chore(deps-dev): Bump @vue/cli-service from 4.5.8 to 4.5.15

[dependabot[bot]]

Bumps @vue/cli-service from 4.5.8 to 4.5.15.

Release notes

Sourced from @​vue/cli-service's releases.

v4.5.15

Bug Fixes

• fix: set .mjs file type to javascript/auto [15b1e1b]

This change allows an .mjs file to import named exports from .cjs and plain .js files. Fixes compatibility with pinia.

v4.5.14

Security Fixes

This version fixed a CORS vulnerability and an XSS vulnerability in Vue CLI UI. We recommend all users of vue ui to upgrade to this version as soon as possible.

Credits:

Ngo Wei Lin (@​Creastery) of STAR Labs (@​starlabs_sg)

v4.5.13

:bug: Bug Fix

• @vue/babel-preset-app
  • #6459 fix: fix modern mode optional chaining syntax tranpilation (@​sodatea)
• @vue/cli-plugin-unit-mocha
  • #6400 fix(mocha): workaround the SVGElement issue in Vue 3 (@​fangbinwei)
• @vue/cli-service
  • #6455 fix: get rid of ssri vulnerability warnings (@​sodatea)

Others

• #6300 chore: remove the word "Preview" from vue 3 preset (@​sodatea)

Committers: 3

• Binwei Fang (@​fangbinwei)
• Haoqun Jiang (@​sodatea)
• Tony Trinh (@​tony19)

v4.5.12

• bump vue-codemod to work around an NPM hoisting bug
• bump minimum required JSX preset / plugin versions, fixes vuejs/jsx#183
• bump default typescript version to 4.1 and prettier version to 2.x for new projects, fixes #6299

v4.5.11

:bug: Bug Fix

• @vue/cli
  • #6207 fix: support basic auth for npm registry access (@​bodograumann)
• @vue/cli-ui
  • 5ce117b chore: bump node-notifier (@​sodatea)

Committers: 1

• Bodo Graumann (@​bodograumann)
• Haoqun Jiang (@​sodatea)

... (truncated)

Changelog

Sourced from @​vue/cli-service's changelog.

5.0.0-beta.7 (2021-10-26)

:rocket: New Features

• @vue/cli-service
  • #6771 feat!: remove url-loader and file-loader in favor of asset modules (@​sodatea)
  • #6752 Add a top-level terser option to allow users to customize the minifier (@​screetBloom)

:boom: Breaking Changes

• @vue/cli-service
  • #6781 fix!: set hashFunction to xxhash64 to fix Node 17 compatibility (@​sodatea)
  • #6771 feat!: remove url-loader and file-loader in favor of asset modules (@​sodatea)

:bug: Bug Fix

• @vue/cli-service
  • #6781 fix!: set hashFunction to xxhash64 to fix Node 17 compatibility (@​sodatea)
• @vue/cli-plugin-unit-jest
  • #6775 fix(migrator): fix invalid semver (@​stefanlivens)

Committers: 3

• FM (@​screetBloom)
• Haoqun Jiang (@​sodatea)
• @​stefanlivens

5.0.0-beta.6 (2021-10-14)

:rocket: New Features

• @vue/cli-plugin-eslint, @vue/cli-service
  • #6748 feat: switch to stylish formatter for eslint (@​cexbrayat)

Committers: 1

• Cédric Exbrayat (@​cexbrayat)

Security Fixes

This version fixed a CORS vulnerability and an XSS vulnerability in Vue CLI UI. We recommend all users of vue ui to upgrade to this version as soon as possible.

Credits:

Ngo Wei Lin (@​Creastery) of STAR Labs (@​starlabs_sg)

5.0.0-beta.5 (2021-10-10)

:rocket: New Features

• @vue/cli-plugin-eslint, @vue/cli-service
  • #6714 feat(cli-plugin-eslint): use ESLint class instead of CLIEngine (@​ota-meshi)

... (truncated)

Commits

• 22a8a78 v4.5.15
• 15b1e1b fix: set .mjs file type to javascript/auto
• f128c0c v4.5.14
• 6e0d846 v4.5.13
• 0e0ae95 fix(v4): get rid of ssri vulnerability warnings (#6455)
• b0de229 v4.5.12
• cf7b46a v4.5.11
• 5bc8c80 v4.5.10
• 76a0418 fix(mocha): disable SSR optimization for Vue 3 testing (#6097)
• ed2cf22 fix: using lang attribute with empty string in html template (#5992)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)