chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@eslint/js (source)	^9.36.0 -> ^9.37.0			devDependencies	minor
@inertiajs/vue3 (source)	^2.1.10 -> ^2.2.8			dependencies	minor
@nuxt/ui (source)	^4.0.0 -> ^4.0.1			dependencies	patch
@rollup/rollup-linux-x64-gnu (source)	4.52.2 -> 4.52.4			optionalDependencies	patch
@tailwindcss/oxide-linux-x64-gnu (source)	^4.1.13 -> ^4.1.14			optionalDependencies	patch
@types/node (source)	^24.5.2 -> ^24.7.2			devDependencies	minor
eslint (source)	^9.36.0 -> ^9.37.0			devDependencies	minor
inertiajs/inertia-laravel	^2.0.6 -> ^2.0.10			require	patch
laravel/framework (source)	^12.30.1 -> ^12.33.0			require	minor
laravel/sail	^1.45.0 -> ^1.46.0			require-dev	minor
lightningcss-linux-x64-gnu	^1.30.1 -> ^1.30.2			optionalDependencies	patch
php	^8.4.12 -> ^8.4.13			require	patch
pnpm (source)	10.17.1 -> 10.18.2			packageManager	minor
typescript (source)	^5.9.2 -> ^5.9.3			dependencies	patch
typescript-eslint (source)	^8.44.1 -> ^8.46.0			devDependencies	minor
vite (source)	^7.1.7 -> ^7.1.9			dependencies	patch
vue (source)	^3.5.21 -> ^3.5.22			dependencies	patch
vue-tsc (source)	^3.0.8 -> ^3.1.1			devDependencies	minor

---

Release Notes

eslint/eslint (@​eslint/js)

v9.37.0

Compare Source

inertiajs/inertia (@​inertiajs/vue3)

v2.2.8

Compare Source

What's Changed

• Prevent false positives in getScrollableParent() by @​pascalbaljet in #​2626
• Restore scroll regions after navigation by @​pascalbaljet in #​2627
• Prevent replacing history state when scroll regions are unchanged to fix popstate behavior in WebKit by @​pascalbaljet in #​2629

Full Changelog: inertiajs/inertia@v2.2.7...v2.2.8

v2.2.7

Compare Source

What's Changed

• Preserve relative URL when <InfiniteScroll> updates query string by @​pascalbaljet in #​2623
• Use SlotsType to type-hint Vue slots by @​pascalbaljet in #​2620
• Fix race condition in history.ts by @​pascalbaljet in #​2624

Full Changelog: inertiajs/inertia@v2.2.6...v2.2.7

v2.2.6

Compare Source

What's Changed

• SSR fixes for <InfiniteScroll> component. by @​pascalbaljet in #​2616

Full Changelog: inertiajs/inertia@v2.2.5...v2.2.6

v2.2.5

Compare Source

What's Changed

• Improve <InfiniteScroll> cleanup after navigating away by @​pascalbaljet in #​2610
• Fix for <Form> component when using React SSR by @​pascalbaljet in #​2612
• Fix conflicting Client Side Visits by queuing the URL synchronization by @​pascalbaljet in #​2613
• Improvements to <InfiniteScroll> in Svelte adapter by @​pascalbaljet in #​2614

Full Changelog: inertiajs/inertia@v2.2.4...v2.2.5

v2.2.4

Compare Source

What's Changed

• Compile TS while developing + improve CLI output by @​pascalbaljet in #​2600
• Improve testing of scroll restoration by @​pascalbaljet in #​2602
• Fix for reloading an unrelated prop affecting infinite scroll by @​pascalbaljet in #​2603
• Add preserve-url prop to <Link> component by @​pascalbaljet in #​2541

Full Changelog: inertiajs/inertia@v2.2.3...v2.2.4

v2.2.3

Compare Source

What's Changed

• Preserve ScrollProp on Partial Reloads by @​pascalbaljet in #​2597

Full Changelog: inertiajs/inertia@v2.2.2...v2.2.3

v2.2.2

Compare Source

What's Changed

• Reset ScrollProp when requested by @​pascalbaljet in #​2595

Full Changelog: inertiajs/inertia@v2.2.1...v2.2.2

v2.2.1

Compare Source

What's Changed

• Don't restore remembered state after a refresh by @​pascalbaljet in #​2591
• Remember Infinite Scroll state by @​pascalbaljet in #​2592

Full Changelog: inertiajs/inertia@v2.2.0...v2.2.1

v2.2.0

Compare Source

What's Changed

• Support for merging nested prop paths by @​pascalbaljet in #​2561
• Client-side visit helpers to update props by @​pascalbaljet in #​2589
• Introduction of the <InfiniteScroll> component by @​pascalbaljet in #​2580

Full Changelog: inertiajs/inertia@v2.1.11...v2.2.0

v2.1.11

Compare Source

What's Changed

• Fix flaky tests in CI by @​pascalbaljet in #​2582
• Bump Playwright by @​pascalbaljet in #​2585
• Progress indicator API by @​pascalbaljet in #​2581

Full Changelog: inertiajs/inertia@v2.1.10...v2.1.11

nuxt/ui (@​nuxt/ui)

v4.0.1

Compare Source

Bug Fixes

• App: allow global portal disabling (#​5111) (7659fa1)
• AuthForm: export type with proper inference for field-specific props (#​5106) (344f269)
• Avatar: remove redundant img role (066b8a1), closes #​5044
• Carousel: ensure plugins init after client-side navigation (#​5117) (21fbe63)
• Carousel: invert arrow keys in RTL direction (#​5072) (fde53ee)
• ChatMessages: ensure content is render before scrolling (0db622a)
• ChatMessages: watch deep to handle streaming with parts (ff67fa3)
• components: add missing data-orientation for consistency (a9fe7c6)
• ContentNavigation: improve path matching and recursion with default-open (22ee075), closes #​5112
• ContentSearch/DashboardSearch: proxy modal props to support fullscreen (095a0c1)
• DashboardPanel/DashboardSidebar: handle RTL mode (#​5109) (fface35)
• Drawer: prevent unwanted close when dismissible is false (#​5085) (2abdc21)
• Drawer: use full height/width for snapPoints (#​5041) (b145768)
• locale: improve ckb translations (#​5079) (3ee3a5e)
• locale: improve typography with ellipsis (#​5052) (391f9f5)
• Pagination: make ellipsis non-interactive (#​5081) (62f64cc)
• Table: empty cell value causing hydration errors (#​5069) (44a38ea)
• unplugin: handle components resolution with subpath (31db8d9)
• useKbd: update escape key from ⎋ to Esc (#​5076) (64d1589)
• vue: align useCookie stub with nuxt's default value handling (#​5089) (f531807)

rollup/rollup (@​rollup/rollup-linux-x64-gnu)

v4.52.4

Compare Source

2025-10-03

Bug Fixes

• Fix an issue where the wrong branch of nullish coalescing was picked (#​6133)

Pull Requests

• #​6128: Enable npm OIDC publishing (@​lukastaegert)
• #​6133: Correct nullish coalescing branch resolution for symbol left value (@​TrickyPi)
• #​6134: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot], @​lukastaegert)

v4.52.3

Compare Source

2025-09-27

Bug Fixes

• Fix check in native loader for environments that do not support reports (#​6123)

Pull Requests

• #​6123: fix(native-loader): safely handle report.getReport() on Termux/Android (@​Jobians, @​lukastaegert)
• #​6124: chore(deps): pin msys2/setup-msys2 action to fb197b7 (@​renovate[bot])
• #​6125: fix(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #​6126: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot])

tailwindlabs/tailwindcss (@​tailwindcss/oxide-linux-x64-gnu)

v4.1.14

Compare Source

Fixed

• Handle ' syntax in ClojureScript when extracting classes (#​18888)
• Handle @variant inside @custom-variant (#​18885)
• Merge suggestions when using @utility (#​18900)
• Ensure that file system watchers created when using the CLI are always cleaned up (#​18905)
• Do not generate grid-column utilities when configuring grid-column-start or grid-column-end (#​18907)
• Do not generate grid-row utilities when configuring grid-row-start or grid-row-end (#​18907)
• Prevent duplicate CSS when overwriting a static utility with a theme key (#​18056)
• Show Lightning CSS warnings (if any) when optimizing/minifying (#​18918)
• Use default export condition for @tailwindcss/vite (#​18948)
• Re-throw errors from PostCSS nodes (#​18373)
• Detect classes in markdown inline directives (#​18967)
• Ensure files with only @theme produce no output when built (#​18979)
• Support Maud templates when extracting classes (#​18988)
• Upgrade: Do not migrate variant = 'outline' during upgrades (#​18922)
• Upgrade: Show version mismatch (if any) when running upgrade tool (#​19028)
• Upgrade: Ensure first class inside className is migrated (#​19031)
• Upgrade: Migrate classes inside *ClassName and *Class attributes (#​19031)

eslint/eslint (eslint)

v9.37.0

Compare Source

inertiajs/inertia-laravel (inertiajs/inertia-laravel)

v2.0.10

Compare Source

What's Changed

• Include scrollProps metadata when prop is requested to reset by @​pascalbaljet in #​781

Full Changelog: inertiajs/inertia-laravel@v2.0.9...v2.0.10

v2.0.9

Compare Source

What's Changed

• Include scrollProps metadata when prop is requested to reset by @​pascalbaljet in #​781

Full Changelog: inertiajs/inertia-laravel@v2.0.9...v2.0.10

v2.0.8

Compare Source

What's Changed

• Add docblock to Inertia Facade for scroll by @​joetannenbaum in #​780

Full Changelog: inertiajs/inertia-laravel@v2.0.8...v2.0.9

v2.0.7

Compare Source

What's Changed

• More fine-grained control for Inertia::merge() and a new Inertia::scroll() by @​pascalbaljet in #​774

Full Changelog: inertiajs/inertia-laravel@v2.0.7...v2.0.8

laravel/framework (laravel/framework)

v12.33.0

Compare Source

• Fix compiling queries that use orderByRaw with expressions by @​LukeTowers in #​57228
• [12.x] Narrow type after Str::is*(...) check by @​axlon in #​57230
• [12.x] Fix invalid docblock by @​tm1000 in #​57240
• [12.x] Refactor switch to match by @​amirhshokri in #​57236
• [12.x] Refactor switch to match by @​alipowerful7 in #​57237
• [12.x] Fix rounded issue in exception frame component by @​AhmedAlaa4611 in #​57239
• [12.x] Ensure calling job within a group works as expected by @​jackbayliss in #​57224
• fix: remove duplicated word in Str::apa method by @​balboacodes in #​57254
• refactor: add |null in docblock by @​alipowerful7 in #​57253
• [12.x] Improve php artisan config:cache and php artisan optimize error messages for non-serializable values by @​mathiasgrimm in #​57249
• [12.x] Ensure cookie lifetime matches session lifetime in StartSession middleware by @​michaelcontento in #​57266
• Run tests on PostgreSQL version 18 by @​JurianArie in #​57232
• [12x.] reduce repeated inserts in tests by @​cosmastech in #​57273
• [12.x] Fix using pushIf blade directive with complex conditions (#​57264) by @​hosni in #​57274
• [12.x] Add Stringable::doesntContain() to match API symmetry by @​michaelcontento in #​57279
• [12.x] Improve BroadcastManager error messages when trying to get a Broadcaster by @​mathiasgrimm in #​57275
• [12.x] HTTP Client: add mergeUrlParameters() to combine URL parameters without overwriting by @​leek in #​57282

v12.32.5

Compare Source

v12.32.4

Compare Source

• [12.x] Use Container::getInstance() in ComposerScripts::prePackageUninstall() by @​cosmastech in #​57226

v12.32.3

Compare Source

• [12.x] Define LARAVEL_START if not already defined by @​cosmastech in #​57222
• [12.x] Clean up redundant type hints in docblocks by @​AhmedAlaa4611 in #​57219

v12.32.2

Compare Source

v12.32.1

Compare Source

• [13.x] Fix scopedBy attribute not following inheritance chain by @​Muffinman in #​57213
• [12.x] Fix AWS S3 adapter's constructor not allowing decorated adapter instances by @​daniser in #​57217

v12.32.0

Compare Source

• [12.x] fix static analysis error by @​cosmastech in #​57162
• Fix: Handle non-string returns from Htmlable::toHtml() in e() helper by @​Carnicero90 in #​57157
• [12.x] Fix pending attributes in schedule group by @​jamessa in #​57156
• Remove Request overview from Exceptions by @​barryvdh in #​57158
• [12.x] Pass "throw" option from scoped to parent disk by @​daniser in #​57163
• [12.x] Make docblock return type in line with actual return type by @​parijke in #​57164
• [12.x] Adjust Arr typehints by @​daniser in #​57165
• [12.x] Track filesystem adapter decoration by @​daniser in #​57167
• [12.x] Batch Job Failure Callbacks Support by @​yitzwillroth in #​55916
• [12.x] Fix operator precedence by @​daniser in #​57169
• [12.x] Clean up after filesystem manager tests by @​daniser in #​57168
• Fix: Improve validateInteger ergonomics and fix BC break by @​ntm-dev in #​57175
• [12.x] Fix nested can and inherit models on route groups by @​bonroyage in #​57172
• [12.x] Syntax highlight on the frontend by @​avosalmon in #​57184
• [12.x] Add missing Closure type to Collection::pluck() docblock by @​Bariss61 in #​57178
• Add database afterRollback callback support and tests by @​maltekuhr in #​57180
• fix: add return type by @​alipowerful7 in #​57192
• [12.x] Adds support enums for ThrottleRequests::using method by @​sethsandaru in #​57190
• [12.x] Introduce "after" rate limiting by @​timacdonald in #​57125
• [12.x] Json schema nullable by @​Katalam in #​57181
• [12.x] Dispatch framework events on composer pre-package-uninstall event by @​cosmastech in #​57144
• [12.x] Add Http::batch by @​WendellAdriel in #​56946
• [12.x] [Mail] Update queue PHPDoc according to function behavior by @​MrYamous in #​57207
• [12.x] Remove unnecessary parentheses by @​AhmedAlaa4611 in #​57212
• [12.x] Remove unnecessary parentheses by @​AhmedAlaa4611 in #​57210
• [12.x] Fixes error renderer report page by @​xiCO2k in #​57208
• [12.x] Extend SQS FIFO and fair queue support by @​patrickcarlohickman in #​57187

v12.31.1

Compare Source

• Revert "[12.x] Reintroduce short-hand "false" syntax for Blade component props" by @​taylorotwell in #​57151

v12.31.0

Compare Source

• Bump vite from 7.1.2 to 7.1.6 in /src/Illuminate/Foundation/resources/exceptions/renderer by @​dependabot[bot] in #​57114
• [12.x] Reintroduce short-hand "false" syntax for Blade component props by @​PerryvanderMeer in #​57104
• [12.x] Allow Number parse helpers to return false by @​platoindebugmode in #​57127
• [12.x] Refactor RedisTaggedCache@flush() to allow for custom connections by @​cosmastech in #​57122
• [12.x] Use light-dark scheme for exception renderer by @​pxlrbt in #​57128
• [12.x] Replace logger helper and log function concrete return type ?LogManager with abstract ?LoggerInterface by @​abdelrahmenAyman in #​57028
• [12.x] Fix session value is missing assertion by @​barclaymichael in #​57134
• median() div swapped for intdiv() by @​artumi-richard in #​57148
• [12.x] Fix PHP 8.5 null-key deprecations by @​IonBazan in #​57137

laravel/sail (laravel/sail)

v1.46.0

Compare Source

• mark working directory as safe with git by @​nathanbarrett in #​814
• Rename docker-compose.yml to compose.yaml by @​CasEbb in #​818

parcel-bundler/lightningcss (lightningcss-linux-x64-gnu)

v1.30.2

Compare Source

Fixes

• Fix installing on android
• Don't warn on ::grammar-error and ::spelling-error selectors
• Update browser compat data

Rust crate changes

• Bump browserslist-rs to 0.19.0
• migrate to maintained library instead of deprecated paste
• Use serde-content instead of private serde types

containerbase/php-prebuild (php)

v8.4.13

Compare Source

Bug Fixes

• deps: update dependency php to v8.4.13

pnpm/pnpm (pnpm)

v10.18.2

Compare Source

Patch Changes

• pnpm outdated --long should work #​10040.
• Replace ndjson with split2. Reduce the bundle size of pnpm CLI #​10054.
• pnpm dlx should request the full metadata of packages, when minimumReleaseAge is set #​9963.
• pnpm version switching should work when the pnpm home directory is in a symlinked directory #​9715.
• Fix EPIPE errors when piping output to other commands #​10027.

v10.18.1

Compare Source

Patch Changes

• Don't print a warning, when --lockfile-only is used #​8320.
• pnpm setup creates a command shim to the pnpm executable. This is needed to be able to run pnpm self-update on Windows #​5700.
• When using pnpm catalogs and running a normal pnpm install, pnpm produced false positive warnings for "skip adding to the default catalog because it already exists". This warning now only prints when using pnpm add --save-catalog as originally intended.

v10.18.0

Compare Source

Minor Changes

• Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

  Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps.
  Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

  Related PR: #​10025.

Patch Changes

• Retry filesystem operations on EAGAIN errors #​9959.
• Outdated command respects minimumReleaseAge configuration #​10030.
• Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
• Don't fail with a meaningless error when scriptShell is set to false #​8748.
• pnpm dlx should not fail when minimumReleaseAge is set #​10037.

microsoft/TypeScript (typescript)

v5.9.3

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

v8.46.0

Compare Source

🚀 Features

• typescript-eslint: export util types (#​10848, #​10849)

❤️ Thank You

• Mister-Hope @​Mister-Hope

You can read about our versioning strategy and releases on our website.

v8.45.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v7.1.9

Compare Source

Reverts

• server: drain stdin when not interactive (#​20885) (12d72b0)

v7.1.8

Compare Source

Bug Fixes

• css: improve url escape characters handling (#​20847) (24a61a3)
• deps: update all non-major dependencies (#​20855) (788a183)
• deps: update artichokie to 0.4.2 (#​20864) (e670799)
• dev: skip JS responses for document requests (#​20866) (6bc6c4d)
• glob: fix HMR for array patterns with exclusions (#​20872) (63e040f)
• keep ids for virtual modules as-is (#​20808) (d4eca98)
• server: drain stdin when not interactive (#​20837) (bb950e9)
• server: improve malformed URL handling in middlewares (#​20830) (d65a983)

Documentation

• create-vite: provide deno example (#​20747) (fdb758a)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​20810) (ea68a88)
• deps: update rolldown-related dependencies (#​20854) (4dd06fd)
• update url of create-react-app license (#​20865) (166a178)

vuejs/core (vue)

v3.5.22

Compare Source

Bug Fixes

• compiler-core: identifiers in switch-case should not be inferred as references (#​13923) (5953c9f)
• compiler-dom: nodes with v-once shouldn't be stringified (#​13878) (95c1975)
• compiler-sfc: add support for @vue-ignore in runtime type resolution (#​13906) (ba7f7f9)
• compiler-sfc: enhance inferRuntimeType to support TSMappedType with indexed access (#​13848) (e388f1a), closes #​13847
• compiler-sfc: ensure css custom properties do not start with a digit (#​13870) (9c27951)
• compiler-sfc: ensure props bindings register before compiling template (#​13922) (abd5638), closes #​13920
• compiler-ssr: ensure v-show has a higher priority in SSR (#​12171) (836b829), closes #​12162
• custom-element: properly mount multiple Teleports in custom element component w/ shadowRoot false (#​13900) (5e1e791), closes #​13899
• custom-element: set prop runs pending mutations before disconnect (#​13897) (c4a88cd), closes #​13315
• custom-element: use PatchFlags.BAIL for slot when props are present (#​13907) (5358bca), closes #​13904
• reactivity: respect readonly during ref unwrapping (#​13905) ([aba7fed](https://redirect.github.com/vuejs/core/commit/aba7feda

---

Configuration

📅 Schedule: Branch creation - "on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.