fix(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@iconify/vue (source)	4.1.1 → 4.3.0			dependencies	minor
@parcel/core	2.10.1 → 2.16.4			devDependencies	minor
@parcel/transformer-sass	2.10.1 → 2.16.4			devDependencies	minor
@parcel/transformer-vue	2.10.1 → 2.16.4			devDependencies	minor
parcel	2.10.1 → 2.16.4			devDependencies	minor
pnpm/action-setup	v2.4.0 → v2.4.1			action	patch
serve	14.2.1 → 14.2.6			devDependencies	patch
vue (source)	3.3.7 → 3.5.40			dependencies	minor
vue-router (source)	4.2.5 → 4.6.4			dependencies	minor

---

Release Notes

parcel-bundler/parcel (@​parcel/core)

v2.16.4

Compare Source

Fixed

• Dev server
  • Add --no-cors option to disable CORS headers – Details

v2.16.3

Compare Source

Fixed

• React Server Components
  • Fix react-dom import (bug in 2.16.2)

v2.16.2

Compare Source

Fixed

• HTML

  • Fix siblings after <svg> being removed by HTML minifier – Details

• React Server Components

  • Bump react-server-dom-parcel to ^19.1.1 to fix vulnerability
  • Fix cache key clash in @parcel/packager-react-static – Details
  • Fix using inline string transformers with @parcel/packager-react-static – Details
  • Preload CSS as soon as the RSC payload loads, without waiting for it to mount. This is useful for pre-fetching. – Details

v2.16.1

Compare Source

Fixed

• JavaScript

  • Fix macro location information – Details

• React Server Components
  Improve performance of RSC builds – Details

v2.16.0

Compare Source

Added

• JavaScript
  • Code split re-exports when scope hoisting is disabled – Details

Fixed

• JavaScript
  • Scope macro asset unique keys to the parent asset – Details

v2.15.4

Compare Source

v2.15.3

Compare Source

Fixed

• JavaScript

  • Expose line and column number to macros – Details

• React Server Components

  • Invalidate cache in ReactStaticPackager when pages are added or client components change – Details
  • Fix lazy mode with React Server Components – Details
  • Fix @parcel/rsc duplicate types – Details
  • Ensure publicUrl ends with a slash in react-static packager – Details
  • Fix hash reference replacement in react-static packager – Details

v2.15.2

Compare Source

Fixed

• Core

  • Change minimum required glibc version to 2.26 – Details
  • Cache inline bundle packaging – Details
  • Use stable id for package requests – Details

• HTML

  • Do not remove <meta charset="utf-8"> – Details

• MDX

  • Make URL dependencies in MDX files optional – Details

• React Server Components

  • Fix memory leak in react-static packager – Details

• Resolver

  • Fix resolving source package exports condition from self reference – Details

• SVG

  • Update oxvg – Details

• Compressors

  • Use max level compression for brotli compressor – Details

v2.15.1

Compare Source

Fixed

• HTML

  • Fix serializing <template> element contents – Details

• JavaScript

  • Skip optional dependencies in ESM externals – Details

v2.15.0

Compare Source

Added

• Core

  • Distribute Rust binaries for each architecture as separate npm packages – Details

• HTML and SVG

  • Add Rust-based transformer/packager/optimizer for HTML and SVG – Details

• Resolver

  • Support cloudflare: scheme and no longer rewrite node: scheme – Details

Fixed

• Core

  • Avoid segmentation fault on thread exit on Linux – Details
  • Support older GLIBC versions on Linux – Details

• JavaScript

  • Include all symbols in non-browser entries – Details
  • Update swc and mdx-rs – Details
  • Fix exporting objects with non-configurable prototypes from React Server Components – Details

v2.14.4

Compare Source

Fixed

• Core

  • Fix duplicate bundles error message – Details

• JavaScript

  • Support ESM externals and exports in dev packager – Details
  • Treat Deno's jsr: dependencies as external – Details

v2.14.3

Compare Source

Fixed

• JavaScript
  • Updated to React 19.1, which enables Server Components to be used with stable React instead of only canary – Details

v2.14.2

Compare Source

Fixed

• Core

  • Enable resolving source field in dev dependencies – Details
  • Error when building a library target in serve mode – Details

• JavaScript

  • Fix MDX inline assets in static RSCs – Details
  • Fix symbol collection with multiple exports of same function (e.g. date-fns) – Details

• REPL

  • Fix error overlay resolution in REPL – Details

• create-parcel

  • Fix gitignore in create-parcel – Details
  • Fix create-parcel on windows – Details

v2.14.1

Compare Source

Fixed

• Resolver
  • Fix resolving package self references – Details

v2.14.0

Compare Source

Added

• Core

  • Add a CLI to create new Parcel apps – Details

• JavaScript

  • React Server Components – Details, Details, Details, Details, Details
  • Add RSC-based static site generator – Details
  • First-class MDX support – Details
  • Merge React Refresh runtime and transformer – Details
  • Modernize React error overlay – Details
  • Support bundling node native modules – Details
  • Use import maps for bundle manifest – Details

• Dev Server

  • Support running node bundles in dev server – Details
  • Apply HMR updates via node worker thread – Details

Fixed

• Core
  • Fix dev dep request missing 'invalidateOnCreate' – Details
  • Add napi-wasm as optional peer dependency in @​parcel/rust – Details

v2.13.3

Compare Source

Fixed

• Resolver
  • Ignore invalid package.json fields – Details

v2.13.2

Compare Source

Fixed

• JavaScript

  • Fix HMR when asset is duplicated between multiple bundles – Details

• SASS

  • Fix SASS resolution with non file: URLs – Details

v2.13.1

Compare Source

Fixed

• JavaScript

  • Improve HMR with dynamic imports – Details
  • Update SWC – Details

• SASS

  • Fix SASS resolution rules for modern API – Details

v2.13.0

Compare Source

Added

• Core

  • Expose watcher ignore and watcher backend options – Details
  • Improve large watcher events payload experience – Details
  • Add support for globs in package.json#source – Details
  • Add config key invalidation – Details

• Bundler

  • Add library bundler – Details

• Dev Server

  • Support .proxyrc.ts – Details

• Resolver

  • 12x faster resolver cache – Details
  • Correctly handle empty resolver diagnostics array – Details

Fixed

• Core

  • Remove abortcontroller-polyfill – Details
  • Fix missing content key in symbol propagation when asset is removed – Details
  • Update minimum supported node version to 16 – Details
  • Ensure the snapshot directory matches the watch dir – Details
  • Add parcel version to PluginOptions – Details
  • Fix possible race condition in the caching of request graph – Details
  • Ensure empty extended config throws a diagnostic – Details
  • Ensure Asset public ids are assigned deterministically – Details
  • Directories ignored by watcher should be relative to the watch directory – Details
  • Fix request tracker incremental cache write for new nodes – Details
  • Improve request graph cache reading – Details
  • Exit process with error code when reporters fail – Details
  • Write tmp files to the OS tmp directory - Details
  • Fix small HMR issues – Details
  • Fix crash in EntryRequest with multiple globs in the source field – Details
  • Revert split manifest runtime bundles – Details
  • Revert chunked cache blobs for improved stability – Details
  • Update dependencies – Details

• Bundler

  • Fix assets outside project root with Manual Shared Bundles – Details

• JavaScript

  • Avoid non-identifier export names in non-entry library bundles – Details
  • Relax react-refresh version range – Details
  • Also emit swc recoverable errors – Details
  • Bump swc – Details, Details, Details, Details
  • Bump swc and browserslist-rs – Details
  • Replace std::sync locks with parking_lot locks for better stability – Details
  • Ensure const modules in async bundles are wrapped – Details
  • Fix dev packager global reference – Details
  • Fix import usage tracking for destructure defaulting – Details
  • Update Node.js globals replacer to use SWC VisitMut – Details
  • Update process.env replacer to use SWC VisitMut – Details
  • Update Node.js __filename and __dirname replace to use SWC VisitMut – Details
  • Fix parcelRequire being added to multi-target libraries – Details
  • Handle TypeScript expressions in macro evaluator – Details

• Resolver

  • Fix NUL byte crash in resolver – Details
  • Change default resolver error message for custom specifiers – Details

• TypeScript

  • Handle dynamic import type references in TS types transformer – Details
  • Correctly handle qualified names in TS types import() – Details

• SASS

  • Migrate to new sass API – Details

• SVG

  • Load svgo version from project – Details
  • Update svgr and use project svgo version – Details

• Image

  • Bump oxipng – Details

• Vue

  • Upgrade consolidate to v1 – Details

• Web Extensions

  • Allow both service_worker and scripts in MV3 Web Extensions – Details

v2.12.0

Compare Source

Added

• Core

  • Add REPL playground for Parcel to the website – Details
  • Improve package manager detection for auto install – Details

• JavaScript

  • Add support for JS macros – Details
  • Statically evaluate constants referenced by macros – Details
  • Upgrade to ESLint 8 – Details
  • Bump swc – Details

• CSS

  • Use lightningcss to implement CSS packager – Details

• Bundler

  • Rename "parentAsset" to "root" for Manual Shared Bundle config and remove unstable prefix – Details

• Web Extensions

  • Add content script world property to manifest schema validation – Details

• Performance

  • Adjacency list optimizations – Details
  • Break up request graph cache serialisation and run after build completion – Details

Fixed

• Core

  • Drop per-pipeline transformation cache – Details
  • Clippy and use napi's Either3 – Details
  • Add lazy/eager cache key to avoid invalid change when switching modes – Details

• JavaScript

  • Remove decl_collector pass and use SWC's unresolved_mark instead – Details

• Bundler

  • Fix multiple css bundles in entry bundle groups issue – Details
  • Allow parallel type change bundles to be reused by async siblings – Details
  • Skip on missing parent asset for manual shared bundles – Details

Unstable

• Add source map support to the inline-require optimizer – Details

v2.11.0

Compare Source

Added

• Dev

  • Log build phase times for dev builds Details
  • Progress messages for writing to cache Details
  • VSC Extension JSON schema Details
  • Print phase times on development builds Details
  • Publish bundle-stats-cli and parcel-query Details

Fixed

• Dev

  • Increase threshold for showing progress bar to 500k nodes Details
  • Fix parcel-query Details
  • FIX[dev-server]: Fix html file matching from URL Details
  • Fix parcel query's inspect cache Details
  • Bug fix for exiting early when identifying requestGraph in loadGraphs Details
  • Fix HMR on .localhost domains Details
  • Modify parcel query to not require all graphs on startup Details
  • Bug fix for async Parcel-query Details
  • Remove reliance on requestTracker in loadGraphs Details

• Core

  • Reduce redundancy in the RequestGraph's Request, Env, and Option nodes Details
  • Move registerCoreWithSerializer to its own file Details
  • Filter --expose-gc and --max-semi-space-size execArgv Node args from workers Details
  • Optimize Symbol Propagation (propagateSymbolsUp) Details
  • Convert Request Graph node types + request node requestTypes to numbers Details
  • fsFixture: ignore empty lines in fixtures Details
  • Unstable File Invalidations Details
  • Configurable watch root Details

• Resolver

  • Add ~ and / support to the glob resolver Details

• JavaScript

  • Bump swc Details
  • Bumping lightningcss to 1.22.1 Details
  • Fix CI Details
  • Change inline-requires to only run when optimizing Details
  • Fix tsconfig extends from node_modules Details
  • Bump some deps Details
  • Bump swc and napi-rs Details
  • Fix references to packages.atlassian.com Details
  • Fix build-ts step Details
  • Bump rimraf version to ^5.05 Details
  • Use centos image with newer Node 16 Details

v2.10.3

Compare Source

Added

• Dev
  • Added cacheInfo to Parcel Query - Details
  • Add parcel-link and parcel-unlink dev CLIs - Details

Fixed

• Core

  • Mark previously deferred assets as dirty for symbol prop - Details
  • Write bundle graph to cache if error occurs during bundling - Details
  • Fixing issues when import * as is used with export * - Details
  • Writing cache in chunks - Details
  • Reduce redundancy in the RequestGraph's file nodes - Details
  • Fix dependency retargeting with ambiguous reexports - Details

• JavaScript

  • Fixing behavior for hasOwnProperty in modules exporting member with same name - Details

• WebbExtension

  • Don't crash if WebExt has no content_scripts - Details

• PostHTML, Pug, Stylus

  • Simplified calls to invalidateOnFileChange - Details

v2.10.2

Compare Source

Fixed

• Core

  • Use clz32 for counting trailing zeroes – Details

• JavaScript

  • Do not wrap duplicated assets when they are in different targets – Details

pnpm/action-setup (pnpm/action-setup)

v2.4.1

Compare Source

Updated the bundled pnpm version to v7 to fix the ERR_INVALID_THIS error.

vercel/serve (serve)

v14.2.6

Compare Source

Patch Changes

• 7fcb924: Bump ajv to 8.18.0
• b3888f9: Update serve-handler to 6.1.7 to fix ReDoS vulnerabilities

v14.2.5

Compare Source

Patch Changes

• f4b6fbd: Update compression to v1.8.1

v14.2.4

Compare Source

Patches

• Bump serve-handler, vitest, and `typescript: #​812

v14.2.3

Compare Source

Patches

• Bump @zeit/schemas to 2.36.0: #​803

v14.2.2

Compare Source

Patches

• fix: Update ajv from 8.11.0 to 8.12.0: #​796

Credits

Huge thanks to @​legobeat for helping!

vuejs/core (vue)

v3.5.40

Compare Source

Bug Fixes

• compiler-core: avoid leaking slot branch keys (#​15051) (20c9d26), closes #​15048
• hydration: pass namespace when patching dynamic props (#​15082) (e0d2723), closes #​15081 #​15050
• reactivity: handle effect removal during scope stop (#​15084) (378f978), closes #​15083
• runtime-core: skip lazy hydration for detached roots (#​15092) (97f3525), closes #​15091
• runtime-core: unwind dangling blocks when slot content throws (#​15071) (ddc132d), closes #​15070
• runtime-dom: respect current select model type (#​15010) (eb89e93), closes #​15009
• server-renderer: handle errors in optimized component renders (#​12601) (474907c), closes #​12575
• server-renderer: remove package dependency cycle (#​15063) (4d35eca)
• shared: prevent SSR comment escaping from creating closing delimiters (#​15045) (bd962bb)
• types: don't constrain component $el type to Element (#​15040) (164460a)

v3.5.39

Compare Source

Bug Fixes

• compiler-core: correct filter rewrite recursion (#​14959) (be7ce31)
• hydration: force patch dynamic props when hydrating (#​9083) (024cf06), closes #​9033
• hydration: respect data-allow-mismatch on conditional branches (#​12801) (164af63), closes #​12782
• reactivity: avoid triggering effects when set fails (#​14964) (e450973)
• runtime-core: handle non-isomorphic block element update (#​15002) (932ddd0), closes #​6385
• runtime-core: normalize function children for elements and Teleport (#​9108) (2f374cd), closes #​9107
• runtime-core: pause tracking when invoking function refs (#​14985) (3ac052b)
• runtime-core: preserve once event listener name (#​8341) (87b73b6), closes #​8342
• runtime-dom: preserve option modifier event names (#​8338) (4b659e6), closes #​8334
• ssr: dedupe inherited scope ids during vnode rendering (#​15005) (027da6b), closes #​12159 #​12175
• ssr: resolve nested async teleport content (#​9431) (31d0f23), closes #​6207
• teleport: handle teleport unmount edge case (#​12705) (671997a), closes #​12702
• types: support named tuple emits (#​12676) (232f402), closes #​12673
• types: validate defineModel defaults (#​14968) (747f57e), closes #​14966

v3.5.38

Compare Source

v3.5.37

Compare Source

v3.5.36

Compare Source

Bug Fixes

• compiler-core: avoid crash on CDATA at the document root (#​14916) (0ea17e2)
• compiler-core: prefix dynamic keys on v-memo elements (#​14922) (68e978e), closes #​14920
• compiler-sfc: handle vue-ignore on leading intersection/union type (#​14950) (0dcd225), closes #​12254
• compiler-sfc: respect var hoisting in props destructure (48ad452)
• reactivity: preserve watch callback return value when wrapped for once: true (#​14902) (450a8a8)
• runtime-core: add dev warning for silent catch in compat mode and fix test description typo (#​14891) (db3e117)
• runtime-core: force model update when reverted before sync (#​14897) (7f76378), closes #​13524
• runtime-core: skip async component callbacks after unmount (#​14911) (5300ead)
• transition: avoid move transition for hidden v-show group children (#​14895) (c11f6ee), closes #​14894
• watch: trigger immediate callback for empty sources (#​14914) (1f2ca7e), closes #​14898

v3.5.35

Compare Source

Bug Fixes

• compiler-core: avoid double processing v-for keys with v-memo (#​14861) (34a0ded), closes #​14859
• compiler-sfc: resolve top-level exports from files registered as global types (#​14805) (3d077f2), closes nuxt/nuxt#33694
• runtime-core: avoid repeated hydration mismatch checks (#​14857) (170fc95), closes #​14855
• runtime-core: skip idle persisted transition hooks in keep-alive moves (#​14865) (80fc139), closes #​14031
• server-renderer: propagate sync errors from ssrRenderSuspense (#​14804) (4760997), closes nuxt/nuxt#28162
• teleport: skip child unmount when pending mount discarded (#​14876) (#​14877) (584beb1)

Performance Improvements

• reactivity: skip type checks for cached proxies (#​14860) (5734fe9)
• runtime-dom: optimize array event handler dispatch (#​14828) (bb18dc8)
• server-renderer: avoid materializing iterables in ssrRenderList (#​14821) (1b7a2cc)

v3.5.34

Compare Source

Bug Fixes

• compiler-sfc: infer Vue ref wrapper types when source is unresolvable (#​14758) (7f46fd4), closes #​14729
• compiler-sfc: preserve hash hrefs on <image> elements (#​14756) (090b2e3)
• compiler-sfc: resolve type re-exports inside declare global (#​14766) (acfffe3)
• reactivity: prevent orphan effect when created in a stopped scope (#​14778) (c8e2d4a), closes #​14777
• runtime-core: avoid symbol coercion during props validation (#​8539) (23d4fb5), closes #​8487
• suspense: avoid DOM leak with out-in transition in v-if fragment (#​14762) (9667e0d), closes #​14761

v3.5.33

Compare Source

Bug Fixes

• compiler-sfc: handle nested :deep in selector pseudos (#​14725) (bb9d265), closes #​14724
• reactivity: unlink effect scopes on out-of-order off (#​14734) (e7659be), closes #​14733
• runtime-dom: preserve textarea resize dimensions (#​14747) (11fb2fd), closes #​14741
• teleport: don't move teleport children if not mounted (#​14702) (6a61f44), closes #​14701
• transition: preserve placeholder for conditional explicit default slots (#​14748) (45990ce), closes #​14727

v3.5.32

Compare Source

Bug Fixes

• runtime-core: prevent currentInstance leak into sibling render during async setup re-entry (#​14668) (f166353), closes #​14667
• teleport: handle updates before deferred mount (#​14642) (32b44f1), closes #​14640
• types: allow customRef to have different getter/setter types (#​14639) (e20ddb0)
• types: use private branding for shallowReactive (#​14641) (302c47a), closes #​14638 #​14493

Reverts

• Revert "fix(server-renderer): cleanup component effect scopes after SSR render" (#​14674) (219d83b), closes #​14674 #​14669

v3.5.31

Compare Source

Bug Fixes

• compiler-sfc: allow Node.js subpath imports patterns in asset urls (#​13045) (95c3356), closes #​9919
• compiler-sfc: support template literal as defineModel name (#​14622) (bd7eef0), closes #​14621
• reactivity: normalize toRef property keys before dep lookup + improve types (#​14625) (1bb28d0), closes #​12427 #​12431
• runtime-core: invalidate detached v-for memo vnodes after unmount (#​14624) (560def4), closes #​12708 [#​12710](https://redirect.github.com/vuejs/cor

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for evelyn-pro ready!

Name	Link
🔨 Latest commit	bbaa903
🔍 Latest deploy log	https://app.netlify.com/projects/evelyn-pro/deploys/6a6b573c815cf80008bc6739
😎 Deploy Preview	https://deploy-preview-55--evelyn-pro.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.