Skip to content

build(deps): bump the npm group with 7 updates - #29

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-18640b8dc2
Open

build(deps): bump the npm group with 7 updates#29
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-18640b8dc2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 7 updates:

Package From To
minimark 0.2.0 1.0.0
nuxt 4.6.3 4.6.4
nuxt-llms 0.2.0 0.3.1
shiki 4.5.0 4.6.0
vue 3.5.44 3.5.45
turndown 7.2.4 7.2.5
vitest 5.0.5 5.1.0

Updates minimark from 0.2.0 to 1.0.0

Release notes

Sourced from minimark's releases.

v1.0.0

🚀 Features

🐞 Bug Fixes

View changes on GitHub
Changelog

Sourced from minimark's changelog.

1.0.0 (2026-02-10)

Features

  • attribute support, html format, yaml props (a2d7063)
  • markdown table generation (1484201)
  • pre: filename, highlight & meta on markdown generation (d7de9cd)

Bug Fixes

  • component: better inline detection (cf069ef)
  • component: if component has a text sibling, it is inline (d8470e6)
  • component: if there is no text between components they are inline (24c408f)
  • component: preserve prefix whitespaces in component content (139cba4)
  • do not indent inline components (b2f64a8)
  • escape HTML entities (7ace288)
  • line-break: stringify markdown style (c68ddf8)
  • nested component indent (dabf03c)
  • pre: decode html entities in code blocks (9df41a4)
  • task list detection (76668bf)
  • type import (46231d4)
  • typecheck (07a01f1)
  • types check (6f80492)
Commits
  • 5d9dfc6 chore(release): v1.0.0
  • e1d8e06 chore: upgrade deps
  • a0d5256 chore: upgrade deps
  • 24c408f fix(component): if there is no text between components they are inline
  • d8470e6 fix(component): if component has a text sibling, it is inline
  • cf069ef fix(component): better inline detection
  • 139cba4 fix(component): preserve prefix whitespaces in component content
  • b2f64a8 fix: do not indent inline components
  • dabf03c fix: nested component indent
  • 76668bf fix: task list detection
  • Additional commits viewable in compare view

Updates nuxt from 4.6.3 to 4.6.4

Release notes

Sourced from nuxt's releases.

v4.6.4

4.6.4 is a security release. It fixes eight advisories in Nuxt and pulls in nitropack 2.13.6, which fixes three more in Nitro. We recommend upgrading as soon as you can.

⚠️ Behaviour changes

These probably won't affect most apps, but it's worth flagging anyway:

  1. Error details in production. When a page fails to render on the server, the error page and the payload now only carry message and data of errors you create with createError. Everything else is stripped.
  2. Dev server Host checks. Webpack and rspack dev servers now reject requests with an unexpected Host header, as Vite already does. If you use a custom hostname or tunnel, you'll need to add it to the new devServer.allowedHosts option.
  3. workspaceDir detection. When workspaceDir isn't set, Nuxt now only widens it past rootDir to an explicit workspace root or the closest git repository.
  4. Nitropack cached routes. cache, swr and isr route rules now only cache GET and HEAD requests, and no longer store responses that set a cookie or send Cache-Control: private or no-store. Wildcard proxy and redirect rules also reject requests whose resolved target would leave the rule's scope.
  5. Route rules and encoded slashes. Route rules now match paths that contain encoded slashes, so /api%2Fadmin is covered by a /api/** rule.

👉 Changelog

compare changes

🩹 Fixes

  • nitro,nuxt: require unrouting 0.3.2 (768d21368)
  • nitro: preserve wildcard tails in case-insensitive route rules (bf31e4cd8)
  • nitro: require nitropack 2.13.6 (1b13c6981)
  • nitro: keep leading double slash in renderer request path (75c12c6fb)
  • nuxt: use unambiguous encoding for island hash (6f1b93c64)
  • vite-server: resolve wildcard redirect tails from the matched segments (1e7dfa6a7)
  • nuxt: do not expose details of untrusted thrown errors (8c56b71e4)
  • nuxt: strip trailing slashes in linear time (97424dd21)
  • nitro,webpack: include hosts the CLI allows after loading the config (8c11d965d)
  • webpack: skip hot middleware for forbidden dev requests (3c9645326)
  • rspack,webpack: reject unexpected Host headers in dev middleware (f8d64c9aa)
  • schema,nitro,vite: add devServer.allowedHosts (3e1c7964e)
  • nitro,nuxt: match route rules for paths with encoded slashes (084396b10)
  • schema: only widen workspace dir to a declared workspace root (89d3306d1)
  • nitro: only trust x-forwarded-proto in when opted-in (#36818)
  • nitro: stream the body read through a nuxt/server handler (#36817)
  • kit: suggest the specific fix when loading falls back to jiti (24d75659d)
  • vite: use a single type checker (#36774)
  • nitro,vite: remove windows + virtual dev ssr css links after hydration (#36765)
  • nitro,vite: dedupe dev css by module node (#36420)
  • nuxt: avoid hoisting setup-only values from definePageMeta (#36751)
  • nuxt: only match hydration modifiers after lazy prefix (#36750)
  • kit,nitro,nuxt: make emitted tsconfig/types stable across reruns (#36747)
  • nuxt: render inlined component styles after stylesheet links (#36714)
  • webpack: use valid devtool for hidden client sourcemaps in dev (#36555)

📖 Documentation

  • clarify template dependency regeneration (#36766)
  • revise README structure and headings (#36772)
  • link the Nuxt DevTools docs on nuxt.com (#36769)

... (truncated)

Commits
  • b9a6b68 v4.6.4 (#36823)
  • 6f1b93c fix(nuxt): use unambiguous encoding for island hash
  • 8c56b71 fix(nuxt): do not expose details of untrusted thrown errors
  • 97424dd fix(nuxt): strip trailing slashes in linear time
  • 084396b fix(nitro,nuxt): match route rules for paths with encoded slashes
  • 99b85f4 chore(deps): update all non-major dependencies (4.x) (#36820)
  • 545b593 test: list new main-only diagnostic codes
  • 861e153 test: normalise rolldown comment
  • c75ca36 fix(nuxt): avoid hoisting setup-only values from definePageMeta (#36751)
  • 34c56e5 fix(nuxt): only match hydration modifiers after lazy prefix (#36750)
  • Additional commits viewable in compare view

Updates nuxt-llms from 0.2.0 to 0.3.1

Release notes

Sourced from nuxt-llms's releases.

v0.3.1

v0.3.1 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes

  • strip trailing slashes from llms.domain (#62)

🏡 Chore

  • set up automated releases with uppt (#63)

❤️ Contributors

v0.3.0

🚀 Features

🐞 Bug Fixes

View changes on GitHub
Commits
  • 0d0fb67 v0.3.1 (#64)
  • 8484484 chore(deps): update actions/checkout action to v7 (#61)
  • 5c0f6cf chore: set up automated releases with uppt (#63)
  • a2f76f4 fix: strip trailing slashes from llms.domain (#62)
  • 38f39bd chore(release): release v0.3.0
  • afdded6 chore(deps): update lockfiles to fix dependabot alerts (#59)
  • 95f02da chore(deps): update dependency node to v24.22.0 (#30)
  • a7c7213 chore: upgrade deps (#58)
  • 5deb625 fix: type the Nuxt 5 hook event without nuxt/schema (#57)
  • 56fa194 feat: support Nuxt 5 (#56)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nuxt-llms since your current version.


Updates shiki from 4.5.0 to 4.6.0

Release notes

Sourced from shiki's releases.

v4.6.0

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub
Commits

Updates vue from 3.5.44 to 3.5.45

Release notes

Sourced from vue's releases.

v3.5.45

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.45 (2026-11-05)

Bug Fixes

  • compiler-core: copy loc in cloneLoc instead of recomputing it (#16092) (3cee79a), closes #16091
  • compiler-dom: preserve static boolean binding semantics (#16055) (05db7e8), closes #16051
  • compiler-sfc: respect catch and switch lexical scopes (fix #16098) (#16101) (0f20152)
  • hmr: retry reloads after pending async roots resolve (#16060) (fbaa794)
  • hydration: only update component el when replacing its host node (#16001) (51fd0cb)
  • KeepAlive: cache a resolved Suspense child right away (#16119) (716a29e)
  • KeepAlive: unmount a child deactivated before it was cached (#15981) (02d2c2b)
  • reactivity: run onScopeDispose in a stopped scope (#16108) (21dd33c)
  • runtime-core: anchor on the async placeholder when a component root has no el (#16122) (b5abf8c)
  • runtime-core: call directive mounted hooks with the latest binding (#16120) (6416207), closes #12460 #12482
  • runtime-core: remove the placeholder of an unmounted pending async component (#15982) (2b9a0bb)
  • runtime-core: render nothing for a component whose async setup rejects (#16111) (f64bfa5)
  • runtime-core: skip stopped error boundaries for async failures (#16061) (0326ed8)
  • runtime-dom: treat disablepictureinpicture and disableremoteplayback as boolean attributes (#15952) (ef81ddc)
  • suspense: do not mount the fallback after the boundary is unmounted (#15939) (4fd6a6b)
  • suspense: drop the unmount hooks of a pending branch when the boundary is unmounted (d04b662)
  • suspense: enter transitions nested in the pending branch on reveal (#16121) (b8074de), closes #12435 #15294
  • suspense: keep a discarded component marked unmounted (1dc8cdf)
  • suspense: keep the async root update retry across a discarded pending branch (#16107) (06bea73)
  • suspense: keep the internal cleanup of a discarded component (79b80b7)
  • suspense: keep the timeout counting when the root is switched again while pending (#16143) (a045acd)
  • suspense: patch same-root updates of nested boundaries in retained content (#16109) (2dbcea8), closes #15878
  • suspense: release parent dep on suspensible unmount (#15870) (46e5dbf)
  • suspense: resolve async deps whose pending cycle was discarded (#15980) (f7d0811)
  • suspense: resolve the boundary when an async setup rejects without an error handler in dev (#16110) (a14aa0b)
  • suspense: skip a root replacement in a retained nested boundary showing its fallback (#16125) (a47af77)
  • suspense: skip the out-in afterLeave of an unmounted boundary (#16115) (85e71c0), closes #11037 #11059
  • transition: handle leave immediately done in out-in mode (#11824) (70599b5), closes #15727
  • transition: switch modes around a keyed suspense boundary (#16124) (ff0b341)
  • types: add dialog closedby attribute (#16064) (24c9d0b)
  • v-model: respect number modifier for Set select values (0ff253b)

Performance Improvements

  • compiler-sfc: skip unused tsconfig include enumeration (#15899) (1612403), closes #15898
  • compiler-ssr: render static style attributes at compile time (#16010) (2629c89)
  • mark internal initializers as pure (#16012) (34fbeb1)
  • runtime-core: copy raw attrs when setup context attrs are passed as vnode props (#16129) (823c744)
Commits

Updates turndown from 7.2.4 to 7.2.5

Release notes

Sourced from turndown's releases.

v7.2.5

  • Merge pull request #553 from mixmark-io/perf/process-concatenation 5ae3c4e
  • Add a performance benchmark 5745c76
  • Keep the built output ES5-compatible in join() 5a73ca6
  • Improve output concatenation performance e17862d
  • Merge pull request #537 from mixmark-io/dependabot/npm_and_yarn/browserslist-4.28.8 aa84dfa
  • Merge pull request #538 from mixmark-io/dependabot/npm_and_yarn/ws-7.5.13 7e578dc
  • Merge pull request #539 from mixmark-io/dependabot/npm_and_yarn/brace-expansion-1.1.18 2deffc8
  • Merge pull request #540 from mixmark-io/dependabot/npm_and_yarn/js-yaml-4.3.2 e766358
  • Merge pull request #522 from mixmark-io/dependabot/npm_and_yarn/picomatch-4.0.4 89a3660
  • Merge pull request #523 from mixmark-io/dependabot/npm_and_yarn/lodash-4.18.1 d77fea9
  • Bump js-yaml from 4.2.0 to 4.3.2 a9d806c
  • Bump brace-expansion from 1.1.12 to 1.1.18 f0c202d
  • Bump ws from 7.5.10 to 7.5.13 0790c7f
  • Merge pull request #526 from mixmark-io/dependabot/npm_and_yarn/form-data-3.0.5 cdf9e66
  • Bump browserslist from 4.28.1 to 4.28.8 08bcbe7
  • Merge pull request #528 from mixmark-io/dependabot/npm_and_yarn/babel/core-7.29.6 c6310fd
  • Merge pull request #529 from mixmark-io/dependabot/npm_and_yarn/multi-d1c2cd7e76 c27898b
  • Bump js-yaml, rewire and eslint b1ad504
  • Bump @​babel/core from 7.29.0 to 7.29.6 d90d85c
  • Bump form-data from 3.0.4 to 3.0.5 3dd6b39
  • Bump lodash from 4.17.23 to 4.18.1 bd4b6ad
  • Bump picomatch from 4.0.3 to 4.0.4 4eeba4b

mixmark-io/turndown@v7.2.4...v7.2.5

Commits
  • b86e2b1 7.2.5
  • 5ae3c4e Merge pull request #553 from mixmark-io/perf/process-concatenation
  • 5745c76 Add a performance benchmark
  • 5a73ca6 Keep the built output ES5-compatible in join()
  • e17862d Improve output concatenation performance
  • aa84dfa Merge pull request #537 from mixmark-io/dependabot/npm_and_yarn/browserslist-...
  • 7e578dc Merge pull request #538 from mixmark-io/dependabot/npm_and_yarn/ws-7.5.13
  • 2deffc8 Merge pull request #539 from mixmark-io/dependabot/npm_and_yarn/brace-expansi...
  • e766358 Merge pull request #540 from mixmark-io/dependabot/npm_and_yarn/js-yaml-4.3.2
  • 89a3660 Merge pull request #522 from mixmark-io/dependabot/npm_and_yarn/picomatch-4.0.4
  • Additional commits viewable in compare view

Updates vitest from 5.0.5 to 5.1.0

Release notes

Sourced from vitest's releases.

v5.1.0

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits
  • 7a38449 chore: release v5.1.0 (#11838)
  • a5ec316 fix(vm): keep assignable accessor globals writable in node environment (#11834)
  • e46c6c1 refactor: share trace types and utils (#11825)
  • 9e23ce5 refactor(snapshot): unify review update with SnapshotState update (#11790)
  • a0e33cc chore: eliminate lint error (#11822)
  • fd145d8 feat(experimental): add message option to vi.waitFor and vi.waitUntil (#11754)
  • 4e98551 feat(experimental): add trace timeline for node (#11753)
    • <...

    Description has been truncated

@dependabot
build(deps): bump the npm group with 7 updates
ebbeafb 
Bumps the npm group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [minimark](https://github.com/farnabaz/minimark) | `0.2.0` | `1.0.0` |
| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.6.3` | `4.6.4` |
| [nuxt-llms](https://github.com/nuxt-content/nuxt-llms) | `0.2.0` | `0.3.1` |
| [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.5.0` | `4.6.0` |
| [vue](https://github.com/vuejs/core) | `3.5.44` | `3.5.45` |
| [turndown](https://github.com/mixmark-io/turndown) | `7.2.4` | `7.2.5` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.5` | `5.1.0` |


Updates `minimark` from 0.2.0 to 1.0.0
- [Release notes](https://github.com/farnabaz/minimark/releases)
- [Changelog](https://github.com/farnabaz/minimark/blob/main/CHANGELOG.md)
- [Commits](farnabaz/minimark@v0.2.0...v1.0.0)

Updates `nuxt` from 4.6.3 to 4.6.4
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v4.6.4/packages/nuxt)

Updates `nuxt-llms` from 0.2.0 to 0.3.1
- [Release notes](https://github.com/nuxt-content/nuxt-llms/releases)
- [Changelog](https://github.com/nuxt-content/nuxt-llms/blob/main/CHANGELOG.md)
- [Commits](nuxt-content/nuxt-llms@v0.2.0...v0.3.1)

Updates `shiki` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/shikijs/shiki/releases)
- [Commits](https://github.com/shikijs/shiki/commits/v4.6.0/packages/shiki)

Updates `vue` from 3.5.44 to 3.5.45
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.44...v3.5.45)

Updates `turndown` from 7.2.4 to 7.2.5
- [Release notes](https://github.com/mixmark-io/turndown/releases)
- [Commits](mixmark-io/turndown@v7.2.4...v7.2.5)

Updates `vitest` from 5.0.5 to 5.1.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/vitest)

---
updated-dependencies:
- dependency-name: minimark
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: nuxt
  dependency-version: 4.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: nuxt-llms
  dependency-version: 0.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: shiki
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: vue
  dependency-version: 3.5.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: turndown
  dependency-version: 7.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vitest
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 8, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants