build(deps): bump postcss-selector-parser and eslint-plugin-vue

[dependabot]

Bumps postcss-selector-parser to 7.1.6 and updates ancestor dependency eslint-plugin-vue. These dependencies need to be updated together.

Updates postcss-selector-parser from 6.1.4 to 7.1.6

Release notes

Sourced from postcss-selector-parser's releases.

7.1.6

• fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)

7.1.5

• fix: don't treat a non-prefix token before | as a namespace (#324 by @​spokodev)
• fix: preserve whitespace before a * namespace in attribute selectors (#325 by @​spokodev)
• fix: TypeError on unclosed [, ( and trailing | (#330 by @​theRizwan)

7.1.4

• fix: tolerate non-node children when serializing selectors

7.1.3

• Improve fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (clone/walk)

7.1.2

• Fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (#316 by @​MoOx)

v7.1.1

7.1.1

• perf: replace startsWith with strict equality (#308)
• fix(types): add walkUniversal declaration (#311)

v7.1.0

7.1.0

• feat: insert(Before|After) support multiple new node

v7.0.0

7.0.0

• Feat: make insertions during iteration safe (major)

Changelog

Sourced from postcss-selector-parser's changelog.

7.1.6 - 2026-09-03

• fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)

7.1.5 - 2026-08-07

• fix: don't treat a non-prefix token before | as a namespace (#324 by @​spokodev)
• fix: preserve whitespace before a * namespace in attribute selectors (#325 by @​spokodev)
• fix: TypeError on unclosed [, ( and trailing | (#330 by @​theRizwan)

7.1.4 - 2026-06-11

• fix: tolerate non-node children when serializing selectors

7.1.3 - 2026-06-11

• Improve fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (clone/walk)

7.1.2 - 2026-06-09

• Fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (#316 by @​MoOx)

7.1.1

• perf: replace startsWith with strict equality (#308)
• fix(types): add walkUniversal declaration (#311)

7.1.0

• feat: insert(Before|After) support multiple new node

7.0.0

• Feat: make insertions during iteration safe (major)

6.1.2

• Fixed: erroneous trailing combinators in pseudos

6.1.1

• Fixed: improve typings of constructor helpers (#292)

6.1.0

• Feature: add sourceIndex to Selector nodes (#290)

6.0.16

... (truncated)

Commits

• 4eb3468 7.1.6
• 62b1917 fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability
• e33e9bc 7.1.5
• 6f4e6c1 fix: TypeError on unclosed [, ( and trailing | (#330)
• 4d8437f fix: preserve whitespace before a * namespace in attribute selectors (#325)
• e2f9029 fix: don't treat a non-prefix token before | as a namespace (#324)
• dd50ee1 chore(deps-dev): bump postcss from 8.5.18 to 8.5.23 (#331)
• 7e3abb2 chore(deps-dev): bump postcss from 8.5.15 to 8.5.18 (#328)
• See full diff in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates eslint-plugin-vue from 9.33.0 to 10.11.1

Release notes

Sourced from eslint-plugin-vue's releases.

v10.11.1

Patch Changes

• Fixed vue/no-ref-object-reactivity-loss false negatives for values gotten in an immediately invoked function expression (IIFE) (#3115)
• Fixed vue/no-unused-properties false positive for props explicitly typed as never (#3113)
• Fixed vue/require-default-prop to no longer require a default value for defineModel (#3138)

v10.11.0

Minor Changes

• Added defineModel support to vue/require-default-prop and vue/require-valid-default-prop rules (#3032)
• Added support for SFCs using @nuxtjs/composition-api, which is now treated the same as vue or @vue/composition-api (#3100)
• Added new vue/no-shadow-native-events rule (#2558)

Patch Changes

• Fixed vue/use-v-on-exact to avoid reporting @keydown.stop when paired with an exact key-specific listener (#3082)
• Specified explicit items policies for array rule option schemas (#3112)
• Updated resources (HTML elements) (#3132 and #3133)

v10.10.0

Minor Changes

• Added support for template literals to vue/prefer-separate-static-class (#3097)
• Added allowLineSeparatedGroups option to vue/sort-keys rule (#3084)

Patch Changes

• Updated @eslint-community/eslint-utils, semver and xml-name-validator dependencies (#3094)

v10.9.2

Patch Changes

• Fixed vue/custom-event-name-casing to check segments of colon-separated event names like update:foo-bar (#3079)
• Fixed vue/one-component-per-file to not report functions not imported from Vue (#3063)
• Fixed vue/prefer-import-from-vue to not report imports/exports of names that are not re-exported by vue (#3081)
• Fixed vue/return-in-computed-property and vue/require-render-return to not report exhaustive switch statements when TypeScript type information is available (#3067)

v10.9.1

Patch Changes

• Updated peer dependency version for vue-eslint-parser to fix parsing errors in Vue SFCs (#3075)

v10.9.0

Minor Changes

• Added "inject" to groups option in vue/no-unused-properties rule (#3052)
• Added new ignores option to vue/no-literals-in-template rule (#3072)
• Added support for :single-line/:multi-line pseudo-classes in vue/padding-line-between-tags (#3025)
• Added new vue/prefer-v-model rule (#3062)

... (truncated)

Changelog

Sourced from eslint-plugin-vue's changelog.

10.11.1

Patch Changes

• Fixed vue/no-ref-object-reactivity-loss false negatives for values gotten in an immediately invoked function expression (IIFE) (#3115)
• Fixed vue/no-unused-properties false positive for props explicitly typed as never (#3113)
• Fixed vue/require-default-prop to no longer require a default value for defineModel (#3138)

10.11.0

Minor Changes

• Added defineModel support to vue/require-default-prop and vue/require-valid-default-prop rules (#3032)
• Added support for SFCs using @nuxtjs/composition-api, which is now treated the same as vue or @vue/composition-api (#3100)
• Added new vue/no-shadow-native-events rule (#2558)

Patch Changes

• Fixed vue/use-v-on-exact to avoid reporting @keydown.stop when paired with an exact key-specific listener (#3082)
• Specified explicit items policies for array rule option schemas (#3112)
• Updated resources (HTML elements) (#3132 and #3133)

10.10.0

Minor Changes

• Added support for template literals to vue/prefer-separate-static-class (#3097)
• Added allowLineSeparatedGroups option to vue/sort-keys rule (#3084)

Patch Changes

• Updated @eslint-community/eslint-utils, semver and xml-name-validator dependencies (#3094)

10.9.2

Patch Changes

• Fixed vue/custom-event-name-casing to check segments of colon-separated event names like update:foo-bar (#3079)
• Fixed vue/one-component-per-file to not report functions not imported from Vue (#3063)
• Fixed vue/prefer-import-from-vue to not report imports/exports of names that are not re-exported by vue (#3081)
• Fixed vue/return-in-computed-property and vue/require-render-return to not report exhaustive switch statements when TypeScript type information is available (#3067)

10.9.1

Patch Changes

• Updated peer dependency version for vue-eslint-parser to fix parsing errors in Vue SFCs (#3075)

10.9.0

... (truncated)

Commits

• ec9c53a Version Packages (#3139)
• 50ffb7f docs: explain how to apply the configs to a subset of files (#3122)
• ad239b4 fix(no-unused-properties): ignore props typed as never (#3113)
• 24cb5bc fix(no-ref-object-reactivity-loss): improve IIFE handling (#3115)
• ef6f53e fix(require-default-prop): don't report on defineModel (#3138)
• 121030c Format changelog
• 97c5634 Version Packages (#3106)
• abe8bef Update resources (#3133)
• f3a0276 Make wording in changeset more consistent
• 87cd113 Update resources (#3132)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-vue since your current version.