v0.12.1

compare changes

📖 Documentation

• Drop the README images 0.11 used (#104)
• Theme the README wordmark and use plain links (#106)

🏡 Chore

Dependencies

• Bump body-parser (#105)
• Dedupe qs (#107)

❤️ Contributors

• Slava Razum (@slavarazum)

v0.12.0

compare changes

🚀 Enhancements

• ⚠️ Require Nuxt 4.6 and run the server code on nuxt/server (#92)
• ⚠️ Simplify the public surface (#93)
• Warn when the app calls another deployment than convex dev (#100)
• Run the Convex panel as a Vite DevTools dock on Nuxt DevTools 4 (#99)

📖 Documentation

• Draw the README's npm and GitHub links as single images (#101)
• Store a small file from a mutation (#102)

🏡 Chore

• Track convex 1.47 and nuxt 4.6, adopt the registry description (#87)
• Accept the Nuxt route-rules advisory osv.dev misreads (#98)

Dependencies

• Patch zod and ip-address, accept zod 3 in the osv scan (#97)
• Bump convex from 1.47.0 to 1.48.0 in the upstream group across 1 directory (#95)
• Bump markdown-it (#96)
• Bump the all-non-major group across 1 directory with 17 updates (#94)

Dev dependencies

• Bump happy-dom from 20.14.5 to 21.0.4 (#85)

🤖 CI

• Serve an app with every integration in the consumer smoke test (#88)

Dependencies

• Bump the actions group across 2 directories with 9 updates (#89)

⚠️ Breaking Changes

• ⚠️ Require Nuxt 4.6 and run the server code on nuxt/server (#92)
• ⚠️ Simplify the public surface (#93)

⬆️ Upgrading from 0.11

• Nuxt 4.6 or newer. The module's server code now runs on nuxt/server, which ships in Nuxt 4.6, and h3 is no longer a dependency. Moving within Nuxt 4 needs no code changes. Apps that can't move yet stay on 0.11.
• Polar components take the API as a prop, as @convex-dev/polar/react does: <CheckoutLink :polar-api="api.billing"> and <CustomerPortalLink :polar-api="api.billing">. provideConvexApi, useConvexApi, useConvexNamespace, ConvexApiKey and ConvexApi are removed, along with the plugin that provided them. Import api from #convex/api where you need it.
• convex.authRoute is now convex.betterAuth.authRoute. The old key logs an error naming the new one.
• NUXT_CONVEX_SITE_URL is no longer read. Use NUXT_PUBLIC_CONVEX_SITE_URL or convex.siteUrl.
• convexAuth(event) takes a ConvexAuthEvent: the nuxt/server event, or the h3 event Nuxt 4 routes and useRequestEvent() pass. Existing calls keep working; handler() needs the nuxt/server event.
• autoImports: 'prefixed' now prefixes every name. Components and types gain Convex in front (<ConvexAuthenticated>), functions after their first word (useConvexPreloadedQuery, fetchConvexQuery, uploadConvexFile). The default mode is unchanged.
• Peer ranges are capped: @clerk/vue and @auth0/auth0-vue at ^2.0.0, nuxt-security at ^2.6.0, @polar-sh/checkout at ^0.4.0.

❤️ Contributors

• Slava Razum (@slavarazum)

v0.11.0

compare changes

🚀 Enhancements

• Add an unbranded starter template and find the dev deployment on the first run (#55)
• ⚠️ Sync with convex 1.46.0 and shrink what the package ships (#61)
• Lead installation with an AI agent and publish an agent skill (#65)

Website

• Brand social cards for the landing and docs pages (#51)
• Protect the live demos from abuse (#56)
• Open the install prompt in every agent, and an accessibility and performance pass (#71)

🩹 Fixes

• Support Nuxt 4.6 production builds and smooth the install flow (#81)

Dependencies

• Patch transitive security advisories and group Dependabot's CVE fixes (#76)

📖 Documentation

• Start a new app from an example in one command (#54)

🏡 Chore

• Track the Claude Code project settings (#60)

Dependencies

• Patch the open Dependabot advisories (#66)
• Bump the all-non-major group with 10 updates (#69)
• Bump @clerk/vue, @convex-dev/rate-limiter and docus (#78)

Dev dependencies

• Bump pkg-pr-new from 0.0.88 to 0.0.90 in the all-non-major group across 1 directory (#79)

🤖 CI

• Clear the duplication findings failing main and hold nuxt 4.6 too (#80)

Dependencies

• Bump the actions group across 1 directory with 4 updates (#52)
• Bump fallow-rs/fallow (#68)
• Bump step-security/harden-runner (#77)

Website

• Turn off Vercel preview deployments (#59)

⚠️ Breaking Changes

• ⚠️ Sync with convex 1.46.0 and shrink what the package ships (#61)

❤️ Contributors

• Slava Razum (@slavarazum)

v0.10.0

compare changes

🚀 Enhancements

• ⚠️ Add the autoImports option and rename the auth middleware to convex-auth (#49)

⚠️ Breaking Changes

• ⚠️ Add the autoImports option and rename the auth middleware to convex-auth (#49)

❤️ Contributors

• Slava Razum (@slavarazum)

v0.9.1

compare changes

🩹 Fixes

Website

• Production font and version defects, docs aside widths, hero mark relief (#47)

🤖 CI

• Resolve the Scorecard action-pinning and weekly link-check findings (#46)

Release

• Allow the attestation blob host in the publish egress list (11f2b88)

❤️ Contributors

• Slava Razum (@slavarazum)

v0.9.0

compare changes

🚀 Enhancements

• ⚠️ Settle the published surface and fix the runtime (#31)
• Add useAsyncPaginatedQuery and (#34)
• Run Convex beside Nuxt with one dev script (#35)

Website

• Redesign the landing page and rewrite Getting Started (#38)

🩹 Fixes

Website

• Dedupe the landing's rail lamp cell and band fill (#43)

📖 Documentation

• Link the npm package under the hero in the README and Introduction (#41)
• Make the README point at the docs site as the single source of truth (#42)

🏡 Chore

Dev dependencies

• Bump the all-non-major group across 1 directory with 2 updates (#39)

Package

• Say what the module does, widen keywords, point at the docs domain (#29)

🤖 CI

• Move to pnpm 11.26 and group the changelog by scope (#28)

Dependencies

• Bump fallow-rs/fallow in the actions group across 1 directory (#36)

⚠️ Breaking Changes

• ⚠️ Settle the published surface and fix the runtime (#31)

❤️ Contributors

• Slava Razum (@slavarazum)

v0.0.1

compare changes

🚀 Enhancements

• security: Auto-detect nuxt-security and apply the CSP at runtime (d08dba2)
• better-auth: Guard post-sign-in redirects against open redirect (97dbbab)
• better-auth: Reject a non-HTTP Convex site URL at startup (55b0312)
• examples: Give every pull request a runnable playground (2cfde59)

🩹 Fixes

• Force patched undici, tar and esbuild past vulnerable transitive pins (115e51d)
• Bump transitive fast-uri to 3.1.5 (18ef82a)
• better-auth: Stop nuxt-security rejecting valid credentials (5f69fb5)
• polar: Open the checkout tab with noopener (1999df1)
• fallow: Re-enable the unresolved-import suppression (c6929eb)
• website: Make the website typecheck pass (c03ff92)
• examples: Make the minimal example pick up its own deployment (e697964)
• Strip trailing slashes without quadratic backtracking (ea8be67)

💅 Refactors

• scripts: Drop the redundant empty-paragraph guard (6275eb2)
• website: Share the playground message list and the graphite ramp (20d8abe)
• website: Flatten the moderation filter and the typewriter pacing (2203283)
• devtools: Extract the query subscription card (611a3a7)
• Improve website components decomposition (617ef50)
• Anchor every divergence to its ledger entry (b70c858)
• ci: Make package.json the single definition of every gate (4d9f70d)

📖 Documentation

• Wip on homepage (6d99b87)
• Favicon (ccc06f8)
• website: Styling, move back to TailwindCSS (c6e10c9)
• website: Working on a design system and homepage (93ecad3)
• website: Reposition the site as the Nuxt module for Convex (1417c06)
• website: Spectrum-band the spec sheet, retune the recordings (89c196a)
• website: Re-export the logo mark and its favicons (16c169e)
• website: Logo update, Baloo 2 return (44a92c9)
• website: Font change, favicon update (5fadc1d)
• website: Restructure the docs into four sections in one sidebar tree (5e7ecff)
• website: Answer "how does this differ from the React API" up front (6224567)
• Describe the site as docs with live demos, not a playground (ad21335)
• security: Gather every security aspect into one guide (ee63517)
• Refresh stale line numbers in the generated API reference (00b2871)
• Regenerate the API reference after the dependency bumps (713efa8)
• Update (25c4b86)
• Update (7d8b055)
• Readme badges update (d799bbc)
• Regenerate the API reference line numbers (9134d99)
• Drop Resend from the ported-surface story (2c9cc06)
• Rebuild PARITY.md as the port's ledger (c4238d6)
• Regenerate the API reference line numbers (e315532)
• Regenerate the API reference after the cross-domain doc edit (16270b1)
• github: Cut the issue and pull request templates down to what is read (f796802)
• Regenerate the API reference after the ReDoS fix (168cbed)

📦 Build

• website: Pin font providers, add house arrows, open the content watcher (fc4d428)
• Keep the module-builder entry extensions (b245abb)

🏡 Chore

• deps-dev: Bump npm-run-all2 from 8.0.4 to 9.0.3 (#2)
• deps-dev: Bump fallow from 2.104.0 to 3.11.0 (#3)
• parity: Track convex 1.45.0 (9b3d58d)
• Drop the Polar sandbox MCP server (a3386b6)
• website: Regenerate the convex server bindings (11264d3)
• website: Drop the unused get-port-please devDependency (a8da232)
• Rebuild the fallow policy from scratch (c3f292a)
• deps-dev: Bump the all-non-major group across 1 directory with 5 updates (#19)
• deps-dev: Bump the all-non-major group with 3 updates (#22)
• deps-dev: Move to vitest 5 (#25)

✅ Tests

• Remove fallow config to rethink and build from scratch (6856028)
• Keep the websocket frame encoder private to its helper (ae5cc5c)
• Realign two suites with the changes that moved past them (cd81a7d)
• Make the parity manifest describe the tree by construction (a164dd4)

🎨 Styles

• website: Split app.css into a css/ module (e7bcf48)
• website: Put the code palette on the live signal ramp (d70eda5)
• website: Rebuild the hero headline's depth as an edge bevel (4fbace6)
• website: Make convex/concave the site-wide depth vocabulary (654b6fd)

🤖 CI

• Prepare the module before packing in the preview workflow (dbafd03)
• deps: Bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the actions group (#4)
• deps: Bump the actions group across 1 directory with 3 updates (#13)
• Improve (5f789bf)
• Pin the consumer npm for the package smoke test (570ba75)
• Fallow (1c169d2)
• Gate pull requests with fallow audit (24c722f)
• Gate commits with fallow audit (45afe20)
• Move the git hooks into .githooks/ (6c3b17a)
• Drop the hook-config migration from prepare (1c74a3b)
• Mirror the CI checks in the git hooks (1471d52)
• Improve checks and docs (8271f19)
• Release cycle update (d7e03bd)
• Fix the two failing checks (62c31b1)
• Configure CodeRabbit for what the other gates cannot read (22cbe08)
• One required check behind a shared setup action (9c280a4)
• Fix th...