@vue/compiler-sfc 3.5.31 → 3.5.33

package/dist/compiler-sfc.cjs.js

@@ -1,5 +1,5 @@
 /**
-* @vue/compiler-sfc v3.5.31
+* @vue/compiler-sfc v3.5.33
 * (c) 2018-present Yuxi (Evan) You and Vue contributors
 * @license MIT
 **/
@@ -8110,6 +8110,8 @@ function processRule(id, rule) {
 function rewriteSelector(id, rule, selector, selectorRoot, deep, slotted = false) {
   let node = null;
   let shouldInject = !deep;
+  let hasNestedDeep = false;
+  let splitForNestedDeep = false;
   selector.each((n) => {
     if (n.type === "combinator" && (n.value === ">>>" || n.value === "/deep/")) {
       n.value = " ";
@@ -8121,6 +8123,49 @@ function rewriteSelector(id, rule, selector, selectorRoot, deep, slotted = false
     }
     if (n.type === "pseudo") {
       const { value } = n;
+      if (isDeepContainerPseudo(n)) {
+        const hasDeepSelectors = n.nodes.some(
+          (selector2) => selector2.some(isDeepSelector)
+        );
+        if (hasDeepSelectors) {
+          const hasScopeAnchor = !!node;
+          const hasMixedSelectors = n.nodes.some(
+            (selector2) => !selector2.some(isDeepSelector)
+          );
+          const hasTrailingNodes = selector.index(n) < selector.length - 1;
+          if (canSplitDeepContainerPseudo(n) && !deep && !hasScopeAnchor && hasMixedSelectors && hasTrailingNodes) {
+            splitSelectorForNestedDeep(
+              id,
+              rule,
+              selector,
+              selectorRoot,
+              n,
+              deep,
+              slotted
+            );
+            splitForNestedDeep = true;
+            return false;
+          }
+          if (value === ":not" && !deep && !hasScopeAnchor && hasMixedSelectors && hasTrailingNodes) {
+            return;
+          }
+          n.nodes.forEach(
+            (selector2) => rewriteSelector(
+              id,
+              rule,
+              selector2,
+              selectorRoot,
+              deep || hasScopeAnchor,
+              slotted
+            )
+          );
+          if (!hasScopeAnchor) {
+            node = n;
+            shouldInject = false;
+          }
+          hasNestedDeep = true;
+        }
+      }
       if (value === ":deep" || value === "::v-deep") {
         rule.__deep = true;
         if (n.nodes.length) {
@@ -8195,10 +8240,13 @@ function rewriteSelector(id, rule, selector, selectorRoot, deep, slotted = false
       }
       if (node) return;
     }
-    if (n.type !== "pseudo" && n.type !== "combinator" || n.type === "pseudo" && (n.value === ":is" || n.value === ":where") && !node) {
+    if (!hasNestedDeep && (n.type !== "pseudo" && n.type !== "combinator" || n.type === "pseudo" && (n.value === ":is" || n.value === ":where") && !node)) {
       node = n;
     }
   });
+  if (splitForNestedDeep) {
+    return;
+  }
   if (rule.nodes.some((node2) => node2.type === "rule")) {
     const deep2 = rule.__deep;
     if (!deep2) {
@@ -8210,7 +8258,7 @@ function rewriteSelector(id, rule, selector, selectorRoot, deep, slotted = false
     }
     shouldInject = deep2;
   }
-  if (node) {
+  if (node && !hasNestedDeep) {
     const { type, value } = node;
     if (type === "pseudo" && (value === ":is" || value === ":where")) {
       node.nodes.forEach(
@@ -8242,6 +8290,38 @@ function rewriteSelector(id, rule, selector, selectorRoot, deep, slotted = false
 function isSpaceCombinator(node) {
   return node.type === "combinator" && /^\s+$/.test(node.value);
 }
+function isDeepSelector(node) {
+  var _a;
+  if (node.type === "pseudo" && (node.value === ":deep" || node.value === "::v-deep")) {
+    return true;
+  }
+  return !!((_a = node.nodes) == null ? void 0 : _a.some((child) => isDeepSelector(child)));
+}
+function isDeepContainerPseudo(node) {
+  return node.type === "pseudo" && (node.value === ":is" || node.value === ":where" || node.value === ":has" || node.value === ":not");
+}
+function canSplitDeepContainerPseudo(node) {
+  return node.value === ":is" || node.value === ":where" || node.value === ":has";
+}
+function splitSelectorForNestedDeep(id, rule, selector, selectorRoot, pseudo, deep, slotted) {
+  const pseudoIndex = selector.index(pseudo);
+  const selectors = pseudo.nodes.map((branch, index) => {
+    const branchSelector = selector.clone();
+    if (branchSelector.first) {
+      branchSelector.first.spaces.before = index === 0 ? selector.first.spaces.before : " ";
+    }
+    const branchPseudo = branchSelector.at(pseudoIndex);
+    const branchClone = branch.clone();
+    if (branchClone.first) {
+      branchClone.first.spaces.before = "";
+    }
+    branchPseudo.removeAll();
+    branchPseudo.append(branchClone);
+    rewriteSelector(id, rule, branchSelector, selectorRoot, deep, slotted);
+    return branchSelector;
+  });
+  selector.replaceWith(...selectors);
+}
 function extractAndWrapNodes(parentNode) {
   if (!parentNode.nodes) return;
   const nodes = parentNode.nodes.filter(
@@ -20189,7 +20269,9 @@ function expand_(str, max, isTop) {
             const x = numeric(n[0]);
             const y = numeric(n[1]);
             const width = Math.max(n[0].length, n[1].length);
-            let incr = n.length === 3 && n[2] !== undefined ? Math.abs(numeric(n[2])) : 1;
+            let incr = n.length === 3 && n[2] !== undefined ?
+                Math.max(Math.abs(numeric(n[2])), 1)
+                : 1;
             let test = lte;
             const reverse = y < x;
             if (reverse) {
@@ -20420,16 +20502,16 @@ const parseClass = (glob, position) => {
 const unescape = (s, { windowsPathsNoEscape = false, magicalBraces = true, } = {}) => {
     if (magicalBraces) {
         return windowsPathsNoEscape ?
-            s.replace(/\[([^\/\\])\]/g, '$1')
+            s.replace(/\[([^/\\])\]/g, '$1')
             : s
-                .replace(/((?!\\).|^)\[([^\/\\])\]/g, '$1$2')
-                .replace(/\\([^\/])/g, '$1');
+                .replace(/((?!\\).|^)\[([^/\\])\]/g, '$1$2')
+                .replace(/\\([^/])/g, '$1');
     }
     return windowsPathsNoEscape ?
-        s.replace(/\[([^\/\\{}])\]/g, '$1')
+        s.replace(/\[([^/\\{}])\]/g, '$1')
         : s
-            .replace(/((?!\\).|^)\[([^\/\\{}])\]/g, '$1$2')
-            .replace(/\\([^\/{}])/g, '$1');
+            .replace(/((?!\\).|^)\[([^/\\{}])\]/g, '$1$2')
+            .replace(/\\([^/{}])/g, '$1');
 };
 
 // parse a single path portion
@@ -20621,15 +20703,14 @@ class AST {
     }
     // reconstructs the pattern
     toString() {
-        if (this.#toString !== undefined)
-            return this.#toString;
-        if (!this.type) {
-            return (this.#toString = this.#parts.map(p => String(p)).join(''));
-        }
-        else {
-            return (this.#toString =
-                this.type + '(' + this.#parts.map(p => String(p)).join('|') + ')');
-        }
+        return (this.#toString !== undefined ? this.#toString
+            : !this.type ?
+                (this.#toString = this.#parts.map(p => String(p)).join(''))
+                : (this.#toString =
+                    this.type +
+                        '(' +
+                        this.#parts.map(p => String(p)).join('|') +
+                        ')'));
     }
     #fillNegs() {
         /* c8 ignore start */
@@ -20909,7 +20990,7 @@ class AST {
     }
     #canUsurpType(c) {
         const m = usurpMap.get(this.type);
-        return !!(m?.has(c));
+        return !!m?.has(c);
     }
     #canUsurp(child) {
         if (!child ||
@@ -21307,7 +21388,7 @@ const minimatch = (p, pattern, options = {}) => {
     return new Minimatch(pattern, options).match(p);
 };
 // Optimized checking for the most common glob patterns.
-const starDotExtRE = /^\*+([^+@!?\*\[\(]*)$/;
+const starDotExtRE = /^\*+([^+@!?*[(]*)$/;
 const starDotExtTest = (ext) => (f) => !f.startsWith('.') && f.endsWith(ext);
 const starDotExtTestDot = (ext) => (f) => f.endsWith(ext);
 const starDotExtTestNocase = (ext) => {
@@ -21326,7 +21407,7 @@ const dotStarTest = (f) => f !== '.' && f !== '..' && f.startsWith('.');
 const starRE = /^\*+$/;
 const starTest = (f) => f.length !== 0 && !f.startsWith('.');
 const starTestDot = (f) => f.length !== 0 && f !== '.' && f !== '..';
-const qmarksRE = /^\?+([^+@!?\*\[\(]*)?$/;
+const qmarksRE = /^\?+([^+@!?*[(]*)?$/;
 const qmarksTestNocase = ([$0, ext = '']) => {
     const noext = qmarksTestNoExt([$0]);
     if (!ext)
@@ -21553,6 +21634,7 @@ class Minimatch {
         // step 2: expand braces
         this.globSet = [...new Set(this.braceExpand())];
         if (options.debug) {
+            //oxlint-disable-next-line no-console
             this.debug = (...args) => console.error(...args);
         }
         this.debug(this.pattern, this.globSet);
@@ -21615,10 +21697,10 @@ class Minimatch {
     preprocess(globParts) {
         // if we're not in globstar mode, then turn ** into *
         if (this.options.noglobstar) {
-            for (let i = 0; i < globParts.length; i++) {
-                for (let j = 0; j < globParts[i].length; j++) {
-                    if (globParts[i][j] === '**') {
-                        globParts[i][j] = '*';
+            for (const partset of globParts) {
+                for (let j = 0; j < partset.length; j++) {
+                    if (partset[j] === '**') {
+                        partset[j] = '*';
                     }
                 }
             }
@@ -21706,7 +21788,11 @@ class Minimatch {
             let dd = 0;
             while (-1 !== (dd = parts.indexOf('..', dd + 1))) {
                 const p = parts[dd - 1];
-                if (p && p !== '.' && p !== '..' && p !== '**') {
+                if (p &&
+                    p !== '.' &&
+                    p !== '..' &&
+                    p !== '**' &&
+                    !(this.isWindows && /^[a-z]:$/i.test(p))) {
                     didSomething = true;
                     parts.splice(dd - 1, 2);
                     dd -= 2;
@@ -21955,15 +22041,17 @@ class Minimatch {
         // split the pattern up into globstar-delimited sections
         // the tail has to be at the end, and the others just have
         // to be found in order from the head.
-        const [head, body, tail] = partial ? [
-            pattern.slice(patternIndex, firstgs),
-            pattern.slice(firstgs + 1),
-            [],
-        ] : [
-            pattern.slice(patternIndex, firstgs),
-            pattern.slice(firstgs + 1, lastgs),
-            pattern.slice(lastgs + 1),
-        ];
+        const [head, body, tail] = partial ?
+            [
+                pattern.slice(patternIndex, firstgs),
+                pattern.slice(firstgs + 1),
+                [],
+            ]
+            : [
+                pattern.slice(patternIndex, firstgs),
+                pattern.slice(firstgs + 1, lastgs),
+                pattern.slice(lastgs + 1),
+            ];
         // check the head, from the current file/pattern index.
         if (head.length) {
             const fileHead = file.slice(fileIndex, fileIndex + head.length);
@@ -22309,7 +22397,7 @@ class Minimatch {
             this.regexp = new RegExp(re, [...flags].join(''));
             /* c8 ignore start */
         }
-        catch (ex) {
+        catch {
             // should be impossible
             this.regexp = false;
         }
@@ -22324,7 +22412,7 @@ class Minimatch {
         if (this.preserveMultipleSlashes) {
             return p.split('/');
         }
-        else if (this.isWindows && /^\/\/[^\/]+/.test(p)) {
+        else if (this.isWindows && /^\/\/[^/]+/.test(p)) {
             // add an extra '' for the one we lose
             return ['', ...p.split(/\/+/)];
         }
@@ -22366,8 +22454,7 @@ class Minimatch {
                 filename = ff[i];
             }
         }
-        for (let i = 0; i < set.length; i++) {
-            const pattern = set[i];
+        for (const pattern of set) {
             let file = ff;
             if (options.matchBase && pattern.length === 1) {
                 file = [filename];
@@ -25583,7 +25670,7 @@ function mergeSourceMaps(scriptMap, templateMap, templateLineOffset) {
   return generator.toJSON();
 }
 
-const version = "3.5.31";
+const version = "3.5.33";
 const parseCache = parseCache$1;
 const errorMessages = {
   ...CompilerDOM.errorMessages,

package/dist/compiler-sfc.esm-browser.js

@@ -1,5 +1,5 @@
 /**
-* @vue/compiler-sfc v3.5.31
+* @vue/compiler-sfc v3.5.33
 * (c) 2018-present Yuxi (Evan) You and Vue contributors
 * @license MIT
 **/
@@ -34270,6 +34270,18 @@ function requireStringifier () {
 	if (hasRequiredStringifier) return stringifier;
 	hasRequiredStringifier = 1;
 
+	// Escapes sequences that could break out of an HTML <style> context.
+	// Uses CSS unicode escaping (\3c = '<') which is valid CSS and parsed
+	// correctly by all compliant CSS consumers.
+	const STYLE_TAG = /(<)(\/?style\b)/gi;
+	const COMMENT_OPEN = /(<)(!--)/g;
+
+	function escapeHTMLInCSS(str) {
+	  if (typeof str !== 'string') return str
+	  if (!str.includes('<')) return str
+	  return str.replace(STYLE_TAG, '\\3c $2').replace(COMMENT_OPEN, '\\3c $2')
+	}
+
 	const DEFAULT_RAW = {
 	  after: '\n',
 	  beforeClose: '\n',
@@ -34308,7 +34320,7 @@ function requireStringifier () {
 	      this.block(node, name + params);
 	    } else {
 	      let end = (node.raws.between || '') + (semicolon ? ';' : '');
-	      this.builder(name + params + end, node);
+	      this.builder(escapeHTMLInCSS(name + params + end), node);
 	    }
 	  }
 
@@ -34343,7 +34355,7 @@ function requireStringifier () {
 
 	  block(node, start) {
 	    let between = this.raw(node, 'between', 'beforeOpen');
-	    this.builder(start + between + '{', node, 'start');
+	    this.builder(escapeHTMLInCSS(start + between) + '{', node, 'start');
 
 	    let after;
 	    if (node.nodes && node.nodes.length) {
@@ -34353,7 +34365,7 @@ function requireStringifier () {
 	      after = this.raw(node, 'after', 'emptyBody');
 	    }
 
-	    if (after) this.builder(after);
+	    if (after) this.builder(escapeHTMLInCSS(after));
 	    this.builder('}', node, 'end');
 	  }
 
@@ -34365,10 +34377,11 @@ function requireStringifier () {
 	    }
 
 	    let semicolon = this.raw(node, 'semicolon');
+	    let isDocument = node.type === 'document';
 	    for (let i = 0; i < node.nodes.length; i++) {
 	      let child = node.nodes[i];
 	      let before = this.raw(child, 'before');
-	      if (before) this.builder(before);
+	      if (before) this.builder(isDocument ? before : escapeHTMLInCSS(before));
 	      this.stringify(child, last !== i || semicolon);
 	    }
 	  }
@@ -34376,7 +34389,7 @@ function requireStringifier () {
 	  comment(node) {
 	    let left = this.raw(node, 'left', 'commentLeft');
 	    let right = this.raw(node, 'right', 'commentRight');
-	    this.builder('/*' + left + node.text + right + '*/', node);
+	    this.builder(escapeHTMLInCSS('/*' + left + node.text + right + '*/'), node);
 	  }
 
 	  decl(node, semicolon) {
@@ -34388,7 +34401,7 @@ function requireStringifier () {
 	    }
 
 	    if (semicolon) string += ';';
-	    this.builder(string, node);
+	    this.builder(escapeHTMLInCSS(string), node);
 	  }
 
 	  document(node) {
@@ -34594,13 +34607,17 @@ function requireStringifier () {
 
 	  root(node) {
 	    this.body(node);
-	    if (node.raws.after) this.builder(node.raws.after);
+	    if (node.raws.after) {
+	      let after = node.raws.after;
+	      let isDocument = node.parent && node.parent.type === 'document';
+	      this.builder(isDocument ? after : escapeHTMLInCSS(after));
+	    }
 	  }
 
 	  rule(node) {
 	    this.block(node, this.rawValue(node, 'selector'));
 	    if (node.raws.ownSemicolon) {
-	      this.builder(node.raws.ownSemicolon, node, 'end');
+	      this.builder(escapeHTMLInCSS(node.raws.ownSemicolon), node, 'end');
 	    }
 	  }
 
@@ -35799,7 +35816,8 @@ function requirePreviousMap () {
 	      return fromBase64(text.substr(baseUriMatch[0].length))
 	    }
 
-	    let encoding = text.match(/data:application\/json;([^,]+),/)[1];
+	    let encoding = text.slice('data:application/json;'.length);
+	    encoding = encoding.slice(0, encoding.indexOf(','));
 	    throw new Error('Unsupported source map encoding ' + encoding)
 	  }
 
@@ -36042,7 +36060,15 @@ function requireInput () {
 	      );
 	    }
 
-	    result.input = { column, endColumn, endLine, endOffset, line, offset, source: this.css };
+	    result.input = {
+	      column,
+	      endColumn,
+	      endLine,
+	      endOffset,
+	      line,
+	      offset,
+	      source: this.css
+	    };
 	    if (this.file) {
 	      if (pathToFileURL) {
 	        result.input.url = pathToFileURL(this.file).toString();
@@ -38135,7 +38161,7 @@ function requireNoWorkResult () {
 
 	let MapGenerator = /*@__PURE__*/ requireMapGenerator();
 	let parse = /*@__PURE__*/ requireParse();
-	const Result = /*@__PURE__*/ requireResult();
+	let Result = /*@__PURE__*/ requireResult();
 	let stringify = /*@__PURE__*/ requireStringify();
 	let warnOnce = /*@__PURE__*/ requireWarnOnce();
 
@@ -38285,7 +38311,7 @@ function requireProcessor$1 () {
 
 	class Processor {
 	  constructor(plugins = []) {
-	    this.version = '8.5.8';
+	    this.version = '8.5.10';
 	    this.plugins = this.normalize(plugins);
 	  }
 
@@ -42186,6 +42212,8 @@ function processRule(id, rule) {
 function rewriteSelector(id, rule, selector, selectorRoot, deep, slotted = false) {
   let node = null;
   let shouldInject = !deep;
+  let hasNestedDeep = false;
+  let splitForNestedDeep = false;
   selector.each((n) => {
     if (n.type === "combinator" && (n.value === ">>>" || n.value === "/deep/")) {
       n.value = " ";
@@ -42197,6 +42225,49 @@ function rewriteSelector(id, rule, selector, selectorRoot, deep, slotted = false
     }
     if (n.type === "pseudo") {
       const { value } = n;
+      if (isDeepContainerPseudo(n)) {
+        const hasDeepSelectors = n.nodes.some(
+          (selector2) => selector2.some(isDeepSelector)
+        );
+        if (hasDeepSelectors) {
+          const hasScopeAnchor = !!node;
+          const hasMixedSelectors = n.nodes.some(
+            (selector2) => !selector2.some(isDeepSelector)
+          );
+          const hasTrailingNodes = selector.index(n) < selector.length - 1;
+          if (canSplitDeepContainerPseudo(n) && !deep && !hasScopeAnchor && hasMixedSelectors && hasTrailingNodes) {
+            splitSelectorForNestedDeep(
+              id,
+              rule,
+              selector,
+              selectorRoot,
+              n,
+              deep,
+              slotted
+            );
+            splitForNestedDeep = true;
+            return false;
+          }
+          if (value === ":not" && !deep && !hasScopeAnchor && hasMixedSelectors && hasTrailingNodes) {
+            return;
+          }
+          n.nodes.forEach(
+            (selector2) => rewriteSelector(
+              id,
+              rule,
+              selector2,
+              selectorRoot,
+              deep || hasScopeAnchor,
+              slotted
+            )
+          );
+          if (!hasScopeAnchor) {
+            node = n;
+            shouldInject = false;
+          }
+          hasNestedDeep = true;
+        }
+      }
       if (value === ":deep" || value === "::v-deep") {
         rule.__deep = true;
         if (n.nodes.length) {
@@ -42271,10 +42342,13 @@ function rewriteSelector(id, rule, selector, selectorRoot, deep, slotted = false
       }
       if (node) return;
     }
-    if (n.type !== "pseudo" && n.type !== "combinator" || n.type === "pseudo" && (n.value === ":is" || n.value === ":where") && !node) {
+    if (!hasNestedDeep && (n.type !== "pseudo" && n.type !== "combinator" || n.type === "pseudo" && (n.value === ":is" || n.value === ":where") && !node)) {
       node = n;
     }
   });
+  if (splitForNestedDeep) {
+    return;
+  }
   if (rule.nodes.some((node2) => node2.type === "rule")) {
     const deep2 = rule.__deep;
     if (!deep2) {
@@ -42286,7 +42360,7 @@ function rewriteSelector(id, rule, selector, selectorRoot, deep, slotted = false
     }
     shouldInject = deep2;
   }
-  if (node) {
+  if (node && !hasNestedDeep) {
     const { type, value } = node;
     if (type === "pseudo" && (value === ":is" || value === ":where")) {
       node.nodes.forEach(
@@ -42318,6 +42392,38 @@ function rewriteSelector(id, rule, selector, selectorRoot, deep, slotted = false
 function isSpaceCombinator(node) {
   return node.type === "combinator" && /^\s+$/.test(node.value);
 }
+function isDeepSelector(node) {
+  var _a;
+  if (node.type === "pseudo" && (node.value === ":deep" || node.value === "::v-deep")) {
+    return true;
+  }
+  return !!((_a = node.nodes) == null ? void 0 : _a.some((child) => isDeepSelector(child)));
+}
+function isDeepContainerPseudo(node) {
+  return node.type === "pseudo" && (node.value === ":is" || node.value === ":where" || node.value === ":has" || node.value === ":not");
+}
+function canSplitDeepContainerPseudo(node) {
+  return node.value === ":is" || node.value === ":where" || node.value === ":has";
+}
+function splitSelectorForNestedDeep(id, rule, selector, selectorRoot, pseudo, deep, slotted) {
+  const pseudoIndex = selector.index(pseudo);
+  const selectors = pseudo.nodes.map((branch, index) => {
+    const branchSelector = selector.clone();
+    if (branchSelector.first) {
+      branchSelector.first.spaces.before = index === 0 ? selector.first.spaces.before : " ";
+    }
+    const branchPseudo = branchSelector.at(pseudoIndex);
+    const branchClone = branch.clone();
+    if (branchClone.first) {
+      branchClone.first.spaces.before = "";
+    }
+    branchPseudo.removeAll();
+    branchPseudo.append(branchClone);
+    rewriteSelector(id, rule, branchSelector, selectorRoot, deep, slotted);
+    return branchSelector;
+  });
+  selector.replaceWith(...selectors);
+}
 function extractAndWrapNodes(parentNode) {
   if (!parentNode.nodes) return;
   const nodes = parentNode.nodes.filter(
@@ -50823,7 +50929,7 @@ var __spreadValues = (a, b) => {
     }
   return a;
 };
-const version = "3.5.31";
+const version = "3.5.33";
 const parseCache = parseCache$1;
 const errorMessages = __spreadValues(__spreadValues({}, errorMessages$1), DOMErrorMessages);
 const walk = walk$2;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vue/compiler-sfc",
-  "version": "3.5.31",
+  "version": "3.5.33",
   "description": "@vue/compiler-sfc",
   "main": "dist/compiler-sfc.cjs.js",
   "module": "dist/compiler-sfc.esm-browser.js",
@@ -45,12 +45,12 @@
     "@babel/parser": "^7.29.2",
     "estree-walker": "^2.0.2",
     "magic-string": "^0.30.21",
-    "postcss": "^8.5.8",
+    "postcss": "^8.5.10",
     "source-map-js": "^1.2.1",
-    "@vue/compiler-core": "3.5.31",
-    "@vue/compiler-dom": "3.5.31",
-    "@vue/shared": "3.5.31",
-    "@vue/compiler-ssr": "3.5.31"
+    "@vue/compiler-core": "3.5.33",
+    "@vue/shared": "3.5.33",
+    "@vue/compiler-dom": "3.5.33",
+    "@vue/compiler-ssr": "3.5.33"
   },
   "devDependencies": {
     "@babel/types": "^7.29.0",
@@ -58,10 +58,10 @@
     "hash-sum": "^2.0.0",
     "lru-cache": "10.1.0",
     "merge-source-map": "^1.1.0",
-    "minimatch": "~10.2.4",
+    "minimatch": "~10.2.5",
     "postcss-modules": "^6.0.1",
     "postcss-selector-parser": "^7.1.1",
     "pug": "^3.0.4",
-    "sass": "^1.98.0"
+    "sass": "^1.99.0"
   }
 }