Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 30 updates - #44

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/minor-and-patch-05e263bcc7
Open

chore(deps): bump the minor-and-patch group across 1 directory with 30 updates#44
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/minor-and-patch-05e263bcc7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 2, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the minor-and-patch group with 21 updates in the / directory:

Package From To
@nuxt/eslint 1.11.0 1.16.0
@nuxt/eslint-config 1.11.0 1.16.0
nuxt 4.2.1 4.5.1
shadcn-vue 2.4.1 2.8.1
vue-tsc 3.1.5 3.3.8
@iconify-json/lucide 1.2.82 1.2.120
@nuxt/content 3.9.0 3.15.2
@nuxt/icon 2.1.0 2.4.1
@nuxt/image 2.0.0 2.1.0
@nuxtjs/color-mode 4.0.0 4.0.1
@nuxtjs/mcp-toolkit 0.17.2 0.18.0
@nuxtjs/mdc 0.19.1 0.22.2
@tabler/icons-vue 3.35.0 3.46.0
@tailwindcss/vite 4.1.18 4.3.3
@vueuse/core 14.1.0 14.4.0
@vueuse/integrations 14.1.0 14.4.0
nuxt-llms 0.1.3 0.2.0
oxc-parser 0.99.0 0.142.0
shadcn-nuxt 2.4.3 2.8.1
tailwind-merge 3.4.0 3.6.0
vite-plugin-wasm 3.5.0 3.6.0

Updates @nuxt/eslint from 1.11.0 to 1.16.0

Commits
  • de61df2 chore: release v1.16.0
  • 74c56cc chore(deps): upgrade dependencies and fix resulting type/CI issues (#682)
  • f852ae5 chore: release v1.15.2
  • 69aa40e fix: prevent race condition of running checker module before eslint config is...
  • 8961807 chore: release v1.15.1
  • b554991 chore: release v1.15.0
  • 305a9bb feat: relax peer deps range to support ESLint v10, fix #642
  • 997aa95 chore: release v1.14.0
  • bc637da chore: release v1.13.0
  • 34fa12b chore: release v1.12.1
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​nuxt/eslint since your current version.


Updates @nuxt/eslint-config from 1.11.0 to 1.16.0

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​nuxt/eslint-config since your current version.


Updates nuxt from 4.2.1 to 4.5.1

Release notes

Sourced from nuxt's releases.

v4.5.1

⚠️ This is a security release. We recommend upgrading as soon as possible with npx nuxt upgrade --dedupe.

It fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, cross-user payload disclosure on cached pages, and dev server path disclosure. Refreshing your lockfile also pulls in @nuxt/devtools@3.3.1, which fixes a separate critical development-only RCE.

If you already upgraded for the earlier route rule advisory (CVE-2026-53721), you still need this release: one of the fixes addresses a regression introduced by that fix.

If you use the cache, swr or isr route rules, purge any CDN or edge cache after upgrading; a leaked _payload.json may already be cached upstream.

Full details: Nuxt Security Patch Releases and GitHub Security Advisories.

👉 Changelog

compare changes

🔥 Performance

  • nitro: Replace island teleports in a single html pass (#35515)
  • nuxt: Add vue.optionsApi and disable it for v5+ (#35791)
  • nuxt: Without pages, skip client plugins that require routing (#35794)
  • nuxt: Skip payload revival plugin when ssr: false (#35782)

🩹 Fixes

  • nitro: Read rspack dev output fs lazily for server entry (#35740)
  • rspack,webpack: Resolve loaders and runtime deps from nuxt dirs (#35568)
  • nuxt: Return global route for useRoute in detached effect scope (#35659)
  • nuxt: Ignore custom name or path when reusing an existing page in pages:extend (#35661)
  • nuxt: Render client components in nested server components (#35669)
  • nuxt: Preserve explicit useFetch method inference (#35671)
  • nuxt: Revalidate cached route payloads instead of using force-cache (#35672)
  • nuxt: Correct default export detection in plugin metadata (#35676)
  • nuxt: Clear hide/reset timeouts in set() (#35534)
  • kit,nuxt,rspack,schema,webpack: Add .mts file extension in resolver (#33845)
  • nuxt: Preserve trailing slash in NuxtLink href when unset (#35501)
  • nuxt: Don't cross-pollute useAsyncData cache on reactive key change (#35656)
  • nuxt: Filter plugin dependencies by build target (#35682)
  • nuxt: Reload real page module on HMR of JSX render-function pages (#35678)
  • nuxt: Resolve @unhead/vue/* from nuxt's dependency tree (#35690)
  • kit: Surface module load errors instead of masking as missing (#35497)
  • nuxt: Type auto-imported $fetch with nitro's $Fetch (#35704)
  • nuxt: Don't reference app config sources in shared and node tsconfigs (#35673)
  • vite: Resolve SSR inlined CSS module class name mismatch (#35610)
  • nuxt: Generate layout types even when pages module is disabled (#35717)
  • nitro: Skip resource hints for stylesheets already rendered as blocking links (#35691)
  • kit: Dedupe layers that are both auto-scanned and explicitly extended (#35712)
  • nuxt: Don't apply scroll behaviour after a subsequent nav (#35719)
  • vite: Ensure server sourcemap-preserver plugin actually runs (#35680)
  • vite: Preserve css suffix when extracting ssr inline styles (#35714)
  • nuxt: Watch external component directories in development (#35652)
  • nuxt: Don't exclude client entry module from style extraction (#35720)
  • nuxt: Amend cleanup command in NUXT_B7014 error message (#35735)
  • nuxt: Only pull in vue-router when there are island pages (#35739)
  • vite: Suppress external warnings for internal vite-node paths (#35744)

... (truncated)

Commits
  • 452dd50 v4.5.1
  • 581651f fix(nuxt): reject top-level as prop for islands
  • ee6c846 fix(nuxt): reject reserved template island prop under runtime compiler
  • ad624a7 fix(nuxt): case-fold route rule keys to match folded lookups
  • 4e35ae9 fix(nitro): bound island props and v-for to prevent unauthenticated DoS
  • 352135f fix(nuxt): remove dev error overlay when error is cleared (#35821)
  • b1a8e93 fix(nitro,nuxt,vite): dedupe and normalise global css links in dev (#35834)
  • df55902 fix(nuxt): convert inline route rules exactly or drop with a warning (#35455)
  • 083b750 fix(nuxt): warn when an imports preset from cannot be resolved (#35799)
  • 61eb637 perf(nuxt): skip payload revival plugin when ssr: false (#35782)
  • Additional commits viewable in compare view

Updates shadcn-vue from 2.4.1 to 2.8.1

Release notes

Sourced from shadcn-vue's releases.

v2.8.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v2.8.0

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits
  • dbc4a43 chore: release v2.8.1
  • a66f1c2 fix(cli): ship shimmer and scroll-fade utilities in tailwind.css (#1903)
  • ecd41b1 fix(cli): add missing pagination and sonner icon mappings (#1894)
  • 349e5cf fix(message-scroller): preserve scrollbar gutter (#1880)
  • b1e9c7e chore: release v2.8.0
  • 1dfdc06 fix(cli): fall back to root tsconfig for non-PHP Inertia projects (#1820)
  • 980cd69 fix(MessageScroller): vue pattern (#1879)
  • 5949a8d fix(cli): resolve type errors and update deps (#1878)
  • 4421dcb docs: font not applying
  • 86bd787 feat: rhea style
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for shadcn-vue since your current version.


Updates vue-tsc from 3.1.5 to 3.3.8

Release notes

Sourced from vue-tsc's releases.

v3.3.8

language-core

workspace

  • chore: upgrade to TypeScript 7 and support @typescript/typescript6 (#6123) - Thanks to @​WaldemarEnns!

Our Sponsors ❤️

... (truncated)

Changelog

Sourced from vue-tsc's changelog.

3.3.8 (2026-07-22)

language-core

workspace

  • chore: upgrade to TypeScript 7 and support @typescript/typescript6 (#6123) - Thanks to @​WaldemarEnns!

3.3.7 (2026-07-08)

language-core

  • fix: wrap single expression event handlers to avoid ASI after return (#6115) - Thanks to @​KazariEX!

typescript-plugin

  • fix: filter const globals from template completions

3.3.6 (2026-06-30)

language-core

  • fix: make generic component internal context inference type-safe across .d.ts boundary (#6104) - Thanks to @​Holiden!
  • fix: do not treat non-trivial property accesses as compound - Thanks to @​KazariEX!
  • fix: treat semicolon-terminated expressions as compound - Thanks to @​KazariEX!
  • fix: preserve return types for compound event handlers - Thanks to @​KazariEX!
  • fix: use WeakMap to cache inline TS ASTs - Thanks to @​KazariEX!
  • fix: match upstream CSS v-bind parsing behavior - Thanks to @​KazariEX!
  • fix: include setup bindings as potential component names (#6111) - Thanks to @​KazariEX!
  • perf: reduce boundary code feature allocations - Thanks to @​KazariEX!
  • refactor: centralize code features and deprecate allCodeFeatures - Thanks to @​KazariEX!

3.3.5 (2026-06-13)

language-core

  • fix: include event modifiers in duplicate listener checks (#6097) - Thanks to @​KazariEX!

3.3.4 (2026-06-08)

language-core

  • fix: only exclude already-set props from inherited attrs when checkRequiredFallthroughAttributes is enabled (#6088) - Thanks to @​KazariEX!
  • fix: camelize slot props regardless of htmlAttributes option (#6089) - Thanks to @​KazariEX!
  • fix: detect duplicate event listeners across name formats (#6094) - Thanks to @​whysopaul!

language-service

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vue-tsc since your current version.


Updates @iconify-json/lucide from 1.2.82 to 1.2.120

Commits

Updates @nuxt/content from 3.9.0 to 3.15.2

Changelog

Sourced from @​nuxt/content's changelog.

3.15.2 (2026-07-23)

Bug Fixes

  • dev: ignore temporary files in content source paths (#3784) (a019e70)
  • security: reject SQL function calls in query WHERE clauses (#3819) (847d523)

3.15.1 (2026-07-21)

Bug Fixes

3.15.0 (2026-07-02)

Features

  • add explicit bun sqlite connector for Bun runtime deployments (#3741) (92ac2ab)
  • search: add type inference for extraFields (#3714) (078491b)

Bug Fixes

  • content: support validator detection with pnpm enableGlobalVirtualStore (#3791) (6b2720b)
  • hmr: update all matching collections when a file changes (#3802) (06f8edb)
  • search: softer heading-level boost curve and tuned defaults (#3801) (00d25a5)
  • vercel: use tmp directory to clone contents (#3810) (793d59a)

3.14.0 (2026-05-18)

Features

  • search: add useSearchCollection composable with FTS5 full-text search (#3787) (2a1a585)
  • types: add custom properties on ContentConfig (#3761) (ea196c5)
  • types: add NOT IN to SQLOperator type (#3785) (ab88eb3)

Bug Fixes

  • docs: update Nuxt version from 3 to 4 in template features (#3780) (1f24029)
  • path-meta: slugify function did not pass to transformer (#3794) (778d7db)
  • preview: skip collections without source in preview template (#3771) (8aabefd)

3.13.0 (2026-04-13)

Bug Fixes

  • get mdc configs by calling mdc:configSources hook (#3736) (57f5552)
  • preview: move formatDate/formatDateTime into runtime subtree (#3749) (4a76b2a)

3.12.0 (2026-02-27)

... (truncated)

Commits

Updates @nuxt/icon from 2.1.0 to 2.4.1

Release notes

Sourced from @​nuxt/icon's releases.

v2.4.1

No significant changes

    View changes on GitHub

v2.4.0

   🐞 Bug Fixes

    View changes on GitHub

v2.3.1

   🐞 Bug Fixes

    View changes on GitHub

v2.3.0

   🚀 Features

    View changes on GitHub

v2.2.5

   🐞 Bug Fixes

    View changes on GitHub

v2.2.4

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v2.2.3

   🐞 Bug Fixes

... (truncated)

Commits
  • e062607 chore: release v2.4.1
  • d9fbffe chore: update deps
  • f9547a9 chore: release v2.4.0
  • cd2c95a fix: avoid relying on global fetch (#514)
  • fe6d83c fix: support Nitro 3 runtime imports (#516)
  • f5c5787 fix(client-bundle): don't warn end users about dropped integration icons (#517)
  • fe6a78a chore: release v2.3.1
  • 1345dc9 fix: include Nuxt layers in icon scanner context. (#505)
  • c56ee64 chore: release v2.3.0
  • b386fbb feat: standalone Vite plugin and reusable utils for client icon bundling (#506)
  • Additional commits viewable in compare view

Updates @nuxt/image from 2.0.0 to 2.1.0

Release notes

Sourced from @​nuxt/image's releases.

v2.1.0

v2.1.0 is the next minor release.

👀 Highlights

Nuxt Image 2.1 ships eight new image providers, a major upgrade to our image processing engine, and a bunch of fixes across existing providers.

🖼️ IPX v4

Under the hood, we've upgraded to IPX v4 which brings significant improvements:

  • Smaller bundles: IPX is now ESM-only with reduced dependency size
  • Stronger SVG security: SVG sanitization now always runs, regardless of optimization settings. This fixes a potential XSS vector where svgo: false would return untouched SVGs. The sanitizer now removes SMIL attribute injection, foreign content (<foreignObject>, <iframe>, etc.), and unsafe URIs across all elements
  • New image modifiers: opacity, brightness, saturation, hue, lightness, autoorient, dilate, erode, clahe, and linear
  • Better error messages: Invalid modifier arguments now return 400 errors with clear messages instead of cryptic 500s
  • Custom URL parsing: IPX now supports custom URL formats via the parseURL option

🌐 New Providers

This release adds support for eight new image optimization services:

🔧 Provider Improvements

  • Directus: Added support for sharp transforms and a key modifier for named presets (#2207)
  • Sanity: Support for absolute URLs with automatic project/dataset extraction (#2274), and a configurable baseURL for custom CDN setups (#2273)
  • AWS Amplify & Vercel: minimumCacheTTL is now configurable (#2278)

📦 Type Exports

NuxtImgProps and NuxtPictureProps are now exported from the runtime, making it easier to type your own components that wrap <NuxtImg> or <NuxtPicture> (#2115).

import type { NuxtImgProps, NuxtPictureProps } from '#image'

👉 Changelog

compare changes

🚀 Enhancements

... (truncated)

Commits
  • 05758b6 v2.1.0
  • 97d3758 chore: run module prepare in prepack
  • e529f37 ci: add workflow to comment on issues resolved in the latest release
  • 64b96c1 feat(deps): migrate to ipx v4 (#2094)
  • 100bed3 chore(deps): update nuxt framework to ^4.5.1 (#2282)
  • a670c04 chore(deps): update all non-major dependencies (#2267)
  • d875d84 chore(deps): update dependency @​noble/hashes to v2 (#2290)
  • a1500e6 ci: improve workflows (#2288)
  • 6f59ab1 docs(sanity): document baseURL option
  • 137ee63 fix(flyimg): encode all # characters in color values
  • Additional commits viewable in compare view

Updates @nuxt/kit from 4.4.6 to 4.5.1

Release notes

Sourced from @​nuxt/kit's releases.

v4.5.1

⚠️ This is a security release. We recommend upgrading as soon as possible with npx nuxt upgrade --dedupe.

It fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, cross-user payload disclosure on cached pages, and dev server path disclosure. Refreshing your lockfile also pulls in @nuxt/devtools@3.3.1, which fixes a separate critical development-only RCE.

If you already upgraded for the earlier route rule advisory (CVE-2026-53721), you still need this release: one of the fixes addresses a regression introduced by that fix.

If you use the cache, swr or isr route rules, purge any CDN or edge cache after upgrading; a leaked _payload.json may already be cached upstream.

Full details: Nuxt Security Patch Releases and GitHub Security Advisories.

👉 Changelog

compare changes

🔥 Performance

  • nitro: Replace island teleports in a single html pass (#35515)
  • nuxt: Add vue.optionsApi and disable it for v5+ (#35791)
  • nuxt: Without pages, skip client plugins that require routing (#35794)
  • nuxt: Skip payload revival plugin when ssr: false (#35782)

🩹 Fixes

  • nitro: Read rspack dev output fs lazily for server entry (#35740)
  • rspack,webpack: Resolve loaders and runtime deps from nuxt dirs (#35568)
  • nuxt: Return global route for useRoute in detached effect scope (#35659)
  • nuxt: Ignore custom name or path when reusing an existing page in pages:extend (#35661)
  • nuxt: Render client components in nested server components (#35669)
  • nuxt: Preserve explicit useFetch method inference (#35671)
  • nuxt: Revalidate cached route payloads instead of using force-cache (#35672)
  • nuxt: Correct default export detection in plugin metadata (#35676)
  • nuxt: Clear hide/reset timeouts in set() (#35534)
  • kit,nuxt,rspack,schema,webpack: Add .mts file extension in resolver (#33845)
  • nuxt: Preserve trailing slash in NuxtLink href when unset (#35501)
  • nuxt: Don't cross-pollute useAsyncData cache on reactive key change (#35656)
  • nuxt: Filter plugin dependencies by build target (#35682)
  • nuxt: Reload real page module on HMR of JSX render-function pages (#35678)
  • nuxt: Resolve @unhead/vue/* from nuxt's dependency tree (#35690)
  • kit: Surface module load errors instead of masking as missing (#35497)
  • nuxt: Type auto-imported $fetch with nitro's $Fetch (#35704)
  • nuxt: Don't reference app config sources in shared and node tsconfigs (#35673)
  • vite: Resolve SSR inlined CSS module class name mismatch (#35610)
  • nuxt: Generate layout types even when pages module is disabled (#35717)
  • nitro: Skip resource hints for stylesheets already rendered as blocking links (#35691)
  • kit: Dedupe layers that are both auto-scanned and explicitly extended (#35712)
  • nuxt: Don't apply scroll behaviour after a subsequent nav (

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 3…
f0b1148 
…0 updates

Bumps the minor-and-patch group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@nuxt/eslint](https://github.com/nuxt/eslint/tree/HEAD/packages/module) | `1.11.0` | `1.16.0` |
| [@nuxt/eslint-config](https://github.com/nuxt/eslint/tree/HEAD/packages/eslint-config) | `1.11.0` | `1.16.0` |
| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.2.1` | `4.5.1` |
| [shadcn-vue](https://github.com/unovue/shadcn-vue/tree/HEAD/packages/cli) | `2.4.1` | `2.8.1` |
| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.1.5` | `3.3.8` |
| [@iconify-json/lucide](https://github.com/iconify/icon-sets) | `1.2.82` | `1.2.120` |
| [@nuxt/content](https://github.com/nuxt/content) | `3.9.0` | `3.15.2` |
| [@nuxt/icon](https://github.com/nuxt/icon) | `2.1.0` | `2.4.1` |
| [@nuxt/image](https://github.com/nuxt/image) | `2.0.0` | `2.1.0` |
| [@nuxtjs/color-mode](https://github.com/nuxt-modules/color-mode) | `4.0.0` | `4.0.1` |
| [@nuxtjs/mcp-toolkit](https://github.com/nuxt-modules/mcp-toolkit) | `0.17.2` | `0.18.0` |
| [@nuxtjs/mdc](https://github.com/nuxt-content/mdc) | `0.19.1` | `0.22.2` |
| [@tabler/icons-vue](https://github.com/tabler/tabler-icons/tree/HEAD/packages/icons-vue) | `3.35.0` | `3.46.0` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.1.18` | `4.3.3` |
| [@vueuse/core](https://github.com/vueuse/vueuse/tree/HEAD/packages/core) | `14.1.0` | `14.4.0` |
| [@vueuse/integrations](https://github.com/vueuse/vueuse/tree/HEAD/packages/integrations) | `14.1.0` | `14.4.0` |
| [nuxt-llms](https://github.com/nuxtlabs/nuxt-llms) | `0.1.3` | `0.2.0` |
| [oxc-parser](https://github.com/oxc-project/oxc/tree/HEAD/napi/parser) | `0.99.0` | `0.142.0` |
| [shadcn-nuxt](https://github.com/unovue/shadcn-vue/tree/HEAD/packages/module) | `2.4.3` | `2.8.1` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `3.4.0` | `3.6.0` |
| [vite-plugin-wasm](https://github.com/Menci/vite-plugin-wasm) | `3.5.0` | `3.6.0` |



Updates `@nuxt/eslint` from 1.11.0 to 1.16.0
- [Release notes](https://github.com/nuxt/eslint/releases)
- [Commits](https://github.com/nuxt/eslint/commits/v1.16.0/packages/module)

Updates `@nuxt/eslint-config` from 1.11.0 to 1.16.0
- [Release notes](https://github.com/nuxt/eslint/releases)
- [Commits](https://github.com/nuxt/eslint/commits/v1.16.0/packages/eslint-config)

Updates `nuxt` from 4.2.1 to 4.5.1
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v4.5.1/packages/nuxt)

Updates `shadcn-vue` from 2.4.1 to 2.8.1
- [Release notes](https://github.com/unovue/shadcn-vue/releases)
- [Commits](https://github.com/unovue/shadcn-vue/commits/v2.8.1/packages/cli)

Updates `vue-tsc` from 3.1.5 to 3.3.8
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.3.8/packages/tsc)

Updates `@iconify-json/lucide` from 1.2.82 to 1.2.120
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `@nuxt/content` from 3.9.0 to 3.15.2
- [Release notes](https://github.com/nuxt/content/releases)
- [Changelog](https://github.com/nuxt/content/blob/main/CHANGELOG.md)
- [Commits](nuxt/content@v3.9.0...v3.15.2)

Updates `@nuxt/icon` from 2.1.0 to 2.4.1
- [Release notes](https://github.com/nuxt/icon/releases)
- [Commits](nuxt/icon@v2.1.0...v2.4.1)

Updates `@nuxt/image` from 2.0.0 to 2.1.0
- [Release notes](https://github.com/nuxt/image/releases)
- [Changelog](https://github.com/nuxt/image/blob/main/CHANGELOG.md)
- [Commits](nuxt/image@v2.0.0...v2.1.0)

Updates `@nuxt/kit` from 4.4.6 to 4.5.1
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v4.5.1/packages/kit)

Updates `@nuxtjs/color-mode` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/nuxt-modules/color-mode/releases)
- [Commits](nuxt-modules/color-mode@v4.0.0...v4.0.1)

Updates `@nuxtjs/mcp-toolkit` from 0.17.2 to 0.18.0
- [Release notes](https://github.com/nuxt-modules/mcp-toolkit/releases)
- [Commits](https://github.com/nuxt-modules/mcp-toolkit/compare/@nuxtjs/mcp-toolkit@0.17.2...@nuxtjs/mcp-toolkit@0.18.0)

Updates `@nuxtjs/mdc` from 0.19.1 to 0.22.2
- [Release notes](https://github.com/nuxt-content/mdc/releases)
- [Changelog](https://github.com/nuxt-content/mdc/blob/main/CHANGELOG.md)
- [Commits](nuxt-content/mdc@v0.19.1...v0.22.2)

Updates `@tabler/icons-vue` from 3.35.0 to 3.46.0
- [Release notes](https://github.com/tabler/tabler-icons/releases)
- [Commits](https://github.com/tabler/tabler-icons/commits/v3.46.0/packages/icons-vue)

Updates `@tailwindcss/vite` from 4.1.18 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-vite)

Updates `@vueuse/core` from 14.1.0 to 14.4.0
- [Release notes](https://github.com/vueuse/vueuse/releases)
- [Commits](https://github.com/vueuse/vueuse/commits/v14.4.0/packages/core)

Updates `@vueuse/integrations` from 14.1.0 to 14.4.0
- [Release notes](https://github.com/vueuse/vueuse/releases)
- [Commits](https://github.com/vueuse/vueuse/commits/v14.4.0/packages/integrations)

Updates `exsolve` from 1.0.8 to 1.1.1
- [Release notes](https://github.com/unjs/exsolve/releases)
- [Changelog](https://github.com/unjs/exsolve/blob/main/CHANGELOG.md)
- [Commits](unjs/exsolve@v1.0.8...v1.1.1)

Updates `fuse.js` from 7.1.0 to 7.5.0
- [Release notes](https://github.com/krisk/Fuse/releases)
- [Changelog](https://github.com/krisk/Fuse/blob/main/CHANGELOG.md)
- [Commits](krisk/Fuse@v7.1.0...v7.5.0)

Updates `nuxt-llms` from 0.1.3 to 0.2.0
- [Release notes](https://github.com/nuxtlabs/nuxt-llms/releases)
- [Changelog](https://github.com/nuxt-content/nuxt-llms/blob/main/CHANGELOG.md)
- [Commits](nuxt-content/nuxt-llms@v0.1.3...v0.2.0)

Updates `oxc-parser` from 0.99.0 to 0.142.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/napi/parser/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.142.0/napi/parser)

Updates `reka-ui` from 2.6.1 to 2.10.1
- [Release notes](https://github.com/unovue/reka-ui/releases)
- [Commits](unovue/reka-ui@v2.6.1...v2.10.1)

Updates `remark-mdc` from 3.9.0 to 3.11.1
- [Release notes](https://github.com/nuxt-content/remark-mdc/releases)
- [Changelog](https://github.com/nuxt-content/remark-mdc/blob/main/CHANGELOG.md)
- [Commits](nuxt-content/remark-mdc@v3.9.0...v3.11.1)

Updates `shadcn-nuxt` from 2.4.3 to 2.8.1
- [Release notes](https://github.com/unovue/shadcn-vue/releases)
- [Commits](https://github.com/unovue/shadcn-vue/commits/v2.8.1/packages/module)

Updates `slugify` from 1.6.6 to 1.6.9
- [Changelog](https://github.com/simov/slugify/blob/master/CHANGELOG.md)
- [Commits](https://github.com/simov/slugify/commits)

Updates `tailwind-merge` from 3.4.0 to 3.6.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](dcastil/tailwind-merge@v3.4.0...v3.6.0)

Updates `tailwindcss` from 4.1.18 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

Updates `unist-util-visit` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/syntax-tree/unist-util-visit/releases)
- [Commits](syntax-tree/unist-util-visit@5.0.0...5.1.0)

Updates `yaml` from 2.8.2 to 2.9.0
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.8.2...v2.9.0)

Updates `vite-plugin-wasm` from 3.5.0 to 3.6.0
- [Commits](Menci/vite-plugin-wasm@v3.5.0...v3.6.0)

---
updated-dependencies:
- dependency-name: "@nuxt/eslint"
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@nuxt/eslint-config"
  dependency-version: 1.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: nuxt
  dependency-version: 4.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: shadcn-vue
  dependency-version: 2.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vue-tsc
  dependency-version: 3.3.8
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@iconify-json/lucide"
  dependency-version: 1.2.120
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@nuxt/content"
  dependency-version: 3.15.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@nuxt/icon"
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@nuxt/image"
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@nuxt/kit"
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@nuxtjs/color-mode"
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@nuxtjs/mcp-toolkit"
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@nuxtjs/mdc"
  dependency-version: 0.22.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tabler/icons-vue"
  dependency-version: 3.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vueuse/core"
  dependency-version: 14.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@vueuse/integrations"
  dependency-version: 14.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: exsolve
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fuse.js
  dependency-version: 7.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: nuxt-llms
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: oxc-parser
  dependency-version: 0.142.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: reka-ui
  dependency-version: 2.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: remark-mdc
  dependency-version: 3.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: shadcn-nuxt
  dependency-version: 2.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: slugify
  dependency-version: 1.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: tailwind-merge
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: unist-util-visit
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: yaml
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vite-plugin-wasm
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 2, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Aug 2, 2026 •
edited
Loading

Copy link
Copy Markdown

Deploying docs-please with  Cloudflare Pages  Cloudflare Pages

Latest commit: f0b1148
Status: ✅  Deploy successful!
Preview URL: https://f9398436.docs-please.pages.dev
Branch Preview URL: https://dependabot-bun-minor-and-pat-ixez.docs-please.pages.dev

View logs

@greptile-apps

greptile-apps Bot commented Aug 2, 2026

Copy link
Copy Markdown

PR author is in the excluded authors list.

@codacy-production

codacy-production Bot commented Aug 2, 2026

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results
Complexity 0
Duplication 0

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@sonarqubecloud

sonarqubecloud Bot commented Aug 2, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@socket-security

socket-security Bot commented Aug 2, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​vueuse/​core@​12.8.2 ⏵ 14.4.095 -410076 +191 +6100
Updated@​nuxt/​eslint@​1.11.0 ⏵ 1.16.0991007794 +4100
Updated@​nuxt/​eslint-config@​1.11.0 ⏵ 1.16.098 +110078 +194 +4100
Updated@​iconify-json/​lucide@​1.2.82 ⏵ 1.2.120100 +11007996 +1100
Updatedvite-plugin-wasm@​3.5.0 ⏵ 3.6.099 +110091 +181100
Addedunist-util-visit@​5.1.010010010083100
Updatednuxt-llms@​0.1.3 ⏵ 0.2.08710010083100
Updated@​nuxtjs/​mcp-toolkit@​0.17.2 ⏵ 0.18.083100100 +197 +3100
Updatedtailwindcss@​4.1.17 ⏵ 4.3.3100 +11008498100
Updatedyaml@​2.8.2 ⏵ 2.9.0100 +1100 +210084100
Updatedslugify@​1.6.6 ⏵ 1.6.9100100100 +184100
Updated@​nuxtjs/​color-mode@​4.0.0 ⏵ 4.0.199 +110089 +186100
Updated@​vueuse/​integrations@​14.1.0 ⏵ 14.4.0991008691 +4100
Updatedtailwind-merge@​3.4.0 ⏵ 3.6.0100 +110086 +195 -1100
Addedexsolve@​1.1.110010010089100
Updated@​nuxt/​image@​2.0.0 ⏵ 2.1.09910092 +189 +8100
Updated@​tailwindcss/​vite@​4.1.18 ⏵ 4.3.3100 +110089 +298100
Updatedoxc-parser@​0.96.0 ⏵ 0.142.090100100 +196 +2100
Updated@​nuxt/​content@​3.9.0 ⏵ 3.15.29610090 +197 +3100
Updatedremark-mdc@​3.9.0 ⏵ 3.11.199100100 +190 +3100
Updatednuxt@​4.2.1 ⏵ 4.5.190 -7100 +4010094 -1100
Updatedfuse.js@​7.1.0 ⏵ 7.5.0100 +12100100 +991 +2100
Updatedvue-tsc@​2.2.12 ⏵ 3.3.810010091 +1796100
Updated@​tabler/​icons-vue@​3.35.0 ⏵ 3.46.09710010093 +1100
Updatedreka-ui@​2.6.1 ⏵ 2.10.19910097 +194 -1100
Updatedshadcn-nuxt@​2.4.3 ⏵ 2.8.110010010094100
Updatedshadcn-vue@​2.4.1 ⏵ 2.8.197 +1100100 +1594100
Updated@​nuxt/​kit@​4.4.6 ⏵ 4.5.19810010094100
Updated@​nuxtjs/​mdc@​0.19.1 ⏵ 0.22.297100100 +194 +3100
Updated@​nuxt/​icon@​2.1.0 ⏵ 2.4.198100100 +197 +3100

View full report

@socket-security

socket-security Bot commented Aug 2, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @emnapi/runtime is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → npm/@nuxt/content@3.15.2 → npm/@emnapi/runtime@1.11.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@emnapi/runtime@1.11.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm eslint-plugin-jsdoc is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → npm/@nuxt/eslint-config@1.16.0 → npm/eslint-plugin-jsdoc@63.3.2

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/eslint-plugin-jsdoc@63.3.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm node-forge is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: ? → npm/nuxt@4.5.1 → npm/node-forge@1.4.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/node-forge@1.4.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants