fix(deps): update all non-major dependencies with stable versions (patch) by renovate[bot] · Pull Request #3007 · Kong/public-ui-components

renovate · 2026-03-17T04:55:39Z

This PR contains the following updates:

Package	Change	Type	Update	Pending
@evilmartians/lefthook	`^2.0.16` → `^2.1.4`	devDependencies	patch	`2.1.5`
@types/jsdom (source)	`^28.0.0` → `^28.0.1`	devDependencies	patch
@types/node (source)	`^24.10.11` → `^24.10.15`	devDependencies	patch
@types/prismjs (source)	`^1.26.5` → `^1.26.6`	devDependencies	patch
@vueuse/core (source)	`^14.2.0` → `^14.2.1`	dependencies	patch
ajv (source)	`^8.17.1` → `^8.18.0`	devDependencies	patch
axios (source)	`^1.13.5` → `^1.13.6`	peerDependencies	patch
axios (source)	`^1.13.2` → `^1.13.6`	devDependencies	patch
axios (source)	`^1.13.2` → `^1.13.6`	dependencies	patch
axios@>=1.0.0 <=1.13.4 (source)	[`>=1.13.5` → `>=1.13.6`](https://renovatebot.com/diffs/npm/axios@>=1.0.0 <=1.13.4/1.13.5/1.13.6)	pnpm.overrides	patch
css-loader	`^7.1.3` → `^7.1.4`	devDependencies	patch
dompurify	`^3.3.2` → `^3.3.3`	dependencies	patch
dompurify@<3.2.4	`>=3.3.2` → `>=3.3.3`	pnpm.overrides	patch
eslint (source)	`^9.39.2` → `^9.39.4`	devDependencies	patch
form-data@>=3.0.0 <3.0.4	[`>=4.0.4` → `>=4.0.5`](https://renovatebot.com/diffs/npm/form-data@>=3.0.0 <3.0.4/4.0.4/4.0.5)	pnpm.overrides	patch
jsdom	`^29.0.0` → `^29.0.1`	devDependencies	patch	`29.0.2`
lodash-es (source)	`^4.17.23` → `^4.18.1`	dependencies	patch
minimatch@>=9.0.0 <9.0.7	[`>=9.0.7` → `>=9.0.9`](https://renovatebot.com/diffs/npm/minimatch@>=9.0.0 <9.0.7/9.0.7/9.0.9)	pnpm.overrides	patch
node (source)	`24.13.0` → `24.13.1`		patch
node (source)	`24.13.0` → `24.13.1`	volta	patch
postcss (source)	`^8.5.6` → `^8.5.8`	devDependencies	patch
postcss-custom-properties (source)	`^15.0.0` → `^15.0.1`	devDependencies	patch
pug (source)	`^3.0.3` → `^3.0.4`	devDependencies	patch
rimraf	`^6.1.2` → `^6.1.3`	devDependencies	patch
rollup-plugin-visualizer	`^6.0.5` → `^6.0.11`	devDependencies	patch
terser-webpack-plugin	`^5.3.16` → `^5.3.17`	devDependencies	patch
vue (source)	`^3.5.27` → `^3.5.32`	devDependencies	patch
vue (source)	`^3.5.27` → `^3.5.32`	peerDependencies	patch
vue (source)	`^3.5.27` → `^3.5.32`	pnpm.overrides	patch
vue-tsc (source)	`^3.2.4` → `^3.2.6`	devDependencies	patch
yaml (source)	`^2.8.2` → `^2.8.3`	devDependencies	patch

Release Notes

evilmartians/lefthook (@evilmartians/lefthook)

`v2.1.4`

Compare Source

pkg: fix scripts (#1348) by @mrexox
fix: bring back {lefthook_job_name} template (#1347) by @mrexox
pkg: refactor packaging (2) (#1346) by @mrexox
fix: separate more commands' non-option args with -- (#1339) by @scop
docs: change logo to point to landing page instead of itself (#1343) by @igas
pkg: make it easier to read (#1340) by @mrexox
pkg: refactor packaging scripts (#1308) by @mrexox

`v2.1.3`

Compare Source

chore: switch artifact attestations gen to actions/attest v4 (#1338) by @scop
chore: describe ENV variables usage in CLI help output (#1337) by @mrexox
fix: support git debug versions (#1334) by @mrexox
deps: March 2026 (#1330) by @mrexox
feat: update minimum go version (#1331) by @mrexox

`v2.1.2`

Compare Source

feat: introduce setup hook option (#1326) by @mrexox
refactor: recovering logic for changesets (#1324) by @mrexox
fix: rollback auto-staged changes if unwanted changes detected (#1251) by @tuchfarber
docs: improve docs ui (#1323) by @mrexox
docs: additional skip example and note about reinstallation (#1319) by @iloveitaly
docs: fix incorrect --verbose usage (#1318) by @iloveitaly
pkg: fix python packages publishing by @mrexox

axios/axios (axios)

`v1.13.6`

Compare Source

This release focuses on platform compatibility, error handling improvements, and code quality maintenance.

⚠️ Important Changes

Breaking Changes: None identified in this release.
Action Required: Users targeting React Native should verify their integration, particularly if relying on specific Blob or FormData behaviours, as improvements have been made to support these objects.

🚀 New Features

React Native Blob Support: Axios now includes support for React Native Blob objects. Thanks to @moh3n9595 for the initial implementation. (#5764)
Code Quality: Implemented prettier across the codebase and resolved associated formatting issues. (#7385)

🐛 Bug Fixes

Environment Compatibility:
- Fixed module exports for React Native and Browserify environments. (#7386)
- Added safe FormData detection for the WeChat Mini Program environment. (#7324)
Error Handling:
- AxiosError.message is now correctly enumerable. (#7392)
- AxiosError.from now correctly copies the status property from the source error, ensuring better error propagation. (#7403)

🔧 Maintenance & Chores

Dependencies: Updated the development_dependencies group (5 updates). (#7432)
Infrastructure: Migrated @rollup/plugin-babel from v5.3.1 to v6.1.0. (#7424)
Documentation: Added missing JSDoc comments to utilities. (#7427)

🌟 New Contributors

We are thrilled to welcome our new contributors! Thank you for helping improve the project:

Full Changelog: v1.13.5...v1.13.6

cure53/DOMPurify (dompurify)

`v3.3.3`: DOMPurify 3.3.3

Compare Source

Fixed an engine requirement for Node 20 which caused hiccups, thanks @Rotzbua

eslint/eslint (eslint)

`v9.39.4`

Compare Source

Bug Fixes

f18f6c8 fix: update dependency minimatch to ^3.1.5 (#20564) (Milos Djermanovic)
a3c868f fix: update dependency @eslint/eslintrc to ^3.3.4 (#20554) (Milos Djermanovic)
234d005 fix: minimatch security vulnerability patch for v9.x (#20549) (Andrej Beles)
b1b37ee fix: update ajv to 6.14.0 to address security vulnerabilities (#20538) (루밀LuMir)

Documentation

4675152 docs: add deprecation notice partial (#20520) (Milos Djermanovic)

Chores

b8b4eb1 chore: update dependencies for ESLint v9.39.4 (#20596) (Francesco Trotta)
71b2f6b chore: package.json update for @eslint/js release (Jenkins)
1d16c2f ci: pin Node.js 25.6.1 (#20563) (Milos Djermanovic)

`v9.39.3`

Compare Source

Bug Fixes

791bf8d fix: restore TypeScript 4.0 compatibility in types (#20504) (sethamus)

Chores

8594a43 chore: upgrade @eslint/js@9.39.3 (#20529) (Milos Djermanovic)
9ceef92 chore: package.json update for @eslint/js release (Jenkins)
af498c6 chore: ignore /docs/v9.x in link checker (#20453) (Milos Djermanovic)

form-data/form-data (form-data@>=3.0.0 <3.0.4)

`v4.0.5`

Compare Source

Commits

[Tests] Switch to newer v8 prediction library; enable node 24 testing 16e0076
[Dev Deps] update @ljharb/eslint-config, eslint 5822467
[Fix] set Symbol.toStringTag in the proper place 76d0dee

isaacs/minimatch (minimatch@>=9.0.0 <9.0.7)

`v9.0.9`

Compare Source

`v9.0.8`

Compare Source

nodejs/node (node)

`v24.13.1`

Compare Source

postcss/postcss (postcss)

`v8.5.8`

Compare Source

Fixed Processor#version.

`v8.5.7`

Compare Source

Improved source map annotation cleaning performance (by CodeAnt AI).

csstools/postcss-plugins (postcss-custom-properties)

`v15.0.1`

Compare Source

February 21, 2026

Fix importance of custom media in anonymous cascade layers.

pugjs/pug (pug)

`v3.0.4`

Compare Source

Bug Fixes

Update pug-code-gen to ensure doctype option is properly validated (#3468)

isaacs/rimraf (rimraf)

`v6.1.3`

Compare Source

btd/rollup-plugin-visualizer (rollup-plugin-visualizer)

`v6.0.11`

Compare Source

Identical to 6.0.5 to have latest v6 that is not deprecated

`v6.0.8`

Compare Source

Not published (rolled back, moved to 7.0.0)

webpack/terser-webpack-plugin (terser-webpack-plugin)

`v5.3.17`

Compare Source

vuejs/core (vue)

`v3.5.32`

Compare Source

Bug Fixes

runtime-core: prevent currentInstance leak into sibling render during async setup re-entry (#14668) (f166353), closes #14667
teleport: handle updates before deferred mount (#14642) (32b44f1), closes #14640
types: allow customRef to have different getter/setter types (#14639) (e20ddb0)
types: use private branding for shallowReactive (#14641) (302c47a), closes #14638 #14493

Reverts

Revert "fix(server-renderer): cleanup component effect scopes after SSR render" (#14674) (219d83b), closes #14674 #14669

`v3.5.31`

Compare Source

Bug Fixes

compiler-sfc: allow Node.js subpath imports patterns in asset urls (#13045) (95c3356), closes #9919
compiler-sfc: support template literal as defineModel name (#14622) (bd7eef0), closes #14621
reactivity: normalize toRef property keys before dep lookup + improve types (#14625) (1bb28d0), closes #12427 #12431
runtime-core: invalidate detached v-for memo vnodes after unmount (#14624) (560def4), closes #12708 #12710
runtime-core: preserve nullish event handlers in mergeProps (#14550) (5725222)
runtime-core: prevent merging model listener when value is null or undefined (#14629) (b39e032)
runtime-dom: defer teleport mount/update until suspense resolves (#8619) (88ed045), closes #8603
runtime-dom: handle activeElement check in Shadow DOM for v-model (#14196) (959ded2)
server-renderer: cleanup component effect scopes after SSR render (#14548) (862f11e)
suspense: avoid unmount activeBranch twice if wrapped in transition (#9392) (908c6ad), closes #7966
suspense: update suspense vnode's el during branch self-update (#12922) (a2c1700), closes #12920
transition: skip enter guard while hmr updating (#14611) (be0a2f1), closes #14608
types: prevent shallowReactive marker from leaking into value unions (#14493) (3b561db), closes #14490

`v3.5.30`

Compare Source

Bug Fixes

compat: add entities to @vue/compat deps to fix CJS edge cases (#12514) (e725a67), closes #10609
custom-element: ensure child component styles are injected in correct order before parent styles (#13374) (1398bf8), closes #13029
custom-element: properly locate parent when slotted in shadow dom (#12480) (f06c81a), closes #12479
custom-element: should properly patch as props for vue custom elements (#12409) (740983e), closes #12408
reactivity: avoid duplicate raw/proxy entries in Set.add (#14545) (d943612)
reactivity: fix reduce on reactive arrays to preserve reactivity (#12737) (16ef165), closes #12735
reactivity: handle Set with initial reactive values edge case (#12393) (5dc27ca), closes #8647
runtime-core: warn about negative number in v-for (#12308) (9438cc5)
ssr: prevent watch from firing after async setup await (#14547) (6cda71d), closes #14546
types: make generics with runtime props in defineComponent work (fix #11374) (#13119) (cea3cf7), closes #13763
types: narrow useAttrs class/style typing for TSX (#14492) (bbb8977), closes #14489

`v3.5.29`

Compare Source

Bug Fixes

runtime-core: prevent instance leak in withAsyncContext (#14445) (702284f), closes nuxt/nuxt#33644
server-renderer: render className as escaped string (#14469) (da6690c)
transition: prevent enter if leave is in progress (#14443) (df059f8), closes #12091 #12133

`v3.5.28`

Compare Source

Bug Fixes

transition: avoid unexpected cancelled parameter in transition done callback (#14391) (6798853)
compiler-sfc: add resolution trying for .mts/.cts files (#14402) (c09d41f), closes vuejs/router#2611
compiler-sfc: no params were generated when using withDefaults (#12823) (b0a1f05), closes #12822
reactivity: add __v_skip flag to EffectScope to prevent reactive conversion (#14359) (48b7552), closes #14357
runtime-core: avoid retaining el on cached text vnodes during static traversal (#14419) (4ace79a), closes #14134
runtime-core: prevent child component updates when style remains unchanged (#12825) (57866b5), closes #12826
runtime-core: properly handle async component update before resolve (#11619) (e71c26c), closes #11617
runtime-dom: handle null/undefined handler in withModifiers (#14362) (261de54), closes #14361
teleport: properly handling disabled teleport target anchor (#14417) (d7bcd85), closes #14412
transition-group: correct move translation under scale via element rect (#14360) (0243a79), closes #14356
useTemplateRef: don't update setup ref for useTemplateRef key (#12756) (fc40ca0), closes #12749

vuejs/language-tools (vue-tsc)

`v3.2.6`

Compare Source

language-core

fix: generate $slots type in template correctly with defineSlots (#5984) - Thanks to @KazariEX!
fix: infer only readonly component of arrays in v-for (#5987) - Thanks to @ascott18!
fix: avoid false positives for destructured props detection on binding property names (#5994) - Thanks to @KazariEX!

vscode

fix: use regex for TS extension patching to support VS Code 1.110+ (#5983) - Thanks to @ebiryu!

`v3.2.5`

Compare Source

language-core

fix: re-parse template when interpolation syntax breaks (#5971) - Thanks to @Dsaquel!

language-service

fix: use default html data provider for document symbols (#5968) - Thanks to @liangmiQwQ!

language-plugin-pug

fix: handle backtick attributes containing both quote types (#5970) - Thanks to @baptistejamin!

workspace

docs: document all packages with consistent README structure (#5953)
docs: update tsconfig schema of plugins option - Thanks to @KazariEX!

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) in timezone America/New_York, Automerge - Monday through Friday ( * * * * 1-5 ) in timezone America/New_York.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-04-01T05:30:25Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Scope: all 42 workspace projects
Progress: resolved 1, reused 0, downloaded 0, added 0
/tmp/renovate/repos/github/Kong/public-ui-components/packages/core/forms:
 ERR_PNPM_NO_MATURE_MATCHING_VERSION  Version 4.18.1 (released 5 days ago) of lodash-es does not meet the minimumReleaseAge constraint

This error happened while installing a direct dependency of /tmp/renovate/repos/github/Kong/public-ui-components/packages/core/forms

The latest release of lodash-es is "4.18.1". Published at 4/1/2026

If you need the full list of all 71 published versions run "$ pnpm view lodash-es versions".

If you want to install the matched version ignoring the time it was published, you can add the package name to the minimumReleaseAgeExclude setting. Read more about it: https://pnpm.io/settings#minimumreleaseageexclude

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot added dependencies renovate-bot labels Mar 17, 2026

renovate bot requested review from a team and kongponents-bot as code owners March 17, 2026 04:55

renovate bot added the dependencies label Mar 17, 2026

renovate bot requested review from a team and adamdehaven as code owners March 17, 2026 04:55

renovate bot added the renovate-bot label Mar 17, 2026

renovate bot requested review from ValeryG and jillztom as code owners March 17, 2026 04:55

renovate bot enabled auto-merge (squash) March 17, 2026 04:55

Leopoldthecoder previously approved these changes Mar 17, 2026

View reviewed changes

renovate bot dismissed Leopoldthecoder’s stale review via 127afed March 18, 2026 06:58

renovate bot force-pushed the renovate/patch-all-stable branch 13 times, most recently from b115d66 to 5cdebe1 Compare March 25, 2026 04:10

renovate bot force-pushed the renovate/patch-all-stable branch from 5cdebe1 to a9772bc Compare March 26, 2026 04:15

renovate bot force-pushed the renovate/patch-all-stable branch 10 times, most recently from fe61cc4 to 277fb64 Compare April 1, 2026 05:30

renovate bot force-pushed the renovate/patch-all-stable branch 7 times, most recently from 9dc4bcb to ddaa0ec Compare April 6, 2026 06:27

fix(deps): update all non-major dependencies with stable versions

8b12cbb

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/patch-all-stable branch from ddaa0ec to 8b12cbb Compare April 7, 2026 05:46

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all non-major dependencies with stable versions (patch)#3007

fix(deps): update all non-major dependencies with stable versions (patch)#3007
renovate[bot] wants to merge 1 commit intomainfrom
renovate/patch-all-stable

renovate bot commented Mar 17, 2026 •

edited

Loading

Uh oh!

renovate bot commented Apr 1, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate bot commented Mar 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

⚠️ Important Changes

🚀 New Features

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

v3.3.3: DOMPurify 3.3.3

Bug Fixes

Documentation

Chores

Bug Fixes

Chores

Commits

Bug Fixes

Bug Fixes

Reverts

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

language-core

vscode

language-core

language-service

language-plugin-pug

workspace

Configuration

Uh oh!

renovate bot commented Apr 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: pnpm-lock.yaml

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Mar 17, 2026 •

edited

Loading

`v3.3.3`: DOMPurify 3.3.3

renovate bot commented Apr 1, 2026 •

edited

Loading