Skip to content

fix(deps): update all non-major dependencies - #244

Merged
mirumodapon merged 1 commit into
mainfrom
renovate/all-minor-patch
Aug 2, 2026
Merged

fix(deps): update all non-major dependencies#244
mirumodapon merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jul 5, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@antfu/eslint-config 9.1.09.2.0 age confidence devDependencies minor
@iconify-json/tabler 1.2.351.2.38 age confidence devDependencies patch
@nuxt/content (source) 3.14.03.15.2 age confidence dependencies minor
@​nuxt/icon 2.2.42.4.1 age confidence dependencies minor
@nuxt/image (source) 2.0.02.1.0 age confidence dependencies minor
@nuxtjs/i18n (source) 10.4.010.6.0 age confidence dependencies minor
@nuxtjs/mdc 0.22.00.22.2 age confidence dependencies patch
@takumi-rs/core (source) 1.7.01.8.7 age confidence devDependencies minor
@unocss/eslint-plugin (source) 66.7.366.7.5 age confidence devDependencies patch
@unocss/extractor-mdc (source) 66.7.366.7.5 age confidence devDependencies patch
@unocss/nuxt (source) 66.7.366.7.5 age confidence devDependencies patch
@unocss/preset-wind4 (source) 66.7.366.7.5 age confidence devDependencies patch
@unocss/transformer-directives (source) 66.7.366.7.5 age confidence devDependencies patch
@vueuse/core (source) 14.3.014.4.0 age confidence dependencies minor
actions/checkout v7.0.0v7.0.1 age confidence action patch
actions/setup-node v6.4.0v6.5.0 age confidence action minor
csv-parse (source) 7.0.07.0.1 age confidence dependencies patch
eslint (source) 10.6.010.8.0 age confidence dependencies minor
nuxt (source) 4.4.84.5.1 age confidence dependencies minor
nuxt-og-image (source) 6.5.26.7.5 age confidence devDependencies minor
pnpm (source) 11.9.011.18.0 age confidence packageManager minor
satori 0.26.00.29.0 age confidence dependencies minor
unocss (source) 66.7.366.7.5 age confidence devDependencies patch
vue (source) 3.5.393.5.40 age confidence dependencies patch
vue-router (source) 5.1.05.2.0 age confidence dependencies minor
vue-tsc (source) 3.3.53.3.8 age confidence devDependencies patch 3.3.9

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v9.2.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
nuxt/content (@​nuxt/content)

v3.15.2

Compare Source

Bug Fixes
  • dev: ignore temporary files in content source paths (#​3784) (a019e70)
  • security: reject SQL function calls in query WHERE clauses (#​3819) (847d523)

v3.15.1

Compare Source

Bug Fixes

v3.15.0

Compare Source

Features
Bug Fixes
  • content: support validator detection with pnpm enableGlobalVirtualStore (#​3791) (6b2720b)
  • hmr: update all matching collections when a file changes (#​3802) (06f8edb)
  • search: softer heading-level boost curve and tuned defaults (#​3801) (00d25a5)
  • vercel: use tmp directory to clone contents (#​3810) (793d59a)
nuxt/image (@​nuxt/image)

v2.1.0

Compare Source

v2.1.0 is the next minor release.

👀 Highlights

Nuxt Image 2.1 ships eight new image providers, a major upgrade to our image processing engine, and a bunch of fixes across existing providers.

🖼️ IPX v4

Under the hood, we've upgraded to IPX v4 which brings significant improvements:

  • Smaller bundles: IPX is now ESM-only with reduced dependency size
  • Stronger SVG security: SVG sanitization now always runs, regardless of optimization settings. This fixes a potential XSS vector where svgo: false would return untouched SVGs. The sanitizer now removes SMIL attribute injection, foreign content (<foreignObject>, <iframe>, etc.), and unsafe URIs across all elements
  • New image modifiers: opacity, brightness, saturation, hue, lightness, autoorient, dilate, erode, clahe, and linear
  • Better error messages: Invalid modifier arguments now return 400 errors with clear messages instead of cryptic 500s
  • Custom URL parsing: IPX now supports custom URL formats via the parseURL option
🌐 New Providers

This release adds support for eight new image optimization services:

🔧 Provider Improvements
  • Directus: Added support for sharp transforms and a key modifier for named presets (#​2207)
  • Sanity: Support for absolute URLs with automatic project/dataset extraction (#​2274), and a configurable baseURL for custom CDN setups (#​2273)
  • AWS Amplify & Vercel: minimumCacheTTL is now configurable (#​2278)
📦 Type Exports

NuxtImgProps and NuxtPictureProps are now exported from the runtime, making it easier to type your own components that wrap <NuxtImg> or <NuxtPicture> (#​2115).

import type { NuxtImgProps, NuxtPictureProps } from '#image'

👉 Changelog

compare changes

🚀 Enhancements
  • deps: migrate to ipx v4 (#​2094)
  • provider: add EdgeOne Pages provider (#​2173)
  • imgproxy: add provider (#​2117)
  • directus: add sharp transforms & key modifier (#​2207)
  • sanity: support absolute URLs with project and dataset extraction (#​2274)
  • awsAmplify,vercel: make minimumCacheTTL configurable (#​2278)
  • sanity: add configurable baseURL option to Sanity provider (#​2273)
  • runtime: export Picture and Image props types (#​2115)
  • umbraco: add image provider (#​2165)
  • flyimg: add Flyimg built-in provider (#​2125)
  • cloudflareimages: add new provider (#​2100)
  • builderio: add Builder.io Image API provider (#​2050)
  • picsum: add Lorem Picsum placeholder image provider (#​2106)
  • supabase: add image provider (#​2027)
🩹 Fixes
  • flyimg: encode all # characters in color values (137ee63)
  • remove duplicated provider key in generated image options (#​2279)
  • nuxt-picture: align preload link type with unhead v3 (#​2254)
  • github: set max size of 460 (7e561f6)
  • umbraco: shallow clone modifiers before modifying (237e480)
  • cloudflare: add baseURL for urls with no operations (#​2162)
  • nuxt-img: set imagesrcset preload when densities are set w/o sizes (#​2176)
  • fastly: handle absolute URLs and merge preexisting query params (#​2140)
  • ipx: merge user-defined runtimeConfig.ipx with defaults (#​2134)
  • directus: add withoutEnlargement modifier type (#​2133)
  • shopify: merge preexisting query params with modifiers (#​2135)
  • reduce max-width breakpoint values by 1px (#​2132)
  • netlifyImageCdn,netlifyLargeMedia: set netlify remote_images config (#​2086)
  • deduplicate formats (#​2038)
  • sanitise custom provider import names (#​2092)
  • guard access from layer.config.image (23b8cef)
  • bunny: merge query params with existing image src (#​2054)
  • do not shadow custom provider types with builtins (#​2016)
  • nuxt-picture: allow data-* in imgAttrs (#​2017)
  • resolve public/ dir in relation to rootDir (3e07761)
📖 Documentation
  • sanity: document baseURL option (6f59ab1)
  • shopify: update NuxtImg syntax to use v-bind for modifiers (#​2277)
  • update list of auto-detected providers (#​2147)
  • add sharp cross-platform installation section (#​2142)
  • add preload example for NuxtImg (#​2124)
  • exempt patterns from cf _routes.json (#​2136)
  • update placeholder attributes in <NuxtImg /> example (#​2074)
  • add nuxt.care health badge (93de8a9)
  • update docus and add mcp name (#​2080)
  • reference from Vercel's Edge Network to Vercel's CDN for image optimization. (2deacc0)
  • fix Nuxt badge icon (#​2049)
  • update installation warning (#​2061)
  • fix storyblok links (#​2046)
  • add deno example (#​2012)
📦 Build
  • deps: bump serialize-javascript from 7.0.4 to 7.0.5 (#​2249)
  • deps: bump js-cookie from 3.0.5 to 3.0.7 (#​2248)
  • deps: bump ws from 8.17.1 to 8.20.1 (#​2246)
  • deps: bump h3 from 1.15.6 to 1.15.9 (#​2177)
  • deps: bump h3 from 1.15.4 to 1.15.5 (#​2085)
🏡 Chore
  • run module prepare in prepack (97d3758)
  • move consola to dev dependencies (#​2275)
  • migrate to pnpm v11 (#​2236)
  • migrate resolutions to pnpm-workspace.yaml (9b80ce6)
  • migrate npm badges and links to npmx.dev (fd87f7d)
  • remove unused slot-related code from <NuxtPicture> (#​2145)
  • update lint scripts in package.json (#​2139)
  • remove deprecated github silent config (#​2026)
  • revert pnpm trust policy and restore provenance action (13b88c1)
  • update pnpm to 10.21 and enable trust policy (03b5ef4)
🤖 CI
  • add workflow to comment on issues resolved in the latest release (e529f37)
  • improve workflows (#​2288)
  • migrate to uppt (#​2286)
  • migrate agentscan-action to v2 (2f8b332)
  • add agent-scan workflow to flag bot-authored PRs (23ee710)
  • add merge group config (#​2137)
  • rename workflow (777239c)
  • avoid checkout for reproduction comment (a200dae)
  • pin github actions to full-length commit shas (f60d0f7)
  • unpin workflow (d1cb12b)
  • try pinning (09e5efb)
  • update var (402c729)
  • use new shared dependency review workflow (906111c)
🎉 New Contributors
❤️ Contributors
nuxt-modules/i18n (@​nuxtjs/i18n)

v10.6.0

Compare Source

This changelog is generated by GitHub Releases

   🚀 Features
   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub

v10.5.0

Compare Source

This changelog is generated by GitHub Releases

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v10.4.1

Compare Source

This changelog is generated by GitHub Releases

   🐞 Bug Fixes
    View changes on GitHub
nuxt-content/mdc (@​nuxtjs/mdc)

v0.22.2

Compare Source

compare changes

🩹 Fixes
  • security: All attributes should validate (#​496)
❤️ Contributors

v0.22.1

Compare Source

compare changes

🩹 Fixes
  • Validate xlink:href and fix data:text/html prefix check in sanitizer (#​491)
📖 Documentation
  • Clarify indentation when using components (#​482)
🏡 Chore
❤️ Contributors
kane50613/takumi (@​takumi-rs/core)

v1.8.7

Compare Source

Patch Changes
  • 81c3678: Removed the seperate .d.ts file and updated tsdown to v0.22.3
  • 9604fd7: Split package export types per import/require condition so CJS consumers resolve .d.cts
  • Updated dependencies [9604fd7]

v1.8.6

Compare Source

Patch Changes

v1.8.5

Compare Source

Patch Changes

v1.8.4

Compare Source

Patch Changes

v1.8.3

Compare Source

Patch Changes

v1.8.2

Compare Source

Patch Changes

v1.8.1

Compare Source

Patch Changes

v1.8.0

Compare Source

Minor Changes
  • ae2c9aa: Built with nightly Rust toolchain with panic=immediate-abort to reduce binary size
Patch Changes
unocss/unocss (@​unocss/eslint-plugin)

v66.7.5

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v66.7.4

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
vueuse/vueuse (@​vueuse/core)

v14.4.0

Compare Source

   🚀 Features

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Asia/Taipei)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@rileychh-dokploy-coscup

rileychh-dokploy-coscup Bot commented Jul 5, 2026

Copy link
Copy Markdown

Dokploy Preview Deployment

Name Status Preview Updated (UTC)
Nuxt ✅ Done Preview URL 2026-08-02T14:43:17.775Z

rileychh
rileychh previously approved these changes Jul 7, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 4c35c35 to c18c7aa Compare July 14, 2026 05:51
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 461d4cf to 89f3868 Compare July 21, 2026 05:30

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 89f386853e

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread package.json
"vue": "3.5.39",
"vue-router": "5.1.0",
"vue": "3.5.40",
"vue-router": "5.2.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Pin vue-router until i18n uses the same copy

With this dependency set under pnpm, the root app/Nuxt now resolves vue-router@5.2.0, but the updated lockfile still installs @nuxtjs/i18n@10.4.1 against vue-router@5.1.0 (pnpm-lock.yaml shows that nested dependency at line 8831). In a pnpm install that leaves i18n's route helpers on a second router package copy, so locale-aware navigation such as useLocalePath/language switching can resolve through different router internals than the Nuxt app and fail at runtime. Keep vue-router on 5.1.x or regenerate/dedupe the lockfile so Nuxt and @nuxtjs/i18n share one router version.

Useful? React with 👍 / 👎.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from b7875ef to 297cf4c Compare July 21, 2026 22:32

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 297cf4c42f

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread package.json
"ufo": "1.6.4",
"vue": "3.5.39",
"vue-router": "5.1.0",
"vue": "3.5.40",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep Vue on the same runtime Nuxt installs

With this bump the app's direct vue dependency resolves to 3.5.40, but the new lockfile still installs Nuxt 4.5.0's own runtime graph against vue: 3.5.39 (pnpm-lock.yaml shows Nuxt, @unhead/vue, and @vitejs/plugin-vue on that copy). Under pnpm this gives project code that imports provide/inject/render from the top-level Vue a different Vue singleton than Nuxt internals, so app context/provide-inject and manually rendered components can fail at runtime. Keep vue pinned to 3.5.39 or regenerate/dedupe once Nuxt resolves to 3.5.40 throughout.

Useful? React with 👍 / 👎.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 297cf4c to bc33a8f Compare July 22, 2026 22:54

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: bc33a8f0f9

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread package.json Outdated
"eslint": "10.7.0",
"leaflet": "1.9.4",
"nuxt": "4.4.8",
"nuxt": "4.5.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Raise Node engine floor for Nuxt 4.5

The Nuxt 4.5.0 bump pulls build/runtime packages that no longer support the whole >=24.0.0 range: the updated lockfile records @nuxt/nitro-server@4.5.0 requiring ^22.19.0 || ^24.11.0 || >=26.0.0 and @nuxt/vite-builder@4.5.0 requiring ^22.18.0 || ^24.11.0 || >=26.0.0 (pnpm-lock.yaml lines 1270-1299). On a workstation or self-hosted runner pinned to Node 24.0–24.10, which this repo still advertises as supported, installs with engine checks or nuxt generate can run against an unsupported Node version; update engines.node/CI to the Nuxt 4.5 floor or avoid this bump.

Useful? React with 👍 / 👎.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 77a9efc to 39e4ac9 Compare July 25, 2026 05:52
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from 2bb1a3b to 6a52833 Compare August 1, 2026 09:12
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 6a52833 to 29b10c5 Compare August 2, 2026 14:41
@mirumodapon
mirumodapon merged commit 504d572 into main Aug 2, 2026
2 checks passed
@mirumodapon
mirumodapon deleted the renovate/all-minor-patch branch August 2, 2026 15:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants