Skip to content

chore: bump vue-router from 4.6.4 to 5.0.3 in /web#378

Merged
Aureliolo merged 1 commit intomainfrom
dependabot/npm_and_yarn/web/vue-router-5.0.3
Mar 14, 2026
Merged

chore: bump vue-router from 4.6.4 to 5.0.3 in /web#378
Aureliolo merged 1 commit intomainfrom
dependabot/npm_and_yarn/web/vue-router-5.0.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 14, 2026

Bumps vue-router from 4.6.4 to 5.0.3.

Release notes

Sourced from vue-router's releases.

v5.0.3

   🚨 Breaking Changes

   🚀 Features

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

... (truncated)

Commits
  • 2b4d612 release: vue-router@5.0.3
  • 382e34b feat: deprecate new NavigationResult(to) in favor of reroute(to)
  • d6a3812 test: deleting file with same name as folder keeps children
  • b533d6e chore: note
  • 52b4620 chore: pnpm
  • 0b0504b fix(volar): use ts.getTokenPosOfNode instead of node.getStart (#2630)
  • eb40988 docs: Fix route-map.d.ts path (#2625)
  • cdf7b44 fix(types): relax RouteMapGeneric constraint for interface-based RouteNamedMa...
  • ef327c8 chore: update security support table
  • 96e49e6 style: lint
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the type:chore Maintenance, cleanup, dependency updates label Mar 14, 2026
@dependabot dependabot bot requested a review from Aureliolo as a code owner March 14, 2026 09:38
@dependabot dependabot bot added the type:chore Maintenance, cleanup, dependency updates label Mar 14, 2026
@greptile-apps
Copy link
Copy Markdown

greptile-apps bot commented Mar 14, 2026

PR author is in the excluded authors list.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 14, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ✅ 0 package(s) with unknown licenses.
  • ⚠️ 1 packages with OpenSSF Scorecard issues.
See the Details below.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@babel/generator 7.29.1 🟢 7.2
Details
CheckScoreReason
Code-Review🟢 9Found 28/29 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
npm/@vue-macros/common 3.1.2 UnknownUnknown
npm/@vue/devtools-api 8.1.0 UnknownUnknown
npm/@vue/devtools-kit 8.1.0 UnknownUnknown
npm/@vue/devtools-shared 8.1.0 UnknownUnknown
npm/acorn 8.16.0 🟢 5
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Maintained🟢 107 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 3Found 10/29 approved changesets -- score normalized to 3
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License⚠️ 0license file not detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/ast-kit 2.2.0 UnknownUnknown
npm/ast-walker-scope 0.8.3 UnknownUnknown
npm/chokidar 5.0.0 🟢 4.1
Details
CheckScoreReason
Code-Review🟢 3Found 9/25 approved changesets -- score normalized to 3
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/confbox 0.2.4 UnknownUnknown
npm/confbox 0.1.8 UnknownUnknown
npm/exsolve 1.0.8 UnknownUnknown
npm/jsesc 3.1.0 ⚠️ 2.1
Details
CheckScoreReason
Token-Permissions⚠️ -1No tokens found
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow⚠️ -1no workflows found
Code-Review⚠️ 1Found 5/30 approved changesets -- score normalized to 1
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies⚠️ -1no dependencies found
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/json5 2.2.3 🟢 3.8
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ -1No tokens found
Code-Review⚠️ 2Found 6/27 approved changesets -- score normalized to 2
Dangerous-Workflow⚠️ -1no workflows found
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ -1no dependencies found
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/local-pkg 1.1.2 UnknownUnknown
npm/magic-string-ast 1.0.3 UnknownUnknown
npm/mlly 1.8.1 🟢 4.3
Details
CheckScoreReason
Code-Review⚠️ 2Found 5/23 approved changesets -- score normalized to 2
Maintained🟢 78 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 7
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/muggle-string 0.4.1 UnknownUnknown
npm/pathe 2.0.3 UnknownUnknown
npm/perfect-debounce 2.1.0 UnknownUnknown
npm/pkg-types 1.3.1 UnknownUnknown
npm/pkg-types 2.3.0 UnknownUnknown
npm/quansync 0.2.11 UnknownUnknown
npm/readdirp 5.0.0 🟢 3.4
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 0Found 2/28 approved changesets -- score normalized to 0
Pinned-Dependencies🟢 10all dependencies are pinned
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/scule 1.3.0 UnknownUnknown
npm/ufo 1.6.3 🟢 5.4
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 3Found 9/27 approved changesets -- score normalized to 3
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1012 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/unplugin 3.0.0 UnknownUnknown
npm/unplugin-utils 0.3.1 UnknownUnknown
npm/vue-router 5.0.3 🟢 5
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Code-Review⚠️ 2Found 7/30 approved changesets -- score normalized to 2
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/webpack-virtual-modules 0.6.2 🟢 3.1
Details
CheckScoreReason
Code-Review🟢 3Found 9/30 approved changesets -- score normalized to 3
Maintained⚠️ 00 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/yaml 2.8.2 🟢 7.2
Details
CheckScoreReason
Code-Review⚠️ 0Found 1/19 approved changesets -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
License🟢 10license file detected
Fuzzing🟢 10project is fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
SAST🟢 9SAST tool detected but not run on all commits

Scanned Files

  • web/package-lock.json

@socket-security
Copy link
Copy Markdown

socket-security bot commented Mar 14, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​vue-router@​4.6.4 ⏵ 5.0.391 +1100100 +2793100

View full report

Bumps [vue-router](https://github.com/vuejs/router) from 4.6.4 to 5.0.3.
- [Release notes](https://github.com/vuejs/router/releases)
- [Commits](vuejs/router@v4.6.4...v5.0.3)

---
updated-dependencies:
- dependency-name: vue-router
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/web/vue-router-5.0.3 branch from a7ed513 to 4b9c571 Compare March 14, 2026 10:02
@Aureliolo Aureliolo merged commit 6c60f6c into main Mar 14, 2026
20 checks passed
@Aureliolo Aureliolo deleted the dependabot/npm_and_yarn/web/vue-router-5.0.3 branch March 14, 2026 10:08
Aureliolo added a commit that referenced this pull request Mar 14, 2026
🤖 I have created a release *beep* *boop*
---


##
[0.1.4](v0.1.3...v0.1.4)
(2026-03-14)


### Features

* add approval workflow gates to TaskEngine
([#387](#387))
([2db968a](2db968a))
* implement checkpoint recovery strategy
([#367](#367))
([f886838](f886838))


### CI/CD

* add npm and pre-commit ecosystems to Dependabot
([#369](#369))
([54e5fe7](54e5fe7))
* bump actions/setup-node from 4.4.0 to 6.3.0
([#360](#360))
([2db5105](2db5105))
* bump github/codeql-action from 3.32.6 to 4.32.6
([#361](#361))
([ce766e8](ce766e8))
* group major dependabot bumps per ecosystem
([#388](#388))
([3c43aef](3c43aef))


### Maintenance

* bump @vitejs/plugin-vue from 5.2.4 to 6.0.5 in /web
([#382](#382))
([d7054ee](d7054ee))
* bump @vue/tsconfig from 0.7.0 to 0.9.0 in /web in the minor-and-patch
group across 1 directory
([#371](#371))
([64fa08b](64fa08b))
* bump astro from 5.18.1 to 6.0.4 in /site
([#376](#376))
([d349317](d349317))
* bump https://github.com/astral-sh/ruff-pre-commit from v0.15.5 to
0.15.6 ([#372](#372))
([dcacb2e](dcacb2e))
* bump https://github.com/gitleaks/gitleaks from v8.24.3 to 8.30.1
([#375](#375))
([a18e6ed](a18e6ed))
* bump https://github.com/hadolint/hadolint from v2.12.0 to 2.14.0
([#373](#373))
([47b906b](47b906b))
* bump https://github.com/pre-commit/pre-commit-hooks from v5.0.0 to
6.0.0 ([#374](#374))
([1926555](1926555))
* bump litellm from 1.82.1 to 1.82.2 in the minor-and-patch group
([#385](#385))
([fa4f7b7](fa4f7b7))
* bump node from 22-alpine to 25-alpine in /docker/web
([#359](#359))
([8d56cd3](8d56cd3))
* bump node from 22-slim to 25-slim in /docker/sandbox
([#358](#358))
([3de8748](3de8748))
* bump pinia from 2.3.1 to 3.0.4 in /web
([#381](#381))
([c78dcc2](c78dcc2))
* bump the major group across 1 directory with 9 updates
([#389](#389))
([9fa621b](9fa621b))
* bump the minor-and-patch group with 2 updates
([#362](#362))
([6ede2ce](6ede2ce))
* bump vue-router from 4.6.4 to 5.0.3 in /web
([#378](#378))
([6c60f6c](6c60f6c))
* expand review skills to 18 smart conditional agents
([#364](#364))
([494013f](494013f))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type:chore Maintenance, cleanup, dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant