[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@nuxt/kit (source)	^4.6.1 → ^4.6.3
nuxt (source)	^4.6.1 → ^4.6.3

---

Release Notes

nuxt/nuxt (@​nuxt/kit)

v4.6.3

Compare Source

v4.6.3 is the next patch release.

👉 Changelog

compare changes

🚨 Security fixes

• vite: do not read files named in client error reports (63299e13c) - GHSA-x287-wcfc-q46c
• vite: deny dev server access to nitro dev output (c7e204ec6) - GHSA-648h-gw55-m2g7
• vite: deny serving generated app secret in dev (16dfdc2a9) - GHSA-3xf4-9g3c-4h4w
• nitro,nuxt: handle dot segments in request paths (440250d97) - GHSA-9v7c-q64q-vv33
• nuxt: apply redirect route rules to page islands (b20372dbe) - GHSA-2fxj-c3j7-rr69

🔥 Performance

• vite: skip compiling plain style blocks in the server build (#​36711)
• nitro,nuxt,rspack,webpack: bundle esm vue + reuse caches (#​36710)
• vite: avoid quadratic nested dir check for fs.allow (#​36702)
• nuxt: server render internal custom links without RouterLink (#​36707)
• nuxt: skip unneeded typed routes generation (#​36645)

🩹 Fixes

• nitro: don't share prerender hints with self-fetched requests (#​36705)
• nuxt: defer app scope cleanup on external navigation (#​36713)
• nuxt: prevent useCookie CookieStore sync from rewriting with refresh (#​36673)
• nuxt: only return redirects from navigateTo while middleware runs (#​36650)
• nuxt: remove purged entries from _asyncData (#​36709)
• vite: skip quoted import.meta keys + limit replace to client dev (#​36703)
• nuxt: hide RouteLocationRaw from navigateTo's public return type (#​36691)
• nuxt: tree-shake auto-imported #app composables (#​36696)
• nuxt: don't treat constrained route rules as covering dynamic pages (#​36701)
• nuxt: include shared/ in build cache hash (#​36704)
• nuxt: hash keyed function ids + page import names relative to rootDir (#​36697)
• nuxt: encode page paths before matching route rule keys (#​36683)
• nuxt: handle rejected updateCallbackDone of aborted view transition (#​36639)
• ui-templates: keep loading shader proportions on narrow screens (#​36654)
• nuxt: reject case-dependent route rule constraints w/ sensitive: false (#​36708)
• nuxt: don't case-fold regex constraints in route rule keys (#​36694)
• nuxt: normalise page prefix when finding route rule exceptions (#​36685)
• vite: mirror ssr invalidations for created and deleted files (634cba64c)
• nitro: keep noScripts wildcard patterns single-segment (fa323db7d)
• deps: update unrouting to v0.3.1 (#​36663)
• nuxt: avoid self-referencing nuxt/schema augmentation (#​36633)
• nuxt: let nightly runtime resolve its own nuxt/* imports (#​36632)
• nuxt: don't warn for vite+ vite.config files (#​36628)
• kit: keep generated declaration first in tsconfig include (#​36627)
• nuxt: clamp numeric v-for sources in island renders at render time (#​36623)
• rspack,webpack: register vue-loader plugin only once per config (#​36622)
• nitro: abort the portable request when the client disconnects (#​36652)
• deps: update nitropack to 2.13.5 + drop obsolete workarounds (#​36649)

📖 Documentation

• note provide/inject limit in server components (#​35837)
• use American spelling in a few guides (#​36706)
• document controlling prefetch hints via build:manifest hook (#​36695)
• update StackBlitz link to point to version 4 (#​36674)
• link to the 2.x docs (#​36640)
• clarify that island props must be validated before iteration (4b12d15c9)

✅ Tests

• list NUXT_B4023 as main-only (4fd54ff9a)
• wait for leave transition before each scroll behaviour test (453406999)
• vite: assert spa server bundle does not ship the app (#​36699)
• nuxt: cover route rule coverage under a base url (#​36682)
• list NUXT_B9006 as main-only (e107e0f40)

🤖 CI

• only run full checks for the last merge queue entry (132698a46)
• run a reduced matrix in the merge queue (7d228ba4b)
• compare merge queue changes against the base branch (bad8c3637)
• notify resolved issues after publishing a release (9d47884f3)
• remove broken ai-moderator and ecosystem-ci trigger workflows (1d89ad434)

🎉 New Contributors

• rynx.z (@​rynx-cc)
• Felix Fang (@​FelixFangX)
• Volkan Akyel (@​volkanakyel)
• Gareth (@​0xgdr)

❤️ Contributors

• Daniel Roe (@​danielroe)
• rynx.z (@​rynx-cc)
• Felix Fang (@​FelixFangX)
• Max (@​onmax)
• Volkan Akyel (@​volkanakyel)
• Bochkarev Ivan (@​Ibochkarev)
• Gareth (@​0xgdr)
• Hugo (@​HugoRCD)
• Sébastien Chopin (@​atinux)
• Eduardo San Martin Morote (@​posva)
• Baptiste Leproux (@​larbish)
• Benjamin Canac (@​benjamincanac)

v4.6.2

Compare Source

v4.6.2 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes

• nitro: apply useHeadSafe rules to server island head (493565e99)
• nitro-server: read router params from the path h3 matched (010f6b43d)
• nitro: match server route rules case-insensitively unless routing is sensitive (f6cfee52c)
• nuxt: resolve rooted paths through the URL parser (#​36617)
• nuxt: resolve empty route types in shared context (#​36576)
• nitro: preserve server tsconfig with relocated build dir (#​36494)
• nuxt: fix scroll offset for IDs starting with numbers (#​36524)
• kit: do not exclude module directories with a dot in their name from app tsconfig (#​36331)
• nuxt: detect vapor slots with rawVaporSlotKey from vue (#​36614)
• nuxt: keep middleware layout when restoring deferred prerendered route (#​36560)
• schema: provide default value for experimental.typescriptPlugin (#​36561)
• vite: only replay compile error overlays to newly loaded pages (#​36611)
• nuxt: re-export AnyFetchPath for emitted server route types (#​36610)
• vite: warm up the dev ssr entry from a nitro plugin (#​36615)
• nitro: avoid unused h3 imports in nuxt/server runtime (#​36609)
• vite-server: scope asset url helpers to the build (#​36591)
• nuxt: resolve nuxt/app to the app's runtime (#​36587)
• kit: lowercase filename-derived handler method on nitro v2 (#​36567)
• nuxt,nitro: normalise string/array appMiddleware (#​36565)
• nitro: pass response headers to render:response listeners (#​36583)
• vite: resolve inlined vue to its bundler build in dev (#​36569)
• nuxt: don't start a page transition with no page to leave (#​36535)
• nuxt: preserve error state on aborted or cancelled navigation (#​36546)
• vite,nitro: link null-byte virtual css through /@id/ in dev (#​36549)
• kit: resolve module dependencies from the declaring module (#​36542)
• nitro: only disable h3 + nitro presets when nitroAutoImports is off (#​36548)
• nitro,vite: don't access unspecified dependencies (#​36541)
• nitro: don't inline deps under absolute transpile dirs (#​36540)
• vite-server: respect spa loading template location (#​36536)

💅 Refactors

• webpack,rspack: inline friendly errors plugin (#​36568)

📖 Documentation

• remove DeepWiki badge (#​36616)
• rename H(TTP) to HTTP (#​36559)
• mention proxy route rule (4a529be68)
• reference definePlugin and defineNitroPlugin in server plugin tip (64b8e0334)
• open a PR to list a module (e551df267)
• clarify testing environments, runners, and config (#​32963)
• align spa loading template references (#​36552)
• explain how to disable iOS Safari phone number detection (#​36539)
• fix outdated internal links (#​36550)
• explain how to restore nitro auto-imports with compat v5 (7499a445b)
• add spa-loading-template documentation (#​36537)

🏡 Chore

• keep @​nuxt/telemetry ignore for production mode 😭 (3110d6947)
• fix knip, eslint and type import failures in ci (fb01db4eb)
• exclude nuxt/app entry shim from root typecheck (c65cef3a8)
• animate readme banner (#​36593)
• actually exclude fixtures from test:engines (6ce412822)
• resolve #build/server-routes stub via root tsconfig paths (8235dd605)

✅ Tests

• wait for scroll to settle in route-scroll e2e (ca784deb7)

🤖 CI

• comment nuxt.com preview links on docs pull requests (#​36594)
• regenerate kit inlinedDependencies in autofix (4b6da3a29)
• remove docs deploy triggers (917bdf218)

🎉 New Contributors

• Sandro Circi (@​sandros94)
• Yunus Ozen (@​ozenyunus35)
• Vladislav (@​dsfcoll)
• AXH-xecoy (@​axh-xecoy)
• Jess (@​JessicaSachs)
• Gareth (@​0xgdr)

❤️ Contributors

• Daniel Roe (@​danielroe)
• Jonas Thelemann (@​dargmuesli)
• Sandro Circi (@​sandros94)
• Yunus Ozen (@​ozenyunus35)
• Vladislav (@​dsfcoll)
• Sébastien Chopin (@​atinux)
• Kazbek Askarov (@​kazbekaskarov)
• Nicholas (@​Neekoras)
• Peter (@​tada5hi)
• Baptiste Leproux (@​larbish)
• Hugo (@​HugoRCD)
• Harlan Wilton (@​harlan-zw)
• AXH-xecoy (@​axh-xecoy)
• Jess (@​JessicaSachs)
• Alex Liu (@​Mini-ghost)
• Gareth (@​0xgdr)
• Florian Heuberger (@​Flo0806)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Every minute (* * * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.