[Snyk] Upgrade nuxt from 3.7.0 to 3.12.1

[npcomplete13]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade nuxt from 3.7.0 to 3.12.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 20 versions ahead of your current version.

• The recommended version was released on 23 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	482	Proof of Concept
	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	482	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482	Proof of Concept
	Information Exposure SNYK-JS-EVENTSOURCE-2823375	482	Proof of Concept

Release notes

Package name: nuxt

• 3.12.1 - 2024-06-11
  

  3.12.1 is a hotfix release to address a typo in the nuxt/script stub auto-imports.

  👉 Changelog

  compare changes

  🩹 Fixes

  • nuxt: Update registry list for @ nuxt/scripts (0252000d7)

  💅 Refactors

  • schema: Use CompatibilityDateSpec (#27521)

  📖 Documentation

  • Update more references to v3.12 (1d2eee00d)
  • Mention 3.12 for testing nuxt 4 (#27525)

  🏡 Chore

  • Fix release script (7777f0564)
  • Lint (24b8533e7)
  • Bump nuxi dependency (#27526)

  ✅ Tests

  • Update scrolling test (52b85a886)

  ❤️ Contributors

  • Daniel Roe (@ danielroe)
  • Pooya Parsa (@ pi0)
  • Alexander Lichter (@ manniL)
• 3.12.0 - 2024-06-11
  

  👀 Highlights

  We're on the road to the release of Nuxt 4, but we've not held back in Nuxt v3.12. A huge thank you to the 75+ Nuxt contributors and community members who have been part of this release. ❤️

  🚀 Testing Nuxt 4 changes

  Nuxt 4 is on the horizon, and it's now possible to test out the behaviour changes that will be coming in the next major release (#26925) by setting an option in your nuxt.config file:

  export default defineNuxtConfig({
    future: {
      compatibilityVersion: 4,
    },
  })

  As we've been merging PRs for Nuxt 4, we've been enabling them behind this flag. As much as possible we're aiming for backwards compatibility - our test matrix is running the same fixtures in both v3 and v4 compatibility mode.

  There is a lot to say here, with 10+ different PRs and behaviour changes documented and testable, but for full details, including migration steps, see the v4 upgrade documentation.

  We'd be very grateful for early testing of what's coming in Nuxt 4! 🙏

  📜 Nuxt Scripts auto-install

  We've been gradually working to release Nuxt Scripts. It's currently in public preview, but we're near a public release, so we've added some stubs for composables that (when used) will prompt installing the @ nuxt/scripts module.

  👉 Watch out for the launch - and an article explaining more!

  🌈 Layer auto-registration and bugfixes

  Just like ~/modules, any layers within your project in the ~/layers directory will now be automatically registered as layers in your project (#27221).

  We also now correctly load layer dependencies, which should resolve a range of issues with monorepos and git installations (#27338).

  🌐 Built-in accessibility improvements

  We now have a built-in <NuxtRouteAnnouncer> component and corresponding useRouteAnnouncer composable, which will be added by default to new Nuxt templates going forward.

  For full details, see the original PR (#25741) and documentation.

  We're continuing to work on nuxt/a11y - expect to hear more on that in future!

  🔥 Performance improvements

  We've landed some performance improvements as well, many of which are behind the compatibilityVersion: 4 flag, such as a move away from deeply reactive asyncData payloads.

  Significant improvements include deduplicating modules (#27475) - which will apply mostly to layer users who specify modules in their layers. In one project, we saw 30s+ improvement in starting Nuxt.

  We've also improved Vite dev server start up time by excluding common ESM dependencies from pre-bundling, and would suggest module authors consider doing the same (#27372).

  We improved chunk determinism, so sequential builds should be less likely to have completely different chunk hashes (#27258).

  And we tree shake more client-only composables from your server builds (#27044), and have reduced the size of server component payloads (#26863).

  👨‍👩‍👧‍👦 Multi-app support

  We've landed a couple of changes that take us toward a place of supporting multi-app natively in Nuxt, including a multiApp experimental flag (#27291) and the ability to have multiple Nuxt app instances running in parallel at runtime (#27068).

  While it's not yet ready, please do follow along on the tracker issue, and feel free to pitch in if this is interesting to you.

  ⛑️ DX wins

  We now serialise more things in your dev server logs, including VNodes (#27309) and URLs. We also addressed a bug that could lead to a frozen dev server.

  When accessing private runtime config in the browser, we now let you know with a more informative error message (#26441).

  🪨 Stabilising features

  We've removed some experimental options that have been stabilised and which we feel no longer need to be configurable:

  • experimental.treeshakeClientOnly (enabled by default since v3.0.0)
  • experimental.configSchema (enabled by default since v3.3.0)
  • experimental.polyfillVueUseHead (disabled since v3.4.0) - implementable in user-land with plugin
  • experimental.respectNoSSRHeader (disabled since v3.4.0) - implementable in user-land with server middleware

  We've also enabled scanPageMeta by default (#27134). This pulls out any page metadata in your definePageMeta macro, and makes it available to modules (like @ nuxtjs/i18n) so they can augment it.

  This unlocks much better module/typed routing integration, but has a potential performance cost - so please file an issue if you experience any problems.

  💪 Type improvements

  We now have support for typed #fallback slots in server components (#27097).

  We've also improved some defaults in your generated tsconfig.json, including setting module: 'preserve' if you have a locally installed TypeScript v5.4 version (see docs) - see #26667, #27485.

  📦 Module author/power user improvements

  We have shipped a range of type improvements for module authors, including:

  • support for typed module options in installModule (#26744)
  • the option to specify compatibility with certain builders (vite/webpack) in module options (#27022)
  • a new onPrehydrate hook for hooking into the browser hydration cycle (#27037)
  • the ability to access and update resolved runtime configuration within modules, with new build-time useRuntimeConfig and updateRuntimeConfig utils (#27117)

  🎨 Inlined UI templates

  If you previously used @ nuxt/ui-templates then it may be worth knowing that we have moved them from a separate repository into the nuxt/nuxt monorepo. (This is purely a refactor rather than a change, although you can expect some new designs for Nuxt v4.)

  ✅ Upgrading

  As usual, our recommendation for upgrading is to run:

  npx nuxi@latest upgrade --force

  This will refresh your lockfile as well, and ensures that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.

  👉 Changelog

  compare changes

  🚀 Enhancements

  • nuxt: Support passing options to useRequestURL (#26687)
  • nuxt: Introduce imports.scan option (#26576)
  • nuxt: Add <NuxtRouteAnnouncer> and useRouteAnnouncer (#25741)
  • kit: Handle virtual files in resolvePath and findPath (#26465)
  • nuxt: Expose useLink from NuxtLink (#26522)
  • schema: V4 opt-in with future.compatibilityVersion (#26925)
  • nuxt,schema: Inline error, welcome, spa-loading templates (#27021)
  • nuxt: Configurable app.rootAttrs and teleportAttrs (#27014)
  • schema: Enable cookieStore by default (f597ca59a)
  • nuxt,schema: Support new Nuxt folder structure (#27029)
  • nuxt: Treeshake onUpdated and onUnmounted on server (#27044)
  • nuxt: Prompt to install nuxt/scripts on usage (#27010)
  • nuxt: Expose default slot from <NuxtPage> (#27050)
  • nuxt: Custom renderSSRHeadOptions config for unhead (#26989)
  • nuxt: Add onPrehydrate lifecycle hook (#27037)
  • nuxt: Support multiple nuxtApps at runtime (#27068)
  • nuxt: Add #fallback slot to server components types (#27097)
  • nuxt: Allow specifying builder compatibility in modules (#27022)
  • kit: Add useRuntimeConfig and updateRuntimeConfig utils (#27117)
  • schema: Remove some experimental options for v4 (#27132)
  • nuxt: Auto-register layers in layers/ directory (#27221)
  • nuxt: Allow displaying error state in loading indicator (#27176)
  • nuxt,schema: Add appId and improve chunk determinism (#27258)
  • nuxt: Check schema/kit versions when loading nuxt (#27224)
  • schema: Add experimental multiApp flag (#27291)
  • nuxt: Respect defaults when clearing asyncData (#27295)
  • nuxt: Display banner when run with compatibilityVersion (#27305)
  • nuxt: Add URL serialiser for dev server logs (a549b46e9)
  • nuxt: Handle nuxt route injection for this.$route (#27313)
  • nuxt: Allow configuring interval for checking app update (#27324)
  • nuxt: Warn when accessing private runtimeConfig on client (#26441)
  • kit: Support typed module options in installModule (#26744)
  • kit,schema: Add .with for better module options types (#26850)
  • nuxt: Register plugin hooks before executing plugins (#27449)
  • nuxt,schema: Add compatibilityDate flag for future (#27512)

  🔥 Performance

  • nuxt: Don't add client fallback plugin if not enabled (#26666)
  • nuxt: Unsubscribe from asyncData watch when unmounted (#26821)
  • nuxt: Remove state from nuxt island response (#26863)
  • nuxt: Emit simpler functional ui templates (w/o lodash) (#27091)
  • ui-templates: Don't emit message data for pure strings (9b1bfe69e)
  • nuxt: Remove ssrContext.styles reference (from unused vue-style-loader) (2d1ab61b2)
  • nuxt: Mark payload as shallowReactive (#27214)
  • nuxt: Abort vue render when plugins throw error (#27304)
  • vite: Exclude common ESM deps from pre-bundling (#27372)
  • kit,nuxt: Remove handling for node 14 perf api (#27396)
  • nuxt: Deduplicate modules to install (#27475)
  • webpack: Decrease iteration count and improve type safety (#27488)

  🩹 Fixes

  • nuxt: Prevent getCachedData from shaping type of useAsyncData (#25946)
  • nuxt: Encode location header in navigateTo (#26712)
  • nuxt: Correctly remove extension from path in hasSuffix (#26725)
  • nuxt: Hint prerenderer to crawl routes at runtime (#26694)
  • kit: Ignore negation when resolving ignore patterns (e105fadd7)
  • nuxt: Avoid double-slash in ignore pattern (75e43ac42)
  • kit: Set typescript moduleDetection to 'force' (#26667)
  • nuxt: Re-initialise nuxt._ignore after all modules run (#26680)
  • nuxt: Assign v-for to slot in islands (#26880)
  • nuxt: Don't encode location header (#26893)
  • nuxt: Check if _scope is active before calling run function (#26756, #26904)
  • nuxt: Don't scan component dirs when enabled is false (#26906)
  • vite: Inline styles for vue components with lang="ts" (#26912)
  • nuxt: Handle arrays correctly in updateAppConfig (#26949)
  • nuxt: useState in NuxtClientFallback setup function (#26928)
  • nuxt: Compile plugin templates last (#27009)
  • nuxt: Register redirect middleware before pushing route (#27016)
  • nuxt,schema: Remove .js extension from template imports (0d4a622f3)
  • nuxt: Don't overwrite existing scope in runWithContext (#26976)
  • schema: Use v3 folder structure if app.vue exists in rootDir (1af81ed0f)
  • nuxt: Use resolved path for test component import (8e793ad5c)
  • nuxt: Use URL constructor to resolve external protocols (5f0693a69)
  • nuxt: Use URL for parsing URLs rather than parseURL (ea22d3f98)
  • nuxt: Deprecate process.* flags (#27089)
  • nuxt: Provide default url for URL constructor (8bdd620ba)
  • nuxt: Preload links with same hostname (c065505e1)
  • nuxt: Remove unused prop in NuxtTeleportIslandComponent (#27093)
  • nuxt: Don't pass options to spaLoadingTemplate function (0e12b6eb8)
  • nuxt: Scan folder indices for middleware (#27187)
  • nuxt: Pass path to jiti and not file URL (#27252)
  • schema: Hoist `@ nuxt/devtools types for config auto-completion (008a26417)
  • nuxt: Correct components dir regexp (dad89c2b1)
  • schema: Handle dev/test buildId in schema (#27274)
  • nuxt: Encode location header in navigateTo (#27280)
  • nuxt: Invert version check (e5649613c)
  • nuxt: Exempt equality check for kit/schema version (a531e6f46)
  • nuxt: Use undefined rather than null for data fetching defaults (#27294)
  • vite: Ignore query/hash when resolving public assets (#27306)
  • nuxt: Clear timeout when asyncData request finishes/aborts (#27308)
  • nuxt: Provide default data type values in nuxt/app dir (#27314)
  • nuxt: Add module declarations for virtual files (#27311)
  • nuxt: Respect app.cdnURL for extracted payloads (#26668)
  • vite: Handle runtime paths in inlined styles (#27327)
  • nuxt: Add VNode reviver & don't deduplicate dev logs (#27309)
  • vite: Suppress warning about unresolved public assets (#27328)
  • nuxt: Defer shared asyncData promises to next tick (#27329)
  • nuxt: Resolve modules from layers directories (#27338)
  • schema: Pass correct jsx config for esbuild-loader (#27341)
  • nuxt: Transpile app.config files in nitro build (#27342)
  • nuxt: Use relative paths in app.config.d.ts (#27350)
  • vite: Disable optimizeDeps in ssr (#27356)
  • vite: Don't get available port when hmr.server is set (#27326)
  • nuxt: Mark nuxt/scripts stubs as lower priority (51740fa1d)
  • nuxt: Handle errors loading app manifest (#27441)
  • schema: Exclude non-serialisable types from app options (#27478)
  • nuxt: Deduplicate app.head arrays (#27480)
  • kit: Improve defaults in generated tsconfig.json (#27485)
  • nuxt: Use buildAssetsDir in island teleport dev chunk (#27469)
  • kit: Do not use module: preserve unelss ts v5.4 is installed (b08dfc98b)
  • nuxt: Ensure payload script executes before entry (#27506)
  • kit: Avoid fallback to normalized path in module loading (#27507)
  • nuxt: Also augment page metadata after pages:extend hook (#27134)
  • nuxt: Resolve full path to app manifest stub page (91685a5b2)
  • nuxt: Resolve paths without file extensions (dccf2e5f3)
  • kit: Revert back to esnext target (7bb02735e)
  • kit,schema: Revert changes to module options types (#26850)
  • nuxt: Remove boolean value for dedupe in v4 compat (#27511)
  • nuxt: Add parent scopeId to server components (#27497)
  • nuxt: Handle symbol keys in wrapped runtime config (13fec55c1)
  • nuxt: Register augmented pages to avoid re-augmenting (b75bf870b)
  • nuxt: Use file path as key for re-augmenting (09f6a88e1)

  💅 Refactors

  • Improve regexp performance (#27207)

  📖 Documentation

  • Update Nuxt 4 scheduled release date (#26663)
  • Remove step of installing deps in new nuxt project (#26676)
  • Clarify dependsOn works not just for parallel plugins (#26707)
  • Add --preset flag for nuxi build (#26759)
  • Fix typo (#26752)
  • Remove misleading reference to useFetch (#26748)
  • Update the code style page (#26792)
  • Reference correct composable in callWithNuxt (#26771)
  • Add sample app.vue (#26796)
  • Remove direct link to subheading (#26775)
  • Fix srcDir description mentioning deprecated static/ directory (#26804)
  • Provide example of passing props to a child page (#26805)
  • Provide example of exposing a pageRef from a child page (#26806)
  • Correct definePageMeta scrollToTop docs link (#26829)
  • Advise correct extension for vitest config (#26845)
  • Deprecate pending value in data fetching composables (#26766)
  • Fix file name (#26852)
  • Add info about self-hosted github/gitlab instances (#26501)
  • Add @ vue/test-utils getting started guide (#26205)
  • Add a note about HTTPS with a self-signed certificates (#26481)
  • Clarify purpose of play online section (#25978)
  • Fix typo with a -> an (#26856)
  • Fix code block formatting (#26859)
  • Add more detail to usePreviewMode explanation (#26602)
  • Fix import of defineConfig (a60de743a)
  • Add @ since annotations to exported functions (#25365)
  • Add watch example link (#26818)
  • Add source tag (#26884)
  • Update strict checks section with new default (#26965)
  • Correct link to data fetching docs (#26988)
  • Add link to one of @ manniL's videos on layers (#26984)
  • Fix small typo (#26999)
  • Preprocessors as dev deps to align with vue plugin (#27005)
  • Change .eslintrc.js to eslint.config.js (#27020)
  • Add docs for future.compatibilityVersion (e7789a257)
  • Add vite plugin recipe (#27043)
  • Improve data fetching wording and explanation (#27061)
  • Add missing options for nuxi init (#27051)
  • Update docs for ignorePrefix to clarify ignored files (#27065)
  • Mention nightly release channel for unreleased features (8fcf893f8)
  • Add migration/testing guide for nuxt 4 (#27128)
  • Improve testing component examples (#27138)
  • Fix type checking of component testing blocks (b5e35e3bd)
  • Add app.config.ts to nuxt 4 testing/migration (#27164)
  • Add video links for more context (#27174)
  • Add module execution order (#27178)
  • Mark bridge as stable (#27212)
  • Explain how environment variables work in production (#27189)
  • Add cache option to useFetch params (#27225)
  • Add custom useFetch recipe (#27208)
  • Add nuxt/scripts (#27229)
  • Add example of passing params to <NuxtLink> (#27284)
  • Add additional example for setting baseURL and cdnURL (#27273)
  • Update readme for Nuxt 2 NES and support (d35e9cd3f)
  • Introduce hint and link to environment override feature (#27315)
  • Document partitioned attribute of useCookie (#27297)
  • Add windows git clone symlink tip (#27332)
  • Fix release badges (#27355)
  • Fix list spacing (#27366)
  • Capitalize text (#27348)
  • Added recipe for consuming SSE via POST request (#27422)
  • Add deployment advice for client-side rendering (#27426)
  • Add external parameter behavior navigateTo (#27472)
  • Add note about middleware re-running for error pages (#27481)
  • Update link to nitro error hook type (61766702c)
  • Add comment about existing custom srcDir in upgrade steps (3383a2df2)
  • Add docs page for prerendering (#27286)

  📦 Build

  • nuxt: Use relative path to ui-templates dist (99dc3ce88)
  • schema: Use relative path to ui-templates dist (eec84f5b2)
  • ui-templates: Directly copy templates on build (#27430)
  • ui-templates: Fix svg regexp (957dcc194)

  🏡 Chore

  • Update moduleResolution to Bundler (#26658)
  • Cleanup eslint rules with latest @ nuxt/eslint-config (#26653)
  • Fix devcontainer.json syntax (#26776)
  • Ignore SSL certificate error with conventionalcommits.org (9ba1ebe98)
  • Fix small typos (#26907)
  • Add @ nuxt/ui-templates to core monorepo (fe6bdcc01)
  • Skip releasing ui-templates (15781c608)
  • Build ui-templates first (1add938a5)
  • ui-templates: Remove legacy artifacts (3d2f93d5a)
  • Update lockfile (447db137a)
  • Dedupe (94a6f0581)
  • ui-templates: Misc improvements (#27033)
  • Disable jiti_cache when running vitest (2786595f5)
  • Upgrade dev dependencies (061fbd4bd)
  • For goodness' sake (3708ee872)
  • Update root monorepo node engine (#27122)
  • Move @ internal comment (cf736e274)
  • Remove redundant eslint-plugin-regexp (#27271)
  • Build ui-templates when stubbing packages (#27446)
  • Improve types in tests (#27293)
  • Temporarily disable updates for jiti and @ vitejs/plugin-vue (2a2847e4b)
  • Disable shamefully-hoist within repo (#27483)
  • ui-templates: Improve type safety in render (94c84feee)
  • Lint (5d7f7dae4)
  • Upgrade jiti (#27479)

  ✅ Tests

  • Disable coverage by default (8c6a48326)
  • Update bundle size (58349a459)
  • Extend timeout for node-compat (8958f7ca7)
  • Re-enable testing js payloads (#27137)

  🤖 CI

  • Avoid running some actions on forks (#26937)
  • Allow ui-templates as valid scope (5afd75b88)
  • Use commit hash at time of release triggger (b78817001)
  • Remove nightly nuxt 2 releases (bf4e6c536)

  ❤️ Contributors

  • Daniel Roe (@ danielroe)
  • Maik Kowol (@ 94726)
  • Ryan Clements (@ RyanClementsHax)
  • Hendrik Heil (@ hendrikheil)
  • Pooya Parsa (@ pi0)
  • Damian Głowala (@ DamianGlowala)
  • Inesh Bose (@ ineshbose)
  • André Luiz da Silva (@ andresilva-cc)
  • Luke Nelson (@ luc122c)
  • nopeless (@ nopeless)
  • Israel Ortuño (@ IsraelOrtuno)
  • Jakub Bednár (@ jakubednar)
  • praburangki (@ praburangki)
  • JD Solanki (@ jd-solanki)
  • Julien Huang (@ huang-julien)
  • Jakub Szafrański (@ samupl)