Bump the node-dependencies group across 1 directory with 2 updates

[dependabot]

Bumps the node-dependencies group with 2 updates in the / directory: alpinejs and apexcharts.

Updates alpinejs from 3.15.12 to 3.16.1

Release notes

Sourced from alpinejs's releases.

v3.16.1

What's Changed

• Fix Persist compatibility with older Alpine versions by @​calebporzio in alpinejs/alpine#4875

Full Changelog: alpinejs/alpine@v3.16.0...v3.16.1

v3.16.0

What's Changed

• Fix data loss when binding objects to regular attributes by @​daftspunk in alpinejs/alpine#4826
• Fix mask resurrecting key in object when it is cleared by @​danharrin in alpinejs/alpine#4812
• Fix x-if and x-for content duplicating during morph by @​ganyicz in alpinejs/alpine#4785
• fix: sync x-model select value after x-for renders options by @​ljk0071 in alpinejs/alpine#4769
• Fix x-bind:value on <option> losing attribute when value is an empty string by @​joshhanley in alpinejs/alpine#4831
• Fix :value bindings not updating custom elements when bound object data mutates by @​joshhanley in alpinejs/alpine#4833
• Add .parent modifier for x-intersect by @​kevinruscoe in alpinejs/alpine#4839
• Upgrade Cypress by @​joshhanley in alpinejs/alpine#4849
• Preserve x-data scope when its expression changes by @​calebporzio in alpinejs/alpine#4868
• Fix persisted single-value stores by @​joshhanley in alpinejs/alpine#4859
• Pass cleanup callback to direct store interceptors by @​calebporzio in alpinejs/alpine#4869
• Split draft and npm release workflows by @​calebporzio in alpinejs/alpine#4870
• Use Node 24 for release workflows by @​calebporzio in alpinejs/alpine#4872

New Contributors

• @​daftspunk made their first contribution in alpinejs/alpine#4826
• @​ljk0071 made their first contribution in alpinejs/alpine#4769
• @​kevinruscoe made their first contribution in alpinejs/alpine#4839

Full Changelog: alpinejs/alpine@v3.15.12...v3.16.0

Commits

• 6496439 Bump version to 3.16.1
• c6069ff Bump version to 3.16.0
• 31119c5 Pass cleanup callback to direct store interceptors (#4869)
• bc956c2 Fix persisted direct stores (#4859)
• 7e28b0c Preserve x-data scope when its expression changes (#4868)
• 13266d2 Fix :value bindings not updating custom elements when bound object data mut...
• 3b125f9 Merge pull request #4831 from alpinejs/josh/fix-bind-value-empty-string-on-op...
• 707c20c Simplify option value fix to delegate to bindAttribute
• e95ea10 Fix x-bind:value on \<option> losing attribute when value is an empty string
• 3c64d45 fix: sync x-model select value after x-for renders options (#4769)
• Additional commits viewable in compare view

Updates apexcharts from 6.5.0 to 6.8.0

Release notes

Sourced from apexcharts's releases.

💎 Version 6.8.0

A minor release: dataLabels.offsetX / offsetY now accept a function, so a label can be nudged per data point instead of per chart. Everything else is a fix, spanning sparkline layout, brush auto-scaling, CSP-safe SVG export, threshold gradients and CSV export.

One deliberate visual change: area sparklines lose the empty strip under the fill (see below). Every other existing config renders as it did on 6.7.1.

✨ New

Per-data-point dataLabels offsets (#5107)

dataLabels.offsetX and dataLabels.offsetY now take number | ((opts) => number). The function receives the same { series, seriesIndex, dataPointIndex, w } signature that dataLabels.style.colors already accepts, so labels that collide between two series at the same x can be pushed apart:

dataLabels: {
  offsetY: ({ seriesIndex }) => (seriesIndex === 0 ? -12 : 12),
}

dataLabels is chart-wide config, which is why a plain array keyed by data point index could not solve this: it would apply identically to every series, and the reported overlap is between series. A function also survives updateSeries, where captured indices would otherwise desync. Keep it pure, as it may be called more than once per label.

Resolution now runs through one shared helper across the line/area, bar, treemap and radar paths, which fixed four latent defects on the way:

• line, area and scatter labels all vanished when the offset was non-numeric, because x was computed above the isNaN(x) guard and the guard could never fire
• the slope chart branch read the raw config value instead of the resolved one, yielding a NaN x coordinate
• radar passed its series index as the data point index, so per-point offsets shifted whole series
• bar and rangeBar invoked the user function a second time at draw time for a value they discard

🐛 Fixes

Area sparklines no longer leave a gap under the fill (#5137)

A sparkline reserved stroke.width / 2 of grid padding at the top and bottom unconditionally. An area sparkline's fill runs to the baseline, so that bottom inset showed as a strip of empty space under the fill: 2px at the default 4px area stroke.

The inset now reserves only what the ink cannot absorb itself. Where the stroke traces the data points (line, area, scatter, unstacked), the distance from the extreme datum to the axis extreme already swallows part or all of the overhang, so only the remainder is reserved. Fills reserve nothing since they are drawn unstroked, and stroke.show: false reserves nothing at all. Anything that strokes to the baseline or fills the plot (bar, heatmap, candlestick, stacked) keeps the full reservation, as does every non-axis sparkline. Room is measured against the smallest plot the insets could leave, so the estimate errs toward over-reserving and can never clip.

Two defects found while measuring this are fixed alongside it:

• Dimensions.gridPad aliased config.grid.padding, so layout insets were written back into the user's own config object, accumulated across renders, and were then read by Core.resizeNonAxisCharts as though the user had asked for them. The resolved padding is now a copy, published as w.layout.gridPad.
• the sparkline marker padding gate tested markers.size > 0, which is false for an array ([0,6] > 0 is NaN > 0), so array-sized markers got no padding and were clipped by 6.5px. It now gates on globals.markers.largestSize, covering both markers.size and markers.discrete.

autoScaleYaxis no longer drops a boundary point on a brush selection (#5251)

A brush selection reconstructs its x range from the selection rect's DOM bounds, so the pixel to timestamp round-trip can land xaxis.max a sub-pixel fraction below the timestamp of the boundary data point. The y-extrema window trimmed on a strict compare, so that point was excluded from the scale while its marker and the line segment leading to it were still painted, and the line escaped or clipped at the top of the grid. Reaching the same window by panning scaled correctly, which is what made it look arbitrary.

The trim window is now widened by one rendered pixel, expressed in data units from the current x-domain-to-pixel ratio rather than a fixed timestamp epsilon. Both edges are covered, since a sub-pixel overshoot on xaxis.min drops the leftmost point the same way. This also covers a programmatic zoomX() with fractional bounds, and the xaxis.min / xaxis.max reported to your selection event are unchanged.

SVG export is CSP-safe (#5146)

getSvgString() and the SVG download no longer inject a <style> element, so exports work under a strict Content Security Policy. Styles are inlined onto the elements instead.

The bulk of the work was keeping export fidelity while dropping that tag. The legend stylesheet was injected into a descendant of the exported wrapper, so it was cloned and serialized anyway and still tripped CSP. Transient overlays were hidden only at the first match per selector, so a chart with several (one yaxis tooltip per y-axis, an extra element for point annotations) rendered the leftovers visibly, since their opacity: 0 came from the stylesheet the export no longer carries. Inline styles set by modules are no longer clobbered, which preserves legend.fontSize (the legend box is measured at that size, so a hardcoded 14px overflowed) and the heatmap gradient legend's deliberate overrides. Rules that the inlined subset had dropped are restored: flex-wrap and flex-direction for side and grouped-horizontal legends, alignment, legend-group display, marker positioning, the !important on hidden zero and null series, and the flip transforms used by rounded stacked bars. With injectStyleSheet: false, which is what a strict-CSP app sets, side legends had been exporting as a single horizontal row and bottom legends had stopped wrapping.

... (truncated)

Commits

• 47627b1 release: 6.8.0
• d3642ae chore: bump version to 6.8.0
• 26037e5 fix(autoScaleYaxis): keep a sub-pixel brush boundary point in the y extrema
• cc26884 Merge pull request #5269 from apexcharts/fix/sparkline-stroke-inset
• 6d7fd3d fix(sparkline): reserve stroke overhang only where the ink needs it
• df85d1b Merge pull request #5257 from waterWang/fix/csp-safe-export
• cb62745 Merge remote-tracking branch 'origin/main' into fix/csp-safe-export
• 45708bb fix(build): move resolveDataLabelOffset out of the shared DataLabels module
• 1dd8f73 Merge remote-tracking branch 'origin/main' into fix/csp-safe-export
• 43f5549 fix(build): re-export resolveDataLabelOffset through the shared shim
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions