chore(deps): bump the minor-and-patch group in /src-frontend with 13 updates

[dependabot]

Bumps the minor-and-patch group in /src-frontend with 13 updates:

Package	From	To
@quasar/extras	2.0.4	2.1.0
@sentry/vue	10.74.0	10.75.0
apexcharts	7.2.0	7.4.0
prettier	3.9.6	3.9.8
quasar	2.32.3	2.33.0
vue	3.5.42	3.5.43
vue-i18n	11.4.10	11.4.12
zod	4.6.2	4.6.5
@quasar/app-vite	3.8.3	3.9.0
@types/node	26.5.1	26.6.2
@vue/compiler-sfc	3.5.42	3.5.43
autoprefixer	10.5.6	10.6.1
electron	44.3.0	44.4.3

Updates @quasar/extras from 2.0.4 to 2.1.0

Release notes

Sourced from @​quasar/extras's releases.

@​quasar/extras-v2.1.0

New

• feat(extras): roboto-font -> Roboto now ships as a variable font (weights 100 to 900) in one woff2 per script subset with unicode-range: Latin, Latin Extended, Cyrillic, Greek, Vietnamese, math and symbols. Browsers download only the subsets a page actually uses. Pages using two or more weights get lighter (43 KB total instead of 22 KB per weight), single-weight pages pay about 21 KB more, and Cyrillic, Greek and Vietnamese text now renders in Roboto instead of falling back to the system font.
• feat(extras): roboto-font-latin-ext -> now an alias of roboto-font, which covers the extended range itself. Existing extras lists in quasar.config keep working; you can drop roboto-font-latin-ext and keep only roboto-font.
• feat(extras): roboto-font -> font-display: swap; text renders immediately in the fallback font while Roboto loads instead of staying invisible for up to three seconds.
• feat(extras): Google web fonts (Roboto, Material Icons, Material Symbols) -> shipped as woff2 only; Roboto is about 20% smaller and the unused woff fallbacks are gone from the package.
• material-symbols-outlined -> v371
• material-symbols-rounded -> v372
• material-symbols-sharp -> v368
• Heads up on the Material Symbols upgrade: Google removed the drive_fusiontable icon upstream, so symOutlinedDriveFusiontable, symRoundedDriveFusiontable and symSharpDriveFusiontable are no longer exported. If you import any of them, switch to another icon before upgrading. The same upgrade adds *BulletChart, *CarSeatOff, *DeviceSwooshStar, *DomainDisabledCheck, *List2, *MobileTap, *PeopleSizeDecrease, *PeopleSizeIncrease, *SimCardLock, *SpatialGallery, *Speaker3, *SpeechToText2, *SteeringWheelCool and *TargetCheck to all three families.

Other

• chore(extras): bootstrap-icons, eva-icons, ionicons-v4, line-awesome, mdi-v7 -> the woff files shipped beside each woff2 are dropped (1.1 MB less in the package; no supported browser requested them). mdi-v7 and line-awesome now declare font-display: block like every other icon font, so icon glyphs never flash as fallback text while the font loads.
• Heads up: if your own CSS references the extras font files by path (a .woff file, or one of the previous Roboto web-font/ file names), update it; only the documented extras names and CSS entry points are stable.

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

• Becoming a sponsor on Github
• One-off donation via PayPal

Commits

• 378bc9f chore(extras): bump version
• 5c0440f feat(extras): update Material Symbols exports
• 05d0ea7 chore: upgrade deps
• 4159bc8 chore(docs): opt out of Rolldown's plugin-timings check on prod builds
• 80a1756 feat(docs): tweaks to 404 page
• 713199c feat(docs): landing and components pages follow the theme toggle
• cf4912a feat(docs): components catalog cards without screenshots
• 9762ce3 chore(docs): unprefixed hyphens only in code blocks
• 53b23c8 chore(ui): drop the fieldset padding rule from normalize
• 82c2ac6 feat(extras): font-display swap for Roboto
• Additional commits viewable in compare view

Updates @sentry/vue from 10.74.0 to 10.75.0

Release notes

Sourced from @​sentry/vue's releases.

10.75.0

Important Changes

• feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

  On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

• feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
• fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
• fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
• fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
• fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
• fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
• fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
• fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
• fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
• fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

Bundle size 📦

Path	Size
@​sentry/browser	27.18 KB
@​sentry/browser - with treeshaking flags	25.66 KB
@​sentry/browser (incl. Tracing)	45.6 KB
@​sentry/browser (incl. Tracing + Span Streaming)	47.34 KB
@​sentry/browser (incl. Tracing, Profiling)	50.24 KB
@​sentry/browser (incl. Tracing, Replay)	83.99 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags	73.84 KB
@​sentry/browser (incl. Tracing, Replay with Canvas)	88.6 KB
@​sentry/browser (incl. Tracing, Replay, Feedback)	100.94 KB
@​sentry/browser (incl. Feedback)	43.94 KB
@​sentry/browser (incl. sendFeedback)	31.87 KB
@​sentry/browser (incl. FeedbackAsync)	36.88 KB
@​sentry/browser (incl. Metrics)	28.25 KB
@​sentry/browser (incl. Logs)	28.47 KB
@​sentry/browser (incl. Metrics & Logs)	29.15 KB
@​sentry/react	28.93 KB
@​sentry/react (incl. Tracing)	47.81 KB
@​sentry/vue	32.47 KB
@​sentry/vue (incl. Tracing)	47.55 KB
@​sentry/svelte	27.21 KB
CDN Bundle	29.53 KB
CDN Bundle (incl. Tracing)	47.52 KB
CDN Bundle (incl. Logs, Metrics)	31.07 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	48.81 KB
CDN Bundle (incl. Replay, Logs, Metrics)	69.49 KB
CDN Bundle (incl. Tracing, Replay)	84.22 KB

... (truncated)

Changelog

Sourced from @​sentry/vue's changelog.

10.75.0

Important Changes

• feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24445)

  On Effect v4, Sentry.effectLayer now registers a Sentry ErrorReporter. Failures that pass through Effect.withErrorReporting, ErrorReporter.report or the built-in HTTP and RPC reporting boundaries are captured automatically, with ErrorReporter.ignore, ErrorReporter.severity and ErrorReporter.attributes annotations respected. Nothing changes on Effect v3.

Other Changes

• feat(v10/core): Accept a CollectBehavior shorthand for dataCollection.httpHeaders (#24339)
• fix(v10/browser): Release the XHR virtualError once the request completed (#24307)
• fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
• fix(v10/bundler-plugins): Stamp debug IDs onto emitted source maps when disable-upload is set (#24332)
• fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
• fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcemap upload (#24295)
• fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
• fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe (#24353)
• fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
• fix(v10/replay): Don't rewrite already-emitted nodes when syncing mirror attributes (#23588)

Commits

• 9ffb58c release: 10.75.0
• 664c906 meta(changelog): Update changelog for 10.75.0 (#24446)
• e3e7acc fix(v10/nitro): Import from nitro/h3 instead of h3 directly (#24444)
• 4bb51d1 feat(v10/effect): Capture errors through the Effect v4 ErrorReporter API (#24...
• 738f17e fix(v10/core): Don't instrument the SDK's own envelope requests (#24276)
• f63c56a fix(v10/node-core): Don't recurse in logAndExitProcess on a broken stdio pipe...
• 0e24355 fix(v10/browser-utils): Skip nullish LCP entries in vendored web-vitals (#24349)
• ac3ea13 fix(v10/nuxt): Detect Nitro version via the app's Nuxt dependency chain (#24025)
• 9235d43 fix(v10/nextjs): Only include emitted chunk directories in Turbopack sourcema...
• e2deda0 feat(v10/core): Accept CollectBehavior shorthand for `dataCollection.httpHe...
• Additional commits viewable in compare view

Updates apexcharts from 7.2.0 to 7.4.0

Release notes

Sourced from apexcharts's releases.

💎 Version 7.4.0

A minor release of two additions and twelve fixes, and every one of those fixes came from an outside contributor. They land on the parts of the library that only show their seams in real use: what resetSeries() restores from, CSV export, an x axis whose type was never declared, a hidden y axis, stacked corners, and server-side rendering.

Also here, and worth knowing about even though nothing visible changes: apex-commons moves from ^0.5.0 to ^0.8.0. A caret on a 0.x version pins the MINOR, so every published build since 0.5.0 resolved a commons three minors old, silently. Nothing breaks and nothing warns when a caret cannot reach a newer minor. The bundle carries commons rather than importing it at runtime, so this is the release that actually moves it.

	gzip
7.3.0 default bundle	267,241 B
7.4.0 default bundle	268,389 B

No API breaking changes. Upgrading is npm install apexcharts@7.4.0.

✨ New

Weave v5: api.info.stroke

stroke.dashArray is one option indexed by series position, with no per-series escape hatch. So a plugin that adds a computed series and wants that series dashed, to say its points were derived rather than measured, has to write an array covering every series on the chart including the caller's.

Doing that blind flattens whatever dashing the caller had into solid lines, and leaves nothing to restore them from when the tool is switched off. The option was therefore unusable by a plugin that respects the chart it is attached to, which meant a derived series could only be told apart by its name and its colour.

const dashes = api.info.stroke.dashArray // scalar, or one entry per series

It reports what is actually configured, so the array can be rebuilt around the caller's own values and put back exactly as found. A scalar covers every series and an array is per series, both passed through as they are, since a plugin restoring what it was told has to restore the shape too. The array is copied on the way out, so a plugin cannot restyle the chart by mutating what it was handed. This is the same reason dataLabels.enabledOnSeries is already reported: an option a plugin must narrow, and cannot narrow safely without knowing the current value.

Additive, so no plugin has to declare apiVersion: 5 to keep working. Feature-detect it the way reserve and pointer are detected.

A way back out of a zoom when the toolbar is hidden

Drag-to-zoom is a deliberate gesture, so unlike the wheel and the pinch it is not withheld when the toolbar is hidden. The reset button that undoes it is, which leaves a viewer who drags across a bare chart in a window with nothing on screen that puts the range back, and no key anyone would guess.

chart: {
  toolbar: { show: false },
  zoom: { resetControl: 'auto' }, // the default
}

So while the chart IS zoomed and nothing else can reset it, one reset control is drawn where the toolbar would have been, and it goes when the range does. A chart nobody zooms is untouched: toolbar: { show: false } still means an empty chart for everyone who does not zoom. Escape resets under the same gate, deferring to keyboard navigation and leaving the event alone so a page listening for it still hears it.

'auto' resolves the way allowMouseWheelZoom already does: a toolbar showing its reset tool counts as a way back, anything else does not. false for a page with its own control, which turns off the key too. true also forces the control on where toolbar.tools.reset is off, which is the same dead end as a hidden toolbar.

The gates on the wheel and the pinch are deliberately left where they are. This control arrives after the fact, while what an incidental wheel zoom takes first is the page scroll it swallowed, which no button hands back.

One side effect worth having: a completed drag-zoom now focuses the chart, so the +, - and 0 keys are within reach for the first time after a mouse zoom.

🐛 Fixes

resetSeries() could not bring back a series the viewer had hidden

... (truncated)

Commits

• d9a7e6c release: 7.4.0
• 78cf45c fix(licence): drop the backslash escapes before the dollar amounts
• b2161f8 docs(licence): generate the LICENSE from the canonical template
• 621c5fb chore(deps): move apex-commons to ^0.8.0
• 88a2343 Merge pull request #5284 from lazerg/fix/initial-series-baseline
• cafc496 Merge pull request #5309 from 81reap/81reap/csv-export-duplicate-rows
• d4dc925 feat(weave): tell a plugin how the caller dashed their own lines
• 071f68c chore(types): capture xLabelFormatter before the tooltip key closure
• 69787f0 Merge pull request #5306 from gioboa/fix/4845
• 964683a Merge pull request #5305 from tarzan77cz/fix/yaxis-text-alignments-hidden-axis
• Additional commits viewable in compare view

Updates prettier from 3.9.6 to 3.9.8

Release notes

Sourced from prettier's releases.

3.9.8

• Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

• Support Angular 22.2
• Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

<!-- Input -->
- [x] short first line.
  second paragraph at six spaces that wraps
  onto another line here.

<!-- Prettier 3.9.6 -->

 
short first line.
second paragraph at six spaces that wraps
    onto another line here.



<!-- Prettier 3.9.7 -->

 
short first line.
second paragraph at six spaces that wraps
onto another line here.

JavaScript: Fix embedded template literal idempotency (#19725 by @​fisker)

... (truncated)

Commits

• 4f2ab67 Release 3.9.8
• 3d82af8 Update Regex related dependencies (#20082)
• 5ec8db1 [3.9.x] Markdown: Don't let Liquid objects interrupt paragraphs (#20087)
• 5b142ed Release Release @​prettier/plugin-hermes@​0.2.3, @​prettier/plugin-oxc@​0.2.3, an...
• 0df8eb8 Bump Prettier dependency to 3.9.7
• 3cf6c8c Clean changelog_unreleased
• 0449af3 Release 3.9.7
• 43cd5b0 Allow verify markdown test with mdx parser
• ab8c911 Fix test on Node.js v26 (#19927)
• 4a5adf9 Fix tests
• Additional commits viewable in compare view

Updates quasar from 2.32.3 to 2.33.0

Release notes

Sourced from quasar's releases.

quasar-v2.33.0

New

• feat(ui): AI-ready out of the box -> your AI coding agent now works from the Quasar documentation of the exact version installed in your project: every component, directive, composable, plugin and util, full API included, available offline. No more suggestions built on props that do not exist, on a newer Quasar than the one you run, or on whatever the agent half remembers from its training. Pair it with the new @quasar/mcp server and your agent looks things up instead of guessing

Fixes

• fix(ui): date utils -> extractDate() matches the longest locale name instead of the first one declared, so what formatDate() writes parses back to the same date. Previously a name that prefixes a longer one won: vi "2023 Th12" under YYYY MMM parsed as January, tr "Pazar" swallowed "Pazartesi". 16 such round-trips across 7 of the shipped language packs are fixed (#18548)
• fix(ui/lang): lv -> the short name of Friday is "Pk"; the pack listed "Pi" for both Monday and Friday, so a Friday written with ddd parsed back as Monday
• fix(QTable): the rows-per-page selector follows a controlled pagination -> with v-model:pagination it kept offering the page size the table was mounted with and omitted the one in use (#18550)
• fix(QTable): scrollTo() -> the to of the emitted virtual-scroll payload is the index of the last rendered row, as documented. It was stale under a controlled pagination, -1 with "all rows" and past the end on a partially filled last page
• fix(ui): virtual scroll (QVirtualScroll, QSelect, QTable, QTree) -> a scrollTo() called right after a scroll event is no longer dropped when the scroller is still moving (momentum, a clamp after a resize) on a device with slow frames

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

• Becoming a sponsor on Github
• One-off donation via PayPal

Commits

• d3e221e chore(ui): bump version
• 8979a77 chore: upgrade deps, drop the vitest 5 define workaround
• 3569469 fix(ui/virtual-scroll): scrollTo() supersedes a scroll event pending its debo...
• 82012d6 test(ui): frame-driven waits follow the frames, not the wall clock
• 6409221 test(QTree): the virtual scroll settle helper waits on the component's clocks
• 04b5497 fix(QTable): scrollTo() reports the last rendered row in its virtualScroll pa...
• 17b2ebc perf(QTable): rows-per-page options recompute only when the page size moves
• 0001202 fix(QTable): rows-per-page options follow a controlled pagination (#18550)
• bf109c1 fix(ui/lang): lv Friday short name is "Pk", not a second "Pi"
• 17d3a86 refactor(ui): hoist the extractDate longest-first comparator
• Additional commits viewable in compare view

Updates vue from 3.5.42 to 3.5.43

Release notes

Sourced from vue's releases.

v3.5.43

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.43 (2026-09-17)

Bug Fixes

• compiler-sfc: ignore comment delimiters inside strings and url() when parsing css vars (#15548) (2fde323)
• compiler-sfc: prepend semicolon for await in switch case (#15498) (9a1df69), closes #15495
• compiler-sfc: restore await scope when leaving nested blocks (5409708), closes #15465
• compiler-sfc: reuse parsed parent configs across tsconfig walks (fix #15478) (#15480) (d6febaa)
• hydration: run leave hooks for hydration placeholders (#15431) (5dda192)
• reactivity: preserve readonly wrappers in array copy methods (#15469) (599f35b)
• runtime-core: unmount v-once children after parent rerenders (#15435) (d720338)
• shared: handle circular references in looseEqual (#15499) (718f782), closes #15496
• shared: preserve comment-like text in style values (#15471) (b9456cb)
• suspense: don't drop nested suspense patches during hydration (#15429) (76d42dc)
• suspense: keep the boundary pending while its branch is patched (#15411) (bfcfe9e), closes #7506
• suspense: patch a hydrating boundary's pending branch in place (#15432) (2cde6f7)
• suspense: unmount the DOM an interrupted async component claimed (#15430) (fb9b45c)
• types: keep optional props when a runtime prop uses a generic PropType (#15523) (243aabc), closes #9546

Commits

• 5be58b4 release: v3.5.43
• a0b61aa chore: remove and ignore generated git hooks
• 2fde323 fix(compiler-sfc): ignore comment delimiters inside strings and url() when pa...
• 599f35b fix(reactivity): preserve readonly wrappers in array copy methods (#15469)
• 55a2b45 chore(deps): update pnpm to v12 (#15439)
• 243aabc fix(types): keep optional props when a runtime prop uses a generic PropType (...
• 718f782 fix(shared): handle circular references in looseEqual (#15499)
• 9a1df69 fix(compiler-sfc): prepend semicolon for await in switch case (#15498)
• d6febaa fix(compiler-sfc): reuse parsed parent configs across tsconfig walks (fix #15...
• b9456cb fix(shared): preserve comment-like text in style values (#15471)
• Additional commits viewable in compare view

Updates vue-i18n from 11.4.10 to 11.4.12

Release notes

Sourced from vue-i18n's releases.

v11.4.12

What's Changed

🐛 Bug Fixes

• fix(core-base): cache locale chains by fallback identity by @​kazupon in intlify/vue-i18n#2635
• fix(vue-i18n-core): sync the core context when inheritLocale is enabled by @​kazupon in intlify/vue-i18n#2636

Full Changelog: intlify/vue-i18n@v11.4.10...v11.4.12

Changelog

Sourced from vue-i18n's changelog.

v11.4.12 (2026-09-16T14:30:30.396Z)

This changelog is generated by GitHub Releases

What's Changed

🐛 Bug Fixes

• fix(core-base): cache locale chains by fallback identity by @​kazupon in intlify/vue-i18n#2635
• fix(vue-i18n-core): sync the core context when inheritLocale is enabled by @​kazupon in intlify/vue-i18n#2636

Full Changelog: intlify/vue-i18n@v11.4.10...v11.4.12

Commits

• 87f3745 release: v11.4.12
• See full diff in compare view

Updates zod from 4.6.2 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

• d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
• f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
• de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
• 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
• ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
• cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
• 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
• 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

• d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)
• ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)
• 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
• f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

• 413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
• 75d63ee1 docs: show only the .properties() method form in the 4.6 post
• 46da9572 docs: match the error-message examples to what the parsers emit

Commits

• 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
• 0f3f5ee 4.6.5
• cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
• ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
• 56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
• de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
• f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
• d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
• 2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
• 743aedb 4.6.4
• Additional commits viewable in compare view

Updates @quasar/app-vite from 3.8.3 to 3.9.0

Release notes

Sourced from @​quasar/app-vite's releases.

@​quasar/app-vite-v3.9.0

Changes

• feat(app-vite): AI-ready out of the box -> your AI coding agent now works from the Quasar CLI documentation of the exact version installed in your project: quasar.config, every build mode (SPA, SSR, SSG, PWA, BEX, Capacitor, Cordova, Electron), boot files, App Extensions and Icon Genie, available offline. No more config options that do not exist in your version, or setup steps from a CLI you are not running. Pair it with the new @quasar/mcp server and your agent looks things up instead of guessing
• chore(deps): dependencies refreshed (@vitejs/plugin-vue 6.0.9, @clack/prompts 1.8.1, open 11.0.4, @types/chrome 0.3)

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

• Becoming a sponsor on Github
• One-off donation via PayPal

@​quasar/app-vite-v3.8.4

Changes

• chore(app-vite): PWA mode -> the generated index.html no longer carries the msapplication-TileImage and msapplication-TileColor meta tags. They configured the pinned-site tiles of Internet Explorer and pre-Chromium Edge only; Chromium Edge takes its tiles from the web manifest, so none of the supported browsers read them. The icons/ms-icon-144x144.png file those tags pointed at is no longer generated by Icon Genie either (@quasar/icongenie v6.1.8+); an existing project can delete it from its public/icons folder, nothing references it anymore
• chore(app-vite): templates -> the Capacitor and Cordova index.html templates no longer contain the msapplication-tap-highlight meta tag (it targeted IE10 on Windows Phone). This only affects newly generated projects; in an existing project you can remove the line from src-capacitor/www/index.html / src-cordova/www/index.html (and from your root index.html) by hand, it has no effect on any supported browser
• chore(app-vite): upgraded deps -> vite ^8.3.0, rolldown ^1.2.8, sass-embedded ^1.104.1, @clack/prompts ^1.8.0, open ^11.0.3

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

• Becoming a sponsor on Github
• One-off donation via PayPal

Commits

• fdaf6c5 chore(app-vite): bump version
• d3e221e chore(ui): bump version
• 8979a77 chore: upgrade deps, drop the vitest 5 define workaround
• d13afca docs: enterprise-ready, AI-ready; the introductory pages say what ships today
• e97c00d chore(ui,app-vite,create-quasar): prepublishOnly no longer runs the tests
• f3610a5 chore: ui exposes ensure-fresh-build as a script, consumers call it through pnpm
• 2f471ac chore: declare each package's directory in its repository field
• 67af4f1 feat(docs): generate:mcp, with --target slices bundled into ui and app-vite
• 3df5d26 chore(ui): bump version
• 902641d chore(app-vite): bump version
• Additional commits viewable in compare view

Updates @types/node from 26.5.1 to 26.6.2

Commits

• See full diff in compare view

Updates @vue/compiler-sfc from 3.5.42 to 3.5.43

Release notes

Sourced from @​vue/compiler-sfc's releases.

v3.5.43

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from @​vue/compiler-sfc's changelog.

3.5.43 (2026-09-17)

Bug Fixes

• compiler-sfc: ignore comment delimiters inside strings and url() when parsing css vars (#15548) (2fde323)
• compiler-sfc: prepend semicolon for await in switch case (#15498) (9a1df69), closes #15495
• compiler-sfc: restore await scope when leaving nested blocks (5409708), closes #15465
• compiler-sfc: reuse parsed parent configs across tsconfig walks (fix #15478) (#15480) (d6febaa)
• hydration: run leave hooks for hydration placeholders (#15431) (5dda192)
• reactivity: preserve readonly wrappers in array copy methods (#15469) (599f35b)
• runtime-core: unmount v-once children after parent rerenders (#15435) (d720338)
• shared: handle circular references in looseEqual (#15499) (718f782), closes #15496
• shared: preserve comment-like text in style values (#15471) (b9456cb)
• suspense: don't drop nested suspense patches during hydration (#15429) (76d42dc)
• suspense: keep the boundary pending while its branch is patched (#15411) (bfcfe9e), closes #7506
• suspense: patch a hydrating boundary's pending branch in place (#15432) (2cde6f7)
• suspense: unmount the DOM an interrupted async component claimed (#15430) (fb9b45c)
• types: keep optional props when a runtime prop uses a generic PropType (#15523) (243aabc), closes #9546

Commits

• 5be58b4 release: v3.5.43
• 2fde323 fix(compiler-sfc): ignore comment delimiters inside strings and url() when pa...
• 9a1df69 fix(compiler-sfc): prepend semicolon for await in switch case (#15498)
• d6febaa fix(compiler-sfc): reuse parsed parent configs across tsconfig walks (fix #15...
• 8b44b02 chore(deps): update all non-major dependencies (#15244)
• 81836f1 fix(deps): update compiler (#15247)
• 5409708 fix(compiler-sfc): restore await scope when leaving nested blocks
• See full diff in compare view

Updates autoprefixer from 10.5.6 to 10.6.1

Release notes

Sourced from autoprefixer's releases.

10.6.1

• Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

• Added initial-letter support (by @​thomasmattheussen).

Changelog

Sourced from autoprefixer's changelog.

10.6.1

• Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

• Added initial-letter support (by @​thomasmattheussen).

Commits

• c99614d Release 10.6.1 version
• f1d08cb Update dependencies

[github-actions]

Created image with name ghcr.io/pawprintprototyping/membermatters:untrusted-pr-image-PawprintPrototyping-dependabot-npm_and_yarn-src-frontend-minor-and-patch-cc9be22188. WARNING: run this image at your own risk - it was created from a potentially untrusted PR.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Created image with name ghcr.io/pawprintprototyping/membermatters:untrusted-pr-image-PawprintPrototyping-dependabot-npm_and_yarn-src-frontend-minor-and-patch-cc9be22188. WARNING: run this image at your own risk - it was created from a potentially untrusted PR.