Skip to content

build(deps): bump nuxt from 4.4.2 to 4.4.6 in /docs#999

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/docs/nuxt-4.4.6
Open

build(deps): bump nuxt from 4.4.2 to 4.4.6 in /docs#999
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/docs/nuxt-4.4.6

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 19, 2026

Bumps nuxt from 4.4.2 to 4.4.6.

Release notes

Sourced from nuxt's releases.

v4.4.6

4.4.6 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes

  • vite: Use spa entry for vite-node fallback (#35037)
  • vite: Invalidate SSR module cache when modules are invalidated via plugin hooks (a86657a0e)
  • nuxt: Match deduplicated resolveComponent calls in jsx blocks (#35028)
  • nuxt: Prefer our own builder/server deps (#35029)
  • nuxt: Update useFetch key even with watch: false (#35002)
  • nitro: Mark @babel/plugin-syntax-typescript as optional peer dep (#35041)
  • nitro: Add json extension to payload cache items (#35043)
  • nuxt: Handle errors fetching app manifest (#35050)
  • nuxt: Encode html-significant characters in external redirect body (#35052)
  • nuxt: Preserve setPageLayout props on same-path navigation (#35055)
  • vite: Don't strip buildAssetsDir from vite-node SSR ids (#35040)
  • nuxt: Mark useLoadingIndicator properties as readonly (#35062)
  • vite: Strip queries in css inline styles map (#35067)
  • nitro: Validate island request hash matches props (#35077)
  • nitro: Use regexp to strip query (163e18d4b)
  • nitro: Use statusCode for nitro v2 compatibility (952f6841e)
  • nitro-server: Re-export h3 named symbols statically (cd99001c8)
  • nuxt: Render component-less parent routes during client-side nav (#35036)
  • kit: Respect tsConfig.exclude in legacy tsconfig.json (#35079)
  • nuxt: Run middleware for page islands (#35092)

💅 Refactors

  • rspack,webpack: Extract same-origin check for dev middleware (#35051)

📖 Documentation

  • Remove CSB, set node 22 and use steps for clarity (#35066)

🏡 Chore

✅ Tests

🤖 CI

  • Clean up agent-scan workflow (ab8317547)
  • Continue autofix workflow when test:engines fails (3025e561e)
  • Improve workflows (#35088)

❤️ Contributors

... (truncated)

Commits
  • 30a45f7 v4.4.6
  • e881fe8 fix(nuxt): run middleware for page islands (#35092)
  • 3310097 fix(nuxt): render component-less parent routes during client-side nav (#35036)
  • b29f805 chore(deps): update all non-major dependencies (4.x) (#35075)
  • e9cddf4 fix(nitro): validate island request hash matches props (#35077)
  • 7499721 fix(nuxt): mark useLoadingIndicator properties as readonly (#35062)
  • 38507a8 chore(deps): update dependency cssnano to v8 (4.x) (#35038)
  • 5abe6d3 chore(deps): update all non-major dependencies (4.x) (#35046)
  • 4bdd9dd fix(nuxt): preserve setPageLayout props on same-path navigation (#35055)
  • 1ca9c44 fix(nuxt): encode html-significant characters in external redirect body (#35052)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 19, 2026
@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages Bot commented May 19, 2026

Deploying nuxt-devtools with  Cloudflare Pages  Cloudflare Pages

Latest commit: 7080afb
Status:🚫  Build failed.

View logs

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 19, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/docs/nuxt-4.4.6 branch from 7f125ec to 794f196 Compare May 29, 2026 07:14
@socket-security
Copy link
Copy Markdown

socket-security Bot commented May 29, 2026

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm ioredis is 96.0% likely obfuscated

Confidence: 0.96

Location: Package overview

From: docs/pnpm-lock.yamlnpm/ioredis@5.11.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/ioredis@5.11.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Bumps [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) from 4.4.2 to 4.4.6.
- [Release notes](https://github.com/nuxt/nuxt/releases)
- [Commits](https://github.com/nuxt/nuxt/commits/v4.4.6/packages/nuxt)

---
updated-dependencies:
- dependency-name: nuxt
  dependency-version: 4.4.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/docs/nuxt-4.4.6 branch from 794f196 to 7080afb Compare May 29, 2026 07:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants