Repository navigation
fix(deps): update all non-major dependencies - #306
renovate[bot] wants to merge 1 commit into
Conversation
Dokploy Preview Deployment
|
22bd864 to
525592b
Compare
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 525592b56f
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "eslint": "10.8.0", | ||
| "leaflet": "1.9.4", | ||
| "nuxt": "4.4.8", | ||
| "nuxt": "4.5.1", |
There was a problem hiding this comment.
This bump makes the project's declared runtime too broad: nuxt@4.5.1 declares engines.node as ^22.19.0 || ^24.11.0 || >=26.0.0 in the updated lockfile, but package.json still permits >=24.0.0, and setup-node's node-version-file: package.json path checks engines.node in both workflows. On any runner or contributor machine that resolves to Node 24.0 through 24.10, install/build runs under a Node version Nuxt no longer supports; please raise the project engine or pin CI to 24.11+ with this dependency bump.
Useful? React with 👍 / 👎.
d5a2557 to
b833104
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: b833104f3a
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| }, | ||
| "devDependencies": { | ||
| "@antfu/eslint-config": "9.1.0", | ||
| "@antfu/eslint-config": "9.3.0", |
There was a problem hiding this comment.
Fresh evidence beyond the earlier Nuxt-engine comment: this @antfu/eslint-config bump now pulls eslint-plugin-command 4.0.0 (pnpm-lock.yaml:7944), whose own engine is ^22.22.2 || >=24.15.0 (pnpm-lock.yaml:4607-4609). Since package.json still advertises Node >=24.0.0, contributors or CI images on Node 24.0-24.14 can run pnpm lint under a runtime the updated lint stack no longer supports; please raise or pin the project runtime to at least 24.15 (or a supported 22.22.2 line).
Useful? React with 👍 / 👎.
f105d5e to
5dd2493
Compare
afc8e70 to
ad06f42
Compare
|
Important Review skippedBot user detected. To trigger a single review, invoke the
 |
6cca4ad to
5a3c90f
Compare
31f4327 to
1021425
Compare
ebc4c53 to
cb7cdb1
Compare
Codex Review Summary: ✅ CompletedThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: c9753fd8d0
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "eslint": "10.12.0", | ||
| "leaflet": "1.9.4", | ||
| "nuxt": "4.4.8", | ||
| "nuxt": "4.6.0", |
There was a problem hiding this comment.
On Windows, Nuxt 4.6.0 leaves its renderer externalized because Nitro fails to match backslash paths, causing application routes to return HTTP 500 during development and prerender/build workflows. This blocks contributors using Windows from running this site's nuxt dev or nuxt generate commands; the confirmed upstream regression was fixed in Nuxt 4.6.1, so pin 4.6.1 or apply the documented externals workaround.
Useful? React with 👍 / 👎.
Dokploy Preview Deployment
|
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 3437a7c1b4
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "vue-router": "5.1.0", | ||
| "zod": "4.4.3" | ||
| "vue": "3.5.44", | ||
| "vue-router": "5.4.0", |
There was a problem hiding this comment.
When a visitor navigates client-side from /session to /session/:id, app/pages/session.vue renders the nested page through <NuxtPage>, while app/pages/session/[id].vue remains pending on top-level await useFetch calls. Vue Router 5.4.0 has a confirmed regression in nested Suspense routes with pending async component roots that throws an uncaught getRootNode TypeError; its fix was merged only after 5.4.0. Use a Nuxt/router combination containing that fix or patch the router before shipping this update.
Useful? React with 👍 / 👎.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
9.1.0→9.5.11.2.7→1.2.101.2.35→1.2.441.2.453.14.0→3.16.21.16.0→1.17.02.2.4→2.6.22.0.0→2.2.110.4.0→10.6.00.22.0→0.23.20.23.38.2.0→8.6.21.7.0→1.8.71.9.21→1.9.2266.7.3→66.12.066.7.3→66.12.066.7.3→66.12.066.7.3→66.12.066.7.3→66.12.014.3.0→14.4.0v7.0.0→v7.0.1v5.0.0→v5.0.1v6.4.0→v6.5.07.0.0→7.0.310.6.0→10.14.04.4.8→4.6.46.5.2→6.10.411.9.0→11.28.11v6.0.9→v6.1.10.26.0→0.63.266.7.3→66.12.03.5.39→3.5.455.1.0→5.4.05.5.03.3.5→3.3.144.4.3→4.6.7Release Notes
antfu/eslint-config (@antfu/eslint-config)
v9.5.1Compare Source
🐞 Bug Fixes
antislopplugins composition, refactor - by @antfu (a213d)View changes on GitHub
v9.5.0Compare Source
🚀 Features
View changes on GitHub
v9.4.1Compare Source
🚀 Features
View changes on GitHub
v9.4.0Compare Source
🚀 Features
jsdoc v64unicorn v74e18e v0.8solid v0.17- by @antfu (33a41)minimumReleaseAgeExcludePruneby default - by @antfu (9526c)View changes on GitHub
v9.3.0Compare Source
🚀 Features
🐞 Bug Fixes
eslint-plugin-erasable-syntax-onlyas optional peer - by @KazariAI in #859 (01642)View changes on GitHub
v9.2.0Compare Source
🚀 Features
🐞 Bug Fixes
scripts-infoin package.json sorting - by @antfu (09680)eslint-plugin-astrov2 to resolve unmet peer warning - by @ycs77 in #855 (5ada5)View changes on GitHub
nuxt/content (@nuxt/content)
v3.16.2Compare Source
Bug Fixes
Performance Improvements
v3.16.1Compare Source
Features
content.llmsoption to disable thenuxt-llmsintegration (#3843) (656a5ce)Bug Fixes
v3.16.0Compare Source
Bug Fixes
hub.db(#3822) (8841abc)#content/adapterto prevent prerender failure (#3830) (400390a)v3.15.2Compare Source
Bug Fixes
v3.15.1Compare Source
Bug Fixes
v3.15.0Compare Source
Features
bunsqlite connector for Bun runtime deployments (#3741) (92ac2ab)Bug Fixes
nuxt/eslint (@nuxt/eslint)
v1.17.0Compare Source
🚀 Features
🐞 Bug Fixes
View changes on GitHub
nuxt/icon (@nuxt/icon)
v2.6.2Compare Source
👉 Changelog
compare changes
🔥 Performance
🩹 Fixes
📖 Documentation
❤️ Contributors
v2.6.1Compare Source
👉 Changelog
compare changes
🔥 Performance
🩹 Fixes
🤖 CI
🎉 New Contributors
❤️ Contributors
v2.6.0Compare Source
🚀 Features
providercan now be set separately for SSR and the browser:provider: { server: 'server', client: 'iconify' }. A string works as before. (#541)dirincustomCollections/serverBundle.collectionsdeclared in a Nuxt layer now resolves against that layer's directory instead of the app'srootDir. If a base layer declared a collection and expected each app to supply the SVGs, declare it in the app or use an absolute path. (#530)🐞 Bug Fixes
iconsquery in cached handler for Nitro 3 - by @KazariAI and Sebastien Chopin in #542 (01bfc)dirfrom the layer that declared it - by @giaBaoJS and @atinux in #530 (8f146)View changes on GitHub
v2.5.1Compare Source
🐞 Bug Fixes
View changes on GitHub
v2.5.0Compare Source
🐞 Bug Fixes
withkey on externalized icon JSON imports - by @agantelin in #523 (00fa3)View changes on GitHub
v2.4.1Compare Source
No significant changes
View changes on GitHub
v2.3.1Compare Source
🐞 Bug Fixes
View changes on GitHub
v2.3.0Compare Source
🚀 Features
View changes on GitHub
v2.2.5Compare Source
🐞 Bug Fixes
View changes on GitHub
nuxt/image (@nuxt/image)
v2.2.1Compare Source
🚨 Security
This release fixes a vulnerability in the
/_ipximage transformation route.ipxwas affected by an integer overflow when decoding a multi-page image, so a crafted source image could corrupt memory in the server process with a single unauthenticated request (GHSA-qf89-6xm4-66wm; our advisory for the@nuxt/imageside is GHSA-p5vf-pjf5-ggj3). Sites where an attacker cannot control any image source are not affected.@nuxt/imagenow requiresipx ^4.1.0, which rejects oversized multi-page images with a400before decoding them.ipxis an optional dependency, so after upgrading runnpm ls ipxto confirm a patched version resolves.Behaviour change:
/_ipxnow only accepts common web image formats as input (JPEG, PNG, WebP, GIF, SVG, AVIF, HEIC) and responds403to anything else, before decoding it. If you transform other formats (for example TIFF), list them with the newimage.ipx.allowedInputFormatsoption. For sources you do not fully trust, also considerimage.ipx.restrictDecoders, which blocks the decoders of every other format for the whole process.👉 Changelog
compare changes
🩹 Fixes
750a4f0)srvx/nodeis not required at runtime (#2336)NitroRuntimeConfigfromnitropack/types(#2354)🎉 New Contributors
❤️ Contributors
v2.2.0Compare Source
👉 Changelog
compare changes
🚀 Enhancements
🩹 Fixes
🏡 Chore
✅ Tests
🤖 CI
releaseworkflows in nuxt org (#2296)pnpm/setupanddevEngines(#2332)de96294)❤️ Contributors
v2.1.0Compare Source
👀 Highlights
Nuxt Image 2.1 ships eight new image providers, a major upgrade to our image processing engine, and a bunch of fixes across existing providers.
🖼️ IPX v4
Under the hood, we've upgraded to IPX v4 which brings significant improvements:
svgo: falsewould return untouched SVGs. The sanitizer now removes SMIL attribute injection, foreign content (<foreignObject>,<iframe>, etc.), and unsafe URIs across all elementsopacity,brightness,saturation,hue,lightness,autoorient,dilate,erode,clahe, andlinear400errors with clear messages instead of cryptic500sparseURLoption🌐 New Providers
This release adds support for eight new image optimization services:
🔧 Provider Improvements
keymodifier for named presets (#2207)baseURLfor custom CDN setups (#2273)minimumCacheTTLis now configurable (#2278)📦 Type Exports
NuxtImgPropsandNuxtPicturePropsare now exported from the runtime, making it easier to type your own components that wrap<NuxtImg>or<NuxtPicture>(#2115).👉 Changelog
compare changes
🚀 Enhancements
keymodifier (#2207)minimumCacheTTLconfigurable (#2278)baseURLoption to Sanity provider (#2273)🩹 Fixes
137ee63)providerkey in generated image options (#2279)7e561f6)237e480)baseURLfor urls with no operations (#2162)imagesrcsetpreload when densities are set w/o sizes (#2176)runtimeConfig.ipxwith defaults (#2134)withoutEnlargementmodifier type (#2133)remote_imagesconfig (#2086)formats(#2038)layer.config.image(23b8cef)data-*in imgAttrs (#2017)public/dir in relation torootDir(3e07761)📖 Documentation
6f59ab1](https://Configuration
📅 Schedule: (in timezone Asia/Taipei)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.