Skip to content

chore(deps): bump the nuxt group across 1 directory with 2 updates - #180

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nuxt-1e26b692c0
Open

chore(deps): bump the nuxt group across 1 directory with 2 updates#180
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nuxt-1e26b692c0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the nuxt group with 2 updates in the / directory: @nuxt/image and nuxt.

Updates @nuxt/image from 2.0.0 to 2.1.0

Release notes

Sourced from @​nuxt/image's releases.

v2.1.0

v2.1.0 is the next minor release.

👀 Highlights

Nuxt Image 2.1 ships eight new image providers, a major upgrade to our image processing engine, and a bunch of fixes across existing providers.

🖼️ IPX v4

Under the hood, we've upgraded to IPX v4 which brings significant improvements:

  • Smaller bundles: IPX is now ESM-only with reduced dependency size
  • Stronger SVG security: SVG sanitization now always runs, regardless of optimization settings. This fixes a potential XSS vector where svgo: false would return untouched SVGs. The sanitizer now removes SMIL attribute injection, foreign content (<foreignObject>, <iframe>, etc.), and unsafe URIs across all elements
  • New image modifiers: opacity, brightness, saturation, hue, lightness, autoorient, dilate, erode, clahe, and linear
  • Better error messages: Invalid modifier arguments now return 400 errors with clear messages instead of cryptic 500s
  • Custom URL parsing: IPX now supports custom URL formats via the parseURL option

🌐 New Providers

This release adds support for eight new image optimization services:

🔧 Provider Improvements

  • Directus: Added support for sharp transforms and a key modifier for named presets (#2207)
  • Sanity: Support for absolute URLs with automatic project/dataset extraction (#2274), and a configurable baseURL for custom CDN setups (#2273)
  • AWS Amplify & Vercel: minimumCacheTTL is now configurable (#2278)

📦 Type Exports

NuxtImgProps and NuxtPictureProps are now exported from the runtime, making it easier to type your own components that wrap <NuxtImg> or <NuxtPicture> (#2115).

import type { NuxtImgProps, NuxtPictureProps } from '#image'

👉 Changelog

compare changes

🚀 Enhancements

... (truncated)

Commits
  • 05758b6 v2.1.0
  • 97d3758 chore: run module prepare in prepack
  • e529f37 ci: add workflow to comment on issues resolved in the latest release
  • 64b96c1 feat(deps): migrate to ipx v4 (#2094)
  • 100bed3 chore(deps): update nuxt framework to ^4.5.1 (#2282)
  • a670c04 chore(deps): update all non-major dependencies (#2267)
  • d875d84 chore(deps): update dependency @​noble/hashes to v2 (#2290)
  • a1500e6 ci: improve workflows (#2288)
  • 6f59ab1 docs(sanity): document baseURL option
  • 137ee63 fix(flyimg): encode all # characters in color values
  • Additional commits viewable in compare view

Updates nuxt from 4.4.8 to 4.5.2

Release notes

Sourced from nuxt's releases.

v4.5.2

4.5.2 is the next patch release.

👉 Changelog

compare changes

🔥 Performance

  • nuxt,kit: Skip rewriting unchanged generated files (#35902)
  • kit,nuxt: Use lazy imports to improve parsing speed (#35901)
  • vite: Skip html entry probes in bare-import resolver (#35907)
  • nuxt: Reuse app and component scans for unchanged structures (#35912)

🩹 Fixes

  • vite: Resolve client manifest path from resolved config (#35883)
  • nuxt: Use client-side navigation for links inside islands (#35806)
  • nuxt: Generate types for route params defined with definePageMeta (#35857)
  • nuxt: Serialize island payloads for components with underscores in keys (#35807)
  • nitro: Dedupe island renders when prerendering (#35835)
  • nuxt: Drop prefetch hints for never-hydrated chunks (#35812)
  • vite: Use same asset filenames for worker builds (#35866)
  • nitro: Reject non-object island props (#35867)
  • nuxt: Support options api in v-for islands transform (#35877)
  • nuxt: Improve page meta extraction + performance (#35869)
  • nuxt: Set build outputs when restoring vue cache (#35895)
  • kit: Honour nested apply and applyToEnvironment in vite wrapper (#35899)
  • nuxt: Re-check for preview mode after prerendered page hydration (#35886)
  • kit,nuxt,vite: Handle missed chokidar watch events (#35887)
  • nuxt: Settle asyncData status when bailing (#35908)
  • kit: Clone resolved config with klona rather than klona/full (#35914)
  • kit: Honour nested plugins' enforce in vite wrapper (#35916)
  • nuxt: Collect build cache once build outputs are final (#35929)
  • vite: Resolve vite env api sourcemaps in vite-node (#35758)
  • nuxt: Don't warn about missing <NuxtPage> on nav + with slot (#35948)
  • kit: Prepend vite environment wrapper plugin when prepend is set (#35942)
  • nuxt: Depend on rolldown as a peer to reuse vite's copy (3fda97f60)
  • nitro: Define import.meta.test for server code (#35987)
  • nuxt: Match route rules against decoded paths (9123ed850)

💅 Refactors

  • nuxt: Use vue-component-type-helpers instead of locally maintained helpers (#35840)
  • nuxt: Use isReferenceIdentifier in page-meta plugin (#35882)

📖 Documentation

  • Sync mcp server page with live tools and providers (#35856)
  • Add server components guide and mostly-static site recipe (#35778)
  • Minor changes (#33479)
  • Add accessible routing guide (#34796)
  • Update testing guide to test-utils v4.1.0 (#35873)
  • Update .env provider reference from dotenv to c12 (#35911)
  • Add note to avoid using defineVitestProject in e2e tests (#35926)
  • Update roadmap (f6e6027fe)

📦 Build

  • ui-templates: Copy generated templates from resolved output dir (#35921)

... (truncated)

Commits
  • e2d3a39 v4.5.2
  • 9123ed8 fix(nuxt): match route rules against decoded paths
  • 2c38086 chore: bump nuxt rolldown peer dep to match unctx
  • 3fda97f fix(nuxt): depend on rolldown as a peer to reuse vite's copy
  • b960d36 refactor(nuxt): use isReferenceIdentifier in page-meta plugin (#35882)
  • 1f52b61 fix(nuxt): don't warn about missing \<NuxtPage> on nav + with slot (#35948)
  • c7604bd fix(nuxt): collect build cache once build outputs are final (#35929)
  • ba4fc0a perf(nuxt): reuse app and component scans for unchanged structures (#35912)
  • d7f5f07 fix(nuxt): settle asyncData status when bailing (#35908)
  • 2ca27f1 perf(kit,nuxt): use lazy imports to improve parsing speed (#35901)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 3, 2026
Bumps the nuxt group with 2 updates in the / directory: [@nuxt/image](https://github.com/nuxt/image) and [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt).


Updates `@nuxt/image` from 2.0.0 to 2.1.0
- [Release notes](https://github.com/nuxt/image/releases)
- [Changelog](https://github.com/nuxt/image/blob/main/CHANGELOG.md)
- [Commits](nuxt/image@v2.0.0...v2.1.0)

Updates `nuxt` from 4.4.8 to 4.5.2
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v4.5.2/packages/nuxt)

---
updated-dependencies:
- dependency-name: "@nuxt/image"
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuxt
- dependency-name: nuxt
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuxt
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/nuxt-1e26b692c0 branch from 42e0e8e to 1d4276f Compare August 13, 2026 22:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants