Update all patch dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@vitejs/plugin-vue (source)	6.0.5 → 6.0.8
alpinejs (source)	3.15.9 → 3.15.12
laravel/breeze	2.4.1 → 2.4.2
laravel/tinker	3.0.0 → 3.0.2
nunomaduro/collision	8.9.1 → 8.9.5
phpstan/phpstan-phpunit	2.0.16 → 2.0.18
postcss (source)	8.5.8 → 8.5.26
sweetalert2 (source)	11.26.24 → 11.26.25
vite (source)	7.3.1 → 7.3.6
workbox-precaching (source)	7.4.0 → 7.4.1
workbox-routing (source)	7.4.0 → 7.4.1
workbox-window (source)	7.4.0 → 7.4.1

---

Release Notes

vitejs/vite-plugin-vue (@​vitejs/plugin-vue)

v6.0.8

Features

• plugin-vue: add forced vapor mode option (#​766) (d59c3c0)

Bug Fixes

• deps: update all non-major dependencies (#​781) (d369e5a)

v6.0.7

Features

• use carets for @rolldown/pluginutils version (#​776) (941b651)

Bug Fixes

• deps: update all non-major dependencies (#​762) (9e825b8)
• deps: update all non-major dependencies (#​774) (77dc8bc)

v6.0.6

Features

• plugin-vue: propagate multiRoot for template-only vapor components (#​745) (9e07ae9)

Bug Fixes

• deps: update all non-major dependencies (#​738) (050c996)

Miscellaneous Chores

• deps: update dependency rollup to ^4.59.0 (#​749) (a0e1ef8)
• remove unused deps (#​760) (6d834d8)

alpinejs/alpine (alpinejs)

v3.15.12

Compare Source

What's Changed

• Add .fixed positioning modifier to x-anchor by @​nicolagianelli in #​4773
• fix(csp): support MemberExpression assignments in evaluator by @​dasm in #​4807
• Fix x-for crashing on null-prototype objects like Object.groupBy() results by @​joshhanley in #​4825
• Fix && and || not short-circuiting in CSP evaluator by @​joshhanley in #​4823
• Fix x-sort crash when container has a <template> with no .content by @​joshhanley in #​4819
• Add minified ESM build output for each package by @​joshhanley in #​4820
• Fix x-id evaluation order so $id resolves consistently inside x-data by @​joshhanley in #​4821
• Fix @teleport leaking detached nodes on every Livewire render by @​joshhanley in #​4822

New Contributors

• @​dasm made their first contribution in #​4807

Full Changelog: alpinejs/alpine@v3.15.11...v3.15.12

v3.15.11

Compare Source

What's Changed

• fix(csp): skip sharedStorage when enumerating globalThis properties by @​PierreBultez in #​4787
• Fix x-trap.noscroll layout shift conflict with scrollbar-gutter by @​dotfrag in #​4512
• Add support for [x-sort:handle] attributes defined in template tags by @​SimoTod in #​4483
• Add x-anchor.noflip modifier by @​calebporzio in #​4791
• Warn when x-for template has multiple root elements by @​calebporzio in #​4752
• Fix $refs unavailable during morph (v3.15.9 regression) by @​calebporzio in #​4793

New Contributors

• @​PierreBultez made their first contribution in #​4787
• @​dotfrag made their first contribution in #​4512

Full Changelog: alpinejs/alpine@v3.15.10...v3.15.11

v3.15.10

Compare Source

Fixed

• Fix x-anchor crash during wire:navigate cleanup #​4790

laravel/breeze (laravel/breeze)

v2.4.2

Compare Source

• Fix: Remove bootstrap.js import for Laravel 13+ by @​DevKemal in #​486

laravel/tinker (laravel/tinker)

v3.0.2

Compare Source

Full Changelog: laravel/tinker@v3.0.0...v3.0.2

v3.0.1

Compare Source

nunomaduro/collision (nunomaduro/collision)

v8.9.5

Compare Source

v8.9.4

Compare Source

v8.9.3

Compare Source

v8.9.2

Compare Source

phpstan/phpstan-phpunit (phpstan/phpstan-phpunit)

v2.0.18

Compare Source

• f5dc20f - Fix #[RequiresPhpunit] version requirement being evaluated against PHP version (#​313)
• 1e573d3 - AttributeVersionRequirementHelper: add defaults to bool parameters (#​312)

v2.0.17

Compare Source

• c2f9775 - Update actions/cache action to v6 (#​311)
• 933f682 - Update actions/cache action to v5.1.0 (#​310)
• 8ec191f - Check #[RequiresPhpunit] in the same way we check #[RequiresPhp] (#​308)
• d138088 - Implement ClassAttributeRequiresPhpVersionRule (#​305)
• caada62 - Update github-actions to v7 (#​307)
• 611a216 - Update github-actions to v3.0.1 (#​306)
• 2312495 - Extract AttributeVersionRequirementHelper (#​304)
• 952d0ee - Warn about incomplete versions in #[RequiresPhp] (#​303)
• bf910b5 - Sanity check #[RequiresPhp] value and range (#​269)
• d309858 - Update github-actions to f3e473d (#​301)
• 4a8e26f - Update github-actions (#​300)
• 2c07f22 - Replace deprecated actions/create-release with softprops/action-gh-release
• 67c9d57 - Bump GitHub Actions across major versions
• a7baf3b - Bump GitHub Actions within their current majors
• 3ea20e6 - Update github-actions
• 53357ab - Update github-actions
• 6760e77 - latest infection does not support PHP 8.2 (#​296)
• ecfa568 - Update release-toot.yml (#​295)
• 21ea2e9 - name-collision-detector (#​294)
• 6851172 - Update test assertions
• e2c6207 - Fix build (#​287)
• db27c1f - Delete .github/workflows/claude-react-on-comment.yml
• 1c9e1df - Refactor build workflow to use GITHUB_BASE_REF
• 53c1301 - Lint workflows
• fca9e3a - [StepSecurity] ci: Harden GitHub Actions
• bfdcb62 - Remove PHPSTAN_BOT_TOKEN from checkout step
• bb6479c - React on issues opened and fall back to issue body
• 10e8509 - Add CLAUDE.md to export-ignore in .gitattributes
• 2202890 - Add CLAUDE.md with project documentation for AI assistants
• ffd7013 - Add Claude React on Comment workflow

postcss/postcss (postcss)

v8.5.26

Compare Source

• Fixed list.split() regression (by @​lazerg).
• Track symlinks in path protection in source map loading (by @​drengir1).

v8.5.25

Compare Source

• Fixed 8.5.17 visitor regression.
• Fixed list.split() for non-string values (by @​amir-rezaei).

v8.5.24

Compare Source

• Preserve the BOM after the processing (by @​hdimer).

v8.5.23

Compare Source

• Do not load source map without opts.from for security reasons.

v8.5.22

Compare Source

• Fixed custom property losing semicolon before a comment (by @​sarathfrancis90).

v8.5.21

Compare Source

• Fixed childless at-rule losing semicolon before comment (by @​sarathfrancis90).
• Fixed docs (by @​isker).

v8.5.20

Compare Source

• Fixed missing space if AtRule#params is set after (by @​sarathfrancis90).
• Fixed mixing AST error on warnings (by @​MahinAnowar).

v8.5.19

Compare Source

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

v8.5.18

Compare Source

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

v8.5.17

Compare Source

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

v8.5.16

Compare Source

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

v8.5.15

Compare Source

• Fixed declaration parsing performance (by @​homanp).

v8.5.14

Compare Source

• Fixed custom syntax regression (by @​43081j).

v8.5.13

Compare Source

• Fixed postcss-scss commend regression.

v8.5.12

Compare Source

• Fixed reading any file via user-generated CSS.
• Added opts.unsafeMap to disable checks.

v8.5.11

Compare Source

• Fixed nested brackets parsing performance (by @​offset).

v8.5.10

Compare Source

• Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

v8.5.9

Compare Source

• Speed up source map encoding paring in case of the error.

sweetalert2/sweetalert2 (sweetalert2)

v11.26.25

Compare Source

Bug Fixes

• icon animation in Firefox (#​2945) (8a01895)

vitejs/vite (vite)

v7.3.6

Compare Source

Please refer to CHANGELOG.md for details.

v7.3.5

Compare Source

Please refer to CHANGELOG.md for details.

v7.3.3

Compare Source

Please refer to CHANGELOG.md for details.

v7.3.2

Compare Source

Please refer to CHANGELOG.md for details.

googlechrome/workbox (workbox-precaching)

v7.4.1: Workbox v7.4.1

Compare Source

What's Changed

• migrate rollup v4 and plugins by @​AJIb63PT in GoogleChrome#3446
• Bump jws from 4.0.0 to 4.0.1 by @​dependabot[bot] in GoogleChrome#3447
• Bump node-forge from 1.3.1 to 1.3.3 by @​dependabot[bot] in GoogleChrome#3449
• Bump brace-expansion in /packages/workbox-webpack-plugin by @​dependabot[bot] in GoogleChrome#3448
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in GoogleChrome#3477
• Bump rollup from 4.53.3 to 4.59.0 by @​dependabot[bot] in GoogleChrome#3474
• Bump ajv from 8.6.0 to 8.18.0 in /packages/workbox-build by @​dependabot[bot] in GoogleChrome#3462
• Bump ajv from 8.12.0 to 8.18.0 in /packages/workbox-cli by @​dependabot[bot] in GoogleChrome#3460
• Bump picomatch by @​dependabot[bot] in GoogleChrome#3478
• Bump picomatch from 2.3.1 to 2.3.2 in /packages/workbox-cli by @​dependabot[bot] in GoogleChrome#3479
• Bump lodash from 4.17.21 to 4.17.23 in /packages/workbox-webpack-plugin by @​dependabot[bot] in GoogleChrome#3453
• Bump lodash from 4.17.21 to 4.17.23 by @​dependabot[bot] in GoogleChrome#3452
• Bump ajv from 6.12.6 to 6.14.0 in /packages/workbox-webpack-plugin by @​dependabot[bot] in GoogleChrome#3461
• Bump lodash from 4.17.21 to 4.17.23 in /packages/workbox-cli by @​dependabot[bot] in GoogleChrome#3454
• CI: Fix Chrome version discrepancy by @​swissspidy in GoogleChrome#3493
• Add Dependabot config by @​swissspidy in GoogleChrome#3492
• Update actions/cache to v5 by @​swissspidy in GoogleChrome#3491
• Bump serialize-javascript and @​rollup/plugin-terser in /packages/workbox-build by @​dependabot[bot] in GoogleChrome#3485
• Bump rollup from 2.79.2 to 2.80.0 in /packages/workbox-cli by @​dependabot[bot] in GoogleChrome#3465
• Bump actions/upload-artifact from 5 to 7 by @​dependabot[bot] in GoogleChrome#3494
• Bump lodash from 4.17.21 to 4.18.1 by @​dependabot[bot] in GoogleChrome#3500
• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in GoogleChrome#3501
• Bump rollup from 4.59.0 to 4.60.1 by @​dependabot[bot] in GoogleChrome#3498
• Bump axios from 1.13.2 to 1.15.0 by @​dependabot[bot] in GoogleChrome#3503
• Bump postcss from 8.4.38 to 8.5.10 by @​dependabot[bot] in GoogleChrome#3505
• Bump follow-redirects from 1.15.11 to 1.16.0 by @​dependabot[bot] in GoogleChrome#3504
• Replace lodash with eta by @​rtritto in GoogleChrome#3489
• Bump @​apideck/better-ajv-errors from 0.3.1 to 0.3.7 by @​dependabot[bot] in GoogleChrome#3507
• Bump github/codeql-action from 4 to 4.35.2 by @​dependabot[bot] in GoogleChrome#3508
• Update lock file (npm audit fix) by @​swissspidy in GoogleChrome#3510

New Contributors

• @​rtritto made their first contribution in GoogleChrome#3489

Full Changelog: GoogleChrome/workbox@v7.4.0...v7.4.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.