Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 11, 2026

Bumps the production-dependencies group with 4 updates in the / directory: @fortawesome/fontawesome-free, @vueuse/components, axios and vue.

Updates @fortawesome/fontawesome-free from 7.1.0 to 7.2.0

Release notes

Sourced from @​fortawesome/fontawesome-free's releases.

Release 7.2.0

Change log available at https://fontawesome.com/changelog

Commits
  • 337dd20 Release 7.2.0 (#21465)
  • 16ac6af Simplifying icon request titles (#21360)
  • ce49420 Simplifying icon request template name (to avoid redundancy)
  • 3dba69f Modify bug report template for versioning and labels (#21264)
  • f40da32 Update web bug report template
  • 89f17b4 Modify bug report template for version and labels
  • 14b8429 Adding feature requests to discussions
  • eceb155 Updating links to the new icon request templates
  • b544f79 Update contribution guidelines for icon requests
  • f811bcf Revise icon wizard request template
  • Additional commits viewable in compare view

Updates @vueuse/components from 14.2.0 to 14.2.1

Release notes

Sourced from @​vueuse/components's releases.

v14.2.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @vueuse/core from 14.2.0 to 14.2.1

Release notes

Sourced from @​vueuse/core's releases.

v14.2.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates axios from 1.13.4 to 1.13.5

Release notes

Sourced from axios's releases.

v1.13.5

Release 1.13.5

Highlights

  • Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
  • Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

  • Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

  • Fix/5657. (PR #7313)
  • Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

  • Add input validation to isAbsoluteURL. (PR #7326)
  • Refactor: bump minor package versions. (PR #7356)

Documentation

  • Clarify object-check comment. (PR #7323)
  • Fix deprecated Buffer constructor usage and README formatting. (PR #7371)

CI / Maintenance

  • Chore: fix issues with YAML. (PR #7355)
  • CI: update workflow YAMLs. (PR #7372)
  • CI: fix run condition. (PR #7373)
  • Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #7360)
  • Chore(release): prepare release 1.13.5. (PR #7379)

New Contributors

Full Changelog: axios/axios@v1.13.4...v1.13.5

Commits
  • 29f7542 chore(release): prepare release 1.13.5 (#7379)
  • 431c3a3 ci: fix run condition (#7373)
  • 9ff3a78 ci: update ymls (#7372)
  • 265b712 docs: fix deprecated Buffer constructor and formatting issues in README (#7371)
  • 475e75a feat: add input validation to isAbsoluteURL (#7326)
  • 28c7215 fix: Denial of Service via proto Key in mergeConfig (#7369)
  • 04cf019 docs: clarify object check comment (#7323)
  • 696fa75 fix: status is missing in AxiosError on and after v1.13.3 (#7368)
  • 569f028 fix: added a option to choose between legacy and the new request/response int...
  • 44b7c9f chore(deps-dev): bump karma-sourcemap-loader (#7360)
  • Additional commits viewable in compare view

Updates vue from 3.5.27 to 3.5.28

Release notes

Sourced from vue's releases.

v3.5.28

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.28 (2026-02-09)

Bug Fixes

  • transition: avoid unexpected cancelled parameter in transition done callback (#14391) (6798853)
  • compiler-sfc: add resolution trying for .mts/.cts files (#14402) (c09d41f), closes vuejs/router#2611
  • compiler-sfc: no params were generated when using withDefaults (#12823) (b0a1f05), closes #12822
  • reactivity: add __v_skip flag to EffectScope to prevent reactive conversion (#14359) (48b7552), closes #14357
  • runtime-core: avoid retaining el on cached text vnodes during static traversal (#14419) (4ace79a), closes #14134
  • runtime-core: prevent child component updates when style remains unchanged (#12825) (57866b5), closes #12826
  • runtime-core: properly handle async component update before resolve (#11619) (e71c26c), closes #11617
  • runtime-dom: handle null/undefined handler in withModifiers (#14362) (261de54), closes #14361
  • teleport: properly handling disabled teleport target anchor (#14417) (d7bcd85), closes #14412
  • transition-group: correct move translation under scale via element rect (#14360) (0243a79), closes #14356
  • useTemplateRef: don't update setup ref for useTemplateRef key (#12756) (fc40ca0), closes #12749
Commits
  • 1bdeb33 release: v3.5.28
  • e71c26c fix(runtime-core): properly handle async component update before resolve (#11...
  • 57866b5 fix(runtime-core): prevent child component updates when style remains unchang...
  • b0a1f05 fix(compiler-sfc): no params were generated when using withDefaults (#12823)
  • 48b7552 fix(reactivity): add __v_skip flag to EffectScope to prevent reactive convers...
  • 0243a79 fix(transition-group): correct move translation under scale via element rect ...
  • 261de54 fix(runtime-dom): handle null/undefined handler in withModifiers (#14362)
  • fc40ca0 fix(useTemplateRef): don't update setup ref for useTemplateRef key (#12756)
  • 6798853 fix: avoid unexpected cancelled parameter in transition done callback (#1...
  • 4ace79a fix(runtime-core): avoid retaining el on cached text vnodes during static tra...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 5 updates

Bumps the production-dependencies group with 4 updates in the / directory: [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome), [@vueuse/components](https://github.com/vueuse/vueuse/tree/HEAD/packages/components), [axios](https://github.com/axios/axios) and [vue](https://github.com/vuejs/core).


Updates `@fortawesome/fontawesome-free` from 7.1.0 to 7.2.0
- [Release notes](https://github.com/FortAwesome/Font-Awesome/releases)
- [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/7.x/CHANGELOG.md)
- [Commits](FortAwesome/Font-Awesome@7.1.0...7.2.0)

Updates `@vueuse/components` from 14.2.0 to 14.2.1
- [Release notes](https://github.com/vueuse/vueuse/releases)
- [Commits](https://github.com/vueuse/vueuse/commits/v14.2.1/packages/components)

Updates `@vueuse/core` from 14.2.0 to 14.2.1
- [Release notes](https://github.com/vueuse/vueuse/releases)
- [Commits](https://github.com/vueuse/vueuse/commits/v14.2.1/packages/core)

Updates `axios` from 1.13.4 to 1.13.5
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.13.4...v1.13.5)

Updates `vue` from 3.5.27 to 3.5.28
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.27...v3.5.28)

---
updated-dependencies:
- dependency-name: "@fortawesome/fontawesome-free"
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@vueuse/components"
  dependency-version: 14.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@vueuse/core"
  dependency-version: 14.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: axios
  dependency-version: 1.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: vue
  dependency-version: 3.5.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 11, 2026
@dependabot dependabot bot requested a review from a team as a code owner February 11, 2026 10:18
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 11, 2026
@ildyria ildyria merged commit 26dcb76 into master Feb 11, 2026
42 checks passed
@ildyria ildyria deleted the dependabot/npm_and_yarn/production-dependencies-431d0c507e branch February 11, 2026 13:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant