Skip to content

chore(deps): consolidate Nuxt and npm updates - #100

Merged
glitchedmob merged 2 commits into
mainfrom
dependabot/npm_and_yarn/nuxt-4.5.1
Aug 7, 2026
Merged

chore(deps): consolidate Nuxt and npm updates#100
glitchedmob merged 2 commits into
mainfrom
dependabot/npm_and_yarn/nuxt-4.5.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor

Consolidates the open npm Dependabot updates onto the Nuxt 4.5.1 security update.

Included direct updates:

  • @nuxt/content 3.15.2
  • @nuxtjs/sitemap 8.3.x
  • Nuxt 4.5.1
  • @types/node 26.1.2
  • ESLint 10.8.0
  • Prettier 3.9.6
  • vue-tsc 3.3.x

Included transitive security and bugfix updates:

  • socket.io-parser 4.2.7
  • brace-expansion 2.1.4 / 5.0.9
  • tar 7.5.22
  • fast-xml-parser 5.10.1
  • js-yaml 4.3.1

Compatibility decisions:

  • Keeps TypeScript at 6.0.3 instead of the grouped TypeScript 7 update.
  • Keeps better-sqlite3 at 12.11.1 because @nuxt/content 3.15.2 requires ^12.5.0.
  • Pins nostics 1.2.0 at the root to prevent Nuxt production imports from resolving devframe’s incompatible nostics 0.2.0 copy.

Verification:

  • npm ci
  • npm run build
  • npm run lint
  • npm run format:check
  • npm audit --audit-level=high (0 vulnerabilities)

Bumps [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) from 4.4.8 to 4.5.1.
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v4.5.1/packages/nuxt)

---
updated-dependencies:
- dependency-name: nuxt
  dependency-version: 4.5.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 7, 2026
@glitchedmob glitchedmob changed the title chore(deps): bump nuxt from 4.4.8 to 4.5.1 chore(deps): consolidate Nuxt and npm updates Aug 7, 2026
@glitchedmob
glitchedmob merged commit 15c9bea into main Aug 7, 2026
1 check passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/nuxt-4.5.1 branch August 7, 2026 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant