Update nuxt framework to ^4.5.1 #39

Merged

spacebot merged 1 commit from renovate/nuxt into master 2026-07-27 14:19:37 +02:00

Conversation 1 Commits 1 Files changed 1 +2 -2

spacebot commented 2026-07-27 14:19:11 +02:00

Owner

Copy link

This PR contains the following updates:

Package	Change	Age	Confidence
@nuxt/vite-builder (source)	^4.5.0 → ^4.5.1
nuxt (source)	^4.5.0 → ^4.5.1

---

Release Notes

nuxt/nuxt (@​nuxt/vite-builder)

v4.5.1

Compare Source

⚠️ This is a security release. We recommend upgrading as soon as possible with npx nuxt upgrade --dedupe.

It fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, cross-user payload disclosure on cached pages, and dev server path disclosure. Refreshing your lockfile also pulls in @nuxt/devtools@3.3.1, which fixes a separate critical development-only RCE.

If you already upgraded for the earlier route rule advisory (CVE-2026-53721), you still need this release: one of the fixes addresses a regression introduced by that fix.

If you use the cache, swr or isr route rules, purge any CDN or edge cache after upgrading; a leaked _payload.json may already be cached upstream.

Full details: Nuxt Security Patch Releases and GitHub Security Advisories.

👉 Changelog

compare changes

🔥 Performance

• nitro: Replace island teleports in a single html pass (#​35515)
• nuxt: Add vue.optionsApi and disable it for v5+ (#​35791)
• nuxt: Without pages, skip client plugins that require routing (#​35794)
• nuxt: Skip payload revival plugin when ssr: false (#​35782)

🩹 Fixes

• nitro: Read rspack dev output fs lazily for server entry (#​35740)
• rspack,webpack: Resolve loaders and runtime deps from nuxt dirs (#​35568)
• nuxt: Return global route for useRoute in detached effect scope (#​35659)
• nuxt: Ignore custom name or path when reusing an existing page in pages:extend (#​35661)
• nuxt: Render client components in nested server components (#​35669)
• nuxt: Preserve explicit useFetch method inference (#​35671)
• nuxt: Revalidate cached route payloads instead of using force-cache (#​35672)
• nuxt: Correct default export detection in plugin metadata (#​35676)
• nuxt: Clear hide/reset timeouts in set() (#​35534)
• kit,nuxt,rspack,schema,webpack: Add .mts file extension in resolver (#​33845)
• nuxt: Preserve trailing slash in NuxtLink href when unset (#​35501)
• nuxt: Don't cross-pollute useAsyncData cache on reactive key change (#​35656)
• nuxt: Filter plugin dependencies by build target (#​35682)
• nuxt: Reload real page module on HMR of JSX render-function pages (#​35678)
• nuxt: Resolve @unhead/vue/* from nuxt's dependency tree (#​35690)
• kit: Surface module load errors instead of masking as missing (#​35497)
• nuxt: Type auto-imported $fetch with nitro's $Fetch (#​35704)
• nuxt: Don't reference app config sources in shared and node tsconfigs (#​35673)
• vite: Resolve SSR inlined CSS module class name mismatch (#​35610)
• nuxt: Generate layout types even when pages module is disabled (#​35717)
• nitro: Skip resource hints for stylesheets already rendered as blocking links (#​35691)
• kit: Dedupe layers that are both auto-scanned and explicitly extended (#​35712)
• nuxt: Don't apply scroll behaviour after a subsequent nav (#​35719)
• vite: Ensure server sourcemap-preserver plugin actually runs (#​35680)
• vite: Preserve css suffix when extracting ssr inline styles (#​35714)
• nuxt: Watch external component directories in development (#​35652)
• nuxt: Don't exclude client entry module from style extraction (#​35720)
• nuxt: Amend cleanup command in NUXT_B7014 error message (#​35735)
• nuxt: Only pull in vue-router when there are island pages (#​35739)
• vite: Suppress external warnings for internal vite-node paths (#​35744)
• nuxt: Use scope-aware oxc parser for auto-imports (#​35743)
• nuxt: Sync layout meta during middleware on SSR (#​35633)
• nitro: Add alias for h3 that pins it to the version nuxt depends on (#​35774)
• nuxt: Preserve query params in cached payload extraction (#​35696)
• nuxt: Mirror runtime route tree in generated typed-router types (#​35788)
• nuxt: Warn when an imports preset from cannot be resolved (#​35799)
• kit: Avoid mutating layer configs when resolving options (#​35729)
• nuxt: Convert inline route rules exactly or drop with a warning (#​35455)
• nitro,nuxt,vite: Dedupe and normalise global css links in dev (#​35834)
• vite: Register template HMR plugin on dev servers (929c6c138)
• nuxt: Remove dev error overlay when error is cleared (#​35821)
• rspack,webpack: Resolve bundled postcss defaults from builder (#​35823)
• schema: Normalise slashes in app.buildAssetsDir (#​35833)
• nitro: Bound island props and v-for to prevent unauthenticated DoS (4e35ae9ba)
• nitro: Confine runtime payload cache to prerendering (ac9b41a36)
• nuxt: Case-fold route rule keys to match folded lookups (ad624a75a)
• nitro: Require loopback peer for chrome devtools workspace endpoint (0769c4f9b)
• nuxt: Reject reserved template island prop under runtime compiler (ee6c84633)
• nuxt: Reject top-level as prop for islands (581651ff3)

💅 Refactors

• nuxt: Use tick based debounce for asyncData executes (#​34151)
• kit,nuxt: Replace semver with verkit (#​35713)
• rspack,webpack: Use DI model to split builders (#​35751)

📖 Documentation

• Add dev container setup guide (#​35665)
• Fix dev container setup guide (#​35666)
• Add explanation of 200.html and 404.html SPA fallbacks (#​34483)
• Expand payload extraction documentation (#​35648)
• Clarify NuxtLink componentName is the internal (devtools) name (#​35658)
• Add example for components dir pattern option (#​35663)
• Require a single root element (#​35677)
• Add reason for why you should never import Vue app code in nitro code (#​34481)
• Document disabling code-splitting with codeSplitting: false (#​35683)
• Document nuxt-client caveat for non-SFC components (#​35654)
• Clarify favicon does not use cdnURL by default (#​35681)
• Standardize section order and headings across docs (#​35685)
• Clarify onPrehydrate example comment (#​35684)
• Add useId as a known limitation of nuxt island (#​35693)
• Recommend status over pending in data fetching (#​35694)
• Fill gaps in API minimalVersion badges after #​34485 (#​35708, #​34485)
• Explain dynamic asset paths (#​35695)
• Document runtimeConfig env var casting edge cases (#​35709)
• Clarify module dependency resolution (#​35718)
• Add more writing guidelines (#​35662)
• Add note with alternatives to using remote layers (#​35721)
• Use nuxt rather than nuxi (8891e179c)
• Document relative baseURL workarounds (#​34004)
• Warn about runtimeCompiler security best practices (449b63ab1)
• Warn about validating server component props (2c981cb07)

📦 Build

• nitro: Re-export type from augments to preserve module (dac937675)
• nuxt: Remove .ts file extension from runtime/ imports (#​35689)
• ui-templates: Commit generated ui template files (#​35770)

🏡 Chore

• Add extension 🤦 (d595fb3d4)
• Move to pnpm catalogs (#​35748)
• Update knip config, resolve issues, and run in ci (#​35742)
• Ignore @nuxt/telemetry in knip (9824d4f10)
• ui-templates: Pass config file path to unocss (34e7a810d)
• Allow regenerating lockfile in release script (c31389df3)
• nuxt: Bump @nuxt/devtools to v3.3.1 (#​35815)
• Ensure types are setup before unit tests (784d8f700)
• Simplify knip configuration (#​35827)

✅ Tests

• Reproduce duplicate CSS in shared chunks (#​35649)
• Prepare fixtures automatically before fixture and e2e runs (e8b3e6411)
• Improve and refactor basic fixture (#​35687)
• Slim down client-only, chunk-error and axis-independent suites (#​35706)
• Do not run type checking when benchmarking nuxt build (6355f3bc9)
• kit: Scope loadNuxt temp dir so it doesn't delete sibling fixtures (37301dd51)
• Guard against transient undefined _route in gotoPath (ca92d082b)
• Retry fixture prepare on transient ENOTEMPTY (3a6b59f96)
• Raise route-HMR polling timeout to reduce e2e flakiness (01dc27b7e)
• Update bundle size snapshot (30d24817c)

🤖 CI

• Rebalance shards and drop non-vite windows fixtures (#​35700)
• Warm windows dependency cache on main (#​35730)
• Run knip in default and production modes (#​35745)
• Run knip on pull requests (d620aa972)
• Prepare tests (c7bf7f738)
• Also prepare tests in knip job (58f68bd64)
• Check internal docs links on pull requests and all links weekly (#​35767)

❤️ Contributors

• Daniel Roe (@​danielroe)
• Lars Kappert (@​webpro)
• Matej Černý (@​cernymatej)
• Anthony Fu (@​antfu)
• Harlan Wilton (@​harlan-zw)
• Florian Heuberger (@​Flo0806)
• Anoesj Sadraee (@​Anoesj)
• Ryota Watanabe (@​wattanx)
• Alexander Lichter (@​TheAlexLichter)
• Nestor Vera (@​hacknug)
• Mateleo (@​Mateleo)
• Kevin Deng (@​sxzz)
• Robin (@​OrbisK)
• Bochkarev Ivan (@​Ibochkarev)
• Quentin Macq (@​quentinmcq)
• Julien Huang (@​huang-julien)
• Max (@​onmax)
• Luke Nelson (@​luc122c)
• Darlan José Batista do Prado (@​DarlanPrado)
• kealan (@​KealanAU)
• Sushant (@​sushantguri)
• raminjafary (@​raminjafary)
• Aubakirov Asker (@​Askerka00)
• lutejka (@​lutejka)
• Amulet Iris (@​KazariAI)
• bdbch (@​bdbch)
• Elecmonkey (@​elecmonkey)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Every minute (* * * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [@nuxt/vite-builder](https://nuxt.com) ([source](https://github.com/nuxt/nuxt/tree/HEAD/packages/vite)) | [`^4.5.0` → `^4.5.1`](https://renovatebot.com/diffs/npm/@nuxt%2fvite-builder/4.5.0/4.5.1) |  |  | | [nuxt](https://nuxt.com) ([source](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt)) | [`^4.5.0` → `^4.5.1`](https://renovatebot.com/diffs/npm/nuxt/4.5.0/4.5.1) |  |  | --- ### Release Notes <details> <summary>nuxt/nuxt (@&#8203;nuxt/vite-builder)</summary> ### [`v4.5.1`](https://github.com/nuxt/nuxt/releases/tag/v4.5.1) [Compare Source](https://github.com/nuxt/nuxt/compare/v4.5.0...v4.5.1) > ⚠️ **This is a security release.** We recommend upgrading as soon as possible with `npx nuxt upgrade --dedupe`. It fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, cross-user payload disclosure on cached pages, and dev server path disclosure. Refreshing your lockfile also pulls in `@nuxt/devtools@3.3.1`, which fixes a separate critical development-only RCE. If you already upgraded for the earlier route rule advisory ([CVE-2026-53721](https://github.com/nuxt/nuxt/security/advisories/GHSA-mm7m-92g8-7m47)), you still need this release: one of the fixes addresses a regression introduced by that fix. If you use the `cache`, `swr` or `isr` route rules, purge any CDN or edge cache after upgrading; a leaked `_payload.json` may already be cached upstream. Full details: [Nuxt Security Patch Releases](https://nuxt.com/blog/v4-5-security) and [GitHub Security Advisories](https://github.com/nuxt/nuxt/security/advisories). ##### 👉 Changelog [compare changes](https://github.com/nuxt/nuxt/compare/v4.5.0...v4.5.1) ##### 🔥 Performance - **nitro:** Replace island teleports in a single html pass ([#&#8203;35515](https://github.com/nuxt/nuxt/pull/35515)) - **nuxt:** Add `vue.optionsApi` and disable it for v5+ ([#&#8203;35791](https://github.com/nuxt/nuxt/pull/35791)) - **nuxt:** Without pages, skip client plugins that require routing ([#&#8203;35794](https://github.com/nuxt/nuxt/pull/35794)) - **nuxt:** Skip payload revival plugin when `ssr: false` ([#&#8203;35782](https://github.com/nuxt/nuxt/pull/35782)) ##### 🩹 Fixes - **nitro:** Read rspack dev output fs lazily for server entry ([#&#8203;35740](https://github.com/nuxt/nuxt/pull/35740)) - **rspack,webpack:** Resolve loaders and runtime deps from nuxt dirs ([#&#8203;35568](https://github.com/nuxt/nuxt/pull/35568)) - **nuxt:** Return global route for `useRoute` in detached effect scope ([#&#8203;35659](https://github.com/nuxt/nuxt/pull/35659)) - **nuxt:** Ignore custom `name` or `path` when reusing an existing page in `pages:extend` ([#&#8203;35661](https://github.com/nuxt/nuxt/pull/35661)) - **nuxt:** Render client components in nested server components ([#&#8203;35669](https://github.com/nuxt/nuxt/pull/35669)) - **nuxt:** Preserve explicit `useFetch` method inference ([#&#8203;35671](https://github.com/nuxt/nuxt/pull/35671)) - **nuxt:** Revalidate cached route payloads instead of using `force-cache` ([#&#8203;35672](https://github.com/nuxt/nuxt/pull/35672)) - **nuxt:** Correct default export detection in plugin metadata ([#&#8203;35676](https://github.com/nuxt/nuxt/pull/35676)) - **nuxt:** Clear hide/reset timeouts in set() ([#&#8203;35534](https://github.com/nuxt/nuxt/pull/35534)) - **kit,nuxt,rspack,schema,webpack:** Add `.mts` file extension in resolver ([#&#8203;33845](https://github.com/nuxt/nuxt/pull/33845)) - **nuxt:** Preserve trailing slash in NuxtLink href when unset ([#&#8203;35501](https://github.com/nuxt/nuxt/pull/35501)) - **nuxt:** Don't cross-pollute useAsyncData cache on reactive key change ([#&#8203;35656](https://github.com/nuxt/nuxt/pull/35656)) - **nuxt:** Filter plugin dependencies by build target ([#&#8203;35682](https://github.com/nuxt/nuxt/pull/35682)) - **nuxt:** Reload real page module on HMR of JSX render-function pages ([#&#8203;35678](https://github.com/nuxt/nuxt/pull/35678)) - **nuxt:** Resolve `@unhead/vue/*` from nuxt's dependency tree ([#&#8203;35690](https://github.com/nuxt/nuxt/pull/35690)) - **kit:** Surface module load errors instead of masking as missing ([#&#8203;35497](https://github.com/nuxt/nuxt/pull/35497)) - **nuxt:** Type auto-imported `$fetch` with nitro's `$Fetch` ([#&#8203;35704](https://github.com/nuxt/nuxt/pull/35704)) - **nuxt:** Don't reference app config sources in shared and node tsconfigs ([#&#8203;35673](https://github.com/nuxt/nuxt/pull/35673)) - **vite:** Resolve SSR inlined CSS module class name mismatch ([#&#8203;35610](https://github.com/nuxt/nuxt/pull/35610)) - **nuxt:** Generate layout types even when pages module is disabled ([#&#8203;35717](https://github.com/nuxt/nuxt/pull/35717)) - **nitro:** Skip resource hints for stylesheets already rendered as blocking links ([#&#8203;35691](https://github.com/nuxt/nuxt/pull/35691)) - **kit:** Dedupe layers that are both auto-scanned and explicitly extended ([#&#8203;35712](https://github.com/nuxt/nuxt/pull/35712)) - **nuxt:** Don't apply scroll behaviour after a subsequent nav ([#&#8203;35719](https://github.com/nuxt/nuxt/pull/35719)) - **vite:** Ensure server sourcemap-preserver plugin actually runs ([#&#8203;35680](https://github.com/nuxt/nuxt/pull/35680)) - **vite:** Preserve css suffix when extracting ssr inline styles ([#&#8203;35714](https://github.com/nuxt/nuxt/pull/35714)) - **nuxt:** Watch external component directories in development ([#&#8203;35652](https://github.com/nuxt/nuxt/pull/35652)) - **nuxt:** Don't exclude client entry module from style extraction ([#&#8203;35720](https://github.com/nuxt/nuxt/pull/35720)) - **nuxt:** Amend cleanup command in NUXT\_B7014 error message ([#&#8203;35735](https://github.com/nuxt/nuxt/pull/35735)) - **nuxt:** Only pull in `vue-router` when there are island pages ([#&#8203;35739](https://github.com/nuxt/nuxt/pull/35739)) - **vite:** Suppress external warnings for internal vite-node paths ([#&#8203;35744](https://github.com/nuxt/nuxt/pull/35744)) - **nuxt:** Use scope-aware oxc parser for auto-imports ([#&#8203;35743](https://github.com/nuxt/nuxt/pull/35743)) - **nuxt:** Sync layout meta during middleware on SSR ([#&#8203;35633](https://github.com/nuxt/nuxt/pull/35633)) - **nitro:** Add alias for `h3` that pins it to the version nuxt depends on ([#&#8203;35774](https://github.com/nuxt/nuxt/pull/35774)) - **nuxt:** Preserve query params in cached payload extraction ([#&#8203;35696](https://github.com/nuxt/nuxt/pull/35696)) - **nuxt:** Mirror runtime route tree in generated typed-router types ([#&#8203;35788](https://github.com/nuxt/nuxt/pull/35788)) - **nuxt:** Warn when an imports preset `from` cannot be resolved ([#&#8203;35799](https://github.com/nuxt/nuxt/pull/35799)) - **kit:** Avoid mutating layer configs when resolving options ([#&#8203;35729](https://github.com/nuxt/nuxt/pull/35729)) - **nuxt:** Convert inline route rules exactly or drop with a warning ([#&#8203;35455](https://github.com/nuxt/nuxt/pull/35455)) - **nitro,nuxt,vite:** Dedupe and normalise global css links in dev ([#&#8203;35834](https://github.com/nuxt/nuxt/pull/35834)) - **vite:** Register template HMR plugin on dev servers ([929c6c138](https://github.com/nuxt/nuxt/commit/929c6c138)) - **nuxt:** Remove dev error overlay when error is cleared ([#&#8203;35821](https://github.com/nuxt/nuxt/pull/35821)) - **rspack,webpack:** Resolve bundled postcss defaults from builder ([#&#8203;35823](https://github.com/nuxt/nuxt/pull/35823)) - **schema:** Normalise slashes in `app.buildAssetsDir` ([#&#8203;35833](https://github.com/nuxt/nuxt/pull/35833)) - **nitro:** Bound island props and v-for to prevent unauthenticated DoS ([4e35ae9ba](https://github.com/nuxt/nuxt/commit/4e35ae9ba)) - **nitro:** Confine runtime payload cache to prerendering ([ac9b41a36](https://github.com/nuxt/nuxt/commit/ac9b41a36)) - **nuxt:** Case-fold route rule keys to match folded lookups ([ad624a75a](https://github.com/nuxt/nuxt/commit/ad624a75a)) - **nitro:** Require loopback peer for chrome devtools workspace endpoint ([0769c4f9b](https://github.com/nuxt/nuxt/commit/0769c4f9b)) - **nuxt:** Reject reserved `template` island prop under runtime compiler ([ee6c84633](https://github.com/nuxt/nuxt/commit/ee6c84633)) - **nuxt:** Reject top-level `as` prop for islands ([581651ff3](https://github.com/nuxt/nuxt/commit/581651ff3)) ##### 💅 Refactors - **nuxt:** Use tick based debounce for asyncData executes ([#&#8203;34151](https://github.com/nuxt/nuxt/pull/34151)) - **kit,nuxt:** Replace `semver` with `verkit` ([#&#8203;35713](https://github.com/nuxt/nuxt/pull/35713)) - **rspack,webpack:** Use DI model to split builders ([#&#8203;35751](https://github.com/nuxt/nuxt/pull/35751)) ##### 📖 Documentation - Add dev container setup guide ([#&#8203;35665](https://github.com/nuxt/nuxt/pull/35665)) - Fix dev container setup guide ([#&#8203;35666](https://github.com/nuxt/nuxt/pull/35666)) - Add explanation of 200.html and 404.html SPA fallbacks ([#&#8203;34483](https://github.com/nuxt/nuxt/pull/34483)) - Expand payload extraction documentation ([#&#8203;35648](https://github.com/nuxt/nuxt/pull/35648)) - Clarify NuxtLink componentName is the internal (devtools) name ([#&#8203;35658](https://github.com/nuxt/nuxt/pull/35658)) - Add example for components dir pattern option ([#&#8203;35663](https://github.com/nuxt/nuxt/pull/35663)) - Require a single root element ([#&#8203;35677](https://github.com/nuxt/nuxt/pull/35677)) - Add reason for why you should never import Vue app code in nitro code ([#&#8203;34481](https://github.com/nuxt/nuxt/pull/34481)) - Document disabling code-splitting with `codeSplitting: false` ([#&#8203;35683](https://github.com/nuxt/nuxt/pull/35683)) - Document nuxt-client caveat for non-SFC components ([#&#8203;35654](https://github.com/nuxt/nuxt/pull/35654)) - Clarify favicon does not use cdnURL by default ([#&#8203;35681](https://github.com/nuxt/nuxt/pull/35681)) - Standardize section order and headings across docs ([#&#8203;35685](https://github.com/nuxt/nuxt/pull/35685)) - Clarify `onPrehydrate` example comment ([#&#8203;35684](https://github.com/nuxt/nuxt/pull/35684)) - Add useId as a known limitation of nuxt island ([#&#8203;35693](https://github.com/nuxt/nuxt/pull/35693)) - Recommend status over pending in data fetching ([#&#8203;35694](https://github.com/nuxt/nuxt/pull/35694)) - Fill gaps in API minimalVersion badges after [#&#8203;34485](https://github.com/nuxt/nuxt/issues/34485) ([#&#8203;35708](https://github.com/nuxt/nuxt/pull/35708), [#&#8203;34485](https://github.com/nuxt/nuxt/issues/34485)) - Explain dynamic asset paths ([#&#8203;35695](https://github.com/nuxt/nuxt/pull/35695)) - Document `runtimeConfig` env var casting edge cases ([#&#8203;35709](https://github.com/nuxt/nuxt/pull/35709)) - Clarify module dependency resolution ([#&#8203;35718](https://github.com/nuxt/nuxt/pull/35718)) - Add more writing guidelines ([#&#8203;35662](https://github.com/nuxt/nuxt/pull/35662)) - Add note with alternatives to using remote layers ([#&#8203;35721](https://github.com/nuxt/nuxt/pull/35721)) - Use `nuxt` rather than `nuxi` ([8891e179c](https://github.com/nuxt/nuxt/commit/8891e179c)) - Document relative baseURL workarounds ([#&#8203;34004](https://github.com/nuxt/nuxt/pull/34004)) - Warn about `runtimeCompiler` security best practices ([449b63ab1](https://github.com/nuxt/nuxt/commit/449b63ab1)) - Warn about validating server component props ([2c981cb07](https://github.com/nuxt/nuxt/commit/2c981cb07)) ##### 📦 Build - **nitro:** Re-export type from augments to preserve module ([dac937675](https://github.com/nuxt/nuxt/commit/dac937675)) - **nuxt:** Remove `.ts` file extension from `runtime/` imports ([#&#8203;35689](https://github.com/nuxt/nuxt/pull/35689)) - **ui-templates:** Commit generated ui template files ([#&#8203;35770](https://github.com/nuxt/nuxt/pull/35770)) ##### 🏡 Chore - Add extension 🤦 ([d595fb3d4](https://github.com/nuxt/nuxt/commit/d595fb3d4)) - Move to pnpm catalogs ([#&#8203;35748](https://github.com/nuxt/nuxt/pull/35748)) - Update knip config, resolve issues, and run in ci ([#&#8203;35742](https://github.com/nuxt/nuxt/pull/35742)) - Ignore `@nuxt/telemetry` in knip ([9824d4f10](https://github.com/nuxt/nuxt/commit/9824d4f10)) - **ui-templates:** Pass config file path to unocss ([34e7a810d](https://github.com/nuxt/nuxt/commit/34e7a810d)) - Allow regenerating lockfile in release script ([c31389df3](https://github.com/nuxt/nuxt/commit/c31389df3)) - **nuxt:** Bump `@nuxt/devtools` to v3.3.1 ([#&#8203;35815](https://github.com/nuxt/nuxt/pull/35815)) - Ensure types are setup before unit tests ([784d8f700](https://github.com/nuxt/nuxt/commit/784d8f700)) - Simplify knip configuration ([#&#8203;35827](https://github.com/nuxt/nuxt/pull/35827)) ##### ✅ Tests - Reproduce duplicate CSS in shared chunks ([#&#8203;35649](https://github.com/nuxt/nuxt/pull/35649)) - Prepare fixtures automatically before fixture and e2e runs ([e8b3e6411](https://github.com/nuxt/nuxt/commit/e8b3e6411)) - Improve and refactor basic fixture ([#&#8203;35687](https://github.com/nuxt/nuxt/pull/35687)) - Slim down client-only, chunk-error and axis-independent suites ([#&#8203;35706](https://github.com/nuxt/nuxt/pull/35706)) - Do not run type checking when benchmarking nuxt build ([6355f3bc9](https://github.com/nuxt/nuxt/commit/6355f3bc9)) - **kit:** Scope loadNuxt temp dir so it doesn't delete sibling fixtures ([37301dd51](https://github.com/nuxt/nuxt/commit/37301dd51)) - Guard against transient undefined `_route` in gotoPath ([ca92d082b](https://github.com/nuxt/nuxt/commit/ca92d082b)) - Retry fixture prepare on transient ENOTEMPTY ([3a6b59f96](https://github.com/nuxt/nuxt/commit/3a6b59f96)) - Raise route-HMR polling timeout to reduce e2e flakiness ([01dc27b7e](https://github.com/nuxt/nuxt/commit/01dc27b7e)) - Update bundle size snapshot ([30d24817c](https://github.com/nuxt/nuxt/commit/30d24817c)) ##### 🤖 CI - Rebalance shards and drop non-vite windows fixtures ([#&#8203;35700](https://github.com/nuxt/nuxt/pull/35700)) - Warm windows dependency cache on main ([#&#8203;35730](https://github.com/nuxt/nuxt/pull/35730)) - Run knip in default and production modes ([#&#8203;35745](https://github.com/nuxt/nuxt/pull/35745)) - Run knip on pull requests ([d620aa972](https://github.com/nuxt/nuxt/commit/d620aa972)) - Prepare tests ([c7bf7f738](https://github.com/nuxt/nuxt/commit/c7bf7f738)) - Also prepare tests in `knip` job ([58f68bd64](https://github.com/nuxt/nuxt/commit/58f68bd64)) - Check internal docs links on pull requests and all links weekly ([#&#8203;35767](https://github.com/nuxt/nuxt/pull/35767)) ##### ❤️ Contributors - Daniel Roe ([@&#8203;danielroe](https://github.com/danielroe)) - Lars Kappert ([@&#8203;webpro](https://github.com/webpro)) - Matej Černý ([@&#8203;cernymatej](https://github.com/cernymatej)) - Anthony Fu ([@&#8203;antfu](https://github.com/antfu)) - Harlan Wilton ([@&#8203;harlan-zw](https://github.com/harlan-zw)) - Florian Heuberger ([@&#8203;Flo0806](https://github.com/Flo0806)) - Anoesj Sadraee ([@&#8203;Anoesj](https://github.com/Anoesj)) - Ryota Watanabe ([@&#8203;wattanx](https://github.com/wattanx)) - Alexander Lichter ([@&#8203;TheAlexLichter](https://github.com/TheAlexLichter)) - Nestor Vera ([@&#8203;hacknug](https://github.com/hacknug)) - Mateleo ([@&#8203;Mateleo](https://github.com/Mateleo)) - Kevin Deng ([@&#8203;sxzz](https://github.com/sxzz)) - Robin ([@&#8203;OrbisK](https://github.com/OrbisK)) - Bochkarev Ivan ([@&#8203;Ibochkarev](https://github.com/Ibochkarev)) - Quentin Macq ([@&#8203;quentinmcq](https://github.com/quentinmcq)) - Julien Huang ([@&#8203;huang-julien](https://github.com/huang-julien)) - Max ([@&#8203;onmax](https://github.com/onmax)) - Luke Nelson ([@&#8203;luc122c](https://github.com/luc122c)) - Darlan José Batista do Prado ([@&#8203;DarlanPrado](https://github.com/DarlanPrado)) - kealan ([@&#8203;KealanAU](https://github.com/KealanAU)) - Sushant ([@&#8203;sushantguri](https://github.com/sushantguri)) - raminjafary ([@&#8203;raminjafary](https://github.com/raminjafary)) - Aubakirov Asker ([@&#8203;Askerka00](https://github.com/Askerka00)) - lutejka ([@&#8203;lutejka](https://github.com/lutejka)) - Amulet Iris ([@&#8203;KazariAI](https://github.com/KazariAI)) - bdbch ([@&#8203;bdbch](https://github.com/bdbch)) - Elecmonkey ([@&#8203;elecmonkey](https://github.com/elecmonkey)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - Every minute (`* * * * *`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->

spacebot added 1 commit 2026-07-27 14:19:11 +02:00

Update nuxt framework to ^4.5.1 0b30a4a2e3

spacebot scheduled this pull request to auto merge when all checks succeed 2026-07-27 14:19:12 +02:00

spacebot commented 2026-07-27 14:19:12 +02:00

Author

Owner

Copy link

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: website@undefined
npm error Found: @babel/core@7.29.7
npm error node_modules/@babel/core
npm error   peer @babel/core@"^7.0.0" from @babel/helper-create-class-features-plugin@7.29.7
npm error   node_modules/@babel/helper-create-class-features-plugin
npm error     @babel/helper-create-class-features-plugin@"^7.29.7" from @babel/plugin-transform-typescript@7.29.7
npm error     node_modules/@babel/plugin-transform-typescript
npm error       @babel/plugin-transform-typescript@"^7.29.7" from @vitejs/plugin-vue-jsx@5.1.6
npm error       node_modules/@vitejs/plugin-vue-jsx
npm error   peer @babel/core@"^7.0.0" from @babel/helper-module-transforms@7.29.7
npm error   node_modules/@babel/helper-module-transforms
npm error     @babel/helper-module-transforms@"^7.29.7" from @babel/core@7.29.7
npm error   7 more (@babel/helper-replace-supers, ...)
npm error
npm error Could not resolve dependency:
npm error @nuxt/vite-builder@"^4.5.1" from the root project
npm error
npm error Conflicting peer dependency: @babel/core@8.0.1
npm error node_modules/@babel/core
npm error   peer @babel/core@"^8.0.0" from @babel/plugin-proposal-decorators@8.0.2
npm error   node_modules/@babel/plugin-proposal-decorators
npm error     peerOptional @babel/plugin-proposal-decorators@"^7.25.0 || ^8.0.0" from @nuxt/vite-builder@4.5.1
npm error     node_modules/@nuxt/vite-builder
npm error       @nuxt/vite-builder@"^4.5.1" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /tmp/renovate/cache/others/npm/_logs/2026-07-27T12_18_59_629Z-eresolve-report.txt
npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2026-07-27T12_18_59_629Z-debug-0.log

### ⚠️ Artifact update problem Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens: - any of the package files in this branch needs updating, or - the branch becomes conflicted, or - you click the rebase/retry checkbox if found above, or - you rename this PR's title to start with "rebase!" to trigger it manually The artifact failure details are included below: ##### File name: package-lock.json ``` npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options. npm error code ERESOLVE npm error ERESOLVE could not resolve npm error npm error While resolving: website@undefined npm error Found: @babel/core@7.29.7 npm error node_modules/@babel/core npm error peer @babel/core@"^7.0.0" from @babel/helper-create-class-features-plugin@7.29.7 npm error node_modules/@babel/helper-create-class-features-plugin npm error @babel/helper-create-class-features-plugin@"^7.29.7" from @babel/plugin-transform-typescript@7.29.7 npm error node_modules/@babel/plugin-transform-typescript npm error @babel/plugin-transform-typescript@"^7.29.7" from @vitejs/plugin-vue-jsx@5.1.6 npm error node_modules/@vitejs/plugin-vue-jsx npm error peer @babel/core@"^7.0.0" from @babel/helper-module-transforms@7.29.7 npm error node_modules/@babel/helper-module-transforms npm error @babel/helper-module-transforms@"^7.29.7" from @babel/core@7.29.7 npm error 7 more (@babel/helper-replace-supers, ...) npm error npm error Could not resolve dependency: npm error @nuxt/vite-builder@"^4.5.1" from the root project npm error npm error Conflicting peer dependency: @babel/core@8.0.1 npm error node_modules/@babel/core npm error peer @babel/core@"^8.0.0" from @babel/plugin-proposal-decorators@8.0.2 npm error node_modules/@babel/plugin-proposal-decorators npm error peerOptional @babel/plugin-proposal-decorators@"^7.25.0 || ^8.0.0" from @nuxt/vite-builder@4.5.1 npm error node_modules/@nuxt/vite-builder npm error @nuxt/vite-builder@"^4.5.1" from the root project npm error npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution. npm error npm error npm error For a full report see: npm error /tmp/renovate/cache/others/npm/_logs/2026-07-27T12_18_59_629Z-eresolve-report.txt npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2026-07-27T12_18_59_629Z-debug-0.log ```

spacebot merged commit 9b6effe659 into master 2026-07-27 14:19:37 +02:00

spacebot deleted branch renovate/nuxt 2026-07-27 14:19:38 +02:00

spacebot referenced this pull request from a commit 2026-07-27 14:19:39 +02:00

Merge pull request 'Update nuxt framework to ^4.5.1' (#39) from renovate/nuxt into master

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

  

bug

Something is not working

  

duplicate

This issue or pull request already exists

  

enhancement

Expansion on already existing feature

  

feature request

New feature

  

invalid

Something is wrong

  

question

More information is needed

  

wontfix

This won't be fixed

No labels

bug

duplicate

enhancement

feature request

invalid

question

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

spacebar/website!39

No description provided.