deps(npm): bump the npm-minor-patch group in /frontend/taskdeck-web with 15 updates

[dependabot]

Bumps the npm-minor-patch group in /frontend/taskdeck-web with 15 updates:

Package	From	To
@material-symbols/font-200	0.47.1	0.47.2
@tanstack/vue-virtual	3.13.36	3.13.37
dompurify	3.4.14	3.4.15
marked	18.0.11	18.0.12
@playwright/test	1.62.1	1.63.0
@types/node	24.13.3	24.13.4
@typescript-eslint/eslint-plugin	8.69.0	8.70.0
@typescript-eslint/parser	8.69.0	8.70.0
autoprefixer	10.5.4	10.5.6
baseline-browser-mapping	2.11.21	2.11.22
eslint	10.9.1	10.10.0
eslint-plugin-vue	10.10.0	10.11.0
fast-check	4.9.0	4.10.0
happy-dom	20.14.0	20.14.3
vite	8.2.2	8.3.0

Updates @material-symbols/font-200 from 0.47.1 to 0.47.2

Commits

• af93fdc 0.47.2
• 1f04888 Auto Update
• See full diff in compare view

Updates @tanstack/vue-virtual from 3.13.36 to 3.13.37

Release notes

Sourced from @​tanstack/vue-virtual's releases.

@​tanstack/vue-virtual@​3.13.37

Patch Changes

• Updated dependencies [4a0adf3]:
  • @​tanstack/virtual-core@​3.17.9

Changelog

Sourced from @​tanstack/vue-virtual's changelog.

3.13.37

Patch Changes

• Updated dependencies [4a0adf3]:
  • @​tanstack/virtual-core@​3.17.9

Commits

• 171029d ci: Version Packages (#1269)
• See full diff in compare view

Updates dompurify from 3.4.14 to 3.4.15

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.15

• Added better clobbering hardening when XML content is involved, thanks @​gnyselcuk
• Added several smaller hardening and edge-case improvements, thanks @​leechristensen
• Bumped several dependencies where possible

Commits

• 1d7460c release: 3.4.15 (#1609)
• See full diff in compare view

Updates marked from 18.0.11 to 18.0.12

Release notes

Sourced from marked's releases.

v18.0.12

18.0.12 (2026-09-07)

Bug Fixes

• allow a tab before the closing sequence of an ATX heading (#4084) (4417582)
• allow one more level of nested brackets in a link label (#4064) (37b28d8)
• do not add a newline to an empty code block (#4073) (23b1706)
• escape character references in autolink destinations (#4053) (8f432f0)
• reject GFM email autolink when the domain ends in _ or - (#4063) (df57534)
• reject invalid characters in HTML tag names (#4083) (300bb1d)
• remove up to the fence indentation from each content line (#4074) (0244f08)

Commits

• 24bf47c chore(release): 18.0.12 [skip ci]
• 475ba3d chore(deps-dev): bump eslint from 10.9.1 to 10.10.0 (#4088)
• 4417582 fix: allow a tab before the closing sequence of an ATX heading (#4084)
• 23b1706 fix: do not add a newline to an empty code block (#4073)
• df57534 fix: reject GFM email autolink when the domain ends in _ or - (#4063)
• 37b28d8 fix: allow one more level of nested brackets in a link label (#4064)
• 8f432f0 fix: escape character references in autolink destinations (#4053)
• 44ddc31 docs: add inspect.software health badge (#4062)
• 0244f08 fix: remove up to the fence indentation from each content line (#4074)
• 300bb1d fix: reject invalid characters in HTML tag names (#4083)
• Additional commits viewable in compare view

Updates @playwright/test from 1.62.1 to 1.63.0

Release notes

Sourced from @​playwright/test's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits

• 1b025d7 chore: mark v1.63.0 (#42569)
• 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
• 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
• e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
• 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
• 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
• 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
• 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
• 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
• bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
• Additional commits viewable in compare view

Updates @types/node from 24.13.3 to 24.13.4

Commits

• See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.69.0 to 8.70.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.70.0

8.70.0 (2026-09-07)

🚀 Features

• eslint-plugin: [no-generated-empty-object-type] add rule (#12730)
• website: generate per-page social preview cards (#12734)

🩹 Fixes

• use stable release of pnpm 12 (#12808)
• update pnpm to 12.3.4 and dedupe Docusaurus packages (#12829)
• eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#12729)
• eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#12728)
• eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)
• project-service: avoid discarded tsserver logs (#12748)
• typescript-estree: clarify the parserOptions.project error message (#12817)

❤️ Thank You

• Barry @​barry166
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨ @​JoshuaKGoldberg
• Kirk Waiblinger @​kirkwaiblinger
• Ulrich Stark @​ulrichstark
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.70.0 (2026-09-07)

🚀 Features

• eslint-plugin: [no-generated-empty-object-type] add rule (#12730)

🩹 Fixes

• eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)
• eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#12728)
• eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#12729)

❤️ Thank You

• Josh Goldberg ✨ @​JoshuaKGoldberg
• Ulrich Stark @​ulrichstark

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 7ee7608 chore(release): publish 8.70.0
• f66bdca test(eslint-plugin): [member-ordering] use RuleTester directly in `optional...
• 4586535 fix(eslint-plugin): [no-deprecated] report deprecated imported values used in...
• f8e1e4e fix(eslint-plugin): [no-unnecessary-condition] no false positive on RHS of a ...
• 889cece fix(eslint-plugin): [member-ordering] don't report fields that read fields de...
• 1a5a8b1 feat(eslint-plugin): [no-generated-empty-object-type] add rule (#12730)
• See full diff in compare view

Updates @typescript-eslint/parser from 8.69.0 to 8.70.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.70.0

8.70.0 (2026-09-07)

🚀 Features

• eslint-plugin: [no-generated-empty-object-type] add rule (#12730)
• website: generate per-page social preview cards (#12734)

🩹 Fixes

• use stable release of pnpm 12 (#12808)
• update pnpm to 12.3.4 and dedupe Docusaurus packages (#12829)
• eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#12729)
• eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#12728)
• eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)
• project-service: avoid discarded tsserver logs (#12748)
• typescript-estree: clarify the parserOptions.project error message (#12817)

❤️ Thank You

• Barry @​barry166
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨ @​JoshuaKGoldberg
• Kirk Waiblinger @​kirkwaiblinger
• Ulrich Stark @​ulrichstark
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.70.0 (2026-09-07)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 7ee7608 chore(release): publish 8.70.0
• See full diff in compare view

Updates autoprefixer from 10.5.4 to 10.5.6

Release notes

Sourced from autoprefixer's releases.

10.5.6

• Fixed producing wrong old -webkit- gradients (by @​ryanchou1994).

10.5.5

• Fixed resolution media query parsing performance (by @​NotAFlightRisk).

Changelog

Sourced from autoprefixer's changelog.

10.5.6

• Fixed producing wrong old -webkit- gradients (by @​ryanchou1994).

10.5.5

• Fixed resolution media query parsing performance (by @​NotAFlightRisk).

Commits

• b031690 Release 10.5.6 version
• da65c36 Add warning when Autoprefixer can cover CSS for old Safari
• 604f8d9 Update dependencies
• 54608ca Fix old WebKit gradients with color hints (#1554)
• 7e81fff Release 10.5.5 version
• d9e3531 Update dependencies
• 34b3a3e Fix media query parse performance
• 265521e Remove Cult
• dd80d38 Update EM banner
• See full diff in compare view

Updates baseline-browser-mapping from 2.11.21 to 2.11.22

Commits

• af7c3c4 Patch to 2.11.22 because browser or feature data changed
• 7e10cad Browser or feature data changed
• ebb9702 Updating static site
• ecc57a3 Updating static site
• See full diff in compare view

Updates eslint from 10.9.1 to 10.10.0

Release notes

Sourced from eslint's releases.

v10.10.0

Features

• 264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)
• c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)
• 5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

• bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)
• 427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)
• 9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)
• 87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)
• 8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)
• 9f4a364 fix: Ignore static imports in no-unreachable (#21276) (Taha Kotil)

Documentation

• 2417cad docs: Update README (GitHub Actions Bot)
• 9cecb8a docs: document \c control letter escapes in no-control-regex (#21286) (한국)
• 8724829 docs: update compat table links (#21263) (fnx)
• 5634542 docs: Clarify eqeqeq suggestion behavior (#21256) (Müslüm Yılmaz)

Chores

• b3d876b chore: disable npm audit in ecosystem tests (#21306) (Francesco Trotta)
• 1696682 ci: restore EMFILE test on Node.js 26 (#21297) (Marry (Subin Yang))
• 2c7f5d6 chore: update github/codeql-action action to v4.37.9 (#21296) (renovate[bot])
• 3c753f1 chore: update eslint (#21289) (renovate[bot])
• 1c73469 chore: update ecosystem plugins (#21280) (ESLint Bot)
• 08a02be test: add error locations to no-extra-boolean-cast (#21266) (lumir)
• 77bb1db chore: update github/codeql-action action to v4.37.8 (#21270) (renovate[bot])
• 007e81a ci: skip EMFILE test on Node.js 26 (#21265) (lumir)
• 0430280 chore: improve ecosystem tests compatibility on Windows (#21178) (crimsonjay0)

Commits

• 3f20a57 10.10.0
• f4e5284 Build: changelog update for 10.10.0
• bb47dc6 fix: update dependency file-entry-cache to v11 (#20801)
• 427ac0a fix: use format strings in debug calls (#21247)
• b3d876b chore: disable npm audit in ecosystem tests (#21306)
• 9d81532 fix: support __proto__ in /* exported */ comments (#21261)
• 264b434 feat: add d and v flags to no-unexpected-multiline (#21305)
• 1696682 ci: restore EMFILE test on Node.js 26 (#21297)
• 2c7f5d6 chore: update github/codeql-action action to v4.37.9 (#21296)
• 87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282)
• Additional commits viewable in compare view

Updates eslint-plugin-vue from 10.10.0 to 10.11.0

Release notes

Sourced from eslint-plugin-vue's releases.

v10.11.0

Minor Changes

• Added defineModel support to vue/require-default-prop and vue/require-valid-default-prop rules (#3032)
• Added support for SFCs using @nuxtjs/composition-api, which is now treated the same as vue or @vue/composition-api (#3100)
• Added new vue/no-shadow-native-events rule (#2558)

Patch Changes

• Fixed vue/use-v-on-exact to avoid reporting @keydown.stop when paired with an exact key-specific listener (#3082)
• Specified explicit items policies for array rule option schemas (#3112)
• Updated resources (HTML elements) (#3132 and #3133)

Changelog

Sourced from eslint-plugin-vue's changelog.

10.11.0

Minor Changes

• Added defineModel support to vue/require-default-prop and vue/require-valid-default-prop rules (#3032)
• Added support for SFCs using @nuxtjs/composition-api, which is now treated the same as vue or @vue/composition-api (#3100)
• Added new vue/no-shadow-native-events rule (#2558)

Patch Changes

• Fixed vue/use-v-on-exact to avoid reporting @keydown.stop when paired with an exact key-specific listener (#3082)
• Specified explicit items policies for array rule option schemas (#3112)
• Updated resources (HTML elements) (#3132 and #3133)

Commits

• 97c5634 Version Packages (#3106)
• abe8bef Update resources (#3133)
• f3a0276 Make wording in changeset more consistent
• 87cd113 Update resources (#3132)
• af8fb6a chore(tools/update-html-resources): fix deprecated HTML elements lookup (#3129)
• d363ec0 refactor: extract common type in VNodeListenerMap (#3111)
• 6a4ff1b chore(tools): don't fail npm run new when VS Code CLI is missing (#3116)
• a465b43 Fix eslint-plugin/no-incorrect-meta-schema lint violations (#3112)
• 97985f6 refactor: extract getNameParamNode and improve type handling (#3107)
• 834c463 feat: extend require-default-prop and require-valid-default-prop to check...
• Additional commits viewable in compare view

Updates fast-check from 4.9.0 to 4.10.0

Release notes

Sourced from fast-check's releases.

New plugin API and deprecations ahead of v5

[Code][Diff]

Features

• (PR#7216) Introduce a plugin API
• (PR#7221) Refine plugin API
• (PR#7222) Add ability to configure plugins globally
• (PR#7224) Add the beforeEach plugin to hook in life-cycle
• (PR#7227) Create an afterEach plugin
• (PR#7232) Deprecate life-cycle methods
• (PR#7235) Support teardown of beforeEach plugin
• (PR#7228) Add timeout plugin to stop long running predicates
• (PR#7237) Deprecate timeout from parameters
• (PR#7238) Pass a store to plugins
• (PR#7239) Add extra plugin's method called onAllRunsComplete
• (PR#7240) Deprecate reporter and asyncReporter from parameters
• (PR#7229) Add plugin to interrupt after time limit
• (PR#7245) Support failOnInterrupt on the plugin
• (PR#7230) Add plugins to drop runs on already covered cases
• (PR#7259) Add ability to decorate generate via Plugins
• (PR#7231) Add the unbiased plugin to generate without bias
• (PR#7260) Deprecate parameters superseded by plugins
• (PR#7261) Deprecate v5 removals

Fixes

• (PR#7225) Bug: Proper ordering between plugins
• (PR#7127) CI: Announce on Bluesky when drafting the release
• (PR#7217) CI: Dedupe packages for pnpm
• (PR#7137) Doc: Release note for 4.9.0
• (PR#7226) Doc: Fix admonition titles on the website
• (PR#7246) Doc: Add jkomyno as code contributor
• (PR#7251) Performance: Single timer for interruptAfterTimeLimit

---

Changelog

Sourced from fast-check's changelog.

4.10.0

New plugin API and deprecations ahead of v5 [Code][Diff]

Features

• (PR#7216) Introduce a plugin API
• (PR#7221) Refine plugin API
• (PR#7222) Add ability to configure plugins globally
• (PR#7224) Add the beforeEach plugin to hook in life-cycle
• (PR#7227) Create an afterEach plugin
• (PR#7232) Deprecate life-cycle methods
• (PR#7235) Support teardown of beforeEach plugin
• (PR#7228) Add timeout plugin to stop long running predicates
• (PR#7237) Deprecate timeout from parameters
• (PR#7238) Pass a store to plugins
• (PR#7239) Add extra plugin's method called onAllRunsComplete
• (PR#7240) Deprecate reporter and asyncReporter from parameters
• (PR#7229) Add plugin to interrupt after time limit
• (PR#7245) Support failOnInterrupt on the plugin
• (PR#7230) Add plugins to drop runs on already covered cases
• (PR#7259) Add ability to decorate generate via Plugins
• (PR#7231) Add the unbiased plugin to generate without bias
• (PR#7260) Deprecate parameters superseded by plugins
• (PR#7261) Deprecate v5 removals

Fixes

• (PR#7225) Bug: Proper ordering between plugins
• (PR#7127) CI: Announce on Bluesky when drafting the release
• (PR#7217) CI: Dedupe packages for pnpm
• (PR#7137) Doc: Release note for 4.9.0
• (PR#7226) Doc: Fix admonition titles on the website
• (PR#7246) Doc: Add jkomyno as code contributor
• (PR#7251) Performance: Single timer for interruptAfterTimeLimit

---

Commits

• 4fba17d 🔖 Update CHANGELOG.md for fast-check@4.10.0, @​fast-check/jest@​2.3.0, @​fast-ch...
• a433d8b ⬆️ Update dependency @​types/node to ^24.13.4 (#7263)
• 8470c46 ⬆️ Update dependency @​microsoft/api-extractor to ^7.59.1 (#7255)
• 5382221 🗑️ Deprecate v5 removals (#7261)
• 3cc3696 🗑️ Deprecate parameters superseded by plugins (#7260)
• a93374d ✨ Add the unbiased plugin to generate without bias (#7231)
• 0f1bf99 ✨ Add ability to decorate generate via Plugins (#7259)
• 917a447 ✨ Add plugins to drop runs on already covered cases (#7230)
• 32daf74 ⚡️ Single timer for interruptAfterTimeLimit (#7251)
• 485f337 👥 Add jkomyno as code contributor (#7246)
• Additional commits viewable in compare view

Updates happy-dom from 20.14.0 to 20.14.3

Release notes

Sourced from happy-dom's releases.

v20.14.3

👷‍♂️ Patch fixes

• Avoids cloning all properties in CSSPropertyManager.toString - By @​erictheswift in task #2363

v20.14.2

👷‍♂️ Patch fixes

• Fixes regression where not all CSS variables where resolved in getComputedStyle() - By @​klaesra in task #2344

v20.14.1

👷‍♂️ Patch fixes

• Invalidate the computed style cache for the whole subtree - By @​matmannion and @​capricorn86 in task #2366

Commits

• 5fb1df3 fix: #2363 Avoids cloning all properties in CSSPropertyManager.toString() (...
• de0a1e9 fix: #2344 Resolve every var() in a value, not only the first one (#2395)
• 64b8b94 fix: #2366 Invalidate the computed style cache for the whole subtree (#2367)
• See full diff in compare view

Updates vite from 8.2.2 to 8.3.0

Release notes

Sourced from vite's releases.

create-vite@8.3.0

Please refer to CHANGELOG.md for details.

v8.3.0

Features

• build: avoid settling seen preload dependencies for performance (#23446) (e6f6b3e)

Bug Fixes

• handle CRLF line endings in code frame positions (#23219) (9913672)
• only treat whole node_modules path segments as dependencies (fix #17467) (#23437) (ef0dc17)

Performance Improvements

• proxy: pre-compile context matchers at server creation (#23263) (8abf700)

v8.3.0-beta.1

Features

• devtools: enable dev server integration (#23333) (68aeb8a)

Bug Fixes

• build: keep hash placeholders as-is in resolveFileUrl hook (#23422) (e8d6a4d)
• bundled-dev: mark payload delivered on client report (#23373) (a6d43bc)
• deps: update all non-major dependencies (#23445) (fc7c104)
• html: don't inline preload link targets (fix #13355) (#23387) (12e709c)
• resolve the actual package root in findNearestMainPackageData for nested package.json (#23356) (8492422)
• shortcuts extend error (#23447) (4ec58d1)

Miscellaneous Chores

• introducing @e18e/eslint-plugin (#23357) (f794133)
• remove unnecessary comment (#23448) (b919a1a)

v8.3.0-beta.0

Features

• accept Rolldown watch options in server.watch (#23133) (1b5cfe3)
• add closeServer and closePreviewServer hooks (#23110) (e17d2d5)
• add top-level tsconfig option (#23310) (93164c3)
• add warning for unsupported hooks in plugin returned from applyToEnvironment hook (#23191) (fdef04f)
• cli: support naming the CPU profile via --profile [name] (#23042) (a500dee)
• config: warn on named imports from JSON modules (#23378) (472385e)
• css: minify style tag (#23183) (8156684)
• searched params attached to workers are now preserved (#22280) (517b97f)
• support subpath imports in dynamic import statements (#23185) (b78e2f1)
• use import.meta.ROLLDOWN_FILE_URL_* for assets in JS (#22888) (4366ac4)
• use import.meta.ROLLDOWN_FILE_URL_* for other plugins (#22894) (Description has been truncated