Skip to content

chore(deps): bump @quasar/cli from 5.0.7 to 5.0.9 - #365

Merged
github-actions[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/quasar/cli-5.0.9
Oct 1, 2026
Merged

github-actions[bot] merged 1 commit into
masterfrom
dependabot/npm_and_yarn/quasar/cli-5.0.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps @quasar/cli from 5.0.7 to 5.0.9.

Release notes

Sourced from @​quasar/cli's releases.

@​quasar/cli-v5.0.9

This is the optional globally-installed part of the Quasar CLI

Changes

  • fix(cli): upgrade -> quasar upgrade no longer treats eslint-plugin-quasar as a Quasar package. That package has been archived and is not part of the framework anymore, so the upgrade command stopped looking it up on npm, listing it as outdated and (with --install) trying to upgrade it. Projects still depending on it keep it exactly as pinned, like any other third-party dependency
  • chore(cli): upgraded deps -> @clack/prompts ^1.8.1, hono ^4.13.8 (the web server behind quasar serve) and open ^11.0.4
  • chore(cli): the package now declares its cli folder in its repository field, so the "Repository" and provenance links on npm point at the CLI's source instead of the monorepo root

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

@​quasar/cli-v5.0.8

This is the optional globally-installed part of the Quasar CLI

Changes

  • fix(cli): upgrade -> quasar upgrade --install no longer fails with ERR_PNPM_IGNORED_BUILDS on pnpm v12. pnpm v12 silently ignores the --config.strict-dep-builds=false param the CLI relied on and now raises that error on the very first install too, so any project with an unapproved dependency build script (sass' @parcel/watcher, present in every Quasar app) aborted the install step. The opt-out now travels as the PNPM_CONFIG_STRICT_DEP_BUILDS=false environment variable, which pnpm v10, v11 and v12 all honour. As before, pnpm still prints its "Ignored build scripts" notice and refuses to run those scripts, so nothing is silently built: approve them with pnpm approve-builds whenever you want to
  • chore(cli): upgraded deps -> hono ^4.13.7 (the web server behind quasar serve) and open ^11.0.2

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

Commits
  • e1208f8 chore(cli): bump version
  • 39b9db5 fix(cli): stop upgrading archived eslint-plugin-quasar
  • 8979a77 chore: upgrade deps, drop the vitest 5 define workaround
  • 2f471ac chore: declare each package's directory in its repository field
  • 05d0ea7 chore: upgrade deps
  • 9b1e6d9 chore(cli): bump version
  • 6878668 chore: upgrade deps
  • 4e4bd68 test(create-quasar/cli): surface the scaffold install's own error when node_m...
  • 03b1889 fix(app-vite/cli/icongenie/create-quasar): keep opting out of pnpm's ignored-...
  • 7b2d325 chore: upgrade to vitest 5
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@quasar/cli](https://github.com/quasarframework/quasar/tree/HEAD/cli) from 5.0.7 to 5.0.9.
- [Release notes](https://github.com/quasarframework/quasar/releases)
- [Commits](https://github.com/quasarframework/quasar/commits/@quasar/cli-v5.0.9/cli)

---
updated-dependencies:
- dependency-name: "@quasar/cli"
  dependency-version: 5.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions
github-actions Bot merged commit 120b087 into master Oct 1, 2026
1 check passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/quasar/cli-5.0.9 branch October 1, 2026 12:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants