Skip to content

Chore(deps): Bump the frontend-minor-patch group across 1 directory with 34 updates#1417

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/webroot/frontend-minor-patch-6937cde4e7
Closed

Chore(deps): Bump the frontend-minor-patch group across 1 directory with 34 updates#1417
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/webroot/frontend-minor-patch-6937cde4e7

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 7, 2026 •
edited
Loading

Bumps the frontend-minor-patch group with 33 updates in the /webroot directory:

Package From To
@statsig/js-client 3.25.3 3.32.3
@statsig/session-replay 3.25.3 3.32.3
@statsig/web-analytics 3.25.3 3.32.3
@vue/compat 3.4.21 3.5.31
axios 1.13.5 1.14.0
caniuse-lite 1.0.30001709 1.0.30001782
core-js 3.36.1 3.49.0
country-codes-flags-phone-codes 1.0.4 1.1.1
joi-password 4.2.0 4.3.0
libphonenumber-js 1.11.1 1.12.41
object.fromentries 2.0.4 2.0.8
vue 3.4.21 3.5.31
@babel/core 7.24.4 7.29.0
@babel/preset-env 7.13.15 7.29.2
@types/qrcode 1.5.5 1.5.6
@vue/cli-plugin-babel 5.0.8 5.0.9
@vue/cli-plugin-e2e-cypress 5.0.8 5.0.9
@vue/cli-plugin-eslint 5.0.8 5.0.9
@vue/cli-plugin-pwa 5.0.8 5.0.9
@vue/cli-plugin-router 5.0.8 5.0.9
@vue/cli-plugin-typescript 5.0.8 5.0.9
@vue/cli-plugin-unit-mocha 5.0.8 5.0.9
@vue/cli-plugin-vuex 5.0.8 5.0.9
@vue/cli-service 5.0.8 5.0.9
@vue/test-utils 2.4.5 2.4.6
axe-core 4.9.1 4.11.2
chai-match-pattern 1.2.0 1.3.0
cypress-axe 1.6.0 1.7.0
cypress-localstorage-commands 2.2.7 2.3.0
eslint-plugin-import 2.29.1 2.32.0
moment-timezone 0.5.45 0.6.1
sharp 0.33.3 0.34.5
style-resources-loader 1.4.1 1.5.0

Updates @statsig/js-client from 3.25.3 to 3.32.3

Release notes

Sourced from @​statsig/js-client's releases.

3.32.3 - Flush web vital events more often

Fixes

  • Flush web vital events more often

Included In This Release

  • 608e02967f095721367379867886fcf4045c8341 kat-statsig
    • chore: bump size (#836)
  • 8d7e2acc8af191523f9ff88e762c14288b2bf47e kat-statsig
    • fix: flush web vitals more often (#834)

Full Changelog: statsig-io/js-client-monorepo@3.32.2...3.32.3

3.32.2 - Adding debug metadata for Event Logger

New Features

Improvements

  • Added stricter server guard to ensure events don't get flushed in server environments
  • Fixed status code and reason fields in dropped events metadata

Fixes

Included In This Release

  • d90b9c25ebe123149471984a0356e8517f09515f araf-statsig
    • fix: reason field for dropped events (#827)
  • 3eb07e3196932d65d7626be3bd6d6637fa06c425 araf-statsig
    • fix: add stricter server guard (#826)
  • 50fea3784ef3ed981c684e57b760439c55d0a820 araf-statsig
    • fix: preserve network req status code (#823)

Full Changelog: statsig-io/js-client-monorepo@3.32.1...3.32.2

3.32.1 - Session replay gcir

New Features

  • session replay support for gcir

Improvements

  • version bumps for security vulnerabilities

Fixes

... (truncated)

Commits
  • 0d60f47 [release] 3.32.3 - Flush web vital events more often (#837)
  • 8379f54 [release] 3.32.2 - Adding debug metadata for Event Logger (#828)
  • 5ef702a [release] 3.32.1 - Session replay gcir (#820)
  • d3c719d [release] 3.32.0 - EventLogger Redesign (#805)
  • cc7715d [release] 3.31.2 - Session related performance improvement (#778)
  • 9d17e97 [release] 3.31.1 - generic serverless client, performance upgrades, and bug f...
  • 7f82b75 Handle disableStableID in bootstrap comparison (#770)
  • cdf69c4 chore: statsig context handle (#769)
  • 853da10 fix: add logging for empty/null id_type (#747)
  • db591b7 fix: adding logging for eval reason loading or uninitialized (#748)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by araf-statsig, a new releaser for @​statsig/js-client since your current version.


Updates @statsig/session-replay from 3.25.3 to 3.32.3

Release notes

Sourced from @​statsig/session-replay's releases.

3.32.3 - Flush web vital events more often

Fixes

  • Flush web vital events more often

Included In This Release

  • 608e02967f095721367379867886fcf4045c8341 kat-statsig
    • chore: bump size (#836)
  • 8d7e2acc8af191523f9ff88e762c14288b2bf47e kat-statsig
    • fix: flush web vitals more often (#834)

Full Changelog: statsig-io/js-client-monorepo@3.32.2...3.32.3

3.32.2 - Adding debug metadata for Event Logger

New Features

Improvements

  • Added stricter server guard to ensure events don't get flushed in server environments
  • Fixed status code and reason fields in dropped events metadata

Fixes

Included In This Release

  • d90b9c25ebe123149471984a0356e8517f09515f araf-statsig
    • fix: reason field for dropped events (#827)
  • 3eb07e3196932d65d7626be3bd6d6637fa06c425 araf-statsig
    • fix: add stricter server guard (#826)
  • 50fea3784ef3ed981c684e57b760439c55d0a820 araf-statsig
    • fix: preserve network req status code (#823)

Full Changelog: statsig-io/js-client-monorepo@3.32.1...3.32.2

3.32.1 - Session replay gcir

New Features

  • session replay support for gcir

Improvements

  • version bumps for security vulnerabilities

Fixes

... (truncated)

Commits
  • 0d60f47 [release] 3.32.3 - Flush web vital events more often (#837)
  • 8379f54 [release] 3.32.2 - Adding debug metadata for Event Logger (#828)
  • 5ef702a [release] 3.32.1 - Session replay gcir (#820)
  • d3c719d [release] 3.32.0 - EventLogger Redesign (#805)
  • cc7715d [release] 3.31.2 - Session related performance improvement (#778)
  • 8722411 chore: improve perf on session id (#776)
  • 9d17e97 [release] 3.31.1 - generic serverless client, performance upgrades, and bug f...
  • b539d95 chore: if session_recording_privacy_settings is empty use user passed in opti...
  • 4cb42fa chore: look at closest selector for sr privacy options (#772)
  • cdf69c4 chore: statsig context handle (#769)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by araf-statsig, a new releaser for @​statsig/session-replay since your current version.


Updates @statsig/web-analytics from 3.25.3 to 3.32.3

Release notes

Sourced from @​statsig/web-analytics's releases.

3.32.3 - Flush web vital events more often

Fixes

  • Flush web vital events more often

Included In This Release

  • 608e02967f095721367379867886fcf4045c8341 kat-statsig
    • chore: bump size (#836)
  • 8d7e2acc8af191523f9ff88e762c14288b2bf47e kat-statsig
    • fix: flush web vitals more often (#834)

Full Changelog: statsig-io/js-client-monorepo@3.32.2...3.32.3

3.32.2 - Adding debug metadata for Event Logger

New Features

Improvements

  • Added stricter server guard to ensure events don't get flushed in server environments
  • Fixed status code and reason fields in dropped events metadata

Fixes

Included In This Release

  • d90b9c25ebe123149471984a0356e8517f09515f araf-statsig
    • fix: reason field for dropped events (#827)
  • 3eb07e3196932d65d7626be3bd6d6637fa06c425 araf-statsig
    • fix: add stricter server guard (#826)
  • 50fea3784ef3ed981c684e57b760439c55d0a820 araf-statsig
    • fix: preserve network req status code (#823)

Full Changelog: statsig-io/js-client-monorepo@3.32.1...3.32.2

3.32.1 - Session replay gcir

New Features

  • session replay support for gcir

Improvements

  • version bumps for security vulnerabilities

Fixes

... (truncated)

Commits
  • 0d60f47 [release] 3.32.3 - Flush web vital events more often (#837)
  • 8d7e2ac fix: flush web vitals more often (#834)
  • 8379f54 [release] 3.32.2 - Adding debug metadata for Event Logger (#828)
  • 5ef702a [release] 3.32.1 - Session replay gcir (#820)
  • d3c719d [release] 3.32.0 - EventLogger Redesign (#805)
  • cc7715d [release] 3.31.2 - Session related performance improvement (#778)
  • 8722411 chore: improve perf on session id (#776)
  • 9d17e97 [release] 3.31.1 - generic serverless client, performance upgrades, and bug f...
  • cdf69c4 chore: statsig context handle (#769)
  • 8b68b26 [release] 3.31.0 - Performance Improvments (#760)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by araf-statsig, a new releaser for @​statsig/web-analytics since your current version.


Updates @vue/compat from 3.4.21 to 3.5.31

Release notes

Sourced from @​vue/compat's releases.

v3.5.31

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.30

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.29

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.28

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.27

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.26

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.25

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.24

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.23

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.22

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.21

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.20

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.19

For stable releases, please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from @​vue/compat's changelog.

3.5.31 (2026-03-25)

Bug Fixes

  • compiler-sfc: allow Node.js subpath imports patterns in asset urls (#13045) (95c3356), closes #9919
  • compiler-sfc: support template literal as defineModel name (#14622) (bd7eef0), closes #14621
  • reactivity: normalize toRef property keys before dep lookup + improve types (#14625) (1bb28d0), closes #12427 #12431
  • runtime-core: invalidate detached v-for memo vnodes after unmount (#14624) (560def4), closes #12708 #12710
  • runtime-core: preserve nullish event handlers in mergeProps (#14550) (5725222)
  • runtime-core: prevent merging model listener when value is null or undefined (#14629) (b39e032)
  • runtime-dom: defer teleport mount/update until suspense resolves (#8619) (88ed045), closes #8603
  • runtime-dom: handle activeElement check in Shadow DOM for v-model (#14196) (959ded2)
  • server-renderer: cleanup component effect scopes after SSR render (#14548) (862f11e)
  • suspense: avoid unmount activeBranch twice if wrapped in transition (#9392) (908c6ad), closes #7966
  • suspense: update suspense vnode's el during branch self-update (#12922) (a2c1700), closes #12920
  • transition: skip enter guard while hmr updating (#14611) (be0a2f1), closes #14608
  • types: prevent shallowReactive marker from leaking into value unions (#14493) (3b561db), closes #14490

3.5.30 (2026-03-09)

Bug Fixes

  • compat: add entities to @​vue/compat deps to fix CJS edge cases (#12514) (e725a67), closes #10609
  • custom-element: ensure child component styles are injected in correct order before parent styles (#13374) (1398bf8), closes #13029
  • custom-element: properly locate parent when slotted in shadow dom (#12480) (f06c81a), closes #12479
  • custom-element: should properly patch as props for vue custom elements (#12409) (740983e), closes #12408
  • reactivity: avoid duplicate raw/proxy entries in Set.add (#14545) (d943612)
  • reactivity: fix reduce on reactive arrays to preserve reactivity (#12737) (16ef165), closes #12735
  • reactivity: handle Set with initial reactive values edge case (#12393) (5dc27ca), closes #8647
  • runtime-core: warn about negative number in v-for (#12308) (9438cc5)
  • ssr: prevent watch from firing after async setup await (#14547) (6cda71d), closes #14546
  • types: make generics with runtime props in defineComponent work (fix #11374) (#13119) (cea3cf7), closes #13763
  • types: narrow useAttrs class/style typing for TSX (#14492) (bbb8977), closes #14489

3.5.29 (2026-02-24)

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​vue/compat since your current version.


Updates axios from 1.13.5 to 1.14.0

Release notes

Sourced from axios's releases.

v1.14.0

This release focuses on compatibility fixes, adapter stability improvements, and test/tooling modernisation.

⚠️ Important Changes

  • Breaking Changes: None identified in this release.
  • Action Required: If you rely on env-based proxy behaviour or CJS resolution edge-cases, validate your integration after upgrade (notably proxy-from-env v2 alignment and main entry compatibility fix).

🚀 New Features

  • Runtime Features: No new end-user features were introduced in this release.
  • Test Coverage Expansion: Added broader smoke/module test coverage for CJS and ESM package usage. (#7510)

🐛 Bug Fixes

  • Headers: Trim trailing CRLF in normalised header values. (#7456)
  • HTTP/2: Close detached HTTP/2 sessions on timeout to avoid lingering sessions. (#7457)
  • Fetch Adapter: Cancel ReadableStream created during request-stream capability probing to prevent async resource leaks. (#7515)
  • Proxy Handling: Fixed env proxy behavior with proxy-from-env v2 usage. (#7499)
  • CommonJS Compatibility: Fixed package main entry regression affecting CJS consumers. (#7532)

🔧 Maintenance & Chores

  • Security/Dependencies: Updated formidable and refreshed package set to newer versions. (#7533, #10556)
  • Tooling: Continued migration to Vitest and modernised CI/test harnesses. (#7484, #7489, #7498)
  • Build/Lint Stack: Rollup, ESLint, TypeScript, and related dev-dependency updates. (#7508, #7509, #7522)
  • Documentation: Clarified JSON parsing and adapter-related docs/comments. (#7398, #7460, #7478)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve Axios:

Full Changelog: v1.13.6...v1.14.0

v1.13.6

This release focuses on platform compatibility, error handling improvements, and code quality maintenance.

⚠️ Important Changes

  • Breaking Changes: None identified in this release.
  • Action Required: Users targeting React Native should verify their integration, particularly if relying on specific Blob or FormData behaviours, as improvements have been made to support these objects.

🚀 New Features

  • React Native Blob Support: Axios now includes support for React Native Blob objects. Thanks to @​moh3n9595 for the initial implementation. (#5764)
  • Code Quality: Implemented prettier across the codebase and resolved associated formatting issues. (#7385)

🐛 Bug Fixes

  • Environment Compatibility:
    • Fixed module exports for React Native and Browserify environments. (#7386)

... (truncated)

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates caniuse-lite from 1.0.30001709 to 1.0.30001782

Commits
  • f455430 Update caniuse-db 1.0.30001782
  • 311d8db Update caniuse-db 1.0.30001781
  • da39da8 Update caniuse-db 1.0.30001780
  • 984281a Update caniuse-db 1.0.30001779
  • 1386a01 Update caniuse-db 1.0.30001778
  • 825f178 Update caniuse-db 1.0.30001777
  • 40dd4ee Update caniuse-db 1.0.30001776
  • 575206f Update caniuse-db 1.0.30001775
  • 69eb4c5 Update caniuse-db 1.0.30001774
  • 7d2a807 Update caniuse-db 1.0.30001772
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for caniuse-lite since your current version.


Updates core-js from 3.36.1 to 3.49.0

Changelog

Sourced from core-js's changelog.

3.49.0 - 2026.03.16

  • Changes v3.48.0...v3.49.0 (373 commits)
  • Iterator.range updated following the actual spec version
    • Throw a RangeError on NaN start / end / step
    • Allow null as optionOrStep
  • Improved accuracy of Math.{ asinh, atanh } polyfills with big and small values
  • Improved accuracy of Number.prototype.toExponential polyfills with big and small values
  • Improved performance of atob, btoa, Uint8Array.fromHex, Uint8Array.prototype.setFromHex, and Uint8Array.prototype.toHex, #1503, #1464, #1510, thanks @​johnzhou721
  • Minor performance optimization polyfills of methods from Map upsert proposal
  • Polyfills of methods from Map upsert proposal from the pure version made generic to make it work with polyfilled and native collections
  • Wrap Symbol.for in Symbol.prototype.description polyfill for correct handling of empty string descriptions
  • Fixed a modern Safari bug in Array.prototype.includes with sparse arrays and fromIndex
  • Fixed one more case (Iterator.prototype.take) of a V8 ~ Chromium < 126 bug
  • Forced replacement of Iterator.{ concat, zip, zipKeyed } in the pure version for ensuring proper wrapped Iterator instances as the result
  • Fixed proxying .return() on exhausted iterator from some methods of iterator helpers polyfill to the underlying iterator
  • Fixed double .return() calling in case of throwing error in this method in the internal iterate helper that affected some polyfills
  • Fixed closing iterator on IteratorValue errors in the internal iterate helper that affected some polyfills
  • Fixed iterator closing in Array.from polyfill on failure to create array property
  • Fixed order of arguments validation in Array.fromAsync polyfill
  • Fixed a lack of counter validation on MAX_SAFE_INTEGER in Array.fromAsync polyfill
  • Fixed order of arguments validation in Array.prototype.flat polyfill
  • Fixed handling strings as iterables in Iterator.{ zip, zipKeyed } polyfills
  • Fixed some cases of iterators closing in Iterator.{ zip, zipKeyed } polyfills
  • Fixed validation of iterators .next() results an objects in Iterator.{ zip, zipKeyed } polyfills
  • Fixed a lack of early error in Iterator.concat polyfill on primitive as an iterator
  • Fixed buffer mutation exposure in Iterator.prototype.windows polyfill
  • Fixed iterator closing in Set.prototype.{ isDisjointFrom, isSupersetOf } polyfill
  • Fixed (updated following the final spec) one more case Set.prototype.difference polyfill with updating this
  • Fixed DataView.prototype.setFloat16 polyfill in (0, 1) range
  • Fixed order of arguments validation in String.prototype.{ padStart, padEnd } polyfills
  • Fixed order of arguments validation in String.prototype.{ startsWith, endsWith } polyfills
  • Fixed some cases of Infinity handling in String.prototype.substr polyfill
  • Fixed String.prototype.repeat polyfill with a counter exceeding 2 ** 32
  • Fixed some cases of chars case in escape polyfill
  • Fixed named backreferences in RegExp NCG polyfill
  • Fixed some cases of RegExp NCG polyfill in combination with other types of groups
  • Fixed some cases of RegExp NCG polyfill in combination with dotAll
  • Fixed String.prototype.replace with sticky polyfill, #810, #1514
  • Fixed RegExp sticky polyfill with alternation
  • Fixed handling of some line terminators in case of multiline + sticky mode in RegExp polyfill
  • Fixed .input slicing on result object with RegExp sticky mode polyfill
  • Fixed handling of empty groups with global and unicode modes in polyfills
  • Fixed URLSearchParam.prototype.delete polyfill with duplicate key-value pairs
  • Fixed possible removal of unnecessary entries in URLSearchParam.prototype.delete polyfill with second argument
  • Fixed an error in some cases of non-special URLs without a path in the URL polyfill
  • Fixed some percent encode cases / character sets in the URL polyfill
  • Fixed parsing of non-IPv4 hosts ends in a number in the URL polyfill
  • Fixed some cases of '' and null host handling in the URL polyfill
  • Fixed host parsing with hostname = host:port in the URL polyfill
  • Fixed host inheritance in some cases of file scheme in the URL polyfill

... (truncated)

Commits
  • 80adfc4 v3.49.0
  • 0ad3e00 fix a modern Safari bug in Array.prototype.includes with sparse arrays and ...
  • 853bfa4 update some links
  • b4d723f fix a lack of counter validation on MAX_SAFE_INTEGER in Array.fromAsync p...
  • e276676 fix parsing of non-IPv4 hosts ends in a number in the URL polyfill
  • dd1cfba fix order of arguments validation in String.prototype.{ padStart, padEnd } ...
  • b952c5f add an extra protection to configurator
  • e490caf Fix for #810 (#1514)
  • 10b4e86 drop an unneeded comment
  • 28cf2e9 feat: Improve performance of Uint8Array Hex functions (#1510)
  • Additional commits viewable in compare view

Updates country-codes-flags-phone-codes from 1.0.4 to 1.1.1

Release notes

Sourced from country-codes-flags-phone-codes's releases.

1.1.1

What's Changed

New Contributors

Full Changelog: mehmetcanfarsak/country-codes-flags-phone-codes@1.0.4...1.1.0

Commits
  • 6fe175a Merge pull request #14 from mehmetcanfarsak/mehmetcanfarsak-patch-1
  • cdb7f8e Typo fix in version field of package.json
  • dad201a Merge pull request #13 from singhanubhavme/feature/input-normalization-tests-...
  • bfdf5d1 Normalized inputs, added tests, and added comments on code
  • See full diff in compare view

Updates joi-password from 4.2.0 to 4.3.0

Commits

Updates libphonenumber-js from 1.11.1 to 1.12.41

Changelog

Sourced from libphonenumber-js's changelog.

1.12.41 / 28.3.2026

  • Updated metadata to version 9.0.27:
    • Updated phone metadata for region code(s): BF, BL, CM, GF, GH, GP, GU, KE, MF, MQ, MY, SX, TD, TJ, US
    • New geocoding data for country calling code(s): 1738 (en)
    • New carrier data for country calling code(s): 1721 (en)
    • Updated carrier data for country calling code(s): 60 (en), 599 (en), 992 (en)
    • Updated / refreshed time zone meta data.

1.12.40 / 13.3.2026

  • Updated metadata to version 9.0.26:
    • Updated phone metadata for region code(s): BL, GF, GP, GY, KY, MF, PL, PM, VU
    • Updated short number metadata for region code(s): BL, GF, GP, GY, MF, PM
    • Updated geocoding data for country calling code(s): 48 (en)
    • Updated carrier data for country calling code(s): 33 (en), 44 (en), 229 (en), 591 (en), 1345 (en)

1.12.39 / 9.3.2026

  • Updated metadata to version 9.0.25:
    • Updated alternate formatting data for country calling code(s): 90
    • Updated phone metadata for region code(s): 882, HK, MY, PA, SL, TG, TR
    • Updated short number metadata for region code(s): KR
    • New geocoding data for country calling code(s): 1728 (en)
    • Updated carrier data for country calling code(s): 33 (en), 44 (en), 55 (en), 60 (en), 81 (en), 90 (en), 228 (en), 232 (en), 420 (en), 852 (en, zh)
    • Updated / refreshed time zone meta data.

1.12.38 / 26.2.2026

  • Updated metadata to version 9.0.25:
    • Updated alternate formatting data for country calling code(s): 90
    • Updated phone metadata for region code(s): 882, HK, MY, PA, SL, TG, TR
    • Updated short number metadata for region code(s): KR
    • New geocoding data for country calling code(s): 1728 (en)
    • Updated carrier data for country calling code(s): 33 (en), 44 (en), 55 (en), 60 (en), 81 (en), 90 (en), 228 (en), 232 (en), 420 (en), 852 (en, zh)
    • Updated / refreshed time zone meta data.

1.12.36 / 30.1.2026

... (truncated)

Commits

Updates object.fromentries from 2.0.4 to 2.0.8

Changelog

Sourced from object.fromentries's changelog.

v2.0...

Description has been truncated

@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Apr 7, 2026

Labels

The following labels could not be found: frontend. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 7, 2026
@dependabot
Chore(deps): Bump the frontend-minor-patch group across 1 directory w…
b3d7d0e 
…ith 34 updates

Bumps the frontend-minor-patch group with 33 updates in the /webroot directory:

| Package | From | To |
| --- | --- | --- |
| [@statsig/js-client](https://github.com/statsig-io/js-client-monorepo/tree/HEAD/packages/js-client) | `3.25.3` | `3.32.3` |
| [@statsig/session-replay](https://github.com/statsig-io/js-client-monorepo/tree/HEAD/packages/session-replay) | `3.25.3` | `3.32.3` |
| [@statsig/web-analytics](https://github.com/statsig-io/js-client-monorepo/tree/HEAD/packages/web-analytics) | `3.25.3` | `3.32.3` |
| [@vue/compat](https://github.com/vuejs/core) | `3.4.21` | `3.5.31` |
| [axios](https://github.com/axios/axios) | `1.13.5` | `1.14.0` |
| [caniuse-lite](https://github.com/browserslist/caniuse-lite) | `1.0.30001709` | `1.0.30001782` |
| [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) | `3.36.1` | `3.49.0` |
| [country-codes-flags-phone-codes](https://github.com/mehmetcanfarsak/country-codes-flags-phone-codes) | `1.0.4` | `1.1.1` |
| [joi-password](https://github.com/Heaty566/joi-password) | `4.2.0` | `4.3.0` |
| [libphonenumber-js](https://gitlab.com/catamphetamine/libphonenumber-js) | `1.11.1` | `1.12.41` |
| [object.fromentries](https://github.com/es-shims/Object.fromEntries) | `2.0.4` | `2.0.8` |
| [vue](https://github.com/vuejs/core) | `3.4.21` | `3.5.31` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.24.4` | `7.29.0` |
| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.13.15` | `7.29.2` |
| [@types/qrcode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/qrcode) | `1.5.5` | `1.5.6` |
| [@vue/cli-plugin-babel](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-babel) | `5.0.8` | `5.0.9` |
| [@vue/cli-plugin-e2e-cypress](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-e2e-cypress) | `5.0.8` | `5.0.9` |
| [@vue/cli-plugin-eslint](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-eslint) | `5.0.8` | `5.0.9` |
| [@vue/cli-plugin-pwa](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-pwa) | `5.0.8` | `5.0.9` |
| [@vue/cli-plugin-router](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-router) | `5.0.8` | `5.0.9` |
| [@vue/cli-plugin-typescript](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-typescript) | `5.0.8` | `5.0.9` |
| [@vue/cli-plugin-unit-mocha](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-unit-mocha) | `5.0.8` | `5.0.9` |
| [@vue/cli-plugin-vuex](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-vuex) | `5.0.8` | `5.0.9` |
| [@vue/cli-service](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-service) | `5.0.8` | `5.0.9` |
| [@vue/test-utils](https://github.com/vuejs/test-utils) | `2.4.5` | `2.4.6` |
| [axe-core](https://github.com/dequelabs/axe-core) | `4.9.1` | `4.11.2` |
| [chai-match-pattern](https://github.com/mjhm/chai-match-pattern) | `1.2.0` | `1.3.0` |
| [cypress-axe](https://github.com/component-driven/cypress-axe) | `1.6.0` | `1.7.0` |
| [cypress-localstorage-commands](https://github.com/javierbrea/cypress-localstorage-commands) | `2.2.7` | `2.3.0` |
| [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) | `2.29.1` | `2.32.0` |
| [moment-timezone](https://github.com/moment/moment-timezone) | `0.5.45` | `0.6.1` |
| [sharp](https://github.com/lovell/sharp) | `0.33.3` | `0.34.5` |
| [style-resources-loader](https://github.com/yenshih/style-resources-loader) | `1.4.1` | `1.5.0` |



Updates `@statsig/js-client` from 3.25.3 to 3.32.3
- [Release notes](https://github.com/statsig-io/js-client-monorepo/releases)
- [Commits](https://github.com/statsig-io/js-client-monorepo/commits/3.32.3/packages/js-client)

Updates `@statsig/session-replay` from 3.25.3 to 3.32.3
- [Release notes](https://github.com/statsig-io/js-client-monorepo/releases)
- [Commits](https://github.com/statsig-io/js-client-monorepo/commits/3.32.3/packages/session-replay)

Updates `@statsig/web-analytics` from 3.25.3 to 3.32.3
- [Release notes](https://github.com/statsig-io/js-client-monorepo/releases)
- [Commits](https://github.com/statsig-io/js-client-monorepo/commits/3.32.3/packages/web-analytics)

Updates `@vue/compat` from 3.4.21 to 3.5.31
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.4.21...v3.5.31)

Updates `axios` from 1.13.5 to 1.14.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.13.5...v1.14.0)

Updates `caniuse-lite` from 1.0.30001709 to 1.0.30001782
- [Commits](browserslist/caniuse-lite@1.0.30001709...1.0.30001782)

Updates `core-js` from 3.36.1 to 3.49.0
- [Release notes](https://github.com/zloirock/core-js/releases)
- [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zloirock/core-js/commits/v3.49.0/packages/core-js)

Updates `country-codes-flags-phone-codes` from 1.0.4 to 1.1.1
- [Release notes](https://github.com/mehmetcanfarsak/country-codes-flags-phone-codes/releases)
- [Commits](mehmetcanfarsak/country-codes-flags-phone-codes@1.0.4...1.1.1)

Updates `joi-password` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/Heaty566/joi-password/releases)
- [Commits](https://github.com/Heaty566/joi-password/commits)

Updates `libphonenumber-js` from 1.11.1 to 1.12.41
- [Changelog](https://gitlab.com/catamphetamine/libphonenumber-js/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/catamphetamine/libphonenumber-js/compare/v1.11.1...v1.12.41)

Updates `object.fromentries` from 2.0.4 to 2.0.8
- [Changelog](https://github.com/es-shims/Object.fromEntries/blob/main/CHANGELOG.md)
- [Commits](es-shims/Object.fromEntries@v2.0.4...v2.0.8)

Updates `vue` from 3.4.21 to 3.5.31
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.4.21...v3.5.31)

Updates `@babel/core` from 7.24.4 to 7.29.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.0/packages/babel-core)

Updates `@babel/preset-env` from 7.13.15 to 7.29.2
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.2/packages/babel-preset-env)

Updates `@types/qrcode` from 1.5.5 to 1.5.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/qrcode)

Updates `@vue/cli-plugin-babel` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-plugin-babel)

Updates `@vue/cli-plugin-e2e-cypress` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-plugin-e2e-cypress)

Updates `@vue/cli-plugin-eslint` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-plugin-eslint)

Updates `@vue/cli-plugin-pwa` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-plugin-pwa)

Updates `@vue/cli-plugin-router` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-plugin-router)

Updates `@vue/cli-plugin-typescript` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-plugin-typescript)

Updates `@vue/cli-plugin-unit-mocha` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-plugin-unit-mocha)

Updates `@vue/cli-plugin-vuex` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-plugin-vuex)

Updates `@vue/cli-service` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-service)

Updates `@vue/compiler-sfc` from 3.4.21 to 3.5.31
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vuejs/core/commits/v3.5.31/packages/compiler-sfc)

Updates `@vue/test-utils` from 2.4.5 to 2.4.6
- [Release notes](https://github.com/vuejs/test-utils/releases)
- [Commits](vuejs/test-utils@v2.4.5...v2.4.6)

Updates `axe-core` from 4.9.1 to 4.11.2
- [Release notes](https://github.com/dequelabs/axe-core/releases)
- [Changelog](https://github.com/dequelabs/axe-core/blob/develop/CHANGELOG.md)
- [Commits](dequelabs/axe-core@v4.9.1...v4.11.2)

Updates `chai-match-pattern` from 1.2.0 to 1.3.0
- [Commits](https://github.com/mjhm/chai-match-pattern/commits)

Updates `cypress-axe` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/component-driven/cypress-axe/releases)
- [Commits](component-driven/cypress-axe@v1.6.0...v1.7.0)

Updates `cypress-localstorage-commands` from 2.2.7 to 2.3.0
- [Release notes](https://github.com/javierbrea/cypress-localstorage-commands/releases)
- [Changelog](https://github.com/javierbrea/cypress-localstorage-commands/blob/master/CHANGELOG.md)
- [Commits](javierbrea/cypress-localstorage-commands@v2.2.7...v2.3.0)

Updates `eslint-plugin-import` from 2.29.1 to 2.32.0
- [Release notes](https://github.com/import-js/eslint-plugin-import/releases)
- [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md)
- [Commits](import-js/eslint-plugin-import@v2.29.1...v2.32.0)

Updates `moment-timezone` from 0.5.45 to 0.6.1
- [Release notes](https://github.com/moment/moment-timezone/releases)
- [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md)
- [Commits](moment/moment-timezone@0.5.45...0.6.1)

Updates `sharp` from 0.33.3 to 0.34.5
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.33.3...v0.34.5)

Updates `style-resources-loader` from 1.4.1 to 1.5.0
- [Changelog](https://github.com/yenshih/style-resources-loader/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yenshih/style-resources-loader/commits/v1.5.0)

---
updated-dependencies:
- dependency-name: "@statsig/js-client"
  dependency-version: 3.32.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@statsig/session-replay"
  dependency-version: 3.32.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@statsig/web-analytics"
  dependency-version: 3.32.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/compat"
  dependency-version: 3.5.31
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: axios
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: caniuse-lite
  dependency-version: 1.0.30001782
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: core-js
  dependency-version: 3.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: country-codes-flags-phone-codes
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: joi-password
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: libphonenumber-js
  dependency-version: 1.12.41
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: object.fromentries
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: vue
  dependency-version: 3.5.31
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@babel/core"
  dependency-version: 7.29.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@babel/preset-env"
  dependency-version: 7.29.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@types/qrcode"
  dependency-version: 1.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-plugin-babel"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-plugin-e2e-cypress"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-plugin-eslint"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-plugin-pwa"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-plugin-router"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-plugin-typescript"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-plugin-unit-mocha"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-plugin-vuex"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-service"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/compiler-sfc"
  dependency-version: 3.5.31
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/test-utils"
  dependency-version: 2.4.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: axe-core
  dependency-version: 4.11.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: chai-match-pattern
  dependency-version: 1.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: cypress-axe
  dependency-version: 1.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: cypress-localstorage-commands
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: eslint-plugin-import
  dependency-version: 2.32.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: moment-timezone
  dependency-version: 0.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: sharp
  dependency-version: 0.34.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: style-resources-loader
  dependency-version: 1.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/webroot/frontend-minor-patch-6937cde4e7 branch from db20611 to b3d7d0e Compare April 13, 2026 01:24
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Apr 13, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 13, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/webroot/frontend-minor-patch-6937cde4e7 branch April 13, 2026 14:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants