chore(deps): bump the management-production group across 1 directory with 17 updates

[dependabot]

Bumps the management-production group with 12 updates in the /management directory:

Package	From	To
@dnd-kit/abstract	0.1.21	0.4.0
@internationalized/date	3.12.0	3.12.1
@tabler/icons-vue	3.41.1	3.44.0
@tailwindcss/vite	4.2.2	4.3.0
@unovis/ts	1.6.4	1.6.5
@unovis/vue	1.6.4	1.6.5
@vueuse/core	14.2.1	14.3.0
axios	1.14.0	1.16.1
dompurify	3.3.3	3.4.3
reka-ui	2.9.5	2.9.7
tailwind-merge	3.5.0	3.6.0
vue-router	5.0.4	5.0.7

Updates @dnd-kit/abstract from 0.1.21 to 0.4.0

Release notes

Sourced from @​dnd-kit/abstract's releases.

@​dnd-kit/abstract@​0.4.0

Minor Changes

• #1923 cde61e4 Thanks @​clauderic! - Batch entity identity changes to prevent collision oscillation during virtualized sorting.

  When entities swap ids (e.g. as react-window recycles DOM nodes during a drag), multiple registry updates could fire in an interleaved order, causing the collision detector to momentarily see stale or duplicate entries and oscillate between targets.

  Entity id changes are now deferred to a microtask and flushed atomically in a single batch(), ensuring:

  • The collision notifier skips detection while id changes are pending
  • The registry cleans up ghost registrations (stale keys left behind after an id swap)

• #1915 9b24dff Thanks @​clauderic! - Redesign event type system to follow the DOM EventMap pattern. Introduces DragDropEventMap for event object types and DragDropEventHandlers for event handler signatures, replacing the ambiguously named DragDropEvents. Event type aliases (CollisionEvent, DragStartEvent, etc.) now derive directly from DragDropEventMap rather than using Parameters<> extraction.

  Migration guide

  • DragDropEvents has been split into two types:
    • DragDropEventMap — maps event names to event object types (like WindowEventMap)
    • DragDropEventHandlers — maps event names to (event, manager) => void handler signatures
  • If you were importing DragDropEvents to type event objects, use DragDropEventMap instead:

    // Before
    type MyEvent = Parameters<DragDropEvents<D, P, M>['dragend']>[0];
    // After
    type MyEvent = DragDropEventMap<D, P, M>['dragend'];

  • If you were importing DragDropEvents to type event handlers, use DragDropEventHandlers instead:

    // Before
    const handler: DragDropEvents<D, P, M>['dragend'] = (event, manager) => {};
    // After
    const handler: DragDropEventHandlers<D, P, M>['dragend'] = (
      event,
      manager
    ) => {};

  • The DragDropEvents re-export from @dnd-kit/react and @dnd-kit/solid has been removed. Import DragDropEventMap or DragDropEventHandlers from @dnd-kit/abstract directly if needed.
  • Convenience aliases (CollisionEvent, DragStartEvent, DragEndEvent, etc.) are unchanged and continue to work as before.

• #1938 e69387d Thanks @​clauderic! - Added per-entity plugin configuration and moved feedback from the Draggable entity to the Feedback plugin.

  Draggable entities now accept a plugins property for per-entity plugin configuration, using the existing Plugin.configure() pattern. Plugins can read per-entity options via source.pluginConfig(PluginClass).

  The feedback property ('default' | 'move' | 'clone' | 'none') has been moved from the Draggable entity to FeedbackOptions. Drop animation can also now be configured per-draggable.

  Plugins listed in an entity's plugins array are auto-registered on the manager if not already present. The Sortable class now uses this generic mechanism instead of its own custom registration logic.

  Migration guide

  The feedback property has been moved from the draggable/sortable hook input to per-entity Feedback plugin configuration.

... (truncated)

Commits

• ebc564e Merge pull request #1907 from clauderic/changeset-release/main
• 4f071cb Version Packages
• 5e7735f Merge pull request #2001 from lixiaoyan/feat/feedback-callback
• 412047b Merge pull request #2007 from clauderic/chore/upgrade-turborepo
• cf33af0 chore: remove turborepo agent skill from repo
• 7a02b46 chore: upgrade turborepo from 2.5.2 to 2.9.0
• fab49db Merge pull request #2006 from clauderic/claude/docs-mobile-fixes
• 2d2bb7a Add GitHub icon to mobile header
• 671a95a Pure CSS CodeGroup tabs — zero JavaScript for tab switching
• f1423c0 Fix CodeGroup: SSR-only Shiki with DOM-based tab switching
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​dnd-kit/abstract since your current version.

Updates @internationalized/date from 3.12.0 to 3.12.1

Release notes

Sourced from @​internationalized/date's releases.

React Spectrum S2 v1.3.0

In this release we are excited to announce support for expandable rows in TableView, highlight selection in TreeView, and window scrolling in collection components! Window scrolling enables virtualized collections to automatically scroll with the rest of the page – no height needed. In addition, we've updated the set of available workflow icons, and reduced the number of dependencies installed when using S2 by over 90% – see the full release notes for details.

To help assist with migrations from S1 to S2, we've added a new end to end migration Agent skill that you can use with your agent of choice. Our existing S2 Agent skill has also been updated to greatly improve its ability to select the proper S2 component to use from context, so be sure to update.

Full release notes

React Spectrum S2 v1.2.0

In this release, we are excited to announce that ListView and unavailable menu items are now available! In addition, we have added ActionBar support for TreeView and custom renderer support for the Picker's display value. We also shipped multiple TableView fixes and a set of documentation improvements including a Typography search view now available in the main search menu.

Thanks to all of our contributors for the updates in this release.

Full release notes

React Spectrum S2 v1.1.0

It’s our first release of the new year and we’ve got plenty of exciting treats we’re bringing to the table. We’ve added a variety of new features to our documentation site including a new dark/light mode switch in the site header. Our search menu also now features a Colors section where you can browse the Spectrum-defined colors and search by name or hex value to find close or exact matches. We also now offer our docs in the form of Agent Skills that can be installed locally and used by your favorite AI coding tools.

This release also includes several bugs fixes, such as properly rendering menus when rendered from within a popover and updates to TreeView disabledBehavior styling to match the latest designs.

Full Release Notes

Commits

• ca74817 Publish
• 2d2cc15 fix: prevent items from getting continually loaded in S2 TreeView (#9921)
• beda778 fix: broken compound selector exposed by browserslist bump (Table virtualizer...
• c7c4c67 fix: v3 docs build (#9919)
• efc581c fix: nightly packing too many files (#9917)
• 5c5bda5 docs: improve S2 agent skill (#9908)
• 988c120 docs: Update RangeCalendar for api consitency, add docs for nonce, and TagGro...
• 21c4dfb chore: Revert 9875 and move disabledBehavior example in TableView docs (#9914)
• 9e18b4a chore: fix S2 datepicker errorMessage type (#9909)
• b65a4aa Revert "fix: make aria test utils helpers work with vitest-browser-react (#97...
• Additional commits viewable in compare view

Updates @tabler/icons-vue from 3.41.1 to 3.44.0

Release notes

Sourced from @​tabler/icons-vue's releases.

Release 3.44.0

18 new icons:

• outline/code-ai
• outline/email-stamp
• outline/foodsteps
• outline/git-pull-request-conflict
• outline/noise-reduction
• outline/photo-alt
• outline/pointer-2
• outline/pointer-collaboration-2
• outline/pointer-collaboration
• outline/roulette
• outline/scan-cube
• outline/sketching
• outline/sparkle-2
• outline/sparkle-highlight
• outline/sparkle
• outline/sphere-2
• outline/text-scan-ai
• outline/vignette

Fixed icons: outline/air-balloon, outline/body-scan, outline/chart-sankey, outline/ear-scan, outline/grid-scan, outline/line-scan, outline/object-scan, outline/photo-scan, outline/route-scan, outline/scan-eye, outline/scan-letter-a, outline/scan-letter-t, outline/scan-position, outline/scan-traces, outline/scan, outline/text-scan-2, outline/user-scan, outline/zoom-scan

Release 3.43.0

18 new icons:

• outline/acorn
• outline/acrobatic
• outline/banana
• outline/brand-audible
• outline/building-eiffel-tower
• outline/car-door
• outline/car-lifter
• outline/chocolate
• outline/dumbbell
• outline/exercise-ball
• outline/flood
• outline/hula-hoop
• outline/leaf-maple
• outline/notdef
• outline/rugby
• outline/taiwan-dollar
• outline/target-2
• outline/unicycle

... (truncated)

Commits

• 6d128ed Release 3.44.0
• e40738b Release 3.43.0
• 076f4a9 Release 3.42.0
• See full diff in compare view

Updates @tailwindcss/vite from 4.2.2 to 4.3.0

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.3.0

Added

• Add @container-size utility (#18901)
• Add scrollbar-{auto,thin,none} utilities for scrollbar-width, and scrollbar-thumb-* / scrollbar-track-* color utilities for scrollbar-color (#19981, #20019)
• Add scrollbar-gutter-* utilities (#20018)
• Add zoom-* utilities (#20020)
• Add tab-* utilities (#20022)
• Allow using @variant with stacked variants (e.g. @variant hover:focus { … }) (#19996)
• Allow using @variant with compound variants (e.g. @variant hover, focus { … }) (#19996)
• Support --default(…) in --value(…) and --modifier(…) for functional @utility definitions (#19989)

Fixed

• Ensure @plugin resolves package JavaScript entries instead of browser CSS entries when using @tailwindcss/vite (#19949)
• Fix relative @import and @plugin paths resolving from the wrong directory when using @tailwindcss/vite (#19965)
• Ensure CSS files containing @variant are processed by @tailwindcss/vite (#19966)
• Resolve imports relative to base when result.opts.from is not provided when using @tailwindcss/postcss (#19980)
• Canonicalization: preserve significant _ whitespace in arbitrary values (#19986)
• Canonicalization: add parentheses when removing whitespace from arbitrary values would hurt readability (e.g. w-[calc(100%---spacing(60))] → w-[calc(100%-(--spacing(60)))]) (#19986)
• Canonicalization: preserve the original unit in arbitrary values instead of normalizing to base units (e.g. -mt-[20in] → mt-[-20in], not mt-[-1920px]) (#19988)
• Canonicalization: migrate arbitrary :has() variants from [&:has(…)] to has-[…] (#19991)
• Upgrade: don’t migrate inline style attributes (e.g. style="flex-grow: 1" → style="flex-grow: 1", not style="grow: 1") (#19918)
• Allow multiple @utility definitions with the same name but different value types (#19777)
• Export missing PluginWithConfig type from tailwindcss/plugin to fix errors when inferring plugin config types (#19707)
• Ensure start and end legacy utilities without values do not generate CSS (#20003)
• Ensure --value(…) is required in functional @utility definitions (#20005)
• Canonicalization: preserve required whitespace around operators in negated arbitrary values (e.g. -left-[(var(--a)+var(--b))]) (#20011)

v4.2.4

Fixed

• Ensure imports in @import and @plugin still resolve correctly when using Vite aliases in @tailwindcss/vite (#19947)

v4.2.3

Fixed

• Canonicalization: improve canonicalizations for tracking-* utilities by preferring non-negative utilities (e.g. -tracking-tighter → tracking-wider) (#19827)
• Fix crash due to invalid characters in candidate (exceeding valid unicode code point range) (#19829)
• Ensure query params in imports are considered unique resources when using @tailwindcss/webpack (#19723)
• Canonicalization: collapse arbitrary values into shorthand utilities (e.g. px-[1.2rem] py-[1.2rem] → p-[1.2rem]) (#19837)
• Canonicalization: collapse border-{t,b}-* into border-y-*, border-{l,r}-* into border-x-*, and border-{t,r,b,l}-* into border-* (#19842)
• Canonicalization: collapse scroll-m{t,b}-* into scroll-my-*, scroll-m{l,r}-* into scroll-mx-*, and scroll-m{t,r,b,l}-* into scroll-m-* (#19842)
• Canonicalization: collapse scroll-p{t,b}-* into scroll-py-*, scroll-p{l,r}-* into scroll-px-*, and scroll-p{t,r,b,l}-* into scroll-p-* (#19842)
• Canonicalization: collapse overflow-{x,y}-* into overflow-* (#19842)
• Canonicalization: collapse overscroll-{x,y}-* into overscroll-* (#19842)
• Read from --placeholder-color instead of --background-color for placeholder-* utilities (#19843)
• Upgrade: ensure files are not emptied out when killing the upgrade process while it's running (#19846)
• Upgrade: use config.content when migrating from Tailwind CSS v3 to Tailwind CSS v4 (#19846)
• Upgrade: never migrate files that are ignored by git (#19846)

... (truncated)

Changelog

Sourced from @​tailwindcss/vite's changelog.

[4.3.0] - 2026-05-08

Added

• Add @container-size utility (#18901)
• Add scrollbar-{auto,thin,none} utilities for scrollbar-width, and scrollbar-thumb-* / scrollbar-track-* color utilities for scrollbar-color (#19981, #20019)
• Add scrollbar-gutter-* utilities (#20018)
• Add zoom-* utilities (#20020)
• Add tab-* utilities (#20022)
• Allow using @variant with stacked variants (e.g. @variant hover:focus { … }) (#19996)
• Allow using @variant with compound variants (e.g. @variant hover, focus { … }) (#19996)
• Support --default(…) in --value(…) and --modifier(…) for functional @utility definitions (#19989)

Fixed

• Ensure @plugin resolves package JavaScript entries instead of browser CSS entries when using @tailwindcss/vite (#19949)
• Fix relative @import and @plugin paths resolving from the wrong directory when using @tailwindcss/vite (#19965)
• Ensure CSS files containing @variant are processed by @tailwindcss/vite (#19966)
• Resolve imports relative to base when result.opts.from is not provided when using @tailwindcss/postcss (#19980)
• Canonicalization: preserve significant _ whitespace in arbitrary values (#19986)
• Canonicalization: add parentheses when removing whitespace from arbitrary values would hurt readability (e.g. w-[calc(100%---spacing(60))] → w-[calc(100%-(--spacing(60)))]) (#19986)
• Canonicalization: preserve the original unit in arbitrary values instead of normalizing to base units (e.g. -mt-[20in] → mt-[-20in], not mt-[-1920px]) (#19988)
• Canonicalization: migrate arbitrary :has() variants from [&:has(…)] to has-[…] (#19991)
• Upgrade: don’t migrate inline style attributes (e.g. style="flex-grow: 1" → style="flex-grow: 1", not style="grow: 1") (#19918)
• Allow multiple @utility definitions with the same name but different value types (#19777)
• Export missing PluginWithConfig type from tailwindcss/plugin to fix errors when inferring plugin config types (#19707)
• Ensure start and end legacy utilities without values do not generate CSS (#20003)
• Ensure --value(…) is required in functional @utility definitions (#20005)
• Canonicalization: preserve required whitespace around operators in negated arbitrary values (e.g. -left-[(var(--a)+var(--b))]) (#20011)

[4.2.4] - 2026-04-21

Fixed

• Ensure imports in @import and @plugin still resolve correctly when using Vite aliases in @tailwindcss/vite (#19947)

[4.2.3] - 2026-04-20

Fixed

• Canonicalization: improve canonicalization for tracking-* utilities by preferring non-negative utilities (e.g. -tracking-tighter → tracking-wider) (#19827)
• Fix crash due to invalid characters in candidate (exceeding valid unicode code point range) (#19829)
• Ensure query params in imports are considered unique resources when using @tailwindcss/webpack (#19723)
• Canonicalization: collapse arbitrary values into shorthand utilities (e.g. px-[1.2rem] py-[1.2rem] → p-[1.2rem]) (#19837)
• Canonicalization: collapse border-{t,b}-* into border-y-*, border-{l,r}-* into border-x-*, and border-{t,r,b,l}-* into border-* (#19842)
• Canonicalization: collapse scroll-m{t,b}-* into scroll-my-*, scroll-m{l,r}-* into scroll-mx-*, and scroll-m{t,r,b,l}-* into scroll-m-* (#19842)
• Canonicalization: collapse scroll-p{t,b}-* into scroll-py-*, scroll-p{l,r}-* into scroll-px-*, and scroll-p{t,r,b,l}-* into scroll-p-* (#19842)
• Canonicalization: collapse overflow-{x,y}-* into overflow-* (#19842)
• Canonicalization: collapse overscroll-{x,y}-* into overscroll-* (#19842)
• Read from --placeholder-color instead of --background-color for placeholder-* utilities (#19843)

... (truncated)

Commits

• 588bd73 4.3.0 (#20023)
• d194d4c docs: fix various typos in comments and documentation (#19878)
• db27049 fix(@​tailwindcss/vite): include @​variant in feature detection (#19966)
• 5a79990 Always resolve relative files, relative to the current .css file (#19965)
• f3fdda2 fix(vite): avoid resolving JS plugins to browser CSS entries (#19949)
• 69ad7cc 4.2.4 (#19948)
• 685c19e Fix issue around resolving paths in @tailwindcss/vite (#19947)
• 2e3fa49 4.2.3 (#19944)
• 5cb1efd fix(vite): resolve tsconfig paths in CSS and JS resolvers (#19803)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tailwindcss/vite since your current version.

Updates @unovis/ts from 1.6.4 to 1.6.5

Release notes

Sourced from @​unovis/ts's releases.

1.6.5

What's Changed

• Misc | Test: Fix cypress cache, update dev and website version by @​lee00678 in f5/unovis#727
• Misc | Release: Fix update version script by @​lee00678 in f5/unovis#728
• CI | Workflows: Fix Cypress binary caching issue in GitHub Actions by @​suryahanumandla in f5/unovis#731
• Component | Stacked Bar: Fix breaking change in event datum; Consistent rounded corners by @​rokotyan in f5/unovis#743
• Misc: Vulnerability fix by @​lee00678 in f5/unovis#732
• Component | Treemap: Configurable Sorting and Tiling functions by @​rokotyan in f5/unovis#749
• Misc: Vulnerability fixes by @​suryahanumandla in f5/unovis#754
• Component | TopoJSON: Major TopoJSON Map updates by @​lee00678 in f5/unovis#750
• Website | Docs | TopoJsonMap: Intro Topojson Map docs by @​suryahanumandla in f5/unovis#757
• React: Fix build issue by @​lee00678 in f5/unovis#761
• Component | TopoJSONMap: Resize enhancements by @​suryahanumandla in f5/unovis#766
• Misc | Vue: Fix autogen script and build issue by @​suryahanumandla in f5/unovis#737
• Component | Topojson: Fix pan and zoom then click node to resize position bug by @​lee00678 in f5/unovis#769
• Core: Fix vulnerabilities by @​suryahanumandla in f5/unovis#770

Full Changelog: f5/unovis@1.6.4...1.6.5

Commits

• 14e5609 Release: 1.6.5
• 14a326f Misc: Update all dependency licenses
• 7e65aa5 Component | Topojson: Fix pan and zoom then click node to resize position bug
• 19b685c Component | TopoJSONMap: Resize enhancements
• dac178e React: Fix build issue
• 80b50a2 Component | TopoJSON: Make sure attirbutes get applied on point updates
• 11b8965 Component | TopoJSON: Add smartTransition to area label
• e543481 Component | TopoJSON: Remove type any
• 083744b Component | TopoJSON: Move certain functions to modules
• f975954 Component | TopoJSON: Update style.ts to the new css variabel definitations
• Additional commits viewable in compare view

Updates @unovis/vue from 1.6.4 to 1.6.5

Release notes

Sourced from @​unovis/vue's releases.

1.6.5

What's Changed

• Misc | Test: Fix cypress cache, update dev and website version by @​lee00678 in f5/unovis#727
• Misc | Release: Fix update version script by @​lee00678 in f5/unovis#728
• CI | Workflows: Fix Cypress binary caching issue in GitHub Actions by @​suryahanumandla in f5/unovis#731
• Component | Stacked Bar: Fix breaking change in event datum; Consistent rounded corners by @​rokotyan in f5/unovis#743
• Misc: Vulnerability fix by @​lee00678 in f5/unovis#732
• Component | Treemap: Configurable Sorting and Tiling functions by @​rokotyan in f5/unovis#749
• Misc: Vulnerability fixes by @​suryahanumandla in f5/unovis#754
• Component | TopoJSON: Major TopoJSON Map updates by @​lee00678 in f5/unovis#750
• Website | Docs | TopoJsonMap: Intro Topojson Map docs by @​suryahanumandla in f5/unovis#757
• React: Fix build issue by @​lee00678 in f5/unovis#761
• Component | TopoJSONMap: Resize enhancements by @​suryahanumandla in f5/unovis#766
• Misc | Vue: Fix autogen script and build issue by @​suryahanumandla in f5/unovis#737
• Component | Topojson: Fix pan and zoom then click node to resize position bug by @​lee00678 in f5/unovis#769
• Core: Fix vulnerabilities by @​suryahanumandla in f5/unovis#770

Full Changelog: f5/unovis@1.6.4...1.6.5

Commits

• 14e5609 Release: 1.6.5
• 14a326f Misc: Update all dependency licenses
• d4a22d2 Misc | Vue: Fix autogen script and build issue
• 45e9014 Component | TopoJSON: Remove PointDatum GenericDataRecord type
• 44c3b83 Misc | Release: Fix update version script
• See full diff in compare view

Updates @vueuse/core from 14.2.1 to 14.3.0

Release notes

Sourced from @​vueuse/core's releases.

v14.3.0

   🚀 Features

• Expose pointer event onLongPress  -  by @​mrcwbr in vueuse/vueuse#5295 (b1688)
• createInjectionState: Non-undefined return when default specified  -  by @​Laupetin in vueuse/vueuse#5306 (b0c51)
• createReusableTemplate: Add support for specifying component names  -  by @​wbolster in vueuse/vueuse#5300 (ea29d)
• nuxt: Add composable variants to auto imports  -  by @​OrbisK in vueuse/vueuse#5285 (ac2ef)
• useElementVisibility: Add controls option  -  by @​kricsleo in vueuse/vueuse#5191 (0cb03)
• useTextareaAutosize: Add optional maxHeight to limit autosize growth  -  by @​palamarchukser, @​antfu and @​9romise in vueuse/vueuse#5324 (1a3e5)

   🐞 Bug Fixes

• Add explicit ./package.json export to all packages  -  by @​babu-ch and @​OrbisK in vueuse/vueuse#5343 (0d989)
• core: Always return ssrValue in useCssSupports before mounted  -  by @​danielroe in vueuse/vueuse#5290 (76b0b)
• directive: Create disposable directive func cleanup of side effects unmounted  -  by @​kalu5, @​43081j, Raman Paulau and @​OrbisK in vueuse/vueuse#5244 (52d68)
• docs: Typos in useManualRefHistory, useFocusWithin, useStorageAsync, useIntersectionObserver  -  by @​blowsie, Sam Blowes and @​OrbisK in vueuse/vueuse#5329 (1d9c4)
• docs: Add ignoreDeprecations for twoslash TS 6.0 compat  -  by @​antfu and Claude Opus 4.6 (1M context) in vueuse/vueuse#5367 (9d1eb)
• metadata: Cleanup removed function resolveRef  -  by @​ntnyq in vueuse/vueuse#5307 (49da8)
• onClickOutside: Detect iframe inside shadow DOM with detectIframe option  -  by @​babu-ch and @​OrbisK in vueuse/vueuse#5336 (1a77b)
• shared: Align overloads order of watch functions with original version  -  by @​KazariEX in vueuse/vueuse#5288 (f1d32)
• useAxios: Handle optional response data safely  -  by @​jahnli in vueuse/vueuse#5318 (51198)
• useCached: Update comparator type and improve documentation  -  by @​IceMooncake in vueuse/vueuse#5376 (d886c)
• useClipboard: Prevents fail in Safari for async operation  -  by @​MatteoGabriele in vueuse/vueuse#5369 (5ec56)
• useSortable: Re-query DOM on every start() for string selectors  -  by @​Mini-ghost in vueuse/vueuse#5374 (3341f)
• useVirtualList: React to changes made in mutable arrays properly  -  by @​dcherman in vueuse/vueuse#5267 (7069e)
• useWakeLock: Auto-release wake lock on component unmount  -  by @​ProgrammingWithSid and @​OrbisK in vueuse/vueuse#5271 (43937)
• useWebSocket: Race condition caused by onopen/onclose events.  -  by @​DanCardin, @​antfu and @​9romise in vueuse/vueuse#5175 (6661c)
• whenever: Improve old value types  -  by @​VChet in vueuse/vueuse#5096 (979c6)

   🏎 Performance

• Replace deepRef with shallowRef where appropriate  -  by @​9romise in vueuse/vueuse#5293 (80004)

    View changes on GitHub

Commits

• 99c5df9 chore: release v14.3.0
• 1a3e572 feat(useTextareaAutosize): add optional maxHeight to limit autosize growth ...
• d886c2f fix(useCached): update comparator type and improve documentation (#5376)
• acf182e docs(useCloned): add tip about watch flush timing (#5375)
• 5ec568d fix(useClipboard): prevents fail in Safari for async operation (#5369)
• 52d688f fix(directive): create disposable directive func cleanup of side effects unmo...
• df72450 chore: update deps
• 1aa211e Make demo of useElementSize readonly (#5365)
• 0d98998 fix: add explicit ./package.json export to all packages (#5343)
• 8c252c3 refactor: change primitive to shallowReadonly, rename readonly usage to `...
• Additional commits viewable in compare view

Updates axios from 1.14.0 to 1.16.1

Release notes

Sourced from axios's releases.

v1.16.1 — May 13, 2026

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.

🔒 Security Fixes

• Prototype Pollution Defence-in-Depth: Hardened formDataToJSON against already-polluted Object.prototype by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (#7413)
• Proxy Cleartext Leak: Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (#10858)
• CI Cache Removal: Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (#10882)

🐛 Bug Fixes

• Data URI Parsing: Updated the fromDataURI regex to match RFC 2397 more strictly, fixing edge cases in data: URL handling. (#10829)
• Unicode Headers: Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (#10850)
• XHR Upload Progress: Guarded against malformed ProgressEvent payloads emitted by some environments during XHR upload, preventing crashes when loaded / total are missing or invalid. (#10868)
• Webpack 4 Fetch Adapter: Fixed an "unexpected token" error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (#10864)
• Type Definitions: Made parseReviver context.source optional in the type definitions to align with the ES2023 specification. (#10837)
• URL Object Support Reverted: Reverted the change that allowed passing a URL object as config.url (originally #10866) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (#10874)

🔧 Maintenance & Chores

• Cycle Detection Refactor: Replaced the array-based cycle tracker in toJSONObject with a WeakSet, improving performance and memory behaviour on large nested structures. (#10832)
• composeSignals Cleanup: Refactored composeSignals to use a clearer early-return structure, simplifying the cancellation/abort composition path. (#10844)
• AI Readiness & Repo Docs: Added AGENTS.md and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (#10835, #10841)
• Docs Improvements: Clarified the GET request example, fixed the interceptor eject example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (#10836, #10853, #10856)
• Sponsorship Tooling: Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (#10843, #10859, #10869)
• Dependencies: Bumped @commitlint/cli from 20.5.0 to 20.5.2. (#10846)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

• @​hpinmetaverse (#10836)
• @​tommyhgunz14 (#7413)

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml