Skip to content

chore(deps): bump quasar from 2.27.0 to 2.35.2 in /VueApp - #371

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/VueApp/quasar-2.35.2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/VueApp/quasar-2.35.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor

Bumps quasar from 2.27.0 to 2.35.2.

Release notes

Sourced from quasar's releases.

quasar-v2.35.2

Changes

  • fix(QMenu/QTooltip): anchor inside a shadow root -> a popup whose target lives inside a web component (a shadow tree) is positioned next to it again instead of landing at the end of the page. The native CSS anchor positioning cannot see across a shadow boundary, so such popups now use the JS positioning; everything else keeps the native engine (#18576)
  • fix(iOS scroll lock): route change while a dialog or menu is open -> on iOS, closing a popup after navigating to another route no longer scrolls the page back to the previous route's position. Hash router mode (#/route) used to be treated as the same route every time, and in history mode a path-shaped anchor (/a#/x -> /b#/x) was compared without its pathname (#18573, #18574)
  • fix(date utils): extractDate() with a day-of-year token -> a mask carrying DDD, DDDo or DDDD together with a year now resolves to that day, so formatDate() output round-trips (YYYY-DDDD used to give January 1st). A day of the year outside the year (000, or 366 in a 365-day year) is an Invalid Date; a full calendar date in the same mask still wins (#18575)

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

quasar-v2.35.1

Changes

  • fix(QMenu/QTooltip): target as a CSS selector for an element rendered later -> a popup whose anchor shows up after it mounted (a v-if that flips later, an async component sibling) no longer stays without an anchor for good. It used to ignore hover, click and focus on that element, refuse show() and render unanchored on a model write. The element now gets picked on the first interaction with it, on show() or when the model turns on. For a valid selector with no match yet, the console message is now a warning stating the deferral; an invalid selector still logs an error (#18566)
  • fix(QBadge): printing -> a solid badge keeps its background color on paper instead of leaving white text on a white page (browsers drop backgrounds when printing by default); the same treatment QCheckbox, QRadio and QToggle already have (#18569)
  • fix(lang): Romanian (ro) -> corrected mistranslations and grammar: the QEditor labels (undo, subscript, superscript, indent, outdent, the untranslated "Big" font size), the QTable selected-rows label ("Nicio", plus "de" from 20 rows up), the QTree "no nodes" label and the expand label (#18570)

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

quasar-v2.35.0

Changes

  • feat(colors): rgbToText() -> new util on the colors object, the inverse of textToRgb(): turns an { r, g, b, a } object into an rgb()/rgba() string, just as rgbToHex() mirrors hexToRgb()
  • fix(QColor): hex alpha precision -> typing a hex alpha byte such as #ff000001 no longer turns it into #ff000000 (which also left the header out of sync), and #..02 no longer becomes #..03. An rgba() alpha with more than two decimals is kept instead of rounded. The Tune alpha field now accepts and shows a fractional percent (the sliders keep whole-percent steps). The color utils change along with it: hexToRgb() now returns the alpha as a percent with one decimal (#..80 gives a: 50.2, not 50), and textToRgb() keeps the decimals of an rgba() alpha, so a color comes back unchanged after a round trip through the utils (#18562)
  • fix(Screen): missing Screen Orientation API -> the app no longer fails to mount on Safari < 16.4 (and in jsdom) with "Right side of assignment cannot be destructured". Where the API is missing, $q.screen.orientation stays at its 'portrait-primary' default, the same as on the server (#18561)

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

quasar-v2.34.0

New

  • feat(ui): useElementSize() composable -> reactive elementSize ({ width, height }) of an element or component ref, with an onResize hook, a debounce window and a disabled switch; QResizeObserver is now built on it
  • feat(ui): v-resize directive -> the template-side form of useElementSize(): reports an element's size without adding a node (the initial size, then only on change), debounce as the argument (v-resize:100), once modifier, a handler returning false stops it
  • feat(ui): useScroll() composable -> reactive scroll position, direction, delta and inflection point of the page or of a scrollable container, with an onScroll hook, axis, debounce and disabled; QScrollObserver is now built on it
  • feat(ui): useFilePicker() composable -> opens the native file dialog from setup code without rendering a file input; openFilePicker() resolves with the accepted files (null when dismissed) and the files get validated by the same rules as QFile (accept, maxFileSize, maxTotalSize, maxFiles, filter...)
  • feat(ui): useDropZone() composable and v-drop-zone directive -> turn any element or component into a drop target for files, with the QFile validation rules, a reactive isOverDropZone (the directive sets a q-drop-zone--over class instead) and rejected-file reporting. QFile and QUploader now handle drops through it
  • feat(ui): useObjectUrl() composable -> a reactive object URL for a Blob, File or MediaSource, revoked for you when the source changes and when the component is destroyed
  • feat(ui): useEventListener() composable -> attaches a listener to an element, window, document or component, following reactive targets, event names and options; removed on unmount
  • feat(ui): useMutation() composable -> the setup-code counterpart of v-mutation, with the latest mutationRecords as reactive state
  • feat(ui): useSoftFullscreen() composable -> the in-page fullscreen behind the fullscreen prop of QTable, QCarousel and QEditor (back button, route-change exit, scroll restore, popups kept on top), now usable on any element or component
  • feat(ui): useIdle() composable -> isIdle flips after timeout ms with no user activity, plus lastActive and resetIdle(); hidden-page time counts as inactivity
  • feat(ui): useKeyboardShortcut() composable -> runs a handler for a "Mod+K" style shortcut (Mod is Meta on macOS, Ctrl elsewhere), matching either the layout-aware key or the physical key code; unmodified printable shortcuts stay quiet while typing in a field
  • feat(ui): useWebSocket() composable -> a WebSocket connection kept alive from a component: status, last message, send queue flushed on open, auto reconnect with backoff (paused while offline), optional heartbeat, closed on unmount

... (truncated)

Commits
  • 05ab1b1 chore(ui/create-quasar): bump version
  • bac7eca fix(ui): run the JS positioning fallback for popups anchored inside a shadow ...
  • 6330168 fix(ui): keep the pathname in the scroll lock's route key under a path-shaped...
  • 7a27d68 fix(ui): compare the hash route path when releasing the iOS scroll lock #1857...
  • 28b2f58 refactor(ui): drop the unreachable persian guard from extractDate's day-of-ye...
  • 7196738 fix(ui): extractDate resolves the day of the year (DDD, DDDo, DDDD) (#18575)
  • e7892cd chore(ui/create-quasar): bump version
  • fd25952 fix(QBadge): keep the background color when printing (#18569)
  • 4ac6d5f fix(QMenu/QTooltip): pick a String target that renders after mount (#18566)
  • 08cbaa1 fix(lang): correct Romanian (ro) mistranslations and grammar (#18570)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [quasar](https://github.com/quasarframework/quasar/tree/HEAD/ui) from 2.27.0 to 2.35.2.
- [Release notes](https://github.com/quasarframework/quasar/releases)
- [Commits](https://github.com/quasarframework/quasar/commits/quasar-v2.35.2/ui)

---
updated-dependencies:
- dependency-name: quasar
  dependency-version: 2.35.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants