Skip to content

chore(deps-dev): bump the dev-tooling group across 1 directory with 8 updates - #155

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-tooling-0842e907a5
Open

chore(deps-dev): bump the dev-tooling group across 1 directory with 8 updates#155
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-tooling-0842e907a5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-tooling group with 8 updates in the / directory:

Package From To
@nuxt/image 2.1.0 2.2.0
@nuxt/test-utils 4.3.3 4.3.4
@playwright/test 1.64.0 1.64.1
eslint 10.12.0 10.13.0
happy-dom 20.14.6 21.0.4
nuxt 4.6.1 4.6.2
playwright 1.64.0 1.64.1
vitest 5.0.3 5.0.5

Updates @nuxt/image from 2.1.0 to 2.2.0

Release notes

Sourced from @​nuxt/image's releases.

v2.2.0

v2.2.0 is the next minor release.

👉 Changelog

compare changes

🚀 Enhancements

  • deps: upgrade to released ipx v4 (#2352)
  • support nuxt v5 (#2281)

🩹 Fixes

  • use explicit imports in nitro v2 server runtime (#2347)
  • directus: remove deprecated sharpen option (#2294)

🏡 Chore

  • exempt first-party packages from pnpm minimumReleaseAge (#2306)

✅ Tests

  • increase e2e provider test timeout to 60s (#2350)

🤖 CI

  • only run release workflows in nuxt org (#2296)
  • use pnpm/setup and devEngines (#2332)
  • only fail fast in merge groups (de96294)

❤️ Contributors

Commits

Updates @nuxt/test-utils from 4.3.3 to 4.3.4

Release notes

Sourced from @​nuxt/test-utils's releases.

v4.3.4

v4.3.4 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes

  • runtime: test failure when module cached (#1856)
  • runtime-utils: support registerEndpoint with FormData in jsdom (#1846)
  • e2e: restore test context before running setup hooks (#1855)
  • e2e: apply nuxtConfig overrides to dev server (#1851)
  • config: prefer h3 version from nitro path (#1844)
  • module: apply vitest setup only when loaded from vitest config (#1834)
  • config: respect default resolve conditions in vitest browser mode (#1843)
  • module: pass required token to open vitest ui in devtools (#1841)

💅 Refactors

  • module: use package-manager-detector workspace + deno handling (1d59009c7)

🏡 Chore

  • cleanup example deps, unify vitest, and update knip config (#1840)

❤️ Contributors

Commits
  • a2a0174 v4.3.4 (#1838)
  • 8a372c7 fix(runtime): test failure when module cached (#1856)
  • eaf8b40 fix(runtime-utils): support registerEndpoint with FormData in jsdom (#1846)
  • 28f2639 chore(deps): update nuxt framework to v5.0.0-2610141459-ba5fba8 (#1858)
  • 33c8cac chore(deps): update nuxt framework to v5.0.0-2610132251-aadc393 (#1857)
  • e345739 fix(e2e): restore test context before running setup hooks (#1855)
  • cc855b4 chore(deps): update nuxt framework to v5.0.0-2610121449-e69fd4e (#1854)
  • c5294da chore(deps): update nuxt framework to v5.0.0-2610121141-fa50237 (#1853)
  • 9410fe8 fix(e2e): apply nuxtConfig overrides to dev server (#1851)
  • 6f68679 chore(deps): update nuxt framework to v5.0.0-2610111052-7bcb758 (#1852)
  • Additional commits viewable in compare view

Updates @playwright/test from 1.64.0 to 1.64.1

Release notes

Sourced from @​playwright/test's releases.

v1.64.1

Bug Fixes

  • #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
  • #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)
Commits
  • cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
  • 866cbb8 chore: mark v1.64.1 (#43354)
  • 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
  • 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
  • 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
  • See full diff in compare view

Updates eslint from 10.12.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
  • 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
  • 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
  • b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
  • 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
  • e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)
Commits

Updates happy-dom from 20.14.6 to 21.0.4

Release notes

Sourced from happy-dom's releases.

v21.0.4

👷‍♂️ Patch fixes

  • Fixed a code injection vulnerability in the ESM compiler - By @​capricorn86
  • Fixed cross-origin isolation so opaque-origin data: iframes cannot access their parent or top window - By @​capricorn86

v21.0.3

👷‍♂️ Patch fixes

  • Fixes security vulnerability where authorization header was forwarded when redirecting - By @​capricorn86

v21.0.2

👷‍♂️ Patch fixes

v21.0.1

👷‍♂️ Patch fixes

v21.0.0

💣 Breaking Changes

  • Disables CSS and IFrame loading by default to prevent server-side request forgery (SSRF) - By @​capricorn86
    • An attacker could embed <iframe> or <link rel="stylesheet"> elements in untrusted HTML to make Happy DOM send HTTP requests from the server to attacker-chosen URLs, including internal services. This could allow access to otherwise unreachable endpoints or trigger unintended actions, depending on the application and its network access.
    • The settings property disableCSSFileLoading has been deprecated
    • Added the new settings properties enableCSSFileLoading and enableIframePageLoading
    • If you don't believe that you are at risk, you can keep the same behavior as in <=v20.14.6 by sending in { enableCSSFileLoading: true, enableIframePageLoading: true } as broswer settings (e.g. new Window({ settings }));
Commits
  • fd16352 fix: Fixed a code injection vulnerability in the ESM compiler (#2537)
  • 75ab0fb fix: Fixed cross-origin isolation so opaque-origin data: iframes cannot acces...
  • 875ef5c fix: Fixes security vulnerability where authorization header was forwarded wh...
  • 1f3ffdf fix: Fixes SSRF security vulnerability by doing a target-origin bypass in the...
  • f55c7e0 chore: Update security documentation (#2509)
  • 2b91e68 fix: Adds alias for enabling CSS and iframe loading in server-renderer (#2503)
  • 0a99c75 BREAKING CHANGE: Disables CSS and IFrame loading by default (#2502)
  • See full diff in compare view

Updates nuxt from 4.6.1 to 4.6.2

Release notes

Sourced from nuxt's releases.

v4.6.2

v4.6.2 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes

  • nitro: apply useHeadSafe rules to server island head (493565e99)
  • nitro-server: read router params from the path h3 matched (010f6b43d)
  • nitro: match server route rules case-insensitively unless routing is sensitive (f6cfee52c)
  • nuxt: resolve rooted paths through the URL parser (#36617)
  • nuxt: resolve empty route types in shared context (#36576)
  • nitro: preserve server tsconfig with relocated build dir (#36494)
  • nuxt: fix scroll offset for IDs starting with numbers (#36524)
  • kit: do not exclude module directories with a dot in their name from app tsconfig (#36331)
  • nuxt: detect vapor slots with rawVaporSlotKey from vue (#36614)
  • nuxt: keep middleware layout when restoring deferred prerendered route (#36560)
  • schema: provide default value for experimental.typescriptPlugin (#36561)
  • vite: only replay compile error overlays to newly loaded pages (#36611)
  • nuxt: re-export AnyFetchPath for emitted server route types (#36610)
  • vite: warm up the dev ssr entry from a nitro plugin (#36615)
  • nitro: avoid unused h3 imports in nuxt/server runtime (#36609)
  • vite-server: scope asset url helpers to the build (#36591)
  • nuxt: resolve nuxt/app to the app's runtime (#36587)
  • kit: lowercase filename-derived handler method on nitro v2 (#36567)
  • nuxt,nitro: normalise string/array appMiddleware (#36565)
  • nitro: pass response headers to render:response listeners (#36583)
  • vite: resolve inlined vue to its bundler build in dev (#36569)
  • nuxt: don't start a page transition with no page to leave (#36535)
  • nuxt: preserve error state on aborted or cancelled navigation (#36546)
  • vite,nitro: link null-byte virtual css through /@id/ in dev (#36549)
  • kit: resolve module dependencies from the declaring module (#36542)
  • nitro: only disable h3 + nitro presets when nitroAutoImports is off (#36548)
  • nitro,vite: don't access unspecified dependencies (#36541)
  • nitro: don't inline deps under absolute transpile dirs (#36540)
  • vite-server: respect spa loading template location (#36536)

💅 Refactors

  • webpack,rspack: inline friendly errors plugin (#36568)

📖 Documentation

  • remove DeepWiki badge (#36616)
  • rename H(TTP) to HTTP (#36559)
  • mention proxy route rule (4a529be68)
  • reference definePlugin and defineNitroPlugin in server plugin tip (64b8e0334)
  • open a PR to list a module (e551df267)

... (truncated)

Commits
  • 026e993 v4.6.2 (#36545)
  • fb01db4 chore: fix knip, eslint and type import failures in ci
  • 552f97f fix(nuxt): resolve rooted paths through the URL parser (#36617)
  • bfee0ff fix(nuxt): resolve empty route types in shared context (#36576)
  • 4cc6917 fix(nitro): preserve server tsconfig with relocated build dir (#36494)
  • 5112695 fix(nuxt): fix scroll offset for IDs starting with numbers (#36524)
  • 3d19616 fix(nuxt): detect vapor slots with rawVaporSlotKey from vue (#36614)
  • 149696d fix(nuxt): keep middleware layout when restoring deferred prerendered route (...
  • 16d3a2f fix(nuxt): re-export AnyFetchPath for emitted server route types (#36610)
  • 15587ef fix(nuxt): resolve nuxt/app to the app's runtime (#36587)
  • Additional commits viewable in compare view

Updates playwright from 1.64.0 to 1.64.1

Release notes

Sourced from playwright's releases.

v1.64.1

Bug Fixes

  • #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
  • #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)
Commits
  • cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
  • 866cbb8 chore: mark v1.64.1 (#43354)
  • 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
  • 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
  • 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
  • See full diff in compare view

Updates vitest from 5.0.3 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the dev-tooling group across 1 directory with 8…
633d1dd 
… updates

Bumps the dev-tooling group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@nuxt/image](https://github.com/nuxt/image) | `2.1.0` | `2.2.0` |
| [@nuxt/test-utils](https://github.com/nuxt/test-utils) | `4.3.3` | `4.3.4` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.64.0` | `1.64.1` |
| [eslint](https://github.com/eslint/eslint) | `10.12.0` | `10.13.0` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `20.14.6` | `21.0.4` |
| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.6.1` | `4.6.2` |
| [playwright](https://github.com/microsoft/playwright) | `1.64.0` | `1.64.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.5` |



Updates `@nuxt/image` from 2.1.0 to 2.2.0
- [Release notes](https://github.com/nuxt/image/releases)
- [Changelog](https://github.com/nuxt/image/blob/main/CHANGELOG.md)
- [Commits](nuxt/image@v2.1.0...v2.2.0)

Updates `@nuxt/test-utils` from 4.3.3 to 4.3.4
- [Release notes](https://github.com/nuxt/test-utils/releases)
- [Commits](nuxt/test-utils@v4.3.3...v4.3.4)

Updates `@playwright/test` from 1.64.0 to 1.64.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.64.0...v1.64.1)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `happy-dom` from 20.14.6 to 21.0.4
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.14.6...v21.0.4)

Updates `nuxt` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v4.6.2/packages/nuxt)

Updates `playwright` from 1.64.0 to 1.64.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.64.0...v1.64.1)

Updates `vitest` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

---
updated-dependencies:
- dependency-name: "@nuxt/image"
  dependency-version: 2.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling
- dependency-name: "@nuxt/test-utils"
  dependency-version: 4.3.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@playwright/test"
  dependency-version: 1.64.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling
- dependency-name: happy-dom
  dependency-version: 21.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-tooling
- dependency-name: nuxt
  dependency-version: 4.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: playwright
  dependency-version: 1.64.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 26, 2026
@dependabot dependabot Bot mentioned this pull request Oct 26, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants