Skip to content

Bump elliptic and @vue/cli-service - #25

Open
dependabot[bot] wants to merge 34 commits into
stagingfrom
dependabot/npm_and_yarn/multi-be5348276f
Open

Bump elliptic and @vue/cli-service#25
dependabot[bot] wants to merge 34 commits into
stagingfrom
dependabot/npm_and_yarn/multi-be5348276f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 9, 2026

Copy link
Copy Markdown
Contributor

Removes elliptic. It's no longer used after updating ancestor dependency @vue/cli-service. These dependencies need to be updated together.

Removes elliptic

Updates @vue/cli-service from 4.5.15 to 5.0.0-beta.1

Release notes

Sourced from @​vue/cli-service's releases.

v5.0.0-beta.1

🚀 New Features

💥 Breaking Changes

  • @vue/cli-ui
    • #6443 fix!: keep project name validation rules in sync between UI and CLI (@​sodatea)

🐛 Bug Fix

  • @vue/cli-service
    • #6470 fix(SafariNomoduleFixPlugin): use RawSource instead of a plain object (@​KaelWD)
  • @vue/cli-plugin-typescript
    • #6456 fix(typescript): add missing dependencies and require.resolve compiler (@​merceyz)
  • @vue/cli-ui
    • #6443 fix!: keep project name validation rules in sync between UI and CLI (@​sodatea)
  • @vue/cli-plugin-unit-jest

Committers: 4

v5.0.0-beta.0

For a complete guide on migrating from v4 to v5, see https://next.cli.vuejs.org/migrations/migrate-from-v4.html


The following are the changes between 5.0.0-alpha.8 and 5.0.0-beta.0:

💥 Breaking Changes

  • @vue/cli-ui-addon-webpack, @vue/cli-ui-addon-widgets, @vue/cli-ui
  • @vue/cli-plugin-webpack-4, @vue/cli-service
  • @vue/cli-service
    • #6422 feat!: always inject safari-nomodule-fix as an external script; drop --no-unsafe-inline flag (@​sodatea)
  • @vue/cli-plugin-babel, @vue/cli-service, @vue/cli-ui
    • #6416 feat!: turn on modern mode by default, and provide a --no-module option (@​sodatea)

🚀 New Features

  • @vue/cli-plugin-typescript
  • @vue/cli-plugin-webpack-4, @vue/cli-service

... (truncated)

Changelog

Sourced from @​vue/cli-service's changelog.

5.0.0-beta.1 (2021-05-14)

🚀 New Features

💥 Breaking Changes

  • @vue/cli-ui
    • #6443 fix!: keep project name validation rules in sync between UI and CLI (@​sodatea)

🐛 Bug Fix

  • @vue/cli-service
    • #6470 fix(SafariNomoduleFixPlugin): use RawSource instead of a plain object (@​KaelWD)
  • @vue/cli-plugin-typescript
    • #6456 fix(typescript): add missing dependencies and require.resolve compiler (@​merceyz)
  • @vue/cli-ui
    • #6443 fix!: keep project name validation rules in sync between UI and CLI (@​sodatea)
  • @vue/cli-plugin-unit-jest

🏠 Internal

Committers: 4

5.0.0-beta.0 (2021-04-25)

🚀 New Features

  • @vue/cli-plugin-typescript
  • @vue/cli-plugin-webpack-4, @vue/cli-service
  • @vue/cli-service
    • #6422 feat!: always inject safari-nomodule-fix as an external script; drop --no-unsafe-inline flag (@​sodatea)
    • #6285 feat(cli-service): provide jsconfig.json in no-ts template (@​yoyo930021)
    • #5997 feat(cli-service): add inline loader support for html-webpack-plugin (@​ylc395)
  • @vue/babel-preset-app, @vue/cli-service
    • #6419 feat: only needs one bundle if all targets support es module (@​sodatea)
  • @vue/cli-plugin-babel, @vue/cli-service, @vue/cli-ui
    • #6416 feat!: turn on modern mode by default, and provide a --no-module option (@​sodatea)
  • @vue/cli-plugin-typescript, @vue/cli-service

... (truncated)

Commits
  • e6262a4 v5.0.0-beta.1
  • 5612398 chore: pre release sync
  • cc6f74d fix: webpack-sources is an optinal peer dependency
  • ca26f8c fix(SafariNomoduleFixPlugin): use RawSource instead of a plain object (#6470)
  • 3bb2d84 feat: add "tags" part to htmlWebpackPlugin (#6472)
  • 2d3116e v5.0.0-beta.0
  • de52581 chore: pre release sync
  • cd6db82 fix: use .needsDifferentialLoading instead of .module
  • a1979bd fix: should not include IE11 target in Vue 3 projects (#6437)
  • e661a92 feat!: upgrade to css-minimizer-webpack-plugin v2 (#6420)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Yannick Olivier and others added 30 commits May 6, 2025 12:20
Bumps [nanoid](https://github.com/ai/nanoid) from 3.1.30 to 3.3.11.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.1.30...3.3.11)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-version: 3.3.11
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Update warning text on section 'who is the victim'. Place the warning at the bottom of the form.
Update warning text on section 'who is the victim'. Place the warning at the bottom of the form.
Bumps [async](https://github.com/caolan/async) from 2.6.3 to 2.6.4.
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md)
- [Commits](caolan/async@v2.6.3...v2.6.4)

---
updated-dependencies:
- dependency-name: async
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [eventsource](https://github.com/EventSource/eventsource) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/EventSource/eventsource/releases)
- [Changelog](https://github.com/EventSource/eventsource/blob/master/HISTORY.md)
- [Commits](EventSource/eventsource@v1.1.0...v1.1.1)

---
updated-dependencies:
- dependency-name: eventsource
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [nanoid](https://github.com/ai/nanoid) from 3.1.30 to 3.3.11.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.1.30...3.3.11)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-version: 3.3.11
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
TinusVL and others added 4 commits December 11, 2025 13:31
Copied from pre commit c2ddd40
Removes [elliptic](https://github.com/indutny/elliptic). It's no longer used after updating ancestor dependency [@vue/cli-service](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-service). These dependencies need to be updated together.


Removes `elliptic`

Updates `@vue/cli-service` from 4.5.15 to 5.0.0-beta.1
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.0-beta.1/packages/@vue/cli-service)

---
updated-dependencies:
- dependency-name: elliptic
  dependency-version: 
  dependency-type: indirect
- dependency-name: "@vue/cli-service"
  dependency-version: 5.0.0-beta.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant