Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^3.15.2
->^3.15.4
^3.15.2
->^3.15.4
22.10.9
->22.13.4
^3.0.4
->^3.0.5
v4.1.0
->v4.2.0
15.4.2
->15.4.3
10.3.0
->10.4.0
v4.0.0
->v4.1.0
18.1.1
->18.1.2
8.3.5
->8.3.6
6.0.11
->6.1.0
3.0.4
->3.0.5
5.97.1
->5.98.0
Release Notes
nuxt/nuxt (@nuxt/kit)
v3.15.4
Compare Source
✅ Upgrading
As usual, our recommendation for upgrading is to run:
This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.
👉 Changelog
compare changes
🩹 Fixes
acorn
(#30754)@nuxt/schema
fromnuxt
package dir (#30774)srcDir
(#30771)useRoute
in SFC setup (#30788)externality
for dev server externals (#30802)💅 Refactors
chunk.names
for asset names (#30780)❤️ Contributors
v3.15.3
Compare Source
👀 Highlights
CORS configuration for dev server
Alongside a range of improvements, we've also shipped a significant fix to impose CORS origin restrictions on the dev server. This applies to your Vite or Webpack/Rspack dev middleware only.
This is a significant/breaking change we would not normally ship in a patch but it is a security fix (see GHSA-4gf7-ff8x-hq99 and GHSA-2452-6xj8-jh47) and we urge you to update ASAP.
You can configure the allowed origins and other CORS options via the
devServer.cors
options in yournuxt.config
, which may be relevant if you are developing with a custom hostname:✅ Upgrading
As usual, our recommendation for upgrading is to run:
This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.
👉 Changelog
compare changes
🔥 Performance
mkdirSync
calls (#30651)findPath
andresolvePath
(#30682)Transition
component only on client side (#30720)🩹 Fixes
#app-manifest
alias (#30618)plugin.src
for variable name generation (#30649)dev
/test
environment value (#30667)invalidateModule
call (9bd71e498)[[
optional dynamic params (#30619)devServer.cors
(406db5b4d)💅 Refactors
externality
and use vite internal config (#30634)📖 Documentation
useFetch
example (#30629)nuxi
source code (4fabe0025)NuxtLink
(#30614)addRouteMiddleware
(#30656)ClientOnly
withonMounted
hook (#30670)navigation
mode incallOnce
composable (#30612)📦 Build
inlineDependencies
option (01adefcec)🏡 Chore
lodash-es
(0c01273f5)🤖 CI
❤️ Contributors
vitest-dev/vitest (@vitest/coverage-istanbul)
v3.0.5
Compare Source
This release includes security patches for:
🚀 Features
🐞 Bug Fixes
View changes on GitHub
actions/setup-node (actions/setup-node)
v4.2.0
Compare Source
lint-staged/lint-staged (lint-staged)
v15.4.3
Compare Source
Patch Changes
cbfed1d
Thanks @tarik02! - Adjust TypeScript types for the default export so that it can be used as a value without error TS2693.pnpm/pnpm (pnpm)
v10.4.0
Compare Source
Minor Changes
pnpm approve-builds --global
works now for allowing dependencies of globally installed packages to run postinstall scripts.The
pnpm add
command now supports a new flag,--allow-build
, which allows building the specified dependencies. For instance, if you want to install a package calledbundle
that hasesbuild
as a dependency and want to allowesbuild
to run postinstall scripts, you can run:This will run
esbuild
's postinstall script and also add it to thepnpm.onlyBuiltDependencies
field ofpackage.json
. So,esbuild
will always be allowed to run its scripts in the future.Related PR: #9086.
The
pnpm init
command adds apackageManager
field with the current version of pnpm CLI #9069. To disable this behaviour, set theinit-package-manager
setting tofalse
.Patch Changes
pnpm approve-builds
should work after two consecutivepnpm install
runs #9083.packageManager
cannot start withv
.pnpm/action-setup (pnpm/action-setup)
v4.1.0
Compare Source
Add support for
package.yaml
#156.release-it/release-it (release-it)
v18.1.2
Compare Source
260116b
)egoist/tsup (tsup)
v8.3.6
Compare Source
🐞 Bug Fixes
onSuccess
- by @laat in https://github.com/egoist/tsup/issues/1256 (314a6)View changes on GitHub
vitejs/vite (vite)
v6.1.0
Compare Source
vite optimize
command (#19348) (6e0e3c0), closes #19348webpack/webpack (webpack)
v5.98.0
Compare Source
Fixes
filenameTemplate
in new split chunk #19104 by @henryqdineenblob:
protocol when public path isauto
#19199 by @alexander-akaitoutput.charset
everywhere #19202 by @alexander-akaitBuildInfo
andBuildMeta
type definitions #19200 by @inottnPerformance Improvements
FlagDependencyExportsPlugin
for large JSON by depth #19058 by @hai-xstartsWith
for matching instead of converting the string to a regex #19207 by @inottnChores
nanoid
from 3.3.7 to 3.3.8 #19063 by @dependabotDefaultStatsFactoryPlugin
#19156 by @Andaristreadme.md
by adding video links for understanding webpack #19101 by @Vansh5632Features
/* webpackIgnore: true */
forrequire.resolve
#19201 by @alexander-akaitContinuous Integration
New Contributors
Full Changelog: webpack/webpack@v5.97.1...v5.98.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.