Skip to content

chore: bump vue-echarts from 7.0.3 to 8.0.1 in /web#384

Closed
dependabot[bot] wants to merge 4 commits intomainfrom
dependabot/npm_and_yarn/web/vue-echarts-8.0.1
Closed

chore: bump vue-echarts from 7.0.3 to 8.0.1 in /web#384
dependabot[bot] wants to merge 4 commits intomainfrom
dependabot/npm_and_yarn/web/vue-echarts-8.0.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 14, 2026

Bumps vue-echarts from 7.0.3 to 8.0.1.

Release notes

Sourced from vue-echarts's releases.

v8.0.1

Fixes

  • Clarified that manual-update and reactive option updates are mutually exclusive—manual charts now ignore prop changes after the first render.
  • Optimized the slot handling logic.

v8.0.0

Breaking changes

  • Updated peer dependency for echarts to ^6.0.0.
  • Updated peer dependency for vue to ^3.3.0.
  • Dropped support for browsers without native class support.
  • Removed vue-echarts/csp entry. Use vue-echarts instead. Only manually include vue-echarts/style.css if you are both enforcing a strict CSP that prevents inline <style> injection and targeting browsers that don't support the CSSStyleSheet() constructor.

New features

  • ECharts 6 support.
  • Added slots for tooltip and data view.
  • Added support for getter in provide/inject.
  • Added smart update strategy to make updates more effortless.
  • Made CSS border-radius work out-of-the-box.

Chore

  • Built with tsdown.
  • Switched demo from webpack to rolldown-vite.
  • Switched to ESLint flat config.
  • Added unit test with Vitest.

v8.0.0-beta.3

  • Made CSS border-radius work out-of-the-box.

v8.0.0-beta.2

  • Added smart update strategy to make updates more effortless.

v8.0.0-beta.1

Breaking changes

  • Updated peer dependency for echarts to ^6.0.0.
  • Updated peer dependency for vue to ^3.3.0.
  • Dropped support for browsers without native class support.
  • Removed vue-echarts/csp entry. Use vue-echarts instead. Only manually include vue-echarts/style.css if you are both enforcing a strict CSP that prevents inline <style> injection and targeting browsers that don't support the CSSStyleSheet() constructor.

New features

  • ECharts 6 support.
  • Added slots for tooltip and data view.
  • Added support for getter in provide/inject.

Chore

... (truncated)

Changelog

Sourced from vue-echarts's changelog.

8.0.1

Fixes

  • Clarified that manual-update and reactive option updates are mutually exclusive—manual charts now ignore prop changes after the first render.
  • Optimized the slot handling logic.

8.0.0

Breaking changes

  • Updated peer dependency for echarts to ^6.0.0.
  • Updated peer dependency for vue to ^3.3.0.
  • Dropped support for browsers without native class support.
  • Removed vue-echarts/csp entry. Use vue-echarts instead. Only manually include vue-echarts/style.css if you are both enforcing a strict CSP that prevents inline <style> injection and targeting browsers that don't support the CSSStyleSheet() constructor.

New features

  • ECharts 6 support.
  • Added slots for tooltip and data view.
  • Added support for getter in provide/inject.
  • Added smart update strategy to make updates more effortless.
  • Made CSS border-radius work out-of-the-box.

Chore

  • Built with tsdown.
  • Switched demo from webpack to rolldown-vite.
  • Switched to ESLint flat config.
  • Added unit test with Vitest.

8.0.0-beta.3

  • Made CSS border-radius work out-of-the-box.

8.0.0-beta.2

  • Added smart update strategy to make updates more effortless.

8.0.0-beta.1

Breaking changes

  • Updated peer dependency for echarts to ^6.0.0.
  • Updated peer dependency for vue to ^3.3.0.
  • Dropped support for browsers without native class support.
  • Removed vue-echarts/csp entry. Use vue-echarts instead. Only manually include vue-echarts/style.css if you are both enforcing a strict CSP that prevents inline <style> injection and targeting browsers that don't support the CSSStyleSheet() constructor.

New features

... (truncated)

Commits
  • c02a92f chore: release v8.0.1
  • 73de2a3 docs: update changelog
  • 7f2f271 chore: update timezone and schedule in renovate configuration
  • 5f21245 chore(deps): update minors after 7 days
  • 5262c38 fix: remove unnecessary condition
  • 20a70c8 fix: update option type in re-initialization test case
  • c9746c2 fix: refactor slot implementation and improve types
  • 2a97adf chore(deps): update dependency jiti to v2.6.1
  • a2de2c6 chore(deps): update patches after 7 days
  • 23604d0 chore(deps): update dependency tsdown to v0.15.6
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vue-echarts since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore: bump vue-echarts from 7.0.3 to 8.0.1 in /web
f7447a0 
Bumps [vue-echarts](https://github.com/ecomfe/vue-echarts) from 7.0.3 to 8.0.1.
- [Release notes](https://github.com/ecomfe/vue-echarts/releases)
- [Changelog](https://github.com/ecomfe/vue-echarts/blob/main/CHANGELOG.md)
- [Commits](ecomfe/vue-echarts@v7.0.3...v8.0.1)

---
updated-dependencies:
- dependency-name: vue-echarts
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the type:chore Maintenance, cleanup, dependency updates label Mar 14, 2026
@dependabot dependabot bot requested a review from Aureliolo as a code owner March 14, 2026 09:39
@dependabot dependabot bot added the type:chore Maintenance, cleanup, dependency updates label Mar 14, 2026
@greptile-apps
Copy link
Copy Markdown

greptile-apps bot commented Mar 14, 2026

PR author is in the excluded authors list.

@socket-security
Copy link
Copy Markdown

socket-security bot commented Mar 14, 2026 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednpm/​vue-echarts@​7.0.3 ⏵ 8.0.1100 +110010091100

View full report

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 14, 2026 •
edited
Loading

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/vue-echarts 8.0.1 🟢 4.5
Details
CheckScoreReason
Code-Review⚠️ 0Found 0/6 approved changesets -- score normalized to 0
Maintained🟢 1030 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST🟢 10SAST tool is run on all commits

Scanned Files

  • web/package-lock.json

@codecov
Copy link
Copy Markdown

codecov bot commented Mar 14, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.83%. Comparing base (2db968a) to head (2ef3d49).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files 
@@           Coverage Diff           @@
##             main     #384   +/-   ##
=======================================
  Coverage   93.83%   93.83%           
=======================================
  Files         462      462           
  Lines       21653    21653           
  Branches     2079     2079           
=======================================
  Hits        20319    20319           
  Misses       1032     1032           
  Partials      302      302

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@Aureliolo
Merge branch 'main' into dependabot/npm_and_yarn/web/vue-echarts-8.0.1
53468e3 
Signed-off-by: Aurelio <19254254+Aureliolo@users.noreply.github.com>
@Aureliolo Aureliolo mentioned this pull request Mar 14, 2026
Merged
3 tasks
Aureliolo added a commit that referenced this pull request Mar 14, 2026
@Aureliolo
ci: group major dependabot bumps per ecosystem (#388)
3c43aef 
## Summary
- Add `major` update-type group to all 8 Dependabot ecosystem configs
(uv, github-actions, pre-commit, npm x2, docker x3)
- Interdependent major bumps (e.g. echarts 6 + vue-echarts 8) now land
in a single PR instead of separate conflicting ones
- Add missing `minor-and-patch` grouping to the 3 Docker configs for
consistency

**Motivation:** PRs #380 (echarts 5→6) and #384 (vue-echarts 7→8) are
interdependent but arrived as separate PRs, both with broken CI due to
peer dependency conflicts. Grouping majors prevents this.

## Test plan
- [x] YAML validated by pre-commit `check-yaml` hook
- [ ] Wait for next Dependabot run to confirm grouped PRs appear
correctly
- [ ] Existing open individual major PRs will need to be closed manually
(Dependabot will recreate them grouped)

🤖 Generated with [Claude Code](https://claude.com/claude-code)
@Aureliolo
Copy link
Copy Markdown
Owner

Aureliolo commented Mar 14, 2026

Closing: dependabot config now groups major bumps per ecosystem. This will be recreated as part of a grouped PR with all /web major updates (echarts + vue-echarts + vite + vitest + coverage-v8).

@Aureliolo Aureliolo closed this Mar 14, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 14, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/web/vue-echarts-8.0.1 branch March 14, 2026 11:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Aureliolo Aureliolo Awaiting requested review from Aureliolo Aureliolo is a code owner

Assignees

No one assigned

Labels

type:chore Maintenance, cleanup, dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Aureliolo