chore(deps): weekly safe npm updates · 7 packages

[mendral-app]

Packages bumped

Package	Old	New	Type
@codemirror/state	6.7.0	6.7.1	patch
@codemirror/view	6.43.4	6.43.8	patch
eslint	10.6.0	10.8.1	minor
prettier	3.9.4	3.9.6	patch
typescript-eslint	8.62.1	8.67.0	minor
vite	8.1.1	8.2.1	minor
vue-tsc	3.3.5	3.3.9	patch

Per-package detail

@codemirror/state 6.7.0 → 6.7.1

Changelog highlights:

• Bug fixes and stability improvements

Impact: Used throughout the CodeMirror editor integration. Patch-level fix, no API changes — drop-in upgrade.

---

@codemirror/view 6.43.4 → 6.43.8

Changelog highlights:

• Fixed widget reuse and DOM update behavior
• Improved composition handling near widgets
• Enhanced EditorView.posAtCoords() performance and accuracy
• Fixed cursor positioning and selection edge cases
• Fixed data structure corruption in viewport changes
• Improved soft-wrap boundary handling

Impact: Core editor view package. All fixes are internal behavior corrections — no API changes. Improves editor reliability in the CUE authoring panel.

---

eslint 10.6.0 → 10.8.1

Changelog highlights:

• New rule options: errorClassNames in preserve-caught-error, max-nested-callbacks
• Better shadowed global detection across multiple rules
• Fixed ASI hazards in autofix generation
• Fixed false positives in getter-return, accessor-pairs
• Improved regex performance (quadratic-time issue)

Impact: Dev-only tool. New features are opt-in, fixes improve autofix correctness. No configuration changes needed.

---

prettier 3.9.4 → 3.9.6

Changelog highlights:

• Preserve quotes for methods named new
• Support import defer in TypeScript parser
• Added new official plugin: @prettier/plugin-yuku

Impact: Dev-only formatter. Backward-compatible fixes — formatting output may change trivially in edge cases.

---

typescript-eslint 8.62.1 → 8.67.0

Changelog highlights:

• import defer syntax support
• New parser option: onUnsupportedTypeScriptVersion
• Improved no-shadow diagnostics for enums
• Deprecated [no-loop-func] and [no-restricted-imports] (soft, still functional)
• TypeScript 7 compatibility improvements

Impact: Dev-only lint tooling. New features are opt-in. Soft deprecations emit warnings but don't fail. No config changes needed.

---

vite 8.1.1 → 8.2.1

Changelog highlights:

• New input option for library entry configuration
• PostCSS config type export
• Fixed CSS chunk import mapping
• Fixed HMR environment snapshot preservation
• Fixed client script tag injection order
• Performance: CSS pure chunk lookups optimized via Set

Impact: Build tool. This project uses Vite in app mode (not library mode), so the new input option doesn't apply. HMR and CSS fixes improve dev experience. No config changes needed.

---

vue-tsc 3.3.5 → 3.3.9

Changelog highlights:

• Vapor directive support
• Unused generic type parameter checking
• TypeScript 7 upgrade support
• Fixed v-for item type resolution
• Fixed SFC block extraction
• Fixed directive modifier completion

Impact: Dev-only type checker for Vue SFCs (used in vue-tsc -b build step). Bug fixes improve type-checking accuracy — no behavioral change to output.

Files modified

• frontend/package.json
• frontend/pnpm-lock.yaml

Skipped this ecosystem

Package	Current	Candidate	Reason
@fontsource/jetbrains-mono	5.2.8	5.3.0	Open PR #4 already covers this bump
@tailwindcss/vite	4.3.2	4.3.3	Open PR #4 already covers this bump
@vitejs/plugin-vue	6.0.7	6.0.8	Open PR #4 already covers this bump
elkjs	0.11.1	0.12.0	Open PR #4 already covers this bump
eslint-plugin-vue	10.9.2	10.10.0	Open PR #4 already covers this bump
tailwindcss	4.3.2	4.3.3	Open PR #4 already covers this bump
vue	3.5.39	3.5.41	Open PR #4 covers 3.5.40; caret range resolves 3.5.41
typescript	6.0.2	7.0.2	Major version bump — needs separate risky PR
@types/node	24.13.2	26.2.0	Major version bump — needs separate risky PR
vitest	3.2.4	4.1.10	Major version bump — needs separate risky PR
@codemirror/autocomplete	6.20.3	—	Already at latest eligible
@codemirror/commands	6.10.4	—	Already at latest eligible
@codemirror/language	6.12.4	—	Already at latest eligible
@codemirror/lint	6.9.7	—	Already at latest eligible
@lezer/highlight	1.2.3	—	Already at latest eligible
@vue-flow/background	1.3.2	—	Already at latest eligible
@vue-flow/controls	1.1.3	—	Already at latest eligible
@vue-flow/core	1.48.2	—	Already at latest eligible
@vue-flow/node-resizer	1.5.1	—	Already at latest eligible
codemirror	6.0.2	—	Already at latest eligible
lucide-vue-next	1.0.0	—	Already at latest eligible
@vue/eslint-config-typescript	14.9.0	—	Already at latest eligible
@vue/tsconfig	0.9.1	—	Already at latest eligible
eslint-config-prettier	10.1.8	—	Already at latest eligible

---

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

• View implementation session