Update all non-major dependencies #118
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^3.15.2
->^3.15.4
^3.15.2
->^3.15.4
22.10.9
->22.13.5
^3.0.4
->^3.0.6
v4.1.0
->v4.2.0
15.4.2
->15.4.3
10.3.0
->10.4.1
v4.0.0
->v4.1.0
18.1.1
->18.1.2
8.3.5
->8.3.6
6.0.11
->6.1.1
3.0.4
->3.0.6
5.97.1
->5.98.0
Release Notes
nuxt/nuxt (@nuxt/kit)
v3.15.4
Compare Source
✅ Upgrading
As usual, our recommendation for upgrading is to run:
This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.
👉 Changelog
compare changes
🩹 Fixes
acorn
(#30754)@nuxt/schema
fromnuxt
package dir (#30774)srcDir
(#30771)useRoute
in SFC setup (#30788)externality
for dev server externals (#30802)💅 Refactors
chunk.names
for asset names (#30780)❤️ Contributors
v3.15.3
Compare Source
👀 Highlights
CORS configuration for dev server
Alongside a range of improvements, we've also shipped a significant fix to impose CORS origin restrictions on the dev server. This applies to your Vite or Webpack/Rspack dev middleware only.
This is a significant/breaking change we would not normally ship in a patch but it is a security fix (see GHSA-4gf7-ff8x-hq99 and GHSA-2452-6xj8-jh47) and we urge you to update ASAP.
You can configure the allowed origins and other CORS options via the
devServer.cors
options in yournuxt.config
, which may be relevant if you are developing with a custom hostname:✅ Upgrading
As usual, our recommendation for upgrading is to run:
This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.
👉 Changelog
compare changes
🔥 Performance
mkdirSync
calls (#30651)findPath
andresolvePath
(#30682)Transition
component only on client side (#30720)🩹 Fixes
#app-manifest
alias (#30618)plugin.src
for variable name generation (#30649)dev
/test
environment value (#30667)invalidateModule
call (9bd71e498)[[
optional dynamic params (#30619)devServer.cors
(406db5b4d)💅 Refactors
externality
and use vite internal config (#30634)📖 Documentation
useFetch
example (#30629)nuxi
source code (4fabe0025)NuxtLink
(#30614)addRouteMiddleware
(#30656)ClientOnly
withonMounted
hook (#30670)navigation
mode incallOnce
composable (#30612)📦 Build
inlineDependencies
option (01adefcec)🏡 Chore
lodash-es
(0c01273f5)🤖 CI
❤️ Contributors
vitest-dev/vitest (@vitest/coverage-istanbul)
v3.0.6
Compare Source
🐞 Bug Fixes
getMockedSystemTime
foruseFakeTimer
- by @hi-ogawa in https://github.com/vitest-dev/vitest/issues/7405 (03912)queueMicrotask
from default fake timers to not break node fetch - by @hi-ogawa in https://github.com/vitest-dev/vitest/issues/7505 (167a9)toHaveClass
typing - by @hi-ogawa in https://github.com/vitest-dev/vitest/issues/7383 (7ef23)maxWorkers
- by @AriPerkkio in https://github.com/vitest-dev/vitest/issues/7483 (adbb2)vite-node
to pass correct execution wrapper offset - by @AriPerkkio in https://github.com/vitest-dev/vitest/issues/7417 (1f2e5)inspect
related cli options - by @AriPerkkio in https://github.com/vitest-dev/vitest/issues/7373 (ed15b)View changes on GitHub
v3.0.5
Compare Source
This release includes security patches for:
🚀 Features
🐞 Bug Fixes
View changes on GitHub
actions/setup-node (actions/setup-node)
v4.2.0
Compare Source
What's Changed
@actions/cache
to^4.0.0
by @priyagupta108 in https://github.com/actions/setup-node/pull/1191New Contributors
Full Changelog: actions/setup-node@v4...v4.2.0
lint-staged/lint-staged (lint-staged)
v15.4.3
Compare Source
Patch Changes
cbfed1d
Thanks @tarik02! - Adjust TypeScript types for the default export so that it can be used as a value without error TS2693.pnpm/pnpm (pnpm)
v10.4.1
Compare Source
Patch Changes
--allow-build
option overlaps with thepnpm.ignoredBuildDependencies
list #9105.init-package-manager
should work.v10.4.0
Compare Source
Minor Changes
pnpm approve-builds --global
works now for allowing dependencies of globally installed packages to run postinstall scripts.The
pnpm add
command now supports a new flag,--allow-build
, which allows building the specified dependencies. For instance, if you want to install a package calledbundle
that hasesbuild
as a dependency and want to allowesbuild
to run postinstall scripts, you can run:This will run
esbuild
's postinstall script and also add it to thepnpm.onlyBuiltDependencies
field ofpackage.json
. So,esbuild
will always be allowed to run its scripts in the future.Related PR: #9086.
The
pnpm init
command adds apackageManager
field with the current version of pnpm CLI #9069. To disable this behaviour, set theinit-package-manager
setting tofalse
.Patch Changes
pnpm approve-builds
should work after two consecutivepnpm install
runs #9083.packageManager
cannot start withv
.pnpm/action-setup (pnpm/action-setup)
v4.1.0
Compare Source
Add support for
package.yaml
#156.release-it/release-it (release-it)
v18.1.2
Compare Source
260116b
)egoist/tsup (tsup)
v8.3.6
Compare Source
🐞 Bug Fixes
onSuccess
- by @laat in https://github.com/egoist/tsup/issues/1256 (314a6)View changes on GitHub
vitejs/vite (vite)
v6.1.1
Compare Source
.[cm]?[tj]sx?
static assets are JS mime (#19453) (e7ba55e), closes #19453*.ipv4
address in cert (#19416) (973283b), closes #19416v6.1.0
Compare Source
Features
port
in the logged error message after failed WS connection withEADDRINUSE
(#19212) (14027b0), closes #19212.jxl
(#18855) (57b397c), closes #18855builtins
environmentresolve
(#18584) (2c2d521), closes #18584defaultAllowedOrigins
for user-land config and 3rd party plugins (#19259) (dc8946b), closes #19259wasm
to the compressible assets regex (#19085) (ce84142), closes #19085Fixes
resolveLibCssFilename
(#19324) (f183bdf), closes #19324vite optimize
(#19347) (19ffad0), closes #19347server.preTransformRequests
(#19272) (12aaa58), closes #19272nodeLikeBuiltins
forssr.target: 'webworker'
withoutnoExternal: true
(#19313) (9fc31b6), closes #19313@plugin
imports of JS files treated as CSS and rebased (fix #19268) (#19269) (602b373), closes #19268 #19269resolve.builtin
is empty (#19312) (b7aba0b), closes #19312ssrLoadModule
(#19290) (353c467), closes #19290--force
work for all environments (#18901) (51a42c6), closes #18901RegExp
values withnew RegExp
instead ofstructuredClone
(fix #19245, fix #1 (56ad2be), closes #19245 #18875 #19247Chore
vite optimize
command (#19348) (6e0e3c0), closes #19348build.manifest
jsdocs (#19332) (4583781), closes #19332scanImports
not being used in ssr (#19285) (fbbc6da), closes #19285Beta Changelogs
6.1.0-beta.2 (2025-02-04)
See 6.1.0-beta.2 changelog
6.1.0-beta.1 (2025-02-04)
See 6.1.0-beta.1 changelog
6.1.0-beta.0 (2025-01-24)
See 6.1.0-beta.0 changelog
webpack/webpack (webpack)
v5.98.0
Compare Source
Fixes
filenameTemplate
in new split chunk #19104 by @henryqdineenblob:
protocol when public path isauto
#19199 by @alexander-akaitoutput.charset
everywhere #19202 by @alexander-akaitBuildInfo
andBuildMeta
type definitions #19200 by @inottnPerformance Improvements
FlagDependencyExportsPlugin
for large JSON by depth #19058 by @hai-xstartsWith
for matching instead of converting the string to a regex #19207 by @inottnChores
nanoid
from 3.3.7 to 3.3.8 #19063 by @dependabotDefaultStatsFactoryPlugin
#19156 by @Andaristreadme.md
by adding video links for understanding webpack #19101 by @Vansh5632Features
/* webpackIgnore: true */
forrequire.resolve
#19201 by @alexander-akaitContinuous Integration
New Contributors
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.