chore(deps): bump the npm-dependencies group in /app/frontend with 4 updates

[dependabot]

Bumps the npm-dependencies group in /app/frontend with 4 updates: hls.js, vue-router, @types/node and sass.

Updates hls.js from 1.7.1 to 1.7.2

Release notes

Sourced from hls.js's releases.

v1.7.2

Summary

HLS.js v1.7.2 includes bug fixes and improvements over the last release.

Changes Since The Last Release

video-dev/hls.js@v1.7.1...v1.7.2

• Bundle externals in TypeScript type definitions (#8019) @​robwalch
• Fix capLevelToPlayerSize with stable player size (#8011)
• Prevent duration collapse on seek to gap at end-of-stream (#8027)
• Fix blocking reload for MSN 0 (#8013) @​darfink
• Process empty WebVTT parts with MAP segments (#8012)
• Fix IMSC1 millisecond parsing (#8003) @​luantaraschi
• Fix default the TTML tick rate for IMSC1 subtitles (#8024)
• Fix HLS Variable Substitution after a Media Playlist parsing error (#7992) @​luantaraschi
• Docs: add inspect.software health badge (#7989) @​Nayjest

Demo Page

https://e06ac3e1.hls-js-dev.pages.dev/demo/

Feedback

Please provide feedback via Issues in GitHub. For more details on how to contribute to HLS.js, see our CONTRIBUTING guide.

Commits

• dd669ec Do not mark end-of-stream on empty or GAP segments
• 28aad06 fix(subtitles): process empty WebVTT parts
• ded4e78 Default the TTML tick rate instead of dividing by zero
• 971ffee Convert IMSC1 milliseconds to seconds instead of multiplying
• f0b8f96 fix: enable blocking reload for MSN 0
• d12d447 Bundle externals in type definitions (#8019)
• bc96ed9 Fix capLevelToPlayerSize with stable player size
• d80bc2f Merge pull request #8017 from video-dev/renovate/wrangler-4.x
• dd8d2be Update dependency wrangler to v4.124.0
• f9c3eb7 Merge pull request #8016 from video-dev/renovate/microsoft-api-extractor-7.x
• Additional commits viewable in compare view

Updates vue-router from 5.3.0 to 5.3.1

Release notes

Sourced from vue-router's releases.

v5.3.1

   🐞 Bug Fixes

• experimental: Handle non-string params for isActive  -  by @​posva (92cfd)

    View changes on GitHub

Commits

• 9a66989 release: vue-router@5.3.1
• 4fa1401 ci: bump pnpm/action-setup from 6.0.9 to 6.0.10 in the actions group (#2795)
• 92cfd6f fix(experimental): handle non-string params for isActive
• See full diff in compare view

Updates @types/node from 26.4.0 to 26.4.1

Commits

• See full diff in compare view

Updates sass from 1.103.1 to 1.104.0

Release notes

Sourced from sass's releases.

Dart Sass 1.104.0

To install Sass 1.104.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Potentially breaking compatibility fix: Colors now convert the special values NaN and negative zero, as well as infinity and negative infinity for polar-hue channels, to 0 as per the CSS spec.

• The special value negative zero is now serialized as -0 instead of 0 for greater compatibility when using it in CSS calculations.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.104.0

• Potentially breaking compatibility fix: Colors now convert the special values NaN and negative zero, as well as infinity and negative infinity for polar-hue channels, to 0 as per the CSS spec.

• The special value negative zero is now serialized as -0 instead of 0 for greater compatibility when using it in CSS calculations.

Commits

• e01e268 Merge pull request #2845 from sass/dependabot/pub/pub_api_client-4.0.0
• b7b3ce3 Drop unnecessary import
• 0ea3ef0 Implement degenerate colors (#2840)
• ea6a8e2 Use TypeScript 7 without breaking Eslint (#2844)
• c8928c4 Automatically merge dependabot PRs (#2843)
• dfefe28 Bump pub_api_client from 3.2.0 to 4.0.0
• 3c6bf54 Bump browser-actions/setup-chrome from 2.1.2 to 2.2.0 (#2841)
• 9f6876c Bump postcss from 8.5.25 to 8.5.26 in /pkg/sass-parser (#2836)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions