chore(deps): bump the npm group across 1 directory with 12 updates

[dependabot]

Bumps the npm group with 12 updates in the / directory:

Package	From	To
@nuxtjs/sitemap	8.3.3	8.3.4
better-sqlite3	12.11.1	13.0.3
markdown-it	14.3.0	15.0.0
nuxt	4.5.1	4.5.2
nuxt-gtag	4.1.0	5.0.0
vue	3.5.40	3.5.41
@nuxt/eslint	1.16.0	1.17.0
@types/markdown-it	14.1.2	14.2.0
@types/node	26.1.2	26.2.0
eslint	10.8.0	10.8.1
typescript	6.0.3	7.0.2
vue-tsc	3.3.9	3.3.10

Updates @nuxtjs/sitemap from 8.3.3 to 8.3.4

Release notes

Sourced from @​nuxtjs/sitemap's releases.

v8.3.4

   🚀 Features

• sitemapd: Add resumable traversal frontiers  -  by @​harlan-zw in nuxt-modules/sitemap#656 (7b987)

    View changes on GitHub

Commits

• ae74efb chore: release v8.3.4
• 621b93d chore: bump deps
• 870cd60 refactor: adopt shared i18n route APIs (#657)
• 7b98715 feat(sitemapd): add resumable traversal frontiers (#656)
• See full diff in compare view

Updates better-sqlite3 from 12.11.1 to 13.0.3

Release notes

Sourced from better-sqlite3's releases.

v13.0.3

What's Changed

• use Ubuntu 22.04-arm by @​neoxpert in WiseLibs/better-sqlite3#1510

Full Changelog: WiseLibs/better-sqlite3@v13.0.2...v13.0.3

v13.0.2

What's Changed

• add gypfile option to package.json by @​neoxpert in WiseLibs/better-sqlite3#1505
• Update SQLite to version 3.53.4 by @​JoshuaWise in WiseLibs/better-sqlite3#1506
• validate the parameters of table properly by @​theosotr in WiseLibs/better-sqlite3#1504
• fix: this dependabot configuration does not set a co... in... by @​anupamme in WiseLibs/better-sqlite3#1508
• fixed process aborting from terminating worker threads (WiseLibs/better-sqlite3#1507)

New Contributors

• @​theosotr made their first contribution in WiseLibs/better-sqlite3#1504
• @​anupamme made their first contribution in WiseLibs/better-sqlite3#1508

Full Changelog: WiseLibs/better-sqlite3@v13.0.1...v13.0.2

v13.0.1

Full Changelog: WiseLibs/better-sqlite3@v13.0.0...v13.0.1

Fixed a regression in parameter binding where it would be overly strict and reject plain objects from other realms (e.g., in jest tests).

v13.0.0

Version 13.0.0 marks a major milestone, as it's the first version of better-sqlite3 to run on the N-API. This means prebuilt binaries should theoretically work across different versions of Node.js and Electron, and perhaps even other runtimes like Bun. As a result, we've removed the deprecated prebuild-install dependency, and now prebuilt binaries are published directly with the better-sqlite3 code itself. If your platform/architecture doesn't have a prebuilt binary, it should compile during install as before.

What's Changed

• Refactored codebase to use node-addon-api by @​JoshuaWise in WiseLibs/better-sqlite3#1498
• Added a new db.explain() method, for running EXPLAIN queries without needing to supply bound parameters.
• Added a new preparedStatement.toString() method, for getting the expanded SQL of a prepared statement.
• Fix SqliteError cross-realm and Error.isError compatibility by @​dennismutuku2005 in WiseLibs/better-sqlite3#1473

New Contributors

• @​dennismutuku2005 made their first contribution in WiseLibs/better-sqlite3#1473

Full Changelog: WiseLibs/better-sqlite3@v12.12.0...v13.0.0

v12.12.0

What's Changed

[!WARNING]

BREAKING: Starting with Electron v43, binary assets will require glibc 2.41 or higher on Linux hosts.

• Update SQLite to version 3.53.3 by @​JoshuaWise in WiseLibs/better-sqlite3#1492
• Utilize node:20-trixie for Electron v43 and onwards by @​neoxpert in WiseLibs/better-sqlite3#1495

... (truncated)

Commits

• dbc2ea1 13.0.3
• b872585 use Ubuntu 22.04-arm (#1510)
• 569e85a 13.0.2
• df1324b fix: this dependabot configuration does not set a co... in... (#1508)
• b9fbe5f fixed segfault from making calls while worker thread is terminating
• 71707c4 validate the parameters of table properly (#1504)
• 6478c99 Update SQLite to version 3.53.4 (#1506)
• 6d24034 add gypfile option to package.json (#1505)
• ab6232e fixed typo in docs
• 57d751c updated readme
• Additional commits viewable in compare view

Updates markdown-it from 14.3.0 to 15.0.0

Changelog

Sourced from markdown-it's changelog.

[15.0.0] - 2026-07-30

Added

• Exposed parser internals classes as static properties on markdownit.
• Bundled TypeScript declarations. Remove @types/markdown-it if you used it.
• Added the markdown-it/browser export with bundled ESM and UMD builds.
• Added colored CLI help on supported terminals via argparse 3.
• Added reference labels to link/image tokens, #938.
• Added reference_definition tokens. They remain stripped by default for backwards compatibility, #1055. Also adjusted the line-break heuristic to keep output exactly the same.

Changed

• [breaking] linkify-it => v6
  • No fuzzy links by default.
  • No auth part check by default.
  • Unicode punctuation terminates the link by default (should help with CJK).
  • See linkify-it changelog for other changes.
• Package root now resolves to prebuilt ESM and CJS files instead of raw sources. Distribution files were reorganized under dist/ and dist/browser/.
• Migrated to Typescript.
• entities => v8. Can be rolled back to v7 if compatibility issues happen.
• Moved validateLink, normalizeLink and normalizeLinkText from properties to prototype methods.
• Reworked issue templates and contribution guidelines.

Removed

• [breaking] Removed package-internal subpath exports (markdown-it/lib/* and similar). Use the static classes exposed on markdownit instead.
• [breaking] Removed obsolete StateBlock#ddIndent, #1139. Update markdown-it-deflist to keep it working.

Fixed

• Preserve a literal backslash before a terminating space in link destinations, matching CommonMark 6.3, #1188.
• Recognize lowercase declarations as HTML blocks, matching CommonMark 4.6, #1189.
• Require semicolons for named entities in all decoding paths, completing the fix for #1096.
• Enhanced the text_join rule to process image alt text.
• Include inline code content in image alt text, #1142.

Commits

• 157b33b 15..0.0 released
• f73cb76 doc: rename files
• 3bc8e2d Add TS types
• 2620dce Update contribution guidelines and issue templates
• 7d365fe doc: migration info
• 5c9b7ce Update changelog
• 5a996d5 doc: fix @example tags display
• f5083f4 doc: continue restructuring & theme fixing
• 54289c4 Show inline code content in image alt tag #1142
• 974e2d7 text_join rule fix: process image alt content too (fixes lost escapes and...
• Additional commits viewable in compare view

Updates nuxt from 4.5.1 to 4.5.2

Release notes

Sourced from nuxt's releases.

v4.5.2

4.5.2 is the next patch release.

👉 Changelog

compare changes

🔥 Performance

• nuxt,kit: Skip rewriting unchanged generated files (#35902)
• kit,nuxt: Use lazy imports to improve parsing speed (#35901)
• vite: Skip html entry probes in bare-import resolver (#35907)
• nuxt: Reuse app and component scans for unchanged structures (#35912)

🩹 Fixes

• vite: Resolve client manifest path from resolved config (#35883)
• nuxt: Use client-side navigation for links inside islands (#35806)
• nuxt: Generate types for route params defined with definePageMeta (#35857)
• nuxt: Serialize island payloads for components with underscores in keys (#35807)
• nitro: Dedupe island renders when prerendering (#35835)
• nuxt: Drop prefetch hints for never-hydrated chunks (#35812)
• vite: Use same asset filenames for worker builds (#35866)
• nitro: Reject non-object island props (#35867)
• nuxt: Support options api in v-for islands transform (#35877)
• nuxt: Improve page meta extraction + performance (#35869)
• nuxt: Set build outputs when restoring vue cache (#35895)
• kit: Honour nested apply and applyToEnvironment in vite wrapper (#35899)
• nuxt: Re-check for preview mode after prerendered page hydration (#35886)
• kit,nuxt,vite: Handle missed chokidar watch events (#35887)
• nuxt: Settle asyncData status when bailing (#35908)
• kit: Clone resolved config with klona rather than klona/full (#35914)
• kit: Honour nested plugins' enforce in vite wrapper (#35916)
• nuxt: Collect build cache once build outputs are final (#35929)
• vite: Resolve vite env api sourcemaps in vite-node (#35758)
• nuxt: Don't warn about missing <NuxtPage> on nav + with slot (#35948)
• kit: Prepend vite environment wrapper plugin when prepend is set (#35942)
• nuxt: Depend on rolldown as a peer to reuse vite's copy (3fda97f60)
• nitro: Define import.meta.test for server code (#35987)
• nuxt: Match route rules against decoded paths (9123ed850)

💅 Refactors

• nuxt: Use vue-component-type-helpers instead of locally maintained helpers (#35840)
• nuxt: Use isReferenceIdentifier in page-meta plugin (#35882)

📖 Documentation

• Sync mcp server page with live tools and providers (#35856)
• Add server components guide and mostly-static site recipe (#35778)
• Minor changes (#33479)
• Add accessible routing guide (#34796)
• Update testing guide to test-utils v4.1.0 (#35873)
• Update .env provider reference from dotenv to c12 (#35911)
• Add note to avoid using defineVitestProject in e2e tests (#35926)
• Update roadmap (f6e6027fe)

📦 Build

• ui-templates: Copy generated templates from resolved output dir (#35921)

... (truncated)

Commits

• e2d3a39 v4.5.2
• 9123ed8 fix(nuxt): match route rules against decoded paths
• 2c38086 chore: bump nuxt rolldown peer dep to match unctx
• 3fda97f fix(nuxt): depend on rolldown as a peer to reuse vite's copy
• b960d36 refactor(nuxt): use isReferenceIdentifier in page-meta plugin (#35882)
• 1f52b61 fix(nuxt): don't warn about missing \<NuxtPage> on nav + with slot (#35948)
• c7604bd fix(nuxt): collect build cache once build outputs are final (#35929)
• ba4fc0a perf(nuxt): reuse app and component scans for unchanged structures (#35912)
• d7f5f07 fix(nuxt): settle asyncData status when bailing (#35908)
• 2ca27f1 perf(kit,nuxt): use lazy imports to improve parsing speed (#35901)
• Additional commits viewable in compare view

Updates nuxt-gtag from 4.1.0 to 5.0.0

Release notes

Sourced from nuxt-gtag's releases.

v5.0.0

Migration

Nuxt 4 is required. The module no longer supports Nuxt 3. Nothing else in your configuration changes on that account.

A tag ID named twice is configured once. If the same ID appeared in both the id option and the tags array, both entries used to reach the config command, and the second overwrote the first. Only one survives now, and it is the id entry, which carries the top-level initCommands and config. Move any settings you kept in the duplicate tags entry up to the top level, or drop the id option and keep the entry in tags.

An existing dataLayer no longer stops initialization. initialize() used to do nothing at all when window.dataLayer was already present, which a third-party snippet such as Google Tag Manager creates before Nuxt hydrates. The module tracks the IDs it configured itself instead, so it now configures its tags alongside such a snippet rather than silently standing down. If you relied on the old behavior to let GTM own the page, stop calling initialize() – or set enabled to false.

---

   🚨 Breaking Changes

• Require Nuxt 4  -  by @​johannschopplich (f9d2e)

   🐞 Bug Fixes

• Accept a mixed array of tag IDs and tag objects  -  by @​johannschopplich (38562)
• Configure a tag ID that initialize receives at runtime  -  by @​johannschopplich (23694)
• Configure each tag ID exactly once  -  by @​johannschopplich (92aab)
• Track configured tag IDs instead of inferring them from dataLayer  -  by @​johannschopplich (c3bd0)

    View changes on GitHub

Commits

• fb10088 chore: release v5.0.0
• 2f5d9b8 chore: drop the release-age pins that have aged out
• efdc67a chore: drop the duplicate env entry from the ignore file
• ca037ef docs: move the migration guides to the release notes
• 57f8352 docs: add the v5 migration notes and correct the composable descriptions
• c837470 chore: drop the lint glob for a directory that does not exist
• 9fdddd7 ci: publish through OIDC alone
• 5359972 refactor: drop the no-op toRaw from resolveTags
• 5cd1976 ci: run the test suite on push and pull request
• 36f47ba docs: drop the Nuxt version the module already declares
• Additional commits viewable in compare view

Updates vue from 3.5.40 to 3.5.41

Release notes

Sourced from vue's releases.

v3.5.41

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.41 (2026-08-05)

Bug Fixes

• compiler-core: preserve vnode lifecycle in stable v-for (#11682) (02421cd), closes #9239 #12569
• compiler-sfc: handle transformed template AST after cache invalidation (#15136) (a4440c0), closes #15126 #15128
• custom-element: preserve nested async mount order (#15154) (71f9ff5), closes #15153
• custom-element: warn when props override native properties (#12125) (22b53ea), closes #12124
• runtime-core: avoid re-fetching resource props with unchanged values (#15105) (a7513a1)
• runtime-core: restore SSR setup state when handling async setup result (#15114) (b6191cb), closes #15113
• scheduler: avoid stack overflow when flushing very large post cb arrays (#15143) (c04a45d), closes #15142
• slots: handle nullish v-bind slot props (#15177) (2506700)
• ssr: normalize hidden states during hydration (#13125) (4e467d7)
• transition: support transition to teleport component child (#11959) (77061fe), closes #11910
• types: preserve defineModel inference with factory defaults (#15097) (0516c43), closes #15096
• v-model: preserve text input before hydration (#14411) (2468464), closes #14403

Commits

• d2c458b release: v3.5.41
• 4e467d7 fix(ssr): normalize hidden states during hydration (#13125)
• 22b53ea fix(custom-element): warn when props override native properties (#12125)
• 02421cd fix(compiler-core): preserve vnode lifecycle in stable v-for (#11682)
• 2468464 fix(v-model): preserve text input before hydration (#14411)
• b67cfcf chore(deps): update actions/setup-node action to v7 (#15122)
• a7928a3 chore(deps): update all non-major dependencies (#15116)
• 5d0db08 chore(deps): update dependency jsdom to v30 (#15197)
• af6afaa chore(deps): update test (#15162)
• 3840dda chore(deps): update dependency postcss to v8.5.23 [security] (#15209)
• Additional commits viewable in compare view

Updates @nuxt/eslint from 1.16.0 to 1.17.0

Commits

• 5d40737 chore: release v1.17.0
• ca3db60 chore: update deps
• See full diff in compare view

Updates @types/markdown-it from 14.1.2 to 14.2.0

Commits

• See full diff in compare view

Updates @types/node from 26.1.2 to 26.2.0

Commits

• See full diff in compare view

Updates eslint from 10.8.0 to 10.8.1

Release notes

Sourced from eslint's releases.

v10.8.1

Bug Fixes

• 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)
• 151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)
• 6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)
• 4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)
• 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

• 7d0cbf8 docs: Update README (GitHub Actions Bot)
• 0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)
• 678c90b docs: Update README (GitHub Actions Bot)
• 8a10424 docs: Update README (GitHub Actions Bot)
• 69bb948 docs: Update README (GitHub Actions Bot)

Chores

• 0a14800 chore: update github/codeql-action action to v4.37.4 (#21196) (renovate[bot])
• 05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191) (Lazizbek Ergashev)
• 5611035 test: add error locations info to no-void (#21185) (Lee Daeun)
• ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176) (dependabot[bot])
• f131c03 chore: improve ecosystem test failure reporting (#20937) (crimsonjay0)
• 1f6edde chore: update ecosystem plugins (#21182) (ESLint Bot)
• d3266fb chore: unpin webpack dependency (#21172) (Francesco Trotta)
• 65a6519 chore: add allowScripts field to package.json (#21092) (GiHoon Noh)
• 22e5256 ci: add triage:no label to Dependabot PRs (#21141) (lumir)
• 55c9038 ci: bump actions/labeler from 6 to 7 (#21159) (dependabot[bot])
• 7280e78 chore: update dependency prettier to v3.9.6 (#21162) (renovate[bot])
• eddbad6 test: fix failing ecosystem test for eslint-plugin-unicorn (#21156) (Francesco Trotta)
• 60a178d chore: update ecosystem plugins (#21150) (ESLint Bot)
• f9f61dc test: add error locations to no-unreachable (#21151) (JIYEON)
• d086293 test: add error locations to no-undef (#21147) (JIYEON)
• cc01b67 test: add error locations to no-useless-catch (#21144) (devoil)
• 688e75e chore: add missing backticks in JSDoc (#21143) (Bo Hyun Kim)
• 7c1e175 test: add error locations to require-await (#21145) (Grit)
• 588a26d test: add error locations to no-extra-label (#21139) (dongkyu lee)
• 059aa89 test: add error locations to no-useless-concat (#21140) (dongkyu lee)
• 5a452a8 test: add error locations to no-const-assign (#21138) (dongkyu lee)

Commits

• c049dc3 10.8.1
• a3f7826 Build: changelog update for 10.8.1
• 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173)
• 0a14800 chore: update github/codeql-action action to v4.37.4 (#21196)
• 7d0cbf8 docs: Update README
• 05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191)
• 5611035 test: add error locations info to no-void (#21185)
• ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176)
• f131c03 chore: improve ecosystem test failure reporting (#20937)
• 0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183)
• Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits

• 1e4744d Merge branch 'main' into ts7-release
• a5a219cmicrosoft/typescript-go#4558
• ecfe30d Update status localization
• 5de25b5 Hide executable name in TypeScript status
• d7ce74a Show bundled TypeScript version for packaged servers
• 29be66a Correct TS 7 release version to 7.0.2
• ed2bd1b Merge branch 'main' into ts7-release
• 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
• 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
• d4eaca5microsoft/typescript-go#4549
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vue-tsc from 3.3.9 to 3.3.10

Release notes

Sourced from vue-tsc's releases.

v3.3.10

language-core

• fix: ignore trailing whitespace after generic parameter commas - Thanks to @​KazariEX!
• fix: resolve v-for item type over generic sources (#6141) - Thanks to @​serkodev!
• fix: do not extract SFC blocks across inline Markdown code (#6145) - Thanks to @​lazerg!

language-service

• fix: serialize template data provider access across concurrent requests (#6154) - Thanks to @​serkodev!

tsc

• fix: support different extension sets across project references (#6146) - Thanks to @​lazerg!

typescript-plugin

• fix: resolve requests against the owning project (#6152) - Thanks to @​serkodev!

vscode

• feat: patch typescript.js via --require to support read-only file systems (#6149) - Thanks to @​serkodev!
• fix: isolate custom TypeScript plugin paths between profiles (#6148) - Thanks to @​serkodev!

Our Sponsors ❤️

... (truncated)

Changelog

Sourced from vue-tsc's changelog.

3.3.10 (2026-08-15)

language-core

• fix: ignore trailing whitespace after generic parameter commas - Thanks to @​KazariEX!
• fix: resolve v-for item type over generic sources (#6141) - Thanks to @​serkodev!
• fix: do not extract SFC blocks across inline Markdown code (#6145) - Thanks to @​lazerg!

language-service

• fix: serialize template data provider access across concurrent requests (#6154) - Thanks to @​serkodev!

tsc

• fix: support different extension sets across project references (#6146) - Thanks to @​lazerg!

typescript-plugin

• fix: resolve requests against the owning project (#6152) - Thanks to @​serkodev!

vscode

• feat: patch typescript.js via --require to support read-only file systems (#6149) - Thanks to @​serkodev!
• fix: isolate custom TypeScript plugin paths between profiles (#6148) - Thanks to @​serkodev!

Commits

• 977995f v3.3.10 (#6160)
• cb65247 fix(tsc): support different extension sets across project references (#6146)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions