[Snyk] Upgrade: vue, axios, chart.js, core-js, quasar, vue-i18n

[dariosalvi78]

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

vue
from 3.4.29 to 3.4.38 | 9 versions ahead of your current version | a month ago
on 2024-08-15
axios
from 1.7.4 to 1.7.7 | 3 versions ahead of your current version | 22 days ago
on 2024-08-31
chart.js
from 4.4.3 to 4.4.4 | 1 version ahead of your current version | a month ago
on 2024-08-20
core-js
from 3.37.1 to 3.38.1 | 2 versions ahead of your current version | a month ago
on 2024-08-20
quasar
from 2.16.5 to 2.16.9 | 4 versions ahead of your current version | a month ago
on 2024-08-15
vue-i18n
from 9.13.1 to 9.14.0 | 1 version ahead of your current version | a month ago
on 2024-08-16

Release notes

Package name: vue

• 3.4.38 - 2024-08-15
  

  For stable releases, please refer to CHANGELOG.md for details.
  For pre-releases, please refer to CHANGELOG.md of the minor branch.

• 3.4.37 - 2024-08-08
  

  For stable releases, please refer to CHANGELOG.md for details.
  For pre-releases, please refer to CHANGELOG.md of the minor branch.

• 3.4.36 - 2024-08-06
  

  For stable releases, please refer to CHANGELOG.md for details.
  For pre-releases, please refer to CHANGELOG.md of the minor branch.

• 3.4.35 - 2024-07-31
  

  For stable releases, please refer to CHANGELOG.md for details.
  For pre-releases, please refer to CHANGELOG.md of the minor branch.

• 3.4.34 - 2024-07-24
  

  For stable releases, please refer to CHANGELOG.md for details.
  For pre-releases, please refer to CHANGELOG.md of the minor branch.

• 3.4.33 - 2024-07-19
• 3.4.32 - 2024-07-17
• 3.4.31 - 2024-06-28
• 3.4.30 - 2024-06-22
• 3.4.29 - 2024-06-14

from vue GitHub release notes

Package name: axios

• 1.7.7 - 2024-08-31
  

  Release notes:

  Bug Fixes

  • fetch: fix stream handling in Safari by fallback to using a stream reader instead of an async iterator; (#6584) (d198085)
  • http: fixed support for IPv6 literal strings in url (#5731) (364993f)

  Contributors to this release

  • Rishi556
  • Dmitriy Mozgovoy
• 1.7.6 - 2024-08-30
  

  Release notes:

  Bug Fixes

  • fetch: fix content length calculation for FormData payload; (#6524) (085f568)
  • fetch: optimize signals composing logic; (#6582) (df9889b)

  Contributors to this release

  • Dmitriy Mozgovoy
  • Jacques Germishuys
  • kuroino721
• 1.7.5 - 2024-08-23
  

  Release notes:

  Bug Fixes

  • adapter: fix undefined reference to hasBrowserEnv (#6572) (7004707)
  • core: add the missed implementation of AxiosError#status property; (#6573) (6700a8a)
  • core: fix ReferenceError: navigator is not defined for custom environments; (#6567) (fed1a4b)
  • fetch: fix credentials handling in Cloudflare workers (#6533) (550d885)

  Contributors to this release

  • Dmitriy Mozgovoy
  • Antonin Bas
  • Hans Otto Wirtz
• 1.7.4 - 2024-08-13
  

  Release notes:

  Bug Fixes

  • sec: CVE-2024-39338 (#6539) (#6543) (6b6b605)
  • sec: disregard protocol-relative URL to remediate SSRF (#6539) (07a661a)

  Contributors to this release

  • Lev Pachmanov
  • Đỗ Trọng Hải

from axios GitHub release notes

Package name: chart.js

• 4.4.4 - 2024-08-20
  

  Essential Links

  • npm
  • Migration guide
  • Docs
  • API
  • Samples

  Bugs Fixed

  • #11873 Check if range method exists on element before executing it
  • #11863 Return false from the average tooltip positioner on no valid data
  • #11858 Bugfix/issue 11804 tooltip show for all invisible
  • #11851 fix: Unset _resizeBeforeDraw before _resize() call to avoid possible recursion
  • #11844 fix issue #11717
  • #11788 Fix drawing angle lines on reversed radial scale

  Types

  • #11867 fix(types): exclude DeepPartial<unknown[]> from ChartOptions interface
  • #11862 fix(types): add xCenter and yCenter properties to RadialLinearScale interface
  • #11817 Remove box padding from legend types
  • #11796 Add fit method to LegendElement interface
  • #11780 types: Allow passing undefined for chart options

  Documentation

  • #11871 Add radial linear scale to docs section of samples
  • #11823 Update OffscreenCanvas documentation, as it is widely available now
  • #11781 Fix some typos

  Development

  • #11874 Bump package version to 4.4.4

  Thanks to @ CatchABus, @ LeeLenaleee, @ MichelHMachado, @ artus9033, @ huqingkun, @ jdufresne and @ joliss

• 4.4.3 - 2024-05-17
  

  Essential Links

  • npm
  • Migration guide
  • Docs
  • API
  • Samples
  • #11754 Fix error when object prototype is frozen

  Bugs Fixed

  • #11764 do not attempt to clear canvas if one does not exist
  • #11755 #11450 hide bar by dataindex
  • #11690 Create parsed object with correct keys
  • #11707 platform.isAttached should return false if canvas is false-y

  Documentation

  • #11762 Update license year

  Development

  • #11776 Bump to 4.4.3
  • #11773 Bump pnpm/action-setup from 3.0.0 to 4.0.0
  • #11720 Bump follow-redirects from 1.15.4 to 1.15.6

  Thanks to @ DAcodedBEAT, @ EricWittrock, @ LeeLenaleee, @ LiamSwayne, @ dependabot and @ dependabot[bot]

from chart.js GitHub release notes

Package name: core-js

• 3.38.1 - 2024-08-20
  
  • Changes v3.38.0...v3.38.1
  • Fixed some cases of URLSearchParams percent decoding, #1357, #1361, thanks @ slowcheetah
  • Some stylistic changes and minor optimizations
  • Compat data improvements:
    • Iterator helpers proposal methods marked as shipped from FF131
    • Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } marked as shipped from Bun 1.1.23
    • RegExp.escape marked as shipped from Bun 1.1.22
    • Promise.try marked as shipped from Bun 1.1.22
    • Uint8Array to / from base64 and hex proposal methods marked as shipped from Bun 1.1.22
    • Added Hermes 0.13 compat data, similar to React Native 0.75 Hermes
    • Added Opera Android 84 compat data mapping
• 3.38.0 - 2024-08-04
  
  • Changes v3.37.1...v3.38.0
  • RegExp.escape proposal:
    • Built-ins:
      • RegExp.escape
    • Moved to stage 3, June 2024 and July 2024 TC39 meetings
    • Updated the way of escaping, regex-escaping/77
    • Throw an error on non-strings, regex-escaping/58
    • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
  • Promise.try proposal:
    • Built-ins:
      • Promise.try
    • Moved to stage 3, June 2024 TC39 meeting
    • Added /actual/ namespace entries, unconditional forced replacement changed to feature detection
  • Uint8Array to / from base64 and hex stage 3 proposal:
    • Built-ins:
      • Uint8Array.fromBase64
      • Uint8Array.fromHex
      • Uint8Array.prototype.setFromBase64
      • Uint8Array.prototype.setFromHex
      • Uint8Array.prototype.toBase64
      • Uint8Array.prototype.toHex
    • Added Uint8Array.prototype.{ setFromBase64, setFromHex } methods
    • Added Uint8Array.fromBase64 and Uint8Array.prototype.setFromBase64 lastChunkHandling option, proposal-arraybuffer-base64/33
    • Added Uint8Array.prototype.toBase64 omitPadding option, proposal-arraybuffer-base64/60
    • Added throwing a TypeError on arrays backed by detached buffers
    • Unconditional forced replacement changed to feature detection
  • Fixed RegExp named capture groups polyfill in combination with non-capturing groups, #1352, thanks @ Ulop
  • Improved some cases of environment detection
  • Uses process.getBuiltinModule for getting built-in NodeJS modules where it's available
  • Uses https instead of http in URL constructor feature detection to avoid extra notifications from some overly vigilant security scanners, #1345
  • Some minor optimizations
  • Updated browserslist in core-js-compat dependencies that fixes an upstream issue with incorrect interpretation of some browserslist queries, #1344, browserslist/829, browserslist/836
  • Compat data improvements:
    • Added Safari 18.0 compat data:
      • Fixed Object.groupBy and Map.groupBy to work for non-objects
      • Fixed throwing a RangeError if Set methods are called on an object with negative size property
      • Fixed Set.prototype.symmetricDifference to call this.has in each iteration
      • Fixed Array.fromAsync to not call the Array constructor twice
      • Added URL.parse
    • Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } marked as shipped from FF129
    • Symbol.asyncDispose added and marked as supported from V8 ~ Chromium 127
    • Promise.try added and marked as supported from V8 ~ Chromium 128
    • Added Deno 1.44 and 1.45 compat data mapping
    • self descriptor is broken in Deno 1.45.3 (again)
    • Added Electron 32 and 33 compat data mapping
    • Added Opera Android 83 compat data mapping
    • Added Samsung Internet 27 compat data mapping
    • Added Oculus Quest Browser 34 compat data mapping
• 3.37.1 - 2024-05-14
  
  • Changes v3.37.0...v3.37.1
  • Fixed URL.parse feature detection for some specific cases
  • Compat data improvements:
    • Set methods proposal added and marked as supported from FF 127
    • Symbol.dispose added and marked as supported from V8 ~ Chromium 125
    • Math.f16round and DataView.prototype.{ getFloat16, setFloat16 } added and marked as supported from Deno 1.43
    • URL.parse added and marked as supported from Chromium 126
    • URL.parse added and marked as supported from NodeJS 22.0
    • URL.parse added and marked as supported from Deno 1.43
    • Added Rhino 1.7.15 compat data, many features marked as supported
    • Added NodeJS 22.0 compat data mapping
    • Added Deno 1.43 compat data mapping
    • Added Electron 31 compat data mapping
    • Updated Opera Android 82 compat data mapping
    • Added Samsung Internet 26 compat data mapping
    • Added Oculus Quest Browser 33 compat data mapping

from core-js GitHub release notes

Package name: quasar

• 2.16.9 - 2024-08-15
• 2.16.8 - 2024-08-07
• 2.16.7 - 2024-08-05
• 2.16.6 - 2024-07-10
• 2.16.5 - 2024-07-03

from quasar GitHub release notes

Package name: vue-i18n

• 9.14.0 - 2024-08-16
  

  What's Changed

  ⚡ Improvement Features

  • fix: vue-i18n type definition for vue package by @ BobbieGoede in #1919

  Full Changelog: v9.13.1...v9.14.0

• 9.13.1 - 2024-04-20

from vue-i18n GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs