chore(deps): update all patch dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@tdesign/site-components (source)	^0.19.3 → ^0.19.4
postcss (source)	^8.5.29 → ^8.5.30
qs	^6.16.0 → ^6.16.1
tdesign-vue-next (source)	^1.20.9 → ^1.20.10
vue (source)	^3.5.43 → ^3.5.44

---

Release Notes

postcss/postcss (postcss)

v8.5.30

Compare Source

• Fix broken map on </style> escaping (by @​Rufflet).

ljharb/qs (qs)

v6.16.1

Compare Source

• [Fix] parse: do not mutate an object input
• [Fix] stringify: stop re-encoding structural separator dots when encodeDotInKeys is set (#​564)
• [Fix] stringify: arrayFormat: 'comma': pass the full encoder arguments with encodeValuesOnly
• [Fix] utils: encode + as %2B in iso-8859-1 mode so values round-trip (#​565)
• [Fix] parse: only convert top-level dots to brackets when allowDots is on (#​621)
• [Fix] stringify: ignore inherited array format names (#​622)
• [Fix] stringify: arrayFormat: 'comma': do not throw on elements with no callable toString
• [Fix] utils: merge: seed an overflow container's index from its own keys, not just the source
• [Fix] utils: merge: keep a strictMerge conflict container's index and arrayLimit correct
• [Fix] parse: only treat [] as array syntax when it ends the key
• [Perf] decode: skip decoders when there is no percent sign (#​583)
• [Robustness] utils: merge: apply arrayLimit to the two-element array built for colliding values
• [Robustness] parse: bound the nesting added by repeated strictMerge conflicts (credit @​Yeaseen)
• [Docs] document that qs and flat parsers disagree about parameter names
• [Docs] clarify that throwOnLimitExceeded limits each array, not the total number of values
• [Docs] clarify 6.14.1/6.15.2 parse bracket behavior change (#​567, #​568)
• [meta] fix changelog indents
• [actions] set least-privilege cache-mode
• [Tests] utils: decode: add missing cases
• [Tests] parse: characterize the ]= split when an = precedes any bracket group (#​620)
• [Tests] parse: allowDots: cover stray close brackets before a dot
• [Dev Deps] update @ljharb/eslint-config, eslint, tape

Tencent/tdesign-vue-next (tdesign-vue-next)

v1.20.10

Compare Source

🐞 Bug Fixes

• Cascader: 修复数字值不存在于 options 时展开面板产生 placeholder 类型警告的问题 @​Blackn-L (#​6993)
• Dialog: 修复启用 confirmOnEnter 时 Textarea 内换行触发对话框确认的问题 @​lifuyue (#​6991)
• Form: 修复 1.20.8 版本后引入的 Form 样式缺陷 @​uyarn (#​7005)
• InputNumber: 修复空输入失焦后未恢复父级保留值的问题，使 Slider 数字输入正确回显当前数值，接受空值的输入框继续保持为空 @​dvd233 (#​6995)
• Table: 修复 scrollToElement 方法不支持零值行标识及虚拟滚动定位偏移的问题 @​Blackn-L (#​6994)
• Tree:
  • 修复存在禁用的子节点时，父节点全选在展示异常的问题 @​RSS1102 (#​6999)
  • 修复存在禁用的子节点且 valueMode 为 all 时，返回值没有包含父节点的问题 @​RSS1102 (#​6999)
• TreeSelect: 修复 all 模式移除标签后值与树勾选状态不同步的问题 @​dvd233 (#​6998)

📝 Documentation

• Comment: 修正 avatar 属性的类型描述，移除不受支持的 AvatarProps 类型 @​liweijie0812 (#​7008)

vuejs/core (vue)

v3.5.44

Compare Source

Bug Fixes

• compat: expose _setupProxy for Vue 2.7 compiled script setup (fix #​11164) (#​15618) (f08059d)
• compiler-core: parenthesise v-for key in v-memo cache guard (#​15724) (d084b90), closes #​15723
• compiler-dom: correctly stringify 0 and false in v-html (#​15571) (9f3b437)
• compiler-dom: inject transition persisted for v-show in production (#​15783) (89cb272)
• compiler-sfc: error when defineModel prop options reference a destructured prop (#​15604) (38012a5), closes #​15602
• custom-element: skip mounting an async custom element removed while its component loads (#​15777) (0f8e7b4), closes #​15775
• hydration: observe children of a display: contents root in hydrateOnVisible (#​15773) (7f688e8)
• KeepAlive: unmount pruned current component when its vnode was cloned on mount (#​15711) (92798ac), closes #​15710
• reactivity: avoid mutating native array iterators (#​15703) (7f9d45d), closes #​15643
• reactivity: do not track deps in watcher callbacks run inside another effect (#​15782) (db00fe9), closes #​5009
• reactivity: once watcher should stop when its callback throws (#​15755) (ae4bd94)
• reactivity: preserve shallow collection semantics (#​15793) (b600466), closes #​15792
• runtime-core: detect new prop keys when comparing full props (#​15634) (702fa61), closes #​15632
• runtime-core: keep async placeholder for block patching and pending component updates (#​15554) (05ec25f), closes #​15551
• runtime-core: only flush jobs queued by the root render itself (#​15757) (0bea14b), closes #​6728
• runtime-core: render nothing for an invalid v-for range in production (#​15742) (ad19e7d)
• runtime-dom: preserve v-show display for unchanged style strings (#​15794) (c0a6d3f)
• runtime-dom: treat playsinline as a boolean attribute (#​15627) (a084e44)
• server-renderer: propagate async setup errors (#​15857) (6930374), closes #​15716
• ssr: honor falsy vnode content overrides (#​15769) (c11c5c8)
• suspense: mount resolved async component with its own namespace (#​15640) (2a086a2), closes #​15639
• suspense: skip rendering async components unmounted while pending (4ab865a)
• teleport: move targetStart and keep children before targetAnchor (#​15818) (d3c6e02), closes #​15817
• transition-group: measure nested groups against their moving outer item (#​15848) (1936c87), closes #​5385 #​1531
• transition: handle comment-wrapped component roots (#​15853) (ff35014), closes #​6080 #​5500

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	postcss@​8.5.30
	@​tdesign/​site-components@​0.19.3 ⏵ 0.19.4	+1		+1	-1
	vue@​3.5.43 ⏵ 3.5.44			+1	+1
	qs@​6.16.0 ⏵ 6.16.1	+1
	tdesign-vue-next@​1.20.9 ⏵ 1.20.10			+1	+1

View full report