Skip to content

chore(deps): bump the website group across 1 directory with 7 updates - #60

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/website/website-54d6400371
Open

chore(deps): bump the website group across 1 directory with 7 updates#60
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/website/website-54d6400371

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the website group with 7 updates in the /website directory:

Package From To
marked 18.0.6 18.0.7
nuxt 4.5.0 4.5.1
@types/node 26.1.1 26.1.2
eslint 10.7.0 10.8.0
eslint-plugin-vue 10.9.2 10.10.0
prettier 3.9.5 3.9.6
vue-tsc 3.3.7 3.3.8

Updates marked from 18.0.6 to 18.0.7

Release notes

Sourced from marked's releases.

v18.0.7

18.0.7 (2026-07-21)

Bug Fixes

  • Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexes (#4014) (f945fc5), closes #3991
  • Avoid O(n^2) masked source rebuild in inline tokenizer (#4017) (9154f8f)
  • keep empty list after blockquote as a sibling block (#4004) (3f144a0)
  • preserve code spans adjacent to tildes (#4012) (0de7188)
  • Recognize setext headings whose first line starts with # (#4015) (f056437), closes #1
  • treat a line of only tabs as a blank line between paragraphs (#4007) (bc2f121)
Commits
  • a8971a1 chore(release): 18.0.7 [skip ci]
  • d899c2e chore(deps): bump actions/setup-node from 6 to 7 (#4025)
  • 7fbf82e chore(deps-dev): bump semantic-release from 25.0.7 to 25.0.8 (#4026)
  • 738edf2 chore(deps-dev): bump brace-expansion from 5.0.2 to 5.0.6 (#4027)
  • 9154f8f fix: Avoid O(n^2) masked source rebuild in inline tokenizer (#4017)
  • f945fc5 fix: Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexe...
  • 3f144a0 fix: keep empty list after blockquote as a sibling block (#4004)
  • 0de7188 fix: preserve code spans adjacent to tildes (#4012)
  • f056437 fix: Recognize setext headings whose first line starts with # (#4015)
  • 12bfa94 chore(deps-dev): bump semantic-release from 25.0.5 to 25.0.7 (#4020)
  • Additional commits viewable in compare view

Updates nuxt from 4.5.0 to 4.5.1

Release notes

Sourced from nuxt's releases.

v4.5.1

⚠️ This is a security release. We recommend upgrading as soon as possible with npx nuxt upgrade --dedupe.

It fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, cross-user payload disclosure on cached pages, and dev server path disclosure. Refreshing your lockfile also pulls in @nuxt/devtools@3.3.1, which fixes a separate critical development-only RCE.

If you already upgraded for the earlier route rule advisory (CVE-2026-53721), you still need this release: one of the fixes addresses a regression introduced by that fix.

If you use the cache, swr or isr route rules, purge any CDN or edge cache after upgrading; a leaked _payload.json may already be cached upstream.

Full details: Nuxt Security Patch Releases and GitHub Security Advisories.

👉 Changelog

compare changes

🔥 Performance

  • nitro: Replace island teleports in a single html pass (#35515)
  • nuxt: Add vue.optionsApi and disable it for v5+ (#35791)
  • nuxt: Without pages, skip client plugins that require routing (#35794)
  • nuxt: Skip payload revival plugin when ssr: false (#35782)

🩹 Fixes

  • nitro: Read rspack dev output fs lazily for server entry (#35740)
  • rspack,webpack: Resolve loaders and runtime deps from nuxt dirs (#35568)
  • nuxt: Return global route for useRoute in detached effect scope (#35659)
  • nuxt: Ignore custom name or path when reusing an existing page in pages:extend (#35661)
  • nuxt: Render client components in nested server components (#35669)
  • nuxt: Preserve explicit useFetch method inference (#35671)
  • nuxt: Revalidate cached route payloads instead of using force-cache (#35672)
  • nuxt: Correct default export detection in plugin metadata (#35676)
  • nuxt: Clear hide/reset timeouts in set() (#35534)
  • kit,nuxt,rspack,schema,webpack: Add .mts file extension in resolver (#33845)
  • nuxt: Preserve trailing slash in NuxtLink href when unset (#35501)
  • nuxt: Don't cross-pollute useAsyncData cache on reactive key change (#35656)
  • nuxt: Filter plugin dependencies by build target (#35682)
  • nuxt: Reload real page module on HMR of JSX render-function pages (#35678)
  • nuxt: Resolve @unhead/vue/* from nuxt's dependency tree (#35690)
  • kit: Surface module load errors instead of masking as missing (#35497)
  • nuxt: Type auto-imported $fetch with nitro's $Fetch (#35704)
  • nuxt: Don't reference app config sources in shared and node tsconfigs (#35673)
  • vite: Resolve SSR inlined CSS module class name mismatch (#35610)
  • nuxt: Generate layout types even when pages module is disabled (#35717)
  • nitro: Skip resource hints for stylesheets already rendered as blocking links (#35691)
  • kit: Dedupe layers that are both auto-scanned and explicitly extended (#35712)
  • nuxt: Don't apply scroll behaviour after a subsequent nav (#35719)
  • vite: Ensure server sourcemap-preserver plugin actually runs (#35680)
  • vite: Preserve css suffix when extracting ssr inline styles (#35714)
  • nuxt: Watch external component directories in development (#35652)
  • nuxt: Don't exclude client entry module from style extraction (#35720)
  • nuxt: Amend cleanup command in NUXT_B7014 error message (#35735)
  • nuxt: Only pull in vue-router when there are island pages (#35739)
  • vite: Suppress external warnings for internal vite-node paths (#35744)

... (truncated)

Commits
  • 452dd50 v4.5.1
  • 581651f fix(nuxt): reject top-level as prop for islands
  • ee6c846 fix(nuxt): reject reserved template island prop under runtime compiler
  • ad624a7 fix(nuxt): case-fold route rule keys to match folded lookups
  • 4e35ae9 fix(nitro): bound island props and v-for to prevent unauthenticated DoS
  • 352135f fix(nuxt): remove dev error overlay when error is cleared (#35821)
  • b1a8e93 fix(nitro,nuxt,vite): dedupe and normalise global css links in dev (#35834)
  • df55902 fix(nuxt): convert inline route rules exactly or drop with a warning (#35455)
  • 083b750 fix(nuxt): warn when an imports preset from cannot be resolved (#35799)
  • 61eb637 perf(nuxt): skip payload revival plugin when ssr: false (#35782)
  • Additional commits viewable in compare view

Updates @types/node from 26.1.1 to 26.1.2

Commits

Updates eslint from 10.7.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

  • 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

  • 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
  • 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
  • e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
  • 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
  • 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
  • b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

  • 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
  • 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
  • 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
  • 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
  • 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
  • d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
  • eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
  • c5963f7 docs: Update README (GitHub Actions Bot)

Chores

  • 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
  • 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
  • eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
  • e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
  • e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
  • ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
  • 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
  • fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
  • 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
  • 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
  • a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
  • 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
  • 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
  • a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
  • c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
  • 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
  • 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
  • dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
  • 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
  • 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
  • d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
  • bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)
Commits

Updates eslint-plugin-vue from 10.9.2 to 10.10.0

Release notes

Sourced from eslint-plugin-vue's releases.

v10.10.0

Minor Changes

Patch Changes

  • Updated @eslint-community/eslint-utils, semver and xml-name-validator dependencies (#3094)
Changelog

Sourced from eslint-plugin-vue's changelog.

10.10.0

Minor Changes

Patch Changes

  • Updated @eslint-community/eslint-utils, semver and xml-name-validator dependencies (#3094)
Commits

Updates prettier from 3.9.5 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

  1. Install the plugin:

    yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

Updates vue-tsc from 3.3.7 to 3.3.8

Release notes

Sourced from vue-tsc's releases.

v3.3.8

language-core

workspace

  • chore: upgrade to TypeScript 7 and support @typescript/typescript6 (#6123) - Thanks to @​WaldemarEnns!

Our Sponsors ❤️

... (truncated)

Changelog

Sourced from vue-tsc's changelog.

3.3.8 (2026-07-22)

language-core

workspace

  • chore: upgrade to TypeScript 7 and support @typescript/typescript6 (#6123) - Thanks to @​WaldemarEnns!
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the website group across 1 directory with 7 updates
f60252e 
Bumps the website group with 7 updates in the /website directory:

| Package | From | To |
| --- | --- | --- |
| [marked](https://github.com/markedjs/marked) | `18.0.6` | `18.0.7` |
| [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.5.0` | `4.5.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.1` | `26.1.2` |
| [eslint](https://github.com/eslint/eslint) | `10.7.0` | `10.8.0` |
| [eslint-plugin-vue](https://github.com/vuejs/eslint-plugin-vue) | `10.9.2` | `10.10.0` |
| [prettier](https://github.com/prettier/prettier) | `3.9.5` | `3.9.6` |
| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.3.7` | `3.3.8` |



Updates `marked` from 18.0.6 to 18.0.7
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.6...v18.0.7)

Updates `nuxt` from 4.5.0 to 4.5.1
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v4.5.1/packages/nuxt)

Updates `@types/node` from 26.1.1 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint` from 10.7.0 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.7.0...v10.8.0)

Updates `eslint-plugin-vue` from 10.9.2 to 10.10.0
- [Release notes](https://github.com/vuejs/eslint-plugin-vue/releases)
- [Changelog](https://github.com/vuejs/eslint-plugin-vue/blob/master/CHANGELOG.md)
- [Commits](vuejs/eslint-plugin-vue@v10.9.2...v10.10.0)

Updates `prettier` from 3.9.5 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.5...3.9.6)

Updates `vue-tsc` from 3.3.7 to 3.3.8
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.3.8/packages/tsc)

---
updated-dependencies:
- dependency-name: marked
  dependency-version: 18.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: website
- dependency-name: nuxt
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: website
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: website
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: website
- dependency-name: eslint-plugin-vue
  dependency-version: 10.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: website
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: website
- dependency-name: vue-tsc
  dependency-version: 3.3.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: website
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: website. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Copilot AI review requested due to automatic review settings August 3, 2026 04:14
Copilot AI reviewed Aug 3, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates the Nuxt website’s Node/Vue tooling and key dependencies to newer patch/minor releases.

Changes:

  • Bumped nuxt and marked patch versions
  • Updated dev tooling versions (@types/node, eslint, eslint-plugin-vue, prettier, vue-tsc)

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread website/package.json
Comment on lines +23 to +24
"marked": "^18.0.7",
"nuxt": "~4.5.1",
Comment thread website/package.json
Comment on lines +30 to +35
"@types/node": "^26.1.2",
"eslint": "^10.8.0",
"eslint-plugin-vue": "^10.10.0",
"prettier": "^3.9.6",
"typescript": "^6.0.3",
"vue-tsc": "^3.2.5"
"vue-tsc": "^3.3.8"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant