Skip to content

chore(deps): update all non-major dependencies - #397

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence Type Update
@nuxt/devtools (source) ^3.4.3 → ^3.4.4 age confidence devDependencies patch
@nuxt/devtools-kit (source) ^3.4.3 → ^3.4.4 age confidence dependencies patch
@nuxt/devtools-ui-kit (source) ^3.4.3 → ^3.4.4 age confidence devDependencies patch
@nuxt/nitro-server (source) ^4.6.1 → ^4.6.2 age confidence pnpm-workspace.overrides patch
@nuxt/test-utils ^4.3.3 → ^4.3.4 age confidence devDependencies patch
eslint (source) ^10.12.0 → ^10.13.0 age confidence devDependencies minor
html-validate (source) ^11.16.2 → ^11.17.0 age confidence dependencies minor
nitropack ^2.13.4 → ^2.13.5 age confidence dependencies patch
node 24.22.0 → 24.22.1 age confidence uses-with patch
oxc-parser (source) ^0.154.0 → ^0.155.0 age confidence dependencies minor
sass-embedded ^1.105.2 → ^1.106.1 age confidence devDependencies minor

Release Notes

nuxt/devtools (@​nuxt/devtools)

v3.4.4

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
nuxt/nuxt (@​nuxt/nitro-server)

v4.6.2

Compare Source

v4.6.2 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes
  • nitro: apply useHeadSafe rules to server island head (493565e99)
  • nitro-server: read router params from the path h3 matched (010f6b43d)
  • nitro: match server route rules case-insensitively unless routing is sensitive (f6cfee52c)
  • nuxt: resolve rooted paths through the URL parser (#​36617)
  • nuxt: resolve empty route types in shared context (#​36576)
  • nitro: preserve server tsconfig with relocated build dir (#​36494)
  • nuxt: fix scroll offset for IDs starting with numbers (#​36524)
  • kit: do not exclude module directories with a dot in their name from app tsconfig (#​36331)
  • nuxt: detect vapor slots with rawVaporSlotKey from vue (#​36614)
  • nuxt: keep middleware layout when restoring deferred prerendered route (#​36560)
  • schema: provide default value for experimental.typescriptPlugin (#​36561)
  • vite: only replay compile error overlays to newly loaded pages (#​36611)
  • nuxt: re-export AnyFetchPath for emitted server route types (#​36610)
  • vite: warm up the dev ssr entry from a nitro plugin (#​36615)
  • nitro: avoid unused h3 imports in nuxt/server runtime (#​36609)
  • vite-server: scope asset url helpers to the build (#​36591)
  • nuxt: resolve nuxt/app to the app's runtime (#​36587)
  • kit: lowercase filename-derived handler method on nitro v2 (#​36567)
  • nuxt,nitro: normalise string/array appMiddleware (#​36565)
  • nitro: pass response headers to render:response listeners (#​36583)
  • vite: resolve inlined vue to its bundler build in dev (#​36569)
  • nuxt: don't start a page transition with no page to leave (#​36535)
  • nuxt: preserve error state on aborted or cancelled navigation (#​36546)
  • vite,nitro: link null-byte virtual css through /@id/ in dev (#​36549)
  • kit: resolve module dependencies from the declaring module (#​36542)
  • nitro: only disable h3 + nitro presets when nitroAutoImports is off (#​36548)
  • nitro,vite: don't access unspecified dependencies (#​36541)
  • nitro: don't inline deps under absolute transpile dirs (#​36540)
  • vite-server: respect spa loading template location (#​36536)
💅 Refactors
  • webpack,rspack: inline friendly errors plugin (#​36568)
📖 Documentation
  • remove DeepWiki badge (#​36616)
  • rename H(TTP) to HTTP (#​36559)
  • mention proxy route rule (4a529be68)
  • reference definePlugin and defineNitroPlugin in server plugin tip (64b8e0334)
  • open a PR to list a module (e551df267)
  • clarify testing environments, runners, and config (#​32963)
  • align spa loading template references (#​36552)
  • explain how to disable iOS Safari phone number detection (#​36539)
  • fix outdated internal links (#​36550)
  • explain how to restore nitro auto-imports with compat v5 (7499a445b)
  • add spa-loading-template documentation (#​36537)
🏡 Chore
✅ Tests
  • wait for scroll to settle in route-scroll e2e (ca784deb7)
🤖 CI
  • comment nuxt.com preview links on docs pull requests (#​36594)
  • regenerate kit inlinedDependencies in autofix (4b6da3a29)
  • remove docs deploy triggers (917bdf218)
🎉 New Contributors
❤️ Contributors
nuxt/test-utils (@​nuxt/test-utils)

v4.3.4

Compare Source

v4.3.4 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes
  • runtime: test failure when module cached (#​1856)
  • runtime-utils: support registerEndpoint with FormData in jsdom (#​1846)
  • e2e: restore test context before running setup hooks (#​1855)
  • e2e: apply nuxtConfig overrides to dev server (#​1851)
  • config: prefer h3 version from nitro path (#​1844)
  • module: apply vitest setup only when loaded from vitest config (#​1834)
  • config: respect default resolve conditions in vitest browser mode (#​1843)
  • module: pass required token to open vitest ui in devtools (#​1841)
💅 Refactors
  • module: use package-manager-detector workspace + deno handling (1d59009c7)
🏡 Chore
  • cleanup example deps, unify vitest, and update knip config (#​1840)
❤️ Contributors
eslint/eslint (eslint)

v10.13.0

Compare Source

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#​21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#​21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#​21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#​21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#​21287) (lumir)

Chores

html-validate/html-validate (html-validate)

v11.17.0

Compare Source

Features
  • api: add ErrorFixer.renameTag() (68a3454)
  • api: add related to Message for secondary elements (9d76007)
  • dom: add HtmlElement.startTagLocation and endTagLocation (1fae6dc)
  • rules: suggest multiple elements in prefer-native-element (829addd)
Bug Fixes
  • dom: handle quoted strings and whitespace in selector combinators (a23ffa2), closes #​355
  • lexer: match </script> end tag case-insensitively (6b93d63), closes #​375
  • lexer: match </style> end tag case-insensitively (c6e5ee7), closes #​375
  • lexer: match </textarea> end tag case-insensitively (6c75f7a), closes #​375
  • lexer: match </title> end tag case-insensitively (49ef906), closes #​375
  • lexer: match script, style, textarea and title start tags case-insensitively (f4fffd1), closes #​375
  • parser: match html end tags case-insensitively (ededae8), closes #​374
  • parser: match retained svg desc and title end tags case-insensitively (337d006), closes #​375
  • rules: ignore role matching implicit role in prefer-native-element (c7d51af), closes #​373

v11.16.4

Compare Source

Bug Fixes
  • config: disable cache in FlatConfigLoader when configOverride is given (28da344), closes #​369
  • dom: handle empty attribute selector (8a467b9), closes #​356
  • rules: unrecognized-char-ref flags legacy references without semicolon (b467b84), closes #​312
  • rules: report error on <label> when empty or hidden instead of on <input> (8e70f82), closes #​290

v11.16.3

Compare Source

Bug Fixes
  • add @__NO_SIDE_EFFECTS__ annotation to define* helpers for better treeshaking (f44b9b3)
  • html5: allow color attribute on <link> (b0ab7f9)
  • html5: allow fetchpriority attribute on <link> (d04875f)
  • html5: allow hreflang attribute on <link> (13f73c0)
  • html5: allow media attribute on <link> (3b22eb0)
  • html5: allow sizes attribute on <link> (3a99da7)
  • html5: allow type attribute on <link> (0b298e7), closes #​371
nitrojs/nitro (nitropack)

v2.13.5

Compare Source

compare changes

Preset Changes
  • aws-amplify: Support node.js 22 and 24 runtimes (#​4244)
  • cloudflare: Prefer source path rather than #imports (#​4247)
  • vercel: Add framework info to build output config (#​4475)
  • vercel: Add support for node@​24 (v2) (#​4628)
✅ Tests
  • Fix windows path handling in new tests (f6bcc4f4)
  • Use memory cache storage in dev fixture to avoid flaky cache test (e98dced6)
🩹 Fixes
  • types: Only strip extensions that ts retries (f3a57737)
  • types: Emit auto-import paths as files, not directories (#​4334)
  • Respect h3 url in swr handler (#​4386)
  • Preserve sourcemap mappings for chunks containing user code (#​4450)
  • build: Count each output file once in the size report (#​4569)
  • vercel: Mark header-only route entries as continue (#​4651)
  • cloudflare: Guard nodejs_compat flag by compatibility date (#​4663)
  • cloudflare: Detect implicit nodejs_compat when deployConfig is false (#​4667)
  • cloudflare: Warn only about conflicting asset overrides (#​4690)
  • externals: Match string rules against windows ids (#​4732)
  • externals: Normalize resolved paths on windows (#​4752)
  • rollup: Keep import attributes in the build output (#​4519)
  • dev: Close upgraded sockets and resolve on worker shutdown timeout (#​4671)
  • openapi: Only filter undefined from array nodes (#​3895)
  • dev: Proxy websocket upgrades for devProxy routes with ws (#​4788)
  • vercel: Strip trailing slash from prerendered route overrides (#​4791)
  • vercel: Use SameSite=Lax for skew protection cookie (#​4789)
  • static: Respond with 404 when a public asset is missing on disk (#​4787)
  • bun: Support NITRO_BUN_IDLE_TIMEOUT=0 (#​4190)
  • vercel: Enable ISR passQuery when allowQuery is set (#​4790)
  • prepare: Keep public assets inside output dir when cleaning (#​4798)
  • task: Support dev worker listening on a unix socket or named pipe (#​4797)
  • node, deno: Support PORT=0 for random port assignment (#​4796)
  • bun: Use hostname option for Bun.serve (#​4795)
  • prerender: Only refuse .. as a whole path segment (#​4794)
  • cloudflare: Fix baseURL traversal for wrangler assets dir (#​4793)
  • cloudflare: Use pathe for POSIX relative paths in wrangler.json (v2) (#​4801)
📖 Documentation
  • Workaround for search-and-replace issues (#​3078)
📦 Build
  • Resolve subpath types under nodenext (#​4757)
🌊 Types
  • Widen RollupConfig.plugins to accept rolldown-typed plugins (#​4484)
  • Add missing wrangler observability types (#​4742)
🔥 Performance
  • dev: Cache sourcemap consumer per bundle in error handler (#​4786)
❤️ Contributors
actions/node-versions (node)

v24.22.1: 24.22.1

Compare Source

Node.js 24.22.1

sass/embedded-host-node (sass-embedded)

v1.106.1

Compare Source

  • Fix a bug where an attribute selector with an empty value (such as
    [class=""]) would crash when serializing.

  • Don't crash when serializing a number with an empty unit. This is only
    possible through the JavaScript and Dart APIs or the embedded protocol.

Embedded Dart Sass
  • More robustly convert invalid value errors into PARAMS errors.

v1.106.0

Compare Source

  • Don't normalize CSS escapes in statement contexts that can contain
    interpolation. For example, @f\6Fo is now emitted as written rather than
    normalized to @foo.

  • Fix a bug where quotes would be removed from attribute selector values that
    contained backslashes.

  • Fix invalid source spans that could cause crashes when encountering a syntax
    error in selectors or media queries that also contain escape sequences.

  • Fix a bug where the indented syntax parser would crash when parsing a file
    where the first statement was indented and appeared after the first line.

  • Fix a bug that could cause crashes when encountering errors or warnings in
    interpolations that contain patterns like // */.

  • Potentially breaking compatibility fix: CSS escape codes whose values are
    0, for Unicode surrogates, or greater than the maximum allowed code point are
    now consistently normalized to U+FFFD REPLACEMENT CHARACTER in expression
    contexts. Previously, in some cases these were instead normalized to the
    normalized form of the original escape sequence, which violates the principle
    that all escape sequences for identical values should be normalized the same
    way. In other cases, these would simply throw errors.

    As a special case, \0 on its own will continue to be normalized to \0 to
    support historical CSS hacks.

  • Potentially breaking bug fix: Throw an error for mixins and functions that
    have rest parameters which are the same as normal parameters. Previously, the
    positional parameters wouldn't be accessible and calling such a mixin or
    function with a named argument would crash the compiler.

  • Potentially breaking bug fix: Fix various cases where using a CSS escape
    code at the beginning of an identifier would change parsing behavior versus
    using the character directly.

  • Potentially breaking bug fix: When a number's unit is ambiguous with a
    numeric exponent, the unit is now serialized as an escape code rather than a
    literal e to avoid being interpreted as an exponent by CSS.

  • Potentially breaking bug fix: Don't parse a CSS escape code for U+45 LATIN
    CAPITAL LETTER E or U+65 LATIN LOWERCASE LETTER E as an exponent in
    @keyframes percentage selectors.

  • Potentially breaking bug fix: Properly normalize underscores written as
    CSS escape codes in variable, mixin, and function names.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@socket-security

socket-security Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

@pkg-pr-new

pkg-pr-new Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/@nuxt/hints@397

commit: df2ec46

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from dece7d4 to 4104515 Compare October 22, 2026 17:31
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 4104515 to df2ec46 Compare October 23, 2026 00:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants