fix(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
@antfu/eslint-config	9.1.0 → 9.2.0			devDependencies	minor
@iconify-json/tabler	1.2.35 → 1.2.38			devDependencies	patch
@nuxt/content (source)	3.14.0 → 3.15.2			dependencies	minor
@​nuxt/icon	2.2.4 → 2.4.1			dependencies	minor
@nuxt/image (source)	2.0.0 → 2.1.0			dependencies	minor
@nuxtjs/i18n (source)	10.4.0 → 10.6.0			dependencies	minor
@nuxtjs/mdc	0.22.0 → 0.22.2			dependencies	patch
@takumi-rs/core (source)	1.7.0 → 1.8.7			devDependencies	minor
@unocss/eslint-plugin (source)	66.7.3 → 66.7.5			devDependencies	patch
@unocss/extractor-mdc (source)	66.7.3 → 66.7.5			devDependencies	patch
@unocss/nuxt (source)	66.7.3 → 66.7.5			devDependencies	patch
@unocss/preset-wind4 (source)	66.7.3 → 66.7.5			devDependencies	patch
@unocss/transformer-directives (source)	66.7.3 → 66.7.5			devDependencies	patch
@vueuse/core (source)	14.3.0 → 14.4.0			dependencies	minor
actions/checkout	v7.0.0 → v7.0.1			action	patch
actions/setup-node	v6.4.0 → v6.5.0			action	minor
csv-parse (source)	7.0.0 → 7.0.1			dependencies	patch	7.0.2
eslint (source)	10.6.0 → 10.8.0			dependencies	minor
nuxt (source)	4.4.8 → 4.5.1			dependencies	minor
nuxt-og-image (source)	6.5.2 → 6.7.5			devDependencies	minor
pnpm (source)	11.9.0 → 11.18.0			packageManager	minor
pnpm/action-setup	v6.0.9 → v6.0.10			action	patch
satori	0.26.0 → 0.29.0			dependencies	minor
unocss (source)	66.7.3 → 66.7.5			devDependencies	patch
vue (source)	3.5.39 → 3.5.40			dependencies	patch
vue-router (source)	5.1.0 → 5.2.0			dependencies	minor
vue-tsc (source)	3.3.5 → 3.3.9			devDependencies	patch

---

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v9.2.0

Compare Source

   🚀 Features

• Update plugins  -  by @​antfu (9ff1e)

   🐞 Bug Fixes

• Add scripts-info in package.json sorting  -  by @​antfu (09680)
• deps: Accept eslint-plugin-astro v2 to resolve unmet peer warning  -  by @​ycs77 in #​855 (5ada5)

    View changes on GitHub

nuxt/content (@​nuxt/content)

v3.15.2

Compare Source

Bug Fixes

• dev: ignore temporary files in content source paths (#​3784) (a019e70)
• security: reject SQL function calls in query WHERE clauses (#​3819) (847d523)

v3.15.1

Compare Source

Bug Fixes

• dev: preserve SQL hashes in HMR dumps (#​3816) (b6796e9)

v3.15.0

Compare Source

Features

• add explicit bun sqlite connector for Bun runtime deployments (#​3741) (92ac2ab)
• search: add type inference for extraFields (#​3714) (078491b)

Bug Fixes

• content: support validator detection with pnpm enableGlobalVirtualStore (#​3791) (6b2720b)
• hmr: update all matching collections when a file changes (#​3802) (06f8edb)
• search: softer heading-level boost curve and tuned defaults (#​3801) (00d25a5)
• vercel: use tmp directory to clone contents (#​3810) (793d59a)

nuxt/image (@​nuxt/image)

v2.1.0

Compare Source

v2.1.0 is the next minor release.

👀 Highlights

Nuxt Image 2.1 ships eight new image providers, a major upgrade to our image processing engine, and a bunch of fixes across existing providers.

🖼️ IPX v4

Under the hood, we've upgraded to IPX v4 which brings significant improvements:

• Smaller bundles: IPX is now ESM-only with reduced dependency size
• Stronger SVG security: SVG sanitization now always runs, regardless of optimization settings. This fixes a potential XSS vector where svgo: false would return untouched SVGs. The sanitizer now removes SMIL attribute injection, foreign content (<foreignObject>, <iframe>, etc.), and unsafe URIs across all elements
• New image modifiers: opacity, brightness, saturation, hue, lightness, autoorient, dilate, erode, clahe, and linear
• Better error messages: Invalid modifier arguments now return 400 errors with clear messages instead of cryptic 500s
• Custom URL parsing: IPX now supports custom URL formats via the parseURL option

🌐 New Providers

This release adds support for eight new image optimization services:

• Builder.io - Builder.io's Image API (#​2050)
• Cloudflare Images - Cloudflare's dedicated image service (#​2100)
• EdgeOne Pages - Tencent EdgeOne Pages (#​2173)
• Flyimg - Self-hosted image resizing (#​2125)
• imgproxy - Fast, secure image processing server (#​2117)
• Lorem Picsum - Placeholder images for development (#​2106)
• Supabase - Supabase Storage image transformations (#​2027)
• Umbraco - Umbraco CMS image cropper (#​2165)

🔧 Provider Improvements

• Directus: Added support for sharp transforms and a key modifier for named presets (#​2207)
• Sanity: Support for absolute URLs with automatic project/dataset extraction (#​2274), and a configurable baseURL for custom CDN setups (#​2273)
• AWS Amplify & Vercel: minimumCacheTTL is now configurable (#​2278)

📦 Type Exports

NuxtImgProps and NuxtPictureProps are now exported from the runtime, making it easier to type your own components that wrap <NuxtImg> or <NuxtPicture> (#​2115).

import type { NuxtImgProps, NuxtPictureProps } from '#image'

👉 Changelog

compare changes

🚀 Enhancements

• deps: migrate to ipx v4 (#​2094)
• provider: add EdgeOne Pages provider (#​2173)
• imgproxy: add provider (#​2117)
• directus: add sharp transforms & key modifier (#​2207)
• sanity: support absolute URLs with project and dataset extraction (#​2274)
• awsAmplify,vercel: make minimumCacheTTL configurable (#​2278)
• sanity: add configurable baseURL option to Sanity provider (#​2273)
• runtime: export Picture and Image props types (#​2115)
• umbraco: add image provider (#​2165)
• flyimg: add Flyimg built-in provider (#​2125)
• cloudflareimages: add new provider (#​2100)
• builderio: add Builder.io Image API provider (#​2050)
• picsum: add Lorem Picsum placeholder image provider (#​2106)
• supabase: add image provider (#​2027)

🩹 Fixes

• flyimg: encode all # characters in color values (137ee63)
• remove duplicated provider key in generated image options (#​2279)
• nuxt-picture: align preload link type with unhead v3 (#​2254)
• github: set max size of 460 (7e561f6)
• umbraco: shallow clone modifiers before modifying (237e480)
• cloudflare: add baseURL for urls with no operations (#​2162)
• nuxt-img: set imagesrcset preload when densities are set w/o sizes (#​2176)
• fastly: handle absolute URLs and merge preexisting query params (#​2140)
• ipx: merge user-defined runtimeConfig.ipx with defaults (#​2134)
• directus: add withoutEnlargement modifier type (#​2133)
• shopify: merge preexisting query params with modifiers (#​2135)
• reduce max-width breakpoint values by 1px (#​2132)
• netlifyImageCdn,netlifyLargeMedia: set netlify remote_images config (#​2086)
• deduplicate formats (#​2038)
• sanitise custom provider import names (#​2092)
• guard access from layer.config.image (23b8cef)
• bunny: merge query params with existing image src (#​2054)
• do not shadow custom provider types with builtins (#​2016)
• nuxt-picture: allow data-* in imgAttrs (#​2017)
• resolve public/ dir in relation to rootDir (3e07761)

📖 Documentation

• sanity: document baseURL option (6f59ab1)
• shopify: update NuxtImg syntax to use v-bind for modifiers (#​2277)
• update list of auto-detected providers (#​2147)
• add sharp cross-platform installation section (#​2142)
• add preload example for NuxtImg (#​2124)
• exempt patterns from cf _routes.json (#​2136)
• update placeholder attributes in <NuxtImg /> example (#​2074)
• add nuxt.care health badge (93de8a9)
• update docus and add mcp name (#​2080)
• reference from Vercel's Edge Network to Vercel's CDN for image optimization. (2deacc0)
• fix Nuxt badge icon (#​2049)
• update installation warning (#​2061)
• fix storyblok links (#​2046)
• add deno example (#​2012)

📦 Build

• deps: bump serialize-javascript from 7.0.4 to 7.0.5 (#​2249)
• deps: bump js-cookie from 3.0.5 to 3.0.7 (#​2248)
• deps: bump ws from 8.17.1 to 8.20.1 (#​2246)
• deps: bump h3 from 1.15.6 to 1.15.9 (#​2177)
• deps: bump h3 from 1.15.4 to 1.15.5 (#​2085)

🏡 Chore

• run module prepare in prepack (97d3758)
• move consola to dev dependencies (#​2275)
• migrate to pnpm v11 (#​2236)
• migrate resolutions to pnpm-workspace.yaml (9b80ce6)
• migrate npm badges and links to npmx.dev (fd87f7d)
• remove unused slot-related code from <NuxtPicture> (#​2145)
• update lint scripts in package.json (#​2139)
• remove deprecated github silent config (#​2026)
• revert pnpm trust policy and restore provenance action (13b88c1)
• update pnpm to 10.21 and enable trust policy (03b5ef4)

🤖 CI

• add workflow to comment on issues resolved in the latest release (e529f37)
• improve workflows (#​2288)
• migrate to uppt (#​2286)
• migrate agentscan-action to v2 (2f8b332)
• add agent-scan workflow to flag bot-authored PRs (23ee710)
• add merge group config (#​2137)
• rename workflow (777239c)
• avoid checkout for reproduction comment (a200dae)
• pin github actions to full-length commit shas (f60d0f7)
• unpin workflow (d1cb12b)
• try pinning (09e5efb)
• update var (402c729)
• use new shared dependency review workflow (906111c)

🎉 New Contributors

• venzil (@​q153877011)
• Vlad Z. (@​Nks)
• kheiner (@​kheiner)
• Berk Altıok (@​berkaltiok)
• 山吹色御守 (@​KazariEX)
• dependabot[bot] (@​dependabot[bot])
• Jens Morten Mikkelsen (@​jemomi)
• Bernhard Berger (@​bernhardberger)
• FKarstein (@​FKarstein)
• Sergiu Daniel Vidican (@​vsergiu93)
• Mohamed Fadl (@​FADL285)
• Martin Arce (@​divagueame)
• Iniubong Obonguko (@​codiini)
• Alireza Jahandideh (@​Youhan)
• Leon Hornig (@​Leon338)
• Dino Kupinic (@​Dino-Kupinic)
• wotan-allfather (@​wotan-allfather)
• Hugo (@​HugoRCD)
• IO-Fire (@​IO-Fire)
• Ingo Fabbri (@​infabo)
• Andrey Shevtsov (@​andreyshivas)
• Tony Costanzo (@​Patrity)

❤️ Contributors

• Daniel Roe (@​danielroe)
• Luke Nelson (@​luc122c)
• venzil (@​q153877011)
• Vlad Z. (@​Nks)
• kheiner (@​kheiner)
• Berk Altıok (@​berkaltiok)
• Nestor Vera (@​hacknug)
• Damian Głowala (@​DamianGlowala)
• 山吹色御守 (@​KazariEX)
• dependabot[bot] (@​dependabot[bot])
• Julien Huang (@​huang-julien)
• Jens Morten Mikkelsen (@​jemomi)
• Bernhard Berger (@​bernhardberger)
• FKarstein (@​FKarstein)
• Sergiu Daniel Vidican (@​vsergiu93)
• Mohamed Fadl (@​FADL285)
• Martin Arce (@​divagueame)
• Iniubong Obonguko (@​codiini)
• Alireza Jahandideh (@​Youhan)
• Leon Hornig (@​Leon338)
• Dino Kupinic (@​Dino-Kupinic)
• wotan-allfather (@​wotan-allfather)
• Hugo (@​HugoRCD)
• Sébastien Chopin (@​atinux)
• IO-Fire (@​IO-Fire)
• Ingo Fabbri (@​infabo)
• Maxime Pauvert (@​maximepvrt)
• Andrey Shevtsov (@​andreyshivas)
• Domenik Reitzner (@​dreitzner)
• Tony Costanzo (@​Patrity)
• abeer0 (@​iiio2)

nuxt-modules/i18n (@​nuxtjs/i18n)

v10.6.0

Compare Source

This changelog is generated by GitHub Releases

   🚀 Features

• Add experimental.optimizeMessageBundling option  -  by @​BobbieGoede in #​4068 (e7b6b)
• domain: Restrict locales to a subset of domains  -  by @​BobbieGoede in #​4085 (436c3)

   🐞 Bug Fixes

• Strip protocol when matching domain to host  -  by @​adamkasper, @​cursoragent and @​BobbieGoede in #​4064 (86a4d)
• Let vue-router encode switchLocalePath paths  -  by @​Vincentdevreede and @​BobbieGoede in #​4079 (03a8e)
• Load locale files that use Nuxt app composables in the app  -  by @​BobbieGoede in #​4102 (917c0)
• Keep params encoded when resolving a localized route by path  -  by @​BobbieGoede in #​4104 (a4eee)
• bundler:
  • Only precompile locale files the resource transform can re-emit  -  by @​BobbieGoede in #​4095 (930ff)
• domain:
  • Resolve locale availability from host membership  -  by @​BobbieGoede in #​4083 (ef5d3)
  • Resolve links for the host default locale under prefix_and_default  -  by @​BobbieGoede in #​4087 (de62b)
  • Resolve domain config the same way at build time and runtime  -  by @​BobbieGoede in #​4090 (b38b7)
  • Resolve the current origin from the host  -  by @​BobbieGoede in #​4103 (01d43)
  • Redirect detection to the domain serving the detected locale  -  by @​BobbieGoede in #​4105 (03eba)
  • Resolve a domain serving a single locale as its default  -  by @​BobbieGoede in #​4107 (efb9d)
  • Serve every locale on a host matching no configured domain  -  by @​BobbieGoede in #​4108 (187b3)
• hmr:
  • Use virtual module ids in import.meta.hot.accept() for vite 8  -  by @​sawa-ko and @​BobbieGoede in #​4065 (329db)
• routing:
  • Resolve the unprefixed locale per domain  -  by @​BobbieGoede in #​4082 (7a2db)
• seo:
  • Emit the same x-default on every domain  -  by @​BobbieGoede in #​4089 (45d95)
  • Warn when a domain setup has no locale to annotate as x-default  -  by @​BobbieGoede in #​4092 (e0706)
  • Resolve alternate and canonical links from one domain per locale  -  by @​BobbieGoede in #​4106 (21e1c)
• types:
  • Narrow locale head types to support useHeadSafe  -  by @​BobbieGoede in #​4062 (59e5d)
  • Annotate the logger so its declaration stays portable  -  by @​BobbieGoede in #​4094 (93754)
  • Prevent duplicate tsconfig paths for aliased deps  -  by @​BuuBux and Kamil Kras in #​4031 (d6930)

   🏎 Performance

• Skip client locale chunks when using messages endpoint  -  by @​BobbieGoede in #​4067 (7d762)
• Keep locale messages out of server build graphs  -  by @​BobbieGoede in #​4070 (640e1)
• Avoid copying locale messages per ssr request  -  by @​BobbieGoede in #​4071 (46ab4)
• Enable experimental.optimizeMessageBundling by default  -  by @​BobbieGoede in #​4073 (ba6f3)
• Keep message caching enabled for static locales in mixed projects  -  by @​BobbieGoede in #​4074 (d9d30)

    View changes on GitHub

v10.5.0

Compare Source

This changelog is generated by GitHub Releases

   🚀 Features

• Resolve route options from meta in all customRoutes modes  -  by @​BobbieGoede in #​4022 (39a8b)

   🐞 Bug Fixes

• UseRuntimeConfig type signature compatibility  -  by @​BobbieGoede (89b72)
• Derive route resources from route localization  -  by @​BobbieGoede in #​4047 (1d378)
• Skip localizing routeRules redirect stub pages  -  by @​BobbieGoede in #​4048 (af344)
• Locale head type compat  -  by @​BobbieGoede in #​4055 (ddeaa)
• Skip optimizing dynamic locale files  -  by @​BobbieGoede in #​4058 (c1187)
• Validate locale codes to ensure path segment safety  -  by @​BobbieGoede in #​4059 (45498)
• seo: Resolve canonical and og:url from the current locale domain  -  by @​BobbieGoede in #​4043 (2452a)

    View changes on GitHub

v10.4.1

Compare Source

This changelog is generated by GitHub Releases

   🐞 Bug Fixes

• NuxtLinkLocale custom and slot type definitions  -  by @​BobbieGoede in #​3995 (c139a)
• Resolve bundle.onlyLocales from the first layer that specifies it  -  by @​cernymatej and @​BobbieGoede in #​4012 (ffd13)
• HMR locale messages flash  -  by @​sawa-ko, Copilot Autofix powered by AI and @​BobbieGoede in #​4010 (91052)
• Skip detection redirect for routes with disabled localization  -  by @​BobbieGoede and Claude Opus 4.8 (1M context) in #​4021 (41631)
• Type locale detector file in server tsconfig  -  by @​BobbieGoede in #​4023 (89cf5)
• Route argument narrowing with experimental.typedPages  -  by @​BobbieGoede in #​4024 (8564e)
• Drop full-path <NuxtPage> keys for compactRoutes  -  by @​BobbieGoede in #​4025 (04c3b)
• Strip base URL from path in SSR locale redirect  -  by @​imlautaro, Claude Opus 4.8 (1M context) and @​BobbieGoede in #​4000 (3dc3b)
• Pass strictSeo.canonicalQueries to runtime head options  -  by @​BobbieGoede in #​4026 (5b284)
• Use domainLocales runtime config in localeProperties and locales  -  by @​BobbieGoede in #​4027 (31fbb)
• Derive og:locale:alternate from locale language tags with strictSeo  -  by @​BobbieGoede in #​4028 (fa199)
• compactRoutes: Strip stale locale param in by-path resolver  -  by @​Togetic in #​4015 (cc2f6)

    View changes on GitHub

nuxt-content/mdc (@​nuxtjs/mdc)

v0.22.2

Compare Source

compare changes

🩹 Fixes

• security: All attributes should validate (#​496)

❤️ Contributors

• Farnabaz farnabaz@gmail.com

v0.22.1

Compare Source

compare changes

🩹 Fixes

• Validate xlink:href and fix data:text/html prefix check in sanitizer (#​491)

📖 Documentation

• Clarify indentation when using components (#​482)

🏡 Chore

• Upgrade to pnpm 11 (#​486)
• Upgrade deps (4f01e82)

❤️ Contributors

• Farnabaz farnabaz@gmail.com
• Farnabaz 01 farnabaz.hand@gmail.com
• Dawit (@​oneminch)

kane50613/takumi (@​takumi-rs/core)

v1.8.7

Compare Source

Patch Changes

• 81c3678: Removed the seperate .d.ts file and updated tsdown to v0.22.3
• 9604fd7: Split package export types per import/require condition so CJS consumers resolve .d.cts
• Updated dependencies [9604fd7]
  • @​takumi-rs/helpers@​1.8.7

v1.8.6

Compare Source

Patch Changes

• @​takumi-rs/helpers@​1.8.6

v1.8.5

Compare Source

Patch Changes

• @​takumi-rs/helpers@​1.8.5

v1.8.4

Compare Source

Patch Changes

• @​takumi-rs/helpers@​1.8.4

v1.8.3

Compare Source

Patch Changes

• bfc6e55: Join rayon's worker threads on N-API teardown to fix a Windows crash (0xC0000005) when Node exits after rendering (#​763)
  • @​takumi-rs/helpers@​1.8.3

v1.8.2

Compare Source

Patch Changes

• @​takumi-rs/helpers@​1.8.2

v1.8.1

Compare Source

Patch Changes

• @​takumi-rs/helpers@​1.8.1

v1.8.0

Compare Source

Minor Changes

• ae2c9aa: Built with nightly Rust toolchain with panic=immediate-abort to reduce binary size

Patch Changes

• @​takumi-rs/helpers@​1.8.0

unocss/unocss (@​unocss/eslint-plugin)

v66.7.5

Compare Source

   🚀 Features

• preset-wind4: New rule for gap decorations  -  by @​zyyv in #​5241 (30fce)

   🐞 Bug Fixes

• transformer-compile-class: Update explicit shortcuts > Co-authored-by: LevDomasnih resolve #​4926, close #​5239  -  by @​zyyv in #​4926 and #​5239 (b5338)
• transformer-directive: Prehandle properties layer to skip apply css transform  -  by @​zyyv in #​5240 (67220)
• virtual-shared: Remove unnecessary envMode assignment in createContext close #​5243  -  by @​zyyv in #​5243 (d78d3)

    View changes on GitHub

v66.7.4

Compare Source

   🚀 Features

• Introduce @unocss/twoslash  -  by @​9romise and @​zyyv in #​5215 (e4a35)

   🐞 Bug Fixes

• astro: Skip wind3 reset injection when wind4 is detected  -  by @​zyyv in #​5236 (b48cc)

    View changes on GitHub

vueuse/vueuse (@​vueuse/core)

v14.4.0

Compare Source

   🚀 Features

• Update skills  -  by @​OrbisK in #​5491 (f4758)
• nuxt: Disable useColorMode auto import if @nuxtjs/color-mode is detected  -  by @​OrbisK in #​5476 (60687)
• nuxt: Generate nuxt module builder output layout  -  by @​userquin and @​43081j in #​5503 (40a1f)
• onStartTyping: Add more configurable options for onStartTyping  -  by @​LightQuanta and @​9romise in #​5395 (1f2b7)
• useDebounceFn: Add flush and isPending to filter system  -  by [@​pcoterecollective](https://redirect.github.com/pcoterecollect

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Asia/Taipei)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[rileychh-dokploy-coscup]

Dokploy Preview Deployment

Name	Status	Preview	Updated (UTC)
Nuxt	✅ Done	Preview URL	2026-08-03T12:36:16.021Z