Skip to content

chore(deps): update nuxt framework to ^4.6.4 - #81

Merged
atinux merged 1 commit into
mainfrom
renovate/nuxt
Nov 5, 2026
Merged

atinux merged 1 commit into
mainfrom
renovate/nuxt

Conversation

@renovate

@renovate renovate Bot commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@nuxt/kit (source) ^4.6.3 → ^4.6.4 age confidence
nuxt (source) ^4.6.3 → ^4.6.4 age confidence

Release Notes

nuxt/nuxt (@​nuxt/kit)

v4.6.4

Compare Source

4.6.4 is a security release. It fixes eight advisories in Nuxt and pulls in nitropack 2.13.6, which fixes three more in Nitro. We recommend upgrading as soon as you can.

⚠️ Behaviour changes

These probably won't affect most apps, but it's worth flagging anyway:

  1. Error details in production. When a page fails to render on the server, the error page and the payload now only carry message and data of errors you create with createError. Everything else is stripped.
  2. Dev server Host checks. Webpack and rspack dev servers now reject requests with an unexpected Host header, as Vite already does. If you use a custom hostname or tunnel, you'll need to add it to the new devServer.allowedHosts option.
  3. workspaceDir detection. When workspaceDir isn't set, Nuxt now only widens it past rootDir to an explicit workspace root or the closest git repository.
  4. Nitropack cached routes. cache, swr and isr route rules now only cache GET and HEAD requests, and no longer store responses that set a cookie or send Cache-Control: private or no-store. Wildcard proxy and redirect rules also reject requests whose resolved target would leave the rule's scope.
  5. Route rules and encoded slashes. Route rules now match paths that contain encoded slashes, so /api%2Fadmin is covered by a /api/** rule.
👉 Changelog

compare changes

🩹 Fixes
  • nitro,nuxt: require unrouting 0.3.2 (768d21368)
  • nitro: preserve wildcard tails in case-insensitive route rules (bf31e4cd8)
  • nitro: require nitropack 2.13.6 (1b13c6981)
  • nitro: keep leading double slash in renderer request path (75c12c6fb)
  • nuxt: use unambiguous encoding for island hash (6f1b93c64)
  • vite-server: resolve wildcard redirect tails from the matched segments (1e7dfa6a7)
  • nuxt: do not expose details of untrusted thrown errors (8c56b71e4)
  • nuxt: strip trailing slashes in linear time (97424dd21)
  • nitro,webpack: include hosts the CLI allows after loading the config (8c11d965d)
  • webpack: skip hot middleware for forbidden dev requests (3c9645326)
  • rspack,webpack: reject unexpected Host headers in dev middleware (f8d64c9aa)
  • schema,nitro,vite: add devServer.allowedHosts (3e1c7964e)
  • nitro,nuxt: match route rules for paths with encoded slashes (084396b10)
  • schema: only widen workspace dir to a declared workspace root (89d3306d1)
  • nitro: only trust x-forwarded-proto in when opted-in (#​36818)
  • nitro: stream the body read through a nuxt/server handler (#​36817)
  • kit: suggest the specific fix when loading falls back to jiti (24d75659d)
  • vite: use a single type checker (#​36774)
  • nitro,vite: remove windows + virtual dev ssr css links after hydration (#​36765)
  • nitro,vite: dedupe dev css by module node (#​36420)
  • nuxt: avoid hoisting setup-only values from definePageMeta (#​36751)
  • nuxt: only match hydration modifiers after lazy prefix (#​36750)
  • kit,nitro,nuxt: make emitted tsconfig/types stable across reruns (#​36747)
  • nuxt: render inlined component styles after stylesheet links (#​36714)
  • webpack: use valid devtool for hidden client sourcemaps in dev (#​36555)
📖 Documentation
  • clarify template dependency regeneration (#​36766)
  • revise README structure and headings (#​36772)
  • link the Nuxt DevTools docs on nuxt.com (#​36769)
  • warn against spreading untrusted objects onto server components (1225ca7ff)
  • update anchors for flat heading ids (#​36664)
🏡 Chore
  • add 1000-row listing routes to the benchmark (c852d871f)
  • add client page weight and browser timing suites (#​36788)
✅ Tests
🤖 CI
  • check unversioned docs links against branch docs version (d093c88b1)
  • skip unneeded checks for release prs (4b90681bd)
  • skip benchmarks in merge groups (6428070e0)
  • re-enable codspeed ⚡ (bc17c03d1)
❤️ Contributors

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Every minute (* * * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@vercel

vercel Bot commented Nov 3, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
comark-docs-layer Ready Ready Preview Nov 5, 2026 9:00pm UTC

@coldtea-pr-lens

Copy link
Copy Markdown

Note

renovate[bot] opened this pull request, so PR Lens left it undrawn. Comment @pr-lens draw to draw it

github.comment.notice: false in .github/pr-lens.yml turns this note off

@coderabbitai

coderabbitai Bot commented Nov 3, 2026 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 00b5449f-4f6d-4e19-a18a-02ffd0042d52

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@pkg-pr-new

pkg-pr-new Bot commented Nov 3, 2026 •

Copy link
Copy Markdown
npm i https://pkg.pr.new/comarkdown/comark-docs@81

commit: a463532

@github-actions

github-actions Bot commented Nov 3, 2026 •

Copy link
Copy Markdown

Production bundle

Comparing 4fcfb4f9 with a463532d. Compressed sizes are calculated from the emitted production assets.

Initial page load

Page Base JS (Brotli) PR JS (Brotli) Δ JS Δ CSS Δ files
/ 416.8 KiB 416.9 KiB +86 B (+0.0%) +350 B (+1.2%) —
/getting-started/introduction 785.0 KiB 785.0 KiB +71 B (+0.0%) +350 B (+1.2%) —
/writing/components 785.0 KiB 785.0 KiB +71 B (+0.0%) +350 B (+1.2%) —

Entry script, modulepreload chunks and stylesheets referenced by the server-rendered HTML. Lazy and prefetched chunks are excluded.

All client assets

Metric Base (Brotli) PR (Brotli) Δ Brotli Δ gzip
Client JavaScript 1000.3 KiB 1000.3 KiB -14 B (-0.0%) -11 B (-0.0%)
Client CSS 27.9 KiB 28.2 KiB +350 B (+1.2%) +360 B (+1.0%)
Other client assets 340.8 KiB 340.8 KiB -9 B (-0.0%) -1 B (-0.0%)
Total client assets 1.34 MiB 1.34 MiB +327 B (+0.0%) +348 B (+0.0%)

Largest module increases

Module Base (Brotli) PR (Brotli) Δ Brotli
node_modules/nuxt/dist/app/error.js 385 B 503 B +118 B (+30.6%)
virtual:nuxt:.nuxt%2Froute-rules.mjs 1.2 KiB 1.3 KiB +117 B (+9.3%)
node_modules/nuxt/dist/app/components/nuxt-root.vue 893 B 941 B +48 B (+5.4%)
node_modules/@nuxt/ui/dist/runtime/components/Theme.vue 510 B 552 B +42 B (+8.2%)
node_modules/unhead/dist/shared/unhead.CaeaMM5q.mjs 438 B 468 B +30 B (+6.8%)
node_modules/nuxt-og-image/dist/runtime/app/composables/_defineOgImageRaw.js 227 B 254 B +27 B (+11.9%)
node_modules/nuxt/dist/app/plugins/payload.client.js 1.3 KiB 1.4 KiB +26 B (+1.9%)
node_modules/nuxt-og-image/dist/runtime/app/client-utils.js 1.2 KiB 1.2 KiB +22 B (+1.8%)
node_modules/@nuxt/ui/dist/runtime/composables/useContentSearch.js 1.1 KiB 1.1 KiB +21 B (+1.8%)
node_modules/@nuxt/ui/dist/runtime/components/prose/Li.vue 442 B 461 B +19 B (+4.3%)

Module values come from Nuxt’s analyzer and are attribution estimates. This workflow is currently report-only.

Workflow run

@atinux
atinux merged commit 886d1ca into main Nov 5, 2026
14 checks passed
@atinux
atinux deleted the renovate/nuxt branch November 5, 2026 22:09

This branch was successfully deployed

1 active deployment
Preview — a463532d Deployed Nov 5, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant