chore(deps): weekly safe npm updates · 9 packages

[mendral-app]

Packages bumped

Package	Old	New	Type
@codemirror/state	6.7.0	6.7.1	patch
@codemirror/view	6.43.4	6.43.6	patch
@types/node	24.13.2	24.13.3	patch
eslint	10.6.0	10.7.0	minor
prettier	3.9.4	3.9.5	patch
typescript-eslint	8.62.1	8.64.0	minor
vite	8.1.3	8.1.4	patch
vitest	3.2.6	3.2.7	patch
vue-tsc	3.3.6	3.3.7	patch

Per-package changelog highlights & impact

@codemirror/state 6.7.1 · @codemirror/view 6.43.5–6.43.6

• Bug fixes and internal improvements from Marijn Haverbeke.
• No API changes; the project uses these as the editor backing store — no impact.

eslint 10.7.0

• New features: errorClassNames option for preserve-caught-error, max-nested-callbacks for constructors, suggestions for no-compare-neg-zero.
• Bug fixes for eqeqeq, radix, no-control-regex, no-invalid-regexp false positives.
• No config changes needed — all additive.

prettier 3.9.5

• Fixes: TypeScript comments on shorthand type import specifiers, markdown ordered list cap, CSS space in type() declarations.
• Relevant: the TS comment fix improves formatting of Vue SFC <script> blocks. No behavioral change for this codebase.

typescript-eslint 8.63.0–8.64.0

• 8.63: Detect async usage of sync dispose method in no-misused-promises, fixes for method-signature-style and no-unnecessary-type-assertion.
• 8.64: Support parsing import defer, deprecates no-loop-func (not used in this project's config). Stricter validation for invalid definite assignments.
• No impact: this codebase doesn't use no-loop-func or definite assignment in class properties.

vite 8.1.4

• Patch fixes in the 8.1.x series. No API changes.

vitest 3.2.7

• Fix for filesystem access checking in browser test environments (backport from v3 branch, issue #10679).
• No impact: this project runs Vitest in Node mode.

vue-tsc 3.3.7

• Fix: wrapping single expression event handlers to avoid ASI issues after return.
• Fix: filter const globals from template completions.
• Includes 3.3.6 perf improvements (inline TS AST caching with WeakMap, generic component inference across .d.ts).
• Improves type-check reliability for Vue SFCs.

Files modified

• frontend/package.json
• frontend/pnpm-lock.yaml

Skipped this ecosystem

Package	Reason
tailwindcss 4.3.3	Within 7-day cooldown (published Jul 16)
@tailwindcss/vite 4.3.3	Within 7-day cooldown (published Jul 16)
vue 3.5.40	Within 7-day cooldown (published Jul 16)
vite 8.1.5	Within 7-day cooldown (published Jul 16)
@vitejs/plugin-vue 6.0.8	Within 7-day cooldown (published Jul 14)
@fontsource/jetbrains-mono 5.3.0	Within 7-day cooldown (published Jul 19)
elkjs 0.12.0	Within 7-day cooldown (published Jul 17); also minor bump on 0.x (potential breaking)
lucide-vue-next	Deprecated — migration to @lucide/vue is a separate effort
vitest 4.x	Major version bump, outside caret range
@types/node 26.x	Major version bump, outside caret range

---

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

• View implementation session