chore(deps): weekly safe npm updates · 7 packages

[mendral-app]

Packages bumped

Package	Old	New	Type
@fontsource/jetbrains-mono	5.2.8	5.3.0	minor
@tailwindcss/vite	4.3.2	4.3.3	patch
@vitejs/plugin-vue	6.0.7	6.0.8	patch
elkjs	0.11.1	0.12.0	minor
eslint-plugin-vue	10.9.2	10.10.0	minor
tailwindcss	4.3.2	4.3.3	patch
vue	3.5.39	3.5.40	patch

Per-package detail

@fontsource/jetbrains-mono 5.2.8 → 5.3.0

Changelog highlights:

• Updated font files to JetBrains Mono v24
• Same weights, styles, and subsets supported

Impact: Pure font file update. No API changes, no code impact.

---

@tailwindcss/vite 4.3.3 & tailwindcss 4.3.3

Changelog highlights:

• Fixed Vite HMR: prevent full page reloads when scanned files are processed by Vite but not yet loaded as modules
• Fixed selector parsing for [data-foo]div
• Fixed theme color matching: arbitrary hex colors now case-insensitively match theme colors
• Fixed fractional opacity modifiers with named shadow sizes
• Fixed Firefox iframe:focus-visible outline override
• Fixed PostCSS rebuild triggering with preprocessors
• Improved polling fallback when @parcel/watcher can't be loaded

Impact: Bug fixes only. HMR reliability improvement is relevant to this project's Vite-based dev workflow.

---

@vitejs/plugin-vue 6.0.7 → 6.0.8

Changelog highlights:

• Added opt-in Vapor Mode compilation flag (purely additive)
• Updated internal dependencies

Impact: No breaking changes. New feature is opt-in and not activated unless configured.

---

elkjs 0.11.1 → 0.12.0

Changelog highlights:

• Based on ELK 0.12.0 layout engine
• Added GPL-3.0 as secondary license option (EPL-2.0 still available)
• New optional "second node placer" after Network node flexibility
• More flexible layer splitting logic
• Bug fixes in layout algorithms

Impact: This project uses elkjs for diagram layout in frontend/src/useLayout.ts. No API changes — the layout algorithm is called the same way. Improvements to layout quality may subtly change diagram positioning (visual-only, no functional impact).

---

eslint-plugin-vue 10.9.2 → 10.10.0

Changelog highlights:

• Added template literal support to vue/prefer-separate-static-class rule
• Added allowLineSeparatedGroups option to vue/sort-keys rule
• Updated internal dependencies

Impact: Purely additive rule enhancements. No existing rule behavior changes.

---

vue 3.5.39 → 3.5.40

Changelog highlights:

• Fixed slot branch key leakage (memory optimization)
• Fixed hydration namespace handling for dynamic props (SVG/MathML)
• Fixed reactivity effect removal during scope stop
• Fixed lazy hydration for detached roots
• Fixed select element v-model type handling (regression fix)
• Fixed SSR error handling

Impact: Bug fixes only. The reactivity and slot fixes improve stability. No API changes.

Files modified

• frontend/package.json
• frontend/pnpm-lock.yaml

Skipped this ecosystem

Package	Current	Latest	Reason
@codemirror/autocomplete	6.20.3	6.20.3	Already at latest
@codemirror/commands	6.10.4	6.10.4	Already at latest
@codemirror/language	6.12.4	6.12.4	Already at latest
@codemirror/lint	6.9.7	6.9.7	Already at latest
@codemirror/state	6.7.0	6.7.1	Open PR #2 covers this
@codemirror/view	6.43.4	6.43.7	Open PR #2 covers this package
@lezer/highlight	1.2.3	1.2.3	Already at latest
@types/node	24.13.2	26.1.2	Open PR #2 covers this; major bump needs separate evaluation
@vue-flow/background	1.3.2	1.3.2	Already at latest
@vue-flow/controls	1.1.3	1.1.3	Already at latest
@vue-flow/core	1.48.2	1.48.2	Already at latest
@vue-flow/node-resizer	1.5.1	1.5.1	Already at latest
@vue/eslint-config-typescript	14.9.0	14.9.0	Already at latest
@vue/tsconfig	0.9.1	0.9.1	Already at latest
codemirror	6.0.2	6.0.2	Already at latest
eslint	10.6.0	10.8.0	Open PR #2 covers this
eslint-config-prettier	10.1.8	10.1.8	Already at latest
lucide-vue-next	1.0.0	1.0.0	Already at latest (deprecated notice is cosmetic)
prettier	3.9.4	3.9.6	Open PR #2 covers this
typescript	6.0.2	7.0.2	Major bump; extensive breaking changes; pinned with ~ for reason
typescript-eslint	8.62.1	8.65.0	Open PR #2 covers this
vite	8.1.1	8.2.0	Cooldown: 8.2.0 published 2026-07-30 (< 7 days)
vitest	3.2.4	4.1.10	Open PR #2 covers this; 4.x is a major bump needing separate evaluation
vue-tsc	3.3.5	3.3.9	Cooldown: 3.3.9 published 2026-07-31 (< 7 days)

---

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

• View implementation session