unboundsoftware/schemas-app
6
0
Fork 0
Code Issues 1 Pull Requests 3 Actions Packages Projects Releases Activity

fix(deps): update dependency nuxt to v4.4.7 #248

Merged
renovate merged 1 commits from renovate/nuxtjs-monorepo into main 2026-06-05 15:11:59 +00:00
Conversation 0 Commits 1 Files Changed 2
+391 -350
renovate commented 2026-06-05 15:08:38 +00:00
Owner
Copy Link
Copy Source

This PR contains the following updates:

Package Change Age Confidence
nuxt (source) 4.4.6 → 4.4.7 age confidence

Release Notes

nuxt/nuxt (nuxt)

v4.4.7

Compare Source

4.4.7 is a security hotfix release.

👉 make sure to check https://github.com/nuxt/nuxt/security/advisories to view open advisories resolved by this release.

👉 Changelog

compare changes

🩹 Fixes
  • nitro: Assign noSSR before deciding payload extraction (#​35108)
  • vite: Avoid filtering out dirs with shared prefix from allowDirs (#​35112)
  • nuxt: Use resolve from pathe for buildCache path boundary check (#​35111)
  • nuxt: Prevent sibling-directory traversal in test component wrapper (#​35110)
  • nitro: Pass event data to isValid in dev clipboard-copy listener (#​35109)
  • nuxt: Validate protocols in reloadNuxtApp path before reload (#​35115)
  • vite: Prefix public asset virtuals with null byte (9e303b438)
  • nuxt: Re-run getCachedData after initial fetch (#​35122)
  • nuxt: Propagate useFetch/useAsyncData factory types (#​35133)
  • vite: Close vite dev server on nuxt close (a10a68abc)
  • kit,nuxt: Handle cancelling prompts to install packages (e84813229)
  • kit: Avoid excluding node-context files in legacy tsconfig (#​35152)
  • nuxt: Handle missing payload in chunkError listener (#​35155)
  • nuxt: Await in-lifght template generation when closing nuxt (#​35181)
  • nuxt: Clarify page and layout usage warnings (#​35184)
  • webpack: Surface compilation errors when stats.toString is empty (073b07851)
  • nuxt: Reject prototype-chain keys in the island registry (#​35205)
  • nuxt: Apply isScriptProtocol guard to navigateTo open option (#​35206)
  • nuxt: Prevent server-only page island from recursing via <NuxtPage> (#​35198)
  • rspack,webpack: Require loopback host when missing same-origin signals (#​35200)
  • nitro: Gate chrome devtools workspace endpoint to local requests (#​35201)
  • nuxt: Escape props in <NuxtClientFallback> ssr output (#​35199)
  • kit: Improve TS extension stripping/substitutions (#​35233)
  • nuxt: Preserve .d.mts/.d.cts in resolveTypePaths (#​35235)
  • nuxt: Escape <NoScript> slot content (4b054e9d9)
  • nuxt: Match route rules case-insensitively to mirror vue-router (07e39cd6f)
  • nuxt: Reject script-capable protocols in <NuxtLink> href (0103ce06f)
  • nuxt: Block path-normalization open redirect in navigateTo (2cce6fb02)
  • nuxt: Reject cross-origin paths in reloadNuxtApp (e447a793c)
  • vite: Bind vite-node IPC to a permissioned filesystem socket (1f9f4767a)
💅 Refactors
  • kit,nuxt,vite: Use es2023 array methods (#​34980)
  • nuxt: Replace runInNewContext with AST walker (d72a89ef4)
📖 Documentation
  • Document vite client and server options (#​35090)
  • Add dedicated module dependencies page (#​35171)
  • Add nodeTsConfig and sharedTsConfig options (#​35231)
  • Edit for clarity and grammar (#​35214)
🏡 Chore
✅ Tests
  • Update test for js payload rendering (bdcb81536)
  • Cover add regression test for hmr in sibling local layers (#​35125)
  • Improve reliability of hmr test (1d709b3cc)
🤖 CI
  • Always run all tests for 4.x/3.x (0dc4665cf)
  • Migrate from tibdex (ded29dc0f)
  • Add zizmor github actions check (#​35089)
  • Update to agentscan v1.8.0 (#​35120)
  • Automatically close PRs from automated accounts (#​35161)
  • Disable provenance-change enforcement in dependency-review (a2cf43e68)
❤️ Contributors

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [nuxt](https://nuxt.com) ([source](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt)) | [`4.4.6` → `4.4.7`](https://renovatebot.com/diffs/npm/nuxt/4.4.6/4.4.7) | ![age](https://developer.mend.io/api/mc/badges/age/npm/nuxt/4.4.7?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/nuxt/4.4.6/4.4.7?slim=true) | --- ### Release Notes <details> <summary>nuxt/nuxt (nuxt)</summary> ### [`v4.4.7`](https://github.com/nuxt/nuxt/releases/tag/v4.4.7) [Compare Source](https://github.com/nuxt/nuxt/compare/v4.4.6...v4.4.7) > 4.4.7 is a security hotfix release. 👉 make sure to check <https://github.com/nuxt/nuxt/security/advisories> to view open advisories resolved by this release. #### 👉 Changelog [compare changes](https://github.com/nuxt/nuxt/compare/v4.4.6...v4.4.7) ##### 🩹 Fixes - **nitro:** Assign `noSSR` before deciding payload extraction ([#&#8203;35108](https://github.com/nuxt/nuxt/pull/35108)) - **vite:** Avoid filtering out dirs with shared prefix from `allowDirs` ([#&#8203;35112](https://github.com/nuxt/nuxt/pull/35112)) - **nuxt:** Use resolve from `pathe` for buildCache path boundary check ([#&#8203;35111](https://github.com/nuxt/nuxt/pull/35111)) - **nuxt:** Prevent sibling-directory traversal in test component wrapper ([#&#8203;35110](https://github.com/nuxt/nuxt/pull/35110)) - **nitro:** Pass event data to `isValid` in dev clipboard-copy listener ([#&#8203;35109](https://github.com/nuxt/nuxt/pull/35109)) - **nuxt:** Validate protocols in `reloadNuxtApp` path before reload ([#&#8203;35115](https://github.com/nuxt/nuxt/pull/35115)) - **vite:** Prefix public asset virtuals with null byte ([9e303b438](https://github.com/nuxt/nuxt/commit/9e303b438)) - **nuxt:** Re-run `getCachedData` after initial fetch ([#&#8203;35122](https://github.com/nuxt/nuxt/pull/35122)) - **nuxt:** Propagate `useFetch`/`useAsyncData` factory types ([#&#8203;35133](https://github.com/nuxt/nuxt/pull/35133)) - **vite:** Close vite dev server on nuxt close ([a10a68abc](https://github.com/nuxt/nuxt/commit/a10a68abc)) - **kit,nuxt:** Handle cancelling prompts to install packages ([e84813229](https://github.com/nuxt/nuxt/commit/e84813229)) - **kit:** Avoid excluding node-context files in legacy tsconfig ([#&#8203;35152](https://github.com/nuxt/nuxt/pull/35152)) - **nuxt:** Handle missing payload in chunkError listener ([#&#8203;35155](https://github.com/nuxt/nuxt/pull/35155)) - **nuxt:** Await in-lifght template generation when closing nuxt ([#&#8203;35181](https://github.com/nuxt/nuxt/pull/35181)) - **nuxt:** Clarify page and layout usage warnings ([#&#8203;35184](https://github.com/nuxt/nuxt/pull/35184)) - **webpack:** Surface compilation errors when stats.toString is empty ([073b07851](https://github.com/nuxt/nuxt/commit/073b07851)) - **nuxt:** Reject prototype-chain keys in the island registry ([#&#8203;35205](https://github.com/nuxt/nuxt/pull/35205)) - **nuxt:** Apply `isScriptProtocol` guard to `navigateTo` open option ([#&#8203;35206](https://github.com/nuxt/nuxt/pull/35206)) - **nuxt:** Prevent server-only page island from recursing via `<NuxtPage>` ([#&#8203;35198](https://github.com/nuxt/nuxt/pull/35198)) - **rspack,webpack:** Require loopback host when missing same-origin signals ([#&#8203;35200](https://github.com/nuxt/nuxt/pull/35200)) - **nitro:** Gate chrome devtools workspace endpoint to local requests ([#&#8203;35201](https://github.com/nuxt/nuxt/pull/35201)) - **nuxt:** Escape props in `<NuxtClientFallback>` ssr output ([#&#8203;35199](https://github.com/nuxt/nuxt/pull/35199)) - **kit:** Improve TS extension stripping/substitutions ([#&#8203;35233](https://github.com/nuxt/nuxt/pull/35233)) - **nuxt:** Preserve `.d.mts`/`.d.cts` in `resolveTypePaths` ([#&#8203;35235](https://github.com/nuxt/nuxt/pull/35235)) - **nuxt:** Escape `<NoScript>` slot content ([4b054e9d9](https://github.com/nuxt/nuxt/commit/4b054e9d9)) - **nuxt:** Match route rules case-insensitively to mirror `vue-router` ([07e39cd6f](https://github.com/nuxt/nuxt/commit/07e39cd6f)) - **nuxt:** Reject script-capable protocols in `<NuxtLink>` href ([0103ce06f](https://github.com/nuxt/nuxt/commit/0103ce06f)) - **nuxt:** Block path-normalization open redirect in `navigateTo` ([2cce6fb02](https://github.com/nuxt/nuxt/commit/2cce6fb02)) - **nuxt:** Reject cross-origin paths in `reloadNuxtApp` ([e447a793c](https://github.com/nuxt/nuxt/commit/e447a793c)) - **vite:** Bind vite-node IPC to a permissioned filesystem socket ([1f9f4767a](https://github.com/nuxt/nuxt/commit/1f9f4767a)) ##### 💅 Refactors - **kit,nuxt,vite:** Use `es2023` array methods ([#&#8203;34980](https://github.com/nuxt/nuxt/pull/34980)) - **nuxt:** Replace `runInNewContext` with AST walker ([d72a89ef4](https://github.com/nuxt/nuxt/commit/d72a89ef4)) ##### 📖 Documentation - Document vite client and server options ([#&#8203;35090](https://github.com/nuxt/nuxt/pull/35090)) - Add dedicated module dependencies page ([#&#8203;35171](https://github.com/nuxt/nuxt/pull/35171)) - Add nodeTsConfig and sharedTsConfig options ([#&#8203;35231](https://github.com/nuxt/nuxt/pull/35231)) - Edit for clarity and grammar ([#&#8203;35214](https://github.com/nuxt/nuxt/pull/35214)) ##### 🏡 Chore - Use `execFileSync` for safety in release scripts ([1d7baaf01](https://github.com/nuxt/nuxt/commit/1d7baaf01)) - Assert there is always a tag ([e98c47c3c](https://github.com/nuxt/nuxt/commit/e98c47c3c)) - Add autofix action tag in comment ([ffa5c0098](https://github.com/nuxt/nuxt/commit/ffa5c0098)) - Fix type in test ([a549652e2](https://github.com/nuxt/nuxt/commit/a549652e2)) - Update renovate minimum release age ([d12d5e58a](https://github.com/nuxt/nuxt/commit/d12d5e58a)) - Fix lychee dynamic composable exclude ([#&#8203;35119](https://github.com/nuxt/nuxt/pull/35119)) - Update lockfile ([91186dc51](https://github.com/nuxt/nuxt/commit/91186dc51)) - Lint ([dbc58965c](https://github.com/nuxt/nuxt/commit/dbc58965c)) ##### ✅ Tests - Update test for js payload rendering ([bdcb81536](https://github.com/nuxt/nuxt/commit/bdcb81536)) - Cover add regression test for hmr in sibling local layers ([#&#8203;35125](https://github.com/nuxt/nuxt/pull/35125)) - Improve reliability of hmr test ([1d709b3cc](https://github.com/nuxt/nuxt/commit/1d709b3cc)) ##### 🤖 CI - Always run all tests for 4.x/3.x ([0dc4665cf](https://github.com/nuxt/nuxt/commit/0dc4665cf)) - Migrate from tibdex ([ded29dc0f](https://github.com/nuxt/nuxt/commit/ded29dc0f)) - Add zizmor github actions check ([#&#8203;35089](https://github.com/nuxt/nuxt/pull/35089)) - Update to agentscan v1.8.0 ([#&#8203;35120](https://github.com/nuxt/nuxt/pull/35120)) - Automatically close PRs from automated accounts ([#&#8203;35161](https://github.com/nuxt/nuxt/pull/35161)) - Disable provenance-change enforcement in dependency-review ([a2cf43e68](https://github.com/nuxt/nuxt/commit/a2cf43e68)) ##### ❤️ Contributors - Daniel Roe ([@&#8203;danielroe](https://github.com/danielroe)) - David Stack ([@&#8203;davidstackio](https://github.com/davidstackio)) - David De Sloovere ([@&#8203;DavidDeSloovere](https://github.com/DavidDeSloovere)) - anton-gor-dev ([@&#8203;anton-gor-dev](https://github.com/anton-gor-dev)) - Noah3521 ([@&#8203;Noah3521](https://github.com/Noah3521)) - Shahar Aviram ([@&#8203;ShaharAviram1](https://github.com/ShaharAviram1)) - Matej Černý ([@&#8203;cernymatej](https://github.com/cernymatej)) - Mohit Kumar ([@&#8203;mohitkum4r](https://github.com/mohitkum4r)) - Matteo Gabriele ([@&#8203;MatteoGabriele](https://github.com/MatteoGabriele)) - Julien Huang ([@&#8203;huang-julien](https://github.com/huang-julien)) - Damian Głowala ([@&#8203;DamianGlowala](https://github.com/DamianGlowala)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovate added 1 commit 2026-06-05 15:08:41 +00:00
fix(deps): update dependency nuxt to v4.4.7
renovate/stability-days Updates have met minimum release age requirement
Details
schemas-app / build (pull_request) Successful in 3m9s
Details
schemas-app / deploy-prod (pull_request) Has been skipped
Details
f48714de60
renovate scheduled this pull request to auto merge when all checks succeed 2026-06-05 15:08:42 +00:00
renovate merged commit 6f1be9ea2b into main 2026-06-05 15:11:59 +00:00
renovate deleted branch renovate/nuxtjs-monorepo 2026-06-05 15:12:00 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
acctest (Shiny Acctest) argoyle (Joakim Olsson) buildtools (Buildtools) kubernetes (Kubernetes) releaser (Unbound Releaser) renovate (Renovate Bot)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unboundsoftware/schemas-app#248