[dependabot]

Bumps the npm group with 1 update in the /server directory: @types/adm-zip.
Bumps the npm group with 1 update in the /ui directory: vue-tsc.

Updates @types/adm-zip from 0.5.8 to 0.6.0

Commits

• See full diff in compare view

Updates vue-tsc from 3.3.11 to 3.3.13

Release notes

Sourced from vue-tsc's releases.

v3.3.13

language-core

• fix: generate setup macros without static imports (85f665e)

vscode

• fix: avoid registerHooks on buggy Node versions (7e0d6c4)

Contributors: @​KazariEX, @​serkodev

v3.3.12

language-core

• security: improved handling of untrusted Vue files (cea0698)
• feat: infer first parameter type of default factory for defineModel (1be73b8)
• feat: report duplicate CSS module names, including non-identifier names (d41d919) (ffb85e5)
• fix: keep union props when using withDefaults (084f30f)
• fix: keep inference-only props string single-line with block comments (55ca36f)
• fix: support calling template bindings without .value (7ad4a94)
• fix: avoid type guards missing from the tsc bundle in template binding analysis (e743e80)
• fix: pad directive hook signatures to check short-arity directive bindings (94052b8)
• fix: vueCompilerOptions.plugins now overrides the inherited list instead of being deduplicated on resolve (4fa9e97) (c0e5d2e)
• fix: eliminate synthesized ignore comments across codegen, scoped class aliases and compound event handlers (dbcb7de) (eccb74a) (612ae32)
• fix: correct template mapping boundaries and eliminate unmapped diagnostics (04954dd) (8c85e38) (af7a194) (90f8207)
• fix: stop typedef JSDoc from leaking into emitted dts (d4d4139)
• perf: precompile attribute glob matchers (7d2e603)

component-meta

• fix: stop checking JS Vue files as TS (045a6a7)

typescript-plugin

• fix: don't abort reference span fix-up at style-less files (e46126c)

tsc

• fix: prevent watch mode crash on incremental build (a59da36)

vscode

• perf: reduce focus mode overhead (b0936d1)

Contributors: @​johnsoncodehk, @​serkodev, @​KazariEX, @​00200200, @​camonunez, @​Cherry, @​hungateJoseph, @​uturnr, @​ValentinYoushkevich, @​xia-chao

Changelog

Sourced from vue-tsc's changelog.

3.3.13 (2026-10-10)

language-core

• fix: generate setup macros without static imports (85f665e)

vscode

• fix: avoid registerHooks on buggy Node versions (7e0d6c4)

Contributors: @​KazariEX, @​serkodev

3.3.12 (2026-10-02)

language-core

• security: improved handling of untrusted Vue files (cea0698)
• feat: infer first parameter type of default factory for defineModel (1be73b8)
• feat: report duplicate CSS module names, including non-identifier names (d41d919) (ffb85e5)
• fix: keep union props when using withDefaults (084f30f)
• fix: keep inference-only props string single-line with block comments (55ca36f)
• fix: support calling template bindings without .value (7ad4a94)
• fix: avoid type guards missing from the tsc bundle in template binding analysis (e743e80)
• fix: pad directive hook signatures to check short-arity directive bindings (94052b8)
• fix: vueCompilerOptions.plugins now overrides the inherited list instead of being deduplicated on resolve (4fa9e97) (c0e5d2e)
• fix: eliminate synthesized ignore comments across codegen, scoped class aliases and compound event handlers (dbcb7de) (eccb74a) (612ae32)
• fix: correct template mapping boundaries and eliminate unmapped diagnostics (04954dd) (8c85e38) (af7a194) (90f8207)
• fix: stop typedef JSDoc from leaking into emitted dts (d4d4139)
• perf: precompile attribute glob matchers (7d2e603)

component-meta

• fix: stop checking JS Vue files as TS (045a6a7)

typescript-plugin

• fix: don't abort reference span fix-up at style-less files (e46126c)

tsc

• fix: prevent watch mode crash on incremental build (a59da36)

vscode

• perf: reduce focus mode overhead (b0936d1)

Contributors: @​johnsoncodehk, @​serkodev, @​KazariEX, @​00200200, @​camonunez, @​Cherry, @​hungateJoseph, @​uturnr, @​ValentinYoushkevich, @​xia-chao

Commits

• f2d92d3 v3.3.13 (#6263)
• cea0698 v3.3.12 (#6234)
• d4d4139 fix(language-core): stop typedef jsdoc from leaking into emitted dts
• 045a6a7 fix(component-meta): stop checking JS Vue files as TS (#6231)
• a59da36 fix(tsc): prevent watch mode crash on incremental build (#6213)
• 94052b8 fix(language-core): pad directive hook signatures to check short-arity direct...
• ffb85e5 fix(language-core): report duplicate non-identifier CSS module names (#6199)
• d41d919 feat(language-core): report duplicate CSS module names (#6198)
• 3167acf test(tsc): assert emitted declarations are self-contained and add jsxSlots te...
• d797f44 chore(deps): upgrade Vue to 3.6.0-rc.6 (#6189)
• Additional commits viewable in compare view

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​types/​adm-zip@​0.5.8 ⏵ 0.6.0			-36	-35
	npm/​vue-tsc@​3.3.11 ⏵ 3.3.13				+2

View full report

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml