Skip to content

chore(deps): update all non-major dependencies - #476

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#476
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Mar 30, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@iconify-json/lucide ^1.2.121^1.2.130 age confidence devDependencies patch 1.2.131
@nuxt/devtools (source) ^3.4.1^3.4.2 age confidence devDependencies patch
@nuxt/eslint-config (source) ^1.16.0^1.17.0 age confidence devDependencies minor
@nuxt/module-builder 1.0.21.0.3 age confidence devDependencies patch
@nuxt/test-utils ^4.1.0^4.3.2 age confidence devDependencies minor
@nuxt/ui (source) ^4.10.0^4.11.1 age confidence devDependencies minor
@shikijs/core (source) ^4.4.2^4.4.3 age confidence dependencies patch
@shikijs/engine-javascript (source) ^4.4.2^4.4.3 age confidence dependencies patch
@shikijs/langs (source) ^4.4.2^4.4.3 age confidence dependencies patch
@shikijs/themes (source) ^4.4.2^4.4.3 age confidence dependencies patch
@shikijs/transformers (source) ^4.4.2^4.4.3 age confidence dependencies patch
@types/node (source) ^26.1.2^26.5.1 age confidence devDependencies minor
@vue/compiler-core (source) ^3.5.41^3.5.42 age confidence dependencies patch
eslint (source) ^10.8.0^10.10.0 age confidence devDependencies minor
mkdist 2.3.02.4.1 age confidence resolutions minor
node 2424.21.0 age confidence uses-with minor
pnpm (source) 11.20.011.26.0 age confidence packageManager minor
release-it ^20.2.0^20.2.1 age confidence devDependencies patch
shiki (source) ^4.4.2^4.4.3 age confidence dependencies patch
unwasm ^0.5.3^0.6.0 age confidence dependencies minor
vue-tsc (source) ^3.3.9^3.3.11 age confidence devDependencies patch

Release Notes

nuxt/devtools (@​nuxt/devtools)

v3.4.2

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
nuxt/eslint (@​nuxt/eslint-config)

v1.17.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
nuxt/module-builder (@​nuxt/module-builder)

v1.0.3

Compare Source

v1.0.3 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes
  • update command defaults and descriptions (#​677)
📦 Build
🏡 Chore
  • migrate to pnpm v11 (#​738)
  • remove shamefully-hoist (#​580)
  • migrate resolutions/pnpm.overrides to pnpm-workspace.yaml (cfb45fb)
  • migrate npm badges and links to npmx.dev (afcf2fa)
  • revert pnpm trust policy and restore provenance action (aeb1d38)
  • update pnpm to 10.21 and enable trust policy (92eb2af)
✅ Tests
  • accept nuxt/app specifier for NuxtError in snapshot (809c89f)
  • update v4.5 error type as well (9412c91)
  • accept either #app or nuxt/app in generated declarations (#​727)
🤖 CI
  • use uppt release workflow (604d5b3)
  • add agent-scan workflow to flag bot-authored PRs (4442a14)
  • rename workflow (f7be1a6)
  • avoid checkout in reproduction (57e7ce9)
  • pin github actions to full-length commit shas (c3c8e72)
  • add provenance action to check for downgrades in provenance (d87d217)
  • run tests on node 20 (54c5f13)
🎉 New Contributors
❤️ Contributors
nuxt/test-utils (@​nuxt/test-utils)

v4.3.2

Compare Source

v4.3.2 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes
  • vitest-environment: keep vitest/environments import opaque to rolldown (6d1195d38)
❤️ Contributors

v4.3.1

Compare Source

v4.3.1 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes
  • deps: allow vitest ^5 as peer dependency (#​1809)
🏡 Chore
🎉 New Contributors
❤️ Contributors

v4.3.0

Compare Source

v4.2.1 is the next minor release.

👉 Changelog

compare changes

🚀 Enhancements
  • runtime-utils: add unmockNuxtImport helper (#​1795)
  • config: support vitest 5 (#​1802)
🩹 Fixes
  • config: default nuxt test pattern to nested for simple non-nuxt setup (#​1801)
✅ Tests
  • make sure tests are collected at runtime, not statically (#​1797)
🎉 New Contributors
❤️ Contributors

v4.2.0

Compare Source

v4.2.0 is the next minor release.

👉 Changelog

compare changes

🚀 Enhancements
  • browser: add render helper for vitest browser mode (#​1725)
  • runtime-utils: add spy option to mount + render helpers (#​1762)
🩹 Fixes
  • runtime-utils: mockNuxtImport sourcemap mapped position (#​1787)
  • config: tolerate non-cloneable values when cloning config (#​1771)
  • e2e: honour setupTimeout in playwright + surface server logs (#​1785)
  • e2e: add explanation if server exited before being ready (#​1761)
  • module: handle string presets in auto-imports (#​1784)
  • config: don't run includeSource in both projects in defineVitestConfig (#​1763)
  • e2e: use taskkill to kill processes on windows (#​1760)
  • config: support nuxt v5 with nitro vite environment (#​1758)
🏡 Chore
  • avoid missing file extension warning in test/examples (#​1775)
  • exempt first-party packages from pnpm minimumReleaseAge (#​1774)
  • replace latest ranges with caret ranges (#​1773)
  • move vite environment api tests to example tests (#​1755)
✅ Tests
  • re-enable bun browser e2e on windows (#​1791)
🤖 CI
  • migrate to uppt for release workflow (#​1792)
🎉 New Contributors
❤️ Contributors
nuxt/ui (@​nuxt/ui)

v4.11.1

Compare Source

Bug Fixes
  • ChatMessages: add missing color to user and assistant props (#​6920) (bbf1e14)
  • Checkbox/RadioGroup: add flex-wrap on list and card variants (#​6913) (90c45a6)
  • Checkbox/RadioGroup: use border-default on card and table variants (#​6884) (9bdb89b)
  • CommandPalette: keep astral characters intact when truncating search results (#​6817) (e4cb042)
  • Form: omit method attribute on nested forms (#​6888) (a494a97)
  • InputNumber: work uncontrolled with only a default value (#​6859) (2d4782b)
  • Link: restore prefetching with Nuxt 4.5 custom slot (#​6921) (c4ee0ea)
  • Link: wait for onNuxtReady before observing visibility (#​6922) (612ab1c)
  • NavigationMenu: avoid duplicate accordion trigger on items without to (#​6862) (726e142)
  • ProseCodeTree: invoke default slot from render (#​6906) (fbb9e22)
  • Select/SelectMenu: add responsive text size (#​6903) (e791d30)
  • SelectMenu: prevent search input focus on open with autofocus: false (#​6905) (6caa6a9)
  • Slider: emit a number for a single thumb (#​6890) (3d2de0c)
  • Table: exclude hidden columns from colspan (#​6894) (2e8f533)

v4.11.0

Compare Source

Features
Bug Fixes
  • AuthForm: type submit payload with the schema output (#​6816) (795c353)
  • Calendar: correct size scale (#​6832) (29f9890)
  • CommandPalette: always escape search highlight to prevent XSS (#​6741) (2a172ef)
  • components: resolve theme props consistently in form controls (#​6834) (7c74269)
  • ContentToc: prevent list from collapsing (#​6778) (706cfd0)
  • Editor: ignore updates without document changes (#​6807) (7e615e1)
  • Icon: render bundled icons during SSR in Vue (#​6841) (545f9e3)
  • locale: correct native names and tajik language code (#​6823) (e333e8d)
  • locale: correct slide placeholder casing in lb (#​6822) (10ec237)
  • Marquee: use logical properties and drop broken vertical RTL animation (#​6833) (9b08a84)
  • Modal: emit transition events from overlay when scrollable (#​6786) (5afbd5c)
  • Slider: bind form aria attributes on thumbs instead of root (#​6768) (f3c2ac2)
  • Slider: forward aria attributes to the thumb (#​6848) (d6c3802)
  • theme: blank top-level base in applyUnstyled (#​6825) (3e89ea7)
  • theme: keep variants when replacing slot classes in app config (#​6824) (0fabbe5)
  • Theme: merge class from props with the component class (#​6842) (731ff26)
  • theme: replace deprecated bare tailwind aliases (#​6865) (d4f2ca0)
  • theme: respect reduced motion on remaining movement transitions (ce5b1df)
  • theme: unify motion easing and respect prefers-reduced-motion (#​6742) (735b264)
  • Tree: use logical padding for indentation (#​6815) (958a3ba)
Performance Improvements
  • Button/Select/SelectMenu/InputMenu: narrow reactive dependencies (#​6736) (6bd1dfc)
  • components: memoize tv slot invocations with simple args (#​6737) (4200e80)
shikijs/shiki (@​shikijs/core)

v4.4.3

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
vuejs/core (@​vue/compiler-core)

v3.5.42

Compare Source

Bug Fixes
eslint/eslint (eslint)

v10.10.0

Compare Source

v10.9.1

Compare Source

v10.9.0

Compare Source

v10.8.1

Compare Source

Bug Fixes

  • 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#​21173) (dongkyu lee)
  • 151ba3f fix: false positives in getter-return and accessor-pairs (#​21163) (Grit)
  • 6898df9 fix: ignore meta-property names in id-denylist (#​21166) (Pixel)
  • 4d7db66 fix: ignore meta-property names in id-match (#​21167) (Pixel)
  • 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#​20935) (kuldeep kumar)

Documentation

  • 7d0cbf8 docs: Update README (GitHub Actions Bot)
  • 0a05812 docs: add missing backticks to no-duplicate-imports.js (#​21183) (Lee Daeun)
  • 678c90b docs: Update README (GitHub Actions Bot)
  • 8a10424 docs: Update README (GitHub Actions Bot)
  • 69bb948 docs: Update README (GitHub Actions Bot)

Chores

unjs/mkdist (mkdist)

v2.4.1

Compare Source

compare changes

🩹 Fixes
  • Consider extension when deduping outputs (f4424fe)
❤️ Contributors

v2.4.0

Compare Source

compare changes

🚀 Enhancements
  • dts: Emit .d.vue.ts as type declaration of .vue files (#​301)
🤖 CI
  • Test against previous lts verison (946852b)
  • Remove install of corepack (73894e6)
  • Bump setup/checkout action versions (8a909da)
❤️ Contributors
actions/node-versions (node)

v24.21.0: 24.21.0

Compare Source

Node.js 24.21.0

v24.20.0: 24.20.0

Compare Source

Node.js 24.20.0

v24.19.0: 24.19.0

Compare Source

Node.js 24.19.0

v24.18.1: 24.18.1

Compare Source

Node.js 24.18.1

v24.18.0: 24.18.0

Compare Source

Node.js 24.18.0

v24.17.0: 24.17.0

Compare Source

Node.js 24.17.0

v24.16.0: 24.16.0

Compare Source

Node.js 24.16.0

v24.15.0: 24.15.0

Compare Source

Node.js 24.15.0

v24.14.1: 24.14.1

Compare Source

Node.js 24.14.1

v24.14.0: 24.14.0

Compare Source

Node.js 24.14.0

v24.13.1: 24.13.1

Compare Source

Node.js 24.13.1

v24.13.0: 24.13.0

Compare Source

Node.js 24.13.0

v24.12.0: 24.12.0

Compare Source

Node.js 24.12.0

v24.11.1: 24.11.1

Compare Source

Node.js 24.11.1

v24.11.0: 24.11.0

Compare Source

Node.js 24.11.0

v24.10.0: 24.10.0

Compare Source

Node.js 24.10.0

v24.9.0: 24.9.0

Compare Source

Node.js 24.9.0

v24.8.0: 24.8.0

Compare Source

Node.js 24.8.0

v24.7.0: 24.7.0

Compare Source

Node.js 24.7.0

v24.6.0: 24.6.0

Compare Source

Node.js 24.6.0

v24.5.0: 24.5.0

Compare Source

Node.js 24.5.0

v24.4.1: 24.4.1

Compare Source

Node.js 24.4.1

v24.4.0: 24.4.0

Compare Source

Node.js 24.4.0

v24.3.0: 24.3.0

Compare Source

Node.js 24.3.0

v24.2.0: 24.2.0

Compare Source

Node.js 24.2.0

v24.1.0: 24.1.0

Compare Source

Node.js 24.1.0

v24.0.2: 24.0.2

Compare Source

Node.js 24.0.2

v24.0.1: 24.0.1

Compare Source

Node.js 24.0.1

pnpm/pnpm (pnpm)

v11.26.0

Compare Source

v11.25.0: pnpm 11.25

Compare Source

Minor Changes

  • Added an opt-in proof of concept that lets installs reuse a dependency's build output across machines, by publishing and restoring signed, organization-scoped artifacts through pnpr instead of running the lifecycle scripts locally.

    Configure it with the new remoteSideEffectsCache setting. A workspace names the eligible organization and packages; everything describing the act of signing — publish, keyId, builderId, trustedKeys, privateKey and the provenance fields — is refused in pnpm-workspace.yaml and read from the global config file or the environment instead.

  • Added macOS and Windows x64 and arm64 support to remote shared build artifacts pnpm/pnpm#13771.

  • Added the audit.ignorePrune setting. When set to true, pnpm audit --fix removes ignored GHSA entries that no longer appear in the audit report.

  • Generalized the experimental shared-artifact protocol so candidates and signed payloads identify a discriminated subject. Dependency side effects use package and source-integrity subjects, while workspace tasks use project and task subjects.

    This changes shared-artifact request bodies and signed payloads. A pnpr server and its clients have to be on matching versions.

  • pnpm init now pins the latest pnpm version, instead of the version of pnpm that ran the command. A project scaffolded by an outdated pnpm therefore no longer inherits that staleness through its own devEngines.packageManager / packageManager pin #​7490.

    The version is read from the latest tag on the package-manager registries. When that lookup cannot answer — no network, an unreachable or slow registry, offline, or a latest that the minimumReleaseAge / trustPolicy settings reject — pnpm init pins the running version as before, and never fails or hangs on the lookup. A latest that is older than the running pnpm is never pinned either.

  • A scope set in a project's pnpm-workspace.yaml is now ignored, with a warning naming where to set it instead. pnpm login records the scope as a @scope:registry route in the machine-global auth.ini, which outranks ~/.npmrc in every project — so a repository-committed file could redirect a scope such as @acme for all of a user's other projects after one routine login. Use --scope, the PNPM_CONFIG_SCOPE environment variable, or the global config file instead #​13557.

  • Verified remote build artifacts are persisted in the shared store with their signed origin metadata. Later installs reverify the artifact against current trust, policy, platform, and source before reuse, while invalid remote variants are quarantined per channel (pnpm/pnpm#13771).

  • Persist completed recursive tasks so --resume-from skips exactly the work that passed during a matching interrupted or failed pnpm -r run / pnpm -r exec invocation. When no compatible state exists, pnpm retains its graph-based resume behavior.

  • Allowed pnpm update --patches to refresh registry revisions through a configured pnpr server while retaining locked package versions.

  • Added explicit registry revision selection with <version>+rN and pnpm update --patches for refreshing revision artifacts without changing package versions. Registry-backed lockfile policy checks recognize historical revisions, and pnpr now preserves safe revision histories from upstream registries.

  • Workspace install, rebuild, pack, publish, stage, and lifecycle work now starts as soon as its dependencies finish instead of waiting for an unrelated topological group.

  • pnpm stage approve now approves several staged packages at once. Run it without a stage id to pick from the staged versions interactively, or pass a list of stage ids. The whole batch is approved with a single one-time password, and pnpm asks for a new one only once the registry stops accepting it. Inside a workspace, the selected packages are approved in dependency order, and a package whose workspace dependency could not be approved is skipped instead of being published against a dependency that never reached the registry.

  • Added per-task concurrency limits to workspace task orchestration. Set tasks.<name>.concurrency in pnpm-workspace.yaml to limit how many instances of that task may run across workspace projects at once:

    tasks:
      build:
        concurrency: 2
  • Added support for registry replacement tarballs using standard integrity values, explicit revision fields, registry routing from the registries setting, non-redirecting integrity-addressed URLs, canonical safe-integer revision numbers, and pnpr proxying for immutable upstream revision artifacts.

  • sideEffectsCache now declares the whole of how a package's build output is reused — whether one is restored, whether one is saved, and the remote tier that shares it between machines:

    sideEffectsCache:
      read: true
      write: true
      remote:
        org: acme
        packages: ['native-addon']

    sideEffectsCache: true, sideEffectsCacheReadonly, remoteSideEffectsCache, and its organization field all keep working. Where a field is set under both spellings the one above wins; where it is set under only one, it is kept.

    Two behaviors change, both bringing this CLI in line with what the Rust one already did: sideEffectsCacheReadonly: true now blocks writing to the cache, and setting it alongside sideEffectsCache: false gives a read-only view rather than switching the cache off entirely. A cache can also be declared write-only now, to populate one the run does not read.

  • Workspace task orchestration (pnpm/rfcs#23). pnpm -r run and pnpm -r exec now schedule per task instead of in topological chunks: a task starts as soon as the tasks it depends on have finished, so a project no longer waits for unrelated projects that happen to share its chunk.

    A new tasks section in pnpm-workspace.yaml declares what a task depends on, using the ^ convention:

    tasks:
      build:
        dependsOn: ['^build']
      test:
        dependsOn: ['build']
      lint: {}

    ^name means the named task in each of the project's workspace dependencies; a bare name means the task in the same project; an entry with no dependsOn decl

Important

✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@pkg-pr-new

pkg-pr-new Bot commented Mar 30, 2026

Copy link
Copy Markdown
npm i https://pkg.pr.new/@nuxtjs/mdc@476

commit: 4da8eba

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 19bb6c4 to aea8810 Compare March 31, 2026 08:58
@renovate renovate Bot changed the title chore(deps): update all non-major dependencies chore(deps): update resolutions mkdist to v2.4.1 Mar 31, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from aea8810 to 26d8a91 Compare April 1, 2026 16:46
@renovate renovate Bot changed the title chore(deps): update resolutions mkdist to v2.4.1 chore(deps): update all non-major dependencies Apr 1, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 15ebb37 to 58bed64 Compare April 8, 2026 13:15
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 9a8dee0 to bd30b0d Compare April 10, 2026 10:39
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from eba4501 to 13e213b Compare April 23, 2026 13:41
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 4ad542d to ea58d4b Compare April 29, 2026 15:38
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 665a065 to 0b881bb Compare May 18, 2026 16:56
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 14 times, most recently from 3f916d6 to 2a68d42 Compare May 25, 2026 09:54
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 4d61988 to 44c6bd1 Compare May 31, 2026 13:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants