Skip to content

chore(deps): update all non-major dependencies#36

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#36
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown

@renovate renovate Bot commented Mar 30, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@nuxt/kit (source) ^4.4.2 → ^4.4.7 age adoption passing confidence dependencies patch
@stacksjs/components (source) ^0.2.67 → ^0.2.70 age adoption passing confidence dependencies patch
actions/cache v5.0.4 → v5.0.5 age adoption passing confidence action patch
actions/checkout v6.0.2 → v6.0.3 age adoption passing confidence action patch
bun-query-builder ^0.1.13 → ^0.1.25 age adoption passing confidence dependencies patch
home-lang/pantry v0.8.16 → v0.9.37 age adoption passing confidence action minor
nuxt (source) ^4.4.2 → ^4.4.7 age adoption passing confidence peerDependencies patch
oven/bun 1.3.11 → 1.3.14 age adoption passing confidence final patch
vue (source) ^3.5.30 → ^3.5.35 age adoption passing confidence peerDependencies patch

Release Notes

nuxt/nuxt (@​nuxt/kit)

v4.4.7

Compare Source

4.4.7 is the a security hotfix release.

👉 make sure to check https://github.com/nuxt/nuxt/security/advisories to view open advisories resolved by this release.

👉 Changelog

compare changes

🩹 Fixes
  • nitro: Assign noSSR before deciding payload extraction (#​35108)
  • vite: Avoid filtering out dirs with shared prefix from allowDirs (#​35112)
  • nuxt: Use resolve from pathe for buildCache path boundary check (#​35111)
  • nuxt: Prevent sibling-directory traversal in test component wrapper (#​35110)
  • nitro: Pass event data to isValid in dev clipboard-copy listener (#​35109)
  • nuxt: Validate protocols in reloadNuxtApp path before reload (#​35115)
  • vite: Prefix public asset virtuals with null byte (9e303b438)
  • nuxt: Re-run getCachedData after initial fetch (#​35122)
  • nuxt: Propagate useFetch/useAsyncData factory types (#​35133)
  • vite: Close vite dev server on nuxt close (a10a68abc)
  • kit,nuxt: Handle cancelling prompts to install packages (e84813229)
  • kit: Avoid excluding node-context files in legacy tsconfig (#​35152)
  • nuxt: Handle missing payload in chunkError listener (#​35155)
  • nuxt: Await in-lifght template generation when closing nuxt (#​35181)
  • nuxt: Clarify page and layout usage warnings (#​35184)
  • webpack: Surface compilation errors when stats.toString is empty (073b07851)
  • nuxt: Reject prototype-chain keys in the island registry (#​35205)
  • nuxt: Apply isScriptProtocol guard to navigateTo open option (#​35206)
  • nuxt: Prevent server-only page island from recursing via <NuxtPage> (#​35198)
  • rspack,webpack: Require loopback host when missing same-origin signals (#​35200)
  • nitro: Gate chrome devtools workspace endpoint to local requests (#​35201)
  • nuxt: Escape props in <NuxtClientFallback> ssr output (#​35199)
  • kit: Improve TS extension stripping/substitutions (#​35233)
  • nuxt: Preserve .d.mts/.d.cts in resolveTypePaths (#​35235)
  • nuxt: Escape <NoScript> slot content (4b054e9d9)
  • nuxt: Match route rules case-insensitively to mirror vue-router (07e39cd6f)
  • nuxt: Reject script-capable protocols in <NuxtLink> href (0103ce06f)
  • nuxt: Block path-normalization open redirect in navigateTo (2cce6fb02)
  • nuxt: Reject cross-origin paths in reloadNuxtApp (e447a793c)
  • vite: Bind vite-node IPC to a permissioned filesystem socket (1f9f4767a)
💅 Refactors
  • kit,nuxt,vite: Use es2023 array methods (#​34980)
  • nuxt: Replace runInNewContext with AST walker (d72a89ef4)
📖 Documentation
  • Document vite client and server options (#​35090)
  • Add dedicated module dependencies page (#​35171)
  • Add nodeTsConfig and sharedTsConfig options (#​35231)
  • Edit for clarity and grammar (#​35214)
🏡 Chore
✅ Tests
  • Update test for js payload rendering (bdcb81536)
  • Cover add regression test for hmr in sibling local layers (#​35125)
  • Improve reliability of hmr test (1d709b3cc)
🤖 CI
  • Always run all tests for 4.x/3.x (0dc4665cf)
  • Migrate from tibdex (ded29dc0f)
  • Add zizmor github actions check (#​35089)
  • Update to agentscan v1.8.0 (#​35120)
  • Automatically close PRs from automated accounts (#​35161)
  • Disable provenance-change enforcement in dependency-review (a2cf43e68)
❤️ Contributors

v4.4.6

Compare Source

4.4.6 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes
  • vite: Use spa entry for vite-node fallback (#​35037)
  • vite: Invalidate SSR module cache when modules are invalidated via plugin hooks (a86657a0e)
  • nuxt: Match deduplicated resolveComponent calls in jsx blocks (#​35028)
  • nuxt: Prefer our own builder/server deps (#​35029)
  • nuxt: Update useFetch key even with watch: false (#​35002)
  • nitro: Mark @babel/plugin-syntax-typescript as optional peer dep (#​35041)
  • nitro: Add json extension to payload cache items (#​35043)
  • nuxt: Handle errors fetching app manifest (#​35050)
  • nuxt: Encode html-significant characters in external redirect body (#​35052)
  • nuxt: Preserve setPageLayout props on same-path navigation (#​35055)
  • vite: Don't strip buildAssetsDir from vite-node SSR ids (#​35040)
  • nuxt: Mark useLoadingIndicator properties as readonly (#​35062)
  • vite: Strip queries in css inline styles map (#​35067)
  • nitro: Validate island request hash matches props (#​35077)
  • nitro: Use regexp to strip query (163e18d4b)
  • nitro: Use statusCode for nitro v2 compatibility (952f6841e)
  • nitro-server: Re-export h3 named symbols statically (cd99001c8)
  • nuxt: Render component-less parent routes during client-side nav (#​35036)
  • kit: Respect tsConfig.exclude in legacy tsconfig.json (#​35079)
  • nuxt: Run middleware for page islands (#​35092)
💅 Refactors
  • rspack,webpack: Extract same-origin check for dev middleware (#​35051)
📖 Documentation
  • Remove CSB, set node 22 and use steps for clarity (#​35066)
🏡 Chore
✅ Tests
🤖 CI
❤️ Contributors

v4.4.5

Compare Source

4.4.5 is the next patch release.

👉 Changelog

compare changes

🔥 Performance
  • kit: Cache layer roots and short-circuit isIgnored relative (#​35015)
🩹 Fixes
  • vite: Resolve vite clientServer with ssr: false (#​34959)
  • nitro: Correct payload route rule for / + override ssr: true (#​34990)
  • nitro: Break recursive rendering deadlocks during prerender (#​34939)
  • vite: Drop redundant css link when entry styles are inlined (#​34950)
  • vite: Sort optimizeDeps.include in pre-bundle hint (#​34976)
  • nuxt: Only force suspense remount after first resolve (#​34949)
  • kit: Read .env before resolving nuxt schema (#​34958)
  • nitro: Preserve serverHandlers array after nitro:config (#​34985)
  • nuxt: Cast partial nitro handlers when prepending to server arrays (61dcde4db)
  • vite: Only consider CSS inlined when styles are actually emitted (#​35006)
  • nuxt: Dedupe getCachedData for concurrent callers sharing a key (#​34999)
  • nuxt: Respect factory fetch/baseURL options in server useFetch (#​35003)
  • nuxt: Handle string presets in auto-imports (#​35013)
  • nuxt: Correct island transform for server pages and 'deep' mode (#​35005)
  • vite: Inline css for non-island children of server components (#​35001)
  • nuxt: Defer head DOM updates until page transition finishes (#​35016)
  • nuxt: Explicitly freeze head during island plugin phase (#​35010)
  • vite: Inline css imported from non-vue js modules (#​35020)
📖 Documentation
  • Add warning about routing in server components (#​34994)
🏡 Chore
✅ Tests
  • Extract server components fixture + add some failing tests (#​34995)
  • Isolate buildDir per matrix project for shared fixtures (#​35007)
  • Remove tests for 5.x runtimeBaseURL fature (816c25487)
❤️ Contributors

v4.4.4

Compare Source

stacksjs/stx (@​stacksjs/components)

v0.2.70

Compare Source

v0.2.69

Compare Source

actions/cache (actions/cache)

v5.0.5

Compare Source

What's Changed

Full Changelog: actions/cache@v5...v5.0.5

actions/checkout (actions/checkout)

v6.0.3

Compare Source

stacksjs/bun-query-builder (bun-query-builder)

v0.1.25

Compare Source

v0.1.24

Compare Source

v0.1.23

Compare Source

v0.1.21

Compare Source

v0.1.20

Compare Source

v0.1.18

Compare Source

v0.1.17

Compare Source

v0.1.16

Compare Source

v0.1.15

Compare Source

home-lang/pantry (home-lang/pantry)

v0.9.37

Compare Source

Compare changes

🚀 Features
  • container: wire build + container:generate CLI and freezer lookup (94260ca) (by Chris <chrisbreuer93@​gmail.com>)
🐛 Bug Fixes
  • recipes: unblock wavpack/ruby/git-scm/giflib source builds (8bb77db) (by Chris <chrisbreuer93@​gmail.com>)
  • recipes: faithfully re-port 38 source recipes from pkgx (conditionals, env, drop test cruft) (4457d85) (by Chris <chrisbreuer93@​gmail.com>)
  • recipes: carry pkgx props patches + faithful conditional/arch build steps (e80a20e) (by Chris <chrisbreuer93@​gmail.com>)
🧹 Chores
Contributors
  • Chris <chrisbreuer93@​gmail.com>

v0.9.36

Compare Source

Compare changes

🚀 Features
  • registry: object-storage backends for php, zig, and auth (de64a49) (by Chris <chrisbreuer93@​gmail.com>)
  • registry: persist analytics on the object-storage provider (318557f) (by Chris <chrisbreuer93@​gmail.com>)
  • ci: watch pkgx for new packages and open a PR per addition (3b8d07a) (by Chris <chrisbreuer93@​gmail.com>)
  • registry: support Backblaze B2 / Hetzner object storage (0eb5eb5) (by Chris <chrisbreuer93@​gmail.com>)
  • registry: add admin role for site accounts (6412f06) (by Chris <chrisbreuer93@​gmail.com>)
  • add dependency inspector and publisher dashboard on pantry.dev (650f4b5) (by Chris <chrisbreuer93@​gmail.com>)
  • recipes: add zig-dtsx recipe (0f5e641) (by glennmichael123 gtorregosa@gmail.com)
  • installer: download progress + 60s stall watchdog (e1b8abc) (by Chris <chrisbreuer93@​gmail.com>)
  • zig: delegate JS dep install to bun/pnpm/yarn/npm (e6046e2) (by glennmichael123 gtorregosa@gmail.com)
🐛 Bug Fixes
  • shell: repair PATH order on rc re-source so project tools keep priority (1da84dd) (by Chris <chrisbreuer93@​gmail.com>)
  • ci: free runner disk before large source builds (fb50d2a) (by Chris <chrisbreuer93@​gmail.com>)
  • zig: use std.ascii.findIgnoreCase (renamed from indexOfIgnoreCase) (b91c6ec) (by Chris <chrisbreuer93@​gmail.com>)
  • zig: publish + resolve via the registry (Hetzner), not AWS S3 (89489ce) (by Chris <chrisbreuer93@​gmail.com>)
  • sync: make binary existence checks and dep downloads provider-aware (d192942) (by Chris <chrisbreuer93@​gmail.com>)
  • ci: clear lint and typecheck failures on main (1a1c172) (by Chris <chrisbreuer93@​gmail.com>)
  • ci: retry transient errors in binary-metadata verify (201c3d9) (by Chris <chrisbreuer93@​gmail.com>)
  • registry: provider-aware tarball redirect (presign private buckets) (226ebc5) (by Chris <chrisbreuer93@​gmail.com>)
  • ci: verify only the latest version's platforms, not full history (e4272e3) (by Chris <chrisbreuer93@​gmail.com>)
  • ci: make verify-binary-metadata provider-aware (d56a9f6) (by Chris <chrisbreuer93@​gmail.com>)
  • complete Launchpad→Pantry migration and deps.yaml install paths (453644b) (by Chris <chrisbreuer93@​gmail.com>)
  • cloud: align pantry stack naming with ts-cloud conventions (0ac8a64) (by Chris <chrisbreuer93@​gmail.com>)
  • cloud: route pantry.dev dynamic paths to compute via CloudFront (36d4593) (by Chris <chrisbreuer93@​gmail.com>)
  • site: route auth API calls through registry.pantry.dev (4f2a87d) (by Chris <chrisbreuer93@​gmail.com>)
  • scripts: stop double-generating CHANGELOG on release (c42c387) (by Glenn Michael Torregosa gtorregosa@gmail.com)
  • publish: harden npm auth fallback (9ef3591) (by Chris <chrisbreuer93@​gmail.com>)
  • zig: support current build api (90ab90a) (by Chris <chrisbreuer93@​gmail.com>)
  • zig: tighten install/shell boundaries for JS delegation (fbc3183) (by glennmichael123 gtorregosa@gmail.com)
  • zig: make pantry run find node_modules/.bin and stream stdio (b65953d) (by glennmichael123 gtorregosa@gmail.com)
♻️ Code Refactoring
  • zig: route all registry I/O through the provider proxy, drop AWS (7d03a82) (by Chris <chrisbreuer93@​gmail.com>)
  • zig: remove the AWS S3 + DynamoDB publish workaround (30b9dd7) (by Chris <chrisbreuer93@​gmail.com>)
📚 Documentation
  • document Backblaze B2 storage setup and pkgx sync (d6f74ec) (by Chris <chrisbreuer93@​gmail.com>)
  • registry: fix upsert-admin DynamoDB table name in usage (b02078a) (by Chris <chrisbreuer93@​gmail.com>)
  • add example workflow for CI-built release binaries (9d5b987) (by Chris <chrisbreuer93@​gmail.com>)
🤖 Continuous Integration
  • sync-binaries: daily schedule + per-batch timeout + bounded parallelism (7517854) (by Chris <chrisbreuer93@​gmail.com>)
  • registry: target Hetzner Object Storage; generalize storage config (c82bb90) (by Chris <chrisbreuer93@​gmail.com>)
  • registry: make binary build/sync storage-provider aware (9a4594b) (by Chris <chrisbreuer93@​gmail.com>)
🧹 Chores

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from 6acd736 to 9b7f777 Compare March 30, 2026 14:26
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 8745562 to 50eacaf Compare April 20, 2026 13:52
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from b937a0a to c586b82 Compare April 28, 2026 06:59
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 16 times, most recently from 998d00d to 0c5e7a7 Compare May 6, 2026 12:38
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 4acc80e to 9c1a106 Compare May 16, 2026 06:49
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 5391e53 to d7604b2 Compare May 24, 2026 03:18
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 09912cd to b894c66 Compare June 1, 2026 15:06
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from b894c66 to 8ca24a4 Compare June 2, 2026 15:44
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from 8ca24a4 to 3652023 Compare June 2, 2026 16:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants