chore(deps): bump apexcharts from 7.1.0 to 7.3.0

[dependabot]

Bumps apexcharts from 7.1.0 to 7.3.0.

Release notes

Sourced from apexcharts's releases.

💎 Version 7.3.0

A single-feature release for the plugin layer. Weave reaches contract v4, and api.pointer() tells a plugin which data point the viewer is pointing at or has selected.

Purely additive. No behaviour a chart already had changes, and a chart running no plugins is untouched, which the 446 bytes below reflect. Upgrading is npm install apexcharts@7.3.0.

	gzip
7.2.0 default bundle	266,795 B
7.3.0 default bundle	267,241 B

✨ New

Weave v4: api.pointer()

A plugin could draw on the chart and reserve room for its own UI, but it had no way to know what the viewer was doing. To react to a hover it had to hit-test the SVG itself, re-deriving from raw pixels an answer the chart had already worked out, and then disagree with the tooltip on the same pixel.

api.pointer(fn) forwards the chart's own dataPointMouseEnter, dataPointMouseLeave and dataPointSelection as one normalised payload, and returns an unsubscribe.

ApexCharts.registerPlugin({
  name: 'coordinator',
  apiVersion: 2,
  setup(api) {
    if (typeof api.pointer !== 'function') return
const off = api.pointer((e) => {
  // e.type           'enter' | 'leave' | 'select'
  // e.seriesIndex    which series
  // e.dataPointIndex which point
  // e.category       the resolved display label, e.g. 'Mar'
  // e.seriesName     undefined on a pie
  // e.selected       on 'select' only: is the point now in or out
})

},
})

Three things worth knowing about the payload:

• category is the resolved display label, the same string api.categories carries, not the raw slot list. A plugin coordinating two charts keys on the label, because an index means something different on every chart. Reading globals.labels directly reports 3 where the chart shows Mar.
• seriesName is undefined on a pie, where the series carries bare numbers, rather than a guess.
• selected is filled only on a select, from the chart's own selection set, so a second click on a point reads as a deselect rather than another select.

Nothing here lets a plugin intercept or cancel. The chart's tooltip, selection state and the caller's own dataPoint* events are unaffected, and a handler that throws is contained rather than allowed to break the interaction it was watching. Wiring is lazy and torn down with the chart, so a chart whose plugins never ask pays nothing.

Feature-detect with typeof api.pointer === 'function' rather than declaring apiVersion: 4, on the same terms as api.reserve in 7.2.0: a host older than the version a plugin declares skips that plugin outright rather than serving it a smaller API, so one build keeps working everywhere.

Weave is in the default bundle; for the lean-core channel it is import 'apexcharts/features/weave'.

📦 A note on prerelease tags

... (truncated)

Commits

• 536aef5 release: 7.3.0
• 293c163 feat(weave): tell a plugin what the viewer is pointing at
• 5f5f2f7 release: 7.2.0
• 78bfc9e chore: bump version to 7.2.0
• 2d0f6e8 feat(weave): let a plugin reserve container space for its own UI
• 27d89c3 fix(weave): project charts the host lays out in bands
• 2d67958 fix(series): keep legend collapses across a data update
• 62781f7 build(deps): take apex-commons 0.7.0
• bb4a333 chore: build against the current apex-commons
• 2110bd3 fix(weave): make api.scales layer-local so plugin drawings land on the data
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Quality Report — ConductionNL/openregister @ 2b9ee0f

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	❌
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-specs		✅
test-l10n		❌
test-l10n-parity		✅
format		❌
check-schema-l10n		❌
check-l10n-js		✅
composer			✅	✅ 174/174
npm			✅	❌ 1/653 denied
app:check-code	⏭️
info.xml	✅
REUSE	❌
lockfile sync		✅
PHPUnit					❌
Newman					❌
Playwright					⏭️ deferred: E2E runs locally and on the promotion path only. This pull request targets development, so the suite is asked once per promotion into beta and main rather than once per push per open pull request. Run it on any branch from the Actions tab, or locally with npx playwright test.
Hydra gates					❌

❌ Denied npm licenses

Package	Version	License
apex-commons	0.7.0	Custom: https://apexcharts.com/pricing

---

Quality workflow — 2026-09-15 21:52 UTC

Download the full PDF report from the workflow artifacts.