chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #3863 · nuxt/content

renovate · 2026-10-05T00:28:45Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update	Pending
@cloudflare/workers-types	`^5.20260921.1` → `^5.20261004.1`	devDependencies	minor	`5.20261005.1`
@libsql/client (source)	`^0.17.4` → `^0.18.0`	dependencies	minor
@nuxt/test-utils	`^4.3.2` → `^4.3.3`	devDependencies	patch
@nuxt/ui (source)	`^4.11.1` → `^4.11.3`	devDependencies	patch
@nuxtjs/mdc	`^0.23.1` → `^0.23.2`	dependencies	patch
@shikijs/langs (source)	`^4.4.3` → `^4.5.0`	dependencies	minor
@types/node (source)	`^26.6.2` → `^26.6.4`	devDependencies	patch
@types/ws (source)	`^8.18.1` → `^8.18.2`	devDependencies	patch
@unhead/vue (source)	`^3.1.8` → `^3.4.2`	pnpm-workspace.overrides	minor
@valibot/to-json-schema (source)	`^1.5.0` → `^1.8.0`	peerDependencies	minor
drizzle-kit (source)	`^0.31.10` → `^0.31.11`	dependencies	patch
drizzle-orm (source)	`^0.45.2` → `^0.45.3`	dependencies	patch
eslint (source)	`^10.11.0` → `^10.12.0`	devDependencies	minor
isomorphic-git (source)	`^1.42.2` → `^1.43.0`	dependencies	minor
micromark (source)	`^4.0.2` → `^4.0.3`	dependencies	patch
micromark-util-types (source)	`^2.0.2` → `^2.0.3`	devDependencies	patch
node	`24` → `24.21.0`	uses-with	minor
pnpm (source)	`11.24.0` → `11.28.4`	packageManager	minor
shiki (source)	`^4.4.3` → `^4.5.0`	dependencies	minor
socket.io-client (source)	`^4.8.3` → `^4.8.4`	dependencies	patch
std-env	`^4.2.0` → `^4.3.0`	dependencies	minor
unhead (source)	`^3.1.8` → `^3.4.2`	pnpm-workspace.overrides	minor
valibot (source)	`^1.2.0` → `^1.5.0`	peerDependencies	minor
vite (source)	`^8.3.0` → `^8.3.2`	devDependencies	patch
vue-component-meta (source)	`^3.3.11` → `^3.3.12`	devDependencies	patch
vue-tsc (source)	`^3.3.11` → `^3.3.12`	devDependencies	patch
wrangler (source)	`^4.136.0` → `^4.147.0`	devDependencies	minor

Release Notes

cloudflare/workerd (@cloudflare/workers-types)

tursodatabase/libsql-client-ts (@libsql/client)

`v0.18.0`

Compare Source

nuxt/test-utils (@nuxt/test-utils)

`v4.3.3`

Compare Source

v4.3.3 is the next patch release.

👉 Changelog

compare changes

🔥 Performance

use h3's toWebHandler instead of node-mock-http (abe8ad944)
resolve h3 from the project (b5d802f03)
replace estree-walker with oxc-walker (8e8ca5e8b)
replace local-pkg with exsolve (38938a879)
replace c12 with native dotenv parsing (26c72afa0)
inline destr and scule usage (e4bfd2ebe)
drop node-fetch-native polyfill (6b654de5c)
replace nypm with package-manager-detector (#1828)

🩹 Fixes

runtime-utils: type registerEndpoint against the project h3 (#1831)
e2e: restore console after use nuxt kit (#1817)
config: exclude aliased mock packages from optimizeDeps in browser mode (#1816)
runtime: setup nuxt once per worker in no-isolate (#1821)
browser: correct render helper options type (#1822)

🏡 Chore

move vue to peer dependencies (e70592ffa)
declare supported nuxt versions as peer dependency (b473892c9)

🤖 CI

run tests in merge queues (0ad46c892)
use pnpm/setup and devEngines (#1814)

❤️ Contributors

Daniel Roe (@danielroe)
Yoshihiro Yamaguchi (@yamachi4416)

nuxt/ui (@nuxt/ui)

`v4.11.3`

Compare Source

Bug Fixes

App: apply the dir prop to the provided locale (#6767) (93c40df)
ChatPrompt: add method="post" to prevent input leaking via GET before hydration (#7078) (57f7699)
CheckboxGroup/RadioGroup: lift a hovered table item above its neighbors (#7073) (926097a)
ContentSearch/DashboardSearch: use translated search label as dialog title (#7062) (3c55cf2)
DashboardSidebar/Header: use translated toggle label as menu dialog title (#7082) (51e98da)
EditorToolbar: use tooltip text as aria-label on icon-only buttons (#7009) (7f0250e)
Form: include nested forms in parent dirty state (#6545) (8977394)
Form: keep dirty state and validation in sync with input (#7033) (56b1156)
Form: merge unnamed nested forms into a parent without schema (#7034) (384fdc1)
module: detect kebab-case components in Pug templates (#7045) (42ba532)
module: generate classes prefixed by usePrefix (#7074) (77c92de)
module: use @custom-variant for light and dark variants (#7023) (584016b)
ProseA: only round corners on focus (3da141c)
Select/SelectMenu: keep focus moved on selection (#7083) (6138bf0)
Table: keep footer separator above pinned columns (#7047) (e8756fd)
theme: drop double quotes from class strings (#7039) (5a04c6c)
useFilter: keep labels and separators in place while sorting (#6995) (032a152)
useOverlay: resolve every pending promise when reopened (#7057) (2f50c2e)
utils: prevent prototype pollution in set and setAtPath (#7077) (4bfd115)

`v4.11.2`

Compare Source

Bug Fixes

components: allow partial ui overrides on items (#6979) (c617565)
components: fall back to md for custom sizes in virtualizer (#6917) (9076ca2)
DashboardNavbar: render title only when defined (#6958) (7c4c6e3)
FieldGroup: add defaultVariants in theme (#6938) (0317d50)
Form: clear only the targeted field inside a nested form (#6923) (2b29c33)
Input/Textarea: keep 0 with nullable and optional modifiers (#6871) (6d6737a)
InputDate/InputTime: emit focus and blur when focus enters or leaves the field (#6855) (8e4546e)
InputMenu: ignore multiple in autocomplete mode (#6971) (27a3ef7)
InputMenu: prevent tags input from adding the search term on enter (#6776) (b3d4342)
InputMenu: round corners inside a FieldGroup in multiple mode (#6968) (619c732)
Link: propagate click handler errors to Vue error handling (#6993) (074152b)
PinInput: emit blur whenever focus leaves the group (#6858) (22efd35)
SelectMenu/InputMenu: ignore clear button when disabled (#6986) (9ea37c1)
SelectMenu: open menu on arrow keys (#6933) (cf9e838)
SelectMenu: remove the inherited "Show popup" aria-label (aab2d10), closes #6962
Table: emit aria-sort on sortable th elements (#6879) (74ad017)
Table: inset row focus outline (#6973) (a96823d)
Table: make rows with a select event keyboard accessible (#6838) (187c34f)
Toaster: prevent onClick from being called twice (#6980) (796f79d)
vue: resolve explicit component imports to their Vue overrides (#6999) (27a5fe4)

nuxt-content/mdc (@nuxtjs/mdc)

`v0.23.2`

Compare Source

compare changes

🩹 Fixes

Sanitize root component tags and props from markdown frontmatter (#492)
Respect user-defined nodeTransforms from nuxt.config (#510)

🏡 Chore

Upgrade deps (#511)

❤️ Contributors

Farnabaz farnabaz@gmail.com
Dostufffancy (@dostufffancy)
Farnabaz 01 <01@farnabaz.dev>

shikijs/shiki (@shikijs/langs)

`v4.5.0`

Compare Source

🚀 Features

Emit an explicit color level from codeToANSI - by @EvanProgramming in #1320 (b968e)
transformers:
- Add classActiveCode option to transformerNotationWordHighlight - by @curiouscoder-cmd in #1201 (1e968)
- Add transformerRenderLineNumber - by @Divyapahuja31 and DIVYA PAHUJA in #1238 (02f05)

🐞 Bug Fixes

cli:
- Fall back to 'text' when file/URL has no extension and no -… - by @VeerShah41 in #1248 (c00e5)
- Fall back to plaintext for unknown languages - by @Jinjiang and @antfubot in #1319 (4eb7c)
primitive:
- Dispose wasm memory for lazily embedded langs - by @rgodha24 in #1322 (b5423)
- Dedupe grammar injections on repeated language loads - by @antlio and @antfubot in #1318 (33678)
stream:
- Compile Solid renderer with babel-preset-solid - by @BetterAndBetterII and @antfu in #1309 (8724e)
transformers:
- Keep notations on content comment lines - by @tianrking in #1308 (d25ab)
- Handle split # and -- comments in rose-pine theme - by @anandghegde in #1317 (63e6d)
twoslash:
- Avoid crash when @errors nodes land past EOF - by @Yahiro025, @cursoragent and @antfubot in #1316 (5c919)

🏎 Performance

engine-js: Reuse each regex's last search while tokenizing a line - by @issacgerges and @antfu in #1314 (2ef5e)
stream: Group tokens by line in the React renderer - by @CNSeniorious000 in #1311 (81200)
vitepress-twoslash: Replace lz-string with lz-string-es - by @antfubot in #1324 (2e170)

View changes on GitHub

unjs/unhead (@unhead/vue)

`v3.4.2`

Compare Source

🐞 Bug Fixes

devtools:
- Register the runtime plugin only once - by @Noumenon-ai and Noumenon-ai in #990 (de2d3)
react:
- Keep initial head tags in the streamed shell - by @harlan-zw in #980 (bfd3f)
schema-org:
- Read useSeoMeta description and og:image - by @harlan-zw in #991 (d4dc0)
- Let the canonical link set the graph url - by @harlan-zw in #993 (1cf07)
stream:
- Preserve body tags and request script nonces - by @harlan-zw in #981 (6f0f6)

View changes on GitHub

`v3.4.1`

Compare Source

🐞 Bug Fixes

bundler:
- Inject resolved path for devtools runtime plugin - by @danielroe in #974 (fe51f)
- Render devtools payload after validation - by @harlan-zw in #985 (e740a)
unhead:
- Handle relative useScript warmup URLs - by @lprnmns in #973 (bb4cb)
- Resolve HTTP-prefixed relative canonical URLs - by @lprnmns in #977 (270a9)
validate:
- Reduce warnings for normal Nuxt output - by @harlan-zw in #986 (ef346)
vite,stream:
- Support manifest-mode transformIndexHtml() - by @harlan-zw in #970 (237d7)

View changes on GitHub

`v3.4.0`

Compare Source

🚀 Features

stream:
- Render Streamed Body Tags before body close - by @harlan-zw in #960 (d253b)
validate:
- Flag streamed head tags that bots never see - by @harlan-zw in #947 (18a55)
- Scope an instance with only and key - by @harlan-zw in #955 (aff26)

🐞 Bug Fixes

bundler:
- Transform .mts, .cts, and IDs with queries - by @harlan-zw in #946 (7206e)
schema-org:
- Input no-op, primaryImageOfPage opt-out, types - by @harlan-zw in #965 (6b307)
stream:
- Module mode lost every streamed head tag - by @harlan-zw in #950 (e5f5c)
- Stop the bootstrap clobbering an installed head - by @harlan-zw in #958 (0cec3)
- Stop wrapStream dropping late head entries - by @harlan-zw in #954 (791f0)
- Drop the hydration lock that swallowed early pushes - by @harlan-zw in #949 (44447)

🏎 Performance

stream: Render once per chunk, not once per entry - by @harlan-zw in #948 (4a98c)

View changes on GitHub

`v3.3.2`

Compare Source

🐞 Bug Fixes

Type origin-trial meta directive - by @harlan-zw in #932 (3cdea)
devtools: Connect bridge through RPC client - by @harlan-zw in #942 (29d10)
schema-org: Limit identity about links to homepage - by @harlan-zw in #933 (430b1)

🏎 Performance

Keep runtime minification linear - by @harlan-zw in #935 (1eadd)
Reduce client and server bundle size - by @harlan-zw (945d9)
Trim shared client and server code - by @harlan-zw in #941 (75432)
unhead:
- Defer promise walk allocations - by @harlan-zw in #936 (8f887)
- Skip template parsing without tokens - by @harlan-zw in #937 (eaad4)

View changes on GitHub

`v3.3.1`

Compare Source

🐞 Bug Fixes

scripts: Support source-less SDK loaders - by @harlan-zw in #858 (36dcf)

View changes on GitHub

`v3.3.0`

Compare Source

Projects using the Unhead Bundler with Vite 6 or 7, webpack, Rspack, Rollup, or another build without Rolldown no longer receive oxc-parser from @unhead/bundler. Builds that use Unhead transforms must install it directly.

📝 Migration

pnpm add -D oxc-parser

Runtime-only Unhead projects and builds with Rolldown installed need no change.

🚨 Breaking Changes

bundler: Make oxc-parser an optional peer - by @danielroe in #923 (7acca)

🚀 Features

bundler: Transpile static inline scripts for Vite targets - by @harlan-zw in #862 (cb7d0)
validate: Warn on deprecated Twitter metadata - by @harlan-zw in #910 (68a50)

🐞 Bug Fixes

Minify declarative JSON script content - by @harlan-zw in #874 (bf71e)
Support browsers without Object.hasOwn - by @harlan-zw in #891 (90f38)
react:
- Support Fragment children in Head - by @harlan-zw in #892 (7dd26)
- Preserve Helmet default title fallback - by @harlan-zw in #878 (e317a)
- Normalize Head JSX props - by @harlan-zw in #893 (8ce0e)
- Standardize provider instance prop - by @harlan-zw in #879 (7d2dc)
- Support raw content in Head - by @harlan-zw in #894 (d0501)
schema-org:
- Google rich result parity - by @harlan-zw in #919 (a9a8e)
- Missing Google rich result fields - by @harlan-zw in #920 (a58d4)
- Apply defaults when node type is absent - by @harlan-zw in #924 (0a796)
scripts:
- Keep one stable proxy across script load - by @harlan-zw in #925 (dbefa)
types:
- Support document speculation rules - by @harlan-zw in #873 (2ce44)
- Narrow unpackMeta return type - by @harlan-zw in #889 (d9600)
unhead:
- Render fresh server head into DOM - by @harlan-zw in #877 (becce)
- Dedupe scalar Open Graph and Twitter metadata - by @harlan-zw in #880 (72d98)
- Preserve numeric zero head content - by @harlan-zw in #885 (324df)
validate:
- Warn on too many prefetch's - by @harlan-zw in #895 (30a2f)
- Validate head input shapes - by @harlan-zw in #884 (9d7fa)
vue:
- Reject ignored server prop resolvers - by @harlan-zw in #876 (a834e)

🏎 Performance

bundler:
- Make Vite DevTools kit optional - by @harlan-zw in #911 (d9b3d)
- Reuse Rolldown parser when available - by @harlan-zw in #916 (bddfd)

View changes on GitHub

`v3.2.3`

Compare Source

🐞 Bug Fixes

schema-org: Keep logo on organization identity - by @harlan-zw in #872 (13324)

View changes on GitHub

`v3.2.2`

Compare Source

🐞 Bug Fixes

schema-org: Improve resolver correctness and types - by @harlan-zw in #868 (230e4)
scripts: Keep removed controllers terminal - by @harlan-zw in #867 (fa9b3)
stream: Resolve reactive entries before serialization - by @harlan-zw in #870 (ed03f)

🏎 Performance

schema-org: Reduce graph resolution overhead - by @harlan-zw in #871 (62dab)

View changes on GitHub

`v3.2.1`

Compare Source

🐞 Bug Fixes

bundler: Preserve head.ssr mutation targets - by @harlan-zw in #866 (e8ef3)

View changes on GitHub

`v3.2.0`

Compare Source

🚀 Features

scripts:
- Add async readiness and consumer scopes - by @harlan-zw in #840 (bbdc1)
- Add opt-in trigger primitives - by @harlan-zw in #856 (cf5a9)
server:
- Experimental prepareTemplate - by @harlan-zw in #830 (0b8ca)

🐞 Bug Fixes

Tolerate mixed Unhead majors in Nuxt builds - by @harlan-zw (680c0)
bundler:
- Correct build-target detection for transforms - by @harlan-zw in #829 (ea148)
react:
- Export provider prop types - by @harlan-zw in #854 (d15af)
schema-org:
- Export missing node types - by @harlan-zw in #852 (f5bf5)
stream:
- Respect backpressure/cancellation - by @harlan-zw in #827 (6395a)
- Prevent Rollup from rewriting generated IIFE - by @harlan-zw in #863 (f6cda)
types:
- Expose public extension types - by @harlan-zw in #849 (83404)
- Preserve define helper properties - by @harlan-zw (b042a)
unhead:
- Dedupe link tags by rel + href - by [@harlan-zw](https://red

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

vercel · 2026-10-05T00:28:52Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
content	Ready	Preview	Oct 5, 2026 4:27am UTC

socket-security · 2026-10-05T00:29:34Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
isomorphic-git@1.42.2 ⏵ 1.43.0			⁺²
@types/ws@8.18.1 ⏵ 8.18.2	⁺¹	⁺¹
shiki@4.4.3 ⏵ 4.5.0
@shikijs/langs@4.4.3 ⏵ 4.5.0
@nuxt/test-utils@4.3.2 ⏵ 4.3.3	⁺¹	⁺¹	⁺¹
@types/node@26.6.2 ⏵ 26.6.4		⁺¹
vite@8.3.0 ⏵ 8.3.2	⁺¹	⁺¹
socket.io-client@4.8.3 ⏵ 4.8.4		⁺¹	^-1
micromark-util-types@2.0.2 ⏵ 2.0.3		⁺¹
micromark@4.0.2 ⏵ 4.0.3		⁺¹
std-env@4.2.0 ⏵ 4.3.0		⁺²
@libsql/client@0.17.4 ⏵ 0.18.0	⁺¹	⁺¹
drizzle-orm@0.45.2 ⏵ 0.45.3		⁺¹
vue-tsc@3.3.11 ⏵ 3.3.12			⁺³
wrangler@4.136.0 ⏵ 4.147.0	⁺¹	⁺¹	⁺¹
@nuxtjs/mdc@0.23.1 ⏵ 0.23.2	⁺¹	⁺¹	^-1
@cloudflare/workers-types@5.20260921.1 ⏵ 5.20261004.1	⁺¹	⁺¹
drizzle-kit@0.31.10 ⏵ 0.31.11	⁺¹	⁺¹
eslint@10.11.0 ⏵ 10.12.0	⁺¹

View full report

vercel Bot deployed to Preview October 5, 2026 00:31 View deployment

chore(deps): update all non-major dependencies

d3305db

renovate Bot force-pushed the renovate/all-minor-patch branch from 8bf5fae to d3305db Compare October 5, 2026 04:24

vercel Bot deployed to Preview October 5, 2026 04:27 View deployment

Navigation Menu

Uh oh!

chore(deps): update all non-major dependencies - #3863

chore(deps): update all non-major dependencies#3863
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Oct 5, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Oct 5, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Oct 5, 2026 •

edited

Loading

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Oct 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

👉 Changelog

🔥 Performance

🩹 Fixes

🏡 Chore

🤖 CI

❤️ Contributors

Bug Fixes

Bug Fixes

🩹 Fixes

🏡 Chore

❤️ Contributors

🚀 Features

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

📝 Migration

🚨 Breaking Changes

🚀 Features

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

🐞 Bug Fixes

🏎 Performance

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

Configuration

Uh oh!

vercel Bot commented Oct 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Oct 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Oct 5, 2026 •

edited

Loading

vercel Bot commented Oct 5, 2026 •

edited

Loading

socket-security Bot commented Oct 5, 2026 •

edited

Loading