chore(deps): update dependency @lucide/vue to v1.51.0

Automated dependency update. All tests passed.

README.md

@@ -96,7 +96,7 @@ actions:
 
 ### Automatic actions
 
-An action with `auto: true` fires without a click. After every scan, and once at startup, the server sends the webhook for each current alert whose kind is in `kinds`. It sends once per action, repo, alert URL and head commit. A new commit on a pull request is a new send.
+An action with `auto: true` fires without a click. After every scan, after every single-repository rescan, and once at startup, the server sends the webhook for each current alert whose kind is in `kinds`. It sends once per action, repo, alert URL and head commit. A new commit on a pull request is a new send.
 
 ```yaml
 actions:
@@ -110,7 +110,7 @@ actions:
       token_env: ACTION_TOKEN
 ```
 
-- `pr_open` is an informational alert kind. It exists for each open, non-draft pull request from the same repository (not a fork) in a non-archived repo. `subject` is `#N title`, `url` is the pull request, `ref` is the head commit SHA and `detail` is `open for <age>`. It has severity `ok`: it never changes repo health, the counts, the metrics or the dashboard, and the UI hides it. It is in the `alerts` array of `GET /api/state`, which gains an optional `ref` field on every alert.
+- `pr_open` is an informational alert kind. It exists for each open, non-draft pull request including pull requests from forks, in a non-archived repo. Fork pull requests come from external contributors, so a consumer of these alerts, including an auto action webhook, must treat them as untrusted input. `subject` is `#N title`, `url` is the pull request, `ref` is the head commit SHA and `detail` is `open for <age>`. It has severity `ok`: it never changes repo health, the counts, the metrics or the dashboard, and the UI hides it. It is in the `alerts` array of `GET /api/state`, which gains an optional `ref` field on every alert.
 - `authors` limits auto sends to alerts that carry an author, which today means `pr_open`. Without `authors`, any alert of a listed kind fires.
 - The webhook request is the same as for a button press, plus `alert.ref` when the alert has one.
 - The server keeps the sent set in memory and drops an entry when its alert disappears, so a restart sends again for every open pull request. A failed send is not recorded and retries on the next scan. That covers a network error, a non-2xx answer and a `409` (the consumer is busy). Any other 2xx answer counts as sent.

config.example.yaml

@@ -26,7 +26,7 @@ thresholds: # negative disables a check
 #     status_url: https://example.internal/hooks/rerun/status # optional
 #     confirm: "Run this action for the selected alert?" # optional; omit for no dialog
 #   - id: review
-#     kinds: [pr_open] # required with auto; one alert per open, non-draft, non-fork PR
+#     kinds: [pr_open] # required with auto; one alert per open, non-draft PR, forks included; consumers must treat fork PRs as untrusted
 #     auto: true # fire without a click, once per repo, PR and head commit
 #     authors: [lukaszraczylo] # optional; case-insensitive; omit for any author
 #     webhook:

internal/collector/collector.go

@@ -119,10 +119,13 @@ func (c *Collector) OnRefresh(fn func(context.Context, View)) { c.onRefresh = ap
 
 func (c *Collector) refreshAndNotify(ctx context.Context) {
 	c.Refresh(ctx)
-	if len(c.onRefresh) == 0 || ctx.Err() != nil {
+	if ctx.Err() != nil {
 		return
 	}
-	v := c.View()
+	c.notify(ctx, c.View())
+}
+
+func (c *Collector) notify(ctx context.Context, v View) {
 	for _, fn := range c.onRefresh {
 		fn(ctx, v)
 	}
@@ -239,7 +242,12 @@ func (c *Collector) RefreshRepo(ctx context.Context, name string) (View, error)
 	c.mu.Lock()
 	c.repos[canon] = r
 	c.mu.Unlock()
-	return c.View(), nil
+	v := c.View()
+	if len(c.onRefresh) > 0 {
+		// The request context ends with the response, which must not wait for webhooks.
+		go c.notify(context.WithoutCancel(ctx), v)
+	}
+	return v, nil
 }
 
 func (c *Collector) configured(name string) (string, bool) {

internal/collector/collector_test.go

@@ -93,7 +93,7 @@ func TestEvaluate(t *testing.T) {
 		t.Run(name, func(t *testing.T) {
 			r := fresh()
 			tt.mutate(&r)
-			alerts := Evaluate(&r, t0, th())
+			alerts := withoutPROpen(Evaluate(&r, t0, th()))
 			got := kinds(alerts)
 			if len(got) != len(tt.want) {
 				t.Fatalf("alerts = %+v, want kinds %v", alerts, tt.want)
@@ -110,11 +110,22 @@ func TestEvaluate(t *testing.T) {
 	}
 }
 
+// withoutPROpen drops the informational pr_open alerts so tests of other kinds stay focused.
+func withoutPROpen(in []model.Alert) []model.Alert {
+	var out []model.Alert
+	for _, a := range in {
+		if a.Kind != KindPROpen {
+			out = append(out, a)
+		}
+	}
+	return out
+}
+
 func TestEvaluateDisabledThresholds(t *testing.T) {
 	r := model.Repo{FullName: "o/r", RefreshedAt: t0, PRs: []model.PullRequest{{Number: 1, Fork: true, CreatedAt: t0.Add(-100 * 24 * time.Hour)}},
 		Issues: []model.Issue{{UpdatedAt: t0.Add(-100 * 24 * time.Hour)}}}
 	off := config.Thresholds{PRWarnAfter: -1, PRCritAfter: -1, IssueStaleAfter: -1, WorkflowStuck: -1, DataStaleAfter: -1}
-	if a := Evaluate(&r, t0, off); len(a) != 0 {
+	if a := withoutPROpen(Evaluate(&r, t0, off)); len(a) != 0 {
 		t.Fatalf("disabled checks produced %+v", a)
 	}
 }
@@ -123,10 +134,10 @@ func TestAgeAdvancesWithoutRefresh(t *testing.T) {
 	r := model.Repo{FullName: "o/r", RefreshedAt: t0, PRs: []model.PullRequest{{Number: 1, Fork: true, CreatedAt: t0.Add(-40 * time.Hour)}}}
 	cfg := th()
 	cfg.DataStaleAfter = -1
-	if a := Evaluate(&r, t0, cfg); len(a) != 0 {
+	if a := withoutPROpen(Evaluate(&r, t0, cfg)); len(a) != 0 {
 		t.Fatalf("unexpected %+v", a)
 	}
-	if a := Evaluate(&r, t0.Add(10*time.Hour), cfg); len(a) != 1 || a[0].Severity != model.Warn {
+	if a := withoutPROpen(Evaluate(&r, t0.Add(10*time.Hour), cfg)); len(a) != 1 || a[0].Severity != model.Warn {
 		t.Fatalf("PR must cross the warn threshold as time passes: %+v", a)
 	}
 }
@@ -240,7 +251,8 @@ func TestViewSortsWorstFirstAndAlertsBySeverity(t *testing.T) {
 	if v.Repos[0].FullName != "o/crit" || v.Repos[1].FullName != "o/warn" || v.Repos[2].FullName != "o/ok" {
 		t.Fatalf("order: %s %s %s", v.Repos[0].FullName, v.Repos[1].FullName, v.Repos[2].FullName)
 	}
-	if len(v.Alerts) != 2 || v.Alerts[0].Severity != model.Crit || v.Crit != 1 || v.Warn != 1 {
+	alerts := withoutPROpen(v.Alerts)
+	if len(alerts) != 2 || alerts[0].Severity != model.Crit || v.Crit != 1 || v.Warn != 1 {
 		t.Fatalf("alerts: %+v", v.Alerts)
 	}
 }
@@ -470,7 +482,7 @@ func TestEvaluatePROpen(t *testing.T) {
 		want     bool
 	}{
 		"open":     {pr(func(*model.PullRequest) {}), false, true},
-		"fork":     {pr(func(p *model.PullRequest) { p.Fork = true }), false, false},
+		"fork":     {pr(func(p *model.PullRequest) { p.Fork = true }), false, true},
 		"draft":    {pr(func(p *model.PullRequest) { p.Draft = true }), false, false},
 		"archived": {pr(func(*model.PullRequest) {}), true, false},
 	}
@@ -507,3 +519,37 @@ func TestPROpenDoesNotChangeCounts(t *testing.T) {
 		t.Fatalf("view = %+v", v)
 	}
 }
+
+func TestRefreshRepoRunsRefreshHooksWithTheNewView(t *testing.T) {
+	f := &fakeFetcher{fn: func(name string) (model.Repo, error) {
+		return model.Repo{FullName: name, URL: "u", Issues: make([]model.Issue, 3)}, nil
+	}}
+	c := newCollector(f, "o/a")
+	got := make(chan View, 1)
+	c.OnRefresh(func(_ context.Context, v View) { got <- v })
+	if _, err := c.RefreshRepo(context.Background(), "o/a"); err != nil {
+		t.Fatal(err)
+	}
+	select {
+	case v := <-got:
+		if len(v.Repos) != 1 || len(v.Repos[0].Issues) != 3 {
+			t.Fatalf("hook saw a stale view: %+v", v.Repos)
+		}
+	case <-time.After(2 * time.Second):
+		t.Fatal("refresh hook did not run after a repository refresh")
+	}
+}
+
+func TestRefreshRepoFailureSkipsRefreshHooks(t *testing.T) {
+	c := newCollector(&fakeFetcher{fn: func(string) (model.Repo, error) { return model.Repo{}, errors.New("nope") }}, "o/a")
+	called := make(chan struct{}, 1)
+	c.OnRefresh(func(context.Context, View) { called <- struct{}{} })
+	if _, err := c.RefreshRepo(context.Background(), "unknown/x"); err == nil {
+		t.Fatal("unknown repository must fail")
+	}
+	select {
+	case <-called:
+		t.Fatal("hook ran for a refused refresh")
+	case <-time.After(200 * time.Millisecond):
+	}
+}

internal/collector/health.go

@@ -64,10 +64,8 @@ func Evaluate(r *model.Repo, now time.Time, th config.Thresholds) []model.Alert
 		}
 		age := now.Sub(pr.CreatedAt)
 		subject := fmt.Sprintf("#%d %s", pr.Number, pr.Title)
-		if !pr.Fork {
-			alerts = append(alerts, model.Alert{Severity: model.OK, Repo: r.FullName, Kind: KindPROpen, Subject: subject,
-				Detail: "open for " + Age(age), URL: pr.URL, Ref: pr.HeadSHA, Author: pr.Author, Since: pr.CreatedAt})
-		}
+		alerts = append(alerts, model.Alert{Severity: model.OK, Repo: r.FullName, Kind: KindPROpen, Subject: subject,
+			Detail: "open for " + Age(age), URL: pr.URL, Ref: pr.HeadSHA, Author: pr.Author, Since: pr.CreatedAt})
 		switch {
 		case th.PRCritAfter > 0 && age >= th.PRCritAfter:
 			add(model.Crit, KindPRWaiting, subject, "open "+Age(age), pr.URL, pr.CreatedAt)

internal/web/auto_test.go

@@ -43,7 +43,10 @@ func TestAutoRunner(t *testing.T) {
 		authors []string
 		steps   []autoStep
 	}{
-		"fork skipped":  {steps: []autoStep{{[]model.PullRequest{autoPR(1, "a", "x", fork)}, 200, 0}}},
+		"fork triggers once per sha": {steps: []autoStep{
+			{[]model.PullRequest{autoPR(1, "a", "x", fork)}, 200, 1},
+			{[]model.PullRequest{autoPR(1, "a", "x", fork)}, 200, 0},
+		}},
 		"draft skipped": {steps: []autoStep{{[]model.PullRequest{autoPR(1, "a", "x", draft)}, 200, 0}}},
 		"author filter": {authors: []string{"Alice"}, steps: []autoStep{
 			{[]model.PullRequest{autoPR(1, "a", "bob", nil), autoPR(2, "b", "alice", nil)}, 200, 1},

pnpm-lock.yaml

@@ -25,7 +25,7 @@ importers:
         version: 3.3.3(@fortawesome/[email protected])([email protected]([email protected]))
       '@lucide/vue':
         specifier: ^1.49.0
-        version: 1.49.0([email protected]([email protected]))
+        version: 1.51.0([email protected]([email protected]))
       '@vueuse/core':
         specifier: ^15.0.0
         version: 15.0.0([email protected]([email protected]))
@@ -50,7 +50,7 @@ importers:
     devDependencies:
       '@eslint/js':
         specifier: ^10.0.1
-        version: 10.0.1([email protected]1.0([email protected]))
+        version: 10.0.1([email protected]2.0([email protected]))
       '@tailwindcss/vite':
         specifier: ^4.3.3
         version: 4.3.3([email protected](@types/[email protected])([email protected]))
@@ -65,10 +65,10 @@ importers:
         version: 2.5.1(@vue/[email protected])(@vue/[email protected])([email protected]([email protected]))
       eslint:
         specifier: ^10.11.0
-        version: 10.11.0([email protected])
+        version: 10.12.0([email protected])
       eslint-plugin-vue:
         specifier: ^10.11.1
-        version: 10.11.1(@typescript-eslint/[email protected]([email protected]1.0([email protected]))([email protected]))([email protected]1.0([email protected]))([email protected]([email protected]1.0([email protected])))
+        version: 10.11.1(@typescript-eslint/[email protected]([email protected]2.0([email protected]))([email protected]))([email protected]2.0([email protected]))([email protected]([email protected]2.0([email protected])))
       globals:
         specifier: ^17.12.0
         version: 17.13.0
@@ -86,7 +86,7 @@ importers:
         version: 5.9.3
       typescript-eslint:
         specifier: ^8.70.1
-        version: 8.71.0([email protected]1.0([email protected]))([email protected])
+        version: 8.71.0([email protected]2.0([email protected]))([email protected])
       vite:
         specifier: ^8.3.1
         version: 8.3.2(@types/[email protected])([email protected])
@@ -95,7 +95,7 @@ importers:
         version: 5.0.3(@types/[email protected])([email protected])([email protected](@types/[email protected])([email protected]))
       vue-tsc:
         specifier: ^3.3.11
-        version: 3.3.11([email protected])
+        version: 3.3.12([email protected])
 
 packages:
 
@@ -248,8 +248,8 @@ packages:
   '@keyv/[email protected]':
     resolution: {integrity: sha512-dXn3FZhPv0US+7dtJsIi2R+c7qWYiReoEh5zUntWCf4oSpMNib8FDhSoed6m3QyZdx5hK7iLFkYk3rNxwt8vTA==}
 
-  '@lucide/vue@1.49.0':
-    resolution: {integrity: sha512-7xS5gYnLoIx0jlmlRE3Rb71fIHaNqhVBiKMpOlqrYt6nMPy3C/62HJHo5XNsV3HTK+9l3M0hXICrIA7S5v6y5Q==}
+  '@lucide/vue@1.51.0':
+    resolution: {integrity: sha512-zMkTAMP8OsPESz/GDedsZfr3VUF2IiHlj25mBZG6Pc8A8J8BdygkE8k1HhRFXEUNzytp5DqxiBQNm3RG/U2bVg==}
     peerDependencies:
       vue: '>=3.0.1'
 
@@ -605,8 +605,8 @@ packages:
   '@vue/[email protected]':
     resolution: {integrity: sha512-Fkac7lUdGReh6pVOi3AYPRGe82LQqRmAfThW7RRligOAP0ZA/Z1z9XLHDM9dv34pV2HRc79DK8uKPeG2fLnA/g==}
 
-  '@vue/[email protected]1':
-    resolution: {integrity: sha512-QJmpliwAVpC/OxubIByPAhNzsQPRc8/gxlN2qnVzVfIMjMDz/9RnXRFoetjz5yEgXVXyp4LqhXq3V53PjmNzFw==}
+  '@vue/[email protected]2':
+    resolution: {integrity: sha512-k7uIKR0n4CBidk233y7cac9osnDQ5WRidTl6nsrNvpZ3nf8cx9iJxRVsRzVsoPRHbowT/iKgGMTS9RGov3jeIA==}
 
   '@vue/[email protected]':
     resolution: {integrity: sha512-G/c9GyOZNI2jVaaS6OX1EF1SSFSv7H0ERqNTl4+DTFMlZmB5eVAB53aLQNam/7NL2NPtaDD7RdVrzf8uJzMuOA==}
@@ -806,8 +806,8 @@ packages:
     resolution: {integrity: sha512-tD40eHxA35h0PEIZNeIjkHoDR4YjjJp34biM0mDvplBe//mB+IHCqHDGV7pxF+7MklTvighcCPPZC7ynWyjdTA==}
     engines: {node: ^20.19.0 || ^22.13.0 || >=24}
 
-  [email protected]1.0:
-    resolution: {integrity: sha512-P7a6UEEqb9G95MYAtqkmsTbVXIYyzIfl6NGOIJk162PaahFxFyeGcrlXYFSiagECg4sEm8IseJdZBKR3rx6MsQ==}
+  [email protected]2.0:
+    resolution: {integrity: sha512-npHjrHb2o4ehH3mE+YuxABR+0gyb0aVWCIolgJDArwCiHEIsonBm3ZKjel5b0U5+a+MbEvIyRCGCzD3eKKK2NA==}
     engines: {node: ^20.19.0 || ^22.13.0 || >=24}
     hasBin: true
     peerDependencies:
@@ -1435,8 +1435,8 @@ packages:
     peerDependencies:
       eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
 
-  [email protected]1:
-    resolution: {integrity: sha512-gOb0B9rtU2+f1dszwPqSH5kAieIF9ReeLhD3kSRNHv5WZZUQz/JdVXW0RTdqhNTMlQkqKzrTTviqKr/4FYZraQ==}
+  [email protected]2:
+    resolution: {integrity: sha512-kbpaz18O9jPVkXVHD1BEjpUXM6WhXSu+62L1sGGr6Wbzd8GbvkBQWjoj3KZ/C0aq2MZllce7UdtWzwCIYsBMGA==}
     hasBin: true
     peerDependencies:
       typescript: '>=5.0.0'
@@ -1514,9 +1514,9 @@ snapshots:
       hashery: 1.5.1
       keyv: 5.6.0
 
-  '@eslint-community/[email protected]([email protected]1.0([email protected]))':
+  '@eslint-community/[email protected]([email protected]2.0([email protected]))':
     dependencies:
-      eslint: 10.11.0([email protected])
+      eslint: 10.12.0([email protected])
       eslint-visitor-keys: 3.4.3
 
   '@eslint-community/[email protected]': {}
@@ -1537,9 +1537,9 @@ snapshots:
     dependencies:
       '@types/json-schema': 7.0.15
 
-  '@eslint/[email protected]([email protected]1.0([email protected]))':
+  '@eslint/[email protected]([email protected]2.0([email protected]))':
     optionalDependencies:
-      eslint: 10.11.0([email protected])
+      eslint: 10.12.0([email protected])
 
   '@eslint/[email protected]': {}
 
@@ -1638,7 +1638,7 @@ snapshots:
 
   '@keyv/[email protected]': {}
 
-  '@lucide/vue@1.49.0([email protected]([email protected]))':
+  '@lucide/vue@1.51.0([email protected]([email protected]))':
     dependencies:
       vue: 3.5.43([email protected])
 
@@ -1797,15 +1797,15 @@ snapshots:
     dependencies:
       '@types/node': 26.6.4
 
-  '@typescript-eslint/[email protected](@typescript-eslint/[email protected]([email protected]1.0([email protected]))([email protected]))([email protected]1.0([email protected]))([email protected])':
+  '@typescript-eslint/[email protected](@typescript-eslint/[email protected]([email protected]2.0([email protected]))([email protected]))([email protected]2.0([email protected]))([email protected])':
     dependencies:
       '@eslint-community/regexpp': 4.12.2
-      '@typescript-eslint/parser': 8.71.0([email protected]1.0([email protected]))([email protected])
+      '@typescript-eslint/parser': 8.71.0([email protected]2.0([email protected]))([email protected])
       '@typescript-eslint/scope-manager': 8.71.0
-      '@typescript-eslint/type-utils': 8.71.0([email protected]1.0([email protected]))([email protected])
-      '@typescript-eslint/utils': 8.71.0([email protected]1.0([email protected]))([email protected])
+      '@typescript-eslint/type-utils': 8.71.0([email protected]2.0([email protected]))([email protected])
+      '@typescript-eslint/utils': 8.71.0([email protected]2.0([email protected]))([email protected])
       '@typescript-eslint/visitor-keys': 8.71.0
-      eslint: 10.11.0([email protected])
+      eslint: 10.12.0([email protected])
       ignore: 7.0.11
       natural-compare: 1.4.0
       ts-api-utils: 2.5.0([email protected])
@@ -1813,14 +1813,14 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/[email protected]([email protected]1.0([email protected]))([email protected])':
+  '@typescript-eslint/[email protected]([email protected]2.0([email protected]))([email protected])':
     dependencies:
       '@typescript-eslint/scope-manager': 8.71.0
       '@typescript-eslint/types': 8.71.0
       '@typescript-eslint/typescript-estree': 8.71.0([email protected])
       '@typescript-eslint/visitor-keys': 8.71.0
       debug: 4.4.3
-      eslint: 10.11.0([email protected])
+      eslint: 10.12.0([email protected])
       typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
@@ -1843,13 +1843,13 @@ snapshots:
     dependencies:
       typescript: 5.9.3
 
-  '@typescript-eslint/[email protected]([email protected]1.0([email protected]))([email protected])':
+  '@typescript-eslint/[email protected]([email protected]2.0([email protected]))([email protected])':
     dependencies:
       '@typescript-eslint/types': 8.71.0
       '@typescript-eslint/typescript-estree': 8.71.0([email protected])
-      '@typescript-eslint/utils': 8.71.0([email protected]1.0([email protected]))([email protected])
+      '@typescript-eslint/utils': 8.71.0([email protected]2.0([email protected]))([email protected])
       debug: 4.4.3
-      eslint: 10.11.0([email protected])
+      eslint: 10.12.0([email protected])
       ts-api-utils: 2.5.0([email protected])
       typescript: 5.9.3
     transitivePeerDependencies:
@@ -1872,13 +1872,13 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/[email protected]([email protected]1.0([email protected]))([email protected])':
+  '@typescript-eslint/[email protected]([email protected]2.0([email protected]))([email protected])':
     dependencies:
-      '@eslint-community/eslint-utils': 4.10.1([email protected]1.0([email protected]))
+      '@eslint-community/eslint-utils': 4.10.1([email protected]2.0([email protected]))
       '@typescript-eslint/scope-manager': 8.71.0
       '@typescript-eslint/types': 8.71.0
       '@typescript-eslint/typescript-estree': 8.71.0([email protected])
-      eslint: 10.11.0([email protected])
+      eslint: 10.12.0([email protected])
       typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
@@ -1962,7 +1962,7 @@ snapshots:
 
   '@vue/[email protected]': {}
 
-  '@vue/[email protected]1':
+  '@vue/[email protected]2':
     dependencies:
       '@volar/language-core': 2.4.28
       '@vue/compiler-dom': 3.5.43
@@ -2129,18 +2129,18 @@ snapshots:
 
   [email protected]: {}
 
-  [email protected](@typescript-eslint/[email protected]([email protected]1.0([email protected]))([email protected]))([email protected]1.0([email protected]))([email protected]([email protected]1.0([email protected]))):
+  [email protected](@typescript-eslint/[email protected]([email protected]2.0([email protected]))([email protected]))([email protected]2.0([email protected]))([email protected]([email protected]2.0([email protected]))):
     dependencies:
-      '@eslint-community/eslint-utils': 4.10.1([email protected]1.0([email protected]))
-      eslint: 10.11.0([email protected])
+      '@eslint-community/eslint-utils': 4.10.1([email protected]2.0([email protected]))
+      eslint: 10.12.0([email protected])
       natural-compare: 1.4.0
       nth-check: 2.1.1
       postcss-selector-parser: 7.1.6
       semver: 7.8.5
-      vue-eslint-parser: 10.4.1([email protected]1.0([email protected]))
+      vue-eslint-parser: 10.4.1([email protected]2.0([email protected]))
       xml-name-validator: 5.0.0
     optionalDependencies:
-      '@typescript-eslint/parser': 8.71.0([email protected]1.0([email protected]))([email protected])
+      '@typescript-eslint/parser': 8.71.0([email protected]2.0([email protected]))([email protected])
 
   [email protected]:
     dependencies:
@@ -2153,9 +2153,9 @@ snapshots:
 
   [email protected]: {}
 
-  [email protected]1.0([email protected]):
+  [email protected]2.0([email protected]):
     dependencies:
-      '@eslint-community/eslint-utils': 4.10.1([email protected]1.0([email protected]))
+      '@eslint-community/eslint-utils': 4.10.1([email protected]2.0([email protected]))
       '@eslint-community/regexpp': 4.12.2
       '@eslint/config-array': 0.23.5
       '@eslint/config-helpers': 0.7.0
@@ -2603,13 +2603,13 @@ snapshots:
     dependencies:
       prelude-ls: 1.2.1
 
-  [email protected]([email protected]1.0([email protected]))([email protected]):
+  [email protected]([email protected]2.0([email protected]))([email protected]):
     dependencies:
-      '@typescript-eslint/eslint-plugin': 8.71.0(@typescript-eslint/[email protected]([email protected]1.0([email protected]))([email protected]))([email protected]1.0([email protected]))([email protected])
-      '@typescript-eslint/parser': 8.71.0([email protected]1.0([email protected]))([email protected])
+      '@typescript-eslint/eslint-plugin': 8.71.0(@typescript-eslint/[email protected]([email protected]2.0([email protected]))([email protected]))([email protected]2.0([email protected]))([email protected])
+      '@typescript-eslint/parser': 8.71.0([email protected]2.0([email protected]))([email protected])
       '@typescript-eslint/typescript-estree': 8.71.0([email protected])
-      '@typescript-eslint/utils': 8.71.0([email protected]1.0([email protected]))([email protected])
-      eslint: 10.11.0([email protected])
+      '@typescript-eslint/utils': 8.71.0([email protected]2.0([email protected]))([email protected])
+      eslint: 10.12.0([email protected])
       typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
@@ -2666,10 +2666,10 @@ snapshots:
     dependencies:
       vue: 3.5.43([email protected])
 
-  [email protected]([email protected]1.0([email protected])):
+  [email protected]([email protected]2.0([email protected])):
     dependencies:
       debug: 4.4.3
-      eslint: 10.11.0([email protected])
+      eslint: 10.12.0([email protected])
       eslint-scope: 9.1.2
       eslint-visitor-keys: 5.0.1
       espree: 11.2.0
@@ -2678,10 +2678,10 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  [email protected]1([email protected]):
+  [email protected]2([email protected]):
     dependencies:
       '@volar/typescript': 2.4.28([email protected])
-      '@vue/language-core': 3.3.11
+      '@vue/language-core': 3.3.12
       typescript: 5.9.3
 
   [email protected]([email protected]):

renovate.json

@@ -0,0 +1,11 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "packageRules": [
+    {
+      "description": "pnpm 11 cannot switch to the pnpm 12 native binary: npx runs it with node",
+      "matchDepTypes": ["packageManager"],
+      "matchPackageNames": ["pnpm"],
+      "allowedVersions": "<12"
+    }
+  ]
+}