chore(deps): bump the minor-and-patch group with 7 updates

[dependabot]

Bumps the minor-and-patch group with 7 updates:

Package	From	To
pinia	2.3.0	2.3.1
@types/node	22.10.5	22.10.7
@vue/eslint-config-prettier	10.1.0	10.2.0
@vue/eslint-config-typescript	14.2.0	14.3.0
postcss	8.4.49	8.5.1
prettier-plugin-tailwindcss	0.6.9	0.6.10
vite	6.0.7	6.0.9

Updates pinia from 2.3.0 to 2.3.1

Commits

• 58a2302 release: [email protected]
• d14e1a7 fix(types): support for Vue 2.7
• fc8c28b chore: up deps
• 47e1ec9 chore: up happy-dom
• a91e06e chore: up rollup
• eb0a1fe chore: up pnpm
• 40d883d ci: fix indent and branch names (#2883)
• d405029 chore: github issues
• c82e089 docs: minor corrections (#2879)
• 2a9fd92 chore: remove repeated changelog (#2874)
• Additional commits viewable in compare view

Updates @types/node from 22.10.5 to 22.10.7

Commits

• See full diff in compare view

Updates @vue/eslint-config-prettier from 10.1.0 to 10.2.0

Release notes

Sourced from @​vue/eslint-config-prettier's releases.

v10.2.0

New Features

• Updated dependency eslint-config-prettier to v10, adding support for @stylistic formatting rules.

Full Changelog: vuejs/eslint-config-prettier@v10.1.0...v10.2.0

Commits

• 757b908 10.2.0
• b849add build: automated publishing to NPM from GitHub
• c4b3586 chore(deps): update dependency eslint-config-prettier to v10 (#31)
• 2c57e45 chore: we don't need typescript as a dev dependency
• b587a81 chore(deps): update all non-major dependencies (#29)
• 3eec6b3 chore: Configure Renovate (#25)
• See full diff in compare view

Updates @vue/eslint-config-typescript from 14.2.0 to 14.3.0

Release notes

Sourced from @​vue/eslint-config-typescript's releases.

v14.3.0

New Features

• A completely new approach to set up the ESLint configurations with helpers like defineConfigWithVueTs and vueTsConfigs. Please read the documentation for more details. With this new API set, you can easily override type-aware linting rules without worrying its position in the config array. Therefore there would be fewer mysterious errors or slowdown in a heavily customized project.

[!NOTE] The old style ...vueTsEslintConfig() still works, there's no need to update to the new style if that has been working well in your project.

Bug Fixes

• fix: typo in index.ts by @​aparajita in vuejs/eslint-config-typescript#128

New Contributors

• @​aparajita made their first contribution in vuejs/eslint-config-typescript#128

Full Changelog: vuejs/eslint-config-typescript@v14.2.0...v14.3.0

Commits

• cdbecf6 14.3.0
• f7bd7b7 feat: a more intuitive way to configure and override (#123)
• 6296f39 fix: typo in index.ts (#128)
• 3a3b13c docs: revert README.md to drop use of defineConfig until it's actually ready
• See full diff in compare view

Updates postcss from 8.4.49 to 8.5.1

Release notes

Sourced from postcss's releases.

8.5.1

• Fixed backwards compatibility for complex cases (by @​romainmenke).

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@​romainmenke during his work on Stylelint added Input#document in additional to Input#css.

root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"

Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

• Tidelift with a Spotify-like subscription model supporting all projects from your lock file.
• Direct donations at GitHub Sponsors or Open Collective.

Changelog

Sourced from postcss's changelog.

8.5.1

• Fixed backwards compatibility for complex cases (by @​romainmenke).

8.5 “Duke Alloces”

• Added Input#document for sources like CSS-in-JS or HTML (by @​romainmenke).

Commits

• 7b02c75 Release 8.5.1 version
• 4c15339 Update dependencies
• 7efe91e Improve backwards compat for Input#document (#2000)
• 6873270 Release 8.5 version
• 4223bb9 Fix 80 columns limit
• 80e2401 Add Input#document (#1996)
• 6f86879 Update dependencies
• 85cbbec Fix pnpm version on CI
• 76caa57 Update dependencies
• 46ff246 Move to pnpm 10
• Additional commits viewable in compare view

Updates prettier-plugin-tailwindcss from 0.6.9 to 0.6.10

Release notes

Sourced from prettier-plugin-tailwindcss's releases.

v0.6.10

• Add support for @zackad/prettier-plugin-twig (#327)
• Drop support for @zackad/prettier-plugin-twig-melody (#327)
• Update Prettier options types (#325)
• Don't remove whitespace inside template literals in Svelte (#332)

Changelog

Sourced from prettier-plugin-tailwindcss's changelog.

[0.6.10] - 2025-01-15

• Add support for @zackad/prettier-plugin-twig (#327)
• Drop support for @zackad/prettier-plugin-twig-melody (#327)
• Update Prettier options types (#325)
• Don't remove whitespace inside template literals in Svelte (#332)

Commits

• b08ed2f 0.6.10
• 9481dd0 Fix erroneous template string whitespace formatting in Svelte (#332)
• a9201df Add missing properties to PluginOptions type (#325)
• 04184b8 Replace support for @zackad/prettier-plugin-twig-melody with `@zackad/prett...
• 90b0253 Sort … class to end of list (#334)
• See full diff in compare view

Updates vite from 6.0.7 to 6.0.9

Release notes

Sourced from vite's releases.

v6.0.9

This version contains a breaking change due to security fixes. See GHSA-vg6x-rcgg-rjx6 for more details.

Please refer to CHANGELOG.md for details.

v6.0.8

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.0.9 (2025-01-20)

• fix!: check host header to prevent DNS rebinding attacks and introduce server.allowedHosts (bd896fb)
• fix!: default server.cors: false to disallow fetching from untrusted origins (b09572a)
• fix: verify token for HMR WebSocket connection (029dcd6)

6.0.8 (2025-01-20)

• fix: avoid SSR HMR for HTML files (#19193) (3bd55bc), closes #19193
• fix: build time display 7m 60s (#19108) (cf0d2c8), closes #19108
• fix: don't resolve URL starting with double slash (#19059) (35942cd), closes #19059
• fix: ensure server.close() only called once (#19204) (db81c2d), closes #19204
• fix: resolve.conditions in ResolvedConfig was defaultServerConditions (#19174) (ad75c56), closes #19174
• fix: tree shake stringified JSON imports (#19189) (f2aed62), closes #19189
• fix: use shared sigterm callback (#19203) (47039f4), closes #19203
• fix(deps): update all non-major dependencies (#19098) (8639538), closes #19098
• fix(optimizer): use correct default install state path for yarn PnP (#19119) (e690d8b), closes #19119
• fix(types): improve ESBuildOptions.include / exclude type to allow readonly (string | RegExp)[] (ea53e70), closes #19146
• chore(deps): update dependency pathe to v2 (#19139) (71506f0), closes #19139

Commits

• a55f8ba release: v6.0.9
• bd896fb fix!: check host header to prevent DNS rebinding attacks and introduce `serve...
• 029dcd6 fix: verify token for HMR WebSocket connection
• b09572a fix!: default server.cors: false to disallow fetching from untrusted origins
• c0f72a6 release: v6.0.8
• f2aed62 fix: tree shake stringified JSON imports (#19189)
• db81c2d fix: ensure server.close() only called once (#19204)
• 47039f4 fix: use shared sigterm callback (#19203)
• 3bd55bc fix: avoid SSR HMR for HTML files (#19193)
• e690d8b fix(optimizer): use correct default install state path for yarn PnP (#19119)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions