Update npm dependencies #472

Open

robbertbos wants to merge 1 commit from renovate/npm into main

pull from: renovate/npm

merge into: robbertbos:main

robbertbos:main

robbertbos:renovate/python

robbertbos:renovate/nldd

robbertbos:renovate/ci

robbertbos:renovate/containers

robbertbos:renovate/postgres-17

robbertbos:renovate/npm-vitest-ui-vulnerability

robbertbos:renovate/npm-vite-vulnerability

robbertbos:renovate/npm-markdown-it-vulnerability

robbertbos:renovate/npm-dev

robbertbos:renovate/python-3.x

robbertbos:renovate/quay.io-keycloak-keycloak-26.7

robbertbos:postvak-reply-drafts

robbertbos:office-document-preview

robbertbos:import-nldd-file-field

Conversation 0 Commits 1 Files changed 2 +212 -125

robbertbos commented 2026-10-04 02:03:01 +00:00

Owner

Copy link

This PR contains the following updates:

Package	Change	Age	Confidence
@​codemirror/language	^6.12.4 → ^6.13.1
@​codemirror/view	^6.43.13 → ^6.43.15
@tanstack/vue-query (source)	^5.104.0 → ^5.104.5
dompurify	^3.4.16 → ^3.4.17
vue (source)	^3.5.43 → ^3.5.44
vue-router (source)	^5.3.1 → ^5.4.0

---

Release Notes

TanStack/query (@​tanstack/vue-query)

v5.104.5

Compare Source

Patch Changes

• Updated dependencies [f608f93]:
  • @​tanstack/query-core@5.104.5

v5.104.4

Compare Source

Patch Changes

• Updated dependencies [1fee044, fce89dd]:
  • @​tanstack/query-core@5.104.4

v5.104.3

Compare Source

Patch Changes

• Updated dependencies [0f15bc9]:
  • @​tanstack/query-core@5.104.3

v5.104.2

Compare Source

Patch Changes

• #​11796 69e114a - Export the MutationResult type so inferred useMutation return types can be named when emitting declarations
• Updated dependencies [03e8c39]:
  • @​tanstack/query-core@5.104.2

v5.104.1

Compare Source

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@5.104.1

cure53/DOMPurify (dompurify)

v3.4.17: DOMPurify 3.4.17

Compare Source

• Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @​manus-pi
• Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @​uttej-badwane
• Fixed the SMIL attributeName guard in XHTML mode, thanks @​Koukyosyumei
• Hardened several smaller edge cases (namespaces, literal-text elements, isValidAttribute()), thanks @​artiphishell
• Added a purify-edge test runner as a compatibility check, thanks @​anzal1
• Clarified the IN_PLACE documentation in the README about possible risks
• Updated several dependencies

vuejs/core (vue)

v3.5.44

Compare Source

Bug Fixes

• compat: expose _setupProxy for Vue 2.7 compiled script setup (fix #​11164) (#​15618) (f08059d)
• compiler-core: parenthesise v-for key in v-memo cache guard (#​15724) (d084b90), closes #​15723
• compiler-dom: correctly stringify 0 and false in v-html (#​15571) (9f3b437)
• compiler-dom: inject transition persisted for v-show in production (#​15783) (89cb272)
• compiler-sfc: error when defineModel prop options reference a destructured prop (#​15604) (38012a5), closes #​15602
• custom-element: skip mounting an async custom element removed while its component loads (#​15777) (0f8e7b4), closes #​15775
• hydration: observe children of a display: contents root in hydrateOnVisible (#​15773) (7f688e8)
• KeepAlive: unmount pruned current component when its vnode was cloned on mount (#​15711) (92798ac), closes #​15710
• reactivity: avoid mutating native array iterators (#​15703) (7f9d45d), closes #​15643
• reactivity: do not track deps in watcher callbacks run inside another effect (#​15782) (db00fe9), closes #​5009
• reactivity: once watcher should stop when its callback throws (#​15755) (ae4bd94)
• reactivity: preserve shallow collection semantics (#​15793) (b600466), closes #​15792
• runtime-core: detect new prop keys when comparing full props (#​15634) (702fa61), closes #​15632
• runtime-core: keep async placeholder for block patching and pending component updates (#​15554) (05ec25f), closes #​15551
• runtime-core: only flush jobs queued by the root render itself (#​15757) (0bea14b), closes #​6728
• runtime-core: render nothing for an invalid v-for range in production (#​15742) (ad19e7d)
• runtime-dom: preserve v-show display for unchanged style strings (#​15794) (c0a6d3f)
• runtime-dom: treat playsinline as a boolean attribute (#​15627) (a084e44)
• server-renderer: propagate async setup errors (#​15857) (6930374), closes #​15716
• ssr: honor falsy vnode content overrides (#​15769) (c11c5c8)
• suspense: mount resolved async component with its own namespace (#​15640) (2a086a2), closes #​15639
• suspense: skip rendering async components unmounted while pending (4ab865a)
• teleport: move targetStart and keep children before targetAnchor (#​15818) (d3c6e02), closes #​15817
• transition-group: measure nested groups against their moving outer item (#​15848) (1936c87), closes #​5385 #​1531
• transition: handle comment-wrapped component roots (#​15853) (ff35014), closes #​6080 #​5500

vuejs/router (vue-router)

v5.4.0

Compare Source

   🚨 Breaking Changes

• experimental: Normalize query values to arrays  -  by @​posva in #​2824 (f1fbc)

   🚀 Features

• Accept a prebuilt matcher in createRouter  -  by @​danielroe in #​2804 (9de96)
• UseScrollRestoration and onRouteRendered  -  by @​posva in #​2805 (e3dde)
• Diagnose experimental beforeEnter migration  -  by @​posva (b695c)
• experimental:
  • Warn about legacy optional param removal  -  by @​posva in #​2818 (c2f92)
  • Extract hash params with definePage  -  by @​posva (dbf2d)
  • Configure required and default hash params  -  by @​posva (cef5c)
  • Never decode the hash, protect-only encoding  -  by @​posva in #​2760 (aca2c)
  • Allow custom regexp for path params in definePage  -  by @​posva in #​2822 (3a192)
• router:
  • Restore hashes and top by default  -  by @​posva (7c385)

   🐞 Bug Fixes

• Resolve experimental guard redirects against target on history navigation  -  by @​posva (2c5fb)
• experimental:
  • Keep declared case of static prefix in MatcherPatternPathStar.build()  -  by @​contactjawad in #​2798 (4dc6b)
  • Make hash params optional and nullable  -  by @​posva (d9a4c)
  • Exclude defaults from required hash params  -  by @​posva (346e2)
  • Align hash parameter parsing with queries  -  by @​posva (cf251)
  • Keep last hash param instead of throwing  -  by @​posva (d1e8a)
  • Disallow required with a default for query params  -  by @​posva (f60e9)
  • Make query params with a default optional on push  -  by @​posva (fb604)
  • Do not inherit params, query, or hash on redirects  -  by @​posva (02a92)
• history:
  • Invalidate obsolete scroll positions  -  by @​posva and @​liuly0322 in #​2814 (071f1)
• unplugin:
  • Sanitize named view in definePage import  -  by @​giaBaoJS in #​2809 (0711d)
  • Keep hex character codes in param segments regexp  -  by @​kwy404 in #​2811 (07663)

   🏎 Performance

• unplugin: Cache merged route overrides  -  by @​posva in #​2821 (732b7)

    View changes on GitHub

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • "before 6am on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | @&#8203;codemirror/language | [`^6.12.4` → `^6.13.1`](https://renovatebot.com/diffs/npm/@codemirror%2flanguage/6.12.4/6.13.1) |  |  | | @&#8203;codemirror/view | [`^6.43.13` → `^6.43.15`](https://renovatebot.com/diffs/npm/@codemirror%2fview/6.43.13/6.43.15) |  |  | | [@tanstack/vue-query](https://tanstack.com/query) ([source](https://github.com/TanStack/query/tree/HEAD/packages/vue-query)) | [`^5.104.0` → `^5.104.5`](https://renovatebot.com/diffs/npm/@tanstack%2fvue-query/5.104.0/5.104.5) |  |  | | [dompurify](https://github.com/cure53/DOMPurify) | [`^3.4.16` → `^3.4.17`](https://renovatebot.com/diffs/npm/dompurify/3.4.16/3.4.17) |  |  | | [vue](https://vuejs.org/) ([source](https://github.com/vuejs/core)) | [`^3.5.43` → `^3.5.44`](https://renovatebot.com/diffs/npm/vue/3.5.43/3.5.44) |  |  | | [vue-router](https://router.vuejs.org) ([source](https://github.com/vuejs/router)) | [`^5.3.1` → `^5.4.0`](https://renovatebot.com/diffs/npm/vue-router/5.3.1/5.4.0) |  |  | --- ### Release Notes <details> <summary>TanStack/query (@&#8203;tanstack/vue-query)</summary> ### [`v5.104.5`](https://github.com/TanStack/query/blob/HEAD/packages/vue-query/CHANGELOG.md#51045) [Compare Source](https://github.com/TanStack/query/compare/@tanstack/vue-query@5.104.4...@tanstack/vue-query@5.104.5) ##### Patch Changes - Updated dependencies \[[`f608f93`](https://github.com/TanStack/query/commit/f608f933a36da30670082e90d0a56b2569290563)]: - [@&#8203;tanstack/query-core](https://github.com/tanstack/query-core)@5.104.5 ### [`v5.104.4`](https://github.com/TanStack/query/blob/HEAD/packages/vue-query/CHANGELOG.md#51044) [Compare Source](https://github.com/TanStack/query/compare/@tanstack/vue-query@5.104.3...@tanstack/vue-query@5.104.4) ##### Patch Changes - Updated dependencies \[[`1fee044`](https://github.com/TanStack/query/commit/1fee0443dbeb346b8401557ca286a66cdec7ad71), [`fce89dd`](https://github.com/TanStack/query/commit/fce89ddf7a35b14252096ff64a1217efd81b415c)]: - [@&#8203;tanstack/query-core](https://github.com/tanstack/query-core)@5.104.4 ### [`v5.104.3`](https://github.com/TanStack/query/blob/HEAD/packages/vue-query/CHANGELOG.md#51043) [Compare Source](https://github.com/TanStack/query/compare/@tanstack/vue-query@5.104.2...@tanstack/vue-query@5.104.3) ##### Patch Changes - Updated dependencies \[[`0f15bc9`](https://github.com/TanStack/query/commit/0f15bc925db5813be6a17527988ec7d7b3c8cfc0)]: - [@&#8203;tanstack/query-core](https://github.com/tanstack/query-core)@5.104.3 ### [`v5.104.2`](https://github.com/TanStack/query/blob/HEAD/packages/vue-query/CHANGELOG.md#51042) [Compare Source](https://github.com/TanStack/query/compare/@tanstack/vue-query@5.104.1...@tanstack/vue-query@5.104.2) ##### Patch Changes - [#&#8203;11796](https://github.com/TanStack/query/pull/11796) [`69e114a`](https://github.com/TanStack/query/commit/69e114aecfdbd0a05625065aea4e43415fa386b3) - Export the `MutationResult` type so inferred `useMutation` return types can be named when emitting declarations - Updated dependencies \[[`03e8c39`](https://github.com/TanStack/query/commit/03e8c3955ddbf20f0a07b79982b52dfad8df5323)]: - [@&#8203;tanstack/query-core](https://github.com/tanstack/query-core)@5.104.2 ### [`v5.104.1`](https://github.com/TanStack/query/blob/HEAD/packages/vue-query/CHANGELOG.md#51041) [Compare Source](https://github.com/TanStack/query/compare/@tanstack/vue-query@5.104.0...@tanstack/vue-query@5.104.1) ##### Patch Changes - Updated dependencies \[]: - [@&#8203;tanstack/query-core](https://github.com/tanstack/query-core)@5.104.1 </details> <details> <summary>cure53/DOMPurify (dompurify)</summary> ### [`v3.4.17`](https://github.com/cure53/DOMPurify/releases/tag/3.4.17): DOMPurify 3.4.17 [Compare Source](https://github.com/cure53/DOMPurify/compare/3.4.16...3.4.17) - Fixed an issue with `IN_PLACE`, `SAFE_FOR_TEMPLATES` and shadow roots, thanks [@&#8203;manus-pi](https://github.com/manus-pi) - Fixed `IN_PLACE` handling of nodes that hooks or custom elements tough during sanitization, thanks [@&#8203;uttej-badwane](https://github.com/uttej-badwane) - Fixed the SMIL `attributeName` guard in XHTML mode, thanks [@&#8203;Koukyosyumei](https://github.com/Koukyosyumei) - Hardened several smaller edge cases (namespaces, literal-text elements, `isValidAttribute()`), thanks [@&#8203;artiphishell](https://github.com/artiphishell) - Added a purify-edge test runner as a compatibility check, thanks [@&#8203;anzal1](https://github.com/anzal1) - Clarified the `IN_PLACE` documentation in the README about possible risks - Updated several dependencies </details> <details> <summary>vuejs/core (vue)</summary> ### [`v3.5.44`](https://github.com/vuejs/core/blob/HEAD/CHANGELOG.md#3544-2026-10-13) [Compare Source](https://github.com/vuejs/core/compare/v3.5.43...v3.5.44) ##### Bug Fixes - **compat:** expose \_setupProxy for Vue 2.7 compiled script setup (fix [#&#8203;11164](https://github.com/vuejs/core/issues/11164)) ([#&#8203;15618](https://github.com/vuejs/core/issues/15618)) ([f08059d](https://github.com/vuejs/core/commit/f08059d0ca8cf28b8258a6095f8760fa1804d333)) - **compiler-core:** parenthesise v-for key in v-memo cache guard ([#&#8203;15724](https://github.com/vuejs/core/issues/15724)) ([d084b90](https://github.com/vuejs/core/commit/d084b904903a7710ea19b7256b7c681e838eb63e)), closes [#&#8203;15723](https://github.com/vuejs/core/issues/15723) - **compiler-dom:** correctly stringify `0` and `false` in `v-html` ([#&#8203;15571](https://github.com/vuejs/core/issues/15571)) ([9f3b437](https://github.com/vuejs/core/commit/9f3b4377c4bb5ff32b35ff08ce7670f6be6f5dbb)) - **compiler-dom:** inject transition persisted for v-show in production ([#&#8203;15783](https://github.com/vuejs/core/issues/15783)) ([89cb272](https://github.com/vuejs/core/commit/89cb2724bf3423fc38dca68af3139d736e6b4833)) - **compiler-sfc:** error when defineModel prop options reference a destructured prop ([#&#8203;15604](https://github.com/vuejs/core/issues/15604)) ([38012a5](https://github.com/vuejs/core/commit/38012a5ad90a41c228e153774d089cba9515cf2d)), closes [#&#8203;15602](https://github.com/vuejs/core/issues/15602) - **custom-element:** skip mounting an async custom element removed while its component loads ([#&#8203;15777](https://github.com/vuejs/core/issues/15777)) ([0f8e7b4](https://github.com/vuejs/core/commit/0f8e7b40175059e262e0db232ae0c08b427486b5)), closes [#&#8203;15775](https://github.com/vuejs/core/issues/15775) - **hydration:** observe children of a display: contents root in hydrateOnVisible ([#&#8203;15773](https://github.com/vuejs/core/issues/15773)) ([7f688e8](https://github.com/vuejs/core/commit/7f688e84745558d95b836c0aac25c3ca3257e943)) - **KeepAlive:** unmount pruned current component when its vnode was cloned on mount ([#&#8203;15711](https://github.com/vuejs/core/issues/15711)) ([92798ac](https://github.com/vuejs/core/commit/92798ac0a8810283055478dab1e54569f3e94c23)), closes [#&#8203;15710](https://github.com/vuejs/core/issues/15710) - **reactivity:** avoid mutating native array iterators ([#&#8203;15703](https://github.com/vuejs/core/issues/15703)) ([7f9d45d](https://github.com/vuejs/core/commit/7f9d45d15bd10b6b9b136eb2b3a8879b449fec0d)), closes [#&#8203;15643](https://github.com/vuejs/core/issues/15643) - **reactivity:** do not track deps in watcher callbacks run inside another effect ([#&#8203;15782](https://github.com/vuejs/core/issues/15782)) ([db00fe9](https://github.com/vuejs/core/commit/db00fe9819eb17f0a5bde7e1fcfafe5984e267a3)), closes [#&#8203;5009](https://github.com/vuejs/core/issues/5009) - **reactivity:** once watcher should stop when its callback throws ([#&#8203;15755](https://github.com/vuejs/core/issues/15755)) ([ae4bd94](https://github.com/vuejs/core/commit/ae4bd94b6e5675f991696236dcc76a11d0597535)) - **reactivity:** preserve shallow collection semantics ([#&#8203;15793](https://github.com/vuejs/core/issues/15793)) ([b600466](https://github.com/vuejs/core/commit/b600466135e0910d142d14f56ffec933c1c420a2)), closes [#&#8203;15792](https://github.com/vuejs/core/issues/15792) - **runtime-core:** detect new prop keys when comparing full props ([#&#8203;15634](https://github.com/vuejs/core/issues/15634)) ([702fa61](https://github.com/vuejs/core/commit/702fa61be9344852989bcd178681adec13264469)), closes [#&#8203;15632](https://github.com/vuejs/core/issues/15632) - **runtime-core:** keep async placeholder for block patching and pending component updates ([#&#8203;15554](https://github.com/vuejs/core/issues/15554)) ([05ec25f](https://github.com/vuejs/core/commit/05ec25f835cc65058bac7a85e4a5eb8075ed3151)), closes [#&#8203;15551](https://github.com/vuejs/core/issues/15551) - **runtime-core:** only flush jobs queued by the root render itself ([#&#8203;15757](https://github.com/vuejs/core/issues/15757)) ([0bea14b](https://github.com/vuejs/core/commit/0bea14b962f1f6e27d2d994132efc2269945ab0f)), closes [#&#8203;6728](https://github.com/vuejs/core/issues/6728) - **runtime-core:** render nothing for an invalid v-for range in production ([#&#8203;15742](https://github.com/vuejs/core/issues/15742)) ([ad19e7d](https://github.com/vuejs/core/commit/ad19e7da3d58b772513ba3c2ded731eedb7d227d)) - **runtime-dom:** preserve v-show display for unchanged style strings ([#&#8203;15794](https://github.com/vuejs/core/issues/15794)) ([c0a6d3f](https://github.com/vuejs/core/commit/c0a6d3f2bbf80cf930f4c837409dbee95a149271)) - **runtime-dom:** treat playsinline as a boolean attribute ([#&#8203;15627](https://github.com/vuejs/core/issues/15627)) ([a084e44](https://github.com/vuejs/core/commit/a084e4486f1c4dc118518d43a1c7547031c53a5c)) - **server-renderer:** propagate async setup errors ([#&#8203;15857](https://github.com/vuejs/core/issues/15857)) ([6930374](https://github.com/vuejs/core/commit/693037486f38b3d3acf4cdf7b9850917c44cf9cb)), closes [#&#8203;15716](https://github.com/vuejs/core/issues/15716) - **ssr:** honor falsy vnode content overrides ([#&#8203;15769](https://github.com/vuejs/core/issues/15769)) ([c11c5c8](https://github.com/vuejs/core/commit/c11c5c8f07c8527b537b9ce6d801f80bbdd12129)) - **suspense:** mount resolved async component with its own namespace ([#&#8203;15640](https://github.com/vuejs/core/issues/15640)) ([2a086a2](https://github.com/vuejs/core/commit/2a086a2bee33abc30e20f8a3b0a2be418ae48967)), closes [#&#8203;15639](https://github.com/vuejs/core/issues/15639) - **suspense:** skip rendering async components unmounted while pending ([4ab865a](https://github.com/vuejs/core/commit/4ab865a848a1da3d10fb674f857e5fff13094644)) - **teleport:** move targetStart and keep children before targetAnchor ([#&#8203;15818](https://github.com/vuejs/core/issues/15818)) ([d3c6e02](https://github.com/vuejs/core/commit/d3c6e02e7405b9dafa75b1007ca45fb376d45729)), closes [#&#8203;15817](https://github.com/vuejs/core/issues/15817) - **transition-group:** measure nested groups against their moving outer item ([#&#8203;15848](https://github.com/vuejs/core/issues/15848)) ([1936c87](https://github.com/vuejs/core/commit/1936c8791b61374fd21a99c99f450ee2b057b33e)), closes [#&#8203;5385](https://github.com/vuejs/core/issues/5385) [#&#8203;1531](https://github.com/vuejs/core/issues/1531) - **transition:** handle comment-wrapped component roots ([#&#8203;15853](https://github.com/vuejs/core/issues/15853)) ([ff35014](https://github.com/vuejs/core/commit/ff3501429d4970c37194708b055492a56d9e5be5)), closes [#&#8203;6080](https://github.com/vuejs/core/issues/6080) [#&#8203;5500](https://github.com/vuejs/core/issues/5500) </details> <details> <summary>vuejs/router (vue-router)</summary> ### [`v5.4.0`](https://github.com/vuejs/router/releases/tag/v5.4.0) [Compare Source](https://github.com/vuejs/router/compare/v5.3.1...v5.4.0) #####    🚨 Breaking Changes - **experimental**: Normalize query values to arrays  -  by [@&#8203;posva](https://github.com/posva) in [#&#8203;2824](https://github.com/vuejs/router/issues/2824) [<samp>(f1fbc)</samp>](https://github.com/vuejs/router/commit/f1fbc067) #####    🚀 Features - Accept a prebuilt matcher in `createRouter`  -  by [@&#8203;danielroe](https://github.com/danielroe) in [#&#8203;2804](https://github.com/vuejs/router/issues/2804) [<samp>(9de96)</samp>](https://github.com/vuejs/router/commit/9de967f4) - UseScrollRestoration and onRouteRendered  -  by [@&#8203;posva](https://github.com/posva) in [#&#8203;2805](https://github.com/vuejs/router/issues/2805) [<samp>(e3dde)</samp>](https://github.com/vuejs/router/commit/e3dde5eb) - Diagnose experimental beforeEnter migration  -  by [@&#8203;posva](https://github.com/posva) [<samp>(b695c)</samp>](https://github.com/vuejs/router/commit/b695cd0f) - **experimental**: - Warn about legacy optional param removal  -  by [@&#8203;posva](https://github.com/posva) in [#&#8203;2818](https://github.com/vuejs/router/issues/2818) [<samp>(c2f92)</samp>](https://github.com/vuejs/router/commit/c2f92a4d) - Extract hash params with definePage  -  by [@&#8203;posva](https://github.com/posva) [<samp>(dbf2d)</samp>](https://github.com/vuejs/router/commit/dbf2d9e2) - Configure required and default hash params  -  by [@&#8203;posva](https://github.com/posva) [<samp>(cef5c)</samp>](https://github.com/vuejs/router/commit/cef5cfae) - Never decode the hash, protect-only encoding  -  by [@&#8203;posva](https://github.com/posva) in [#&#8203;2760](https://github.com/vuejs/router/issues/2760) [<samp>(aca2c)</samp>](https://github.com/vuejs/router/commit/aca2c83a) - Allow custom regexp for path params in definePage  -  by [@&#8203;posva](https://github.com/posva) in [#&#8203;2822](https://github.com/vuejs/router/issues/2822) [<samp>(3a192)</samp>](https://github.com/vuejs/router/commit/3a192ad1) - **router**: - Restore hashes and top by default  -  by [@&#8203;posva](https://github.com/posva) [<samp>(7c385)</samp>](https://github.com/vuejs/router/commit/7c3851f8) #####    🐞 Bug Fixes - Resolve experimental guard redirects against target on history navigation  -  by [@&#8203;posva](https://github.com/posva) [<samp>(2c5fb)</samp>](https://github.com/vuejs/router/commit/2c5fbd63) - **experimental**: - Keep declared case of static prefix in MatcherPatternPathStar.build()  -  by [@&#8203;contactjawad](https://github.com/contactjawad) in [#&#8203;2798](https://github.com/vuejs/router/issues/2798) [<samp>(4dc6b)</samp>](https://github.com/vuejs/router/commit/4dc6bfa1) - Make hash params optional and nullable  -  by [@&#8203;posva](https://github.com/posva) [<samp>(d9a4c)</samp>](https://github.com/vuejs/router/commit/d9a4ceb0) - Exclude defaults from required hash params  -  by [@&#8203;posva](https://github.com/posva) [<samp>(346e2)</samp>](https://github.com/vuejs/router/commit/346e2cde) - Align hash parameter parsing with queries  -  by [@&#8203;posva](https://github.com/posva) [<samp>(cf251)</samp>](https://github.com/vuejs/router/commit/cf25179f) - Keep last hash param instead of throwing  -  by [@&#8203;posva](https://github.com/posva) [<samp>(d1e8a)</samp>](https://github.com/vuejs/router/commit/d1e8ac17) - Disallow required with a default for query params  -  by [@&#8203;posva](https://github.com/posva) [<samp>(f60e9)</samp>](https://github.com/vuejs/router/commit/f60e9e37) - Make query params with a default optional on push  -  by [@&#8203;posva](https://github.com/posva) [<samp>(fb604)</samp>](https://github.com/vuejs/router/commit/fb604ea6) - Do not inherit params, query, or hash on redirects  -  by [@&#8203;posva](https://github.com/posva) [<samp>(02a92)</samp>](https://github.com/vuejs/router/commit/02a92656) - **history**: - Invalidate obsolete scroll positions  -  by [@&#8203;posva](https://github.com/posva) and [@&#8203;liuly0322](https://github.com/liuly0322) in [#&#8203;2814](https://github.com/vuejs/router/issues/2814) [<samp>(071f1)</samp>](https://github.com/vuejs/router/commit/071f1969) - **unplugin**: - Sanitize named view in definePage import  -  by [@&#8203;giaBaoJS](https://github.com/giaBaoJS) in [#&#8203;2809](https://github.com/vuejs/router/issues/2809) [<samp>(0711d)</samp>](https://github.com/vuejs/router/commit/0711dff9) - Keep hex character codes in param segments regexp  -  by [@&#8203;kwy404](https://github.com/kwy404) in [#&#8203;2811](https://github.com/vuejs/router/issues/2811) [<samp>(07663)</samp>](https://github.com/vuejs/router/commit/07663eb6) #####    🏎 Performance - **unplugin**: Cache merged route overrides  -  by [@&#8203;posva](https://github.com/posva) in [#&#8203;2821](https://github.com/vuejs/router/issues/2821) [<samp>(732b7)</samp>](https://github.com/vuejs/router/commit/732b723e) #####     [View changes on GitHub](https://github.com/vuejs/router/compare/v5.3.1...v5.4.0) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Amsterdam) - Branch creation - "before 6am on sunday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMTUuMTAiLCJ1cGRhdGVkSW5WZXIiOiI0NC4xMTUuMTAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->

robbertbos added 1 commit 2026-10-04 02:03:01 +00:00

Update dependency @tanstack/vue-query to ^5.104.1 d21bf55486

robbertbos force-pushed renovate/npm from d21bf55486 to 002a30c786 2026-10-08 02:02:37 +00:00 Compare

robbertbos changed title from Update dependency @tanstack/vue-query to ^5.104.1 to Update npm dependencies 2026-10-08 02:03:24 +00:00

robbertbos force-pushed renovate/npm from 002a30c786 to 645b4e8417 2026-10-12 02:08:52 +00:00 Compare

robbertbos force-pushed renovate/npm from 645b4e8417 to d662026f64 2026-10-13 02:09:09 +00:00 Compare

robbertbos force-pushed renovate/npm from d662026f64 to 32102721b4 2026-10-14 02:09:07 +00:00 Compare

robbertbos force-pushed renovate/npm from 32102721b4 to 65f5110cb8 2026-10-16 02:09:49 +00:00 Compare

robbertbos force-pushed renovate/npm from 65f5110cb8 to 1969a8239d 2026-10-18 02:10:51 +00:00 Compare

robbertbos force-pushed renovate/npm from 1969a8239d to 3d635d79b6 2026-10-20 02:10:38 +00:00 Compare

Some checks failed

Hide all checks

CI / pre-commit (pull_request) Successful in 2m23s

Required

Details

CI / frontend-test (pull_request) Failing after 5m47s

Required

Details

CI / release-scripts (pull_request) Failing after 17s

Required

Details

security-scan / Python SCA (pip-audit) (pull_request) Failing after 51s

Required

Details

security-scan / Python SAST (bandit) (pull_request) Successful in 32s

Required

Details

security-scan / JS SCA (npm audit) (pull_request) Successful in 34s

Required

Details

security-scan / Filesystem scan (trivy fs) (pull_request) Successful in 26s

Required

Details

security-scan / SBOM (trivy) (pull_request) Successful in 15s

Required

Details

test-build / build (backend) (pull_request) Successful in 2m16s

Required

Details

test-build / build (frontend) (pull_request) Successful in 2m26s

Required

Details

test-build / build (pull_request) Successful in 0s

Required

Details

CI / backend-test (pull_request) Successful in 27m11s

Required

Details

CI / e2e (pull_request) Successful in 22m33s

Required

Details

Some required checks were not successful.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/npm:renovate/npm

git switch renovate/npm

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

bug

Something is not working

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

help wanted

Need some help

  

invalid

Something is wrong

  

nldd ds

  

question

More information is needed

  

wontfix

This won't be fixed

No labels

bug

duplicate

enhancement

help wanted

invalid

nldd ds

question

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

robbertbos/waggle!472

No description provided.