Skip to content

chore(deps): update all non-major dependencies#229

Merged
HugoRCD merged 1 commit intomainfrom
renovate/all-minor-patch
Mar 23, 2026
Merged

chore(deps): update all non-major dependencies#229
HugoRCD merged 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Mar 23, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@ai-sdk/vue (source) ^3.0.116 → ^3.0.137 age confidence
@libsql/client (source) ^0.17.0 → ^0.17.2 age confidence
@nuxt/devtools (source) ^3.2.3 → ^3.2.4 age confidence
@nuxt/ui (source) ^4.5.1 → ^4.6.0 age confidence
ai (source) >=6.0.116 → >=6.0.137 age confidence
ai (source) ^6.0.116 → ^6.0.137 age confidence
bun (source) 1.3.10 → 1.3.11 age confidence
drizzle-kit (source) ^0.31.9 → ^0.31.10 age confidence
elysia >=1.4.27 → >=1.4.28 age confidence
elysia ^1.4.27 → ^1.4.28 age confidence
evlog (source) ^2.8.0 → ^2.9.0 age confidence
fastify (source) >=5.8.2 → >=5.8.4 age confidence
fastify (source) ^5.8.2 → ^5.8.4 age confidence
h3 (source) ^1.15.6 → ^1.15.10 age confidence
motion-v ^2.0.1 → ^2.2.0 age confidence
next (source) >=16.1.6 → >=16.2.1 age confidence
next (source) ^16.1.6 → ^16.2.1 age confidence
nitropack ^2.13.1 → ^2.13.2 age confidence
nuxt-studio ^1.4.0 → ^1.5.1 age confidence
react-router (source) >=7.9.0 → >=7.13.2 age confidence
react-router (source) ^7.9.0 → ^7.13.2 age confidence
shaders ^2.4.77 → ^2.4.78 age confidence
tailwindcss (source) ^4.2.1 → ^4.2.2 age confidence
turbo (source) ^2.8.17 → ^2.8.20 age confidence
vite (source) ^8.0.0 → ^8.0.2 age confidence
vitest (source) ^4.1.0 → ^4.1.1 age confidence
vue-tsc (source) ^3.2.5 → ^3.2.6 age confidence

Release Notes

vercel/ai (@​ai-sdk/vue)

v3.0.137

Compare Source

v3.0.136

Compare Source

Patch Changes
  • Updated dependencies [ed6876b]
    • ai@​6.0.134

v3.0.135

Compare Source

Patch Changes

v3.0.134

Compare Source

Patch Changes
  • Updated dependencies [28fd5a5]
    • ai@​6.0.132

v3.0.133

Compare Source

Patch Changes
  • Updated dependencies [14f25f9]
    • ai@​6.0.131

v3.0.132

Compare Source

Patch Changes
  • ai@​6.0.130

v3.0.131

Compare Source

Patch Changes
  • ai@​6.0.129

v3.0.130

Compare Source

Patch Changes
  • ai@​6.0.128

v3.0.129

Compare Source

Patch Changes
  • ai@​6.0.127

v3.0.128

Compare Source

Patch Changes
  • Updated dependencies [578615a]
    • ai@​6.0.126

v3.0.127

Compare Source

Patch Changes
  • ai@​6.0.125

v3.0.126

Compare Source

Patch Changes
  • ai@​6.0.124

v3.0.125

Compare Source

Patch Changes
  • ai@​6.0.125

v3.0.124

Patch Changes
  • ai@​6.0.122

v3.0.123

Patch Changes
  • ai@​6.0.121

v3.0.122

Compare Source

Patch Changes
  • Updated dependencies [78c0e26]
    • ai@​6.0.120

v3.0.121

Compare Source

Patch Changes
  • Updated dependencies [ab286f1]
  • Updated dependencies [d68b122]
    • ai@​6.0.119

v3.0.120

Compare Source

Patch Changes

v3.0.119

Compare Source

Patch Changes
  • Updated dependencies [d23121f]
    • ai@​6.0.117

v3.0.118

Compare Source

Patch Changes

v3.0.117

Compare Source

Patch Changes
tursodatabase/libsql-client-ts (@​libsql/client)

v0.17.2

Compare Source

v0.17.1

Compare Source

nuxt/devtools (@​nuxt/devtools)

v3.2.4

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
nuxt/ui (@​nuxt/ui)

v4.6.0

Compare Source

⚠ BREAKING CHANGES
  • module: use moduleDependencies to manipulate options (#​5384)
Features
Bug Fixes
  • Avatar: use resolved size for image width/height (#​6008) (6dd0fc4)
  • ChatShimmer: handle RTL mode (#​6180) (51793a8)
  • ContentNavigation: prevent toggling disabled parent items (#​6122) (0f1074f)
  • ContentSurround: handle RTL mode (#​6148) (6921f13)
  • ContentToc: reset start margin at lg breakpoint (8f24f79)
  • DashboardSearchButton: use valid HTML structure for trailing slot (#​6194) (578a12f)
  • Editor: guard lift calls for unavailable list extensions (#​6100) (065db6b)
  • Error: support status and statusText properties (1350d62), closes #​6134
  • FileUpload: make multiple, accept and reset options reactive (#​6204) (ae093df)
  • Modal/Slideover/Popover/Drawer: prevent double close:prevent emit (#​6226) (9a0d501)
  • module: only auto-import public composables and allow Vite opt-out (#​6197) (886f5fb)
  • NavigationMenu: improve RTL support for viewport and indicator (#​6164) (755867b)
  • NavigationMenu: propagate disabled state to item in vertical orientation (6d4d651)
  • ProsePre: move shiki line highlight styles to theme (d663950)
oven-sh/bun (bun)

v1.3.11: Bun v1.3.11

Compare Source

To install Bun v1.3.11

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.3.11:

bun upgrade
Read Bun v1.3.11's release notes on Bun's blog
Thanks to 15 contributors!
drizzle-team/drizzle-orm (drizzle-kit)

v0.31.10

Compare Source

  • Updated to hanji@0.0.8 - native bun stringWidth, stripANSI support, errors for non-TTY environments
  • We've migrated away from esbuild-register to tsx loader, it will now allow to use drizzle-kit seamlessly with both ESM and CJS modules
  • We've also added native Bun and Deno launch support, which will not trigger tsx loader and utilise native bun and deno imports capabilities and faster startup times
elysiajs/elysia (elysia)

v1.4.28

Compare Source

Feature:

  • #​1803 stream response with pull based backpressure
  • #​1802 handle range header for file/blob response
  • #​1722, #​1741 direct ReadableStream perf blow-up

Bug fix:

  • #​1805 dynamic imports inside .guard not registering routes
  • #​1771 breaks Bun HTML imports
  • #​1797 await mapped error response promise
  • #​1794 merge app cookie config into route cookie validator config
  • #​1796 check custom parser by full name
  • #​1795 write transformed cookie value to cookie entry directly
  • #​1793 use cookie schema for cookie noValidate check
  • #​1792 throw ValidationError instead of boolean in response encode path
  • detect HTML bundle when inline response is Promise

Change:

  • #​1613 export ElysiaTypeCustomErrors
  • remove Bun specific built
  • export AnySchema, UnwrapSchema, ModelsToTypes from root
  • conditional set headers of String and Object when no set.headers is set
HugoRCD/evlog (evlog)

v2.9.0

Compare Source

What's Changed

Features 🚀
Enhancements 🌈
Bug Fixes 🐞
  • fix(nitro): allow useLogger() in server middleware by @​HugoRCD in #​215
  • fix(evlog): respect status/statusCode on Error instances by @​benhid in #​218
  • fix(nitro): make evlogErrorHandler compatible with TanStack Start middleware API by @​HugoRCD in #​220
Documentation 📚
  • docs(tanstack-start): improve TanStack Start documentation coverage by @​HugoRCD in #​219
Dependency Updates 📦
Performance Improvements ⚡️

New Contributors

Full Changelog: https://github.com/HugoRCD/evlog/compare/evlog@2.8.0...evlog@2.9.0

fastify/fastify (fastify)

v5.8.4

Compare Source

v5.8.3

Compare Source

⚠️ Security Release

This fixes CVE CVE-2026-3635 GHSA-444r-cwp2-x5xf.

What's Changed

New Contributors

Full Changelog: fastify/fastify@v5.8.2...v5.8.3

h3js/h3 (h3)

v1.15.10

Compare Source

compare changes

🩹 Fixes
  • Preserve percent-encoded req.url in app event handler (#​1355)
❤️ Contributors

v1.15.9

Compare Source

compare changes

🩹 Fixes
  • Preserve %25 in pathname (1103df6)
  • static: Prevent path traversal via double-encoded dot segments (%252e%252e) (c56683d)
  • sse: Sanitize carriage returns in event stream data and comments (ba3c3fe)

v1.15.8

Compare Source

compare changes

🩹 Fixes
  • Preserve %25 in pathname (1103df6)

v1.15.7

Compare Source

compare changes

🩹 Fixes
  • static: Narrow path traversal check to match .. as a path segment only (c049dc0)
  • app: Decode percent-encoded path segments to prevent auth bypass (313ea52)
💅 Refactors
  • Remove implicit event handler conversion warning (#​1340)
❤️ Contributors
motiondivision/motion-vue (motion-v)

v2.2.0

Compare Source

Added
  • useTransform: accelerate propagation on value changes

v2.1.0

Compare Source

Added
  • useScroll: ScrollOffset presets, scroll timeline acceleration, rest pass-through, MaybeRefOrGetter options typing.
Changed
  • useSpring: rewrite with motion-dom attachFollow.
vercel/next.js (next)

v16.2.1

Compare Source

v16.2.0

Compare Source

v16.1.7

Compare Source

nitrojs/nitro (nitropack)

v2.13.2

Compare Source

compare changes

[!NOTE]
This release upgrades h3 to latest 1.15.9 which contains security fixes.

🩹 Fixes
  • prerender: Skip writing routes with .. or outside of public dir (81f76800)
  • prerender: Mark invalid routes as skipped (9cb795c7)
📖 Documentation
Preset Changes
  • vercel: Add types and docs for isr.exposeErrBody (f7753152)
❤️ Contributors
nuxt-content/nuxt-studio (nuxt-studio)

v1.5.1

Compare Source

Bug Fixes

v1.5.0

Compare Source

Features
Bug Fixes
remix-run/react-router (react-router)

v7.13.2

Compare Source

Patch Changes

  • Fix clientLoader.hydrate when an ancestor route is also hydrating a clientLoader (#​14835)

  • Fix type error when passing Framework Mode route components using Route.ComponentProps to createRoutesStub (#​14892)

  • Fix percent encoding in relative path navigation (#​14786)

  • Add future.unstable_passThroughRequests flag (#​14775)

    By default, React Router normalizes the request.url passed to your loader, action, and middleware functions by removing React Router's internal implementation details (.data suffixes, index + _routes query params).

    Enabling this flag removes that normalization and passes the raw HTTP request instance to your handlers. This provides a few benefits:

    • Reduces server-side overhead by eliminating multiple new Request() calls on the critical path
    • Allows you to distinguish document from data requests in your handlers base don the presence of a .data suffix (useful for observability purposes)

    If you were previously relying on the normalization of request.url, you can switch to use the new sibling unstable_url parameter which contains a URL instance representing the normalized location:

    // ❌ Before: you could assume there was no `.data` suffix in `request.url`
export async function loader({ request }: Route.LoaderArgs) {
  let url = new URL(request.url);
  if (url.pathname === "/path") {
    // This check will fail with the flag enabled because the `.data` suffix will
    // exist on data requests
  }
}

// ✅ After: use `unstable_url` for normalized routing logic and `request.url`
// for raw routing logic
export async function loader({ request, unstable_url }: Route.LoaderArgs) {
  if (unstable_url.pathname === "/path") {
    // This will always have the `.data` suffix stripped
  }

  // And now you can distinguish between document versus data requests
  let isDataRequest = new URL(request.url).pathname.endsWith(".data");
}

  • Internal refactor to consolidate framework-agnostic/React-specific route type layers - no public API changes (#​14765)

  • Sync protocol validation to rsc flows (#​14882)

  • Add a new unstable_url: URL parameter to route handler methods (loader, action, middleware, etc.) representing the normalized URL the application is navigating to or fetching, with React Router implementation details removed (.datasuffix, index/_routes query params) (#​14775)

    This is being added alongside the new future.unstable_passthroughRequests future flag so that users still have a way to access the normalized URL when that flag is enabled and non-normalized request's are being passed to your handlers. When adopting this flag, you will only need to start leveraging this new parameter if you are relying on the normalization of request.url in your application code.

    If you don't have the flag enabled, then unstable_url will match request.url.

v7.13.1

Compare Source

Patch Changes

  • fix null reference exception in bad codepath leading to invalid route tree comparisons (#​14780)

  • fix: clear timeout when turbo-stream encoding completes (#​14810)

  • Improve error message when Origin header is invalid (#​14743)

  • Fix matchPath optional params matching without a "/" separator. (#​14689)

    • matchPath("/users/:id?", "/usersblah") now returns null.
    • matchPath("/test_route/:part?", "/test_route_more") now returns null.

  • add RSC unstable_getRequest (#​14758)

  • Fix HydrateFallback rendering during initial lazy route discovery with matching splat route (#​14740)

  • [UNSTABLE] Add support for <Link unstable_mask> in Data Mode which allows users to navigate to a URL in the router but "mask" the URL displayed in the browser. This is useful for contextual routing usages such as displaying an image in a model on top of a gallery, but displaying a browser URL directly to the image that can be shared and loaded without the contextual gallery in the background. (#​14716)

    // routes/gallery.tsx
export function clientLoader({ request }: Route.LoaderArgs) {
  let sp = new URL(request.url).searchParams;
  return {
    images: getImages(),
    // When the router location has the image param, load the modal data
    modalImage: sp.has("image") ? getImage(sp.get("image")!) : null,
  };
}

export default function Gallery({ loaderData }: Route.ComponentProps) {
  return (
    <>
      <GalleryGrid>
        {loaderData.images.map((image) => (
          <Link
            key={image.id}
            {/* Navigate the router to /galley?image=N */}}
            to={`/gallery?image=${image.id}`}
            {/* But display /images/N in the URL bar */}}
            unstable_mask={`/images/${image.id}`}
          >
            <img src={image.url} alt={image.alt} />
          </Link>
        ))}
      </GalleryGrid>

      {/* When the modal data exists, display the modal */}
      {data.modalImage ? (
        <dialog open>
          <img src={data.modalImage.url} alt={data.modalImage.alt} />
        </dialog>
      ) : null}
    </>
  );
}

    Notes:

    • The masked location, if present, will be available on useLocation().unstable_mask so you can detect whether you are currently masked or not.
    • Masked URLs only work for SPA use cases, and will be removed from history.state during SSR.
    • This provides a first-class API to mask URLs in Data Mode to achieve the same behavior you could do in Declarative Mode via manual backgroundLocation management.

  • RSC: Update failed origin checks to return a 400 status and appropriate UI instead of a generic 500 (#​14755)

  • Preserve query parameters and hash on manifest version mismatch reload (#​14813)

v7.13.0

Compare Source

Minor Changes
  • Add crossOrigin prop to Links component (#​14687)
Patch Changes
  • Fix double slash normalization for useNavigate colon urls (#​14718)
  • Update failed origin checks to return a 400 status instead of a 500 (#​14737)
  • Bugfix #​14666: Inline criticalCss is missing nonce (#​14691)
  • Loosen allowedActionOrigins glob check so ** matches all domains (#​14722)

v7.12.0

Compare Source

Minor Changes
  • Add additional layer of CSRF protection by rejecting submissions to UI routes from external origins. If you need to permit access to specific external origins, you can specify them in the react-router.config.ts config allowedActionOrigins field. (#​14708)
Patch Changes

  • Fix generatePath when used with suffixed params (i.e., "/books/:id.json") (#​14269)

  • Export UNSAFE_createMemoryHistory and UNSAFE_createHashHistory alongside UNSAFE_createBrowserHistory for consistency. These are not intended to be used for new apps but intended to help apps usiong unstable_HistoryRouter migrate from v6->v7 so they can adopt the newer APIs. (#​14663)

  • Escape HTML in scroll restoration keys (#​14705)

  • Validate redirect locations (#​14706)

  • [UNSTABLE] Pass <Scripts nonce> value through to the underlying importmap script tag when using future.unstable_subResourceIntegrity (#​14675)

  • [UNSTABLE] Add a new future.unstable_trailingSlashAwareDataRequests flag to provide consistent behavior of request.pathname inside middleware, loader, and action functions on document and data requests when a trailing slash is present in the browser URL. (#​14644)

    Currently, your HTTP and request pathnames would be as follows for /a/b/c and /a/b/c/

    URL /a/b/c HTTP pathname request pathname`
    Document /a/b/c /a/b/c ✅
    Data /a/b/c.data /a/b/c ✅
    URL /a/b/c/ HTTP pathname request pathname`
    Document /a/b/c/ /a/b/c/ ✅
    Data /a/b/c.data /a/b/c ⚠️

    With this flag enabled, these p

Configuration

📅 Schedule: Branch creation - "on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@vercel
Copy link
Copy Markdown

vercel bot commented Mar 23, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
evlog-docs Ready Ready Preview, Comment, Open in v0 Mar 30, 2026 1:09am

@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new bot commented Mar 23, 2026 •
edited
Loading 

npm i https://pkg.pr.new/evlog@229

npm i https://pkg.pr.new/@evlog/nuxthub@229

commit: 7a73ac0

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 6c3ce78 to 311c571 Compare March 23, 2026 01:52
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 311c571 to 1ecc62f Compare March 23, 2026 13:30
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 1ecc62f to 7a73ac0 Compare March 23, 2026 18:16
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 23, 2026

Thank you for following the naming conventions! 🙏

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 7a73ac0 to b608d32 Compare March 23, 2026 21:03
@HugoRCD HugoRCD merged commit f09bb76 into main Mar 23, 2026
11 of 12 checks passed
@HugoRCD HugoRCD deleted the renovate/all-minor-patch branch March 23, 2026 21:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@HugoRCD