Bump the npm-minor-patch group across 1 directory with 7 updates

[dependabot]

Bumps the npm-minor-patch group with 7 updates in the /elixir_dss/static/vendor directory:

Package	From	To
@fontsource/roboto	5.2.8	5.2.10
chart.js	4.5.0	4.5.1
datatables.net	2.3.4	2.3.8
datatables.net-bs5	2.3.4	2.3.8
handlebars	4.7.8	4.7.9
tinymce	8.1.2	8.5.0
sass	1.93.2	1.99.0

Updates @fontsource/roboto from 5.2.8 to 5.2.10

Commits

• See full diff in compare view

Updates chart.js from 4.5.0 to 4.5.1

Release notes

Sourced from chart.js's releases.

v4.5.1

Essential Links

• npm
• Migration guide
• Docs
• API
• Samples

Bugs Fixed

• #12098 Do not notify plugins after their uninstall function has been called
• #12096 Sync Doughnut chart legend options to legend plugin
• #12097 Attempt fixing charts shrinking on certain zoom values in Chrome

Types

• #12122 fix(types): add drawingArea to RadialLinearScale
• #12120 fix(types): allow null for line chart point values (#12027)
• #12099 Add data.datasets[].tooltip.callbacks to Typescript types

Development

• #12132 Bump version to 4.5.1
• #12118 Bump actions/setup-node from 4 to 5

Thanks to @​LeeLenaleee, @​anshukushwaha07, @​bojidar-bg, @​dependabot[bot] and dependabot[bot]

Commits

• 9c5cf9f Bump version to 4.5.1 (#12132)
• e275269 fix(types): add drawingArea to RadialLinearScale (#12122)
• a5262b1 fix(types): allow null for line chart point values (#12027) (#12120)
• be2740b Bump actions/setup-node from 4 to 5 (#12118)
• 6372280 Do not notify plugins after their uninstall function has been called (#12098)
• 4a62c17 Add data.datasets[].tooltip.callbacks to Typescript types (#12099)
• beb77e4 Sync Doughnut chart legend options to legend plugin (#12096)
• 5feebdf Fix charts shinking in size on certain Zoom values in Chrome (#12097)
• See full diff in compare view

Updates datatables.net from 2.3.4 to 2.3.8

Release notes

Sourced from datatables.net's releases.

2.3.8

DataTables 2.3.8

2.3.7

DataTables 2.3.7

Commits

• 77dd1e1 Sync tag release - 2.3.8
• f5a2ee7 6e7650e79da74bde9779f59a3cbb24d3384851f4 Release 2.3.8
• 3411f7b 2b908b9e2c3a8404e86a831b1c7e98d3ca587f56 Fix: If the table holds no data for ...
• 41348f2 00c4f1a0efba92ea4f012d78665ee1a4c23ee4d8 Fix: Improved timezone support for d...
• b7499d4 488b52aea869cbb8a06645c1d67146707fd97436 Fix: Don't mix UTC and timezone proc...
• bae3881 ebb386114c96d890c388b090fbb72ffc2a032134 Fix: Keyboard tabbing will no longer...
• fa97770 bc937dbb0b17ba8f6c4fa74d829a410e257c3ad5 Dev: use the release feed for cdn ex...
• a303432 Tweak package description
• a8e7d5f Merge branch 'master' of github.com:DataTables/Dist-DataTables
• 70b3138 8283888a3ef13b0f884100947577e21c8d4c852f Fix: Multi-line html elements could ...
• Additional commits viewable in compare view

Updates datatables.net-bs5 from 2.3.4 to 2.3.8

Release notes

Sourced from datatables.net-bs5's releases.

2.3.8

DataTables Bootstrap5 2.3.8

2.3.7

DataTables Bootstrap5 2.3.7

Commits

• fb6bb07 Sync tag release - 2.3.8
• e3ebc98 6e7650e79da74bde9779f59a3cbb24d3384851f4 Release 2.3.8
• 0edb11b 2b908b9e2c3a8404e86a831b1c7e98d3ca587f56 Fix: If the table holds no data for ...
• d199076 00c4f1a0efba92ea4f012d78665ee1a4c23ee4d8 Fix: Improved timezone support for d...
• 61c8633 488b52aea869cbb8a06645c1d67146707fd97436 Fix: Don't mix UTC and timezone proc...
• 2140cc4 ebb386114c96d890c388b090fbb72ffc2a032134 Fix: Keyboard tabbing will no longer...
• 5c36c6b bc937dbb0b17ba8f6c4fa74d829a410e257c3ad5 Dev: use the release feed for cdn ex...
• 50aa45e 8283888a3ef13b0f884100947577e21c8d4c852f Fix: Multi-line html elements could ...
• c88bf22 707891039fe995c2f107f453361a954f871eb16c Fix: XHTML fix for when scolling is ...
• a88e1ea bddd58d641410a2caf30f436a052b1b1ec364f63 Fix: Accessabillity - remove the -ta...
• Additional commits viewable in compare view

Updates handlebars from 4.7.8 to 4.7.9

Release notes

Sourced from handlebars's releases.

v4.7.9

• fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2
• fix type "RuntimeOptions" also accepting string partials - eab1d14
• feat(types): set hash to be a Record<string, any> - de4414d
• fix non-contiguous program indices - 4512766
• refactor: rename i to startPartIndex - e497a35
• security: fix security issues - 68d8df5
  • GHSA-2w6w-674q-4c4q
  • GHSA-3mfm-83xf-c92r
  • GHSA-xhpv-hc6g-r9c6
  • GHSA-xjpj-3mr7-gcpf
  • GHSA-9cx6-37pm-9jff
  • GHSA-2qvq-rjwj-gvw9
  • GHSA-7rx3-28cr-v5wh
  • GHSA-442j-39wm-28r2

Commits

Changelog

Sourced from handlebars's changelog.

v4.7.9 - March 26th, 2026

• fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2
• fix type "RuntimeOptions" also accepting string partials - eab1d14
• feat(types): set hash to be a Record<string, any> - de4414d
• fix non-contiguous program indices - 4512766
• refactor: rename i to startPartIndex - e497a35
• security: fix security issues - 68d8df5

Commits

Commits

• dce542c v4.7.9
• 8a41389 Update release notes
• 68d8df5 Fix security issues
• b2a0831 Fix browser tests
• 9f98c16 Fix release script
• 45443b4 Revert "Improve partial indenting performance"
• 8841a5f Fix CI errors with linting
• e0137c2 fix: enable shell mode for spawn to resolve Windows EINVAL issue
• e914d60 Improve rendering performance
• 7de4b41 Upgrade GitHub Actions checkout and setup-node on 4.x branch
• Additional commits viewable in compare view

Updates tinymce from 8.1.2 to 8.5.0

Changelog

Sourced from tinymce's changelog.

8.5.0 - 2026-04-29

Added

• New content_language option to set the lang attribute on the iframe's html element or the inline editor's target element. #TINY-11214

Improved

• Improved visual styling of inline diff highlights in Suggested Edits and TinyMCE AI plugin. #TINY-13958

Fixed

• Script and style elements would incorrectly be removed by DomPurify when considered valid in the schema. #TINY-9655
• Iframe elements with children would incorrectly be removed by DomPurify. #TINY-9655
• Certain combinations of divs inside of lists would cause issues turning off lists. #TINY-14070
• Certain selections would delete the editor body, causing issues. #TINY-14149
• URIs with non-Latin1 characters were returning an error. #TINY-13938
• Alert and confirm dialogs were not announced properly by some screen readers. #TINY-13812

8.4.0 - 2026-03-31

Added

• New view_show option to display a specified view on initialization. #TINY-11967
• New errorHandler option for dropzone dialog components. #TINY-13420
• The noneditable feature can now be disabled with the new allow_noneditable option. #TINY-10121
• Editor option content_id for uniquely identifying the edited document. #TINY-13379
• New table_default_header_rows and table_default_header_cols options to set the default header size for new tables #TINY-13391

Improved

• The file upload feature of link and image dialogs now provide feedback when an unsupported file type is selected. #TINY-13420
• Directionality buttons now only appear active when directionality is set on the selected block. #TINY-13337
• Directionality buttons now always toggle the directionality attribute on selected blocks. #TINY-13337

Changed

• The border-color style with multiple rgb colors would be compressed into border incorrectly #TINY-13393
• Element Path now uses the ARIA-role "group" with an aria-label #TINY-13338

Fixed

• Now link dialog allows uploading empty files. #TINY-13421
• The link dialog now allows uploading empty files. #TINY-13421
• Bundled content CSS is now loaded into preview iframes. #TINY-13190
• Attempting to remove a link after a contentEditable="false" element was not possible. #TINY-13108
• Some formatting was not applied to items in multilevel list. #TINY-13324
• Dialogs did not retain focus when using the block/unblock API. #TINY-12918
• Setting width via Table Properties did not apply when table_style_by_css was false. #TINY-12797

Security

• Updated DOMPurify version to 3.3.2. #TINY-14180

8.3.2 - 2026-01-14

Fixed

• The uc-video element is no longer refreshed on undo/redo. #TINY-12884

... (truncated)

Commits

• 8d946f0 TINY-13649: Create changelog for TinyMCE 8.5 release (#11071)
• 5b4bb51 TINY-13812: Improve accesibility in alert/confirm dialogs (#11055)
• 1edee2a TINY-14070: Prevent lists from detecting hosts too early. (#11027)
• 47101c8 TINY-13938: manage data uri with BOM (#11056)
• cf4d229 TINY-11214: New content_language option to set default language of the edit...
• f1914a9 Merge remote-tracking branch 'origin/release/8'
• ec70f96 TINY-9655: Prevent valid iframe, script, and style elements from being remove...
• c885cd2 TINY-14149: Prevent deleting the editor body. (#11042)
• 09ade46 TINY-12499: Bump version for next patch release
• 4e3c7b4 Merge remote-tracking branch 'origin/release/8'
• Additional commits viewable in compare view

Updates sass from 1.93.2 to 1.99.0

Release notes

Sourced from sass's releases.

Dart Sass 1.99.0

To install Sass 1.99.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Add support for parent selectors (&) at the root of the document. These are emitted as-is in the CSS output, where they're interpreted as the scoping root.

• User-defined functions named calc or clamp are no longer forbidden. If such a function exists without a namespace in the current module, it will be used instead of the built-in calc() or clamp() function.

• User-defined functions whose names begin with - and end with -expression, -url, -and, -or, or -not are no longer forbidden. These were originally intended to match vendor prefixes, but in practice no vendor prefixes for these functions ever existed in real browsers.

• User-defined functions named EXPRESSION, URL, and ELEMENT, those that begin with - and end with -ELEMENT, as well as the same names with some lowercase letters are now deprecated, These are names conflict with plain CSS functions that have special syntax.

  See the Sass website for details.

• In a future release, calls to functions whose names begin with - and end with -expression and -url will no longer have special parsing. For now, these calls are deprecated if their behavior will change in the future.

  See the Sass website for details.

• Calls to functions whose names begin with - and end with -progid:... are deprecated.

  See the Sass website for details.

See the full changelog for changes in earlier releases.

Dart Sass 1.98.0

To install Sass 1.98.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Command-Line Interface

• Gracefully handle dependency loops in --watch mode.

Dart API

• Add a const Logger.defaultLogger field. This provides a logger that emits to standard error or the browser console, but automatically chooses whether to use terminal colors.

JavaScript API

• Fix a crash when manually constructing a SassCalculation for 'calc' with an argument that can't be simplified.

... (truncated)

Changelog

Sourced from sass's changelog.

1.99.0

• Add support for parent selectors (&) at the root of the document. These are emitted as-is in the CSS output, where they're interpreted as the scoping root.

• User-defined functions named calc or clamp are no longer forbidden. If such a function exists without a namespace in the current module, it will be used instead of the built-in calc() or clamp() function.

• User-defined functions whose names begin with - and end with -expression, -url, -and, -or, or -not are no longer forbidden. These were originally intended to match vendor prefixes, but in practice no vendor prefixes for these functions ever existed in real browsers.

• User-defined functions named EXPRESSION, URL, and ELEMENT, those that begin with - and end with -ELEMENT, as well as the same names with some lowercase letters are now deprecated, These are names conflict with plain CSS functions that have special syntax.

  See the Sass website for details.

• In a future release, calls to functions whose names begin with - and end with -expression and -url will no longer have special parsing. For now, these calls are deprecated if their behavior will change in the future.

  See the Sass website for details.

• Calls to functions whose names begin with - and end with -progid:... are deprecated.

  See the Sass website for details.

1.98.0

Command-Line Interface

• Gracefully handle dependency loops in --watch mode.

Dart API

• Add a const Logger.defaultLogger field. This provides a logger that emits to standard error or the browser console, but automatically chooses whether to use terminal colors.

JavaScript API

• Fix a crash when manually constructing a SassCalculation for 'calc' with

... (truncated)

Commits

• 83c39fe Support the top-level parent selector (#2758)
• ec85871 Bump EndBug/add-and-commit from 9 to 10 (#2756)
• a604acd [Function Name] Implement changes (#2731)
• 5a81ae3 Bump version to 1.98.0 (#2754)
• e25e71d Update immutable to v5.1.5 (#2753)
• 43fac1a Bump actions/upload-artifact from 6 to 7 (#2747)
• 8b85c9a Bump actions/download-artifact from 7 to 8 (#2749)
• 00f83f0 Bump postcss from 8.5.6 to 8.5.8 in /pkg/sass-parser (#2752)
• 0a325a4 Bump actions/attest-build-provenance from 3 to 4 (#2748)
• 7fb3c0f Gracefully handle dependency loops in watch mode (#2746)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for sass since your current version.