[dependabot]

Bumps the client-v3-npm group with 6 updates in the /client-v3 directory:

Package	From	To
bootstrap-vue-next	1.2.2	1.2.3
vue	3.5.44	3.5.45
@playwright/test	1.64.1	1.65.0
sass	1.107.1	1.108.1
vite	8.3.5	8.3.6
vue-eslint-parser	10.4.1	10.4.2

Updates bootstrap-vue-next from 1.2.2 to 1.2.3

Release notes

Sourced from bootstrap-vue-next's releases.

bootstrapvuenext: v1.2.3

1.2.3 (2026-11-06)

Bug Fixes

• orchestrator: settle show() and destroy() for items dismissed before they mount Fixes #3338 (5c467a3)

Changelog

Sourced from bootstrap-vue-next's changelog.

1.2.3 (2026-11-06)

Bug Fixes

• orchestrator: settle show() and destroy() for items dismissed before they mount Fixes #3338 (5c467a3)

Commits

• 8b43c00 chore(main): release bootstrapvuenext 1.2.3 (#3368)
• 5c467a3 fix(orchestrator): settle show() and destroy() for items dismissed before the...
• See full diff in compare view

Updates vue from 3.5.44 to 3.5.45

Release notes

Sourced from vue's releases.

v3.5.45

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.45 (2026-11-05)

Bug Fixes

• compiler-core: copy loc in cloneLoc instead of recomputing it (#16092) (3cee79a), closes #16091
• compiler-dom: preserve static boolean binding semantics (#16055) (05db7e8), closes #16051
• compiler-sfc: respect catch and switch lexical scopes (fix #16098) (#16101) (0f20152)
• hmr: retry reloads after pending async roots resolve (#16060) (fbaa794)
• hydration: only update component el when replacing its host node (#16001) (51fd0cb)
• KeepAlive: cache a resolved Suspense child right away (#16119) (716a29e)
• KeepAlive: unmount a child deactivated before it was cached (#15981) (02d2c2b)
• reactivity: run onScopeDispose in a stopped scope (#16108) (21dd33c)
• runtime-core: anchor on the async placeholder when a component root has no el (#16122) (b5abf8c)
• runtime-core: call directive mounted hooks with the latest binding (#16120) (6416207), closes #12460 #12482
• runtime-core: remove the placeholder of an unmounted pending async component (#15982) (2b9a0bb)
• runtime-core: render nothing for a component whose async setup rejects (#16111) (f64bfa5)
• runtime-core: skip stopped error boundaries for async failures (#16061) (0326ed8)
• runtime-dom: treat disablepictureinpicture and disableremoteplayback as boolean attributes (#15952) (ef81ddc)
• suspense: do not mount the fallback after the boundary is unmounted (#15939) (4fd6a6b)
• suspense: drop the unmount hooks of a pending branch when the boundary is unmounted (d04b662)
• suspense: enter transitions nested in the pending branch on reveal (#16121) (b8074de), closes #12435 #15294
• suspense: keep a discarded component marked unmounted (1dc8cdf)
• suspense: keep the async root update retry across a discarded pending branch (#16107) (06bea73)
• suspense: keep the internal cleanup of a discarded component (79b80b7)
• suspense: keep the timeout counting when the root is switched again while pending (#16143) (a045acd)
• suspense: patch same-root updates of nested boundaries in retained content (#16109) (2dbcea8), closes #15878
• suspense: release parent dep on suspensible unmount (#15870) (46e5dbf)
• suspense: resolve async deps whose pending cycle was discarded (#15980) (f7d0811)
• suspense: resolve the boundary when an async setup rejects without an error handler in dev (#16110) (a14aa0b)
• suspense: skip a root replacement in a retained nested boundary showing its fallback (#16125) (a47af77)
• suspense: skip the out-in afterLeave of an unmounted boundary (#16115) (85e71c0), closes #11037 #11059
• transition: handle leave immediately done in out-in mode (#11824) (70599b5), closes #15727
• transition: switch modes around a keyed suspense boundary (#16124) (ff0b341)
• types: add dialog closedby attribute (#16064) (24c9d0b)
• v-model: respect number modifier for Set select values (0ff253b)

Performance Improvements

• compiler-sfc: skip unused tsconfig include enumeration (#15899) (1612403), closes #15898
• compiler-ssr: render static style attributes at compile time (#16010) (2629c89)
• mark internal initializers as pure (#16012) (34fbeb1)
• runtime-core: copy raw attrs when setup context attrs are passed as vnode props (#16129) (823c744)

Commits

• 8b479a8 release: v3.5.45
• 9f9b71c chore(deps): bump source-map-js from 1.2.1 to 1.2.2 (#16150)
• 1d718d2 chore(deps): update dependency @​types/node to v26 (#16087)
• 68583ce chore(deps): bump undici from 8.9.0 to 8.12.3 (#16149)
• 91f2625 chore(deps): bump fast-uri from 3.1.0 to 3.1.9 (#16148)
• a8ab1f8 chore(deps): update build (#15918)
• a0d1388 chore(deps): update dependency minimatch to v11 [security] (#16145)
• 923f70d fix(deps): update compiler (#15920)
• 3cb1161 chore(deps): update lint (#15921)
• 0ce9e16 chore(deps): update dawidd6/action-download-artifact action to v28 (#16086)
• Additional commits viewable in compare view

Updates @playwright/test from 1.64.1 to 1.65.0

Release notes

Sourced from @​playwright/test's releases.

v1.65.0

🥟 Run tests with Bun

The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js:

bunx --bun playwright test

Our CI runs the test runner tests under Bun 1.4.3 on Linux. Some features work differently under Bun:

• There is no watch mode. UI mode does not run tests again when files change, and --only-changed does not follow imports.
• Bun loads modules itself, so --tsconfig and the JSX options in tsconfig.json have no effect, and custom ESM loaders are not supported.
• Stack traces do not include async frames, and API names do not include the class name: click instead of locator.click. This changes some step locations, step titles and error messages.
• Console output of a test does not get into the trace and UI mode.

🚨 Reports with only failures

New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output.

New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
reporter: [
['failures'],
['html', { onlyFailures: true }],
],
});

🎯 Test runner

• New built-in -exclusive- test lock runs a test only when no other tests are running. All other tests continue to run in parallel with each other:

  test('restart the server', { lock: '-exclusive-' }, async () => {
    // No other test runs while this one is running.
  });

• test.skip(), test.fixme(), test.fail() and test.slow() now accept only a description. It is recorded in the test annotation:

  test('upload a file', async ({ page }) => {
    test.skip('Not implemented yet');
  });

... (truncated)

Commits

• a1f35e1 chore: mark v1.65.0 (#43925)
• a99c1ab cherry-pick(#43918): Revert "fix(docker): use latest stable Chrome for Testin...
• 6f9a7f5 cherry-pick(#43914): docs(release-notes): update Chromium version for 1.65
• daf93bb cherry-pick(#43912): feat(chromium): roll to r1254
• 6545e89 cherry-pick(#43902): chore(deps): bump runtime deps
• 0347448 fix(test runner): track shared ESM dependencies for only-changed (#43837)
• 86e6924 fix(clock): cancel real-time timer when replay ends paused (#43873)
• d745ae0 fix(route): wait for all active handlers before disabling interception (#43889)
• 6e3f5ff docs: release notes for v1.65 (#43874)
• aa33d27 fix(chromium): honor Linux config directories for channel connections (#43884)
• Additional commits viewable in compare view

Updates sass from 1.107.1 to 1.108.1

Release notes

Sourced from sass's releases.

Dart Sass 1.108.1

To install Sass 1.108.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Node.js Embedded Host

• Fix an issue in the release process causing the OS-specific embedded Sass packages to be missing their Dart Sass snapshots.

See the full changelog for changes in earlier releases.

Dart Sass 1.108.0

To install Sass 1.108.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Undo some unintentional breaking changes added in 1.106.0 relating to how escaped identifiers interact with sass:meta functions and named rest arguments.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.108.1

Node.js Embedded Host

• Fix an issue in the release process causing the OS-specific embedded Sass packages to be missing their Dart Sass snapshots.

1.108.0

• Undo some unintentional breaking changes added in 1.106.0 relating to how escaped identifiers interact with sass:meta functions and named rest arguments.

Commits

• 524dc18 Bump version and add changelog for embedded-host-node#459 (#2911)
• f7d5775 Bump zizmorcore/zizmor-action from 0.6.4 to 0.8.0 (#2905)
• 2cff27c Bump postcss from 8.5.31 to 8.5.32 in /pkg/sass-parser (#2906)
• ae65617 Lock Foundation tests to the v6 branch (#2909)
• c59636a Fix escape behavior changes with reflection added in 1.106 (#2908)
• See full diff in compare view

Updates vite from 8.3.5 to 8.3.6

Release notes

Sourced from vite's releases.

v8.3.6

Bug Fixes

• await overlapping plugin container close calls (#23935) (175bbeb)
• build: resolve dynamic imports with queries appended when collecting CSS dependencies (#23909) (df36558)
• build: use stable module ids in chunk import map hash signatures (fix #23975) (#23976) (8069835)
• bundled-dev: allow named imports from Node built-ins (#23858) (4260c75)
• bundled-dev: reload when hmr cannot run an entry again (#23849) (a236886)
• deps: update @rollup/plugin-alias to v6.0.1 (#23862) (67c965b)
• deps: update all non-major dependencies (#23896) (46b91c5)
• deps: update all non-major dependencies (#23966) (b3cb057)
• deps: update rolldown-related dependencies (#23868) (a63eb87)
• deps: update rolldown-related dependencies (#23967) (0105733)
• dev: escape ANSI escape sequence for server.forwardConsole (#23933) (4f340fd)
• html: remove adjacent module tags on the first line (#23823) (eab1dc2)
• ignore pnpm's .modules.yaml as a Vite Task input (#23634) (95c2daf)
• optimizer: detect cache dir precisely (#23912) (cc9bc21)
• optimizer: resolve subpath imports (#) with Vite's resolver (#23959) (0fdd81e)
• respect build.sourcemap from environment (#23879) (82e7aa0)
• server: escape HTML attributes (#23995) (a270391)
• server: preserve $ patterns in static alias replacements (#23703) (1b6ed05)
• ssr: convert external require against built-in modules to import for ssr.target=webworker (#23759) (a711f1c)
• use top-level input for SSR build when build.ssr: true (#23898) (90bc034)
• wasm: reject .wasm outside server.fs (#23914) (64e2467)
• watch files that have a query or hash referenced with new URL(..., import.meta.url) (#23780) (e954a9c)
• worker: keep chunks conflicted with unused workers that are still used by a live worker (#23956) (7139ef3)

Performance Improvements

• build: remove preload link listeners on settle (fix #23920) (#23922) (8109efd)
• css: index rendered modules once per output for cssScopeTo (#23889) (1b905e5)

Miscellaneous Chores

• align charset case (#23863) (a976df3)

Build System

• generate sourcemaps in import-meta-current-dirname plugin (#23904) (20d355a)

Changelog

Sourced from vite's changelog.

8.3.6 (2026-11-05)

Bug Fixes

• await overlapping plugin container close calls (#23935) (175bbeb)
• build: resolve dynamic imports with queries appended when collecting CSS dependencies (#23909) (df36558)
• build: use stable module ids in chunk import map hash signatures (fix #23975) (#23976) (8069835)
• bundled-dev: allow named imports from Node built-ins (#23858) (4260c75)
• bundled-dev: reload when hmr cannot run an entry again (#23849) (a236886)
• deps: update @rollup/plugin-alias to v6.0.1 (#23862) (67c965b)
• deps: update all non-major dependencies (#23896) (46b91c5)
• deps: update all non-major dependencies (#23966) (b3cb057)
• deps: update rolldown-related dependencies (#23868) (a63eb87)
• deps: update rolldown-related dependencies (#23967) (0105733)
• dev: escape ANSI escape sequence for server.forwardConsole (#23933) (4f340fd)
• html: remove adjacent module tags on the first line (#23823) (eab1dc2)
• ignore pnpm's .modules.yaml as a Vite Task input (#23634) (95c2daf)
• optimizer: detect cache dir precisely (#23912) (cc9bc21)
• optimizer: resolve subpath imports (#) with Vite's resolver (#23959) (0fdd81e)
• respect build.sourcemap from environment (#23879) (82e7aa0)
• server: escape HTML attributes (#23995) (a270391)
• server: preserve $ patterns in static alias replacements (#23703) (1b6ed05)
• ssr: convert external require against built-in modules to import for ssr.target=webworker (#23759) (a711f1c)
• use top-level input for SSR build when build.ssr: true (#23898) (90bc034)
• wasm: reject .wasm outside server.fs (#23914) (64e2467)
• watch files that have a query or hash referenced with new URL(..., import.meta.url) (#23780) (e954a9c)
• worker: keep chunks conflicted with unused workers that are still used by a live worker (#23956) (7139ef3)

Performance Improvements

• build: remove preload link listeners on settle (fix #23920) (#23922) (8109efd)
• css: index rendered modules once per output for cssScopeTo (#23889) (1b905e5)

Miscellaneous Chores

• align charset case (#23863) (a976df3)

Build System

• generate sourcemaps in import-meta-current-dirname plugin (#23904) (20d355a)

Commits

• 0fd9a29 release: v8.3.6 (#23996)
• eab1dc2 fix(html): remove adjacent module tags on the first line (#23823)
• a270391 fix(server): escape HTML attributes (#23995)
• 7139ef3 fix(worker): keep chunks conflicted with unused workers that are still used b...
• 0fdd81e fix(optimizer): resolve subpath imports (#) with Vite's resolver (#23959)
• 8069835 fix(build): use stable module ids in chunk import map hash signatures (fix #2...
• 95c2daf fix: ignore pnpm's .modules.yaml as a Vite Task input (#23634)
• b3cb057 fix(deps): update all non-major dependencies (#23966)
• 0105733 fix(deps): update rolldown-related dependencies (#23967)
• 90bc034 fix: use top-level input for SSR build when build.ssr: true (#23898)
• Additional commits viewable in compare view

Updates vue-eslint-parser from 10.4.1 to 10.4.2

Release notes

Sourced from vue-eslint-parser's releases.

v10.4.2

🐛 Bug Fixes

• fix: also check the eslint-scope nested under the user's eslint by @​ValentinYoushkevich in vuejs/vue-eslint-parser#312
• fix: keep AST exported as a value in the type declarations by @​mkantautas in vuejs/vue-eslint-parser#310

Full Changelog: vuejs/vue-eslint-parser@v10.4.1...v10.4.2

Commits

• 5d24f77 10.4.2
• d2c762f fix: keep AST exported as a value in the type declarations (#310)
• 80ffb2c chore(deps-dev): bump undici from 7.29.0 to 7.30.2 (#315)
• 3e2d5d8 chore(deps-dev): bump vite from 6.4.3 to 6.4.5 (#313)
• 1c96e1e chore(deps-dev): bump postcss from 8.5.15 to 8.5.25 (#301)
• 22dde48 chore(deps-dev): bump undici from 7.27.0 to 7.29.0 (#304)
• b434e0e chore(deps): bump brace-expansion (#306)
• bdee6f0 fix: also check the eslint-scope nested under the user's eslint (#312)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Client Test Results

102 tests   102 ✅  0s ⏱️
  9 suites    0 💤
  1 files      0 ❌

Results for commit 799f95b.

[github-actions]

Client V3 Test Results

408 tests   408 ✅  4s ⏱️
 31 suites    0 💤
  1 files      0 ❌

Results for commit 799f95b.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Python Test Results

    1 files      1 suites   1m 25s ⏱️
1 322 tests 1 322 ✅ 0 💤 0 ❌
1 353 runs  1 353 ✅ 0 💤 0 ❌

Results for commit 799f95b.

[github-actions]

Playwright E2E Results (firefox)

251 tests   251 ✅  2m 33s ⏱️
 15 suites    0 💤
  1 files      0 ❌

Results for commit 799f95b.

[github-actions]

Playwright E2E Results (chromium)

251 tests   251 ✅  3m 4s ⏱️
 15 suites    0 💤
  1 files      0 ❌

Results for commit 799f95b.