[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
vue-i18n (source)	11.4.18 → 11.4.20

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

intlify/vue-i18n (vue-i18n)

v11.4.20

Compare Source

Behavior change: a line break or a tab right after a linked key (@:key) now ends the key, as a space does. Such messages now render the linked message, and a line break that was dropped after a linked message is kept. Messages compiled at build time get this when they are compiled again with the new @intlify/message-compiler. (#​2780)

What's Changed

🐛 Bug Fixes

• fix(message-compiler): end a linked key at a line break or a tab by @​kazupon in #​2780

📝️ Documentations

• docs: describe where a linked key ends, and fix the capitalize example by @​kazupon in #​2782

Full Changelog: intlify/vue-i18n@v11.4.19...v11.4.20

v11.4.19

Compare Source

escapeParameter: The sanitizer now reads tags and attributes in the same way as browsers do, and checks every attribute. A tag, a comment, or an element like <textarea> that is not closed at the end of a translation is turned into text, and so is <plaintext>. Some outputs change their form with the same result in the browser: < that does not start a tag becomes <, and onclick= inside an attribute value is kept as it is. < in the content of <textarea>, <style> and similar elements also becomes <: it looks the same in <textarea> and <title>, but stays as < in <style> and <xmp>. (#​2769) See GHSA-9qc3-h48f-7h96 and GHSA-7356-3q55-jvxm.

What's Changed

🔒 Security Fixes

• fix(shared): read tags with the rules of the HTML tokenizer in sanitizeTranslatedHtml by @​kazupon in #​2769

Full Changelog: intlify/vue-i18n@v11.4.18...v11.4.19

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.