[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
vue-tsc (source)	3.3.13 → 3.3.14

---

Release Notes

vuejs/language-tools (vue-tsc)

v3.3.14

Compare Source

language-core

• fix: isolate template virtual code from setup control flow (d31557b)
• fix: re-assert dot-value bindings in template closures (4524874) (f9c908f) (b65e458)
• fix: avoid TS2454 from the withDotValue assertion (c774144)
• fix: use a const type parameter in __VLS_unwrap to keep literal bindings on TS 7.1 (ce6c1de)
• fix: avoid never slot props for dynamic slot names in generic components (7957e7f)
• fix: omit emitted events from inherited attrs of generic components (2d94d89)
• fix: check bindings of generic directive hooks (0cb7d92)
• fix: wrap the v-model assignment target in parentheses (9bb1dc9)
• fix: type the $event parameter of inline handlers explicitly (d3b42a1)
• fix: type unknown components without diagnostic filters (b3909a3)
• fix: keep leading @ts-nocheck and /// <reference> effective in script setup (c2e2e6f)
• fix: declare component context vars before slot code (b7c773d)
• fix: avoid non-null assertion in JS slot codegen (5633525)
• fix: restore tag navigation for barrel imports (6358d15)
• fix: map the whole hyphenated directive name in the auto-import access (beb0151)

language-service

• fix: prevent crash on malformed html.customData configuration (3961653)

typescript-plugin

• fix: show unwrapped type when hovering setup refs in template (c742c14)

Contributors: @​johnsoncodehk, @​lazerg, @​ValentinYoushkevich, @​so1ve, @​WangKepeople

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[github-actions]

Terraform Plan

🚧 Changes detected — Plan: 1 to add, 1 to change, 1 to destroy.

Plan output

Acquiring state lock. This may take a few moments...

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
-/+ destroy and then create replacement

Terraform will perform the following actions:

  # module.service.aws_ecs_service.this will be updated in-place
  ~ resource "aws_ecs_service" "this" {
      ~ health_check_grace_period_seconds  = 0 -> 120
        id                                 = "arn:aws:ecs:eu-central-1:553637109631:service/javabin-platform/cupcake-cupcake"
        name                               = "cupcake-cupcake"
      ~ tags                               = {
          + "javabin:desired-count" = "1"
        }
      ~ tags_all                           = {
          + "javabin:desired-count" = "1"
            # (5 unchanged elements hidden)
        }
        # (15 unchanged attributes hidden)

        # (5 unchanged blocks hidden)
    }

  # module.service.aws_ecs_task_definition.this must be replaced
-/+ resource "aws_ecs_task_definition" "this" {
      ~ arn                      = "arn:aws:ecs:eu-central-1:553637109631:task-definition/cupcake-cupcake:4" -> (known after apply)
      ~ arn_without_revision     = "arn:aws:ecs:eu-central-1:553637109631:task-definition/cupcake-cupcake" -> (known after apply)
      ~ container_definitions    = jsonencode(
          ~ [
              ~ {
                  + dependsOn              = [
                      + {
                          + condition     = "SUCCESS"
                          + containerName = "platform_tmp_init"
                        },
                    ]
                    name                   = "cupcake"
                  ~ portMappings           = [
                      ~ {
                          - hostPort      = 3000
                            # (2 unchanged attributes hidden)
                        },
                    ]
                  - systemControls         = []
                  - volumesFrom            = []
                    # (8 unchanged attributes hidden)
                },
              + {
                  + command                = [
                      + "chmod",
                      + "1777",
                      + "/tmp",
                    ]
                  + essential              = false
                  + image                  = "public.ecr.aws/docker/library/busybox@sha256:a7dbc319b1438115a207e11930dc4bb3e643dcb3ec0bdd694bb36cd8fad289ec"
                  + logConfiguration       = {
                      + logDriver = "awslogs"
                      + options   = {
                          + awslogs-group         = "/ecs/cupcake/cupcake"
                          + awslogs-region        = "eu-central-1"
                          + awslogs-stream-prefix = "cupcake"
                        }
                    }
                  + mountPoints            = [
                      + {
                          + containerPath = "/tmp"
                          + readOnly      = false
                          + sourceVolume  = "tmp"
                        },
                    ]
                  + name                   = "platform_tmp_init"
                  + readonlyRootFilesystem = true
                  + user                   = "0"
                },
            ] # forces replacement
        )
      ~ enable_fault_injection   = false -> (known after apply)
      ~ id                       = "cupcake-cupcake" -> (known after apply)
      ~ revision                 = 4 -> (known after apply)
      - tags                     = {} -> null
        # (10 unchanged attributes hidden)

      - volume {
          - configure_at_launch = false -> null
          - name                = "tmp" -> null
        }
      + volume {
          + configure_at_launch = (known after apply)
          + name                = "tmp"
        }
    }

Plan: 1 to add, 1 to change, 1 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to: tfplan

To perform exactly these actions, run the following command to apply:
    terraform apply "tfplan"

---

LLM Review

Risk: 🟢 LOW

Plan updates an ECS service (health check grace period and a tag) and replaces its task definition to add a busybox init container that makes /tmp world-writable (chmod 1777) before the main container starts; no security groups, IAM, or data stores are touched.

• 💥 [destruction] aws_ecs_task_definition.this is destroyed and recreated (forces replacement due to container_definitions change). This creates a new task definition revision; the old revision is deregistered/ INACTIVE rather than deleted, and the ECS service is updated in-place to point at the new revision, so no service downtime is expected beyond the normal rolling deployment.
• ✅ [routine] The cupcake container's hostPort mapping (3000) is removed. On Fargate/awsvpc networking hostPort is ignored or must equal containerPort, so this is likely harmless; worth confirming the network mode is awsvpc and that nothing depends on the hostPort.
• ✅ [routine] New init container platform_tmp_init (busybox, pinned by digest, runs as root, read-only root filesystem, non-essential) runs 'chmod 1777 /tmp' on a shared 'tmp' volume, and the main container declares dependsOn SUCCESS on it. Pinned image digest and read-only root filesystem are good practice; running as root is limited to this short-lived step.
• ✅ [routine] Service health_check_grace_period_seconds changes from 0 to 120 and a javabin:desired-count=1 tag is added. Both are low-risk configuration changes.
• 💰 [cost] No new billable resources are created. The init container runs briefly at each task start and adds negligible cost.