chore(deps): update all non-major dependencies (3.x) #33472

renovate · 2025-10-13T06:32:07Z

This PR contains the following updates:

Package	Change	Type	Update
@babel/core (source)	`7.28.4` -> `7.28.5`	resolutions	patch
@babel/core (source)	`7.28.4` -> `7.28.5`	devDependencies	patch
@dxup/nuxt	`^0.1.0` -> `^0.2.1`	dependencies	minor
@eslint/markdown	`7.4.0` -> `7.5.1`	devDependencies	minor
@nuxt/cli (source)	`^3.29.3` -> `^3.30.0`	dependencies	minor
@nuxt/cli (source)	`3.29.3` -> `3.30.0`	resolutions	minor
@nuxt/cli (source)	`3.29.3` -> `3.30.0`	devDependencies	minor
@nuxt/eslint-config (source)	`1.9.0` -> `1.10.0`	devDependencies	minor
@nuxt/scripts	`0.12.1` -> `0.13.0`	devDependencies	minor
@nuxt/test-utils	`3.19.2` -> `3.20.1`	devDependencies	minor
@playwright/test (source)	`1.56.0` -> `1.56.1`	devDependencies	patch
@rollup/plugin-replace (source)	`^6.0.2` -> `^6.0.3`	dependencies	patch
@rspack/core (source)	`1.5.8` -> `1.6.1`	devDependencies	minor
@rspack/core (source)	`^1.5.8` -> `^1.6.1`	dependencies	minor
@typescript-eslint/parser (source)	`8.46.0` -> `8.46.3`	devDependencies	patch
@unhead/vue (source)	`2.0.14` -> `2.0.19`	devDependencies	patch
@unhead/vue (source)	`^2.0.14` -> `^2.0.19`	dependencies	patch
@unhead/vue (source)	`2.0.14` -> `2.0.19`	resolutions	patch
@unocss/reset (source)	`66.5.2` -> `66.5.4`	devDependencies	patch
@vue/language-core (source)	`3.1.1` -> `3.1.3`	devDependencies	patch
CodSpeedHQ/action	`v4.1.1` -> `v4.3.1`	action	minor
actions/dependency-review-action	`v4.8.0` -> `v4.8.1`	action	patch
c12	`3.3.0` -> `3.3.1`	devDependencies	patch
c12	`^3.3.0` -> `^3.3.1`	dependencies	patch
cssnano	`^7.1.1` -> `^7.1.2`	dependencies	patch
cssnano	`7.1.1` -> `7.1.2`	devDependencies	patch
devalue	`^5.3.2` -> `^5.4.2`	dependencies	minor
devalue	`5.3.2` -> `5.4.2`	devDependencies	minor
esbuild	`^0.25.10` -> `^0.25.12`	dependencies	patch
esbuild	`0.25.10` -> `0.25.12`	devDependencies	patch
eslint (source)	`9.37.0` -> `9.39.1`	devDependencies	minor
github/ai-moderator	`v1.1.2` -> `v1.1.4`	action	patch
github/codeql-action	`v4.30.8` -> `v4.31.2`	action	minor
happy-dom	`20.0.0` -> `20.0.10`	devDependencies	patch
html-validate (source)	`10.1.1` -> `10.3.0`	devDependencies	minor
knip (source)	`5.64.2` -> `5.67.1`	devDependencies	minor
magic-string	`^0.30.19` -> `^0.30.21`	dependencies	patch
magic-string	`0.30.19` -> `0.30.21`	resolutions	patch
magic-string	`0.30.19` -> `0.30.21`	devDependencies	patch
memfs	`^4.49.0` -> `^4.50.0`	dependencies	minor
memfs	`4.49.0` -> `4.50.0`	resolutions	minor
memfs	`4.49.0` -> `4.50.0`	devDependencies	minor
nitropack	`2.12.8` -> `2.12.9`	devDependencies	patch
nitropack	`^2.12.8` -> `^2.12.9`	dependencies	patch
ofetch	`1.4.1` -> `1.5.1`	devDependencies	minor
ofetch	`^1.4.1` -> `^1.5.1`	dependencies	minor
on-change	`^6.0.0` -> `^6.0.1`	dependencies	patch
oxc-minify (source)	`^0.94.0` -> `^0.96.0`	dependencies	minor
oxc-parser (source)	`^0.94.0` -> `^0.96.0`	dependencies	minor
oxc-transform (source)	`0.94.0` -> `0.96.0`	devDependencies	minor
oxc-transform (source)	`^0.94.0` -> `^0.96.0`	dependencies	minor
playwright-core (source)	`1.56.0` -> `1.56.1`	devDependencies	patch
pnpm (source)	`10.18.1` -> `10.20.0`	packageManager	minor
pnpm/action-setup	`v4.1.0` -> `v4.2.0`	action	minor
rhysd/actionlint	`1.7.7` -> `1.7.8`	docker	patch
rolldown (source)	`1.0.0-beta.42` -> `1.0.0-beta.47`	devDependencies	patch
rollup (source)	`4.52.4` -> `4.52.5`	devDependencies	patch
rollup (source)	`4.52.4` -> `4.52.5`	resolutions	patch
rollup-plugin-visualizer	`^6.0.4` -> `^6.0.5`	dependencies	patch
rollup-plugin-visualizer	`6.0.4` -> `6.0.5`	devDependencies	patch
semver	`7.7.2` -> `7.7.3`	devDependencies	patch
sherif	`1.6.1` -> `1.8.0`	devDependencies	minor
srvx (source)	`0.8.10` -> `0.9.5`	devDependencies	minor
std-env	`^3.9.0` -> `^3.10.0`	dependencies	minor
std-env	`3.9.0` -> `3.10.0`	devDependencies	minor
tinyexec	`1.0.1` -> `1.0.2`	devDependencies	patch
ts-checker-rspack-plugin	`^1.1.5` -> `^1.2.0`	dependencies	minor
unenv	`^2.0.0-rc.21` -> `^2.0.0-rc.24`	dependencies	patch
unimport	`5.4.1` -> `5.5.0`	devDependencies	minor
unimport	`^5.4.1` -> `^5.5.0`	dependencies	minor
unimport	`5.4.1` -> `5.5.0`	resolutions	minor
unocss (source)	`66.5.2` -> `66.5.4`	devDependencies	patch
unplugin-vue-router (source)	`^0.16.0` -> `^0.16.1`	dependencies	patch
unstorage (source)	`^1.17.1` -> `^1.17.2`	dependencies	patch
vite (source)	`^7.1.9` -> `^7.2.0`	dependencies	minor
vite (source)	`7.1.9` -> `7.2.0`	devDependencies	minor
vite (source)	`7.1.9` -> `7.2.0`	resolutions	minor
vue-tsc (source)	`3.1.1` -> `3.1.3`	devDependencies	patch

Release Notes

babel/babel (@babel/core)

`v7.28.5`

Compare Source

👓 Spec Compliance

babel-parser
- #17446 Allow Runtime Errors for Function Call Assignment Targets (@liuxingbaoyu)
babel-helper-validator-identifier
- #17501 fix: update identifier to unicode 17 (@fisker)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private
- #17534 Allow mixing private destructuring and rest (@CO0Ki3)
babel-parser
- #17521 Improve @babel/parser error typing (@JLHwung)
- #17491 fix: improve ts-only declaration parsing (@JLHwung)
babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
- #17519 fix: rest correctly returns plain array (@liuxingbaoyu)
babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
- #17503 Fix JSXIdentifier handling in isReferencedIdentifier (@JLHwung)
babel-traverse
- #17504 fix: ensure scope.push register in anonymous fn (@JLHwung)

🏠 Internal

babel-types
- #17494 Type checking babel-types scripts (@JLHwung)

🏃‍♀️ Performance

babel-core
- #17490 Faster finding of locations in buildCodeFrameError (@liuxingbaoyu)

KazariEX/dxup (@dxup/nuxt)

`v0.2.1`

Compare Source

`v0.2.0`

Compare Source

eslint/markdown (@eslint/markdown)

`v7.5.1`

Compare Source

Bug Fixes

false positives in no-reversed-media-syntax (#521) (bee20dd)
wrong location reporting in require-alt-text (#574) (bd69254)

`v7.5.0`

Compare Source

Features

handle CR and CRLF in no-missing-atx-heading-space (#555) (a869d98)

`v7.4.1`

Compare Source

Bug Fixes

handle CR in MarkdownSourceCode and Front Matter util (#554) (d1ad828)
handle CR in rules to follow CommonMark spec (#493) (20e88fe)

nuxt/cli (@nuxt/cli)

`v3.30.0`

Compare Source

3.30.0 is the next minor release.

👀 Highlights

The biggest change in this release is that we drop the built-in proxy server which we previously used.

this will mean that there's not a persistent connection, but it avoids a lot of the pain and potential problematic behaviour with having a proxy (either over socket, which can be flaky on different oses/runtimes - or over network, which is slow on windows).

we're also continuing to focus on performance, including dropping some dependencies, and migrating where possible to new unjs libraries like h3 v2 and srvx.

👉 Changelog

compare changes

🚀 Enhancements

dev: Experimentally support nitro v3 + inline h3 (11f8bf7)

🔥 Performance

info: Migrate from clipboardy to copy-paste (#1087)
preview: Inline port description (2b40c32)

🩹 Fixes

build,dev: Support showing nitro version (70dcc9b)
dev: Use proxy instead of web fetch handler (#1104)
module,upgrade: Allow adding module/nuxt version to pnpm workspace root (#1109)

💅 Refactors

analyze: Use srvx to serve analysis results (97d8172)
dev: Remove proxy server in favour of direct listening (#1105)

📦 Build

Use tsdown + isolated declarations (#1095)

🏡 Chore

Update knip config (c23e915)
Clean up playground console logging (3a92d84)
Add verifyDepsBeforeRun: install (#1106)
Update ignoredBuiltDependencies (#1107)

✅ Tests

Remove separate socket runtime tests (df17ad4)

❤️ Contributors

Damian Głowala (@DamianGlowala)
Daniel Roe (@danielroe)

nuxt/eslint (@nuxt/eslint-config)

`v1.10.0`

Compare Source

🚀 Features

Update deps - by @antfu (23b8b)

🐞 Bug Fixes

Update icon path - by @antfu (3f185)

View changes on GitHub

nuxt/scripts (@nuxt/scripts)

`v0.13.0`

Compare Source

🚨 Breaking Changes

Plausible script updates - by @harlan-zw in #534 (5c9a7)

🐞 Bug Fixes

DefaultScriptOptions idleTimeout config - by @harlan-zw (faf83)
google-maps: Mark peer dependency as optional - by @danshilm in #537 (3a860)

View changes on GitHub

`v0.12.2`

Compare Source

🐞 Bug Fixes

Databuddy types script registry - by @vachmara in #528 (f53dc)
Add missing autoImports - by @huang-julien in #532 (41fc9)
gtm: Expose gtag globally - by @DanLDU and Dan Larrea in #524 (d43df)

View changes on GitHub

nuxt/test-utils (@nuxt/test-utils)

`v3.20.1`

Compare Source

microsoft/playwright (@playwright/test)

`v1.56.1`

Compare Source

Highlights

#37871 chore: allow local-network-access permission in chromium
#37891 fix(agents): remove workspaceFolder ref from vscode mcp
#37759 chore: rename agents to test agents
#37757 chore(mcp): fallback to cwd when resolving test config

Browser Versions

Chromium 141.0.7390.37
Mozilla Firefox 142.0.1
WebKit 26.0

rollup/plugins (@rollup/plugin-replace)

`v6.0.3`

2025-10-29

Bugfixes

fix: update delimiters to respect valid js identifier chars (#1938)

web-infra-dev/rspack (@rspack/core)

`v1.6.1`

Compare Source

`v1.6.0`

Compare Source

🎉 See Announcing Rspack 1.6 for more details.

What's Changed

Performance Improvements ⚡

perf(browser): minor performance optimization for @rspack/browser by @CPunisher in #11795
perf(swc_plugin_import): replace handlebars with custom template engine by @chenjiahan in #11852
perf(cli): switch to cac and refactor code by @chenjiahan in #11893
perf: replace graceful-fs with node:fs by @chenjiahan in #11894
perf: remove JS side config validation by @chenjiahan in #11897
perf(core): adjust default_blocking_threads to 4 in linux with slower fs by @hardfist in #11908
perf: add support for module.unsafeCache configuration by @SyMind in #11898
perf: don't drop rust compiler instance in non-watch mode by @hardfist in #11920
perf: move crypto imports to lazy require calls by @chenjiahan in #11930
perf: replace node:assert with explicit error checks by @chenjiahan in #11928
perf(cli): replace colorette with picocolors by @chenjiahan in #11932
perf: lazy load node:worker_threads to improve startup time by @chenjiahan in #11931
perf(cli): simplify ESM file detection by @chenjiahan in #11946
perf: use ustr for resource_identifier to avoid multiple copies by dependencies by @JSerFeng in #12036

New Features 🎉

feat(mf): runtimePlugins support pass params by @2heal1 in #11818
feat(browser): support modules in BrowserRequirePlugin by @CPunisher in #11822
feat(mf): support lazy compilation by @2heal1 in #11779
feat: enable lazy barrel by default by @ahabhgk in #11841
feat: rslib supports add shims for js/esm by @JSerFeng in #11840
feat: eval simple expression for enum member by @ahabhgk in #11859
feat: implement extractSourceMap option by @colinaaa in #11814
feat(esm): remove empty unneeded runtime chunks by @JSerFeng in #11892
feat(create-rspack): add type annotations to JS configs by @chenjiahan in #11896
feat: support defer import by @ahabhgk in #11871
feat: EsmLibraryPlugin supports preserveModules by @JSerFeng in #11921
feat: introduce allocative by @quininer in #11927
feat(browser): re-export memfs by @CPunisher in #11942
feat: handle renamed webpack_require by compatibility plugin by @JSerFeng in #11975
feat(browser): support CORS worker and custom wasm url by @CPunisher in #11996
feat(create-rspack): add AGENTS.md by @chenjiahan in #12002
feat: if no commonjs specific syntax detected, treat module as esm by @JSerFeng in #12008
feat: support ignoreList option in SourceMapDevToolPlugin by @SyMind in #12029
feat: EsmLibraryPlugin can override invalid user config by @JSerFeng in #12028

Bug Fixes 🐞

fix(loader-runner): add missing break statements in switch cases by @chenjiahan in #11794
fix: revert "fix: remove serde feature o

bolt-new-by-stackblitz · 2025-10-13T06:32:12Z

Run & review this pull request in StackBlitz Codeflow.

codspeed-hq · 2025-10-13T06:50:39Z

CodSpeed Performance Report

Merging #33472 will degrade performances by 10.39%

_{Comparing renovate/3.x-all-minor-patch (0d71334) with 3.x (0b077f8)}

Summary

⚡ 1 improvement
❌ 1 regression
✅ 8 untouched

⚠️ Please fix the performance issues or acknowledge them on CodSpeed.

Benchmarks breakdown

	Benchmark	`BASE`	`HEAD`	Change
⚡	`loadNuxtConfig in the empty directory`	26.3 ms	19.3 ms	+36.46%
❌	`writeTypes in the basic-types fixture`	65.5 ms	73.1 ms	-10.39%

pkg-pr-new · 2025-10-13T07:05:15Z

Open in StackBlitz

@nuxt/kit

npm i https://pkg.pr.new/@nuxt/kit@33472

nuxt

npm i https://pkg.pr.new/nuxt@33472

@nuxt/rspack-builder

npm i https://pkg.pr.new/@nuxt/rspack-builder@33472

@nuxt/schema

npm i https://pkg.pr.new/@nuxt/schema@33472

@nuxt/vite-builder

npm i https://pkg.pr.new/@nuxt/vite-builder@33472

@nuxt/webpack-builder

npm i https://pkg.pr.new/@nuxt/webpack-builder@33472

commit: 0d71334

socket-security · 2025-10-19T22:38:42Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	Maintenance
cssnano@7.1.1 ⏵ 7.1.2				⁺⁶
@typescript-eslint/parser@8.46.0 ⏵ 8.46.3				⁺¹
@nuxt/cli@3.29.3 ⏵ 3.30.0	⁺¹		⁺¹	⁺²
esbuild@0.25.11 ⏵ 0.25.12
@unocss/reset@66.5.2 ⏵ 66.5.4				⁺²
@nuxt/test-utils@3.19.2 ⏵ 3.20.1	⁺¹		⁺¹	⁺⁸
@nuxt/eslint-config@1.9.0 ⏵ 1.10.0				⁺²
@babel/core@7.28.4 ⏵ 7.28.5
@rspack/core@1.5.8 ⏵ 1.6.1	⁺¹			⁺²
happy-dom@20.0.0 ⏵ 20.0.10	⁺¹	⁺⁷⁵	⁺¹	⁺¹
@rollup/plugin-replace@6.0.3
@dxup/nuxt@0.1.1 ⏵ 0.2.1			⁺¹²	⁺²
devalue@5.3.2 ⏵ 5.4.2	⁺¹		⁺¹
@nuxt/scripts@0.12.1 ⏵ 0.13.0	^-2		^-7	^-5
@unhead/vue@2.0.14 ⏵ 2.0.19	⁺¹		⁺²⁷
html-validate@10.1.1 ⏵ 10.3.0	^-6			^-5
@eslint/markdown@7.4.0 ⏵ 7.5.1				⁺⁴
eslint@9.37.0 ⏵ 9.39.1	⁺¹			⁺¹
@playwright/test@1.56.0 ⏵ 1.56.1

View full report

renovate bot requested a review from danielroe as a code owner October 13, 2025 06:32

github-actions bot added 3.x chore labels Oct 13, 2025

renovate bot force-pushed the renovate/3.x-all-minor-patch branch 20 times, most recently from b874a4e to 8f3d08f Compare October 19, 2025 22:38

renovate bot force-pushed the renovate/3.x-all-minor-patch branch 3 times, most recently from 8f4a6fc to f69b979 Compare October 20, 2025 19:12

renovate bot force-pushed the renovate/3.x-all-minor-patch branch 19 times, most recently from 9f4a0cf to c420dbc Compare November 3, 2025 03:56

renovate bot force-pushed the renovate/3.x-all-minor-patch branch 9 times, most recently from 72a5624 to ce4cd8f Compare November 5, 2025 04:50

chore(deps): update all non-major dependencies

0d71334

renovate bot force-pushed the renovate/3.x-all-minor-patch branch from ce4cd8f to 0d71334 Compare November 5, 2025 09:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): update all non-major dependencies (3.x) #33472

chore(deps): update all non-major dependencies (3.x) #33472

renovate bot commented Oct 13, 2025 •

edited

Loading

Uh oh!

bolt-new-by-stackblitz bot commented Oct 13, 2025

Uh oh!

codspeed-hq bot commented Oct 13, 2025 •

edited

Loading

Uh oh!

pkg-pr-new bot commented Oct 13, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Oct 19, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

chore(deps): update all non-major dependencies (3.x) #33472

Are you sure you want to change the base?

chore(deps): update all non-major dependencies (3.x) #33472

Conversation

renovate bot commented Oct 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

Bug Fixes

Features

Bug Fixes

👀 Highlights

👉 Changelog

🚀 Enhancements

🔥 Performance

🩹 Fixes

💅 Refactors

📦 Build

🏡 Chore

✅ Tests

❤️ Contributors

🚀 Features

🐞 Bug Fixes

🚨 Breaking Changes

🐞 Bug Fixes

🐞 Bug Fixes

Highlights

Browser Versions

Bugfixes

🎉 See Announcing Rspack 1.6 for more details.

What's Changed

Performance Improvements ⚡

New Features 🎉

Bug Fixes 🐞

Uh oh!

bolt-new-by-stackblitz bot commented Oct 13, 2025

Uh oh!

codspeed-hq bot commented Oct 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merging #33472 will degrade performances by 10.39%

Summary

Benchmarks breakdown

Uh oh!

pkg-pr-new bot commented Oct 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Oct 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Oct 13, 2025 •

edited

Loading

codspeed-hq bot commented Oct 13, 2025 •

edited

Loading

pkg-pr-new bot commented Oct 13, 2025 •

edited

Loading

socket-security bot commented Oct 19, 2025 •

edited

Loading