chore(deps): update all non-major dependencies - #1507
Merged
Conversation
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
commit: |
Contributor
CLI benchmark
Full report
|
| Setting | Value |
|---|---|
| Baseline | ref:11fc0abdd3c0f4dcd4a5cd60ec2885fa662335df (v4.0.0-alpha.0) |
| Head | local packages/nuxt-cli at 734b9e2 (v4.0.0-alpha.0) |
| Node | v24.19.0 |
| OS | Linux 6.17.0 (kernel 6.17.0-1022-azure) |
| CPU | AMD EPYC 9V45 96-Core Processor x 4 |
| Memory | 15.6 GB |
| Load average at start | 0.89, 0.34, 0.13 |
| Run started | 2026-08-31T07:20:39.939Z |
Cold CLI startup
Median of 15 interleaved runs per command, one warmup discarded.
| Command | baseline v4.0.0-alpha.0 median | head v4.0.0-alpha.0 median | Delta | baseline v4.0.0-alpha.0 min / p95 | head v4.0.0-alpha.0 min / p95 |
|---|---|---|---|---|---|
nuxt --version |
40 ms | 39 ms | -2.6% | 38 ms / 45 ms | 38 ms / 43 ms |
nuxt --version (first output byte) |
37 ms | 36 ms | -2.7% | 35 ms / 42 ms | 35 ms / 39 ms |
nuxt --help |
80 ms | 80 ms | +0.4% | 78 ms / 83 ms | 78 ms / 82 ms |
nuxt --help (first output byte) |
76 ms | 76 ms | +0.1% | 74 ms / 79 ms | 74 ms / 78 ms |
nuxt dev --help |
64 ms | 64 ms | -0.4% | 60 ms / 67 ms | 62 ms / 66 ms |
nuxt dev --help (first output byte) |
60 ms | 60 ms | +0.0% | 56 ms / 63 ms | 58 ms / 63 ms |
nuxt <unknown-command> (no-op) |
87 ms | 85 ms | -1.5% | 82 ms / 88 ms | 82 ms / 89 ms |
nuxt <unknown-command> (no-op) (first output byte) |
82 ms | 81 ms | -1.8% | 78 ms / 84 ms | 78 ms / 84 ms |
Module load cost
Counted with a module.registerHooks load hook, compile cache disabled. Counts every JS module actually evaluated on that code path (built-ins excluded, native addons excluded).
| Command | baseline v4.0.0-alpha.0 modules | head v4.0.0-alpha.0 modules | Delta | baseline v4.0.0-alpha.0 source bytes | head v4.0.0-alpha.0 source bytes | Delta |
|---|---|---|---|---|---|---|
nuxt --version |
38 | 38 | 0.0% | 298.7 kB | 298.4 kB | -0.1% |
nuxt --help |
138 | 138 | 0.0% | 1.01 MB | 1.01 MB | +0.0% |
nuxt dev --help |
81 | 81 | 0.0% | 620.1 kB | 619.7 kB | -0.1% |
Install footprint and published tarball
Each version installed on its own into an empty project with nothing but @nuxt/cli as a dependency, so the tree is exactly the CLI and its transitive dependencies. npm cache is warm and the registry is only consulted for metadata, so install wall time is indicative, not a network benchmark.
| Metric | baseline v4.0.0-alpha.0 | head v4.0.0-alpha.0 | Delta |
|---|---|---|---|
Direct dependencies of @nuxt/cli |
21 | 21 | 0.0% |
| Packages in the installed tree (unique name@version) | 34 | 34 | 0.0% |
| Unique package names | 34 | 34 | 0.0% |
| Package directories on disk (cross-check) | 28 | 28 | 0.0% |
Installed node_modules on disk |
2.38 MB | 2.38 MB | +0.0% |
| Installed files | 419 | 419 | 0.0% |
| Install wall time (warm npm cache, median of 3) | 371 ms | 375 ms | +0.9% |
| Published tarball (packed) | 284.6 kB | 284.8 kB | +0.1% |
| Published tarball (unpacked) | 983.7 kB | 984.4 kB | +0.1% |
| Files in tarball | 131 | 131 | 0.0% |
Interleaved runs on a shared runner: trust the deltas, not the absolute timings. The dev, restart and build suites run locally via pnpm bench:cli.
danielroe
approved these changes
Aug 31, 2026
github-merge-queue
Bot
removed this pull request from the merge queue due to a conflict with the base branch
Aug 31, 2026
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
August 31, 2026 06:56
329eb39 to
a81d2fa
Compare
danielroe
approved these changes
Aug 31, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^4.1.0→^4.2.0^2.0.0→^2.1.0v5.0.3→v5.2.1v2.4.0→v2.5.0^0.0.1→^0.1.0v0.6.7→v0.6.9^10.9.0→^10.9.164.2.1→64.3.164.3.2^6.32.2→^6.33.024.19.0→24.20.024.19.0→24.20.011.23.0→11.24.0^4.62.5→^4.63.1^3.5.41→^3.5.42^3.5.41→^3.5.42^5.2.0→^5.3.0^5.2.0→^5.3.05.2.0→5.3.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
nuxt/test-utils (@nuxt/test-utils)
v4.2.0Compare Source
👉 Changelog
compare changes
🚀 Enhancements
🩹 Fixes
mockNuxtImportsourcemap mapped position (#1787)setupTimeoutin playwright + surface server logs (#1785)includeSourcein both projects indefineVitestConfig(#1763)taskkillto kill processes on windows (#1760)🏡 Chore
latestranges with caret ranges (#1773)✅ Tests
🤖 CI
🎉 New Contributors
❤️ Contributors
speed-highlight/core (@speed-highlight/core)
v2.1.0Compare Source
Bug Fixes
Features
v2.0.1Compare Source
Bug Fixes
CodSpeedHQ/action (CodSpeedHQ/action)
v5.2.1Compare Source
Bumps the CodSpeed runner to v5.2.1.
🚀 Features
simulation-track-subprocessinput, which enables measuring the subprocesses spawned by the benchmarked process insimulationmode by @adriencaccia in #235Full Runner Changelog:
https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md
What's Changed
Full Changelog: CodSpeedHQ/action@v5.2.0...v5.2.1
v5.2.0Compare Source
Bumps the CodSpeed runner to v5.2.0, including v5.1.0.
🚀 Features
--simulation-track-subprocessflag that enables tracking benchmark subprocesses, along with per-thread dumps by @GuillaumeLagrange in #493 and #513🐛 Bug Fixes
⚙️ Internals
--separate-threads=yesby @GuillaumeLagrange in CodSpeedHQ/valgrind-codspeed#24Full Runner Changelog:
https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md
What's Changed
Full Changelog: CodSpeedHQ/action@v5.0.3...v5.2.0
MatteoGabriele/agentscan-action (MatteoGabriele/agentscan-action)
v2.5.0Compare Source
Identity update:
Full Changelog: MatteoGabriele/agentscan-action@v2.4.0...v2.5.0
danielroe/clickable-path (clickable-path)
v0.1.0Compare Source
👉 Changelog
compare changes
🩹 Fixes
🎉 New Contributors
❤️ Contributors
danielroe/uppt (danielroe/uppt)
v0.6.9Compare Source
compare changes
🩹 Fixes
❤️ Contributors
v0.6.8Compare Source
compare changes
🚀 Enhancements
🩹 Fixes
❤️ Contributors
eslint/eslint (eslint)
v10.9.1Compare Source
gajus/eslint-plugin-jsdoc (eslint-plugin-jsdoc)
v64.3.1Compare Source
v64.3.0Compare Source
Features
no-unnecessary-type-assertion: add rule for checking @type assertions (4be7b47)webpro-nl/knip (knip)
v6.33.0: Release 6.33.0Compare Source
a82efb6) - thanks @WooWan!d055023) - thanks @DreierF!937ab38) - thanks @renovate[bot]!defineConfigon a./configentrypoint (#1960) (17f7a60) - thanks @theRizwan!c0a9ecf) - thanks @DreamLongYT!db67f9b) - thanks @remcohaszing!0ecf485) - thanks @DreamLongYT!ada88c7)7764c2a)d7ac0cf)2bd3679)74640c0)b79234c)2851014)4e22bfc)65011bf)cad8910) - thanks @DreamLongYT!5a47d60) - thanks @addielaruee!settings(#1983) (c1165b7) - thanks @DreierF!4a5d706) - thanks @DreamLongYT!505decd)bcbac3a)Object.*enum enumeration through import aliases (347967d)2ac1fbc)9fe2b2b)extendsentry shapes (db13615)74954c2).gitattributesinpnpm run ci(ddc9fd0)v6.32.3: Release 6.32.3Compare Source
9f18cba)de51629)f6964dd)68d6f52) - thanks @codeAnqiang-ma!4015ae0) - thanks @codeAnqiang-ma!deedbf6) - thanks @marcalexiei!0201641) - thanks @DSeaStar!dc7aca5) - thanks @solomonaustin!ee555d2) - thanks @kirthi-b!ff0d791) - thanks @DreamLongYT!a0c0b08) - thanks @taracutie!d1d5d42) - thanks @NimmLor!e655b0b)f4ff31a)actions/node-versions (node)
v24.20.0: 24.20.0Compare Source
Node.js 24.20.0
nodejs/node (node)
v24.20.0: 2026-08-26, Version 24.20.0 'Krypton' (LTS), @aduh95Compare Source
Notable Changes
b12bcc9ae1] - (SEMVER-MINOR) async_hooks: addusingscopes toAsyncLocalStorage(Stephen Belanger) #61674e2eb88b36b] - (SEMVER-MINOR) buffer: addendparameter (Robert Nagy) #623901fefdda18e] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #647464a158cf1ab] - doc: add MikeMcC399 as collaborator (Mike McCready) #64656d4cafce076] - (SEMVER-MINOR) lib,permission: addpermission.drop(Rafael Gonzaga) #62672b3cfb55267] - (SEMVER-MINOR) loader: implement package maps (Maël Nison) #62239cd1eb3e60b] - (SEMVER-MINOR) src,permission: add--permission-audit(RafaelGSS) #6186928dc85d8d2] - (SEMVER-MINOR) stream: addnode:stream/iterimplementation (James M Snell) #62066d31c168740] - (SEMVER-MINOR) test_runner: addcontext.log()and test:log event (Moshe Atlow) #64389add1edbc42] - (SEMVER-MINOR) test_runner: reportentryFileinTestStreamevents (Moshe Atlow) #64309d937c8c6cd] - (SEMVER-MINOR) wasm: enable JSPI (Guy Bedford) #59941Commits
1822c0f335] - assert,util: fix TypeError on Maps with null keys (Paul Bouchon) #64441b12bcc9ae1] - (SEMVER-MINOR) async_hooks: add using scopes to AsyncLocalStorage (Stephen Belanger) #61674984260bf44] - async_hooks: use validateBoolean for trackPromises (Soul Lee) #64731ba2612cca2] - benchmark: fix calibrate-n option handling (Luan Muniz) #64146236dc4d2d7] - benchmark: add bytes variant to webstreams async-iterator (Matteo Collina) #64291b022a1419c] - benchmark: respect stream/iter broadcast backpressure (Trivikram Kamat) #63314a290f51f15] - (SEMVER-MINOR) benchmark: add benchmarks for experimental stream/iter (James M Snell) #62066465f2bfb74] - buffer: use Clamp conversion in Blob slice (Donghoon Kang) #6473974a22cd0c5] - buffer: validate copyArrayBuffer offsets against buffer length (Ilia Alshanetsky) #6390421e24208dc] - buffer: normalize lone "\r" in Blob native line endings (Daijiro Wachi) #64115ddacb3ff10] - buffer: fix Blob.stream() leaking source buffer (semimikoh) #6357749198d2313] - buffer: fix end parameter bugs in indexOf/lastIndexOf (Robert Nagy) #62711e2eb88b36b] - (SEMVER-MINOR) buffer: add end parameter (Robert Nagy) #62390e2e5c4fe88] - build: update binary-upload to use correct tarball name (Stewart X Addison) #65282b78a212553] - build: pin envinfo versions in github actions (Joyee Cheung) #64117094fb840aa] - build: add QUIC CI job for PRs matching QUIC related paths (Tim Perry) #6387591f5003cad] - build: fix flags for ngtcp2 on IBM i (SRAVANI GUNDEPALLI) #60073e83648effd] - build,test: add tests for binary linked with shared libnode (Joyee Cheung) #614634a425b41d9] - build,tools: fix shared library cross-compile (Kirill Saied) #63963fe8fa45ff2] - cli: style node --help output with util.styleText (Adrián Estrada) #644843cd1576cb2] - crypto: preserve OpenSSL errors from KDF failures (Filip Skokan) #6477674b3023565] - crypto: handle XOF output allocation failure (Filip Skokan) #64851fea0666a1b] - crypto: clarify missing cipher error (Filip Skokan) #6485233fec91b54] - crypto: reuse X509 issuer result (Filip Skokan) #6485244c1473348] - crypto: validate key generation options (Filip Skokan) #64852c2c53a18e5] - crypto: fix Argon2 validation errors (Filip Skokan) #64852edc1f2126d] - crypto: initialize KeyObjectData mutex eagerly (Filip Skokan) #64851be8237240c] - crypto: handle DH operation failures (Filip Skokan) #64851b65a8f3875] - crypto: preserve RSA-PSS legacy pubkey DER (Filip Skokan) #6454749f2ae204b] - crypto: cleanse provider private key copies (Filip Skokan) #64547a5d4ac8208] - crypto: handle incomplete RSA private keys (Filip Skokan) #64547b72c0b9616] - crypto: retain legacy DH validation (Filip Skokan) #6454724a1be5886] - crypto: limit KangarooTwelveParams customization to 512 bytes (Filip Skokan) #645570290e0a61e] - crypto: split OpenSSL 3, BoringSSL, and legacy backends (Filip Skokan) #64211ba27e72ff8] - crypto: fix Argon2 bypassing FIPS mode (Filip Skokan) #647761fefdda18e] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746c0dd022081] - crypto: use user-facing error for output encoding changes (Archkon) #64692ff485a9410] - crypto: make --use-system-ca per-env rather than per-process (Aditi) #606781329d9b9f1] - debugger: preserve overlapping CDP request state (Trivikram Kamat) #6446782a02336aa] - deps: V8: backportd259a9e(Leszek Swirski) #63865f0fc82d404] - deps: update ngtcp2 to 1.25.0 (Node.js GitHub Bot) #64944c4e02f0fbc] - deps: upgrade npm to 11.19.0 (npm team) #64883d5a57ed4dd] - deps: update nghttp3 to 1.18.0 (Node.js GitHub Bot) #6494351d413150a] - deps: update minimatch to 10.2.6 (Node.js GitHub Bot) #6494521f79ce140] - deps: update simdjson to 4.6.6 (Node.js GitHub Bot) #649427a4960d6a9] - deps: update acorn to 8.18.0 (Node.js GitHub Bot) #649415c423aa113] - deps: update googletest to1b6f64d(Node.js GitHub Bot) #6494040561e61b0] - deps: update nghttp2 to 1.70.0 (Node.js GitHub Bot) #6493951090925b0] - deps: update zlib to 1.3.2.1-motley-42c2f19 (Node.js GitHub Bot) #647447c534bf8e5] - deps: V8: backport5177b10(avivkeller) #646317b1898a341] - deps: update ada to 4.0.0 (Node.js GitHub Bot) #647909209cc4095] - deps: update sqlite to 3.53.4 (Node.js GitHub Bot) #647453833fceff6] - deps: update googletest tofa005b2(Node.js GitHub Bot) #64587bc7ce488d1] - deps: histogram: cherry-pick62ea52b(StefanStojanovic) #64296e3fa05841d] - deps: update histogram to 0.11.10 (Node.js GitHub Bot) #64296e75bdb9bbe] - deps: update amaro to 1.1.11 (Node.js GitHub Bot) #645861e034e6e40] - deps: update timezone to 2026c (Node.js GitHub Bot) #645882b8f1f27bd] - deps: update googletest to8240fa7(Node.js GitHub Bot) #64439241ece0417] - deps: enable OpenSSL asm support for riscv64 (Jamie Magee) #62606215105eb90] - deps: update c-ares to 1.34.8 (Node.js GitHub Bot) #643307ac97fc84e] - deps: upgrade npm to 11.18.0 (npm team) #641998d4cb9ae46] - deps: update zlib to 1.3.2.1-motley-8b3aa8a (Node.js GitHub Bot) #64295564c0f4592] - deps: update ngtcp2 to 1.24.0 (Node.js GitHub Bot) #64297e3304cd31a] - deps: update nghttp3 to 1.17.0 (Node.js GitHub Bot) #64182345d6ad4eb] - deps: update ngtcp2 to 1.23.0 (Node.js GitHub Bot) #63777a53db015e6] - deps: update nghttp3 to 1.16.0 (Node.js GitHub Bot) #637761f4a5c1c76] - deps: update ngtcp2 to 1.22.1 (Node.js GitHub Bot) #62812080c4d7cda] - deps: update ngtcp2 to 1.22.0 (Node.js GitHub Bot) #625954309e7c82f] - deps: update ngtcp2 to 1.21.0 (Node.js GitHub Bot) #6205190cf11cfb5] - deps: update nghttp3 to 1.15.0 (Node.js GitHub Bot) #61512e1f315a554] - deps: update ngtcp2 to 1.20.0 (Node.js GitHub Bot) #615119a3f690c9d] - deps: update ngtcp2 to 1.19.0 (Node.js GitHub Bot) #61156fe88f31764] - deps: add ngtcp2 test binaries (James M Snell) #599466d60fce138] - diagnostics_channel: grow native channel storage (Stephen Belanger) #6449730ae8ab091] - doc: document --permission-audit audit mode behavior (Adrián Estrada) #647918cefc6efa8] - doc: fix guaranteed typo (lilianakatrina684-a11y) #623742e78e4b120] - doc: add throwIfNoEntry version history to fs.stat (kovan) #62204c7a04401cb] - doc: fix grammar and punctuation in dgram documentation (Kamal Rawal) #64957331e5e8f62] - doc: fix grammar and editorial issues in addons documentation (Kamal Rawal) #64952232287fcc6] - doc: formalize fn/name as part of TestOptions API (Christopher Hiller) #649467f9efeb445] - doc: remove references toca/crlas per-context QuicSession options (René) #64769b54aa83cc6] - doc: fix typo in maintaining-dependencies.md (greenhead) #64896f4e427803c] - doc: add RafaelGSS as last security release stewards (Rafael Gonzaga) #64843f2cd6df3f3] - doc: fix typos in documentation (greenhead) #64900d5627162bd] - doc: improve TestContext hook descriptions (Kamal Rawal) #6489972ee03bd2e] - doc: document stream.isDestroyed() (YspritanHyzygy) #64789995141eb81] - doc: add contributing detail for git Signed-off-by trailer (Mike McCready) #64862dc30379310] - doc: fix duplicated word in test snapshot docs (Kamal Rawal) #64837205d4d0472] - doc: remove obsolete cctest node.gyp instructions (Soul Lee) #64814108b883d0b] - doc: report proper return type on url.format (Brian Muenzenmeyer) #64806b03bd3a8ed] - doc: clarify tlsSocket.authorized on resumption (soreavis) #64584093098ad7f] - doc: stabilize --disable-warning (Jean Michelet) #647422de1d76d80] - doc: add MDN links for explicit resource management in fs (lluisemper) #595572e0f36a891] - doc: mention constructor check in deepStrictEqual (Sumit Kumar Das) #620101c9d354d09] - doc: update technical priorities (Jacob Smith) #6450530c99bf08f] - doc: deprecation add more codemod (Augustin Mauroy) #631758a971a09eb] - doc: run license-builder (Node.js GitHub Bot) #63918707f6eacfc] - doc: clarify rules for adding new built-in modules (Antoine du Hamel) #64648928208cffc] - doc: mention DEPENDENCY custom field for H1 reports (Rafael Gonzaga) #64634ee593cadf5] - doc: fix dnsPromises.lookup verbatim default (Shivam S) #646589c228b32d1] - doc: fix typo in releases guide (Jihwan) #646214a158cf1ab] - doc: add MikeMcC399 as collaborator (Mike McCready) #646568125809853] - doc: use promote wording in release guide (Md Muhtasim Munif Fahim) #643712a2effadf6] - doc: fix import.meta example for vm.SourceTextModule (Muhammad Zeeshan) #64112c879f912bf] - doc: mention crypto.hash() for better perf (Steven) #63420634afda904] - doc: update sea example by fixing wrong code example (Maxence Robinet) #64025bced1433a3] - doc: fix socket.readyState state descriptions (YuSheng Chen) #644684b2c18938f] - doc: replace large tables in crypto.md and webcrypto.md with liConfiguration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.