Pull request #788 · stacks/bun-router

This PR contains the following updates:

Package Updates Summary

Type	Count
📦 NPM Packages	4
🚀 GitHub Actions	5
Total	9

📦 npm Dependencies

4 packages will be updated

Package	Change	Age	Adoption	Passing	Confidence
@vitejs/plugin-vue (source)	`6.0.3` -> `6.0.4`
axios (source)	`1.13.2` -> `1.13.5`
vue (source)	`3.5.26` -> `3.5.28`
vue-tsc (source)	`3.2.2` -> `3.2.4`

🚀 GitHub Actions

5 actions will be updated

Action	Change	Type	Files
oven-sh/setup-bun	`v2` → `v2.1.2`	🟢 patch	`release.yml`
actions/cache	`v5.0.1` → `v5.0.3`	🟢 patch	`ci.yml`
actions/checkout	`v6.0.1` → `v6.0.2`	🟢 patch	`ci.yml`
actions/checkout	`v6` → `v6.0.2`	🟢 patch	`release.yml`
oven-sh/setup-bun	`v2.1.0` → `v2.1.2`	🟢 patch	`ci.yml`

Release Notes

vitejs/vite-plugin-vue (@vitejs/plugin-vue)

6.0.3 -> 6.0.4

`plugin-vue@6.0.4`

Compare Source

Please refer to CHANGELOG.md for details.

Released by github-actions[bot] on 2/2/2026

`plugin-vue-jsx@5.1.4`

Compare Source

Please refer to CHANGELOG.md for details.

Released by github-actions[bot] on 2/2/2026

`plugin-vue-jsx@5.1.3`

Compare Source

Please refer to CHANGELOG.md for details.

Released by github-actions[bot] on 12/24/2025

axios/axios (axios)

1.13.2 -> 1.13.5

`v1.13.5`

Compare Source

Release 1.13.5

Highlights

Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

Fix/5657. (PR #7313)
Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

Add input validation to isAbsoluteURL. (PR #7326)
Refactor: bump minor package versions. (PR #7356)

Documentation

Clarify object-check comment. (PR [#7323...

[View full release notes]

Released by jasonsaayman on 2/8/2026

`v1.13.4`

Compare Source

Overview

The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.

Full Changelog: v1.13.3...v1.13.4

What's New in v1.13.4

Bug Fixes

fix: issues with version 1.13.3 (#7352) (ee90dfc)
- Fixed issues discovered in v1.13.3 release
- Cleaned up interceptor test files
- Improved workflow configurations

Infrastructure & CI/CD

refactor: ci and build (#7340) (8ff6c19)
- Major refactoring of CI/CD workflows
- Consolidated workflow files for better maintainability
- Added mise configuration for the development environment
- Improved sponsor block update automation
- Enhanced issue and PR template...

[View full release notes]

Released by jasonsaayman on 1/27/2026

`v1.13.3`

Compare Source

Release notes:

Bug Fixes

http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)
interceptor: handle the error in the same interceptor (#6269) (5945e40)
main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)
package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)
silentJSONParsing=false should throw on invalid JSON ([#7253](https://gith...

[View full release notes]

Released by github-actions[bot] on 1/20/2026

vuejs/core (vue)

3.5.26 -> 3.5.28

`v3.5.28`

Compare Source

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Released by github-actions[bot] on 2/9/2026

`v3.6.0-beta.5`

Compare Source

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Released by github-actions[bot] on 1/30/2026

`v3.6.0-beta.4`

Compare Source

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Released by github-actions[bot] on 1/23/2026

vuejs/language-tools (vue-tsc)

3.2.2 -> 3.2.4

`v3.2.3`

Compare Source

language-core

feat: support configuration for language plugins (#5678) - Thanks to KazariEX!
fix: avoid defineModel breaking ast in lang="js" (#5935) - Thanks to KazariEX!
fix: infer object keys as string if it does not extend string (#5933) - Thanks to serkodev!

typescript-plugin

feat: correct rename behavior on same name shorthands in template (#5907) - Thanks to KazariEX!
fix: only forward quick info for original results without tags (#5938) - Thanks to KazariEX!

vscode

fix: correct indent for <style> and <script> tags (#5925) - Thanks to serkodev!

Our Sponsors ❤️

This project is made possible thanks to our generous sponsors:

...

[View full release notes]

Released by KazariEX on 1/23/2026

oven-sh/setup-bun

v2 → v2.1.2

Visit oven-sh/setup-bun for release notes.

actions/cache

v5.0.1 → v5.0.3

Visit actions/cache for release notes.

actions/checkout

v6.0.1 → v6.0.2

Visit actions/checkout for release notes.

actions/checkout

v6 → v6.0.2

Visit actions/checkout for release notes.

oven-sh/setup-bun

v2.1.0 → v2.1.2

Visit oven-sh/setup-bun for release notes.

📊 Package Statistics

@vitejs/plugin-vue: 4,925,688 weekly downloads
axios: 85,172,061 weekly downloads
vue: 8,736,626 weekly downloads
vue-tsc: 3,149,023 weekly downloads
oven-sh/setup-bun: GitHub Action for workflow automation
actions/cache: GitHub Action for workflow automation
actions/checkout: GitHub Action for workflow automation
actions/checkout: GitHub Action for workflow automation
oven-sh/setup-bun: GitHub Action for workflow automation

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Buddy 🤖