chore(client/deps): update client dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
graphql	16.13.2 → 16.14.0
vue (source)	3.5.33 → 3.5.35
vue-i18n (source)	11.4.0 → 11.4.4
vue-router (source)	5.0.6 → 5.0.7

---

Release Notes

graphql/graphql-js (graphql)

v16.14.0

Compare Source

v16.14.0 (2026-05-03)

New Feature 🚀

• #​4317 Allow configuration of the ofType introspection depth (@​Nols1000)
• #​4521 Add experimental support for directives on directive definitions (@​BoD)

Bug Fix 🐞

• #​4652 Fix valueFromAST variable own-property checks
  (@​abishekgiri)

Docs 📝

• #​4706 Fix mistake in GraphQLError guidance (@​benjie)

Committers: 4

• Abishek Kumar Giri(@​abishekgiri)
• Benjie(@​benjie)
• Benoit 'BoD' Lubek(@​BoD)
• Nils-Börge Margotti(@​Nols1000)

vuejs/core (vue)

v3.5.35

Compare Source

Bug Fixes

• compiler-core: avoid double processing v-for keys with v-memo (#​14861) (34a0ded), closes #​14859
• compiler-sfc: resolve top-level exports from files registered as global types (#​14805) (3d077f2), closes nuxt/nuxt#33694
• runtime-core: avoid repeated hydration mismatch checks (#​14857) (170fc95), closes #​14855
• runtime-core: skip idle persisted transition hooks in keep-alive moves (#​14865) (80fc139), closes #​14031
• server-renderer: propagate sync errors from ssrRenderSuspense (#​14804) (4760997), closes nuxt/nuxt#28162
• teleport: skip child unmount when pending mount discarded (#​14876) (#​14877) (584beb1)

Performance Improvements

• reactivity: skip type checks for cached proxies (#​14860) (5734fe9)
• runtime-dom: optimize array event handler dispatch (#​14828) (bb18dc8)
• server-renderer: avoid materializing iterables in ssrRenderList (#​14821) (1b7a2cc)

v3.5.34

Compare Source

Bug Fixes

• compiler-sfc: infer Vue ref wrapper types when source is unresolvable (#​14758) (7f46fd4), closes #​14729
• compiler-sfc: preserve hash hrefs on <image> elements (#​14756) (090b2e3)
• compiler-sfc: resolve type re-exports inside declare global (#​14766) (acfffe3)
• reactivity: prevent orphan effect when created in a stopped scope (#​14778) (c8e2d4a), closes #​14777
• runtime-core: avoid symbol coercion during props validation (#​8539) (23d4fb5), closes #​8487
• suspense: avoid DOM leak with out-in transition in v-if fragment (#​14762) (9667e0d), closes #​14761

intlify/vue-i18n (vue-i18n)

v11.4.4

Compare Source

What's Changed

⚡ Improvement Features

• fix(security): harden javascript URL sanitization by @​kazupon in #​2503

Full Changelog: intlify/vue-i18n@v11.4.3...v11.4.4

v11.4.3

Compare Source

What's Changed

💥 Breaking Changes

• chore!: drop Node.js 20 support by @​kazupon in #​2478

🔒 Security Fixes

• security(ci): harden workflows and add zizmor audit by @​kazupon in #​2490

Full Changelog: intlify/vue-i18n@v11.4.2...v11.4.3

v11.4.2

Compare Source

What's Changed

⚡ Improvement Features

• fix(formatter): pass component children as slots by @​kazupon in #​2474

Full Changelog: intlify/vue-i18n@v11.4.1...v11.4.2

v11.4.1

Compare Source

What's Changed

⚡ Improvement Features

• fix(i18n-t): pass component children as slots by @​kazupon in #​2473

Full Changelog: intlify/vue-i18n@v11.4.0...v11.4.1

vuejs/router (vue-router)

v5.0.7

Compare Source

   🚀 Features

• Upgrade to babel 8  -  by @​posva (8d3e6)
• Make defineParamParser() more intuitive  -  by @​posva (8715b)
• Upgrade @vue/devtools-api  -  by @​posva (87c3a)
• matcher: Hint at params: {} workaround in discarded params warning  -  by @​posva and shanliuling in #​2689 (c2b13)
• param-parsers: Add include/exclude options  -  by @​posva (91cde)

   🐞 Bug Fixes

• matcher:
  • Finalize param token before processing escaped colon  -  by @​babu-ch and @​posva in #​2654 (20521)
• query:
  • Use Object.create(null) to prevent prototype pollution  -  by @​wdskuki, wdsmini and @​posva in #​2661 (be88c)
• resolve:
  • Omit empty optional params from resolved params  -  by @​babu-ch and @​posva in #​2434 (1ef09)
• types:
  • Wire RouteNamedMap via generated routes.d.ts  -  by @​posva in #​2700 (aef99)
• unplugin:
  • Avoid generating empty routes  -  by @​FrontEndDog and @​posva in #​2642 (10a8b)
  • Apply definePage path-param parser overrides  -  by @​posva in #​2699 (c8074)
• volar:
  • Drop runtime @vue/language-core import  -  by @​danielroe in #​2710 (8af50)

    View changes on GitHub

---

Configuration

📅 Schedule: (in timezone America/Detroit)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Bundle Report

Changes will increase total bundle size by 1.77kB (0.03%) ⬆️. This is within the configured threshold ✅

Detailed changes

Bundle name	Size	Change
pilcrow-client-esm	5.98MB	1.77kB (0.03%) ⬆️

Affected Assets, Files, and Routes:

view changes for bundle: pilcrow-client-esm

Assets Changed:

Asset Name	Size Change	Total Size	Change (%)
assets/ProfilePage.js	-3 bytes	313.01kB	-0.0%
assets/vue-apollo.js	122 bytes	188.64kB	0.06%
assets/index.js	30 bytes	136.01kB	0.02%
assets/vue.runtime.esm-bundler.js	203 bytes	126.77kB	0.16%
assets/vue-i18n.js	732 bytes	55.01kB	1.35%
assets/fragments.js	686 bytes	38.26kB	1.83%

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 59.81%. Comparing base (85636cf) to head (049305b).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #2202   +/-   ##
=======================================
  Coverage   59.81%   59.81%           
=======================================
  Files         305      305           
  Lines        6686     6686           
  Branches      649      649           
=======================================
  Hits         3999     3999           
  Misses       2590     2590           
  Partials       97       97           

Flag	Coverage Δ
backend	75.63% <ø> (ø)
client	52.78% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.