chore(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
@angular-devkit/build-angular	^21.0.5 → ^21.1.0			pnpm.catalog.default	minor
@angular/cli	^21.0.5 → ^21.1.0			pnpm.catalog.default	minor
@angular/common (source)	^21.0.8 → ^21.1.0			pnpm.catalog.default	minor
@angular/compiler (source)	^21.0.8 → ^21.1.0			pnpm.catalog.default	minor
@angular/compiler-cli (source)	^21.0.8 → ^21.1.0			pnpm.catalog.default	minor
@angular/core (source)	^21.0.8 → ^21.1.0			pnpm.catalog.default	minor
@angular/platform-browser (source)	^21.0.8 → ^21.1.0			pnpm.catalog.default	minor
@angular/platform-browser-dynamic (source)	^21.0.8 → ^21.1.0			pnpm.catalog.default	minor
@angular/platform-server (source)	^21.0.8 → ^21.1.0			pnpm.catalog.default	minor
@babel/types (source)	^7.28.5 → ^7.28.6			pnpm.catalog.default	patch
bumpp	^10.3.2 → ^10.4.0			pnpm.catalog.default	minor
pnpm/action-setup	v4.1.0 → v4.2.0			action	minor
ufo	^1.6.2 → ^1.6.3			pnpm.catalog.default	patch
vite (source)	7.2.2 → 7.3.1			pnpm.catalog.default	minor
vitest (source)	^4.0.16 → ^4.0.17			pnpm.catalog.default	patch
vue (source)	>=3.5.18 → >=3.5.26			peerDependencies	patch	3.5.27

---

Release Notes

angular/angular-cli (@​angular-devkit/build-angular)

v21.1.0

Compare Source

@​angular/cli

Commit	Type	Description
772e6efe7	feat	add 'test' and 'e2e' MCP tools
8efb86318	feat	Add "all" as an experimental tool group
c3c9ac506	feat	Add MCP tools for building and running devservers
d635a6c63	feat	add signal forms lessons
d8b76e93d	fix	correctly handle yarn classic tag manifest fetching
7ab5c0b0a	fix	correctly spawn package managers on Windows in new abstraction
348096623	fix	enhance list_projects MCP tool file system traversal and symlink handling
316fca862	fix	handle array output from npm view in manifest parser
032257a6d	fix	improve signal forms lesson examples in AI tutor
18d74dde8	fix	rename mcp devserver tools to comply with naming spec
1ad773671	fix	update dependency @​modelcontextprotocol/sdk to v1.25.2
45d4f5668	fix	update yarn berry package manager configuration
122ed27c9	fix	use project-local temporary directory in ng add
a15db28b2	perf	cache resolved specific version in package manager abstraction
240588b7e	perf	optimize ng add version discovery

@​schematics/angular

Commit	Type	Description
36cf3afb4	feat	add browserMode option to jasmine-vitest schematic
e71a72ffd	feat	generate detailed migration report for refactor-jasmine-vitest
18cf6c51b	fix	add MCP configuration file to new workspaces

@​angular/build

Commit	Type	Description
1eda0a99f	feat	directly support ng-packagr in unit-test builder
87175f9dc	feat	disable TestBed teardown during debugging in Vitest
1e39c77a4	fix	inject source-map-support for Vitest browser tests
3fd7dcd76	fix	normalize roots to POSIX in test discovery for Windows compatibility
164e7dbbc	fix	resolve test files correctly on Windows when using non-C drives
ad99e00ad	fix	simplify SSL handling for ng serve with SSR (#​31722)

v21.0.6

Compare Source

@​angular/ssr

Commit	Type	Description
730ae6609	fix	handle platform destruction during rendering

angular/angular (@​angular/common)

v21.1.0

Compare Source

Deprecations

upgrade

• VERSION from @angular/upgrade is deprecated. Please use the entry from @angular/upgrade/static instead.

common

Commit	Type	Description
d8790972be	feat	Add custom transformations for Cloudflare and Cloudinary image loaders
a6b8cb68af	feat	support custom transformations in ImageKit and Imgix loaders

compiler

Commit	Type	Description
640693da8e	feat	Add support for multiple swich cases matching
0ad3adc7c6	fix	Support empty cases

core

Commit	Type	Description
99ad18a4ee	feat	Add stability debugging utility
a0dfa5fa86	feat	support rest arguments in function calls
6e18fa8bc9	feat	support spread elements in array literals
e407280ab5	feat	support spread expressions in object literals
06be8034bb	fix	Microtask scheduling should be used after any application synchronization
b4f584cf42	fix	return StaticProvider for providePlatformInitializer

forms

Commit	Type	Description
1ea5c97703	feat	allow focusing bound control from field state

platform-browser

Commit	Type	Description
ec9dc94cee	feat	add context to createApplication
ab67988d2e	feat	resolve JIT resources in createApplication

router

Commit	Type	Description
5edceffd04	feat	add controls for route cleanup
a03c82564d	feat	Add scroll behavior controls on router navigation
e44839b016	feat	Add standalone function to create a comptued for isActive
c25d749d85	feat	Execute RunGuardsAndResolvers function in injection context
1c00ab42f8	feat	extend paramters of RedirectFunction to include paramMap and queryParamMap
7003e8d241	feat	Publish Router's integration with platform Navigation API as experimental
c84d372778	feat	Support wildcard params with segments trailing (#​64737)

upgrade

Commit	Type	Description
75fe8f8af9	refactor	deprecate VERSION export

v21.0.9

Compare Source

forms

Commit	Type	Description
82d556a8fb	fix	Ensure the control instruction comes after the other bindings
0055f3cc79	fix	Rename signal form [field] to [formField]

migrations

Commit	Type	Description
e4bfa5c9e7	fix	prevent duplicate imports in common-to-standalone migration

babel/babel (@​babel/types)

v7.28.6

Compare Source

v7.28.6 (2026-01-12)

Thanks @​kadhirash and @​kolvian for your first PRs!

🐛 Bug Fix

• babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types
  • #​17589 Improve Unicode handling in code-frame tokenizer (@​JLHwung)
• babel-plugin-transform-regenerator
  • #​17556 fix: transform-regenerator correctly handles scope (@​liuxingbaoyu)
• babel-plugin-transform-react-jsx
  • #​17538 fix: Keep jsx comments (@​liuxingbaoyu)

💅 Polish

• babel-core, babel-standalone
  • #​17606 Polish(standalone): improve message on invalid preset/plugin (@​JLHwung)

🏠 Internal

• babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex
  • #​17580 Allow Babel 8 in compatible Babel 7 plugins (@​nicolo-ribaudo)

🏃‍♀️ Performance

• babel-plugin-transform-react-jsx
  • #​17555 perf: Use lighter traversal for jsx __source,__self (@​liuxingbaoyu)

Committers: 7

• Babel Bot (@​babel-bot)
• Eliot Pontarelli (@​kolvian)
• Huáng Jùnliàng (@​JLHwung)
• Kadhirash Sivakumar (@​kadhirash)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu
• coderaiser (@​coderaiser)

antfu-collective/bumpp (bumpp)

v10.4.0

Compare Source

No significant changes

    View changes on GitHub

pnpm/action-setup (pnpm/action-setup)

v4.2.0

Compare Source

When there's a .npmrc file at the root of the repository, pnpm will be fetched from the registry that is specified in that .npmrc file #​179

unjs/ufo (ufo)

v1.6.3

Compare Source

compare changes

🩹 Fixes

• withBase, withoutBase: Prevent false prefix matches (#​313)

🏡 Chore

• Update deps (04b73bd)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Florian Heuberger (@​Flo0806)

vitejs/vite (vite)

v7.3.1

Compare Source

Please refer to CHANGELOG.md for details.

v7.3.0

Compare Source

Please refer to CHANGELOG.md for details.

v7.2.7

Compare Source

v7.2.6

Compare Source

7.2.6 (2025-12-01)

v7.2.4

Compare Source

Bug Fixes

• revert "perf(deps): replace debug with obug (#​21107)" (2d66b7b)

v7.2.3

Compare Source

Bug Fixes

• allow multiple bindCLIShortcuts calls with shortcut merging (#​21103) (5909efd)
• deps: update all non-major dependencies (#​21096) (6a34ac3)
• deps: update all non-major dependencies (#​21128) (4f8171e)

Performance Improvements

• deps: replace debug with obug (#​21107) (acfe939)

Miscellaneous Chores

• deps: update dependency @​rollup/plugin-commonjs to v29 (#​21099) (02ceaec)
• deps: update rolldown-related dependencies (#​21095) (39a0a15)
• deps: update rolldown-related dependencies (#​21127) (5029720)

vitest-dev/vitest (vitest)

v4.0.17

Compare Source

   🚀 Features

• Support openTelemetry for browser mode  -  by @​hi-ogawa in #​9180 (1ec3a)
• Support TRACEPARENT and TRACESTATE environment variables for OpenTelemetry context propagation  -  by @​Copilot, hi-ogawa and @​hi-ogawa in #​9295 (876cb)

   🐞 Bug Fixes

• Improve asymmetric matcher diff readability by unwrapping container matchers  -  by @​Copilot, sheremet-va, hi-ogawa and @​hi-ogawa in #​9330 (b2ec7)
• Improve runner error when importing outside of test context  -  by @​sheremet-va in #​9335 (2dd3d)
• Replace crypto.randomUUID to allow insecure environments (fix #​9…  -  by @​plusgut in #​9339 and #​9 (e6a3f)
• Handle null options in addEventHandler #​9371  -  by @​ThibautMarechal in #​9372 and #​9371 (40841)
• Typo in browser.provider error  -  by @​deammer in #​9394 (4b67f)
• browser:
  • Fix process.env and import.meta.env defines in inline project  -  by @​hi-ogawa in #​9239 (b70c9)
  • Fix upload File instance  -  by @​hi-ogawa in #​9294 (b6778)
  • Fix invalid project token for artifacts assets  -  by @​hi-ogawa in #​9321 (caa7d)
  • Log ErrorEvent.message when unhandled ErrorEvent.error is null  -  by @​hi-ogawa in #​9322 (5d84e)
  • Support fileParallelism on an instance  -  by @​sheremet-va in #​9328 (15006)
• coverage:
  • Remove unnecessary istanbul-lib-source-maps usage  -  by @​AriPerkkio in #​9344 (b0940)
  • Apply patch from istanbuljs/istanbuljs#837  -  by @​AriPerkkio and sapphi-red in #​9413 and #​837 (e05ce)
• fsModuleCache:
  • Don't store importers in cache  -  by @​sheremet-va in #​9422 (75136)
  • Add importers alongside importedModules  -  by @​sheremet-va in #​9423 (59f92)
• mocker:
  • Fix mock transform with class  -  by @​hi-ogawa in #​9421 (d390e)
• pool:
  • Validate environment options when reusing the worker  -  by @​sheremet-va in #​9349 (a8a88)
  • Handle worker start failures gracefully  -  by @​AriPerkkio in #​9337 (200da)
• reporter:
  • Report test module if it failed to run  -  by @​sheremet-va in #​9272 (c7888)
• runner:
  • Respect nested test.only within describe.only  -  by @​Ujjwaljain16 in #​9021 and #​9213 (55d5d)
• typecheck:
  • Improve error message when tsc outputs help text  -  by @​Ujjwaljain16 in #​9214 (7b10a)
• ui:
  • Detect gzip by magic numbers instead of Content-Type header in html reporter  -  by @​Copilot, hi-ogawa and @​hi-ogawa in #​9278 (dd033)
• webdriverio:
  • Fall back to WebDriver Classic #​9244  -  by @​JustasMonkev in #​9373 and #​9244 (c23dd)

    View changes on GitHub

vuejs/core (vue)

v3.5.26

Compare Source

Bug Fixes

• compat: fix compat handler of draggable (#​12445) (ed85953), closes #​12444
• compat: handle v-model deprecation warning with missing appContext (#​14203) (945a543), closes #​14202
• compiler-sfc: demote const reactive bindings used in v-model (#​14214) (e24ff7d), closes #​11265 #​11275
• compiler-ssr: handle ssr attr fallthrough when preserve whitespace (#​12304) (4783118), closes #​8072
• hmr: handle cached text node update (#​14134) (69ce3c7), closes #​14127
• keep-alive: use resolved component name for async components in cache pruning (#​14212) (dfe667c), closes #​14210
• runtime-core: ensure correct anchor el for deeper unresolved async components (#​14182) (f5b3bf2), closes #​14173
• runtime-core: handle patch stable fragment edge case (#​12411) (94aeb64), closes #​12410
• runtime-core: pass component instance to flushPreFlushCbs on unmount (#​14221) (e857e12), closes #​14215

Performance Improvements

• compiler-core: use binary-search to get line and column (#​14222) (1904053)

v3.5.25

Compare Source

Bug Fixes

• compiler: share logic for comments and whitespace (#​13550) (2214f7a)
• provide: warn when using provide after mounting (#​13954) (247b2c2), closes #​13921 #​13924
• reactivity: correctly wrap iterated array items to preserve their readonly status (#​14120) (301020b)
• reactivity: toRef edge cases for ref unwrapping (#​12420) (0d2357e)
• runtime-core: keep options API typing intact when expose is used (#​14118) (8f82f23), closes #​14117 vuejs/language-tools#5069
• suspense: defer clearing fallback vnode el in case it has dirs (#​14080) (c0f63dd), closes #​14078

v3.5.24

Compare Source

Reverts

• Revert "fix(compiler-core): correctly handle ts type assertions in expression…" (#​14062) (11ec51a), closes #​14062 #​14060

v3.5.23

Compare Source

Bug Fixes

• compiler-core: correctly handle ts type assertions in expressions (#​13397) (e6544ac), closes #​13395
• compiler-core: fix v-bind shorthand handling for in-DOM templates (#​13933) (b3cca26), closes #​13930
• compiler-sfc: resolve numeric literals and template literals without expressions as static property key (#​13998) (75d44c7)
• compiler-ssr: textarea with v-text directive SSR (#​13975) (006a0c1)
• compiler: using guard instead of non-nullish assertion (#​13982) (dcc6f36)
• custom-element: batch custom element prop patching (#​13478) (c13e674), closes #​12619
• custom-element: optimize slot retrieval to avoid duplicates (#​13961) (84ca349), closes #​13955
• hydration: avoid mismatch during hydrate text with newlines in interpolation (#​9232) (6cbdf78), closes #​9229
• runtime-core: pass props and children to loadingComponent (#​13997) (40c4b2a)
• runtime-dom: ensure iframe sandbox is handled as an attribute to prevent unintended behavior (#​13950) (5689884), closes #​13946
• suspense: clear placeholder and fallback el after resolve to enable GC (#​13928) (f411c66)
• transition-group: use offsetLeft and offsetTop instead of getBoundingClientRect to avoid transform scale affect animation (#​6108) (dc4dd59), closes #​6105
• v-model: handle number modifier on change (#​13959) (8fbe48f), closes #​13958

v3.5.22

Compare Source

Bug Fixes

• compiler-core: identifiers in switch-case should not be inferred as references (#​13923) (5953c9f)
• compiler-dom: nodes with v-once shouldn't be stringified (#​13878) (95c1975)
• compiler-sfc: add support for @vue-ignore in runtime type resolution (#​13906) (ba7f7f9)
• compiler-sfc: enhance inferRuntimeType to support TSMappedType with indexed access (#​13848) (e388f1a), closes #​13847
• compiler-sfc: ensure css custom properties do not start with a digit (#​13870) (9c27951)
• compiler-sfc: ensure props bindings register before compiling template (#​13922) (abd5638), closes #​13920
• compiler-ssr: ensure v-show has a higher priority in SSR (#​12171) (836b829), closes #​12162
• custom-element: properly mount multiple Teleports in custom element component w/ shadowRoot false (#​13900) (5e1e791), closes #​13899
• custom-element: set prop runs pending mutations before disconnect (#​13897) (c4a88cd), closes #​13315
• custom-element: use PatchFlags.BAIL for slot when props are present (#​13907) (5358bca), closes #​13904
• reactivity: respect readonly during ref unwrapping (#​13905) (aba7fed), closes #​13903
• reactivity: update iterator to check for completion instead of value presence (#​13761) (2078f8b)
• runtime-core: simplify block-tracking disabling in h helper (#​13841) (75220c7)
• transition-group: run forceReflow on the correct document (fix #​13849) (#​13853) (1be5ddf)
• types: more precise types for Events and added missing definitions (#​9675) (8bb8fb2)
• types: set dom stub type to never instead of {} (#​13915) (8620a61), closes #​11564
• types: widen directive arg type from string to any (#​13758) (4b71706), closes #​13757

Features

• custom-element: allow specifying additional options for shadowRoot in custom elements ([#​12965](htt

---

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Bundle Size Analysis

Bundle	Size	Gzipped
Client (Minimal)	0.2 kB	0.2 kB
Server (Minimal)	0.3 kB	0.2 kB
Vue Client (Minimal)	0.3 kB	0.2 kB
Vue Server (Minimal)	0.3 kB	0.2 kB