chore(deps): update all non-major dependencies (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
nuxt (source)	4.1.2 -> 4.1.3
publint (source)	0.3.13 -> 0.3.15
vite (source)	7.1.11 -> 7.1.12

---

Release Notes

nuxt/nuxt (nuxt)

v4.1.3

Compare Source

4.1.3 is a regularly scheduled patch release.

✅ Upgrading

Our recommendation for upgrading is to run:

npx nuxt upgrade --dedupe

This will deduplicate your lockfile as well, and help ensure that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.

👉 Changelog

compare changes

🔥 Performance

• vite: Use rolldown's replace plugin when applicable (#​33258)

🩹 Fixes

• kit: Add default values when adding type references in prepare:types hook (#​33239)
• nuxt: Augment app config in server context (#​33287)
• nuxt: Make lazy component types compatible with h (#​33046)
• vite: Deduplicate inlined server style chunks (#​33308)
• nuxt: Support head option on useHead (#​33318)
• nuxt: Do not relativise importmap if cdnURL is set (#​33333)
• nuxt: Resolve aliases in imports.dirs (#​33334)
• nuxt: Add missing element/vnode props for <NuxtLink> (#​33335)
• nuxt: Do not generate server placeholder components (#​33345)
• nuxt: Dedupe generated component names (#​33346)
• webpack: Test watch instance before closing it (0e5a0a5a0)
• nuxt: Correctly handle island rendering error (#​33302)
• nuxt: Support v-slot:fallback longform syntax in <DevOnly> (#​33368)
• nuxt: Support typeFrom when generating auto-import type templates (#​33373)
• nuxt: Don't trigger scroll when changing trailing slash (#​33358)
• nuxt: Add stubs for new scripts from @nuxt/scripts (bed410d60)
• nuxt: Prevent duplicate execution on key change in useAsyncData (#​33325)
• nuxt: Make middleware _path property configurable for HMR (#​33379)
• nuxt: Handle non-immediate useAsyncData with different key on ssr (#​33341)

💅 Refactors

• nuxt: Improve implementation of error composables (#​33234)
• nuxt: Resolve path of typed-router.d.ts early for consistency (#​33285)
• nuxt: Move server references to nitro:prepare:types hook (#​33286)
• nuxt: Place filename into componentsIslandsTemplate definition (#​33394)
• nuxt,vite: Use environment-api compatible plugins (#​33403)

📖 Documentation

• Add 4.x prefix to all internal links (#​33264)
• Fix more links (#​33265)
• Update usage instructions for Windows users (#​33284)
• Update app config paths to use app/app.config.ts (#​33297)
• Remove d suffix in example (#​33298)
• Move directory structure to top-level (#​33299)
• Add information about useFetch reactivity (#​33317)
• Add more 4.x prefixes in urls (47ea684c7)
• Lint code samples within docs (#​33271)
• Remove duplicated documentation from nuxt.config page (b438d44e1)
• Remove docs for outdated asyncData configuration (3e4a999e6)
• Note prepare command NODE_ENV behavior (#​33330)
• Update nuxt command pages (#​33336)

🏡 Chore

• Temporarily disable link to github sponsors (7e5375390)
• Update markdownlint ignore (19fc9abbb)
• Migrate pnpm settings out of .npmrc (14514329b)
• Ignore errors from npmjs (50febbbba)
• Lint (09a16d9df)
• nuxt: Align global components indent (#​33340)
• Remove tea.yaml (5f567c79b)
• Remove todo comment as resolved (#​33389)

✅ Tests

• nuxt: Set locale to en for nuxt-time tests (#​33343)
• Double gotoPath timeout in CI (f1e5a2d4c)

🤖 CI

• Add provenance action to check for downgrades in provenance (5ada6861e)
• Pass commit sha when triggering ecosystem ci (399df6bab)

❤️ Contributors

• Daniel Roe (@​danielroe)
• 山吹色御守 (@​KazariEX)
• Julien Huang (@​huang-julien)
• Florian Heuberger (@​Flo0806)
• Ondrej Brendy (@​bandiasek)
• Octavio Araiza (@​8ctavio)
• Alex Liu (@​Mini-ghost)
• Bobbie Goede (@​BobbieGoede)
• abeer0 (@​iiio2)
• Harlan Wilton (@​harlan-zw)
• Alexander Lichter (@​TheAlexLichter)
• Sébastien Chopin (@​atinux)
• Ben Hong (@​bencodezen)
• Daniel Slepov (@​imslepov)
• Huseyn Guliyev (@​husayt)
• Hillary (@​hillaryke)

publint/publint (publint)

v0.3.15

Compare Source

Patch Changes

• Skip file existence checks when crawling subpath imports as they may be dev-only and not used after bundling or publish. This check may be improved in the future when publint can scan for files to see if the subpath imports are used. (0d72997)

• Handle exports["default"] and exports['default'] for CJS_WITH_ESMODULE_DEFAULT_EXPORT rule (8285f77)

v0.3.14

Compare Source

Patch Changes

• Add a new warning when an entrypoint is exported as CJS-only, has a default export, and has the __esModule marker. This setup has different interpretations by bundlers and runtimes, and implicit handling detection that may not be obvious for both package authors and users, hence it is discouraged. (#​201)

vitejs/vite (vite)

v7.1.12

Compare Source

Please refer to CHANGELOG.md for details.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: e99db01

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	nuxt@​4.1.2 ⏵ 4.1.3	+1			-2

View full report