chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #1865 · nuxt/bridge

renovate · 2026-07-13T13:34:12Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update	Pending
@vitejs/plugin-legacy (source)	`^8.0.2` → `^8.2.1`	dependencies	minor
@vue/reactivity (source)	`^3.5.38` → `^3.5.40`	devDependencies	patch
actions/setup-node	`v6.4.0` → `v6.5.0`	action	minor
actions/stale	`v10.3.0` → `v10.4.0`	action	minor
enhanced-resolve	`^5.24.0` → `^5.24.2`	dependencies	patch
eslint (source)	`9.39.4` → `9.39.5`	devDependencies	patch
eslint-plugin-import-x	`^4.16.2` → `^4.17.1`	devDependencies	minor
eslint-plugin-jsdoc	`63.0.7` → `63.0.14`	devDependencies	patch	`63.1.0`
exsolve	`^1.0.8` → `^1.1.0`	dependencies	minor
globals	`^17.6.0` → `^17.7.0`	devDependencies	minor
globby	`16.2.0` → `16.2.2`	devDependencies	patch
knip (source)	`6.17.1` → `6.27.0`	devDependencies	minor
nypm	`^0.6.7` → `^0.6.8`	dependencies	patch
playwright-core (source)	`1.61.0` → `1.61.1`	devDependencies	patch
pnpm (source)	`10.34.4` → `10.34.5`	packageManager	patch
std-env	`^4.1.0` → `^4.2.0`	dependencies	minor
std-env	`4.1.0` → `4.2.0`	devDependencies	minor
terser (source)	`^5.48.0` → `^5.49.0`	dependencies	minor
typescript-eslint (source)	`^8.61.1` → `^8.64.0`	devDependencies	minor
vite (source)	`~7.3.5` → `~7.3.6`	dependencies	patch
vite (source)	`~7.3.5` → `~7.3.6`	devDependencies	patch
vitest (source)	`4.1.9` → `4.1.10`	devDependencies	patch
vue-bundle-renderer	`^2.2.0` → `^2.3.1`	dependencies	minor

Release Notes

vitejs/vite (@vitejs/plugin-legacy)

`v8.2.1`

Bug Fixes

deps: update all non-major dependencies (#22921) (fef682d)
deps: update rolldown-related dependencies (#22922) (3c345e4)
legacy: don't use newer syntax when minifying polyfill chunks (#22939) (c4df6ef)

`v8.2.0`

Features

legacy: prefer oxc as minifier (fix #21973) (#22468) (ab5dafa)

Bug Fixes

deps: update all non-major dependencies (#22734) (e635f49)
deps: update rolldown-related dependencies (#22591) (2ce6677)

Code Refactoring

legacy: use babel-plugin-polyfill-* consistently (#22874) (9dddae6)

`v8.1.0`

Compare Source

vuejs/core (@vue/reactivity)

`v3.5.40`

Compare Source

Bug Fixes

compiler-core: avoid leaking slot branch keys (#15051) (20c9d26), closes #15048
hydration: pass namespace when patching dynamic props (#15082) (e0d2723), closes #15081 #15050
reactivity: handle effect removal during scope stop (#15084) (378f978), closes #15083
runtime-core: skip lazy hydration for detached roots (#15092) (97f3525), closes #15091
runtime-core: unwind dangling blocks when slot content throws (#15071) (ddc132d), closes #15070
runtime-dom: respect current select model type (#15010) (eb89e93), closes #15009
server-renderer: handle errors in optimized component renders (#12601) (474907c), closes #12575
server-renderer: remove package dependency cycle (#15063) (4d35eca)
shared: prevent SSR comment escaping from creating closing delimiters (#15045) (bd962bb)
types: don't constrain component $el type to Element (#15040) (164460a)

`v3.5.39`

Compare Source

Bug Fixes

compiler-core: correct filter rewrite recursion (#14959) (be7ce31)
hydration: force patch dynamic props when hydrating (#9083) (024cf06), closes #9033
hydration: respect data-allow-mismatch on conditional branches (#12801) (164af63), closes #12782
reactivity: avoid triggering effects when set fails (#14964) (e450973)
runtime-core: handle non-isomorphic block element update (#15002) (932ddd0), closes #6385
runtime-core: normalize function children for elements and Teleport (#9108) (2f374cd), closes #9107
runtime-core: pause tracking when invoking function refs (#14985) (3ac052b)
runtime-core: preserve once event listener name (#8341) (87b73b6), closes #8342
runtime-dom: preserve option modifier event names (#8338) (4b659e6), closes #8334
ssr: dedupe inherited scope ids during vnode rendering (#15005) (027da6b), closes #12159 #12175
ssr: resolve nested async teleport content (#9431) (31d0f23), closes #6207
teleport: handle teleport unmount edge case (#12705) (671997a), closes #12702
types: support named tuple emits (#12676) (232f402), closes #12673
types: validate defineModel defaults (#14968) (747f57e), closes #14966

actions/setup-node (actions/setup-node)

`v6.5.0`

Compare Source

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in #1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

actions/stale (actions/stale)

`v10.4.0`

Compare Source

What's Changed

Bug Fix

Fixed only-issue-types validation by @trueberryless in #1338

Dependency Updates

Bump undici to 6.27.0 via override, clean up stale license files, and version to 10.4.0. by @dependabot in #1342

New Contributors

@trueberryless made their first contribution in #1338

Full Changelog: actions/stale@v10.3.0...v10.4.0

webpack/enhanced-resolve (enhanced-resolve)

`v5.24.2`

Compare Source

Patch Changes

Batch cached filesystem callbacks from one synchronous burst into a single tick. (by @alexander-akait in #623)

`v5.24.1`

Compare Source

Patch Changes

Reduce hot-path allocations in the resolve pipeline. (by @xiaoxiaojx in #615)

eslint/eslint (eslint)

`v9.39.5`

Compare Source

Bug Fixes

253be16 fix: handle unavailable require cache (backport of #20812 to v9.x) (#21065) (Eric)

Documentation

74930ed docs: switch build to Node.js 24 (#20894) (Milos Djermanovic)
eaec8bb docs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)

Chores

458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077) (Francesco Trotta)
202117b chore: package.json update for @eslint/js release (Jenkins)
d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21074) (Francesco Trotta)
7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068) (Milos Djermanovic)
daf7791 chore: pin fflate@0.8.2 (#20895) (Milos Djermanovic)
daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#20829) (Milos Djermanovic)
116d4be ci: unpin Node.js 25.x in CI (#20619) (Copilot)

un-ts/eslint-plugin-import-x (eslint-plugin-import-x)

`v4.17.1`

Compare Source

Patch Changes

#498 cf25a01 Thanks @marcalexiei! - fix(extensions): don't require an extension for package subpaths that resolve to a .d.ts (e.g. vitest/config)

`v4.17.0`

Compare Source

Minor Changes

#474 4b2c0c5 Thanks @regseb! - Support RegExp in the import-x/ignore setting and the ignore option of the no-unresolved rule.

Patch Changes

#494 1c84235 Thanks @morgan-coded! - Fixed no-unresolved crashing when case-sensitive path checks encounter EACCES or EPERM on an ancestor directory.
#481 3e13121 Thanks @B4nan! - fix: memoize legacyNodeResolve resolver to avoid native memory leak
#484 9a07009 Thanks @sairus2k! - Make the extensions rule check Node.js subpath imports (specifiers starting with #, e.g. #utils/helper). Previously parsePath treated a leading # as a URL hash fragment, so the rule skipped extension validation for these imports.

Note: single-segment subpath imports without a slash (e.g. #dep) are still skipped by the existing external-root-module classification; fixing that is deferred to avoid expanding scope.
#468 240ed58 Thanks @silverwind! - Make extensions handle .d.ts correctly
#479 e3cc7e4 Thanks @mrginglymus! - fix: strip querystrings and hash fragments when checking for file existence
#476 fce29b1 Thanks @nbouvrette! - fix(deps): replace @package-json/types with an inline minimal type

gajus/eslint-plugin-jsdoc (eslint-plugin-jsdoc)

`v63.0.14`

Compare Source

Bug Fixes

escape-inline-tags: ignore Markdown code spans (786d12d)

`v63.0.13`

Compare Source

Bug Fixes

failing pages build and deployment (3728347)

`v63.0.12`

Compare Source

`v63.0.11`

Compare Source

Bug Fixes

require-jsdoc: skip overloads to find method comment blocks; fixes #1688 (7676b50)

`v63.0.10`

Compare Source

Bug Fixes

escape-inline-tags: allow scoped packages in declaration references (#1705) (70e0a11)

`v63.0.9`

Compare Source

Bug Fixes

check-template-names, require-template, valid-types: keep commas inside @template default values (0980b71)

`v63.0.8`

Compare Source

Bug Fixes

check-template-names: detect template usage in @augments/@extends/@implements types (208079f)

unjs/exsolve (exsolve)

`v1.1.0`

Compare Source

compare changes

🚀 Enhancements

Sync internal with latest Node.js upstream (#49)

🔥 Performance

Optimize resolver cache lookups (#48)

🏡 Chore

Update deps (43c20e3)
Apply automated updates (15806be)
Fix ts issues (3177a7e)

❤️ Contributors

Pi0x x@pi0.io
Alexander Lichter (@TheAlexLichter)
Pooya Parsa (@pi0)

sindresorhus/globals (globals)

`v17.7.0`

Compare Source

sindresorhus/globby (globby)

`v16.2.2`

Compare Source

Fix: Do not enumerate ignored directories with gitignore option 8bf8f54

`v16.2.1`

Compare Source

Fix gitignore ignoring an entire checkout under an anchored ancestor path (#277) e7bd988

webpro-nl/knip (knip)

`v6.27.0`: Release 6.27.0

Compare Source

Add Temporal plugin (98191a0)
Handle -d alias for react-email dir argument (53d1fec)
Expand pnpm script references with forwarded arguments (33e9799)
Treat path-shaped script tokens as file references, extend known global binaries (d9508c2)
Mark tsdown neverBundle dependencies as referenced (5fd863b)
Support TanStack Start in tanstack-router plugin (bd63cd8)
Mark vite ssr.external dependencies as referenced (91de938)
Expand bun, npm, and yarn script references with forwarded arguments (b5a3176)
Add Latitude as sponsor (4267675)
Regenerate plugin list in docs (1d2cdff)
Support Vue 2 template auto-imports (close #1881) (2157f39)
Ignore block-commented stylesheet imports (resolve #1880, close #1882) (a627f53)
Support TypeScript 5.0 narrowing for ssr.external (989292f)
Resolve local binaries from bun run (5e9a7f0)
Support Vitest inline project config extensions (f682327)
Resolve package names from aliased node_modules paths (c273d5f)
Support Tailwind CSS URL imports (57a4770)
Resolve unbuilt workspace package exports (close #1877) (1b0a2c0)
Skip unresolved imports of gitignored generated files (605c904)
Attribute imports of aliased packages to the declared dependency (d05e775)
Flag unresolvable imports of transitive peer deps as unlisted (resolve #1883) (18f0bff)
Don't count ambient module declarations in script files as imports (e52aecf)
Update rolldown snapshot (a63e927)
Remove obsolete workarounds from ecosystem tests (a521cf7)
Handle snapshotSerializers in Vitest plugin (resolve #1884) (b597de9)
Set the stage (c059c2b)

`v6.26.0`: Release 6.26.0

Compare Source

ci: add path filters (#1871) (4249935) - thanks @trueberryless!
Add CodeRabbit as gold sponsor (1da09fd)
Fix up docs a bit more (39125a7)
Don't report ambient declaration files as unused (aed361c)
Register oclif command files as entries (3b4d58c)
Add electron-vite plugin (d92107e)
Add esbuild plugin (ef3b601)
Ignore more globally available binaries (8292981)
Resolve #-imports to source when node condition is unbuilt (resolve #1873) (f2713ed)
Ignore gh as a globally available binary (a6f0772)
Resolve Vitest benchmark files as entries (5742913)
Extract shared Vue auto-import machinery into plugins/_vue (7301075)
Scope compiler extensions per workspace (5e6f82b)
Resolve auto-imported components in the Vue SFC compiler (009aad8)
Add plugins for the Vue auto-import ecosystem (f638c83)
Enable Vue SFC compiler on unplugin-vue and @vitejs/plugin-vue (9396ab1)
Recognize vite-plugin-vue-meta-layouts (same layouts convention) (3ceee89)
Add vite-plugin-pages and unplugin-icons plugins (9bc1754)
Add vite-plugin-pwa and @intlify/unplugin-vue-i18n plugins (45dea0a)
Dog, food. (e1249ad)
Update query snapshot (a45941d)
Don't misread Nitro route types as Vue component auto-imports (43aecd5)
Read oxlint jsPlugins from vite-plus vite.config and .oxlintrc.json (589ffda)
Add vite-plus plugin for run.tasks and staged scripts (f041c19)
Support @vite-pwa/nuxt PWA config in nuxt.config (8fa7b11)
Add @vite-pwa/assets-generator plugin (4254f7d)
Add @nuxtjs/i18n plugin (dfb9acb)
Read plugin entries from vite.config options and index.html (d533da8)
Fix false positives in VitePress, next-mdx and unplugin-vue-i18n plugins (b99702a)
Respect optional peers in pnpm and Yarn packageExtensions (aab080b)
Detect babel plugins in the Storybook config (5dea975)
Add shared AST helpers for imported calls and first property values (c84bb7a)
Inline trivial resolveFromAST wrappers and normalize orval and sst (620079d)
Extract inline resolveFromAST implementations to dedicated files (b5231c1)
Normalize resolveFromAST files to a uniform contract (fc1ba0f)
chore: migrate to Astro 7 and Sätteri (#1875) (f256a5b) - thanks @trueberryless!
Show contributor count on docs homepage (6b8454a)
Exclude gitignored package entry points (606e5d0)
Add Tauri plugin (199180d)
Add Laravel plugin (1974533)
Add Quasar plugin (a220729)

`v6.25.0`: Release 6.25.0

Compare Source

fix: derive package name from package.json under Yarn nodeLinker: pnpm store (#1852) (3764605) - thanks @blowery!
Pick up types used in module augmentations via path aliases (resolve #1850) (9cc5a41)
feat: add support for packageExtensions in yarn and pnpm (#1847) (61d3164) - thanks @trueberryless!
fix(ci): do not run integration on forks (#1855) (d23c10d) - thanks @trueberryless!
chore(ci): improve security through specific permissions (#1856) (1eb42e6) - thanks @trueberryless!
chore(ci): add concurrency blocks (#1857) (3bf3d11) - thanks @trueberryless!
fix(next): resolve src/ entry patterns like Next.js does (#1859) (6e6a509) - thanks @dayongkr!
Fix Bun test defaults (#1860) (2ac4c04) - thanks @jakeleventhal!
Extend agentic guidelines re. plugins (da606eb)
Support rspack and path aliases in require.context (d231d67)
Support path aliases in import.meta.glob (resolve #1821) (fc7bb1e)
Register MDX compiler in Storybook plugin (6f18138)
Resolve TypeDoc customCss and customJs files (105687d)
Resolve inline Babel presets/plugins in Jest transform (38e4a4a)
Mark graphql-codegen generated outputs as entries (1255369)
Add Fumadocs plugin (77c2142)
Support next.config.mts in Next.js plugin (0f27e77)
Add script command parser built on unbash (195510c)
Gate Bun test entries on an actual bun test invocation (92903ec)
Detect Node.js test runner via script command parser (a0bfe7b)
Extract shared command walker for bash-parser and plugins (1301475)
Normalize aliased glob patterns to posix for Win (23b4a74)
Resolve inherited tsconfig paths from the extended config's directory (resolve #1866) (e3f0e5c)
Handle var interpolations in shell cmd scripts (resolve #1867) (9422d06)
Update query snapshot (5e192e9)
Add support for Prettier overrides (#1869) (5dc7f12) - thanks @remcohaszing!
Handle Serverless esbuild inject entries (#1865) (46111ef) - thanks @jakeleventhal!
docs: add links to Discord and Contributing in issue templates (#1868) (5ab3483) - thanks @trueberryless!
Add eve (Vercel framework) plugin (#1864) (20cd970) - thanks @jakeleventhal!
Add circular dependencies as opt-in cycles issue type (resolve #1734) (#1812) (1b0ed6b)
chore(ci): remove redundant tag triggers (#1863) (c61d008) - thanks @trueberryless!
Fix up docs a bit (89a2d8d)

`v6.24.0`: Release 6.24.0

Compare Source

chore: update year in license (#1833) (32bc844) - thanks @trueberryless!
ci: pin github actions (#1835) (82a8d09) - thanks @trueberryless!
Assume Node 24+/Bun and remove compilation step (d9ef038)
Don't report working-directory scripts as unlisted binaries (resolve #1834) (aea7923)
Add pnpm run lint to CI workflow (ec9aa1c)
feat: add settings for Zed editor to use oxlint and oxfmt (#1836) (111f2e0) - thanks @trueberryless!
fix: remove format_on_save: true settings from Zed settings to respect user settings (#1838) (dc2a640) - thanks @trueberryless!
feat: add Renovate for GitHub actions only (#1839) (ffce88c) - thanks @trueberryless!
Ignore import() in JSDoc examples (#1844) (6f090f9) - thanks @cyphercodes!
Don't report types used only in module augmentations as unused (resolve #1843) (7901abd)
Restore CI intent (0d739be)
feat: add less, stylus compilers and astro, svelte, vue import resolution (#1845) (5525759) - thanks @trueberryless!
Don't report built-in compiler dependencies as unused (3c9d4ad)
feat: add scss handling to stencil plugin (#1846) (acba6b8) - thanks @johnjenkins!
fix(reporters): always print the issue-type title for a single group (#1848) (cf997b2) - thanks @morgan-coded!
Export Issue, IssueRecords and IssueType types (resolve #1840) (260f192)
Squeeze every bit of perf out around compilers ([bb0eeb6](https://redirect.github.com/webpro-

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "on Monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-07-13T13:35:04Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
typescript-eslint@8.61.1 ⏵ 8.64.0
vitest@4.1.9 ⏵ 4.1.10	⁺¹	⁺¹
playwright-core@1.61.0 ⏵ 1.61.1		⁺¹
@vue/reactivity@3.5.38 ⏵ 3.5.40			^-1
vite@7.3.5 ⏵ 7.3.6
exsolve@1.0.8 ⏵ 1.1.0
globals@17.6.0 ⏵ 17.7.0	⁺¹	⁺¹
std-env@4.1.0 ⏵ 4.2.0			⁺²
eslint-plugin-import-x@4.16.2 ⏵ 4.17.1			^-2
vue-bundle-renderer@2.2.0 ⏵ 2.3.1	⁺¹		^-1
nypm@0.6.7 ⏵ 0.6.8		⁺¹	⁺²
terser@5.48.0 ⏵ 5.49.0	⁺¹		⁺⁴
globby@16.2.0 ⏵ 16.2.2	⁺¹	⁺¹
@vitejs/plugin-legacy@8.0.2 ⏵ 8.2.1	⁺¹		⁺¹
eslint@9.39.4 ⏵ 9.39.5			⁺²
enhanced-resolve@5.24.0 ⏵ 5.24.2	⁺¹

View full report

socket-security · 2026-07-13T13:35:06Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

pkg-pr-new · 2026-07-13T13:38:56Z

Open in StackBlitz

npm i https://pkg.pr.new/@nuxt/bridge@1865

npm i https://pkg.pr.new/@nuxt/bridge-schema@1865

commit: e7bb0e9

renovate Bot requested a review from wattanx as a code owner July 13, 2026 13:34

renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from fbe1858 to b3ae7dd Compare July 17, 2026 12:15

chore(deps): update all non-major dependencies

e7bb0e9

renovate Bot force-pushed the renovate/all-minor-patch branch from b3ae7dd to e7bb0e9 Compare July 18, 2026 14:46

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): update all non-major dependencies#1865

chore(deps): update all non-major dependencies#1865
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Jul 13, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 13, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 13, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Jul 13, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

renovate Bot commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Features

Bug Fixes

Code Refactoring

Bug Fixes

Bug Fixes

What's Changed

What's Changed

Bug Fix

Dependency Updates

New Contributors

Patch Changes

Patch Changes

Bug Fixes

Documentation

Chores

Patch Changes

Minor Changes

Patch Changes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

🚀 Enhancements

🔥 Performance

🏡 Chore

❤️ Contributors

v6.27.0: Release 6.27.0

v6.26.0: Release 6.26.0

v6.25.0: Release 6.25.0

v6.24.0: Release 6.24.0

Configuration

Uh oh!

socket-security Bot commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pkg-pr-new Bot commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 13, 2026 •

edited

Loading

`v6.27.0`: Release 6.27.0

`v6.26.0`: Release 6.26.0

`v6.25.0`: Release 6.25.0

`v6.24.0`: Release 6.24.0

socket-security Bot commented Jul 13, 2026 •

edited

Loading

socket-security Bot commented Jul 13, 2026 •

edited

Loading

pkg-pr-new Bot commented Jul 13, 2026 •

edited

Loading