chore(deps): bump the production-dependencies group across 1 directory with 10 updates by dependabot[bot] · Pull Request #4526 · LycheeOrg/Lychee

dependabot · 2026-07-15T20:36:03Z

Bumps the production-dependencies group with 10 updates in the / directory:

Package	From	To
@fortawesome/fontawesome-free	`7.3.0`	`7.3.1`
@iconify-json/lucide	`1.2.116`	`1.2.117`
@paypal/paypal-js	`10.0.2`	`10.0.3`
@stripe/stripe-js	`9.9.0`	`9.10.0`
@vitejs/plugin-vue	`6.0.7`	`6.0.8`
laravel-vite-plugin	`3.1.0`	`3.1.3`
pinia	`3.0.4`	`4.0.2`
typescript	`6.0.3`	`7.0.2`
vite	`8.1.3`	`8.1.4`
vue-router	`5.1.0`	`5.2.0`

Updates @fortawesome/fontawesome-free from 7.3.0 to 7.3.1

Release notes

Sourced from @fortawesome/fontawesome-free's releases.

Release 7.3.1

Change log available at https://fontawesome.com/docs/changelog/

Commits

14c65a3 Release 7.3.1 (#21630)
See full diff in compare view

Maintainer changes

This version was pushed to npm by fortawesome-admin, a new releaser for @fortawesome/fontawesome-free since your current version.

Updates @iconify-json/lucide from 1.2.116 to 1.2.117

Commits

See full diff in compare view

Updates @paypal/paypal-js from 10.0.2 to 10.0.3

Release notes

Sourced from @paypal/paypal-js's releases.

@paypal/paypal-js@10.0.3

Patch Changes

4619c74: Adding v6 types for Venmo vault-without-payment (SavePayment)

Changelog

Sourced from @paypal/paypal-js's changelog.

10.0.3

Patch Changes

4619c74: Adding v6 types for Venmo vault-without-payment (SavePayment)

Commits

3caece5 Version Packages (#984)
4619c74 Feature/venmo vault without payment types (#973)
See full diff in compare view

Updates @stripe/stripe-js from 9.9.0 to 9.10.0

Release notes

Sourced from @stripe/stripe-js's releases.

v9.10.0

Changed

Terms element types (#948)

Update Checkout Form change event types (#946)

Add fields.name types to AE (#947)

Add validateElements type to StripeCheckoutLoadActionsSuccess (#945)

Commits

31973eb v9.10.0
52b1156 Terms element types (#948)
5168bdc Update Checkout Form change event types (#946)
255eac0 Add fields.name types to AE (#947)
8007285 Add validateElements type to StripeCheckoutLoadActionsSuccess (#945)
See full diff in compare view

Updates @vitejs/plugin-vue from 6.0.7 to 6.0.8

Release notes

Sourced from @vitejs/plugin-vue's releases.

plugin-vue@6.0.8

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @vitejs/plugin-vue's changelog.

6.0.8 (2026-07-14)

Features

plugin-vue: add forced vapor mode option (#766) (d59c3c0)

Bug Fixes

deps: update all non-major dependencies (#781) (d369e5a)

Commits

d8ff7d0 release: plugin-vue@6.0.8
d59c3c0 feat(plugin-vue): add forced vapor mode option (#766)
d369e5a fix(deps): update all non-major dependencies (#781)
See full diff in compare view

Updates laravel-vite-plugin from 3.1.0 to 3.1.3

Release notes

Sourced from laravel-vite-plugin's releases.

v3.1.3

Full Changelog: laravel/vite-plugin@v3.1.2...v3.1.3

v3.1.2

What's Changed

Bump publish workflow node version by @joetannenbaum in laravel/vite-plugin#383

Full Changelog: laravel/vite-plugin@v3.1.1...v3.1.2

v3.1.1

What's Changed

Bump fontaine peer dependency by @joetannenbaum in laravel/vite-plugin#354

Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in laravel/vite-plugin#355

GitHub Actions hardening by @nunomaduro in laravel/vite-plugin#362

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/vite-plugin#363

Bump github/codeql-action from 3.35.4 to 4.36.0 in the github-actions group across 1 directory by @dependabot[bot] in laravel/vite-plugin#358

Enable Dependabot auto-merge by @nunomaduro in laravel/vite-plugin#364

Bump the github-actions group with 2 updates by @dependabot[bot] in laravel/vite-plugin#367

Bump esbuild from 0.27.4 to 0.28.1 by @dependabot[bot] in laravel/vite-plugin#376

[3.x] Sanitize variable font weight ranges in emitted asset filenames by @naveentehrpariya in laravel/vite-plugin#375

[3.x] Respect the resolved Vite base in generated font CSS URLs by @naveentehrpariya in laravel/vite-plugin#372

[3.x] Use spec-compliant format() keywords for ttf, otf, and eot fonts by @naveentehrpariya in laravel/vite-plugin#371

[3.x] Honor the subsets option for google and bunny providers by @naveentehrpariya in laravel/vite-plugin#374

[3.x] Warn when optimized font fallbacks cannot be generated by @naveentehrpariya in laravel/vite-plugin#373

[3.x] Small fix in v3 upgrade guide by @gdebrauwer in laravel/vite-plugin#346

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/vite-plugin#381

Bump the github-actions group with 3 updates by @dependabot[bot] in laravel/vite-plugin#382

New Contributors

@nunomaduro made their first contribution in laravel/vite-plugin#362

@naveentehrpariya made their first contribution in laravel/vite-plugin#375

@gdebrauwer made their first contribution in laravel/vite-plugin#346

Full Changelog: laravel/vite-plugin@v3.1.0...v3.1.1

Changelog

Sourced from laravel-vite-plugin's changelog.

v3.1.3 - 2026-07-13

Full Changelog: laravel/vite-plugin@v3.1.2...v3.1.3

v3.1.2 - 2026-07-13

What's Changed

Bump publish workflow node version by @joetannenbaum in laravel/vite-plugin#383

Full Changelog: laravel/vite-plugin@v3.1.1...v3.1.2

v3.1.1 - 2026-07-13

What's Changed

Bump fontaine peer dependency by @joetannenbaum in laravel/vite-plugin#354

Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in laravel/vite-plugin#355

GitHub Actions hardening by @nunomaduro in laravel/vite-plugin#362

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/vite-plugin#363

Bump github/codeql-action from 3.35.4 to 4.36.0 in the github-actions group across 1 directory by @dependabot[bot] in laravel/vite-plugin#358

Enable Dependabot auto-merge by @nunomaduro in laravel/vite-plugin#364

Bump the github-actions group with 2 updates by @dependabot[bot] in laravel/vite-plugin#367

Bump esbuild from 0.27.4 to 0.28.1 by @dependabot[bot] in laravel/vite-plugin#376

[3.x] Sanitize variable font weight ranges in emitted asset filenames by @naveentehrpariya in laravel/vite-plugin#375

[3.x] Respect the resolved Vite base in generated font CSS URLs by @naveentehrpariya in laravel/vite-plugin#372

[3.x] Use spec-compliant format() keywords for ttf, otf, and eot fonts by @naveentehrpariya in laravel/vite-plugin#371

[3.x] Honor the subsets option for google and bunny providers by @naveentehrpariya in laravel/vite-plugin#374

[3.x] Warn when optimized font fallbacks cannot be generated by @naveentehrpariya in laravel/vite-plugin#373

[3.x] Small fix in v3 upgrade guide by @gdebrauwer in laravel/vite-plugin#346

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/vite-plugin#381

Bump the github-actions group with 3 updates by @dependabot[bot] in laravel/vite-plugin#382

New Contributors

@nunomaduro made their first contribution in laravel/vite-plugin#362

@naveentehrpariya made their first contribution in laravel/vite-plugin#375

@gdebrauwer made their first contribution in laravel/vite-plugin#346

Full Changelog: laravel/vite-plugin@v3.1.0...v3.1.1

Commits

a6987d3 v3.1.3
b0e75e6 Update package.json
ec3f849 Update CHANGELOG
0bc07e2 Update publish.yml (#383)
a81e392 Update CHANGELOG
ec233de v3.1.1
cd604c0 Bump the github-actions group with 3 updates (#382)
e3e3db3 Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group (#381)
596b51e Merge pull request #346 from gdebrauwer/fix-v3-upgrade-guide
5f4b5b6 [3.x] Warn when optimized font fallbacks cannot be generated (#373)
Additional commits viewable in compare view

Updates pinia from 3.0.4 to 4.0.2

Commits

ae4e3b2 release: pinia@4.0.2 @pinia/testing@2.0.1
0203b2d ci: fix size check
39aae41 refactor: build configuration (#3158)
75009b0 release: pinia@4.0.1
2ed563c chore: update pinia readme
fb21766 fix: Re-add missing types exports field (#3154)
d797385 fix(ci): pin pnpm to 11.7.0 to match action-setup bootstrap
bd3d9b3 ci: install pnpm standalone to avoid self-switch crash in release
acad9f2 ci: pin pnpm version in release workflow
1374c9d release: pinia@4.0.0 @pinia/testing@2.0.0 @pinia/nuxt@1.0.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for pinia since your current version.

Updates typescript from 6.0.3 to 7.0.2

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vite from 8.1.3 to 8.1.4

Release notes

Sourced from vite's releases.

v8.1.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.4 (2026-07-09)

Features

legacy: prefer oxc as minifier (fix #21973) (#22468) (ab5dafa)

Bug Fixes

build: add workaround for building on stackblitz (#22840) (575c32c)

build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)

deps: update all non-major dependencies (#22865) (d4295a9)

deps: update rolldown-related dependencies (#22866) (7cf07e4)

html: avoid backtracking in import-only check (#22848) (b5868c0)

optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)

ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)

strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

fix incorrect @default for server.cors (#22859) (70435b2)

Miscellaneous Chores

deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

Code Refactoring

eliminate ineffectiveDynamicImport warn (#22876) (ea22fb3)

Tests

avoid warnings (#22851) (af21ab6)

Build System

remove the custom onLog function (#22878) (2c4a217)

replace deprecated onwarn with onLog (#22741) (c581b55)

Commits

a477454 release: v8.1.4
ab5dafa feat(legacy): prefer oxc as minifier (fix #21973) (#22468)
173a1b6 fix(ssr): align named export function call stacktrace column with Node (#22829)
575c32c fix(build): add workaround for building on stackblitz (#22840)
72a5e21 fix(optimizer): avoid optimizer run for transform request before init (#22852)
a9539d6 chore(deps): update dependency postcss-modules to v9 (#22867)
70435b2 docs: fix incorrect @default for server.cors (#22859)
2c4a217 build: remove the custom onLog function (#22878)
c581b55 build: replace deprecated onwarn with onLog (#22741)
ea22fb3 refactor: eliminate ineffectiveDynamicImport warn (#22876)
Additional commits viewable in compare view

Updates vue-router from 5.1.0 to 5.2.0

Release notes

Sourced from vue-router's releases.

v5.2.0

   🚀 Features

Add helpful diagnostics - by @posva in vuejs/router#2737 (628fe)

   🐞 Bug Fixes

Allow pinia 4 - by @posva (16535)

scroll: Ignore stale async scrollBehavior results - by @baozjj and @cursoragent in vuejs/router#2730 (303df)

unplugin: Reject invalid hex digits in [x+hh] character codes - by @greymoth-jp in vuejs/router#2744 (4d967)

    View changes on GitHub

Commits

6e5f8d2 release: vue-router@5.2.0
1653533 fix: allow pinia 4
f634b2f docs: improve compat
d4319be chore: up ts where possible
b5b5f94 ci: pin image
680e905 ci: update playwright image
385ca6b chore: up lint, babel and others
92ff264 chore: up deps minor and patches
feed382 ci: bump the actions group with 3 updates (#2745)
4d96741 fix(unplugin): reject invalid hex digits in [x+hh] character codes (#2744)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 10 updates Bumps the production-dependencies group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome) | `7.3.0` | `7.3.1` | | [@iconify-json/lucide](https://github.com/iconify/icon-sets) | `1.2.116` | `1.2.117` | | [@paypal/paypal-js](https://github.com/paypal/paypal-js/tree/HEAD/packages/paypal-js) | `10.0.2` | `10.0.3` | | [@stripe/stripe-js](https://github.com/stripe/stripe-js) | `9.9.0` | `9.10.0` | | [@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue) | `6.0.7` | `6.0.8` | | [laravel-vite-plugin](https://github.com/laravel/vite-plugin) | `3.1.0` | `3.1.3` | | [pinia](https://github.com/vuejs/pinia) | `3.0.4` | `4.0.2` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.3` | `8.1.4` | | [vue-router](https://github.com/vuejs/router) | `5.1.0` | `5.2.0` | Updates `@fortawesome/fontawesome-free` from 7.3.0 to 7.3.1 - [Release notes](https://github.com/FortAwesome/Font-Awesome/releases) - [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/7.x/CHANGELOG.md) - [Commits](FortAwesome/Font-Awesome@7.3.0...7.3.1) Updates `@iconify-json/lucide` from 1.2.116 to 1.2.117 - [Commits](https://github.com/iconify/icon-sets/commits) Updates `@paypal/paypal-js` from 10.0.2 to 10.0.3 - [Release notes](https://github.com/paypal/paypal-js/releases) - [Changelog](https://github.com/paypal/paypal-js/blob/main/packages/paypal-js/CHANGELOG.md) - [Commits](https://github.com/paypal/paypal-js/commits/@paypal/paypal-js@10.0.3/packages/paypal-js) Updates `@stripe/stripe-js` from 9.9.0 to 9.10.0 - [Release notes](https://github.com/stripe/stripe-js/releases) - [Commits](stripe/stripe-js@v9.9.0...v9.10.0) Updates `@vitejs/plugin-vue` from 6.0.7 to 6.0.8 - [Release notes](https://github.com/vitejs/vite-plugin-vue/releases) - [Changelog](https://github.com/vitejs/vite-plugin-vue/blob/main/packages/plugin-vue/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-vue/commits/plugin-vue@6.0.8/packages/plugin-vue) Updates `laravel-vite-plugin` from 3.1.0 to 3.1.3 - [Release notes](https://github.com/laravel/vite-plugin/releases) - [Changelog](https://github.com/laravel/vite-plugin/blob/3.x/CHANGELOG.md) - [Commits](laravel/vite-plugin@v3.1.0...v3.1.3) Updates `pinia` from 3.0.4 to 4.0.2 - [Release notes](https://github.com/vuejs/pinia/releases) - [Commits](vuejs/pinia@v3.0.4...v4.0.2) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `vite` from 8.1.3 to 8.1.4 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.1.4/packages/vite) Updates `vue-router` from 5.1.0 to 5.2.0 - [Release notes](https://github.com/vuejs/router/releases) - [Commits](vuejs/router@v5.1.0...v5.2.0) --- updated-dependencies: - dependency-name: "@fortawesome/fontawesome-free" dependency-version: 7.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@iconify-json/lucide" dependency-version: 1.2.117 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@paypal/paypal-js" dependency-version: 10.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@stripe/stripe-js" dependency-version: 9.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@vitejs/plugin-vue" dependency-version: 6.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: laravel-vite-plugin dependency-version: 3.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: pinia dependency-version: 4.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: vite dependency-version: 8.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: vue-router dependency-version: 5.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 15, 2026

dependabot Bot requested a review from a team as a code owner July 15, 2026 20:36

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 15, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): bump the production-dependencies group across 1 directory with 10 updates#4526

chore(deps): bump the production-dependencies group across 1 directory with 10 updates#4526
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/production-dependencies-3c73e86100

dependabot Bot commented on behalf of github Jul 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 15, 2026

Release 7.3.1

@​paypal/paypal-js@​10.0.3

Patch Changes

10.0.3

Patch Changes

v9.10.0

Changed

plugin-vue@6.0.8

6.0.8 (2026-07-14)

Features

Bug Fixes

v3.1.3

v3.1.2

What's Changed

v3.1.1

What's Changed

New Contributors

v3.1.3 - 2026-07-13

v3.1.2 - 2026-07-13

What's Changed

v3.1.1 - 2026-07-13

What's Changed

New Contributors

v8.1.4

8.1.4 (2026-07-09)

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Tests

Build System

v5.2.0

🚀 Features

🐞 Bug Fixes

View changes on GitHub

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@paypal/paypal-js@10`.0.3