chore(deps): update nuxt - #91
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
force-pushed
the
renovate/nuxt
branch
5 times, most recently
from
May 1, 2026 18:34
9087370 to
7b6ca06
Compare
renovate
Bot
force-pushed
the
renovate/nuxt
branch
6 times, most recently
from
May 15, 2026 18:07
b4549ef to
02dd9b8
Compare
renovate
Bot
force-pushed
the
renovate/nuxt
branch
6 times, most recently
from
May 21, 2026 17:05
e6706e3 to
952350f
Compare
renovate
Bot
force-pushed
the
renovate/nuxt
branch
5 times, most recently
from
May 30, 2026 10:12
d347928 to
7856c3d
Compare
renovate
Bot
force-pushed
the
renovate/nuxt
branch
5 times, most recently
from
June 8, 2026 05:38
4027fe4 to
b37761a
Compare
renovate
Bot
force-pushed
the
renovate/nuxt
branch
2 times, most recently
from
June 9, 2026 18:19
9c881fe to
a295713
Compare
renovate
Bot
force-pushed
the
renovate/nuxt
branch
5 times, most recently
from
June 15, 2026 11:22
1c94455 to
5a23d56
Compare
renovate
Bot
force-pushed
the
renovate/nuxt
branch
from
June 17, 2026 14:16
5a23d56 to
d66cc49
Compare
renovate
Bot
force-pushed
the
renovate/nuxt
branch
from
July 2, 2026 17:10
d66cc49 to
9592fa7
Compare
renovate
Bot
force-pushed
the
renovate/nuxt
branch
4 times, most recently
from
July 18, 2026 21:30
817affa to
0d1b143
Compare
renovate
Bot
force-pushed
the
renovate/nuxt
branch
7 times, most recently
from
July 27, 2026 14:47
f78a99f to
b94ab00
Compare
renovate
Bot
force-pushed
the
renovate/nuxt
branch
4 times, most recently
from
August 4, 2026 15:16
f2a2c0c to
30997c3
Compare
renovate
Bot
force-pushed
the
renovate/nuxt
branch
3 times, most recently
from
August 12, 2026 01:10
95a5193 to
e0df7b0
Compare
renovate
Bot
force-pushed
the
renovate/nuxt
branch
from
August 14, 2026 21:06
e0df7b0 to
ede63e9
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
3.13.0→3.15.23.2.4→3.4.11.15.2→1.17.02.0.0→2.1.04.4.2→4.5.21.0.2→1.0.34.4.2→4.5.24.0.2→4.1.04.5.1→4.10.04.6.1→4.10.04.3.1→4.5.24.4.2→4.5.2Release Notes
nuxt/content (@nuxt/content)
v3.15.2Compare Source
Bug Fixes
v3.15.1Compare Source
Bug Fixes
v3.15.0Compare Source
Features
bunsqlite connector for Bun runtime deployments (#3741) (92ac2ab)Bug Fixes
v3.14.0Compare Source
Features
useSearchCollectioncomposable with FTS5 full-text search (#3787) (2a1a585)Bug Fixes
nuxt/devtools (@nuxt/devtools)
v3.4.1Compare Source
🐞 Bug Fixes
View changes on GitHub
v3.4.0Compare Source
🚀 Features
@vitejs/devtools-kitto v0.4.10 - by @antfu (5cea1)🐞 Bug Fixes
View changes on GitHub
v3.3.1Compare Source
No significant changes
View changes on GitHub
nuxt/eslint (@nuxt/eslint-config)
v1.17.0Compare Source
🚀 Features
🐞 Bug Fixes
View changes on GitHub
v1.16.0Compare Source
🚀 Features
View changes on GitHub
nuxt/image (@nuxt/image)
v2.1.0Compare Source
👀 Highlights
Nuxt Image 2.1 ships eight new image providers, a major upgrade to our image processing engine, and a bunch of fixes across existing providers.
🖼️ IPX v4
Under the hood, we've upgraded to IPX v4 which brings significant improvements:
svgo: falsewould return untouched SVGs. The sanitizer now removes SMIL attribute injection, foreign content (<foreignObject>,<iframe>, etc.), and unsafe URIs across all elementsopacity,brightness,saturation,hue,lightness,autoorient,dilate,erode,clahe, andlinear400errors with clear messages instead of cryptic500sparseURLoption🌐 New Providers
This release adds support for eight new image optimization services:
🔧 Provider Improvements
keymodifier for named presets (#2207)baseURLfor custom CDN setups (#2273)minimumCacheTTLis now configurable (#2278)📦 Type Exports
NuxtImgPropsandNuxtPicturePropsare now exported from the runtime, making it easier to type your own components that wrap<NuxtImg>or<NuxtPicture>(#2115).👉 Changelog
compare changes
🚀 Enhancements
keymodifier (#2207)minimumCacheTTLconfigurable (#2278)baseURLoption to Sanity provider (#2273)🩹 Fixes
137ee63)providerkey in generated image options (#2279)7e561f6)237e480)baseURLfor urls with no operations (#2162)imagesrcsetpreload when densities are set w/o sizes (#2176)runtimeConfig.ipxwith defaults (#2134)withoutEnlargementmodifier type (#2133)remote_imagesconfig (#2086)formats(#2038)layer.config.image(23b8cef)data-*in imgAttrs (#2017)public/dir in relation torootDir(3e07761)📖 Documentation
6f59ab1)_routes.json(#2136)<NuxtImg />example (#2074)93de8a9)2deacc0)📦 Build
🏡 Chore
prepack(97d3758)consolato dev dependencies (#2275)pnpm-workspace.yaml(9b80ce6)fd87f7d)<NuxtPicture>(#2145)13b88c1)03b5ef4)🤖 CI
e529f37)2f8b332)23ee710)777239c)a200dae)f60d0f7)d1cb12b)09e5efb)402c729)906111c)🎉 New Contributors
❤️ Contributors
nuxt/nuxt (@nuxt/kit)
v4.5.2Compare Source
👉 Changelog
compare changes
🔥 Performance
🩹 Fixes
v-forislands transform (#35877)applyandapplyToEnvironmentin vite wrapper (#35899)enforcein vite wrapper (#35916)vite-node(#35758)<NuxtPage>on nav + with slot (#35948)prependis set (#35942)import.meta.testfor server code (#35987)💅 Refactors
vue-component-type-helpersinstead of locally maintained helpers (#35840)isReferenceIdentifierin page-meta plugin (#35882)📖 Documentation
defineVitestProjectin e2e tests (#35926)📦 Build
🏡 Chore
@nuxt/devtoolsto v3.4.0 (#35892)✅ Tests
toFsUrl(a5ad667f7)🤖 CI
permissions: {}to workflows (2e1a1cbeb)❤️ Contributors
v4.5.1Compare Source
It fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, cross-user payload disclosure on cached pages, and dev server path disclosure. Refreshing your lockfile also pulls in
@nuxt/devtools@3.3.1, which fixes a separate critical development-only RCE.If you already upgraded for the earlier route rule advisory (CVE-2026-53721), you still need this release: one of the fixes addresses a regression introduced by that fix.
If you use the
cache,swrorisrroute rules, purge any CDN or edge cache after upgrading; a leaked_payload.jsonmay already be cached upstream.Full details: Nuxt Security Patch Releases and GitHub Security Advisories.
👉 Changelog
compare changes
🔥 Performance
vue.optionsApiand disable it for v5+ (#35791)ssr: false(#35782)🩹 Fixes
useRoutein detached effect scope (#35659)nameorpathwhen reusing an existing page inpages:extend(#35661)useFetchmethod inference (#35671)force-cache(#35672).mtsfile extension in resolver (#33845)@unhead/vue/*from nuxt's dependency tree (#35690)$fetchwith nitro's$Fetch(#35704)vue-routerwhen there are island pages (#35739)h3that pins it to the version nuxt depends on (#35774)fromcannot be resolved (#35799)app.buildAssetsDir(#35833)templateisland prop under runtime compiler (ee6c84633)asprop for islands (581651ff3)💅 Refactors
semverwithverkit(#35713)📖 Documentation
codeSplitting: false(#35683)onPrehydrateexample comment (#35684)runtimeConfigenv var casting edge cases (#35709)nuxtrather thannuxi(8891e179c)runtimeCompilersecurity best practices (449b63ab1)📦 Build
.tsfile extension fromruntime/imports (#35689)🏡 Chore
@nuxt/telemetryin knip (9824d4f10)@nuxt/devtoolsto v3.3.1 (#35815)✅ Tests
_routein gotoPath (ca92d082b)🤖 CI
knipjob (58f68bd64)❤️ Contributors
v4.5.0Compare Source
📣 Some News
Preparing for Nuxt 5
A good chunk of this release is (hopefully) invisible plumbing for Nuxt 5. We've moved onto the latest major versions of several core dependencies (
unheadv3,unctxv3, and Vite 8), switched the framework's own build over totsdown, and introduced a stablenuxt/*build output contract with dev exports so that type-checking in the Nuxt monorepo works without a build step (#35463, #35605).Much of this is working to shrink the gap between v4 and v5 internally, so that the migration will be as boring as possible.
With the release of Nuxt v4.5, our focus as a team will turn to stabilising Nuxt v5 and creating compatibility utilities to make the upgrade as smooth as possible.
Nuxt 3 End-of-Life
Nuxt 3 reaches end-of-life on July 31, 2026, so this is one of the last few 3.x releases we'll ship. If you're still on v3, now is a great time to move across. Most people told us the v3 to v4 upgrade was smooth, and we've kept the upgrade guide up to date.
Alongside v4.5.0 we're publishing a maintenance patch for the 3.x line (v3.21.9) with the compatible bug fixes and smaller improvements from this release backported. The headline items here (Vite 8, Rspack 2,
unheadv3,unctxv3) aConfiguration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.