chore(deps): update nuxt #2602

renovate · 2025-02-02T09:23:48Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@nuxt/kit (source)	`3.15.0` -> `3.15.4`
@nuxt/test-utils	`3.15.1` -> `3.15.4`
@nuxtjs/seo (source)	`2.0.2` -> `2.1.1`
@nuxtjs/tailwindcss	`6.12.2` -> `6.13.1`
@pinia/nuxt (source)	`0.9.0` -> `0.10.1`
nuxt (source)	`3.15.0` -> `3.15.4`
nuxt-auth-utils	`0.4.4` -> `0.5.15`
pinia	`2.3.0` -> `2.3.1`
typescript (source)	`5.7.2` -> `5.7.3`
unstorage	`1.14.1` -> `1.14.4`
vite (source)	`5.4.11` -> `5.4.14`
zod (source)	`3.24.1` -> `3.24.2`

Release Notes

nuxt/nuxt (@nuxt/kit)

`v3.15.4`

Compare Source

3.15.4 is the next patch release.

✅ Upgrading

As usual, our recommendation for upgrading is to run:

npx nuxi@latest upgrade --force

This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.

👉 Changelog

compare changes

🩹 Fixes

nuxt: Improve error logging when parsing with acorn (#30754)
nuxt: Clear island uid before saving into the payload (#30767)
kit: Load @nuxt/schema from nuxt package dir (#30774)
nuxt: Allow restarting nuxt on paths outside srcDir (#30771)
nuxt: Don't warn about calling useRoute in SFC setup (#30788)
webpack: Disallow cross-site requests in no-cors mode (#30757)
vite: Restore externality for dev server externals (#30802)

💅 Refactors

vite: Use new rollup chunk.names for asset names (#30780)

❤️ Contributors

Daniel Roe (@danielroe)
Peter Radko (@Gwynerva)
Lansi (@lansi951)
Julien Huang (@huang-julien)
Norbiros (@Norbiros)

`v3.15.3`

Compare Source

3.15.3 is the next regularly scheduled patch release.

👀 Highlights

CORS configuration for dev server

Alongside a range of improvements, we've also shipped a significant fix to impose CORS origin restrictions on the dev server. This applies to your Vite or Webpack/Rspack dev middleware only.

This is a significant/breaking change we would not normally ship in a patch but it is a security fix (see GHSA-4gf7-ff8x-hq99 and GHSA-2452-6xj8-jh47) and we urge you to update ASAP.

You can configure the allowed origins and other CORS options via the devServer.cors options in your nuxt.config, which may be relevant if you are developing with a custom hostname:

export default defineNuxtConfig({
  devServer: {
    cors: {
      origin: ['https://custom-origin.com'],
    },
  },
})

✅ Upgrading

As usual, our recommendation for upgrading is to run:

npx nuxi@latest upgrade --force

This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.

👉 Changelog

compare changes

🔥 Performance

kit,nuxt: Don't resolve paths from local layers/modules (#30650)
nuxt: Reduce number of mkdirSync calls (#30651)
nuxt: Reduce unnecessary template updating (#30684)
kit: Reduce duplication between findPath and resolvePath (#30682)
kit: Run components compat check synchronously (#30685)
nuxt: Early return from annotation for non-object syntax plugins (#30683)
nuxt: Enable Transition component only on client side (#30720)

🩹 Fixes

vite: Override previous #app-manifest alias (#30618)
kit,nuxt,schema,vite: Improve watching behaviour (#30620)
nuxt: Fall back to plugin.src for variable name generation (#30649)
schema: Allow overriding dev/test environment value (#30667)
vite: Drop unneeded call to invalidate module (d2a95c542)
vite: Add back invalidateModule call (9bd71e498)
nuxt: Do not warn about [[ optional dynamic params (#30619)
vite: Inline shared folder in dev mode (#30690)
nuxt: Deep clone extracted page meta (#30717)
vite,webpack: Restrict access via cors to local origins + allow configuration via devServer.cors (406db5b4d)

💅 Refactors

vite: Drop externality and use vite internal config (#30634)

📖 Documentation

Add link to custom useFetch example (#30629)
Fix example command (#30628)
Fix links to nuxi source code (4fabe0025)
Add description for prefetch and other details of NuxtLink (#30614)
Update nuxt/content example (542987627)
Adjust examples, type and description for addRouteMiddleware (#30656)
Explain how to use ClientOnly with onMounted hook (#30670)
Update links to unhead source (eb5344b43)
Add more context about navigation mode in callOnce composable (#30612)
Add example on how to disable default routes for ssg (#30729)

📦 Build

schema: Use new inlineDependencies option (01adefcec)

🏡 Chore

kit: Explicitly inline lodash-es (0c01273f5)
Add debug timing jiti/unbuild plugins (#30648)
Do not clobber global tracker objects (df8554331)
Remove stray console log (47c40f310)
Improve debugging plugins (492b1ec65)
Write metrics to disk for better diffing (c5c6b8105)
Lint (86aff854c)

🤖 CI

Run bundle size assertion outside of matrix (#30688)
Reenable nuxt benchmarking (#30711)

❤️ Contributors

Alex Liu (@Mini-ghost)
Daniel Roe (@danielroe)
Alan Schio (@schirrel)
xjccc (@xjccc)
Saeid Zareie (@Saeid-Za)
Zakhar Shymanchyk (@zshimanchik)
Arturs Jansons (@iegik)
Maxime Pauvert (@maximepvrt)

`v3.15.2`

Compare Source

3.15.2 is the next regularly scheduled patch release.

👀 Highlights

🔥 Startup performance improvements

It is worth noting that this release includes some pretty significant performance improvements which you should notice particularly in the startup time. In my tests in the nuxt monorepo,

fixture	time to vite build complete (v3.15.1)	time to vite build complete (v3.15.2)
minimal	850ms	710ms
everything bagel	3,021ms	1,690ms

There's more improvement to do here but hopefully these are good numbers!

📦 CLI refactor

To improve performance within Nuxt projects, we've published a new @nuxt/cli distribution of nuxi, which is used under-the-hood in nuxt (see issue). This should behave exactly the same and nothing needs to be updated in your projects (for example, you will continue to use the nuxi or nuxt commands). The only significant change is that it no longer inlines dependencies. Feedback is welcome 🙏

✅ Upgrading

As usual, our recommendation for upgrading is to run:

npx nuxi@latest upgrade --force

This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.

👉 Changelog

compare changes

🔥 Performance

nuxt: Remove code duplication in client-only (#30460)
nuxt: Use lighter @nuxt/cli dependency (#30526)
kit: Remove iterations when resolving module path (#30562)
nuxt: Avoid checking fs for existence of scanned pages (#30581)
nuxt: Defer version/config warnings to after build (#30567)

🩹 Fixes

nuxt: Collect all identifiers before extracting page metadata (#30478)
nuxt: Don't hoist identifiers declared locally in definePageMeta when extracting page metadata (#30490)
kit: Reorder #build to the end of tsConfig paths (#30520)
nuxt: Use fullPath instead of empty string in router hmr (#30500)
Relax nuxt version constraints to current (23b968289)
nuxt: Add import protection for @nuxt/cli (618bbc6da)
kit: Fully resolve plugin paths when normalising them (#30540)
nuxt: Call page:loading:end only once with nested pages (#29009)
nuxt: Warn about ignored char while parsing route segment (#30396)
nuxt: Allow url-specific chars in vfs (#30584)
nuxt: Do not warn about invalid characters in route groups/catchalls (0249c74bc)
vite: Provide fallback alias for #app-manifest (#30587)
nuxt: Avoid invoking shouldPrefetch on the server side (#30591)
nuxt: Decode id before resolving relative imports (#30599)

💅 Refactors

kit,nuxt,webpack: Reduce reassignments (#30589)

📖 Documentation

Document --dev option for the module command (#30477)
Document the add layer command (#30476)
Update v4 release date (#30514)
Ensure correct type for url in useFetch (#30531)
Update link to @nuxt/module-builder source (509cf4a5c)
Add status detail and enhance getCachedData readability (#30536)
Update hash link to correct heading (#30543)
Update links to unhead source (fef3a59bb)
Adjust example and additional instructions of useNuxtData (#30570)
Resolve many twoslash errors (#30573)
Add context for useAsyncData side effects (#30479)
Update examples to use function declarations for clarity (#30588)

🏡 Chore

Control dependency import into nuxt/app (1adf3e31f)
Ignore automated renovate node engines updates (6895993fb)

🤖 CI

Don't block release on fixtures + add pkg.pr.new (#30548)
Remove concurrency group from release-pr job (8ac54ff10)

❤️ Contributors

Daniel Roe (@danielroe)
Alex Liu (@Mini-ghost)
Anthony Fu (@antfu)
Camille Coutens (@Kamsou)
Julien Huang (@huang-julien)
Peter Buglavecz (@buglavecz)
ikxin (@ikxin)
Guspan Tanadi (@guspan-tanadi)
Vuk Marjanovic (@vmrjnvc)
Saeid Zareie (@Saeid-Za)
Matej Černý (@cernymatej)
Clément Ollivier (@clemcode)

`v3.15.1`

Compare Source

3.15.1 is the next regularly scheduled patch release.

✅ Upgrading

As usual, our recommendation for upgrading is to run:

npx nuxi@latest upgrade --force

This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.

👉 Changelog

compare changes

🔥 Performance

nuxt: Skip experimental async context transform in client build (#30360)
schema: Drop unneeded type-only schema dependencies (#30411)
rspack,webpack: Drop lodash-es dependency (#30409)
nuxt: Drop pathe browser dep for deep server components (#30456)

🩹 Fixes

nuxt: Update module path for defaults (#30371)
nuxt: Ignore non-reference identifiers when extracting page metadata (#30381)
nuxt: Pass nuxt instance to resolvePagesRoutes (e4a372e12)
schema: Support pfx certificate for dev server (#30412)
nuxt: Use node location instead of range for route meta property extraction (#30447)
schema: Override vueCompilerOptions.plugins type (#30454)
nuxt: Respect baseURL when ignoring prerendered manifest (#30446)
nuxt: Respect router.options when hmring routes (#30455)

💅 Refactors

nuxt: Use consola with nuxt tag instead of console (#30408)

📖 Documentation

Update references to lodash and recommend es-toolkit (8e2ca5bdc)
Add warning about prerendering (#30437)

🏡 Chore

Add configuration for JetBrains IDEs (#30380)
Update lockfile (db65a703b)
Dedupe lockfile + bump nanoid (c5eb6a81d)

❤️ Contributors

Daniel Roe (@danielroe)
Anders Bootsmann Larsen (@bootsmann1995)
Alexander Lichter (@TheAlexLichter)
Matej Černý (@cernymatej)
Connor Roberts (@murshex)
Julien Huang (@huang-julien)

nuxt/test-utils (@nuxt/test-utils)

`v3.15.4`

Compare Source

compare changes

🩹 Fixes

e2e: Use tinyexec to resolve nuxi binary (7df895e3)
e2e: Increase default windows setup timeout (6f38dd58)

✅ Tests

Bump timeout in test also (dcf038a0)

❤️ Contributors

Daniel Roe (@danielroe)

`v3.15.3`

Compare Source

compare changes

🩹 Fixes

e2e: Use node:path to resolve dist directory (#1054)

❤️ Contributors

Scott Bedard (@scottbedard)

`v3.15.2`

Compare Source

compare changes

🩹 Fixes

module: Remove setInterval from the presets (#1035)

🏡 Chore

Add devtools-kit types + specify vite in jest fixture (c37781b5)
Double windows timeout (45e16131)

✅ Tests

Update windows timeout for e2e test (1acb335b)

❤️ Contributors

Daniel Roe (@danielroe)
Ryota Watanabe (@wattanx)

harlan-zw/nuxt-seo (@nuxtjs/seo)

`v2.1.1`

Compare Source

🐞 Bug Fixes

Resolve sub modules as explicit imports - by @harlan-zw (465b6)

View changes on GitHub

`v2.1.0`

Compare Source

🚀 Features

Nuxt Content v3

All modules now support Nuxt Content v3 including Robots, Sitemap, OG Image, Schema.org and Link Checker.

You can either install them manually by following the individual module instructions or use the Nuxt SEO asSeoCollection() to register them all at once.

Nuxt Robots: robots (docs)
Nuxt Sitemap: sitemap (docs)
Nuxt OG Image: ogImage (docs)
Nuxt Schema.org: schemaOrg (docs)