Bump the javascript group with 4 updates

[dependabot]

Bumps the javascript group with 4 updates: vue-router, @vitest/eslint-plugin, eslint-plugin-vue and jsdom.

Updates vue-router from 4.6.4 to 5.0.2

Release notes

Sourced from vue-router's releases.

v5.0.2

   🐞 Bug Fixes

• Remove devtools from iife build  -  by @​posva (58c03)
• Loose version check vue-router  -  by @​posva (90e4b)
• volar: Empty options  -  by @​posva (02275)

    View changes on GitHub

v5.0.1

   🐞 Bug Fixes

• volar: Make typed plugin work with vue-tsc  -  by @​peter50216 in vuejs/router#2607 (7845e)

    View changes on GitHub

v5.0.0

Vue Router 5 is a boring release, it merges unplugin-vue-router into the core package with no breaking changes. The only exception is that the iife build no longer includes @vue/devtools-api because it has been upgraded to v8 and does not expose an IIFE build itself. You can track that change in this issue. See the migration guide for instructions on how to upgrade from unplugin-vue-router to Vue Router 5.

   🚀 Features

• experimental: Query params are optional by default  -  by @​posva (78913)
• Add volar plugins  -  by @​posva (530ac)
• Add data loaders as experimental  -  by @​posva (ab895)
• Add route json schema  -  by @​posva (20675)
• Upgrade devtools-api to v7  -  by @​posva (17b84)
• Upgrade devtools to v8  -  by @​posva (b8aa2)
• Runtime error on missing param parsers  -  by @​posva (3444b)
• volar: Allow rootDir option  -  by @​posva (df65a)

   🐞 Bug Fixes

• Avoid breaking older browsers support  -  by @​posva (c7ba4)
• Trigger navigation guards when keep-alive component is reactivated for different route  -  by @​babu-ch and @​posva in vuejs/router#2604 (c7735)
• Add automatic types for param parsers  -  by @​posva (0fb5d)
• Param parsers when dts is not at root  -  by @​posva (16b39)
• Expose resolveOptions for unplugin  -  by @​posva (35543)
• Escape tildes in paths  -  by @​posva (aac2e)
• volar: Upgrade config read  -  by @​posva (e3024)

    View changes on GitHub

v5.0.0-beta.2

   🚀 Features

• Runtime error on missing param parsers  -  by @​posva (26e30)
• volar: Allow rootDir option  -  by @​posva (237b5)

   🐞 Bug Fixes

... (truncated)

Commits

• 758f70f release: vue-router@5.0.2
• 90e4bb8 fix: loose version check vue-router
• 085bbdc test: add missing STRIP_DEVTOOLS and FEATURE_PROD_DEVTOOLS to Vite co...
• b322635 test: define globals
• 022758a fix(volar): empty options
• 0392906 docs: note about devtools
• 7c0d8b4 docs: update version
• 58c033c fix: remove devtools from iife build
• 0a6c674 refactor: cleanup dead code
• 4e8a073 release: vue-router@5.0.1
• Additional commits viewable in compare view

Updates @vitest/eslint-plugin from 1.6.7 to 1.6.9

Release notes

Sourced from @​vitest/eslint-plugin's releases.

v1.6.9

   🐞 Bug Fixes

• Correct dist entrypoints and type paths  -  by @​yyxi in vitest-dev/eslint-plugin-vitest#872 (1cf79)

    View changes on GitHub

v1.6.8

No significant changes

    View changes on GitHub

What's Changed

• chore: bump up deps by @​veritem in vitest-dev/eslint-plugin-vitest#871

Full Changelog: vitest-dev/eslint-plugin-vitest@v1.6.7...v1.6.8

Commits

• 84c64b7 chore: release v1.6.9
• 1cf7964 fix: correct dist entrypoints and type paths (#872)
• 481869c chore: release v1.6.8
• 73a7184 chore: bump up deps (#871)
• See full diff in compare view

Updates eslint-plugin-vue from 10.7.0 to 10.8.0

Release notes

Sourced from eslint-plugin-vue's releases.

v10.8.0

Minor Changes

• Added ESLint v10 as an allowed peer dependency (needs eslint-parser-vue v10.3.0) (#2962)
• Added more Promise functions to vue/no-async-in-computed-properties (#3020)
• Added ignoreVBindObject option to vue/attributes-order (#3012)
• Added allowEmptyAlias option to vue/valid-v-for (#3011)
• Added new destructure: "only-when-assigned" option to vue/define-props-destructuring and changed default value from destructure: "always" to destructure: "only-when-assigned" (#3009)

Patch Changes

• Fixed vue/no-unused-vars to detect components passed as slot props (#3008)

Changelog

Sourced from eslint-plugin-vue's changelog.

10.8.0

Minor Changes

• Added ESLint v10 as an allowed peer dependency (needs eslint-parser-vue v10.3.0) (#2962)
• Added more Promise functions to vue/no-async-in-computed-properties (#3020)
• Added ignoreVBindObject option to vue/attributes-order (#3012)
• Added allowEmptyAlias option to vue/valid-v-for (#3011)
• Added new destructure: "only-when-assigned" option to vue/define-props-destructuring and changed default value from destructure: "always" to destructure: "only-when-assigned" (#3009)

Patch Changes

• Fixed vue/no-unused-vars to detect components passed as slot props (#3008)

Commits

• 4b92896 Version Packages (#3023)
• 2523927 feat: allow ESLint v10 as peer dependency (#2962)
• 57058ce feat(define-props-destructuring): add only-when-assigned option (#3009)
• 72fdd6e Fix release workflow (#3022)
• 69604f7 feat(no-async-in-computed-properties): add missing Promise methods (#3020)
• 8bfb795 feat(valid-v-for): add allowEmptyAlias option (#3011)
• 9cb3e87 feat(attributes-order): add ignoreVBindObject option (#3012)
• 598d30f Fix deploy preview (#3021)
• 99dcf29 docs(no-unused-properties): complete options list (#3018)
• 138db47 fix(no-unused-vars): detect slot props used as component tags (#3008)
• Additional commits viewable in compare view

Updates jsdom from 27.4.0 to 28.0.0

Release notes

Sourced from jsdom's releases.

Version 28.0.0

• Overhauled resource loading customization. See the new README for details on the new API.
• Added MIME type sniffing to <iframe> and <frame> loads.
• Regression: WebSockets are no longer correctly throttled to one connection per origin. This is a result of the bug at nodejs/undici#4743.
• Fixed decoding of the query components of <a> and <area> elements in non-UTF-8 documents.
• Fixed XMLHttpRequest fetches and WebSocket upgrade requests to be interceptable by the new customizable resource loading. (Except synchronous XMLHttpRequests.)
• Fixed the referrer of a document to be set correctly when redirects are involved; it is now the initiating page, not the last hop in the redirect chain.
• Fixed correctness bugs when passing ArrayBuffers or typed arrays to various APIs, where they would not correctly snapshot the data.
• Fixed require("url").parse() deprecation warning when using WebSockets.
• Fixed <iframe>, <frame>, and <img> (when canvas is installed) to fire load events, not error events, on non-OK HTTP responses.
• Fixed many small issues in XMLHttpRequest.

Changelog

Sourced from jsdom's changelog.

28.0.0

• Overhauled resource loading customization. See the new README for details on the new API.
• Added MIME type sniffing to <iframe> and <frame> loads.
• Regression: WebSockets are no longer correctly throttled to one connection per origin. This is a result of the bug at nodejs/undici#4743.
• Fixed decoding of the query components of <a> and <area> elements in non-UTF-8 documents.
• Fixed XMLHttpRequest fetches and WebSocket upgrade requests to be interceptable by the new customizable resource loading. (Except synchronous XMLHttpRequests.)
• Fixed the referrer of a document to be set correctly when redirects are involved; it is now the initiating page, not the last hop in the redirect chain.
• Fixed correctness bugs when passing ArrayBuffers or typed arrays to various APIs, where they would not correctly snapshot the data.
• Fixed require("url").parse() deprecation warning when using WebSockets.
• Fixed <iframe>, <frame>, and <img> (when canvas is installed) to fire load events, not error events, on non-OK HTTP responses.
• Fixed many small issues in XMLHttpRequest.

Commits

• 20f614d Version 28.0.0
• 2b65c6a Replace the resource loader API
• 638bd68 Decode <a> and <area> query strings using document's encoding
• 457bd4b Add AGENTS.md (and CLAUDE.md)
• bf1dc15 Mark header-values tests as fail-slow due to Node.js bug
• 92f269e Update dependencies and dev dependencies
• 7d6e667 Improve spec alignment of Headers and header type tests
• 2c29aed Fix Windows-specific task kill timeouts
• d941216 Add failing regression test for animation-name case-sensitivity
• 56a833d Update style benchmark
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions