chore(deps): bump pinia from 3.0.4 to 4.0.3

[dependabot]

Bumps pinia from 3.0.4 to 4.0.3.

Commits

• 5d6ac5b ci: let pnpm version come from packageManager
• 35c334b release: pinia@4.0.3 @​pinia/nuxt@​1.0.2
• 6d5da49 chore: pnpm version
• f09d894 test: dedupe
• 3714487 fix: guard VUE_PROD_DEVTOOLS in dist output (#3168)
• b10e703 ci: fix branches
• 94ec8b1 ci: fix branches
• 9db7197 docs: add robots.txt and sitemap.xml (#3171)
• a94de27 feat(nuxt): declare Nuxt 5 compatibility (#3166)
• b19f9ba feat(playground): update to @​vue/repl v4 (#3163)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for pinia since your current version.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[github-actions]

Quality Report — ConductionNL/openregister @ cc35f09

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		❌
stylelint		❌
build		❌
check-specs		❌
test-l10n		❌
test-l10n-parity		❌
format		❌
check-schema-l10n		❌
check-l10n-js		❌
composer			✅	✅ 174/174
npm			❌	❌
app:check-code	⏭️
info.xml	✅
REUSE	❌
PHPUnit					✅
Newman					✅
Playwright					🚨 NO VERDICT — enabled but never ran
Hydra gates					❌

---

Quality workflow — 2026-08-30 23:00 UTC

Download the full PDF report from the workflow artifacts.

[github-actions]

Quality Report — ConductionNL/openregister @ de24e9e

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		❌
stylelint		❌
build		❌
check-specs		❌
test-l10n		❌
test-l10n-parity		❌
format		❌
check-schema-l10n		❌
check-l10n-js		❌
composer			✅	✅ 174/174
npm			❌	❌
app:check-code	⏭️
info.xml	✅
REUSE	❌
PHPUnit					✅
Newman					✅
Playwright					🚨 NO VERDICT — enabled but never ran
Hydra gates					❌

---

Quality workflow — 2026-08-31 00:29 UTC

Download the full PDF report from the workflow artifacts.

[github-actions]

Quality Report — ConductionNL/openregister @ 314c29b

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		❌
check-specs		✅
test-l10n		✅
test-l10n-parity		✅
format		✅
check-schema-l10n		✅
check-l10n-js		✅
composer			✅	✅ 174/174
npm			✅	✅ 532/532
app:check-code	⏭️
info.xml	✅
REUSE	❌
PHPUnit					✅
Newman					✅
Playwright					🚨 NO VERDICT — enabled but never ran
Hydra gates					✅

---

Quality workflow — 2026-08-31 02:34 UTC

Download the full PDF report from the workflow artifacts.

[rubenvdlinde]

Closing: pinia@4 installs but cannot run here, verified rather than assumed.

pinia 4 ships ESM-only, and this app runs Jest, which cannot parse it:

node_modules/pinia/dist/pinia.js:6
SyntaxError: Cannot use import statement outside a module

> 2 | import { createPinia, setActivePinia } from 'pinia'
  ● Test suite failed to run

Every unit suite that touches a store fails to even load, and Frontend Build fails with it.

This is not a version-pick problem. No value of pinia fixes it — adopting 4 requires one of:

• configuring Jest for ESM (transformIgnorePatterns for pinia, plus ESM-aware transforms), or
• migrating the unit suite to vitest, which handles ESM natively

Both are real pieces of work with their own risk, and neither belongs inside a dependency bump.

The same failure occurs on all four apps carrying this bump — openregister, integriq, dossiq and planninq — so it is the package, not any one app's configuration.

Dependabot will reopen this when the test setup can take it. Measured tonight: of 51 npm majors tested, 24 could not install at all; this one installs and then fails at runtime, which is why CI rather than resolution caught it.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.