chore(deps): bump the sample-frontend group across 2 directories with 16 updates

[dependabot]

Bumps the sample-frontend group with 9 updates in the /atmosphere.js directory:

Package	From	To
@types/node	26.1.0	26.1.1
@vitest/coverage-v8	4.1.9	4.1.10
eslint	10.6.0	10.7.0
prettier	3.9.4	3.9.6
react	19.2.7	19.2.8
react-dom	19.2.7	19.2.8
svelte	5.56.4	5.56.7
typescript	6.0.3	7.0.2
vue	3.5.39	3.5.40

Bumps the sample-frontend group with 5 updates in the /modules/spring-boot-starter/frontend directory:

Package	From	To
dompurify	3.4.11	3.4.12
marked	18.0.5	18.0.7
@vitejs/plugin-vue	6.0.7	6.0.8
vite	8.1.3	8.1.5
vue-tsc	3.3.6	3.3.8

Updates @types/node from 26.1.0 to 26.1.1

Commits

• See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.9 to 4.1.10

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• See full diff in compare view

Updates @vitest/ui from 4.1.9 to 4.1.10

Release notes

Sourced from @​vitest/ui's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• See full diff in compare view

Updates eslint from 10.6.0 to 10.7.0

Release notes

Sourced from eslint's releases.

v10.7.0

Features

• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)
• 557fde8 feat: support computed Number.parseInt member access in radix rule (#21041) (Pixel)
• 0b4a73b feat: add suggestions to no-compare-neg-zero (#21034) (den$)
• 96cdd42 feat: report invalid signed numeric radix values in radix rule (#21030) (Pixel)

Bug Fixes

• 3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069) (Pixel)
• 0d7d70c fix: insert cause outside wrapping parens in preserve-caught-error (#21062) (Mahin Anowar)
• 75ec753 fix: handle static template literals in eqeqeq rule (#21058) (Pixel)
• b717a22 fix: prevent eqeqeq null option from reporting non-equality operators (#21057) (Pixel)
• e35b05f fix: avoid no-invalid-regexp false positive for shadowed RegExp (#21051) (Pixel)
• a3172b6 fix: avoid no-control-regex false positive for shadowed RegExp (#21050) (Pixel)
• d1f637e fix: parenthesize sequence expression operands in no-implicit-coercion (#21045) (spokodev)
• 8859baf fix: avoid prefer-numeric-literals false positive for shadowed globals (#21047) (한국)
• a9e5961 fix: use-isnan false positive on shadowed NaN/Number (#20958) (sethamus)
• 8a240a7 fix: avoid false positives in radix rule for spread arguments (#21044) (Pixel)

Documentation

• c30d808 docs: Update README (GitHub Actions Bot)
• 5139800 docs: document ESLint migration codemods in v9 and v10 guides (#20980) (Alex Bit)
• 04174cb docs: Update README (GitHub Actions Bot)
• 026e130 docs: update semver policy for bug fixes (#21048) (Milos Djermanovic)
• 9d42fef docs: Update README (GitHub Actions Bot)
• b230159 docs: Update README (GitHub Actions Bot)
• 0129972 docs: correct **/.js glob to **/*.js in config files guide (#21036) (EduardF1)

Chores

• 9489379 chore: update dependency @​eslint/eslintrc to ^3.3.6 (#21076) (renovate[bot])
• 81a4774 chore: updates for v9.39.5 release (Jenkins)
• 9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071) (Francesco Trotta)
• 72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067) (lumir)
• 833ec10 chore: update dependency prettier to v3.9.4 (#21061) (renovate[bot])
• 7ea106d chore: update ecosystem plugins (#21059) (ESLint Bot)
• 8fb550e chore: add prettier update commit to .git-blame-ignore-revs (#21056) (lumir)
• e4e1166 chore: update dependency prettier to v3.9.1 (#21055) (renovate[bot])
• 0493f53 chore: update prettier to v3.9.0 (#21054) (Pixel)
• 1056a99 chore: update dependency prettier to v3.8.5 (#21049) (renovate[bot])
• 4d4155d ci: run ecosystem tests on pull requests (#21027) (sethamus)
• 993539f chore: update dependency @​eslint/json to ^2.0.1 (#21042) (renovate[bot])
• 53f8b69 test: add error locations to no-constant-binary-expression (#21039) (lumir)
• 5ab71d5 refactor: clean up radix rule internals (#21015) (Pixel)
• a80a9a4 chore: update ecosystem plugins (#21035) (ESLint Bot)
• 7c9a029 ci: add Node.js 26 to CI (#20847) (lumir)

Commits

• fabd99b 10.7.0
• 37c5e75 Build: changelog update for 10.7.0
• 9489379 chore: update dependency @​eslint/eslintrc to ^3.3.6 (#21076)
• 81a4774 chore: updates for v9.39.5 release
• 3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069)
• 9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071)
• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032)
• c30d808 docs: Update README
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063)
• 72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067)
• Additional commits viewable in compare view

Updates prettier from 3.9.4 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

• Preserve quotes for methods named new (prettier/prettier#19621 by @​kovsu)
• Support import defer in typescript parser (prettier/prettier#19624, prettier/prettier#19675 by @​fisker)
• Added a new official plugin @prettier/plugin-yuku 🚀 (prettier/prettier#19628, prettier/prettier#19629 by @​fisker)

🔗 Changelog

3.9.5

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

1. Install the plugin:

   yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

• 8f0c950 Release 3.9.6
• e910764 Update changelog
• ec3f1c7 Update typescript-eslint to v8.65.0 (#19675)
• 73d2efc Update Yuku parser to v0.7.0 (#19664)
• dd5e24e Preserve quotes for TSMethodSignature nodes named new (#19621)
• c03ab4e Update dependency eslint-plugin-unicorn to v72 (#19633)
• b74dd53 Update Yuku parser to v0.6.5 (#19654)
• f1b594e Update dependency eslint-plugin-simple-import-sort to v14 (#19655)
• 0d9dfb6 Update Yuku parser to v0.6.4 (#19650)
• 3bbb815 Remove typescript-only directory (#19636)
• Additional commits viewable in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates svelte from 5.56.4 to 5.56.7

Release notes

Sourced from svelte's releases.

svelte@5.56.7

Patch Changes

• chore: provide indent option for print (#18474)

svelte@5.56.6

Patch Changes

• perf: skip unnecessary blocker analysis when compiling components without top-level await (#18548)

• fix: rerun derived that had an abort controller on reconnection (#18551)

svelte@5.56.5

Patch Changes

• chore: drop dead code that make TSGO fail (#18496)

• fix: don't (re)connect deriveds when read inside branch/root effects (#18527)

• fix: skip unnecessary derived effect in earlier batch (#18525)

• fix: avoid declaration tag warning in event handlers (#18500)

• fix: abort deriveds own AbortSignal when it disconnects (#18400)

• fix: ensure $state.eager() is correctly transormed for SSR output (#18530)

• fix: correctly transform declaration tags during SSR (#18492)

• fix: transform computed keys in keyed {#each} destructuring patterns (#18521)

• fix: chain preprocessor sourcemaps with an empty sources[0] instead of dropping them (#18518)

• fix: clear previous_task reference after abort in Tween to prevent memory leak on interrupted tweens (#18541)

• fix: don't treat declaration tags as parts inside each blocks (#18507)

Changelog

Sourced from svelte's changelog.

5.56.7

Patch Changes

• chore: provide indent option for print (#18474)

5.56.6

Patch Changes

• perf: skip unnecessary blocker analysis when compiling components without top-level await (#18548)

• fix: rerun derived that had an abort controller on reconnection (#18551)

5.56.5

Patch Changes

• chore: drop dead code that make TSGO fail (#18496)

• fix: don't (re)connect deriveds when read inside branch/root effects (#18527)

• fix: skip unnecessary derived effect in earlier batch (#18525)

• fix: avoid declaration tag warning in event handlers (#18500)

• fix: abort deriveds own AbortSignal when it disconnects (#18400)

• fix: ensure $state.eager() is correctly transormed for SSR output (#18530)

• fix: correctly transform declaration tags during SSR (#18492)

• fix: transform computed keys in keyed {#each} destructuring patterns (#18521)

• fix: chain preprocessor sourcemaps with an empty sources[0] instead of dropping them (#18518)

• fix: clear previous_task reference after abort in Tween to prevent memory leak on interrupted tweens (#18541)

• fix: don't treat declaration tags as parts inside each blocks (#18507)

Commits

• b29d700 Version Packages (#18560)
• b791cac chore: provide indent option for print (#18474)
• 4a6a85b Version Packages (#18552)
• d0dbe1a perf: skip quadratic blocker analysis when no top-level await (#18548)
• 22e0adb fix: rerun derived that had an abort controller on reconnection (#18551)
• 602a873 Version Packages (#18497)
• a4fd67e fix: $state.eager() is sometimes incorrect in SSR (#18530)
• 199ffeb fix: clear previous_task reference after abort in Tween (#18541)
• edeef1f chore: add some failing tests (#18528)
• a91b068 fix: abort deriveds own AbortSignal when it disconnects (#18400)
• Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vitest from 4.1.9 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
• See full diff in compare view

Updates vue from 3.5.39 to 3.5.40

Release notes

Sourced from vue's releases.

v3.5.40

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.40 (2026-07-16)

Bug Fixes

• compiler-core: avoid leaking slot branch keys (#15051) (20c9d26), closes #15048
• hydration: pass namespace when patching dynamic props (#15082) (e0d2723), closes #15081 #15050
• reactivity: handle effect removal during scope stop (#15084) (378f978), closes #15083
• runtime-core: skip lazy hydration for detached roots (#15092) (97f3525), closes #15091
• runtime-core: unwind dangling blocks when slot content throws (#15071) (ddc132d), closes #15070
• runtime-dom: respect current select model type (#15010) (eb89e93), closes #15009
• server-renderer: handle errors in optimized component renders (#12601) (474907c), closes #12575
• server-renderer: remove package dependency cycle (#15063) (4d35eca)
• shared: prevent SSR comment escaping from creating closing delimiters (#15045) (bd962bb)
• types: don't constrain component $el type to Element (#15040) (164460a)

Commits

• fa2885d release: v3.5.40
• 20c9d26 fix(compiler-core): avoid leaking slot branch keys (#15051)
• 7da6334 Revert "fix(runtime-core): pause tracking when invoking function refs" (#15094)
• 90aecb1 chore(deps): update all non-major dependencies (#15026)
• 97f3525 fix(runtime-core): skip lazy hydration for detached roots (#15092)
• fe1c0f8 chore(deps): update test (#15025)
• e41c45a chore(deps): update dependency conventional-changelog to v8 (#15078)
• 3eb66a9 chore(deps): update actions/cache action to v6 (#15076)
• 40178dd chore(deps): update lint (#15075)
• 7f122b9 chore(deps): update dependency conventional-changelog-angular to v9 (#15079)
• Additional commits viewable in compare view

Updates dompurify from 3.4.11 to 3.4.12

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.12

• Fixed an issue where a hook would not get called for custom elements, thanks @​Rikuxx0
• Hardened the handling of hooks removing elements, @​mkrause-bee360
• Added support for a few new SVG attributes, thanks @​cbn-falias & @​Develop-KIM
• Hardened the handling of declarative partial updates
• Updated the documentation is several spots, README, wiki, etc.
• Bumped several dependencies where possible

Commits

• a9ca1e5 release: 3.4.12 (#1537)
• See full diff in compare view

Updates marked from 18.0.5 to 18.0.7

Release notes

Sourced from marked's releases.

v18.0.7

18.0.7 (2026-07-21)

Bug Fixes

• Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexes (#4014) (f945fc5), closes #3991
• Avoid O(n^2) masked source rebuild in inline tokenizer (#4017) (9154f8f)
• keep empty list after blockquote as a sibling block (#4004) (3f144a0)
• preserve code spans adjacent to tildes (#4012) (0de7188)
• Recognize setext headings whose first line starts with # (#4015) (f056437), closes #1
• treat a line of only tabs as a blank line between paragraphs (#4007) (bc2f121)

v18.0.6

18.0.6 (2026-07-09)

Bug Fixes

• Avoid O(n^2) backtracking in inline link href regex (#4013) (a009808)
• Fix ordered lists after blockquotes (#4003) (33928d0)
• keep trailing text on HTML block close line for PI, declarations, and CDATA (#3991) (bbb84c8)

Commits

• a8971a1 chore(release): 18.0.7 [skip ci]
• d899c2e chore(deps): bump actions/setup-node from 6 to 7 (#4025)
• 7fbf82e chore(deps-dev): bump semantic-release from 25.0.7 to 25.0.8 (#4026)
• 738edf2 chore(deps-dev): bump brace-expansion from 5.0.2 to 5.0.6 (#4027)
• 9154f8f fix: Avoid O(n^2) masked source rebuild in inline tokenizer (#4017)
• f945fc5 fix: Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexe...
• 3f144a0 fix: keep empty list after blockquote as a sibling block (#4004)
• 0de7188 fix: preserve code spans adjacent to tildes (#4012)
• f056437 fix: Recognize setext headings whose first line starts with # (#4015)
• 12bfa94 chore(deps-dev): bump semantic-release from 25.0.5 to 25.0.7 (#4020)
• Additional commits viewable in compare view

Updates @vitejs/plugin-vue from 6.0.7 to 6.0.8

Release notes

Sourced from @​vitejs/plugin-vue's releases.

plugin-vue@6.0.8

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​vitejs/plugin-vue's changelog.

6.0.8 (2026-07-14)

Features

• plugin-vue: add forced vapor mode option (#766) (d59c3c0)

Bug Fixes

• deps: update all non-major dependencies (#781) (d369e5a)

Commits

• d8ff7d0 release: plugin-vue@6.0.8
• d59c3c0 feat(plugin-vue): add forced vapor mode option (#766)
• d369e5a fix(deps): update all non-major dependencies (#781)
• See full diff in compare view

Updates vite from 8.1.3 to 8.1.5

Release notes

Sourced from vite's releases.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.5 (2026-07-16)

Bug Fixes

• bundled-dev: avoid duplicated buildEnd (#22931) (8100320)
• client: overlay error message format align rolldown (#22869) (5a72b87)
• deps: update all non-major dependencies (#22921) (fef682d)
• deps: update rolldown-related dependencies (#22922) (3c345e4)
• module-runner: don't crash stack-trace source mapping when globalThis.Buffer is absent (#22945) (f8b38e3)
• optimizer: respect importer module format for dynamic import interop with CJS deps (#22951) (6c08c39)
• ssr: scope switch-case declarations to the switch, not the function (#22893) (b59a73f)

Documentation

• build: fix incorrect @default for build.cssMinify (#22948) (c88c236)
• build: fix incorrect @default for build.lib.formats (#22911) (369ed60)

Tests

• avoid scanner scanning all files under __tests__ (#22912) (c961cae)

8.1.4 (2026-07-09)

Features

• legacy: prefer oxc as minifier (fix #21973) (#22468) (ab5dafa)

Bug Fixes

• build: add workaround for building on stackblitz (#22840) (575c32c)
• build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)
• deps: update all non-major dependencies (#22865) (d4295a9)
• deps: update rolldown-related dependencies (#22866) (7cf07e4)
• html: avoid backtracking in import-only check (#22848) (b5868c0)
• optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)
• ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)
• strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

• fix incorrect @default for server.cors (#22859) (70435b2)

Miscellaneous Chores

• deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

Code Refactoring

• eliminate ineffectiveDynamicImport warn (#22876) (ea22fb3)

Tests

... (truncated)

Commits

• 5e7fe12 release: v8.1.5
• 6c08c39 fix(optimizer): respect importer module format for dynamic import interop wit...
• 5a72b87 fix(client): overlay error message format align rolldown (#22869)
• f8b38e3 fix(module-runner): don't crash stack-trace source mapping when globalThis.Bu...
• 8100320 fix(bundled-dev): avoid duplicated buildEnd (#22931)
• c88c236 docs(build): fix incorrect @default for build.cssMinify (#22948)
• b59a73f fix(ssr): scope switch-case declarations to the switch, not the function (#22...
• fef682d fix(deps): update all non-major dependencies (#22921)
• 3c345e4 fix(deps): update rolldown-related dependencies (#22922)
• 369ed60 docs(build): fix incorrect @default for build.lib.formats (#22911)
• Additional commits viewable in compare view

Updates vue-tsc from 3.3.6 to 3.3.8

Release notes

Sourced from vue-tsc's releases.

v3.3.8

language-core

• feat: support vapor directives (#6126) - Thanks to @​liangmiQwQ!

workspace

• chore: upgrade to TypeScript 7 and support @typescript/typescript6 (#6123) - Thanks to @​WaldemarEnns!

Our Sponsors ❤️

... (truncated)

Changelog

Sourced from vue-tsc's changelog.

3.3.8 (2026-07-22)

language-core

• feat: support vapor directives (#6126) - Thanks to @​liangmiQwQ!

workspace

• chore: upgrade to TypeScript 7 and support @typescript/typescript6 (#6123) - Thanks to @​WaldemarEnns!

3.3.7 (2026-07-08)

language-core

• fix: wrap single expression event handlers to avoid ASI after return (#6115) - Thanks to @​KazariEX!

typescript-plugin

• fix: filter const globals from template completions

Commits

• 876b027 v3.3.8 (