Skip to content

chore(deps): bump the npm group across 1 directory with 7 updates - #42

Open
dependabot[bot] wants to merge 1 commit into
1.xfrom
dependabot/npm_and_yarn/docs/npm-bcb66dfa05
Open

chore(deps): bump the npm group across 1 directory with 7 updates#42
dependabot[bot] wants to merge 1 commit into
1.xfrom
dependabot/npm_and_yarn/docs/npm-bcb66dfa05

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm group with 7 updates in the /docs directory:

Package From To
@nuxt/image 1.11.0 2.1.0
@nuxt/scripts 0.12.2 1.3.12
@nuxt/ui 4.6.0 4.11.3
@unhead/vue 2.1.12 3.4.2
better-sqlite3 12.8.0 13.0.3
nuxt 4.4.2 4.6.0
typescript 5.9.3 7.0.2

Updates @nuxt/image from 1.11.0 to 2.1.0

Release notes

Sourced from @​nuxt/image's releases.

v2.1.0

v2.1.0 is the next minor release.

👀 Highlights

Nuxt Image 2.1 ships eight new image providers, a major upgrade to our image processing engine, and a bunch of fixes across existing providers.

🖼️ IPX v4

Under the hood, we've upgraded to IPX v4 which brings significant improvements:

  • Smaller bundles: IPX is now ESM-only with reduced dependency size
  • Stronger SVG security: SVG sanitization now always runs, regardless of optimization settings. This fixes a potential XSS vector where svgo: false would return untouched SVGs. The sanitizer now removes SMIL attribute injection, foreign content (<foreignObject>, <iframe>, etc.), and unsafe URIs across all elements
  • New image modifiers: opacity, brightness, saturation, hue, lightness, autoorient, dilate, erode, clahe, and linear
  • Better error messages: Invalid modifier arguments now return 400 errors with clear messages instead of cryptic 500s
  • Custom URL parsing: IPX now supports custom URL formats via the parseURL option

🌐 New Providers

This release adds support for eight new image optimization services:

🔧 Provider Improvements

  • Directus: Added support for sharp transforms and a key modifier for named presets (#2207)
  • Sanity: Support for absolute URLs with automatic project/dataset extraction (#2274), and a configurable baseURL for custom CDN setups (#2273)
  • AWS Amplify & Vercel: minimumCacheTTL is now configurable (#2278)

📦 Type Exports

NuxtImgProps and NuxtPictureProps are now exported from the runtime, making it easier to type your own components that wrap <NuxtImg> or <NuxtPicture> (#2115).

import type { NuxtImgProps, NuxtPictureProps } from '#image'

👉 Changelog

compare changes

🚀 Enhancements

... (truncated)

Commits
  • 05758b6 v2.1.0
  • 97d3758 chore: run module prepare in prepack
  • e529f37 ci: add workflow to comment on issues resolved in the latest release
  • 64b96c1 feat(deps): migrate to ipx v4 (#2094)
  • 100bed3 chore(deps): update nuxt framework to ^4.5.1 (#2282)
  • a670c04 chore(deps): update all non-major dependencies (#2267)
  • d875d84 chore(deps): update dependency @​noble/hashes to v2 (#2290)
  • a1500e6 ci: improve workflows (#2288)
  • 6f59ab1 docs(sanity): document baseURL option
  • 137ee63 fix(flyimg): encode all # characters in color values
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​nuxt/image since your current version.


Updates @nuxt/scripts from 0.12.2 to 1.3.12

Release notes

Sourced from @​nuxt/scripts's releases.

v1.3.12

   🐞 Bug Fixes

    View changes on GitHub

v1.3.11

   🐞 Bug Fixes

    View changes on GitHub

v1.3.10

   🐞 Bug Fixes

    View changes on GitHub

v1.3.9

   🐞 Bug Fixes

    View changes on GitHub

v1.3.8

   🐞 Bug Fixes

    View changes on GitHub

v1.3.7

   🐞 Bug Fixes

    View changes on GitHub

v1.3.6

   🐞 Bug Fixes

    View changes on GitHub

... (truncated)

Commits
  • ca444f4 chore: release v1.3.12
  • ca3b0aa fix(proxy): backport GA4 client IP forwarding to 1.x (#941)
  • 201c4fd chore: release v1.3.11
  • 02cf7cf fix(1.x): preserve visitor loaders and pixel commands (#938)
  • 63c9bd8 chore: release v1.3.10
  • bdd333d fix: backport recent v2 beta fixes to 1.x (#932)
  • ca2c772 chore: release v1.3.9
  • dbab51a fix: backport upstream fixes to 1.x (#897)
  • 7947ae9 chore: release v1.3.8
  • be0ce7b fix(registry): don't declare the global Window via extends (1.x backport)...
  • Additional commits viewable in compare view

Updates @nuxt/ui from 4.6.0 to 4.11.3

Release notes

Sourced from @​nuxt/ui's releases.

v4.11.3

🐛 Bug Fixes

  • App: apply the dir prop to the provided locale (#6767) (93c40df)
  • ChatPrompt: add method="post" to prevent input leaking via GET before hydration (#7078) (57f7699)
  • CheckboxGroup/RadioGroup: lift a hovered table item above its neighbors (#7073) (926097a)
  • ContentSearch/DashboardSearch: use translated search label as dialog title (#7062) (3c55cf2)
  • DashboardSidebar/Header: use translated toggle label as menu dialog title (#7082) (51e98da)
  • EditorToolbar: use tooltip text as aria-label on icon-only buttons (#7009) (7f0250e)
  • Form: include nested forms in parent dirty state (#6545) (8977394)
  • Form: keep dirty state and validation in sync with input (#7033) (56b1156)
  • Form: merge unnamed nested forms into a parent without schema (#7034) (384fdc1)
  • module: detect kebab-case components in Pug templates (#7045) (42ba532)
  • module: generate classes prefixed by usePrefix (#7074) (77c92de)
  • module: use @custom-variant for light and dark variants (#7023) (584016b)
  • ProseA: only round corners on focus (3da141c)
  • Select/SelectMenu: keep focus moved on selection (#7083) (6138bf0)
  • Table: keep footer separator above pinned columns (#7047) (e8756fd)
  • theme: drop double quotes from class strings (#7039) (5a04c6c)
  • useFilter: keep labels and separators in place while sorting (#6995) (032a152)
  • useOverlay: resolve every pending promise when reopened (#7057) (2f50c2e)
  • utils: prevent prototype pollution in set and setAtPath (#7077) (4bfd115)

💚 Contributors

Full Changelog: nuxt/ui@v4.11.2...v4.11.3

v4.11.2

🐛 Bug Fixes

  • components: allow partial ui overrides on items (#6979) (c617565)
  • components: fall back to md for custom sizes in virtualizer (#6917) (9076ca2)
  • DashboardNavbar: render title only when defined (#6958) (7c4c6e3)
  • FieldGroup: add defaultVariants in theme (#6938) (0317d50)
  • Form: clear only the targeted field inside a nested form (#6923) (2b29c33)
  • Input/Textarea: keep 0 with nullable and optional modifiers (#6871) (6d6737a)
  • InputDate/InputTime: emit focus and blur when focus enters or leaves the field (#6855) (8e4546e)
  • InputMenu: ignore multiple in autocomplete mode (#6971) (27a3ef7)
  • InputMenu: prevent tags input from adding the search term on enter (#6776) (b3d4342)
  • InputMenu: round corners inside a FieldGroup in multiple mode (#6968) (619c732)
  • Link: propagate click handler errors to Vue error handling (#6993) (074152b)
  • PinInput: emit blur whenever focus leaves the group (#6858) (22efd35)

... (truncated)

Changelog

Sourced from @​nuxt/ui's changelog.

4.11.3 (2026-10-01)

Bug Fixes

  • App: apply the dir prop to the provided locale (#6767) (93c40df)
  • ChatPrompt: add method="post" to prevent input leaking via GET before hydration (#7078) (57f7699)
  • CheckboxGroup/RadioGroup: lift a hovered table item above its neighbors (#7073) (926097a)
  • ContentSearch/DashboardSearch: use translated search label as dialog title (#7062) (3c55cf2)
  • DashboardSidebar/Header: use translated toggle label as menu dialog title (#7082) (51e98da)
  • EditorToolbar: use tooltip text as aria-label on icon-only buttons (#7009) (7f0250e)
  • Form: include nested forms in parent dirty state (#6545) (8977394)
  • Form: keep dirty state and validation in sync with input (#7033) (56b1156)
  • Form: merge unnamed nested forms into a parent without schema (#7034) (384fdc1)
  • module: detect kebab-case components in Pug templates (#7045) (42ba532)
  • module: generate classes prefixed by usePrefix (#7074) (77c92de)
  • module: use @custom-variant for light and dark variants (#7023) (584016b)
  • ProseA: only round corners on focus (3da141c)
  • Select/SelectMenu: keep focus moved on selection (#7083) (6138bf0)
  • Table: keep footer separator above pinned columns (#7047) (e8756fd)
  • theme: drop double quotes from class strings (#7039) (5a04c6c)
  • useFilter: keep labels and separators in place while sorting (#6995) (032a152)
  • useOverlay: resolve every pending promise when reopened (#7057) (2f50c2e)
  • utils: prevent prototype pollution in set and setAtPath (#7077) (4bfd115)

4.11.2 (2026-09-22)

Bug Fixes

  • components: allow partial ui overrides on items (#6979) (c617565)
  • components: fall back to md for custom sizes in virtualizer (#6917) (9076ca2)
  • DashboardNavbar: render title only when defined (#6958) (7c4c6e3)
  • FieldGroup: add defaultVariants in theme (#6938) (0317d50)
  • Form: clear only the targeted field inside a nested form (#6923) (2b29c33)
  • Input/Textarea: keep 0 with nullable and optional modifiers (#6871) (6d6737a)
  • InputDate/InputTime: emit focus and blur when focus enters or leaves the field (#6855) (8e4546e)
  • InputMenu: ignore multiple in autocomplete mode (#6971) (27a3ef7)
  • InputMenu: prevent tags input from adding the search term on enter (#6776) (b3d4342)
  • InputMenu: round corners inside a FieldGroup in multiple mode (#6968) (619c732)
  • Link: propagate click handler errors to Vue error handling (#6993) (074152b)
  • PinInput: emit blur whenever focus leaves the group (#6858) (22efd35)
  • SelectMenu/InputMenu: ignore clear button when disabled (#6986) (9ea37c1)
  • SelectMenu: open menu on arrow keys (#6933) (cf9e838)
  • SelectMenu: remove the inherited "Show popup" aria-label (aab2d10), closes #6962
  • Table: emit aria-sort on sortable th elements (#6879) (74ad017)
  • Table: inset row focus outline (#6973) (a96823d)
  • Table: make rows with a select event keyboard accessible (#6838) (187c34f)
  • Toaster: prevent onClick from being called twice (#6980) (796f79d)
  • vue: resolve explicit component imports to their Vue overrides (#6999) (27a5fe4)

4.11.1 (2026-09-07)

... (truncated)

Commits
  • 6b67381 chore(release): v4.11.3
  • 6138bf0 fix(Select/SelectMenu): keep focus moved on selection (#7083)
  • 86321bf chore(github): drop headings from bot comments
  • d6437a8 chore(github): link issue reproductions to pr playground (#7085)
  • 51e98da fix(DashboardSidebar/Header): use translated toggle label as menu dialog titl...
  • 52056f4 docs: keep colour swatches in dark mode code blocks (#7080)
  • 21616a8 docs: drop unnecessary mentions (#7079)
  • 56b1156 fix(Form): keep dirty state and validation in sync with input (#7033)
  • 384fdc1 fix(Form): merge unnamed nested forms into a parent without schema (#7034)
  • 42ba532 fix(module): detect kebab-case components in Pug templates (#7045)
  • Additional commits viewable in compare view

Updates @unhead/vue from 2.1.12 to 3.4.2

Release notes

Sourced from @​unhead/vue's releases.

v3.4.2

   🐞 Bug Fixes

    View changes on GitHub

v3.4.1

   🐞 Bug Fixes

    View changes on GitHub

v3.4.0

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits
  • 7f7b8d9 chore: release v3.4.2
  • 6f0f68d fix(stream): preserve body tags and request script nonces (#981)
  • d706e59 chore: release v3.4.1
  • 32eca7a chore(deps): update dependencies and adapt Vitest benchmarks (#987)
  • 237d7f3 fix(vite,stream): support manifest-mode transformIndexHtml() (#970)
  • 1132b9f chore: release v3.4.0
  • 18a55c1 feat(validate): flag streamed head tags that bots never see (#947)
  • d253b54 feat(stream): render Streamed Body Tags before body close (#960)
  • 791f03d fix(stream): stop wrapStream dropping late head entries (#954)
  • e5f5c38 fix(stream): module mode lost every streamed head tag (#950)
  • Additional commits viewable in compare view

Updates better-sqlite3 from 12.8.0 to 13.0.3

Release notes

Sourced from better-sqlite3's releases.

v13.0.3

What's Changed

Full Changelog: WiseLibs/better-sqlite3@v13.0.2...v13.0.3

v13.0.2

What's Changed

New Contributors

Full Changelog: WiseLibs/better-sqlite3@v13.0.1...v13.0.2

v13.0.1

Full Changelog: WiseLibs/better-sqlite3@v13.0.0...v13.0.1

Fixed a regression in parameter binding where it would be overly strict and reject plain objects from other realms (e.g., in jest tests).

v13.0.0

Version 13.0.0 marks a major milestone, as it's the first version of better-sqlite3 to run on the N-API. This means prebuilt binaries should theoretically work across different versions of Node.js and Electron, and perhaps even other runtimes like Bun. As a result, we've removed the deprecated prebuild-install dependency, and now prebuilt binaries are published directly with the better-sqlite3 code itself. If your platform/architecture doesn't have a prebuilt binary, it should compile during install as before.

What's Changed

New Contributors

Full Changelog: WiseLibs/better-sqlite3@v12.12.0...v13.0.0

v12.12.0

What's Changed

[!WARNING]

BREAKING: Starting with Electron v43, binary assets will require glibc 2.41 or higher on Linux hosts.

... (truncated)

Commits

Updates nuxt from 4.4.2 to 4.6.0

Release notes

Sourced from nuxt's releases.

v4.6.0

v4.6.0 is the next minor release.

📣 Some news

🖥️ Nuxt CLI v4

Alongside the release of Nuxt v4.6, today also brings a new major release of the Nuxt CLI: @nuxt/cli v4. It ships as a dependency of nuxt, so you'll get it automatically when you upgrade.

Most of what's new is in nuxt dev:

  • an interactive terminal UI, showing URLs, startup progress and keyboard shortcuts, with panels to dive into error logs, routes, network requests and more
  • the dev server gives you more info, such as why it reloaded or restarted, which nuxt.config keys changed, where the time went during a slow start or build, and how long each module took to set up
  • a CLI-level error channel rendered with my-bad (see below), powering things like automatically reloading when a syntax error in nuxt.config.ts is fixed
  • a lock file in .nuxt/, which lets a second nuxt dev (say, one started by an agent) take over or defer to the one you started, and powers new nuxt curl and nuxt task commands that talk to the running server

There's also a new nuxt docs "<query>" search, and nuxt preview --takeover can replace a running preview server. And in general nuxt/cli is a lot smaller and starts a lot faster:

v3.37 v4.0
@nuxt/cli install size 13.1 MB 3.5 MB -73%
@nuxt/cli dependencies 70 31 -56%
nuxt dev: first paint 330 ms 50 ms 6.6x faster
nuxt dev: port bound 338 ms 104 ms 3.2x faster
nuxt dev: memory at rest (Linux) 630 MB 440 MB -30%

Although this is a major version, none of the changes should be breaking for Nuxt v4 users: we require Node.js v22.21+, v24.11+ or v26+, we drop nuxt init and only support npm create nuxt@latest, and Nuxt 2 and @nuxt/bridge are no longer supported.

👉 Check out the full Nuxt CLI v4 release notes for everything that's changed.

💡 A server-agnostic Nuxt

The biggest thing about this release is our move towards making Nuxt server-agnostic.

I feel that freedom of choice is very much a fundamental value of the web, and one that unites the whole Nuxt team.

You can use pages/ (with vue-router) or not. You can use Vite, webpack or Rspack to bundle your code. You can pick from dozens of providers to deploy to, pick any image or font provider, choose any database adapter. In every case, the framework is the same.

The server side was different. #app composables imported h3 types, server code imported from h3 and nitropack, and every module that touched the server was tied to whichever major version of those packages Nuxt happened to depend on.

This has become particularly clear as we have been upgrading to new majors of h3 and nitro, which ship breaking changes with a cascading effect throughout the whole ecosystem.

👉 This release changes that.

Alongside explicitly defining our public API in nuxt/kit (which now does not refer to external packages), Nuxt now specifies our own types for the request event, route rules and typed $fetch, and we expose an import surface (nuxt/server) for the server utilities that will be needed by most apps.

This is the culmination of work we started almost a year ago, making it possible to use any server builder with Nuxt, not just Nitro (#33462).

... (truncated)

Commits
  • 49da92f v4.6.0
  • 052d82e chore(deps): update all non-major dependencies (4.x) (#36463)
  • df46569 fix(nuxt): resolve anchor hrefs through the router (#36459)
  • a66221f fix(nuxt): leave a newer async data entry alone when an old one is taken off ...
  • f90115c fix(nuxt): await async layouts before navigation (#36454)
  • b64d878 fix(nuxt,vite): show compile error overlay on client-only pages (#36444)
  • 62ebbd9 fix(nuxt): keep CookieOptions compatible with cookie serialize options
  • a2b9145 fix(kit,nuxt): preserve types when building into a relocated build dir (#36418)
  • c4f1e97 feat(nuxt): add addon support to createUseFetch and createUseAsyncData (#...
  • e003cd4 feat(nuxt,nitro,schema): add useServerHooks to nuxt/server
  • Additional commits viewable in compare view

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0.1 RC

For release notes, check out the release announcement blog post.

Downloads are available on:

TypeScript 6.0 Beta

For release notes, check out the ...

Description has been truncated

@dependabot @github

dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
chore(deps): bump the npm group across 1 directory with 7 updates
d928fc6 
Bumps the npm group with 7 updates in the /docs directory:

| Package | From | To |
| --- | --- | --- |
| [@nuxt/image](https://github.com/nuxt/image) | `1.11.0` | `2.1.0` |
| [@nuxt/scripts](https://github.com/nuxt/scripts/tree/HEAD/packages/script) | `0.12.2` | `1.3.12` |
| [@nuxt/ui](https://github.com/nuxt/ui) | `4.6.0` | `4.11.3` |
| [@unhead/vue](https://github.com/unjs/unhead/tree/HEAD/packages/vue) | `2.1.12` | `3.4.2` |
| [better-sqlite3](https://github.com/WiseLibs/better-sqlite3) | `12.8.0` | `13.0.3` |
| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.4.2` | `4.6.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` |



Updates `@nuxt/image` from 1.11.0 to 2.1.0
- [Release notes](https://github.com/nuxt/image/releases)
- [Changelog](https://github.com/nuxt/image/blob/main/CHANGELOG.md)
- [Commits](nuxt/image@v1.11.0...v2.1.0)

Updates `@nuxt/scripts` from 0.12.2 to 1.3.12
- [Release notes](https://github.com/nuxt/scripts/releases)
- [Changelog](https://github.com/nuxt/scripts/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nuxt/scripts/commits/v1.3.12/packages/script)

Updates `@nuxt/ui` from 4.6.0 to 4.11.3
- [Release notes](https://github.com/nuxt/ui/releases)
- [Changelog](https://github.com/nuxt/ui/blob/v4/CHANGELOG.md)
- [Commits](nuxt/ui@v4.6.0...v4.11.3)

Updates `@unhead/vue` from 2.1.12 to 3.4.2
- [Release notes](https://github.com/unjs/unhead/releases)
- [Commits](https://github.com/unjs/unhead/commits/v3.4.2/packages/vue)

Updates `better-sqlite3` from 12.8.0 to 13.0.3
- [Release notes](https://github.com/WiseLibs/better-sqlite3/releases)
- [Commits](WiseLibs/better-sqlite3@v12.8.0...v13.0.3)

Updates `nuxt` from 4.4.2 to 4.6.0
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v4.6.0/packages/nuxt)

Updates `typescript` from 5.9.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v7.0.2)

---
updated-dependencies:
- dependency-name: "@nuxt/image"
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@nuxt/scripts"
  dependency-version: 1.3.11
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@nuxt/ui"
  dependency-version: 4.11.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@unhead/vue"
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: better-sqlite3
  dependency-version: 13.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: nuxt
  dependency-version: 4.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/docs/npm-bcb66dfa05 branch from d6cce68 to d928fc6 Compare October 15, 2026 15:36

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants