Skip to content

chore(deps): update all non-major dependencies - #201

Merged
romhml merged 1 commit into
mainfrom
renovate/all-minor-patch
Jul 25, 2026
Merged

chore(deps): update all non-major dependencies#201
romhml merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jul 20, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@iconify-json/lucide ^1.2.116^1.2.119 age confidence devDependencies patch
@iconify-json/lucide ^1.2.116^1.2.119 age confidence dependencies patch
@iconify-json/simple-icons ^1.2.89^1.2.91 age confidence dependencies patch
@iconify-json/vscode-icons ^1.2.66^1.2.67 age confidence dependencies patch
@nuxt/content (source) ^3.15.0^3.15.2 age confidence dependencies patch
@nuxt/devtools-kit (source) 4.0.0-alpha.74.0.0-alpha.9 age confidence dependencies patch
@nuxt/module-builder ^1.0.2^1.0.3 age confidence devDependencies patch
@nuxt/ui (source) ^4.8.3^4.10.0 age confidence pnpm.catalog.default minor
@nuxthub/core (source) 0.10.70.10.8 age confidence dependencies patch
@takumi-rs/core (source) 2.0.0-rc.162.4.2 age confidence dependencies minor
@takumi-rs/wasm 2.0.0-rc.162.4.2 age confidence dependencies minor
@types/supertest (source) ^7.2.0^7.2.1 age confidence devDependencies patch
@vitejs/plugin-vue (source) ^6.0.7^6.0.8 age confidence devDependencies patch
@vue/compiler-sfc (source) ^3.5.39^3.5.40 age confidence dependencies patch
@vue/language-core (source) ^3.3.7^3.3.8 age confidence dependencies patch
fuse.js (source) ^7.4.2^7.5.0 age confidence dependencies minor
json-editor-vue ^0.18.1^0.19.1 age confidence dependencies minor
node 2424.18.0 age confidence uses-with minor
nuxt-og-image (source) ^6.7.2^6.7.4 age confidence dependencies patch
oxc-parser (source) ^0.139.0^0.141.0 age confidence dependencies minor
prettier (source) ^3.9.5^3.9.6 age confidence dependencies patch
vue-component-meta (source) 3.3.73.3.8 age confidence dependencies patch
vue-router (source) ^5.1.0^5.2.0 age confidence dependencies minor
wrangler (source) ^4.110.0^4.114.0 age confidence devDependencies minor

Release Notes

nuxt/content (@​nuxt/content)

v3.15.2

Compare Source

Bug Fixes
  • dev: ignore temporary files in content source paths (#​3784) (a019e70)
  • security: reject SQL function calls in query WHERE clauses (#​3819) (847d523)

v3.15.1

Compare Source

Bug Fixes
nuxt/devtools (@​nuxt/devtools-kit)

v4.0.0-alpha.9

Compare Source

   🚨 Breaking Changes
   🚀 Features
    View changes on GitHub

v4.0.0-alpha.8

Compare Source

   🚨 Breaking Changes
   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
nuxt/module-builder (@​nuxt/module-builder)

v1.0.3

Compare Source

v1.0.3 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes
  • update command defaults and descriptions (#​677)
📦 Build
🏡 Chore
  • migrate to pnpm v11 (#​738)
  • remove shamefully-hoist (#​580)
  • migrate resolutions/pnpm.overrides to pnpm-workspace.yaml (cfb45fb)
  • migrate npm badges and links to npmx.dev (afcf2fa)
  • revert pnpm trust policy and restore provenance action (aeb1d38)
  • update pnpm to 10.21 and enable trust policy (92eb2af)
✅ Tests
  • accept nuxt/app specifier for NuxtError in snapshot (809c89f)
  • update v4.5 error type as well (9412c91)
  • accept either #app or nuxt/app in generated declarations (#​727)
🤖 CI
  • use uppt release workflow (604d5b3)
  • add agent-scan workflow to flag bot-authored PRs (4442a14)
  • rename workflow (f7be1a6)
  • avoid checkout in reproduction (57e7ce9)
  • pin github actions to full-length commit shas (c3c8e72)
  • add provenance action to check for downgrades in provenance (d87d217)
  • run tests on node 20 (54c5f13)
🎉 New Contributors
❤️ Contributors
nuxt/ui (@​nuxt/ui)

v4.10.0

Compare Source

Features
Bug Fixes
  • AuthForm: track password visibility per field (#​6638) (0faeb92)
  • BlogPost/ChangelogVersion: format date in UTC to prevent hydration mismatch (#​6722) (fe5bb23)
  • Button: allow inline event handlers with non-void return types (#​6668) (269080a)
  • Carousel: prevent reset when plugin props use inline objects (f41d11e), closes #​6221
  • ChatMessages: re-evaluate streaming indicator on each render (#​6673) (5c986dd)
  • components: forward $attrs to root element when to prop is absent (#​6628) (d3b5f1d)
  • components: forward data-slot to component root (#​6643) (c9c5232)
  • components: respect prefers-reduced-motion in animations (#​6723) (f951529)
  • ContentNavigation: key items by identity to prevent leading icon flash (#​6640) (09fb52b)
  • defineShortcuts: add missing arrowdown to shiftable keys (#​6702) (2128414)
  • defineShortcuts: defer standalone shortcuts that prefix a chain (#​6703) (76ee176)
  • Editor: prevent suggestion menu blinking on keystroke (#​6712) (7e6d8b0)
  • FileUpload: add aria-disabled attribute when disabled (#​6653) (c3b2996)
  • inertia: make useRoute().fullPath reactive across navigations (#​6696) (c256997)
  • Link: apply rel prop to internal links (#​6677) (276302e)
  • Link: fall back to original path when localePath fails (#​6637) (906e8fd)
  • LocaleSelect: add missing keys in emoji mapping (#​6629) (fab73ab)
  • module: avoid unhead v2-only hookOnce in colors plugin (#​6658) (e4ca579)
  • SelectMenu/InputMenu: only re-highlight first item with create-item (#​6689) (a71dece)
  • Separator: forward fall-through attributes to root (#​6641) (88baabc)
  • theme: use logical properties for RTL (#​6724) (3179012)
  • types: type prose components in app config (#​6711) (d56e39a)
  • useComponentProps: let app config defaultVariants override withDefaults (#​6686) (f5e58fb)
  • useFileUpload: keep dropzone type filter reactive to accept (#​6699) (000aba4)
  • useResizable: recover from corrupted persisted storage (#​6704) (4c60745)
  • useResizable: share resize logic between mouse and touch (#​6705) (730a54c)
  • useScrollspy: unobserve previous headings on update (#​6700) (5944067)
  • useToast: dedupe duplicate ids and handle max of 0 (#​6698) (71c623b)
Performance Improvements
  • components: drop the redundant inner in component extend (#​6647) (3bf1a92)
  • module: declare sideEffects for barrel tree-shaking (#​6729) (2cc2849)
  • types: decouple useComponentProps from the component-types barrel (#​6648) (6576fb8)
  • types: import cross-component types from source, not the barrel (#​6646) (7eab4bc)
  • vue: skip rewriting unchanged templates (#​6730) (14b6001)
nuxt-hub/core (@​nuxthub/core)

v0.10.8

Compare Source

compare changes

🩹 Fixes
  • blob: Use variable for vercel-blob dynamic import (#​810)
  • Resolve module add exports error (#​858)
  • docs: Align tab content in examples (fe2a97f)
  • sql: Use dialect-aware identifier quoting in CLI commands (#​889)
  • blob: Declare @​vercel/blob as optional peer dependency (#​904)
  • Resolve types for server auto-imports (#​905)
  • db: Avoid reusing hyperdrive postgres client (#​895)
  • db: Skip hyperdrive build migrations (#​868)
  • Pin pnpm to 11.7.0 to resolve CI self-installer crash (#​913)
  • db: Build schema with platform 'node' to silence UNRESOLVED_IMPORT warnings (#​912)
📖 Documentation
  • cloudflare: Clarify d1 deployment migrations (#​862)
  • Remove sqlite support warning for drizzle studio (#​909)
  • Document cloudflare workers builds d1 pattern (#​897)
  • Add cloudflare hyperdrive docs (#​875)
🤖 CI
  • Add mkdist as direct devDependency (#​903)
❤️ Contributors
kane50613/takumi (@​takumi-rs/core)

v2.4.2

Stop copying Uint8Array font and image inputs on the native binding

Buffer inputs were already passed to render tasks as ref-counted views, but Uint8Array inputs went through a full to_vec copy first. Both now cross into the async tasks zero-copy; only bare ArrayBuffer inputs still copy.

v2.4.0

Unify decoded resources behind one budgeted cache

Decoded images had a byte budget, but each SVG kept up to 32 rasterized pixmaps outside it, and every render re-parsed its stylesheets from scratch. ImageCache is now ResourceCache: SVG sources, their rasterized pixmaps, and parsed stylesheets all weigh against the same budget as decoded images. The default budget drops from 64 MiB to 16 MiB and becomes configurable — new Renderer({ cacheMaxBytes }) in the bindings, ResourceCache::new(max_bytes) in Rust, with 0 disabling caching. SVG rasters and parsed stylesheets now also survive across renders, so a server re-rendering the same template stops re-rasterizing and re-parsing per request. Rust callers: RenderOptions.stylesheet is now Arc<StyleSheet>; pass sheet.into().

Return an error for viewports too large to allocate

A viewport whose pixel buffer overflowed the backing allocation used to fall back to a 1x1 canvas, so the render produced a valid-looking but wrong tiny image with no error. The root canvas is now built through a fallible path that surfaces the allocation failure as an InvalidViewport error instead. Internal offscreen canvases keep their bounded sizes and are unaffected.

Blend animated WebP frames by default on the native binding

AnimatedWebpOptions::builder() left blend and dispose unset, so they fell back to false while the type's Default and the wasm backend use blend: true. Native animated WebP now alpha-blends frames over prior content like wasm does, so animations with partially transparent later frames render the same on both backends. The builder defaults are pinned to the Default values.

Convert native panics into catchable errors instead of aborting the process

The published napi artifacts are now built with unwind panics, so a Rust panic reached through malformed input surfaces as a JS error rather than killing the host process. Wasm keeps abort panics by design.

v2.3.0

Accept raw RGBA pixels as an image source

An image node's src takes { width, height, data, premultiplied? } and renders the pixels without decoding; the Bitmap JSX helper wraps it as an <img>.

v2.2.0

Extend the built-in Geist to weight 300

The embedded last-resort font covers wght 300..800 and trims unused stylistic sets, ending up slightly smaller than before.

Claim generic font families from the JS font API

Font descriptors accept generic (e.g. "monospace"), so stacks like Tailwind's font-mono resolve to registered fonts without naming the family.

v2.0.2

Accept a promise in the fonts option

fonts now takes Promise<FontLoader[]> as well as the plain list, so
googleFonts results pass straight through without await.

Extend the embedded font weight axis to 800

The embedded last-resort Geist subset now covers weights 400 to 800.

v2.0.0

Make the embedded font a true last resort

Both bindings now embed one font: a Latin Geist subset with a 400 to 700
weight axis (Geist Mono and Manrope are gone). It no longer claims the
sans-serif generic family and always sorts after registered fonts in
fallback selection, so generic families and unstyled text resolve to the fonts
you load. The new FontResource::last_resort marks a font's families to sort
after every normal registration.

Cap animation frame rate per format

Browsers clamp any animation frame of 10ms or less to 100ms, so a high frame
rate stalls instead of playing fast. write_animation now rejects a frame rate
above AnimationFormat::max_fps with the new AnimationFrameRateTooHigh error:
90 fps for WebP and APNG, 50 fps for GIF (centisecond delays). The napi and WASM
renderAnimation bindings surface the error.

Apply structured keyframes in renderAnimation

renderAnimation accepted a keyframes option but never registered it, so
structured keyframes animated with render yet stayed static in animations. It
now extends the stylesheet with them like the other entry points.

Fix buffer pool bucket capacity invariant

Release now buckets a buffer by the floor power of two its capacity guarantees,
and acquire_dirty reserves before set_len. A pooled buffer can no longer be
lengthened past its allocation.

Skip mask copies and per-pixel mask lookups in canvas fast paths

Borrow the combined constraint mask directly when it already matches the
canvas viewport instead of copying it per draw, and hoist mask lookups out of
the per-pixel blit loops. Output is unchanged.

Make subset-group font selection deterministic

Subsets registered under one logical family (via FontResource::subset_of) were kept
in registration order. Callers commonly register fonts concurrently, so that order — and
therefore which subset won for a codepoint covered by more than one (e.g. overlapping
weight subsets, where the loser is faux-bolded) — varied per process. Identical input
could render to different bytes run to run.

Subsets are now held in a BTreeSet, ordered by their family name, so expansion and
selection no longer depend on registration timing. Same input renders identically.

Shrink the published binaries

Size-optimize the layout and shaping crates that never run per pixel, cutting
the published WASM and native binary size.

Share the renderer facade between the napi and wasm bindings

The napi and wasm Renderer wrappers now build on a shared prepareRenderInput
helper in @takumi-rs/helpers/renderer, so their option types and render bodies
live in one place. Both backends check signal before and after resolving
fonts and images: on native, an already-aborted signal now throws before any
resource fetch.

Fix gradient stop snapping panic for oversized stop lists

Gradients with more color stops than the LUT can hold no longer panic. The
sample-index clamp and normalization passes stay within LUT bounds.

Reuse per-scene state across animation frames

Compute each scene's font snapshot once and share its image and stylesheet
handles across frames instead of re-snapshotting and deep-cloning the whole
option tree per frame. Frame output is unchanged.

Remove encodeFrames

Renderer.encodeFrames and its EncodeFramesOptions / AnimationFrameSource
types are gone. renderAnimation covers scene-based animation; pre-rendered
frame encoding had no callers.

Replace fetchResources/extractResourceUrls with prepareImages

@takumi-rs/helpers exports prepareImages({ node, sources?, fetchCache?, fetch?, timeout? }),
which collects a node tree's remote images and fetches the ones not already supplied. Pass a
fetchCache (a Map<string, Promise<ArrayBuffer>>, or any Map-like store) to coalesce
concurrent fetches of the same URL and reuse the bytes across renders; a failed fetch is
evicted so a later call retries.

The extractResourceUrls and fetchResources helpers are removed. The images render option
takes the same group form: { sources, fetchCache, fetch, timeout }.

Stream animation frames straight into the encoder

Add write_animation, which renders a timeline and feeds each frame to the
encoder as it arrives, holding one raw frame at a time instead of the whole
sequence. Both the napi and WASM renderAnimation bindings use it, so a high
frame rate or a long duration no longer exhausts memory. On native the WebP
encoder still runs frames in parallel, now over bounded chunks. The WASM WebP
encoder now merges runs of identical frames like the native one, so a static or
slow animation encodes and stores far less. The eager render_animation +
write_animated_* path stays for callers that want every frame at once.

Guard shadow and blur buffer sizing against overflow

Extreme blur radii could overflow the u32 shadow-buffer area and panic or
over-allocate. Sizing now uses saturating math and skips shadows above a 256
Mi-pixel budget.

Type keyframe declarations with csstype instead of DOM's CSSStyleDeclaration

KeyframesMap and KeyframeRule typed each keyframe's declarations as
Record<string, CSSStyleDeclaration>, requiring every CSS property on a single
offset and needing the DOM lib. Declarations are now typed with csstype's
Properties, an optional peer dependency, so a single offset only needs the
properties it sets and consumers without the DOM lib still typecheck.

Accept a bare URL string in fonts

fonts entries can now be a URL string, e.g. fonts: ["https://example.com/Inter.woff2"].
The bytes are fetched on demand and keyed by the URL; family name, weight, and style come
from the font file. The object form stays for overriding those. Adds fontFromUrl to
@takumi-rs/helpers.

Cap image decode dimensions and GIF frame volume

Decoders reject images beyond 8192x8192 (via image::Limits for PNG and JPEG,
dimension checks for WebP) and GIFs beyond a total-frame pixel budget, stopping
decode-bomb OOM.

kane50613/takumi (@​takumi-rs/wasm)

v2.3.0

Accept raw RGBA pixels as an image source

An image node's src takes { width, height, data, premultiplied? } and renders the pixels without decoding; the Bitmap JSX helper wraps it as an <img>.

v2.2.3

v2.2.2

Fix WebAssembly parsing on Bun/Nitro

Remove --all-features from the wasm-opt configuration to prevent generating experimental WebAssembly features (such as typed function references) that cause parsing errors (e.g. unexpected value type 100) in bundlers like Nitro/unwasm. Explicitly enable stable features (bulk-memory, mutable-globals, and sign-ext) instead.

v2.2.1

v2.2.0

Extend the built-in Geist to weight 300

The embedded last-resort font covers wght 300..800 and trims unused stylistic sets, ending up slightly smaller than before.

Claim generic font families from the JS font API

Font descriptors accept generic (e.g. "monospace"), so stacks like Tailwind's font-mono resolve to registered fonts without naming the family.

Support generic on googleFonts families

A family's generic (e.g. "monospace") propagates to every loaded coverage subset, so generic stacks like font-mono resolve to it.

v2.1.2

v2.1.1

Bundle the WebContainer fallback instead of @takumi-rs/wasm/auto

The node backend's fallback pulled in auto, whose conditions resolve against
the host bundler: Turbopack sets module and got Vite's ?url import of the
binary, failing the build. It now loads @takumi-rs/wasm/node, which every
bundler resolves, so only @takumi-rs/core needs externalizing.

Drop preact-render-to-string

An optional import no bundler can skip: webpack and Vite have no optional
import, so resolving it statically failed the build of every app that renders
React and never installed it. Preact trees now traverse natively. Components
calling a Preact hook no longer render — those hooks live on Preact's mangled
internals, which no dispatcher can stand in for.

Accept preact/compat elements in ReactElementLike

preact/compat types $$typeof as symbol | string, so its elements — and a
propless component's FunctionComponentElement<never> — no longer need a cast
to reach render.

v2.1.0

Fall back to the WASM backend in a WebContainer

Unbundled runs (e.g. nitro dev externalizing the package) resolve #backend
with Node's default conditions, so the native addon wins even when the host set
unwasm. The node backend now detects process.versions.webcontainer and loads
the WASM backend instead.

Resolve hooks without react-dom and render Preact trees

fromJsx installs a server-semantics hook dispatcher instead of falling back
to react-dom/server, handles context providers and consumers natively, and
renders Preact subtrees through preact-render-to-string. The react-dom
peer dependency is gone; preact and preact-render-to-string are new
optional peers.

v2.0.3

Select the WASM backend under the unwasm condition

Nitro sets unwasm on every preset, including Node, so takumi-js resolves
#backend to WASM there instead of the native addon a WebContainer host
(StackBlitz, CodeSandbox) can't load. Set exportConditions: ["!unwasm"] to keep
the native bindings on the Node preset.

v2.0.2

Accept a promise in the fonts option

fonts now takes Promise<FontLoader[]> as well as the plain list, so
googleFonts results pass straight through without await.

Extend the embedded font weight axis to 800

The embedded last-resort Geist subset now covers weights 400 to 800.

Accept a families array in googleFonts

Pass the families directly instead of wrapping them in an options object:
googleFonts(["Inter", "Noto Sans JP"]). The object form stays for text,
display, and the other options.

v2.0.1

Default the Google Fonts CSS cache

googleFonts now caches the CSS metadata process-wide when no cache is
passed, so callers who omit it still fetch each URL once. Pass your own Map
to scope the cache, or a fresh one per call to opt out.

v2.0.0

Make the embedded font a true last resort

Both bindings now embed one font: a Latin Geist subset with a 400 to 700
weight axis (Geist Mono and Manrope are gone). It no longer claims the
sans-serif generic family and always sorts after registered fonts in
fallback selection, so generic families and unstyled text resolve to the fonts
you load. The new FontResource::last_resort marks a font's families to sort
after every normal registration.

Cap animation frame rate per format

Browsers clamp any animation frame of 10ms or less to 100ms, so a high frame
rate stalls instead of playing fast. write_animation now rejects a frame rate
above AnimationFormat::max_fps with the new AnimationFrameRateTooHigh error:
90 fps for WebP and APNG, 50 fps for GIF (centisecond delays). The napi and WASM
renderAnimation bindings surface the error.

Apply structured keyframes in renderAnimation

renderAnimation accepted a keyframes option but never registered it, so
structured keyframes animated with render yet stayed static in animations. It
now extends the stylesheet with them like the other entry points.

Fix buffer pool bucket capacity invariant

Release now buckets a buffer by the floor power of two its capacity guarantees,
and acquire_dirty reserves before set_len. A pooled buffer can no longer be
lengthened past its allocation.

Skip mask copies and per-pixel mask lookups in canvas fast paths

Borrow the combined constraint mask directly when it already matches the
canvas viewport instead of copying it per draw, and hoist mask lookups out of
the per-pixel blit loops. Output is unchanged.

Make subset-group font selection deterministic

Subsets registered under one logical family (via FontResource::subset_of) were kept
in registration order. Callers commonly register fonts concurrently, so that order — and
therefore which subset won for a codepoint covered by more than one (e.g. overlapping
weight subsets, where the loser is faux-bolded) — varied per process. Identical input
could render to different bytes run to run.

Subsets are now held in a BTreeSet, ordered by their famil

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@pkg-pr-new

pkg-pr-new Bot commented Jul 20, 2026

Copy link
Copy Markdown
npm i https://pkg.pr.new/romhml/compodium/@compodium/core@201
npm i https://pkg.pr.new/romhml/compodium/@compodium/examples@201
npm i https://pkg.pr.new/romhml/compodium/@compodium/nuxt@201
npm i https://pkg.pr.new/romhml/compodium/@compodium/vue@201

commit: dc8b15d

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from 98cbbd6 to 9ea509e Compare July 24, 2026 21:32
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 9ea509e to dc8b15d Compare July 25, 2026 09:51
@romhml
romhml merged commit 12a6e2e into main Jul 25, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant