable in compare view

Updates fastify from 5.10.0 to 5.12.1

Release notes

Sourced from fastify's releases.

v5.12.1

⚠️ Security release

What's Changed

Full Changelog: fastify/fastify@v5.12.0...v5.12.1

v5.12.0

What's Changed

Full Changelog: fastify/fastify@v5.11.3...v5.12.0

v5.11.3

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.11.2...v5.11.3

v5.11.2

What's Changed

... (truncated)

Commits

Updates kysely from 0.29.4 to 0.29.5

Release notes

Sourced from kysely's releases.

0.29.5

Hey 👋

A small batch of bug fixes. Please report any issues. 🤞😰🤞

TypeScript 7 is allowing for deeper computations which now cause way more instantiations and wall clock times in various scenarios. We're diving deep into our types and finding optimizations. In this version @​koskimas brought some nice wins for builder vs. builder assignability checks.

We're also revamping the docs site, working on style, message and usefulness. Swing by our Discord and share your opinions/ideas. We got docs->apidocs search now. The playground is back supporting short links and will allow saving short links very soon.

🚀 Features

🐞 Bugfixes

📖 Documentation

📦 CICD & Tooling

⚠️ Breaking Changes

🐤 New Contributors

What's Changed

Full Changelog: kysely-org/kysely@v0.29.4...v0.29.5

Commits
  • f24018c 0.29.5
  • dc3ce59 chore: bump deno lts.
  • 7c867ba chore: bump github actions. (#1980)
  • 8d8737b chore: bump deps. (#1979)
  • 07d76ed Add missing beforeThrow calls in getInflightQueryAbortHandler (#1971)
  • 507b751 feat(site): align docs code blocks with the landing page's VS Code themes (#1...
  • 73489ce feat(site): explain the proof gauge behind a (?) on the production wall (#1977)
  • a757ea0 feat(site): proof-strength gauges, query-module evidence, and new wall names ...
  • a7d717c feat(site): add AirTrail, bknd, Civitai, Corsair.dev, Hot Updater, Profilarr ...
  • 3ac787e feat(site): grow the proof wall (Replicas, EmbedPDF) + fix production hover (...
  • Additional commits viewable in compare view

Updates nanoid from 6.0.0 to 6.0.1

Release notes

Sourced from nanoid's releases.

6.0.1

  • Fixed docs.
Changelog

Sourced from nanoid's changelog.

6.0.1

  • Fixed docs.
Commits

Updates pg from 8.22.0 to 8.23.0

Changelog

Sourced from pg's changelog.

pg@8.23.0

Commits

Updates pg-query-stream from 4.16.0 to 4.17.0

Commits

Updates pinia from 4.0.2 to 4.0.3

Commits

Updates piscina from 5.3.0 to 5.3.2

Release notes

Sourced from piscina's releases.

v5.3.2

Full Changelog: piscinajs/piscina@v5.3.1...v5.3.2

v5.3.1

What's Changed

Full Changelog: piscinajs/piscina@v5.3.0...v5.3.1

Changelog

Sourced from piscina's changelog.

5.3.2 (2026-08-28)

⚠ BREAKING CHANGES

  • for consumers that call Object.prototype methods directly on pool.options (e.g. pool.options.hasOwnProperty(...)).

  • fix: use sanitized options for resourceLimits validation

  • fix: sanitize run/close options with withNullPrototype

Use the existing withNullPrototype helper instead of getOwn; address feedback from @​metcoder95

  • fix: avoid re-linking Object.prototype in Piscina constructor

(cherry picked from commit bebbda255c2981cecddd36b171b94be2fd41c9a6)

5.3.1 (2026-08-21)

Commits

Updates stream-json from 3.5.0 to 3.6.0

Commits
  • 77a4946 New version: 3.6.0.
  • 0291333 Added simplified replacement + fast check tests.
  • 0c816ae Bump @​types/node from 26.2.0 to 26.3.0 in the npm-deps group (#219)
  • c0299dc Reworked how comments are handled in JSONC.
  • 2f2d35b Added checks for __proto__.
  • 1a66390 Fixed #216.
  • 5d41ab3 Dropped Bun-related test gates.
  • 964e3f6 Added bigint.
  • c604962 Clarified.
  • 63ad851 Bump the npm-deps group across 1 directory with 2 updates (#218)
  • Additional commits viewable in compare view

Updates vue-router from 5.2.0 to 5.3.0

Release notes

Sourced from vue-router's releases.

v5.3.0

   🚀 Features

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits
  • 0e91ac8 release: vue-router@5.3.0
  • b19cce2 chore: dark mode e2e
  • 2315047 fix(router): skip scroll saving for unknown pop direction (fix #1431) (#2780)
  • d2b87d5 feat: prevent race condition dev-only error (#2789)
  • b75d5a8 docs: scroll off
  • 033f1c7 feat(scroll): skip scroll computation based on history.scrollRestoration
  • 67babd4 fix(unplugin): generate param types from override paths and stop inheritance ...
  • 48566ba refactor: isAbsolutePath
  • 084fcfc perf(experimental): avoid tracking currentRoute in absolute string locations
  • dfb373d test: load resolved location before passing it as currentLocation
  • Additional commits viewable in compare view

Updates vuetify from 4.1.7 to 4.1.12

Release notes

Sourced from vuetify's releases.

v4.1.12

[!IMPORTANT] Vuetify Needs Your Support! The OpenCollective funds are running low. The team needed to scale down and is barely able to compensate the contributors for their work on the framework and the ecosystem tools.

If Vuetify is part of your stack, please consider sponsoring the project so we can continue delivering updates and fixes.

Sponsor via Open Collective

Every contribution helps us keep Vuetify alive and signals to maintainers that their effort is appreciated.

Thank you.

🔧 Bug Fixes

  • locale: update translation keys for Arabic (f61c453)
  • locale: correct mistranslations and russianisms in uk.ts (#23139) (f40d0d6)
  • VOtpInput: update translations for aria-label (8912406)
  • VOverlay: use the resolved position to align with new target (63cccbb), closes #23138
  • VProgressLinear: apply round-bar with reverse and buffer (55fed01), closes #23143

v4.1.11

🔧 Bug Fixes

  • useLink: prevent flash for every to component on page refresh (#23131) (7bce68d)
  • VRow: restore dense to 8px gutter (ea6c628)
  • VVirtualScroll: dividers skewing virtual offsets estimation (cb60a1f)
  • VVirtualScroll: scrollToIndex retries locking manual scroll (f1cf0b0), closes #23133

v4.1.10

🔧 Bug Fixes

  • VDataTable: key cells to prevent slot reuse (#23124) (a9528b5), closes #23123
  • VDatePicker: restore the hover preview for range selection (6c1dee2)
  • VDialog: avoid error when unmounted while closing (#23054) (8293f4c), closes #23053
  • VNumberInput: snap to min/max when using buttons and value is out of range (#23109) (a35ab72), closes #23098
  • VOverlay: reliably return focus to activator when eager (c879795)
  • Description has been truncated

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
e524f30 
…y with 14 updates

Bumps the production-dependencies group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@fastify/rate-limit](https://github.com/fastify/fastify-rate-limit) | `11.1.0` | `11.2.0` |
| [@fastify/static](https://github.com/fastify/fastify-static) | `10.1.2` | `10.1.3` |
| [@node-rs/argon2](https://github.com/napi-rs/node-rs) | `2.0.2` | `2.1.0` |
| [@vueuse/core](https://github.com/vueuse/vueuse/tree/HEAD/packages/core) | `14.3.0` | `14.4.0` |
| [fastify](https://github.com/fastify/fastify) | `5.10.0` | `5.12.1` |
| [kysely](https://github.com/kysely-org/kysely) | `0.29.4` | `0.29.5` |
| [nanoid](https://github.com/ai/nanoid) | `6.0.0` | `6.0.1` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.0` |
| [pg-query-stream](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg-query-stream) | `4.16.0` | `4.17.0` |
| [pinia](https://github.com/vuejs/pinia) | `4.0.2` | `4.0.3` |
| [piscina](https://github.com/piscinajs/piscina) | `5.3.0` | `5.3.2` |
| [stream-json](https://github.com/uhop/stream-json) | `3.5.0` | `3.6.0` |
| [vue-router](https://github.com/vuejs/router) | `5.2.0` | `5.3.0` |
| [vuetify](https://github.com/vuetifyjs/vuetify/tree/HEAD/packages/vuetify) | `4.1.7` | `4.1.12` |



Updates `@fastify/rate-limit` from 11.1.0 to 11.2.0
- [Release notes](https://github.com/fastify/fastify-rate-limit/releases)
- [Commits](fastify/fastify-rate-limit@v11.1.0...v11.2.0)

Updates `@fastify/static` from 10.1.2 to 10.1.3
- [Release notes](https://github.com/fastify/fastify-static/releases)
- [Commits](fastify/fastify-static@v10.1.2...v10.1.3)

Updates `@node-rs/argon2` from 2.0.2 to 2.1.0
- [Release notes](https://github.com/napi-rs/node-rs/releases)
- [Commits](https://github.com/napi-rs/node-rs/compare/@node-rs/argon2@2.0.2...@node-rs/argon2@2.1.0)

Updates `@vueuse/core` from 14.3.0 to 14.4.0
- [Release notes](https://github.com/vueuse/vueuse/releases)
- [Commits](https://github.com/vueuse/vueuse/commits/v14.4.0/packages/core)

Updates `fastify` from 5.10.0 to 5.12.1
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.10.0...v5.12.1)

Updates `kysely` from 0.29.4 to 0.29.5
- [Release notes](https://github.com/kysely-org/kysely/releases)
- [Commits](kysely-org/kysely@v0.29.4...v0.29.5)

Updates `nanoid` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@6.0.0...6.0.1)

Updates `pg` from 8.22.0 to 8.23.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg)

Updates `pg-query-stream` from 4.16.0 to 4.17.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg-query-stream@4.17.0/packages/pg-query-stream)

Updates `pinia` from 4.0.2 to 4.0.3
- [Release notes](https://github.com/vuejs/pinia/releases)
- [Commits](vuejs/pinia@v4.0.2...v4.0.3)

Updates `piscina` from 5.3.0 to 5.3.2
- [Release notes](https://github.com/piscinajs/piscina/releases)
- [Changelog](https://github.com/piscinajs/piscina/blob/v5.3.2/CHANGELOG.md)
- [Commits](piscinajs/piscina@v5.3.0...v5.3.2)

Updates `stream-json` from 3.5.0 to 3.6.0
- [Commits](uhop/stream-json@3.5.0...3.6.0)

Updates `vue-router` from 5.2.0 to 5.3.0
- [Release notes](https://github.com/vuejs/router/releases)
- [Commits](vuejs/router@v5.2.0...v5.3.0)

Updates `vuetify` from 4.1.7 to 4.1.12
- [Release notes](https://github.com/vuetifyjs/vuetify/releases)
- [Commits](https://github.com/vuetifyjs/vuetify/commits/v4.1.12/packages/vuetify)

---
updated-dependencies:
- dependency-name: "@fastify/rate-limit"
  dependency-version: 11.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@fastify/static"
  dependency-version: 10.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@node-rs/argon2"
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@vueuse/core"
  dependency-version: 14.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: fastify
  dependency-version: 5.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: kysely
  dependency-version: 0.29.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: nanoid
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: pg
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: pg-query-stream
  dependency-version: 4.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: pinia
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: piscina
  dependency-version: 5.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: stream-json
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: vue-router
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: vuetify
  dependency-version: 4.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@berntpopp berntpopp

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@berntpopp