Skip to content

Chore(deps): Bump the frontend-minor-patch group across 1 directory with 34 updates#1417

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/webroot/frontend-minor-patch-6937cde4e7
Open

Chore(deps): Bump the frontend-minor-patch group across 1 directory with 34 updates#1417
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/webroot/frontend-minor-patch-6937cde4e7

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 7, 2026

Bumps the frontend-minor-patch group with 33 updates in the /webroot directory:

Package From To
@statsig/js-client 3.25.3 3.32.3
@statsig/session-replay 3.25.3 3.32.3
@statsig/web-analytics 3.25.3 3.32.3
@vue/compat 3.4.21 3.5.31
axios 1.13.5 1.14.0
caniuse-lite 1.0.30001709 1.0.30001782
core-js 3.36.1 3.49.0
country-codes-flags-phone-codes 1.0.4 1.1.1
joi-password 4.2.0 4.3.0
libphonenumber-js 1.11.1 1.12.41
object.fromentries 2.0.4 2.0.8
vue 3.4.21 3.5.31
@babel/core 7.24.4 7.29.0
@babel/preset-env 7.13.15 7.29.2
@types/qrcode 1.5.5 1.5.6
@vue/cli-plugin-babel 5.0.8 5.0.9
@vue/cli-plugin-e2e-cypress 5.0.8 5.0.9
@vue/cli-plugin-eslint 5.0.8 5.0.9
@vue/cli-plugin-pwa 5.0.8 5.0.9
@vue/cli-plugin-router 5.0.8 5.0.9
@vue/cli-plugin-typescript 5.0.8 5.0.9
@vue/cli-plugin-unit-mocha 5.0.8 5.0.9
@vue/cli-plugin-vuex 5.0.8 5.0.9
@vue/cli-service 5.0.8 5.0.9
@vue/test-utils 2.4.5 2.4.6
axe-core 4.9.1 4.11.2
chai-match-pattern 1.2.0 1.3.0
cypress-axe 1.6.0 1.7.0
cypress-localstorage-commands 2.2.7 2.3.0
eslint-plugin-import 2.29.1 2.32.0
moment-timezone 0.5.45 0.6.1
sharp 0.33.3 0.34.5
style-resources-loader 1.4.1 1.5.0

Updates @statsig/js-client from 3.25.3 to 3.32.3

Release notes

Sourced from @​statsig/js-client's releases.

3.32.3 - Flush web vital events more often

Fixes

  • Flush web vital events more often

Included In This Release

  • 608e02967f095721367379867886fcf4045c8341 kat-statsig
    • chore: bump size (#836)
  • 8d7e2acc8af191523f9ff88e762c14288b2bf47e kat-statsig
    • fix: flush web vitals more often (#834)

Full Changelog: statsig-io/js-client-monorepo@3.32.2...3.32.3

3.32.2 - Adding debug metadata for Event Logger

New Features

Improvements

  • Added stricter server guard to ensure events don't get flushed in server environments
  • Fixed status code and reason fields in dropped events metadata

Fixes

Included In This Release

  • d90b9c25ebe123149471984a0356e8517f09515f araf-statsig
    • fix: reason field for dropped events (#827)
  • 3eb07e3196932d65d7626be3bd6d6637fa06c425 araf-statsig
    • fix: add stricter server guard (#826)
  • 50fea3784ef3ed981c684e57b760439c55d0a820 araf-statsig
    • fix: preserve network req status code (#823)

Full Changelog: statsig-io/js-client-monorepo@3.32.1...3.32.2

3.32.1 - Session replay gcir

New Features

  • session replay support for gcir

Improvements

  • version bumps for security vulnerabilities

Fixes

... (truncated)

Commits
  • 0d60f47 [release] 3.32.3 - Flush web vital events more often (#837)
  • 8379f54 [release] 3.32.2 - Adding debug metadata for Event Logger (#828)
  • 5ef702a [release] 3.32.1 - Session replay gcir (#820)
  • d3c719d [release] 3.32.0 - EventLogger Redesign (#805)
  • cc7715d [release] 3.31.2 - Session related performance improvement (#778)
  • 9d17e97 [release] 3.31.1 - generic serverless client, performance upgrades, and bug f...
  • 7f82b75 Handle disableStableID in bootstrap comparison (#770)
  • cdf69c4 chore: statsig context handle (#769)
  • 853da10 fix: add logging for empty/null id_type (#747)
  • db591b7 fix: adding logging for eval reason loading or uninitialized (#748)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by araf-statsig, a new releaser for @​statsig/js-client since your current version.


Updates @statsig/session-replay from 3.25.3 to 3.32.3

Release notes

Sourced from @​statsig/session-replay's releases.

3.32.3 - Flush web vital events more often

Fixes

  • Flush web vital events more often

Included In This Release

  • 608e02967f095721367379867886fcf4045c8341 kat-statsig
    • chore: bump size (#836)
  • 8d7e2acc8af191523f9ff88e762c14288b2bf47e kat-statsig
    • fix: flush web vitals more often (#834)

Full Changelog: statsig-io/js-client-monorepo@3.32.2...3.32.3

3.32.2 - Adding debug metadata for Event Logger

New Features

Improvements

  • Added stricter server guard to ensure events don't get flushed in server environments
  • Fixed status code and reason fields in dropped events metadata

Fixes

Included In This Release

  • d90b9c25ebe123149471984a0356e8517f09515f araf-statsig
    • fix: reason field for dropped events (#827)
  • 3eb07e3196932d65d7626be3bd6d6637fa06c425 araf-statsig
    • fix: add stricter server guard (#826)
  • 50fea3784ef3ed981c684e57b760439c55d0a820 araf-statsig
    • fix: preserve network req status code (#823)

Full Changelog: statsig-io/js-client-monorepo@3.32.1...3.32.2

3.32.1 - Session replay gcir

New Features

  • session replay support for gcir

Improvements

  • version bumps for security vulnerabilities

Fixes

... (truncated)

Commits
  • 0d60f47 [release] 3.32.3 - Flush web vital events more often (#837)
  • 8379f54 [release] 3.32.2 - Adding debug metadata for Event Logger (#828)
  • 5ef702a [release] 3.32.1 - Session replay gcir (#820)
  • d3c719d [release] 3.32.0 - EventLogger Redesign (#805)
  • cc7715d [release] 3.31.2 - Session related performance improvement (#778)
  • 8722411 chore: improve perf on session id (#776)
  • 9d17e97 [release] 3.31.1 - generic serverless client, performance upgrades, and bug f...
  • b539d95 chore: if session_recording_privacy_settings is empty use user passed in opti...
  • 4cb42fa chore: look at closest selector for sr privacy options (#772)
  • cdf69c4 chore: statsig context handle (#769)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by araf-statsig, a new releaser for @​statsig/session-replay since your current version.


Updates @statsig/web-analytics from 3.25.3 to 3.32.3

Release notes

Sourced from @​statsig/web-analytics's releases.

3.32.3 - Flush web vital events more often

Fixes

  • Flush web vital events more often

Included In This Release

  • 608e02967f095721367379867886fcf4045c8341 kat-statsig
    • chore: bump size (#836)
  • 8d7e2acc8af191523f9ff88e762c14288b2bf47e kat-statsig
    • fix: flush web vitals more often (#834)

Full Changelog: statsig-io/js-client-monorepo@3.32.2...3.32.3

3.32.2 - Adding debug metadata for Event Logger

New Features

Improvements

  • Added stricter server guard to ensure events don't get flushed in server environments
  • Fixed status code and reason fields in dropped events metadata

Fixes

Included In This Release

  • d90b9c25ebe123149471984a0356e8517f09515f araf-statsig
    • fix: reason field for dropped events (#827)
  • 3eb07e3196932d65d7626be3bd6d6637fa06c425 araf-statsig
    • fix: add stricter server guard (#826)
  • 50fea3784ef3ed981c684e57b760439c55d0a820 araf-statsig
    • fix: preserve network req status code (#823)

Full Changelog: statsig-io/js-client-monorepo@3.32.1...3.32.2

3.32.1 - Session replay gcir

New Features

  • session replay support for gcir

Improvements

  • version bumps for security vulnerabilities

Fixes

... (truncated)

Commits
  • 0d60f47 [release] 3.32.3 - Flush web vital events more often (#837)
  • 8d7e2ac fix: flush web vitals more often (#834)
  • 8379f54 [release] 3.32.2 - Adding debug metadata for Event Logger (#828)
  • 5ef702a [release] 3.32.1 - Session replay gcir (#820)
  • d3c719d [release] 3.32.0 - EventLogger Redesign (#805)
  • cc7715d [release] 3.31.2 - Session related performance improvement (#778)
  • 8722411 chore: improve perf on session id (#776)
  • 9d17e97 [release] 3.31.1 - generic serverless client, performance upgrades, and bug f...
  • cdf69c4 chore: statsig context handle (#769)
  • 8b68b26 [release] 3.31.0 - Performance Improvments (#760)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by araf-statsig, a new releaser for @​statsig/web-analytics since your current version.


Updates @vue/compat from 3.4.21 to 3.5.31

Release notes

Sourced from @​vue/compat's releases.

v3.5.31

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.30

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.29

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.28

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.27

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.26

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.25

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.24

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.23

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.22

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.21

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.20

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.19

For stable releases, please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from @​vue/compat's changelog.

3.5.31 (2026-03-25)

Bug Fixes

  • compiler-sfc: allow Node.js subpath imports patterns in asset urls (#13045) (95c3356), closes #9919
  • compiler-sfc: support template literal as defineModel name (#14622) (bd7eef0), closes #14621
  • reactivity: normalize toRef property keys before dep lookup + improve types (#14625) (1bb28d0), closes #12427 #12431
  • runtime-core: invalidate detached v-for memo vnodes after unmount (#14624) (560def4), closes #12708 #12710
  • runtime-core: preserve nullish event handlers in mergeProps (#14550) (5725222)
  • runtime-core: prevent merging model listener when value is null or undefined (#14629) (b39e032)
  • runtime-dom: defer teleport mount/update until suspense resolves (#8619) (88ed045), closes #8603
  • runtime-dom: handle activeElement check in Shadow DOM for v-model (#14196) (959ded2)
  • server-renderer: cleanup component effect scopes after SSR render (#14548) (862f11e)
  • suspense: avoid unmount activeBranch twice if wrapped in transition (#9392) (908c6ad), closes #7966
  • suspense: update suspense vnode's el during branch self-update (#12922) (a2c1700), closes #12920
  • transition: skip enter guard while hmr updating (#14611) (be0a2f1), closes #14608
  • types: prevent shallowReactive marker from leaking into value unions (#14493) (3b561db), closes #14490

3.5.30 (2026-03-09)

Bug Fixes

  • compat: add entities to @​vue/compat deps to fix CJS edge cases (#12514) (e725a67), closes #10609
  • custom-element: ensure child component styles are injected in correct order before parent styles (#13374) (1398bf8), closes #13029
  • custom-element: properly locate parent when slotted in shadow dom (#12480) (f06c81a), closes #12479
  • custom-element: should properly patch as props for vue custom elements (#12409) (740983e), closes #12408
  • reactivity: avoid duplicate raw/proxy entries in Set.add (#14545) (d943612)
  • reactivity: fix reduce on reactive arrays to preserve reactivity (#12737) (16ef165), closes #12735
  • reactivity: handle Set with initial reactive values edge case (#12393) (5dc27ca), closes #8647
  • runtime-core: warn about negative number in v-for (#12308) (9438cc5)
  • ssr: prevent watch from firing after async setup await (#14547) (6cda71d), closes #14546
  • types: make generics with runtime props in defineComponent work (fix #11374) (#13119) (cea3cf7), closes #13763
  • types: narrow useAttrs class/style typing for TSX (#14492) (bbb8977), closes #14489

3.5.29 (2026-02-24)

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​vue/compat since your current version.


Updates axios from 1.13.5 to 1.14.0

Release notes

Sourced from axios's releases.

v1.14.0

This release focuses on compatibility fixes, adapter stability improvements, and test/tooling modernisation.

⚠️ Important Changes

  • Breaking Changes: None identified in this release.
  • Action Required: If you rely on env-based proxy behaviour or CJS resolution edge-cases, validate your integration after upgrade (notably proxy-from-env v2 alignment and main entry compatibility fix).

🚀 New Features

  • Runtime Features: No new end-user features were introduced in this release.
  • Test Coverage Expansion: Added broader smoke/module test coverage for CJS and ESM package usage. (#7510)

🐛 Bug Fixes

  • Headers: Trim trailing CRLF in normalised header values. (#7456)
  • HTTP/2: Close detached HTTP/2 sessions on timeout to avoid lingering sessions. (#7457)
  • Fetch Adapter: Cancel ReadableStream created during request-stream capability probing to prevent async resource leaks. (#7515)
  • Proxy Handling: Fixed env proxy behavior with proxy-from-env v2 usage. (#7499)
  • CommonJS Compatibility: Fixed package main entry regression affecting CJS consumers. (#7532)

🔧 Maintenance & Chores

  • Security/Dependencies: Updated formidable and refreshed package set to newer versions. (#7533, #10556)
  • Tooling: Continued migration to Vitest and modernised CI/test harnesses. (#7484, #7489, #7498)
  • Build/Lint Stack: Rollup, ESLint, TypeScript, and related dev-dependency updates. (#7508, #7509, #7522)
  • Documentation: Clarified JSON parsing and adapter-related docs/comments. (#7398, #7460, #7478)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve Axios:

Full Changelog: v1.13.6...v1.14.0

v1.13.6

This release focuses on platform compatibility, error handling improvements, and code quality maintenance.

⚠️ Important Changes

  • Breaking Changes: None identified in this release.
  • Action Required: Users targeting React Native should verify their integration, particularly if relying on specific Blob or FormData behaviours, as improvements have been made to support these objects.

🚀 New Features

  • React Native Blob Support: Axios now includes support for React Native Blob objects. Thanks to @​moh3n9595 for the initial implementation. (#5764)
  • Code Quality: Implemented prettier across the codebase and resolved associated formatting issues. (#7385)

🐛 Bug Fixes

  • Environment Compatibility:
    • Fixed module exports for React Native and Browserify environments. (#7386)

... (truncated)

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates caniuse-lite from 1.0.30001709 to 1.0.30001782

Commits
  • f455430 Update caniuse-db 1.0.30001782
  • 311d8db Update caniuse-db 1.0.30001781
  • da39da8 Update caniuse-db 1.0.30001780
  • 984281a Update caniuse-db 1.0.30001779
  • 1386a01 Update caniuse-db 1.0.30001778
  • 825f178 Update caniuse-db 1.0.30001777
  • 40dd4ee Update caniuse-db 1.0.30001776
  • 575206f Update caniuse-db 1.0.30001775
  • 69eb4c5 Update caniuse-db 1.0.30001774
  • 7d2a807 Update caniuse-db 1.0.30001772
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for caniuse-lite since your current version.


Updates core-js from 3.36.1 to 3.49.0

Changelog

Sourced from core-js's changelog.

3.49.0 - 2026.03.16

  • Changes v3.48.0...v3.49.0 (373 commits)
  • Iterator.range updated following the actual spec version
    • Throw a RangeError on NaN start / end / step
    • Allow null as optionOrStep
  • Improved accuracy of Math.{ asinh, atanh } polyfills with big and small values
  • Improved accuracy of Number.prototype.toExponential polyfills with big and small values
  • Improved performance of atob, btoa, Uint8Array.fromHex, Uint8Array.prototype.setFromHex, and Uint8Array.prototype.toHex, #1503, #1464, #1510, thanks @​johnzhou721
  • Minor performance optimization polyfills of methods from Map upsert proposal
  • Polyfills of methods from Map upsert proposal from the pure version made generic to make it work with polyfilled and native collections
  • Wrap Symbol.for in Symbol.prototype.description polyfill for correct handling of empty string descriptions
  • Fixed a modern Safari bug in Array.prototype.includes with sparse arrays and fromIndex
  • Fixed one more case (Iterator.prototype.take) of a V8 ~ Chromium < 126 bug
  • Forced replacement of Iterator.{ concat, zip, zipKeyed } in the pure version for ensuring proper wrapped Iterator instances as the result
  • Fixed proxying .return() on exhausted iterator from some methods of iterator helpers polyfill to the underlying iterator
  • Fixed double .return() calling in case of throwing error in this method in the internal iterate helper that affected some polyfills
  • Fixed closing iterator on IteratorValue errors in the internal iterate helper that affected some polyfills
  • Fixed iterator closing in Array.from polyfill on failure to create array property
  • Fixed order of arguments validation in Array.fromAsync polyfill
  • Fixed a lack of counter validation on MAX_SAFE_INTEGER in Array.fromAsync polyfill
  • Fixed order of arguments validation in Array.prototype.flat polyfill
  • Fixed handling strings as iterables in Iterator.{ zip, zipKeyed } polyfills
  • Fixed some cases of iterators closing in Iterator.{ zip, zipKeyed } polyfills
  • Fixed validation of iterators .next() results an objects in Iterator.{ zip, zipKeyed } polyfills
  • Fixed a lack of early error in Iterator.concat polyfill on primitive as an iterator
  • Fixed buffer mutation exposure in Iterator.prototype.windows polyfill
  • Fixed iterator closing in Set.prototype.{ isDisjointFrom, isSupersetOf } polyfill
  • Fixed (updated following the final spec) one more case Set.prototype.difference polyfill with updating this
  • Fixed DataView.prototype.setFloat16 polyfill in (0, 1) range
  • Fixed order of arguments validation in String.prototype.{ padStart, padEnd } polyfills
  • Fixed order of arguments validation in String.prototype.{ startsWith, endsWith } polyfills
  • Fixed some cases of Infinity handling in String.prototype.substr polyfill
  • Fixed String.prototype.repeat polyfill with a counter exceeding 2 ** 32
  • Fixed some cases of chars case in escape polyfill
  • Fixed named backreferences in RegExp NCG polyfill
  • Fixed some cases of RegExp NCG polyfill in combination with other types of groups
  • Fixed some cases of RegExp NCG polyfill in combination with dotAll
  • Fixed String.prototype.replace with sticky polyfill, #810, #1514
  • Fixed RegExp sticky polyfill with alternation
  • Fixed handling of some line terminators in case of multiline + sticky mode in RegExp polyfill
  • Fixed .input slicing on result object with RegExp sticky mode polyfill
  • Fixed handling of empty groups with global and unicode modes in polyfills
  • Fixed URLSearchParam.prototype.delete polyfill with duplicate key-value pairs
  • Fixed possible removal of unnecessary entries in URLSearchParam.prototype.delete polyfill with second argument
  • Fixed an error in some cases of non-special URLs without a path in the URL polyfill
  • Fixed some percent encode cases / character sets in the URL polyfill
  • Fixed parsing of non-IPv4 hosts ends in a number in the URL polyfill
  • Fixed some cases of '' and null host handling in the URL polyfill
  • Fixed host parsing with hostname = host:port in the URL polyfill
  • Fixed host inheritance in some cases of file scheme in the URL polyfill

... (truncated)

Commits
  • 80adfc4 v3.49.0
  • 0ad3e00 fix a modern Safari bug in Array.prototype.includes with sparse arrays and ...
  • 853bfa4 update some links
  • b4d723f fix a lack of counter validation on MAX_SAFE_INTEGER in Array.fromAsync p...
  • e276676 fix parsing of non-IPv4 hosts ends in a number in the URL polyfill
  • dd1cfba fix order of arguments validation in String.prototype.{ padStart, padEnd } ...
  • b952c5f add an extra protection to configurator
  • e490caf Fix for #810 (#1514)
  • 10b4e86 drop an unneeded comment
  • 28cf2e9 feat: Improve performance of Uint8Array Hex functions (#1510)
  • Additional commits viewable in compare view

Updates country-codes-flags-phone-codes from 1.0.4 to 1.1.1

Release notes

Sourced from country-codes-flags-phone-codes's releases.

1.1.1

What's Changed

New Contributors

Full Changelog: mehmetcanfarsak/country-codes-flags-phone-codes@1.0.4...1.1.0

Commits
  • 6fe175a Merge pull request #14 from mehmetcanfarsak/mehmetcanfarsak-patch-1
  • cdb7f8e Typo fix in version field of package.json
  • dad201a Merge pull request #13 from singhanubhavme/feature/input-normalization-tests-...
  • bfdf5d1 Normalized inputs, added tests, and added comments on code
  • See full diff in compare view

Updates joi-password from 4.2.0 to 4.3.0

Commits

Updates libphonenumber-js from 1.11.1 to 1.12.41

Changelog

Sourced from libphonenumber-js's changelog.

1.12.41 / 28.3.2026

  • Updated metadata to version 9.0.27:
    • Updated phone metadata for region code(s): BF, BL, CM, GF, GH, GP, GU, KE, MF, MQ, MY, SX, TD, TJ, US
    • New geocoding data for country calling code(s): 1738 (en)
    • New carrier data for country calling code(s): 1721 (en)
    • Updated carrier data for country calling code(s): 60 (en), 599 (en), 992 (en)
    • Updated / refreshed time zone meta data.

1.12.40 / 13.3.2026

  • Updated metadata to version 9.0.26:
    • Updated phone metadata for region code(s): BL, GF, GP, GY, KY, MF, PL, PM, VU
    • Updated short number metadata for region code(s): BL, GF, GP, GY, MF, PM
    • Updated geocoding data for country calling code(s): 48 (en)
    • Updated carrier data for country calling code(s): 33 (en), 44 (en), 229 (en), 591 (en), 1345 (en)

1.12.39 / 9.3.2026

  • Updated metadata to version 9.0.25:
    • Updated alternate formatting data for country calling code(s): 90
    • Updated phone metadata for region code(s): 882, HK, MY, PA, SL, TG, TR
    • Updated short number metadata for region code(s): KR
    • New geocoding data for country calling code(s): 1728 (en)
    • Updated carrier data for country calling code(s): 33 (en), 44 (en), 55 (en), 60 (en), 81 (en), 90 (en), 228 (en), 232 (en), 420 (en), 852 (en, zh)
    • Updated / refreshed time zone meta data.

1.12.38 / 26.2.2026

  • Updated metadata to version 9.0.25:
    • Updated alternate formatting data for country calling code(s): 90
    • Updated phone metadata for region code(s): 882, HK, MY, PA, SL, TG, TR
    • Updated short number metadata for region code(s): KR
    • New geocoding data for country calling code(s): 1728 (en)
    • Updated carrier data for country calling code(s): 33 (en), 44 (en), 55 (en), 60 (en), 81 (en), 90 (en), 228 (en), 232 (en), 420 (en), 852 (en, zh)
    • Updated / refreshed time zone meta data.

1.12.36 / 30.1.2026

... (truncated)

Commits

Updates object.fromentries from 2.0.4 to 2.0.8

Changelog

Sourced from object.fromentries's changelog.

v2.0...

Description has been truncated

…ith 34 updates

Bumps the frontend-minor-patch group with 33 updates in the /webroot directory:

| Package | From | To |
| --- | --- | --- |
| [@statsig/js-client](https://github.com/statsig-io/js-client-monorepo/tree/HEAD/packages/js-client) | `3.25.3` | `3.32.3` |
| [@statsig/session-replay](https://github.com/statsig-io/js-client-monorepo/tree/HEAD/packages/session-replay) | `3.25.3` | `3.32.3` |
| [@statsig/web-analytics](https://github.com/statsig-io/js-client-monorepo/tree/HEAD/packages/web-analytics) | `3.25.3` | `3.32.3` |
| [@vue/compat](https://github.com/vuejs/core) | `3.4.21` | `3.5.31` |
| [axios](https://github.com/axios/axios) | `1.13.5` | `1.14.0` |
| [caniuse-lite](https://github.com/browserslist/caniuse-lite) | `1.0.30001709` | `1.0.30001782` |
| [core-js](https://github.com/zloirock/core-js/tree/HEAD/packages/core-js) | `3.36.1` | `3.49.0` |
| [country-codes-flags-phone-codes](https://github.com/mehmetcanfarsak/country-codes-flags-phone-codes) | `1.0.4` | `1.1.1` |
| [joi-password](https://github.com/Heaty566/joi-password) | `4.2.0` | `4.3.0` |
| [libphonenumber-js](https://gitlab.com/catamphetamine/libphonenumber-js) | `1.11.1` | `1.12.41` |
| [object.fromentries](https://github.com/es-shims/Object.fromEntries) | `2.0.4` | `2.0.8` |
| [vue](https://github.com/vuejs/core) | `3.4.21` | `3.5.31` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.24.4` | `7.29.0` |
| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.13.15` | `7.29.2` |
| [@types/qrcode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/qrcode) | `1.5.5` | `1.5.6` |
| [@vue/cli-plugin-babel](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-babel) | `5.0.8` | `5.0.9` |
| [@vue/cli-plugin-e2e-cypress](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-e2e-cypress) | `5.0.8` | `5.0.9` |
| [@vue/cli-plugin-eslint](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-eslint) | `5.0.8` | `5.0.9` |
| [@vue/cli-plugin-pwa](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-pwa) | `5.0.8` | `5.0.9` |
| [@vue/cli-plugin-router](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-router) | `5.0.8` | `5.0.9` |
| [@vue/cli-plugin-typescript](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-typescript) | `5.0.8` | `5.0.9` |
| [@vue/cli-plugin-unit-mocha](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-unit-mocha) | `5.0.8` | `5.0.9` |
| [@vue/cli-plugin-vuex](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-vuex) | `5.0.8` | `5.0.9` |
| [@vue/cli-service](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-service) | `5.0.8` | `5.0.9` |
| [@vue/test-utils](https://github.com/vuejs/test-utils) | `2.4.5` | `2.4.6` |
| [axe-core](https://github.com/dequelabs/axe-core) | `4.9.1` | `4.11.2` |
| [chai-match-pattern](https://github.com/mjhm/chai-match-pattern) | `1.2.0` | `1.3.0` |
| [cypress-axe](https://github.com/component-driven/cypress-axe) | `1.6.0` | `1.7.0` |
| [cypress-localstorage-commands](https://github.com/javierbrea/cypress-localstorage-commands) | `2.2.7` | `2.3.0` |
| [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) | `2.29.1` | `2.32.0` |
| [moment-timezone](https://github.com/moment/moment-timezone) | `0.5.45` | `0.6.1` |
| [sharp](https://github.com/lovell/sharp) | `0.33.3` | `0.34.5` |
| [style-resources-loader](https://github.com/yenshih/style-resources-loader) | `1.4.1` | `1.5.0` |



Updates `@statsig/js-client` from 3.25.3 to 3.32.3
- [Release notes](https://github.com/statsig-io/js-client-monorepo/releases)
- [Commits](https://github.com/statsig-io/js-client-monorepo/commits/3.32.3/packages/js-client)

Updates `@statsig/session-replay` from 3.25.3 to 3.32.3
- [Release notes](https://github.com/statsig-io/js-client-monorepo/releases)
- [Commits](https://github.com/statsig-io/js-client-monorepo/commits/3.32.3/packages/session-replay)

Updates `@statsig/web-analytics` from 3.25.3 to 3.32.3
- [Release notes](https://github.com/statsig-io/js-client-monorepo/releases)
- [Commits](https://github.com/statsig-io/js-client-monorepo/commits/3.32.3/packages/web-analytics)

Updates `@vue/compat` from 3.4.21 to 3.5.31
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.4.21...v3.5.31)

Updates `axios` from 1.13.5 to 1.14.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.13.5...v1.14.0)

Updates `caniuse-lite` from 1.0.30001709 to 1.0.30001782
- [Commits](browserslist/caniuse-lite@1.0.30001709...1.0.30001782)

Updates `core-js` from 3.36.1 to 3.49.0
- [Release notes](https://github.com/zloirock/core-js/releases)
- [Changelog](https://github.com/zloirock/core-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zloirock/core-js/commits/v3.49.0/packages/core-js)

Updates `country-codes-flags-phone-codes` from 1.0.4 to 1.1.1
- [Release notes](https://github.com/mehmetcanfarsak/country-codes-flags-phone-codes/releases)
- [Commits](mehmetcanfarsak/country-codes-flags-phone-codes@1.0.4...1.1.1)

Updates `joi-password` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/Heaty566/joi-password/releases)
- [Commits](https://github.com/Heaty566/joi-password/commits)

Updates `libphonenumber-js` from 1.11.1 to 1.12.41
- [Changelog](https://gitlab.com/catamphetamine/libphonenumber-js/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/catamphetamine/libphonenumber-js/compare/v1.11.1...v1.12.41)

Updates `object.fromentries` from 2.0.4 to 2.0.8
- [Changelog](https://github.com/es-shims/Object.fromEntries/blob/main/CHANGELOG.md)
- [Commits](es-shims/Object.fromEntries@v2.0.4...v2.0.8)

Updates `vue` from 3.4.21 to 3.5.31
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.4.21...v3.5.31)

Updates `@babel/core` from 7.24.4 to 7.29.0
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.0/packages/babel-core)

Updates `@babel/preset-env` from 7.13.15 to 7.29.2
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.2/packages/babel-preset-env)

Updates `@types/qrcode` from 1.5.5 to 1.5.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/qrcode)

Updates `@vue/cli-plugin-babel` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-plugin-babel)

Updates `@vue/cli-plugin-e2e-cypress` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-plugin-e2e-cypress)

Updates `@vue/cli-plugin-eslint` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-plugin-eslint)

Updates `@vue/cli-plugin-pwa` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-plugin-pwa)

Updates `@vue/cli-plugin-router` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-plugin-router)

Updates `@vue/cli-plugin-typescript` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-plugin-typescript)

Updates `@vue/cli-plugin-unit-mocha` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-plugin-unit-mocha)

Updates `@vue/cli-plugin-vuex` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-plugin-vuex)

Updates `@vue/cli-service` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.9/packages/@vue/cli-service)

Updates `@vue/compiler-sfc` from 3.4.21 to 3.5.31
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vuejs/core/commits/v3.5.31/packages/compiler-sfc)

Updates `@vue/test-utils` from 2.4.5 to 2.4.6
- [Release notes](https://github.com/vuejs/test-utils/releases)
- [Commits](vuejs/test-utils@v2.4.5...v2.4.6)

Updates `axe-core` from 4.9.1 to 4.11.2
- [Release notes](https://github.com/dequelabs/axe-core/releases)
- [Changelog](https://github.com/dequelabs/axe-core/blob/develop/CHANGELOG.md)
- [Commits](dequelabs/axe-core@v4.9.1...v4.11.2)

Updates `chai-match-pattern` from 1.2.0 to 1.3.0
- [Commits](https://github.com/mjhm/chai-match-pattern/commits)

Updates `cypress-axe` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/component-driven/cypress-axe/releases)
- [Commits](component-driven/cypress-axe@v1.6.0...v1.7.0)

Updates `cypress-localstorage-commands` from 2.2.7 to 2.3.0
- [Release notes](https://github.com/javierbrea/cypress-localstorage-commands/releases)
- [Changelog](https://github.com/javierbrea/cypress-localstorage-commands/blob/master/CHANGELOG.md)
- [Commits](javierbrea/cypress-localstorage-commands@v2.2.7...v2.3.0)

Updates `eslint-plugin-import` from 2.29.1 to 2.32.0
- [Release notes](https://github.com/import-js/eslint-plugin-import/releases)
- [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md)
- [Commits](import-js/eslint-plugin-import@v2.29.1...v2.32.0)

Updates `moment-timezone` from 0.5.45 to 0.6.1
- [Release notes](https://github.com/moment/moment-timezone/releases)
- [Changelog](https://github.com/moment/moment-timezone/blob/develop/changelog.md)
- [Commits](moment/moment-timezone@0.5.45...0.6.1)

Updates `sharp` from 0.33.3 to 0.34.5
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.33.3...v0.34.5)

Updates `style-resources-loader` from 1.4.1 to 1.5.0
- [Changelog](https://github.com/yenshih/style-resources-loader/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yenshih/style-resources-loader/commits/v1.5.0)

---
updated-dependencies:
- dependency-name: "@statsig/js-client"
  dependency-version: 3.32.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@statsig/session-replay"
  dependency-version: 3.32.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@statsig/web-analytics"
  dependency-version: 3.32.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/compat"
  dependency-version: 3.5.31
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: axios
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: caniuse-lite
  dependency-version: 1.0.30001782
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: core-js
  dependency-version: 3.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: country-codes-flags-phone-codes
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: joi-password
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: libphonenumber-js
  dependency-version: 1.12.41
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: object.fromentries
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: vue
  dependency-version: 3.5.31
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@babel/core"
  dependency-version: 7.29.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@babel/preset-env"
  dependency-version: 7.29.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@types/qrcode"
  dependency-version: 1.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-plugin-babel"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-plugin-e2e-cypress"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-plugin-eslint"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-plugin-pwa"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-plugin-router"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-plugin-typescript"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-plugin-unit-mocha"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-plugin-vuex"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/cli-service"
  dependency-version: 5.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/compiler-sfc"
  dependency-version: 3.5.31
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: "@vue/test-utils"
  dependency-version: 2.4.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-minor-patch
- dependency-name: axe-core
  dependency-version: 4.11.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: chai-match-pattern
  dependency-version: 1.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: cypress-axe
  dependency-version: 1.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: cypress-localstorage-commands
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: eslint-plugin-import
  dependency-version: 2.32.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: moment-timezone
  dependency-version: 0.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: sharp
  dependency-version: 0.34.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
- dependency-name: style-resources-loader
  dependency-version: 1.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Apr 7, 2026

Labels

The following labels could not be found: frontend. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants