Skip to content

Bump quasar from 2.18.6 to 2.23.3 in /frontend - #168

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/quasar-2.23.3
Open

Bump quasar from 2.18.6 to 2.23.3 in /frontend#168
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/quasar-2.23.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps quasar from 2.18.6 to 2.23.3.

Release notes

Sourced from quasar's releases.

quasar-v2.23.3

Security

  • fix(ui): bound SSR User-Agent parsing

Fixes

  • feat+fix(date): extra second param (utc?: boolean) for daysInMonth(); correct UTC month ends and locale cache (#18453)
  • fix(date): accept negative epoch in extractDate X/x masks (#18443)
  • fix(patterns): accept rgba alphas with a trailing zero (#18444)
  • fix(use-panel): terminate goToPanelByOffset when walking below index 0 (#18445)
  • fix(slider): ignore a non-positive markers prop (#18446)
  • fix(slide-transition): do not orphan the fallback timer (#18447)
  • fix(use-panel): do not apply the RTL swipe flip when vertical (#18448)
  • fix(QSelect): cancel a pending input-value emit when setting a new one (#18449)
  • fix(QBtn): release the submit keydown guard on cleanup (#18451)
  • fix(QInput): make blur() cancel a focus() queued behind the portal wait flag (#18452)

Other (potential breaking change)

  • feat+perf(Platform): remove support for very old platforms like blackberry and playbook

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

quasar-v2.23.2

Lots of community fixes included, especially from Evan Chan (@​evnchn ). Thanks all for contributing!

Fixes

  • fix(ui): account for Android safe area insets (new prop framework.config.cordova/capacitor: androidStatusBarPadding (boolean) (#18425)
  • fix(format): capitalize('') should not throw (#18426)
  • fix(patterns): reject calendar-invalid month/day in the date rule (#18427)
  • fix(date): correct getWeekOfYear DST adjustment (minutes vs hours) (#18428)
  • fix(debounce): re-arm the leading edge after cancel() in immediate mode (#18429)
  • fix(portal): guard removeGlobalNode against untracked elements (#18430)
  • fix(EventBus): prevent once() firing twice on a re-entrant emit (#18431)
  • fix(TouchPan): reference bindings.value in updated hook, not undeclared value (#18432)
  • fix(morph directive): resolve object-form binding in getSSRProps (#18438)
  • fix(escape-key): keep ESC armed across interleaved key events while held #18433
  • fix(Dialog): keep array-valued plugin options as arrays when merging on update() #18434
  • fix(useSplitAttrs): read the current vnode each update, not a stale setup capture #18435
  • fix(Notify): use notif.multiLine (not multiline) in the auto-group key #18436
  • fix(BottomSheet): apply action.classes in grid mode (was action.class) #18437

Donations

Quasar Framework is an open-source MIT-licensed project made possible due to the generous contributions by sponsors and backers. If Quasar is useful in your workflow and you want to support ongoing maintenance, please consider the following:

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [quasar](https://github.com/quasarframework/quasar) from 2.18.6 to 2.23.3.
- [Release notes](https://github.com/quasarframework/quasar/releases)
- [Commits](quasarframework/quasar@quasar-v2.18.6...quasar-v2.23.3)

---
updated-dependencies:
- dependency-name: quasar
  dependency-version: 2.23.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 28, 2026
@netlify

netlify Bot commented Jul 28, 2026

Copy link
Copy Markdown

Deploy Preview for emberarchive ready!

Name Link
🔨 Latest commit a2b9f2d
🔍 Latest deploy log https://app.netlify.com/projects/emberarchive/deploys/6a68e70a0e8de80008f39ce6
😎 Deploy Preview https://deploy-preview-168--emberarchive.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants