Skip to content

chore(deps): bump postcss and nuxt - #41

Closed
dependabot[bot] wants to merge 1 commit into
android-tv-dpad-navigationfrom
dependabot/npm_and_yarn/multi-2dfa8611d0
Closed

chore(deps): bump postcss and nuxt#41
dependabot[bot] wants to merge 1 commit into
android-tv-dpad-navigationfrom
dependabot/npm_and_yarn/multi-2dfa8611d0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown

Bumps postcss and nuxt. These dependencies needed to be updated together.
Updates postcss from 8.5.3 to 8.5.22

Release notes

Sourced from postcss's releases.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

... (truncated)

Commits
  • a3e48c4 Release 8.5.22 version
  • f49d691 Fix custom property losing its semicolon before a comment (#2117)
  • 28e0daf Release 8.5.21 version
  • 3d2b4e4 Update dependencies
  • d197327 Fix childless at-rule losing its semicolon before a comment (#2115)
  • 0e360b7 Fix mismatched JSDoc comments on Position (#2114)
  • c4ac725 Release 8.5.20 version
  • c30586d Fix missing space when AtRule#params is set after parsing (#2113)
  • 5bfc3b9 Update dependencies
  • 24733fd Move back to latest 11 pnpm
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.


Updates nuxt from 2.18.1 to 4.5.0

Release notes

Sourced from nuxt's releases.

v4.5.0

4.5.0 is the next minor release.

📣 Some News

Preparing for Nuxt 5

A good chunk of this release is (hopefully) invisible plumbing for Nuxt 5. We've moved onto the latest major versions of several core dependencies (unhead v3, unctx v3, and Vite 8), switched the framework's own build over to tsdown, and introduced a stable nuxt/* build output contract with dev exports so that type-checking in the Nuxt monorepo works without a build step (#35463, #35605).

Much of this is working to shrink the gap between v4 and v5 internally, so that the migration will be as boring as possible.

[!TIP] If you want to test some of the breaking changes of Nuxt v5, you can already opt in with future.compatibilityVersion: 5. Keep an eye on the Upgrade Guide for details as they land.

With the release of Nuxt v4.5, our focus as a team will turn to stabilising Nuxt v5 and creating compatibility utilities to make the upgrade as smooth as possible.

Nuxt 3 End-of-Life

Nuxt 3 reaches end-of-life on July 31, 2026, so this is one of the last few 3.x releases we'll ship. If you're still on v3, now is a great time to move across. Most people told us the v3 to v4 upgrade was smooth, and we've kept the upgrade guide up to date.

Alongside v4.5.0 we're publishing a maintenance patch for the 3.x line (v3.21.9) with the compatible bug fixes and smaller improvements from this release backported. The headline items here (Vite 8, Rspack 2, unhead v3, unctx v3) are major upgrades and stay v4-only, so 3.x remains stable as it approaches end-of-life.

👀 Highlights

Nuxt 4.5 is a big one. This release ships three major upgrades to the build layer (Vite 8, Rspack 2, and a brand new Rsbuild-powered pipeline for the Rspack builder), an experimental SSR streaming mode, a handful of new composables and conventions, and a lot of groundwork that brings us closer to Nuxt 5.

There's a lot here, so grab a coffee. ☕️

⚡️ Vite 8

Nuxt now runs on Vite 8 (#34256). This brings faster cold starts, the latest Rolldown-powered internals, and many upstream improvements from the Vite team.

For most apps this is a transparent upgrade. If you have custom Vite plugins or config, it's worth skimming the Vite migration guide to check for anything that affects you.

[!WARNING] Vite 8 is a major version bump. If you depend on Vite directly (custom plugins, vite.config tweaks, or ecosystem plugins that pin a Vite version), make sure those are compatible before upgrading in production.

🦀 Rspack 2 and Rsbuild

If you use the Rspack builder, this release is a substantial upgrade. We've moved to Rspack 2 (#34929), which is faster and lighter, and rebuilt the builder on top of @rsbuild/core (#35489).

The public surface stays the same. You still opt in with builder: 'rspack' and the existing rspack:* hooks continue to work:

// nuxt.config.ts
export default defineNuxtConfig({
  builder: 'rspack',
})

... (truncated)

Commits
  • 5761457 v4.5.0
  • b5f9830 feat(nuxt): warn when parent page lacks NuxtPage (#35639)
  • 76cb01d fix(nuxt): update client URL to match SSR on fatal middleware error (#35637)
  • 6d94a14 fix(nuxt): apply latest navigation on concurrent navigateTo in built-in rou...
  • d566626 feat(nuxt): require keyed function 'source' with compatibilityVersion 5
  • c699cc0 fix(nuxt): drop extension on diagnostics import
  • 881e5ef feat: error code system (#35429)
  • 379c22f feat(nuxt): support enabled option in useFetch (#35627)
  • 353164b fix(nuxt): re-add computeIslandHash for backwards compatibility
  • 881d5c4 docs: clarify usage of await with useFetch (#33745)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nuxt since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026
@github-actions github-actions Bot added the needs-manual-review Held by dependabot-auto-merge: non-security major bump label Jul 24, 2026
@github-actions

Copy link
Copy Markdown

🚧 Non-security major version bump — auto-merge intentionally skipped. Review and merge manually.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-2dfa8611d0 branch from f8495c2 to 761359a Compare July 24, 2026 08:03
@github-actions

Copy link
Copy Markdown

🚧 Non-security major version bump — auto-merge intentionally skipped. Review and merge manually.

@dependabot dependabot Bot changed the title Bump postcss and nuxt chore(deps): bump postcss and nuxt Jul 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-2dfa8611d0 branch from 761359a to 9bda9bb Compare July 24, 2026 08:08
@github-actions

Copy link
Copy Markdown

🚧 Non-security major version bump — auto-merge intentionally skipped. Review and merge manually.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-2dfa8611d0 branch from 9bda9bb to 616c55d Compare July 24, 2026 08:10
@github-actions

Copy link
Copy Markdown

🚧 Non-security major version bump — auto-merge intentionally skipped. Review and merge manually.

Bumps [postcss](https://github.com/postcss/postcss) and [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt). These dependencies needed to be updated together.

Updates `postcss` from 8.5.3 to 8.5.22
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.3...8.5.22)

Updates `nuxt` from 2.18.1 to 4.5.0
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v4.5.0/packages/nuxt)

---
updated-dependencies:
- dependency-name: nuxt
  dependency-version: 4.5.0
  dependency-type: direct:production
- dependency-name: postcss
  dependency-version: 8.5.22
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-2dfa8611d0 branch from 616c55d to 6f0ccf5 Compare July 24, 2026 08:17
@github-actions

Copy link
Copy Markdown

🚧 Non-security major version bump — auto-merge intentionally skipped. Review and merge manually.

@dependabot @github

dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown
Author

Superseded by #60.

@dependabot dependabot Bot closed this Jul 30, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-2dfa8611d0 branch July 30, 2026 02:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code needs-manual-review Held by dependabot-auto-merge: non-security major bump

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants