fix(deps): update runtime-deps

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@vue/reactivity (source)	^3.5.39 → ^3.5.41
dexie (source)	^4.4.4 → ^4.4.5
protobufjs	^8.6.5 → ^8.7.2

---

Release Notes

vuejs/core (@​vue/reactivity)

v3.5.41

Compare Source

Bug Fixes

• compiler-core: preserve vnode lifecycle in stable v-for (#​11682) (02421cd), closes #​9239 #​12569
• compiler-sfc: handle transformed template AST after cache invalidation (#​15136) (a4440c0), closes #​15126 #​15128
• custom-element: preserve nested async mount order (#​15154) (71f9ff5), closes #​15153
• custom-element: warn when props override native properties (#​12125) (22b53ea), closes #​12124
• runtime-core: avoid re-fetching resource props with unchanged values (#​15105) (a7513a1)
• runtime-core: restore SSR setup state when handling async setup result (#​15114) (b6191cb), closes #​15113
• scheduler: avoid stack overflow when flushing very large post cb arrays (#​15143) (c04a45d), closes #​15142
• slots: handle nullish v-bind slot props (#​15177) (2506700)
• ssr: normalize hidden states during hydration (#​13125) (4e467d7)
• transition: support transition to teleport component child (#​11959) (77061fe), closes #​11910
• types: preserve defineModel inference with factory defaults (#​15097) (0516c43), closes #​15096
• v-model: preserve text input before hydration (#​14411) (2468464), closes #​14403

v3.5.40

Compare Source

Bug Fixes

• compiler-core: avoid leaking slot branch keys (#​15051) (20c9d26), closes #​15048
• hydration: pass namespace when patching dynamic props (#​15082) (e0d2723), closes #​15081 #​15050
• reactivity: handle effect removal during scope stop (#​15084) (378f978), closes #​15083
• runtime-core: skip lazy hydration for detached roots (#​15092) (97f3525), closes #​15091
• runtime-core: unwind dangling blocks when slot content throws (#​15071) (ddc132d), closes #​15070
• runtime-dom: respect current select model type (#​15010) (eb89e93), closes #​15009
• server-renderer: handle errors in optimized component renders (#​12601) (474907c), closes #​12575
• server-renderer: remove package dependency cycle (#​15063) (4d35eca)
• shared: prevent SSR comment escaping from creating closing delimiters (#​15045) (bd962bb)
• types: don't constrain component $el type to Element (#​15040) (164460a)

dexie/Dexie.js (dexie)

v4.4.5: Dexie v4.4.5

Compare Source

This is a maintenance release that fixes an issue with indexes named after inherited Object properties and improves authentication recovery in dexie-cloud-addon.

Related Package Releases

Package	Version
dexie	4.4.5
dexie-cloud-addon	4.4.14
dexie-react-hooks	4.4.0 (no change)
y-dexie	4.4.0 (no change)
dexie-export-import	4.4.0 (no change)

Bug Fixes

dexie@​4.4.5

• fix: don't crash when an index is named constructor — Tables with a primary key or index named constructor could cause db.open() to fail with TypeError: indexList.push is not a function. The internal index lookup now uses an object without a prototype, avoiding collisions with inherited Object.prototype properties such as constructor, toString, and valueOf. (#​2325, fixes #​1920). Contributed by @​tarann26.

dexie-cloud-addon@​4.4.14

• fix: recover from failed refresh-token renewal — When a locally unexpired refresh token is rejected by the server, login() now falls back to the regular fetchTokens authentication path instead of propagating the refresh error. This allows custom authentication integrations to silently obtain new tokens when possible, or trigger their normal login flow when required. OAuth redirect errors continue to propagate normally. (#​2326). Fixed by @​liz709 and @​dfahlander.

protobufjs/protobuf.js (protobufjs)

v8.7.2

Compare Source

Bug Fixes

• Also use TextDecoder for loose UTF-8 decoding (#​2408) (5851a3b)
• Parse numeric defaults according to field type (#​2402) (bb2d836)
• Parse numeric descriptor defaults by field type (#​2406) (09f24ec)
• preserve first enum alias from JSON descriptors (#​2389) (8304739)
• Preserve negative zero in codegen formatters (#​2403) (92ddc9b)
• Preserve non-finite defaults in toObject (#​2393) (a38b925)

Performance Improvements

• Optimize writer allocs and packed varint reads (#​2405) (64cc8f1)

v8.7.1

Compare Source

Bug Fixes

• accept repeated NullValue elements in ProtoJSON (#​2373) (ad0b9bb)
• Apply enum options regardless of declaration order (#​2384) (b5009b0)
• Base64-encode bytes field defaults in toObject (#​2375) (e552511)
• cli: Handle extensions during sparse generation (#​2386) (1965d37)
• cli: Match declaration imports to generated modules (#​2385) (3cf7420)
• cli: Preserve array element union precedence in pbts (#​2378) (2a697a5)
• cli: Resolve imports from cwd by default (#​2381) (65f659a)
• Merge repeated message-valued fields within map entries (#​2364) (13b417b)
• Parse aggregate objects in option arrays (#​2379) (71c2532)
• Parse Any type URLs in aggregate options (#​2383) (666fa6b)
• Parse bracketed special field names in options (#​2377) (dd1870b)
• Parse map fields inside groups (#​2382) (8a2c427)
• Preserve proto names in bundled definitions (#​2390) (7ba0557)
• Remove circular LongBits dependency (#​2387) (829f5cd)

v8.7.0

Compare Source

Features

• Rework encoder architecture and add additional fast paths (#​2359) (e912baf)

Bug Fixes

• Preserve parsed json_name in field options (#​2363) (1cdd91e)
• Reject truncated declarations without TypeError (#​2358) (5995f2a)
• Resolve feature defaults before lazy codegen (d59d100)

v8.6.6

Compare Source

Bug Fixes

• Filter Any type_url lookups to message types (#​2346) (88f0aa1)
• handle EOF during options parsing (#​2352) (fa5c73a)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.