fix(deps): update all dependencies - #450
Closed
renovate[bot] wants to merge 1 commit into
Closed
Conversation
renovate
Bot
force-pushed
the
renovate/all
branch
from
July 27, 2026 13:02
af66ec1 to
ca74f6e
Compare
Contributor
Author
|
renovate
Bot
force-pushed
the
renovate/all
branch
6 times, most recently
from
July 30, 2026 17:45
aab9c61 to
9d8e2cd
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
from
July 31, 2026 10:38
9d8e2cd to
abf771a
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
9.1.0→9.2.03.3.7→3.3.914.3.0→14.4.012.11.1→13.0.211.1.0→12.1.19.0.2→9.0.34.5.0→4.5.11.61.1→1.62.18.1.5→8.2.03.3.7→3.3.93.3.7→3.3.9Release Notes
antfu/eslint-config (@antfu/eslint-config)
v9.2.0Compare Source
🚀 Features
🐞 Bug Fixes
scripts-infoin package.json sorting - by @antfu (09680)eslint-plugin-astrov2 to resolve unmet peer warning - by @ycs77 in #855 (5ada5)View changes on GitHub
vuejs/language-tools (@vue/language-core)
v3.3.9Compare Source
component-meta
getProgramAndFilefree of side effects (#6136) - Thanks to @seanogdev!language-core
language-service
workspace
typescript-native-bridge(#6129)v3.3.8Compare Source
language-core
workspace
@typescript/typescript6(#6123) - Thanks to @WaldemarEnns!vueuse/vueuse (@vueuse/core)
v14.4.0Compare Source
🚀 Features
useColorModeauto import if@nuxtjs/color-modeis detected - by @OrbisK in #5476 (60687)onStartTyping- by @LightQuanta and @9romise in #5395 (1f2b7)behavior,blockandinlineto exposed scrollTo method - by @laurens94, @OrbisK, @43081j and @ilyaliao in #4905 (01875)🐞 Bug Fixes
PUREannotation to avoid Rollup warning - by @serkodev and @9romise in #5388 (16933)tryOnScopeDisposeto avoid operating Vue internal API - by @liangmiQwQ in #5548 (2cad7)View changes on GitHub
WiseLibs/better-sqlite3 (better-sqlite3)
v13.0.2Compare Source
What's Changed
New Contributors
Full Changelog: WiseLibs/better-sqlite3@v13.0.1...v13.0.2
v13.0.1Compare Source
Full Changelog: WiseLibs/better-sqlite3@v13.0.0...v13.0.1
Fixed a regression in parameter binding where it would be overly strict and reject plain objects from other realms (e.g., in jest tests).
v13.0.0Compare Source
Version
13.0.0marks a major milestone, as it's the first version ofbetter-sqlite3to run on the N-API. This means prebuilt binaries should theoretically work across different versions of Node.js and Electron, and perhaps even other runtimes like Bun. As a result, we've removed the deprecatedprebuild-installdependency, and now prebuilt binaries are published directly with thebetter-sqlite3code itself. If your platform/architecture doesn't have a prebuilt binary, it should compile during install as before.What's Changed
db.explain()method, for running EXPLAIN queries without needing to supply bound parameters.preparedStatement.toString()method, for getting the expanded SQL of a prepared statement.SqliteErrorcross-realm andError.isErrorcompatibility by @dennismutuku2005 in #1473New Contributors
Full Changelog: WiseLibs/better-sqlite3@v12.12.0...v13.0.0
antfu-collective/bumpp (bumpp)
v12.1.1Compare Source
🚀 Features
View changes on GitHub
v12.1.0Compare Source
🚀 Features
--prflag to release via a pull request - by @antfubot in #125 (06e24)🐞 Bug Fixes
View changes on GitHub
v12.0.0Compare Source
🚨 Breaking Changes
View changes on GitHub
bcomnes/npm-run-all2 (npm-run-all2)
v9.0.3Compare Source
Merged
#244#243#242#241#237#239#238Commits
7f5fca6d970668nuxt/nuxt (nuxt)
v4.5.1Compare Source
It fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, cross-user payload disclosure on cached pages, and dev server path disclosure. Refreshing your lockfile also pulls in
@nuxt/devtools@3.3.1, which fixes a separate critical development-only RCE.If you already upgraded for the earlier route rule advisory (CVE-2026-53721), you still need this release: one of the fixes addresses a regression introduced by that fix.
If you use the
cache,swrorisrroute rules, purge any CDN or edge cache after upgrading; a leaked_payload.jsonmay already be cached upstream.Full details: Nuxt Security Patch Releases and GitHub Security Advisories.
👉 Changelog
compare changes
🔥 Performance
vue.optionsApiand disable it for v5+ (#35791)ssr: false(#35782)🩹 Fixes
useRoutein detached effect scope (#35659)nameorpathwhen reusing an existing page inpages:extend(#35661)useFetchmethod inference (#35671)force-cache(#35672).mtsfile extension in resolver (#33845)@unhead/vue/*from nuxt's dependency tree (#35690)$fetchwith nitro's$Fetch(#35704)vue-routerwhen there are island pages (#35739)h3that pins it to the version nuxt depends on (#35774)fromcannot be resolved (#35799)app.buildAssetsDir(#35833)templateisland prop under runtime compiler (ee6c84633)asprop for islands (581651ff3)💅 Refactors
semverwithverkit(#35713)📖 Documentation
codeSplitting: false(#35683)onPrehydrateexample comment (#35684)runtimeConfigenv var casting edge cases (#35709)nuxtrather thannuxi(8891e179c)runtimeCompilersecurity best practices (449b63ab1)📦 Build
.tsfile extension fromruntime/imports (#35689)🏡 Chore
@nuxt/telemetryin knip (9824d4f10)@nuxt/devtoolsto v3.3.1 (#35815)✅ Tests
_routein gotoPath (ca92d082b)🤖 CI
knipjob (58f68bd64)❤️ Contributors
microsoft/playwright (playwright)
v1.62.1Compare Source
v1.62.0Compare Source
🧱 New component testing model
Component testing moves to a stories and galleries model.
A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a
gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates
to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:
Pass a story type as a template argument to type-check its props, and use
update(props)/unmount()on the returned locator to re-render or tear down within a test.🛑 Cancel operations with AbortSignal
Most operations and web-first assertions now accept a
signaloption that takes anAbortSignal, letting youcancel long-running actions, navigations, waits, and assertions:
Providing a signal does not disable the default timeout; pass
timeout: 0to disable it.🖼️ WebP screenshots
expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot()
can now store snapshots in the WebP format — just give the snapshot a
.webpname:page.screenshot() and locator.screenshot() also accept
webpas atype,where quality
100(the default) is lossless and lower values use lossy compression.🧩 Custom test filtering with Reporter.preprocess()
New reporter.preprocess() hook runs after the configuration is resolved and before
reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded,
fixed, or failing through a TestRun object:
🔁 Isolated retries
New testConfig.retryStrategy controls when failed tests are retried. The default
'immediate'retries as soon as a worker is free;'isolated'runs all retries at the end,one by one in a single worker, to minimize interference with the rest of the suite:
New APIs
Browser and Context
credentialsincludes the context's virtual WebAuthn Credentials (passkeys) in the storage state, so they can be persisted and re-seeded into later contexts.Actions
scrolloption ("auto"|"none") on actions to opt out of Playwright's automatic scroll-into-view.Network
Evaluation
Command line & MCP
playwright-cli, runnable vianpx playwright mcpandnpx playwright cli.Reporters
mergeFilesreporter option:Announcements
Browser Versions
This version was also tested against the following stable channels:
vitejs/vite (vite)
v8.2.0Compare Source
Features
inputtoserver.fs.allow(#23035) (95a3cda)Bug Fixes
Object.prototypeis frozen (#23073) (599c5b0)Documentation
Tests
Configuration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.