chore(deps): update dependency jsdom to v30.1.2 (#382)

## Summary

`k8s/deploy.yaml` takes the image from build-tools: `image: ${IMAGE}` instead of the hard-coded `oci.unbound.se/unboundsoftware/schemas-app:${COMMIT}`.

`deploy` substitutes `${IMAGE}` with `<registry>/<owner>/<name>:<tag>`, where the registry comes from the build-tools config and the tag is the value `${COMMIT}` gets today. The rendered reference is unchanged. Moving off `oci.unbound.se` later becomes one change in infra.

Validated on shiny/time-service#864: merged and deployed to AWS staging and Frostmoln staging with the same image. Prerequisites, all merged:
- unboundsoftware/infra#1808: registry in `BUILDTOOLS_FROSTMOLN_STAGING`
- shiny/acctest#952: acctest pins build-tools to the Gitea registry

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: https://gitea.unbound.se/unboundsoftware/schemas-app/pulls/376

.gitea/workflows/ci.yaml

@@ -13,7 +13,7 @@ jobs:
       BUILDTOOLS_CONTENT: ${{ secrets.BUILDTOOLS_CONTENT }}
       GITEA_REPOSITORY: ${{ gitea.repository }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: buildtool/setup-buildtools-action@v1
       - name: Build and push
         run: unset GITEA_TOKEN && build && push
@@ -27,7 +27,7 @@ jobs:
       GITEA_REPOSITORY: ${{ gitea.repository }}
     environment: prod
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: buildtool/setup-buildtools-action@v1
       - name: Deploy to production
         run: deploy prod

.pre-commit-config.yaml

@@ -11,7 +11,7 @@ repos:
     - --allow-multiple-documents
   - id: check-added-large-files
 - repo: https://github.com/markdownlint/markdownlint
-  rev: v0.15.0
+  rev: v0.18.1
   hooks:
   - id: markdownlint
 - repo: https://gitlab.com/devopshq/gitlab-ci-linter
@@ -22,13 +22,13 @@ repos:
     - --project
     - unboundsoftware/schemas-app
 - repo: https://github.com/alessandrojcm/commitlint-pre-commit-hook
-  rev: v9.24.0
+  rev: v9.27.0
   hooks:
   - id: commitlint
     stages: [ commit-msg ]
     additional_dependencies: [ '@commitlint/config-conventional' ]
 - repo: https://github.com/pre-commit/mirrors-eslint
-  rev: v10.0.3
+  rev: v10.12.0
   hooks:
   - id: eslint
     types: [ file ]

Dockerfile

@@ -1,4 +1,4 @@
-FROM cypress/base:25.0.0@sha256:43bc659f825c1a9e4aa540fcdf35065de3e20e0b463589bfccd1ecb717cfc0fb as builder
+FROM cypress/base:26.0.0@sha256:446be8fcb63e3cad2f9a4e14720e3d8e35993e12f36da541e09f5740a4c2477c as builder
 WORKDIR /build
 
 RUN npm install --global node-gyp && \
@@ -12,7 +12,7 @@ RUN npm run postinstall && npm run generate && npm run lint && npm run test:cove
 FROM scratch as export
 COPY --from=builder /build/coverage /
 
-FROM amd64/nginx:1.29.6@sha256:5791d1ada3441acfb642e2519ab8becfb37e07e8663116aa1fa8bfea73703f17
+FROM amd64/nginx:1.31.6@sha256:9a54e7e76ae7fb26e733c7d43ca1c8586f1894b876ec8b8ca0124daae38d509b
 MAINTAINER Joakim Olsson <joakim@unbound.se>
 
 COPY ./nginx/nginx.conf /etc/nginx/nginx.conf

app/components/__tests__/OrganizationSwitcher.spec.ts

@@ -14,20 +14,23 @@ const mockOrganizations = [
 // For now, the component is indirectly tested through useOrganizationSelector tests
 // and manual testing shows it works correctly
 
+// vi.mock is hoisted above the imports and the factory runs once, on the first
+// import of the mocked module -- it was never re-applied per test despite sitting
+// in beforeEach. vitest 5 rejects the nested call outright rather than silently
+// hoisting it, so declare it where it actually executes.
+vi.mock('~/composables/useOrganizationSelector', () => ({
+  useOrganizationSelector: () => ({
+    organizations: ref([mockOrganizations[0]]),
+    selectedOrganization: ref(mockOrganizations[0]),
+    selectedOrgId: ref('1'),
+    selectOrganization: mockSelectOrganization,
+  }),
+}))
+
 describe('OrganizationSwitcher - Single Organization', () => {
   beforeEach(() => {
     vi.resetModules()
     mockSelectOrganization.mockClear()
-
-    // Mock with single organization
-    vi.mock('~/composables/useOrganizationSelector', () => ({
-      useOrganizationSelector: () => ({
-        organizations: ref([mockOrganizations[0]]),
-        selectedOrganization: ref(mockOrganizations[0]),
-        selectedOrgId: ref('1'),
-        selectOrganization: mockSelectOrganization,
-      }),
-    }))
   })
 
   it('should show a chip for single organization', async () => {

k8s/deploy.yaml

@@ -37,7 +37,7 @@ spec:
               topologyKey: kubernetes.io/hostname
       containers:
       - name: schemas-app
-        image: oci.unbound.se/unboundsoftware/schemas-app:${COMMIT}
+        image: ${IMAGE}
         imagePullPolicy: IfNotPresent
         ports:
         - containerPort: 80

package.json

@@ -19,12 +19,12 @@
   },
   "dependencies": {
     "@apollo/client": "3.14.1",
-    "@auth0/auth0-vue": "2.5.0",
+    "@auth0/auth0-vue": "2.11.0",
     "@vue/apollo-composable": "4.2.2",
-    "graphql": "16.13.1",
-    "graphql-ws": "6.0.7",
-    "nuxt": "4.3.1",
-    "vue": "3.5.30",
+    "graphql": "16.14.2",
+    "graphql-ws": "6.3.0",
+    "nuxt": "4.5.2",
+    "vue": "3.5.43",
     "vuetify-nuxt-module": "0.19.5"
   },
   "version": "1.0.0",
@@ -34,31 +34,34 @@
   "author": "",
   "license": "ISC",
   "devDependencies": {
-    "@commitlint/cli": "20.4.4",
-    "@commitlint/config-conventional": "20.4.4",
-    "@graphql-codegen/cli": "6.2.1",
-    "@graphql-codegen/typed-document-node": "6.1.7",
-    "@graphql-codegen/typescript": "5.0.9",
-    "@graphql-codegen/typescript-operations": "5.0.9",
-    "@graphql-codegen/typescript-vue-apollo": "5.0.0",
-    "@nuxt/devtools": "3.2.3",
-    "@nuxt/eslint": "1.15.2",
+    "@commitlint/cli": "21.2.3",
+    "@commitlint/config-conventional": "21.2.3",
+    "@graphql-codegen/cli": "7.4.3",
+    "@graphql-codegen/typed-document-node": "7.1.1",
+    "@graphql-codegen/typescript": "6.1.0",
+    "@graphql-codegen/typescript-operations": "6.1.9",
+    "@graphql-codegen/typescript-vue-apollo": "5.0.1",
+    "@nuxt/devtools": "3.4.2",
+    "@nuxt/eslint": "1.17.0",
     "@nuxtjs/stylelint-module": "5.2.1",
     "@stylistic/eslint-plugin": "5.10.0",
-    "@vitejs/plugin-vue": "6.0.5",
-    "@vitest/coverage-v8": "4.1.0",
-    "@vue/test-utils": "2.4.6",
-    "eslint": "10.0.3",
-    "eslint-plugin-simple-import-sort": "12.1.1",
-    "eslint-plugin-vue": "10.8.0",
-    "jsdom": "29.0.0",
-    "postcss-html": "1.8.1",
-    "stylelint": "17.4.0",
-    "stylelint-config-recommended-vue": "1.6.1",
+    "@vitejs/plugin-vue": "6.0.9",
+    "@vitest/coverage-v8": "5.0.3",
+    "@vue/test-utils": "2.5.1",
+    "eslint": "10.12.0",
+    "eslint-plugin-simple-import-sort": "14.0.0",
+    "eslint-plugin-vue": "10.11.1",
+    "jsdom": "30.1.2",
+    "postcss-html": "2.0.0",
+    "stylelint": "17.16.0",
+    "stylelint-config-recommended-vue": "2.0.0",
     "stylelint-config-standard": "40.0.0",
-    "typescript": "5.9.3",
-    "typescript-eslint": "8.57.0",
-    "vitest": "4.1.0",
-    "vue-eslint-parser": "10.4.0"
+    "typescript": "6.0.3",
+    "typescript-eslint": "8.71.0",
+    "vitest": "5.0.3",
+    "vue-eslint-parser": "10.4.1"
+  },
+  "overrides": {
+    "@vue/server-renderer": "$vue"
   }
 }

test/setup.ts

@@ -31,7 +31,15 @@ class LocalStorageMock {
   }
 }
 
-global.localStorage = new LocalStorageMock() as unknown as Storage
+// jsdom defines localStorage as a getter-only accessor on the window object, so a
+// plain assignment throws ("Cannot set property localStorage ... which has only a
+// getter") under vitest 5, which no longer shadows it with a writable global.
+// defineProperty replaces the accessor outright and works on both.
+Object.defineProperty(globalThis, 'localStorage', {
+  value: new LocalStorageMock() as unknown as Storage,
+  writable: true,
+  configurable: true,
+})
 
 // Make Vue composables globally available
 global.ref = Vue.ref