[Snyk] Upgrade nuxt from 3.17.5 to 3.17.7 #308
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade nuxt from 3.17.5 to 3.17.7.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 2 versions ahead of your current version.
The recommended version was released a month ago.
Release notes
Package name: nuxt
-
3.17.7 - 2025-07-13
- nuxt: Safe-guard
- nuxt: Expose
- vite: Handle resolving string vite input (#32527)
- nuxt: Wrap only server components with island generic (#32540)
- vite: Ignore when client entry cannot be resolved (19a292f34)
- nuxt: Normalize segment catchall pattern before checking for parent (#32413)
- nuxt: Update warning message to warn against
- nuxt: Ensure
- nuxt: Scroll to anchor if present when changing page without saved position (#32376)
- nuxt: Handle
- Update fetch types (#32522)
- Clarify that runtime env variables must start with
- Fix key change behavior in
- Change return type of async data from
- Add section on custom hooks for Nuxt modules (#32586)
- Provide
- Move augmenting hook types in hooks page (#32595)
- Add section about module loading order (#32597)
- Reenable skipped unit tests (8fc9b9ee9)
- Update test snapshot for
- Improve page scanning test stability (84b96f3de)
- Pass timeZone in to
- Add more useAsyncData + useFetch tests (#32585)
- Avoid hard-coding async-data keys (bfca95118)
- Daniel Roe (@ danielroe)
- Julien Huang (@ huang-julien)
- abeer0 (@ iiio2)
- Bobbie Goede (@ BobbieGoede)
- Damian Głowala (@ DamianGlowala)
- Nestor Vera (@ hacknug)
- Ezra Ashenafi (@ Eazash)
- Mike Laumann Bellika (@ MikeBellika)
- Maxime Pauvert (@ maximepvrt)
- Chriest Yu (@ jcppman)
- Andrei Hudalla (@ paranoidPhantom)
- Sigrid Huemer (@ s1gr1d)
- xjccc (@ xjccc)
-
3.17.6 - 2025-07-01
- nuxt: Decrease if checks when prerendering (#32455)
- nuxt: Generate correct types for async data defaults based on
- nuxt: Reload at base URL in
- nuxt: Use rollup to calculate island component filenames (#32421)
- nuxt: Append
- nuxt: Ensure
- nuxt: Handle pure hash link clicks with
- nuxt: Skip external
- nuxt: Update component loader regexp for minified code (#32298)
- nuxt: Allow camelCase for lazy hydration attributes (#32297)
- nuxt: Respect
- kit: Do not double-urlify file urls when resolving schema (#32354)
- nuxt: Align scroll behavior with page transition completion (#32239)
- nuxt: Set
- nuxt: Lazily access runtimeConfig (#32428)
- vite: Migrate plugins internally to vite environments (#32461)
- Clarify where logging tag is displayed (#32440)
- Remove kit playground auto-import note (#32415)
- Remove webstorm warning (#32513)
- Migrate to
- Update the fetch
- Mention that
- Enhance documentation for Nuxt composables (#32218)
- Adjust wording to reduce confusion in lifecycle section (#32503)
- Improve useCookie example (367b85405)
- Capitalise title (#32426)
- Mention
- Update stackblitz reproduction link (6ab5bac66)
- Update copilot instructions (220439055)
- Rename deprecated vitest
- Remove space in URL in comment (#32394)
- Allow setting TAG on commandline (d387e07a3)
- nuxt: Add case for key only changes with
- Separate nuxt legacy runtime tests (#32481)
- Set correct base branch label (#32325)
- Mihailo Bursac (@ djixadin)
- Daniel Roe (@ danielroe)
- abeer0 (@ iiio2)
- 翠 (@ sapphi-red)
- Robin (@ OrbisK)
- Alex Liu (@ Mini-ghost)
- Damian Głowala (@ DamianGlowala)
- Julien Huang (@ huang-julien)
- Ibrahimm (@ Ibra-cesar)
- Peter Budai (@ peterbud)
- Ali Soueidan (@ lazercaveman)
- Vachmara (@ vachmara)
- xjccc (@ xjccc)
- Paul Melero (@ paulmelero)
- David Stack (@ davidstackio)
-
3.17.5 - 2025-06-03
- nuxt: Replace remaining instance of
- nuxt: Export
- nuxt: Remove unneeded pattern from regexp (2954c092c)
- nuxt: Ensure
- nuxt: Wrap slot with
- kit: Ensure template filename uses safe patterns (4372b24dd)
- nuxt: Access
- nuxt: Make patterns relative to
- nuxt: Return non-existent route component in RouteProvider (#32266)
- nuxt: Use single
- vite: Use arrow functions in dynamic imports (#32285)
- webpack: Use plugin for rollup-compatible dynamic imports (#32281)
- Update
- Narrow link to just middleware (#32203)
- Use optional chaining in error example (#32214)
- Give example of using
- Recommend
- Fix typos (#30413)
- Add props to special metadata (#29708)
- Fix wrong
- Update upgrade guide + roadmap (0040ee5e7)
- nuxt: Ensure cache is typed (33df20d17)
- Upgrade webpack dependencies separately (444d60936)
- Apply lint fixes (221ce99eb)
- Add missing dependency (720170dea)
- Add regression test for useAsyncData + transition (29f7c8cb4)
- Ensure builder tests run sequentially (defa32829)
- Daniel Roe (@ danielroe)
- Julien Huang (@ huang-julien)
- Hugo Richard (@ HugoRCD)
- mxmxmmgg (@ mxmxmmgg)
- xjccc (@ xjccc)
- Horu (@ HigherOrderLogic)
- Baptiste Leproux (@ larbish)
- Phojie Rengel (@ phojie)
- duolaameng (@ 1411430556)
- David Stack (@ davidstackio)
from nuxt GitHub release notes✅ Upgrading
Our recommendation for upgrading is to run:
This will deduplicate your lockfile as well, and help ensure that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.
👉 Changelog
compare changes
🩹 Fixes
extraPageMetaExtractionKeys(#32510)loadBuildererror cause (8f13ce3c2)nullvalues (c1b83eab5)semver.satisfiesreturns true for pre-release versions (#32574)execute being passed towatch` (#32591)📖 Documentation
NUXT_(#32223)useAsyncDataanduseFetchmigration (#32560)undefinedtonullin v3 docs (#32562)asynckeyword (#32587)✅ Tests
generateTypes(c0855439d)<NuxtTime>test (#32558)❤️ Contributors
✅ Upgrading
Our recommendation for upgrading is to run:
This will deduplicate your lockfile as well, and help ensure that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.
👉 Changelog
compare changes
🔥 Performance
🩹 Fixes
nuxt.config(#32324)nuxt:chunk-reload-immediate(#32382)set-cookieheaders in error handler (#32483)asyncDataruns if changing key while fetcher is running (#32466)navigateTo(#32393)<NuxtLink>'s custom on click handler (#32499)inheritAttrs: falseincreateClientOnlyfn (#32323)output.generatedCode.symbolsfor nitro build (#32358)💅 Refactors
📖 Documentation
h3js(#32243)clearfunction description (#32287)defineNuxtPluginfunction documentation (#32328)<NuxtLink>encodes query params (#32361)bun.lockfor lockfile (#32427)🏡 Chore
workspacetoprojects(#32388)✅ Tests
immediate: false(#32473)🤖 CI
❤️ Contributors
✅ Upgrading
Our recommendation for upgrading is to run:
This will deduplicate your lockfile as well, and help ensure that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.
👉 Changelog
compare changes
🔥 Performance
globby(#31688)🩹 Fixes
useScriptRybbitAnalyticsfrom script stubs (d275ae1a0)appConfigsources are not duplicated (#32216)h()in ClientOnly (#30664)asyncDatastate from nuxt app instance (#32232)srcDirinbuildCache(#32260)asyncDatawatcher (#32247)📖 Documentation
addRouteMiddlewarepath in example (#32171)--env-file(29f6392cd)nuxtcommand consistently (#32237)alertwithwarningin/guide/pages(#32270)📦 Build
🏡 Chore
✅ Tests
❤️ Contributors
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: