Skip to content

chore(deps-js)(deps): bump the node-dependencies group across 1 directory with 17 updates - #172

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/node-dependencies-72648d8d06
Closed

chore(deps-js)(deps): bump the node-dependencies group across 1 directory with 17 updates#172
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/node-dependencies-72648d8d06

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the node-dependencies group with 17 updates in the / directory:

Package From To
lefthook 2.1.9 2.1.10
markdownlint-cli2 0.22.1 0.23.1
@iconify-json/simple-icons 1.2.85 1.2.90
@lucide/vue 1.17.0 1.25.0
reka-ui 2.9.9 2.10.1
vue 3.5.35 3.5.40
vue-i18n 11.4.4 11.4.6
vue-router 5.1.0 5.2.0
@playwright/test 1.60.0 1.61.1
@tailwindcss/vite 4.3.0 4.3.3
@vitejs/plugin-vue 6.0.7 6.0.8
@vitest/coverage-v8 4.1.8 4.1.10
@vue/test-utils 2.4.10 2.4.11
tailwindcss 4.3.0 4.3.3
vite 8.0.16 8.1.5
vitest 4.1.8 4.1.10
vue-tsc 3.3.3 3.3.7

Updates lefthook from 2.1.9 to 2.1.10

Release notes

Sourced from lefthook's releases.

v2.1.10

Changelog

  • c0a32e900407bf3e2e97c99a7dd2e3f2864ba13a deps: July 2026 (#1463)
  • 0b87ca6dc643dab804a1aad59c24003ef147c11a deps: June 2026 (#1447)
  • afce7244cf02abaf996ebe87bb557a725e46993e deps: migrate shellescape to al.essio.dev/pkg/shellescape (#1443)
  • fbb61b369b57a17469bd6997d1624608ce977f61 feat: AI coding agents integration (#1448)
  • cbfb4a5db29b46ac8bf399665cd9ada81022b848 fix: make test suite stable when NO_COLOR is set (#1449)
Changelog

Sourced from lefthook's changelog.

2.1.10 (2026-07-08)

Commits

Updates markdownlint-cli2 from 0.22.1 to 0.23.1

Changelog

Sourced from markdownlint-cli2's changelog.

0.23.1

  • Show attempted fix counts after fixing
  • Update dependencies (including markdownlint)

0.23.0

  • Add overrides configuration option
  • Improve options/configuration file handling
  • Update dependencies (including markdownlint)
  • Remove support for end-of-life Node 20
Commits
  • 06f92c9 Update to version 0.23.1.
  • a773526 Freshen list of external custom rules included with the markdownlint-cli2-rul...
  • 437b0ca Bump eslint-plugin-jsdoc from 63.0.11 to 63.0.12
  • 5463e0f Bump eslint-plugin-unicorn from 70.0.0 to 71.0.0
  • b04ac13 Bump globby from 16.2.0 to 16.2.1
  • 1e63f97 Revert commit afb7d9898724f0d96279116bbb6f0d1026fff8df "Pin CI workflow's pnp...
  • 040594b Update dependency: markdownlint to 0.41.1.
  • 4d97fa8 Address new ESLint warnings from previous commit.
  • 50cb033 Bump eslint-node-test from 0.1.0 to 0.2.0
  • a53bf04 Bump eslint-plugin-jsdoc from 63.0.10 to 63.0.11
  • Additional commits viewable in compare view

Updates @iconify-json/simple-icons from 1.2.85 to 1.2.90

Commits

Updates @lucide/vue from 1.17.0 to 1.25.0

Release notes

Sourced from @​lucide/vue's releases.

Version 1.25.0

What's Changed

Full Changelog: lucide-icons/lucide@1.24.0...1.25.0

Version 1.24.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.23.0...1.24.0

Version 1.23.0

What's Changed

... (truncated)

Commits
  • f229f83 chore(depedencies): Update dependencies (#4553)
  • 4c663b9 fix(vue): support kebab-case icon-node prop on Icon component (#4512)
  • 5ff536e ci(release.yml): Fix workflow and remove version scripts in package scripts...
  • See full diff in compare view

Updates reka-ui from 2.9.9 to 2.10.1

Release notes

Sourced from reka-ui's releases.

v2.10.1

   🐞 Bug Fixes

    View changes on GitHub

v2.10.0

   🚀 Features

   🐞 Bug Fixes

   🏎 Performance

... (truncated)

Commits
  • 47c433a chore: release v2.10.1
  • 30bce20 fix: only consume Enter/Space keydown when no modifier key is held (#2762)
  • 8567787 fix(Menu): allow Tab to move focus out of non-modal DropdownMenu (#2747)
  • 3c9bedf fix(NumberField): snap off-grid value to the nearest grid line when stepping ...
  • 5ca8f56 chore(deps): update actions/checkout action to v7 (#2738)
  • 53f4d39 fix(Menu): prevent sub-menu focus fight when it opens on top of trigger (#2745)
  • faf27e7 fix(ScrollArea, Presence): cancel ScrollAreaThumb RAF loop and clean up Prese...
  • 04cba00 fix(Splitter): set data-state="collapsed" for px sizeUnit panels (#2743)
  • 2d85676 fix(FocusScope): default present to true so scopes without it still pause anc...
  • c215ca6 fix(RadioGroupItem, ToggleGroupItem): forward parent scope id onto RadioGroup...
  • Additional commits viewable in compare view

Updates vue from 3.5.35 to 3.5.40

Release notes

Sourced from vue's releases.

v3.5.40

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.39

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.38

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.37

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.40 (2026-07-16)

Bug Fixes

3.5.39 (2026-06-25)

Bug Fixes

3.5.38 (2026-06-11)

3.5.37 (2026-06-11)

3.5.36 (2026-06-11)

Bug Fixes

  • compiler-core: avoid crash on CDATA at the document root (#14916) (0ea17e2)
  • compiler-core: prefix dynamic keys on v-memo elements (#14922) (68e978e), closes #14920
  • compiler-sfc: handle vue-ignore on leading intersection/union type (#14950) (0dcd225), closes #12254
  • compiler-sfc: respect var hoisting in props destructure (48ad452)
  • reactivity: preserve watch callback return value when wrapped for once: true (#14902) (450a8a8)
  • runtime-core: add dev warning for silent catch in compat mode and fix test description typo (#14891) (db3e117)

... (truncated)

Commits

Updates vue-i18n from 11.4.4 to 11.4.6

Release notes

Sourced from vue-i18n's releases.

v11.4.6

Full Changelog: intlify/vue-i18n@v11.4.5...v11.4.6

v11.4.5

What's Changed

⚡ Improvement Features

Full Changelog: intlify/vue-i18n@v11.4.4...v11.4.5

Commits

Updates vue-router from 5.1.0 to 5.2.0

Release notes

Sourced from vue-router's releases.

v5.2.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @playwright/test from 1.60.0 to 1.61.1

Release notes

Sourced from @​playwright/test's releases.

v1.61.1

Bug Fixes

  • #41365 [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher
  • #41351 [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)
  • #41360 [Bug]: Trace viewer: message times in websockets are downscaled by 1000
  • #41311 [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15
  • #41371 [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();
// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
id: credentialId,
userHandle,
privateKey,
publicKey,
});
await context.credentials.install();
const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();

New APIs

Network

Browser and Screencast

... (truncated)

Commits
  • 39e3553 cherry-pick(#41399): fix(test): load require-reached files as commonjs in syn...
  • 4328122 chore: mark v1.61.1 (#41404)
  • 2c29a94 fix(tracing): stop recording websocket frames outside of chunks (#41398)
  • 4324b19 cherry-pick(#41367): fix(test): keep builtin expect matchers on base extend
  • 041e7e3 cherry-pick(#41364): fix(har): WebSocket message timestamps should be in mi...
  • b8a0fc3 cherry-pick(#41309, #43149): Revert "fix(firefox): treat `navigationCommitted...
  • b5a3175 cherry-pick(#41319): fix(loader): support other node versions
  • d4724a9 cherry-pick(#41290): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image
  • 1cc5a90 cherry-pick(#41295): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...
  • a6772bd cherry-pick(#41280): Revert "fix(trace-viewer): add keyboard navigation to `N...
  • Additional commits viewable in compare view

Updates @tailwindcss/vite from 4.3.0 to 4.3.3

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.3.3

Fixed

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

v4.3.2

Fixed

  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (

@dependabot
chore(deps-js)(deps): bump the node-dependencies group across 1 direc…
a8e13fc 
…tory with 17 updates

Bumps the node-dependencies group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [lefthook](https://github.com/evilmartians/lefthook) | `2.1.9` | `2.1.10` |
| [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2) | `0.22.1` | `0.23.1` |
| [@iconify-json/simple-icons](https://github.com/iconify/icon-sets) | `1.2.85` | `1.2.90` |
| [@lucide/vue](https://github.com/lucide-icons/lucide/tree/HEAD/packages/vue) | `1.17.0` | `1.25.0` |
| [reka-ui](https://github.com/unovue/reka-ui) | `2.9.9` | `2.10.1` |
| [vue](https://github.com/vuejs/core) | `3.5.35` | `3.5.40` |
| [vue-i18n](https://github.com/intlify/vue-i18n/tree/HEAD/packages/vue-i18n) | `11.4.4` | `11.4.6` |
| [vue-router](https://github.com/vuejs/router) | `5.1.0` | `5.2.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.1` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.0` | `4.3.3` |
| [@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue) | `6.0.7` | `6.0.8` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.8` | `4.1.10` |
| [@vue/test-utils](https://github.com/vuejs/test-utils) | `2.4.10` | `2.4.11` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.0` | `4.3.3` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.1.5` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.8` | `4.1.10` |
| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.3.3` | `3.3.7` |



Updates `lefthook` from 2.1.9 to 2.1.10
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.1.9...v2.1.10)

Updates `markdownlint-cli2` from 0.22.1 to 0.23.1
- [Changelog](https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md)
- [Commits](DavidAnson/markdownlint-cli2@v0.22.1...v0.23.1)

Updates `@iconify-json/simple-icons` from 1.2.85 to 1.2.90
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `@lucide/vue` from 1.17.0 to 1.25.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.25.0/packages/vue)

Updates `reka-ui` from 2.9.9 to 2.10.1
- [Release notes](https://github.com/unovue/reka-ui/releases)
- [Commits](unovue/reka-ui@v2.9.9...v2.10.1)

Updates `vue` from 3.5.35 to 3.5.40
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.35...v3.5.40)

Updates `vue-i18n` from 11.4.4 to 11.4.6
- [Release notes](https://github.com/intlify/vue-i18n/releases)
- [Changelog](https://github.com/intlify/vue-i18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/intlify/vue-i18n/commits/v11.4.6/packages/vue-i18n)

Updates `vue-router` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/vuejs/router/releases)
- [Commits](vuejs/router@v5.1.0...v5.2.0)

Updates `@playwright/test` from 1.60.0 to 1.61.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.61.1)

Updates `@tailwindcss/vite` from 4.3.0 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-vite)

Updates `@vitejs/plugin-vue` from 6.0.7 to 6.0.8
- [Release notes](https://github.com/vitejs/vite-plugin-vue/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-vue/blob/main/packages/plugin-vue/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-vue/commits/plugin-vue@6.0.8/packages/plugin-vue)

Updates `@vitest/coverage-v8` from 4.1.8 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8)

Updates `@vue/test-utils` from 2.4.10 to 2.4.11
- [Release notes](https://github.com/vuejs/test-utils/releases)
- [Commits](vuejs/test-utils@v2.4.10...v2.4.11)

Updates `tailwindcss` from 4.3.0 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

Updates `vite` from 8.0.16 to 8.1.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.5/packages/vite)

Updates `vitest` from 4.1.8 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

Updates `vue-tsc` from 3.3.3 to 3.3.7
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.3.7/packages/tsc)

---
updated-dependencies:
- dependency-name: lefthook
  dependency-version: 2.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
- dependency-name: markdownlint-cli2
  dependency-version: 0.23.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: "@iconify-json/simple-icons"
  dependency-version: 1.2.90
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
- dependency-name: "@lucide/vue"
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: reka-ui
  dependency-version: 2.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: vue
  dependency-version: 3.5.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
- dependency-name: vue-i18n
  dependency-version: 11.4.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
- dependency-name: vue-router
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: "@playwright/test"
  dependency-version: 1.61.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
- dependency-name: "@vitejs/plugin-vue"
  dependency-version: 6.0.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
- dependency-name: "@vue/test-utils"
  dependency-version: 2.4.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
- dependency-name: vite
  dependency-version: 8.1.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: node-dependencies
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
- dependency-name: vue-tsc
  dependency-version: 3.3.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: node-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

github-actions Bot commented Jul 20, 2026

Copy link
Copy Markdown

Thank you for contributing to this project with this PR, welcome to the community and the amazing world of open source!

@socket-security

socket-security Bot commented Jul 20, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Addednpm/​@​iconify-json/​simple-icons@​1.2.901001007796100
Addednpm/​vitest@​4.1.10981007998100
Addednpm/​@​vitest/​coverage-v8@​4.1.10991007999100
Addednpm/​@​lucide/​vue@​1.25.082100989680
Addednpm/​tailwindcss@​4.3.31001008198100
Addednpm/​vite@​8.1.5981008298100
Addednpm/​@​vue/​test-utils@​2.4.11991009388100
Addednpm/​@​tailwindcss/​vite@​4.3.31001008998100
Addednpm/​vue-router@​5.2.0911009790100
Addednpm/​vue@​3.5.401001009197100
Addednpm/​markdownlint-cli2@​0.23.19910010091100
Addednpm/​vue-tsc@​3.3.71001009297100
Addednpm/​lefthook@​2.1.109210010093100
Addednpm/​@​vitejs/​plugin-vue@​6.0.810010010093100
Addednpm/​reka-ui@​2.10.1991009794100
Addednpm/​vue-i18n@​11.4.6981009694100
Addednpm/​@​playwright/​test@​1.61.110010010099100

View full report

@socket-security

socket-security Bot commented Jul 20, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @emnapi/runtime is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yaml → npm/vue-router@5.2.0 → npm/vite@8.1.5 → npm/@emnapi/runtime@1.11.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@emnapi/runtime@1.11.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@dependabot @github

dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 31, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/node-dependencies-72648d8d06 branch July 31, 2026 06:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants