chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #1303 · nuxt/cli

renovate · 2026-05-04T02:59:33Z

This PR contains the following updates:

Package	Change	Type	Update
@bomb.sh/tab	`^0.0.14` → `^0.0.15`	dependencies	patch
@bomb.sh/tab	`^0.0.14` → `^0.0.15`	devDependencies	patch
@clack/prompts (source)	`^1.2.0` → `^1.3.0`	dependencies	minor
@clack/prompts (source)	`^1.2.0` → `^1.3.0`	devDependencies	minor
@codspeed/vitest-plugin (source)	`^5.3.0` → `^5.4.0`	devDependencies	minor
@nuxt/nitro-server (source)	`^4.4.2` → `^4.4.4`	devDependencies	patch
CodSpeedHQ/action	`v4.14.0` → `v4.15.0`	action	minor
eslint (source)	`^10.2.1` → `^10.3.0`	devDependencies	minor
h3-next (source)	`^2.0.1-rc.20` → `^2.0.1-rc.21`	devDependencies	patch
knip (source)	`^6.7.0` → `^6.11.0`	devDependencies	minor
listhen	`^1.9.1` → `^1.10.0`	dependencies	minor
listhen	`^1.9.1` → `^1.10.0`	devDependencies	minor
nitropack	`2.13.3` → `2.13.4`	pnpm-workspace.overrides	patch
nitropack	`^2.13.3` → `^2.13.4`	devDependencies	patch
pkg-pr-new (source)	`^0.0.67` → `^0.0.70`	devDependencies	patch
tinyexec	`^1.1.1` → `^1.1.2`	dependencies	patch
tinyexec	`^1.1.1` → `^1.1.2`	devDependencies	patch
ufo	`^1.6.3` → `^1.6.4`	dependencies	patch
ufo	`^1.6.3` → `^1.6.4`	devDependencies	patch
undici (source)	`^8.1.0` → `^8.2.0`	devDependencies	minor

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

bombshell-dev/tab (@bomb.sh/tab)

`v0.0.15`

Compare Source

Patch Changes

a9d4f04: fix positional argument completion broken after flags

bombshell-dev/clack (@clack/prompts)

`v1.3.0`

Compare Source

Minor Changes

ea5702e: fix: add engines field expressing node >=20.12 requirement
814ab9a: Add new multiline prompt for multi-line text input.

Patch Changes

5b897a7: Fix mixed type-only and runtime exports from @clack/core.
Updated dependencies [78fd3ae]
Updated dependencies [ea5702e]
Updated dependencies [814ab9a]
- @clack/core@1.3.0

CodSpeedHQ/codspeed-node (@codspeed/vitest-plugin)

`v5.4.0`

Compare Source

What's Changed

This release adds first support for macOS walltime.

Please note that profiling and other instruments are not yet available on macOS and will come in a later update.

Support macos walltime without profiling in codspeed-node by @GuillaumeLagrange in #79

Full Changelog: CodSpeedHQ/codspeed-node@v5.3.0...v5.4.0

CodSpeedHQ/action (CodSpeedHQ/action)

`v4.15.0`

Compare Source

Release Notes

This release adds first support for macOS walltime.

Please note that profiling and other instruments are not yet available on macOS and will come in a later update.

Minimum integration versions

🚀 Features

Revert logo changes by @GuillaumeLagrange
Display N/A rather than NaN/inf in the benchmarks results table by @GuillaumeLagrange in #314
Only wrap walltime command with sudo on linux by @GuillaumeLagrange
Add --with-token flag to read token from stdin by @fargito in #313
Warn when libc debug info is not found by @not-matthias in #310
Resolve debug info and symbols from separate debug files by @not-matthias in #303

🧪 Testing

Add libc debuglink/build-id fixtures by @not-matthias
Add stripped binary and debug file test fixtures by @not-matthias

⚙️ Internals

chore: bump runner version to 4.15.0 by @github-actions[bot] in #204
Bump exec-harness version
Add macos basic run test by @GuillaumeLagrange in #319
Remove DumpPerfMapAtExit in favor of custom dumper by @not-matthias in #295

Install codspeed-runner 4.15.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.15.0/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.15.0

File	Platform	Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

Full Changelog: CodSpeedHQ/action@v4.14.0...v4.15.0

eslint/eslint (eslint)

`v10.3.0`

Compare Source

h3js/h3 (h3-next)

`v2.0.1-rc.21`

Compare Source

compare changes

🚀 Enhancements

Coerce thrown number/string to HTTPError (#1372)

🩹 Fixes

setCookie: Handle encode and stringify serialize options (#1377)
event-stream: Do not emit unhandled rejection when readable side is canceled (#1376)
withoutBase: Collapse leading slashes (64acfe6)

📖 Documentation

Fix typo in error handling (#1364)

🏡 Chore

Update deps (e2f8cbd)
Update deps (4e38f49)

❤️ Contributors

Pooya Parsa (@pi0)
Max maximogarciamtnez@gmail.com
Drackin Best (@Drackin)
Kevin Dyes kevin.dyes@icloud.com
Daniel Roe (@danielroe)

webpro-nl/knip (knip)

`v6.11.0`: Release 6.11.0

Compare Source

Ignore & remove uninteresting lines in snapshots (767ebaf)
Flag stale @internal tags in production mode (resolve #1658) (dd1caed)
Add compiler-extensions in tsc-files mode (resolve #1708) (ea867ad)

`v6.10.0`: Release 6.10.0

Compare Source

Ecosystem patches → snapshots (1803f9f)
Fix unlisted pkg when only @types/pkg listed (resolve #1707) (62082b6)
Don't report imports matching engines.X as unlisted (23582e0)
Treat imports in .d.ts files as type-only (84caac5)
Treat tsconfig compilerOptions.types as type-only (ce18854)
Resolve hoisted deps from monorepo root in single-package mode (resolve #1711) (23b756f)

`v6.9.0`: Release 6.9.0

Compare Source

Expose types for JSON reporter (961b734)

`v6.8.0`: Release 6.8.0

Compare Source

feat: add WXT plugin (#1703) (9167557) - thanks @sebastianbreguel!
Add support for pnpm@11 new commands (#1706) (c937697) - thanks @PatrykWalach!
Fix case of spread export → other exports used (resolve #1705) (0f94d2d)
Add more pnpm commands + tests (f2819b3)
Bump oxc-parser (5c21d27)

unjs/listhen (listhen)

`v1.10.0`

Compare Source

compare changes

🚀 Enhancements

Support extraURLs and detect portless by env by default (#228)

🩹 Fixes

Filter IPv4 link-local addresses from network interfaces (#226)
Do not use fallback port in production (#223)

🏡 Chore

Update deps (402c52d)

❤️ Contributors

Kricsleo (@kricsleo)
Tim Krajcar (@tkrajcar)
Max maximogarciamtnez@gmail.com
Pooya Parsa (@pi0)

nitrojs/nitro (nitropack)

`v2.13.4`

Compare Source

compare changes

[!IMPORTANT]
This release patches two medium-severity vulnerabilities in proxy and redirect route rules. Users relying on either are strongly encouraged to upgrade. See GHSA-5w89-w975-hf9q and GHSA-9phm-9p8f-hw5m for details.

🚀 Enhancements

Add version meta (#4194)

🩹 Fixes

route-rules: Reject out-of-scope requests (#4223)
route-rules: Prevent open redirect via protocol-relative url bypass (8d6bfb0b)

🏡 Chore

❤️ Contributors

Pooya Parsa (@pi0)
Rihan Arfan (@RihanArfan)

stackblitz-labs/pkg.pr.new (pkg-pr-new)

tinylibs/tinyexec (tinyexec)

`v1.1.2`

Compare Source

What's Changed

feat: accept readonly string[] for args parameters by @tatzyr in #112
chore(deps-dev): bump the development-dependencies group with 7 updates by @dependabot[bot] in #113
fix: Fix typo in README by @porada in #114
chore(deps-dev): bump the development-dependencies group with 5 updates by @dependabot[bot] in #116
chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 in the github-actions group by @dependabot[bot] in #115
chore(deps-dev): bump the development-dependencies group with 4 updates by @dependabot[bot] in #117
fix: remove normalisation of commands by @43081j in #118

New Contributors

@tatzyr made their first contribution in #112

Full Changelog: tinylibs/tinyexec@1.1.1...1.1.2

nodejs/undici (undici)

`v8.2.0`

Compare Source

Configuration

📅 Schedule: (UTC)

Branch creation
- "on Monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-05-04T03:00:41Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Maintenance
tinyclip@0.1.12
scule@1.3.0
semver@7.7.4
std-env@4.1.0
rollup@4.60.2
ufo@1.6.4
youch@4.1.1
typescript@6.0.3
vue-router@5.0.6
vue@3.5.33
@codspeed/vitest-plugin@5.3.0 ⏵ 5.4.0		⁺²
srvx@0.11.15
@bomb.sh/tab@0.0.14 ⏵ 0.0.15	⁺¹
@clack/prompts@1.3.0

View full report

pkg-pr-new · 2026-05-04T03:02:00Z

nuxt-cli-playground

npm i https://pkg.pr.new/create-nuxt@1303

npm i https://pkg.pr.new/nuxi@1303

npm i https://pkg.pr.new/@nuxt/cli@1303

commit: 65b8560

codspeed-hq · 2026-05-04T03:02:18Z

Merging this PR will not alter performance

✅ 2 untouched benchmarks

_{Comparing renovate/all-minor-patch (65b8560) with main (a35d6d3)}

chore(deps): update all non-major dependencies

65b8560

renovate Bot requested a review from danielroe as a code owner May 4, 2026 02:59

danielroe approved these changes May 4, 2026

View reviewed changes

danielroe merged commit 7d2efb2 into main May 4, 2026
18 checks passed

danielroe deleted the renovate/all-minor-patch branch May 4, 2026 07:31

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update all non-major dependencies#1303

chore(deps): update all non-major dependencies#1303
danielroe merged 1 commit intomainfrom
renovate/all-minor-patch

renovate Bot commented May 4, 2026

Uh oh!

socket-security Bot commented May 4, 2026

Uh oh!

pkg-pr-new Bot commented May 4, 2026

Uh oh!

codspeed-hq Bot commented May 4, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented May 4, 2026

Release Notes

Patch Changes

Minor Changes

Patch Changes

What's Changed

Release Notes

Minimum integration versions

🚀 Features

🧪 Testing

⚙️ Internals

Install codspeed-runner 4.15.0

Install prebuilt binaries via shell script

Download codspeed-runner 4.15.0

🚀 Enhancements

🩹 Fixes

📖 Documentation

🏡 Chore

❤️ Contributors

v6.11.0: Release 6.11.0

v6.10.0: Release 6.10.0

v6.9.0: Release 6.9.0

v6.8.0: Release 6.8.0

🚀 Enhancements

🩹 Fixes

🏡 Chore

❤️ Contributors

🚀 Enhancements

🩹 Fixes

🏡 Chore

❤️ Contributors

What's Changed

New Contributors

Configuration

Uh oh!

socket-security Bot commented May 4, 2026

Uh oh!

pkg-pr-new Bot commented May 4, 2026

Uh oh!

codspeed-hq Bot commented May 4, 2026

Merging this PR will not alter performance

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v6.11.0`: Release 6.11.0

`v6.10.0`: Release 6.10.0

`v6.9.0`: Release 6.9.0

`v6.8.0`: Release 6.8.0