[Snyk] Upgrade nuxt from 3.9.1 to 3.10.3 #71
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade nuxt from 3.9.1 to 3.10.3. See this package in npm: https://www.npmjs.com/package/nuxt See this project in Snyk: https://app.snyk.io/org/jeb4dev/project/b6647855-c99a-433f-ab98-42b8e084f067?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade nuxt from 3.9.1 to 3.10.3.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-IP-6240864
Why? Proof of Concept exploit, CVSS 8.6
SNYK-JS-VITE-6182924
Why? Proof of Concept exploit, CVSS 8.6
SNYK-JS-TAR-6476909
Why? Proof of Concept exploit, CVSS 8.6
SNYK-JS-UNDICI-6252336
Why? Proof of Concept exploit, CVSS 8.6
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: nuxt
-
3.10.3 - 2024-02-22
- nuxt: Respect
- nuxt: Bypass browser cache when fetching app build id (#25813)
- nuxt: In dev, don't link
- nuxt: Pass
- nuxt: Mark internal island components with
- nuxt: Use
- nuxt: Add missing type for
- nuxt: Handle
- nuxt: Set
- Enable more blocks for twoslash (#25830)
- Remove
- Replace
- Fix incorrect wording (#25902)
- Use
- Restore environment back to development (3f92cf04d)
- Unpin vite version 🙈 (d326e054d)
- nuxt: Use Exclude rather than Omit (3fc4231d3)
- Typecheck code samples in docs (#25777)
- Update link to stackblitz mcve page (59dd5fd93)
- Daniel Roe (@ danielroe)
- Mateusz Kulpa (@ mateuszkulpa)
- Jonathan Walters (@ Chalks)
- Josh Layton (@ jl8n)
- Julien Huang (@ huang-julien)
- Damian Głowala (@ DamianGlowala)
- Florent Delerue (@ Flosciante)
- Alexander Lichter (@ manniL)
- Anthony Fu (@ antfu)
- OnlyWick (@ OnlyWick)
- Michał Zarach (@ michalzaq12)
- Miha Sedej (@ tresko)
-
3.10.2 - 2024-02-14
- nuxt: Export
- nuxt: Allow prefetching urls with query string (#25658)
- nuxt: Remove undefined keys in route object (#25667)
- vite: Treat
- nuxt: Don't check for layout/page with
- vite: Strip query strings for style chunk filenames (#25764)
- nuxt: Inline entry styles before component styles (#25749)
- vite: Optimise layer dependencies with vite (#25752)
- nuxt: Don't add extra
- schema: Use
- nuxt: Only warn for
- kit: Don't mutate existing component entry when overriding (#25786)
- Fix typo in
- Add quotes to clarify what site title is in example (#25669)
- Enable twoslash for some code snippets (#25679)
- Add prepend option docs for
- Extend auto-scanned layer directories (#25720)
- Improve wording in seo docs (#25692)
- Add how to debug nuxt with node inspector (#25731)
-
<script setup> changed to <script setup lang="ts"> ([#25750](https://snyk.io/redirect/github//pull/25750))
- Add missing export defaults for nuxt config (#25774)
- Add import statement for mountSuspended (#25783)
- Pass
- schema: Add missing closing code block (#25641)
- Sam Blowes (@ blowsie)
- Daniel Roe (@ danielroe)
- yoshihirokurosaki (@ irishkooky)
- Eduardo San Martin Morote (@ posva)
- Mahdi Shah Abbasian (@ shahabbasian)
- João Carmona (@ jpsc)
- Naim Ahmed Shuvo (@ shuvo-me)
- Denis L (@ DenisLug)
- GJSSSS (@ gjssss)
- Anthony Fu (@ antfu)
- Aman Desai (@ amandesai01)
- Stephen Strange (@ byStrange)
- Žan Fras (@ frasza)
- Santiago Morales (@ Aleroms)
- Hendrik Heil (@ hendrikheil)
-
3.10.1 - 2024-02-05
-
3.10.0 - 2024-01-30
-
3.9.3 - 2024-01-17
- nuxt: Render stylesheets in dev for non-islands (#25243)
- nuxt: Don't set 2x
- nuxt: Don't share object between raw cookie and cookie ref (#25255)
- Corrects variable name used in comment (#25238)
- Deleted an extra character (#25248)
- Remove space before colon (#25251)
- Add separate suspense test suite (#22947)
- Danila Rodichkin (@ daniluk4000)
- Anthony Fu (@ antfu)
- Julien Huang (@ huang-julien)
- Mustafa60x (@ mustafa60x)
- Александр Дьяконов (@ Holiden)
- Flowern (@ FlorianWerndl)
- Daniel Roe (@ danielroe)
-
3.9.2 - 2024-01-16
-
3.9.1 - 2024-01-05
from nuxt GitHub release notes✅ Upgrading
As usual, our recommendation for upgrading is to run:
This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the vue and unjs ecosystems.
👉 Changelog
compare changes
🩹 Fixes
dedupeoption inuseFetch(#25815)cssfiles with?inlinequery (#25822)externaltonavigatein custom<NuxtLink>(#25887)@ __PURE__(#25842)setTimeoutbefore scrolling when navigating (#25817)headindefineNuxtComponent(#25410)undefinedpaths inresolveTrailingSlashBehavior(ba6a4132b)to.nameto be undefined rather than deleting entirely (4ca1ab7cf)📖 Documentation
.tsextension when adding compiled files (#25855)calloutto new components (#25897)🏡 Chore
nuxt.configto enable pages for docs typecheck (72a2e23cc)🤖 CI
❤️ Contributors
✅ Upgrading
As usual, our recommendation for upgrading is to run:
This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the vue and unjs ecosystems.
👉 Changelog
compare changes
🩹 Fixes
refreshCookie(#25635).pcssextension as a CSS extension (#25673)<ClientOnly>(#25714)baseURLon serveruseRequestURL(#25765)rootDir, notprocess.cwd, formodulesDir(#25766)useIdif attrs were not rendered (#25770)📖 Documentation
useAsyncDatadocs (#25644)addComponentsDir(#25683)eventtouseRuntimeConfig(#25788)🏡 Chore
❤️ Contributors
Read more
Read more
✅ Upgrading
As usual, our recommendation for upgrading is to run:
This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the vue and unjs ecosystems.
👉 Changelog
compare changes
🩹 Fixes
data-island-uidfor island children (#25245)📖 Documentation
✅ Tests
❤️ Contributors
Read more
Read more
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs