chore(deps): update npm (runtime)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@fontsource-variable/figtree (source)	5.2.7 -> 5.2.8
dompurify	3.2.5 -> 3.2.6
i18next (source)	25.1.2 -> 25.2.0
marked (source)	15.0.11 -> 15.0.12
swiper (source)	11.2.6 -> 11.2.8
vue (source)	3.5.13 -> 3.5.14

---

Release Notes

fontsource/font-files (@​fontsource-variable/figtree)

v5.2.8

Compare Source

cure53/DOMPurify (dompurify)

v3.2.6: DOMPurify 3.2.6

Compare Source

• Fixed several typos and removed clutter from our documentation, thanks @​Rotzbua
• Added matrix: as an allowed URI scheme, thanks @​kleinesfilmroellchen
• Added better config hardening against prototype pollution, thanks @​EffectRenan
• Added better handling of attribute removal, thanks @​michalnieruchalski-tiugo
• Added better configuration for aggressive mXSS scrubbing behavior, thanks @​BryanValverdeU
• Removed the script that caused the fake entry CVE-2025-48050

i18next/i18next (i18next)

v25.2.0

Compare Source

• introduce cacheInBuiltFormats option to address 2227

v25.1.3

Compare Source

• Ensure nsSeparator is respected when appendNamespaceToMissingKey is true 2311, fixes 2310

markedjs/marked (marked)

v15.0.12

Compare Source

Bug Fixes

• use esbuild for accurate sourcemaps (#​3670) (7a6b2d7)

nolimits4web/Swiper (swiper)

v11.2.8

Compare Source

Bug Fixes

• virtual: fix error in Virtual slides (7a53208), closes #​7997

v11.2.7

Compare Source

Bug Fixes

• core: fix for slideResetTransition events (#​7989) (473ec25)
• core: set innerHTML using trusted type (8a46954), closes #​7961
• react,vue: fix not rendered slides in effects when Virtual is enabled (e4e1680), closes #​7730
• types: add enabled property on swiper-class.d.ts (#​7973) (ccd96dc)
• types: coverflow effect can be number or string with percentage (#​7931) (4d988d8)
• types: fix effect param type (#​7945) (42eec07)
• vue: added missing props (#​7966) (6aa8d05)

vuejs/core (vue)

v3.5.14

Compare Source

Bug Fixes

• compat: correct deprecation message for v-bind.sync usage (#​13137) (466b30f), closes #​13133
• compiler-core: remove slot cache from parent renderCache during unmounting (#​13215) (5d166f3)
• compiler-sfc: fix scope handling for props destructure in function parameters and catch clauses (8e34357), closes #​12790
• compiler-sfc: treat the return value of useTemplateRef as a definite ref (#​13197) (8ae1122)
• compiler: fix spelling error in domTagConfig (#​13043) (388295b)
• customFormatter: properly accessing ref value during debugger (#​12948) (fdbd026)
• hmr/teleport: adjust static children traversal for HMR in dev mode (#​12819) (5e37dd0), closes #​12816
• hmr: avoid hydration for hmr root reload (#​12450) (1f98a9c), closes vitejs/vite-plugin-vue#146 vitejs/vite-plugin-vue#477
• hmr: avoid hydration for hmr updating (#​12262) (9c4dbbc), closes #​7706 #​8170
• reactivity: ensure markRaw objects are not reactive (#​12824) (295b5ec), closes #​12807
• reactivity: ensure multiple effectScope on() and off() calls maintains correct active scope (22dcbf3), closes #​12631 #​12632 #​12641
• reactivity: should not recompute if computed does not track reactive data (#​12341) (0b23fd2), closes #​12337
• runtime-core: stop tracking deps in setRef during unmount (#​13210) (016c472)
• runtime-core: update __vnode of static nodes when patching along the optimized path (#​13223) (b3ecee3)
• runtime-core: inherit comment nodes during block patch in production build (#​10748) (6264505), closes #​10747 #​12650
• runtime-core: prevent unmounted vnode from being inserted during transition leave (#​12862) (d6a6ec1), closes #​12860
• runtime-core: respect immutability for readonly reactive arrays in v-for (#​13091) (3f27c58), closes #​13087
• runtime-dom: always treat autocorrect as attribute (#​13001) (1499135), closes #​5705
• slots: properly warn if slot invoked in setup (#​12195) (9196222), closes #​12194
• ssr: properly init slots during ssr rendering (#​12441) (2206cd2), closes #​12438
• transition: fix KeepAlive with transition out-in mode behavior in production (#​12468) (343c891), closes #​12465
• TransitionGroup: reset prevChildren to prevent memory leak (#​13183) (8b848cb), closes #​13181
• types: allow return any for Options API lifecycle hooks (#​5914) (06310e8)
• types: the directive's modifiers should be optional (#​12605) (10e54dc)
• typos: fix comments referencing transformElement.ts (#​12551)[ci-skip] (11c053a)

Features

• types: add type TemplateRef (#​12645) (636a861)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[jellyfin-bot]

Cloudflare Pages deployment

Latest commit	f37a2f4
Status	✅ Deployed!
Preview URL	https://5ac8e7fb.jf-vue.pages.dev
Preview alias	https://renovate-npm--runtime.jf-vue.pages.dev
Type	🔀 Preview

View build logs

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud