Skip to content

chore(deps): bump postcss and nuxt - #60

Open
dependabot[bot] wants to merge 1 commit into
android-tv-dpad-navigationfrom
dependabot/npm_and_yarn/multi-3cb4f969d9
Open

chore(deps): bump postcss and nuxt#60
dependabot[bot] wants to merge 1 commit into
android-tv-dpad-navigationfrom
dependabot/npm_and_yarn/multi-3cb4f969d9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown

Bumps postcss and nuxt. These dependencies needed to be updated together.
Updates postcss from 8.5.3 to 8.5.25

Release notes

Sourced from postcss's releases.

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

8.5.15

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.


Updates nuxt from 2.18.1 to 4.5.2

Release notes

Sourced from nuxt's releases.

v4.5.2

4.5.2 is the next patch release.

👉 Changelog

compare changes

🔥 Performance

  • nuxt,kit: Skip rewriting unchanged generated files (#35902)
  • kit,nuxt: Use lazy imports to improve parsing speed (#35901)
  • vite: Skip html entry probes in bare-import resolver (#35907)
  • nuxt: Reuse app and component scans for unchanged structures (#35912)

🩹 Fixes

  • vite: Resolve client manifest path from resolved config (#35883)
  • nuxt: Use client-side navigation for links inside islands (#35806)
  • nuxt: Generate types for route params defined with definePageMeta (#35857)
  • nuxt: Serialize island payloads for components with underscores in keys (#35807)
  • nitro: Dedupe island renders when prerendering (#35835)
  • nuxt: Drop prefetch hints for never-hydrated chunks (#35812)
  • vite: Use same asset filenames for worker builds (#35866)
  • nitro: Reject non-object island props (#35867)
  • nuxt: Support options api in v-for islands transform (#35877)
  • nuxt: Improve page meta extraction + performance (#35869)
  • nuxt: Set build outputs when restoring vue cache (#35895)
  • kit: Honour nested apply and applyToEnvironment in vite wrapper (#35899)
  • nuxt: Re-check for preview mode after prerendered page hydration (#35886)
  • kit,nuxt,vite: Handle missed chokidar watch events (#35887)
  • nuxt: Settle asyncData status when bailing (#35908)
  • kit: Clone resolved config with klona rather than klona/full (#35914)
  • kit: Honour nested plugins' enforce in vite wrapper (#35916)
  • nuxt: Collect build cache once build outputs are final (#35929)
  • vite: Resolve vite env api sourcemaps in vite-node (#35758)
  • nuxt: Don't warn about missing <NuxtPage> on nav + with slot (#35948)
  • kit: Prepend vite environment wrapper plugin when prepend is set (#35942)
  • nuxt: Depend on rolldown as a peer to reuse vite's copy (3fda97f60)
  • nitro: Define import.meta.test for server code (#35987)
  • nuxt: Match route rules against decoded paths (9123ed850)

💅 Refactors

  • nuxt: Use vue-component-type-helpers instead of locally maintained helpers (#35840)
  • nuxt: Use isReferenceIdentifier in page-meta plugin (#35882)

📖 Documentation

  • Sync mcp server page with live tools and providers (#35856)
  • Add server components guide and mostly-static site recipe (#35778)
  • Minor changes (#33479)
  • Add accessible routing guide (#34796)
  • Update testing guide to test-utils v4.1.0 (#35873)
  • Update .env provider reference from dotenv to c12 (#35911)
  • Add note to avoid using defineVitestProject in e2e tests (#35926)
  • Update roadmap (f6e6027fe)

📦 Build

  • ui-templates: Copy generated templates from resolved output dir (#35921)

... (truncated)

Commits
  • e2d3a39 v4.5.2
  • 9123ed8 fix(nuxt): match route rules against decoded paths
  • 2c38086 chore: bump nuxt rolldown peer dep to match unctx
  • 3fda97f fix(nuxt): depend on rolldown as a peer to reuse vite's copy
  • b960d36 refactor(nuxt): use isReferenceIdentifier in page-meta plugin (#35882)
  • 1f52b61 fix(nuxt): don't warn about missing \<NuxtPage> on nav + with slot (#35948)
  • c7604bd fix(nuxt): collect build cache once build outputs are final (#35929)
  • ba4fc0a perf(nuxt): reuse app and component scans for unchanged structures (#35912)
  • d7f5f07 fix(nuxt): settle asyncData status when bailing (#35908)
  • 2ca27f1 perf(kit,nuxt): use lazy imports to improve parsing speed (#35901)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nuxt since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 30, 2026
@github-actions github-actions Bot added the needs-manual-review Held by dependabot-auto-merge: non-security major bump label Jul 30, 2026
@github-actions

Copy link
Copy Markdown

🚧 Non-security major version bump — auto-merge intentionally skipped. Review and merge manually.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-3cb4f969d9 branch from 38b590e to a64aa89 Compare August 3, 2026 00:18
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown

🚧 Non-security major version bump — auto-merge intentionally skipped. Review and merge manually.

Bumps [postcss](https://github.com/postcss/postcss) and [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt). These dependencies needed to be updated together.

Updates `postcss` from 8.5.3 to 8.5.25
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.3...8.5.25)

Updates `nuxt` from 2.18.1 to 4.5.2
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v4.5.2/packages/nuxt)

---
updated-dependencies:
- dependency-name: nuxt
  dependency-version: 4.5.1
  dependency-type: direct:production
- dependency-name: postcss
  dependency-version: 8.5.25
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-3cb4f969d9 branch from a64aa89 to 988eb86 Compare August 5, 2026 18:58
@github-actions

github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown

🚧 Non-security major version bump — auto-merge intentionally skipped. Review and merge manually.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code needs-manual-review Held by dependabot-auto-merge: non-security major bump

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants