Repository navigation
chore(deps): update dependency @nuxt/kit to v4 - #150
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
from
July 21, 2025 09:32
8288b40 to
99f3682
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
from
July 29, 2025 04:25
99f3682 to
9c9cb03
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
2 times, most recently
from
August 10, 2025 15:27
a9654fc to
1cdcd25
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
2 times, most recently
from
August 19, 2025 12:12
cc9cc4f to
a9568e4
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
3 times, most recently
from
September 5, 2025 22:43
a7dab29 to
4b91b81
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
from
September 13, 2025 10:05
4b91b81 to
e428bc2
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
from
September 25, 2025 17:56
e428bc2 to
2f70965
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
from
October 6, 2025 19:15
2f70965 to
e6f9a4f
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
2 times, most recently
from
October 25, 2025 06:53
6e52cd8 to
2aa500f
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
2 times, most recently
from
November 10, 2025 22:42
8ec608b to
aa6ad1d
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
from
November 18, 2025 23:40
aa6ad1d to
95e2aeb
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
2 times, most recently
from
December 9, 2025 17:35
ba609b1 to
4348d5a
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
from
December 31, 2025 18:48
4348d5a to
af25c6b
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
from
January 8, 2026 21:23
af25c6b to
9086ac3
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
3 times, most recently
from
January 23, 2026 20:58
cd88320 to
520e004
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
2 times, most recently
from
February 7, 2026 18:06
36d6842 to
7e9b9bf
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
2 times, most recently
from
February 17, 2026 18:09
87c916b to
50aed37
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
2 times, most recently
from
March 12, 2026 15:08
514a586 to
ecf4225
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
2 times, most recently
from
June 9, 2026 21:10
eeabb1c to
5352efd
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
from
June 11, 2026 22:09
5352efd to
45b467f
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
3 times, most recently
from
July 18, 2026 22:40
4e4db00 to
475f81c
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
3 times, most recently
from
July 27, 2026 11:52
ddd5ed5 to
f599b5a
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
2 times, most recently
from
August 5, 2026 16:55
eeda1de to
02477d9
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
2 times, most recently
from
August 14, 2026 21:49
779bba1 to
f98943b
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
from
August 26, 2026 10:08
f98943b to
6e83892
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
4 times, most recently
from
September 9, 2026 15:30
687deca to
e39f6ab
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
2 times, most recently
from
September 15, 2026 10:34
3077cb9 to
5c2f348
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
2 times, most recently
from
September 30, 2026 23:52
8ad83f8 to
5bfd504
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
4 times, most recently
from
October 11, 2026 04:24
0e112c1 to
bb34a7f
Compare
renovate
Bot
force-pushed
the
renovate/major-nuxt
branch
from
October 13, 2026 14:13
bb34a7f to
b986f5e
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
^3.16.2→^4.6.4Release Notes
nuxt/nuxt (@nuxt/kit)
v4.6.4Compare Source
These probably won't affect most apps, but it's worth flagging anyway:
createError. Everything else is stripped.Hostchecks. Webpack and rspack dev servers now reject requests with an unexpectedHostheader, as Vite already does. If you use a custom hostname or tunnel, you'll need to add it to the newdevServer.allowedHostsoption.workspaceDirdetection. WhenworkspaceDirisn't set, Nuxt now only widens it pastrootDirto an explicit workspace root or the closest git repository.cache,swrandisrroute rules now only cacheGETandHEADrequests, and no longer store responses that set a cookie or sendCache-Control: privateorno-store. Wildcardproxyandredirectrules also reject requests whose resolved target would leave the rule's scope./api%2Fadminis covered by a/api/**rule.👉 Changelog
compare changes
🩹 Fixes
768d21368)bf31e4cd8)1b13c6981)75c12c6fb)6f1b93c64)1e7dfa6a7)8c56b71e4)97424dd21)8c11d965d)3c9645326)f8d64c9aa)devServer.allowedHosts(3e1c7964e)084396b10)89d3306d1)x-forwarded-protoin when opted-in (#36818)nuxt/serverhandler (#36817)24d75659d)definePageMeta(#36751)📖 Documentation
1225ca7ff)🏡 Chore
c852d871f)✅ Tests
7528c3ce6)545b5934c)40f72b40b)861e153dd)🤖 CI
d093c88b1)4b90681bd)6428070e0)bc17c03d1)❤️ Contributors
v4.6.3Compare Source
👉 Changelog
compare changes
🚨 Security fixes
63299e13c) - GHSA-x287-wcfc-q46cc7e204ec6) - GHSA-648h-gw55-m2g716dfdc2a9) - GHSA-3xf4-9g3c-4h4w440250d97) - GHSA-9v7c-q64q-vv33b20372dbe) - GHSA-2fxj-c3j7-rr69🔥 Performance
fs.allow(#36702)🩹 Fixes
navigateTowhile middleware runs (#36650)_asyncData(#36709)import.metakeys + limit replace to client dev (#36703)#appcomposables (#36696)shared/in build cache hash (#36704)rootDir(#36697)updateCallbackDoneof aborted view transition (#36639)sensitive: false(#36708)634cba64c)noScriptswildcard patterns single-segment (fa323db7d)nuxt/schemaaugmentation (#36633)nuxt/*imports (#36632)vite.configfiles (#36628)include(#36627)v-forsources in island renders at render time (#36623)📖 Documentation
build:manifesthook (#36695)4b12d15c9)✅ Tests
NUXT_B4023as main-only (4fd54ff9a)453406999)NUXT_B9006as main-only (e107e0f40)🤖 CI
132698a46)7d228ba4b)bad8c3637)9d47884f3)1d89ad434)🎉 New Contributors
❤️ Contributors
v4.6.2Compare Source
👉 Changelog
compare changes
🩹 Fixes
useHeadSaferules to server island head (493565e99)010f6b43d)f6cfee52c)rawVaporSlotKeyfrom vue (#36614)experimental.typescriptPlugin(#36561)AnyFetchPathfor emitted server route types (#36610)nuxt/appto the app's runtime (#36587)appMiddleware(#36565)render:responselisteners (#36583)vueto its bundler build in dev (#36569)/@id/in dev (#36549)nitroAutoImportsis off (#36548)💅 Refactors
📖 Documentation
H(TTP)toHTTP(#36559)proxyroute rule (4a529be68)definePluginanddefineNitroPluginin server plugin tip (64b8e0334)e551df267)7499a445b)🏡 Chore
3110d6947)fb01db4eb)nuxt/appentry shim from root typecheck (c65cef3a8)test:engines(6ce412822)#build/server-routesstub via root tsconfig paths (8235dd605)✅ Tests
ca784deb7)🤖 CI
inlinedDependenciesin autofix (4b6da3a29)917bdf218)🎉 New Contributors
❤️ Contributors
v4.6.1Compare Source
👉 Changelog
compare changes
🔥 Performance
cffb182d6)🩹 Fixes
baseURLwhen fetch response type is named (#36523)nitropack/typesdeclarations under nodenext (242e1971e)falseinsetPageLayouttypes (#36506)Serializeobject types with JSON (#36503)publishConfigconfig export extension (64fa191cb)RequestEventtonuxtdev server handlers (e6beceea2)$fetchwith nuxt'sTypedFetch(#36492).wranglerdirectory (#36487)BroadcastChannelthrows (#36480)nuxtdev server handler variant (452052793)21657c6fc)unheadfrom nuxt in server bundle (dc1e2d6e6)💅 Refactors
package-manager-detectorworkspace + deno handling (1563a6d25)📖 Documentation
nuxt/serverscope (7c36a1352)🏡 Chore
CLAUDE.md(#36462)bdf98e936)787d0d980)✅ Tests
30742865c)1f22a114d)🤖 CI
latest(682605dba)3b8853489)🎉 New Contributors
❤️ Contributors
v4.6.0Compare Source
📣 Some news
🖥️ Nuxt CLI v4
Alongside the release of Nuxt v4.6, today also brings a new major release of the Nuxt CLI:
@nuxt/cliv4. It ships as a dependency ofnuxt, so you'll get it automatically when you upgrade.Most of what's new is in
nuxt dev:nuxt.configkeys changed, where the time went during a slow start or build, and how long each module took to set upmy-bad(see below), powering things like automatically reloading when a syntax error innuxt.config.tsis fixed.nuxt/, which lets a secondnuxt dev(say, one started by an agent) take over or defer to the one you started, and powers newnuxt curlandnuxt taskcommands that talk to the running serverThere's also a new
nuxt docs "<query>"search, andnuxt preview --takeovercan replace a running preview server. And in generalnuxt/cliis a lot smaller and starts a lot faster:@nuxt/cliinstall size@nuxt/clidependenciesnuxt dev: first paintnuxt dev: port boundnuxt dev: memory at rest (Linux)Although this is a major version, none of the changes should be breaking for Nuxt v4 users: we require Node.js v22.21+, v24.11+ or v26+, we drop
nuxt initand only supportnpm create nuxt@latest, and Nuxt 2 and@nuxt/bridgeare no longer supported.👉 Check out the full Nuxt CLI v4 release notes for everything that's changed.
💡 A server-agnostic Nuxt
The biggest thing about this release is our move towards making Nuxt server-agnostic.
I feel that freedom of choice is very much a fundamental value of the web, and one that unites the whole Nuxt team.
You can use
pages/(with vue-router) or not. You can use Vite, webpack or Rspack to bundle your code. You can pick from dozens of providers to deploy to, pick any image or font provider, choose any database adapter. In every case, the framework is the same.The server side was different.
#appcomposables imported h3 types, server code imported fromh3andnitropack, and every module that touched the server was tied to whichever major version of those packages Nuxt happened to depend on.This has become particularly clear as we have been upgrading to new majors of h3 and nitro, which ship breaking changes with a cascading effect throughout the whole ecosystem.
👉 This release changes that.
Alongside explicitly defining our public API in
nuxt/kit(which now does not refer to external packages), Nuxt now specifies our own types for the request event, route rules and typed$fetch, and we expose an import surface (nuxt/server) for the server utilities that will be needed by most apps.This is the culmination of work we started almost a year ago, making it possible to use any server builder with Nuxt, not just Nitro (#33462).
Of course, under the hood,
nuxt/serveris still powered by Nitro by default - though we are also announcing a second, experimental implementation,@nuxt/vite-server, which allows pure-Vite server builds using the Vite Environment API.🌟 We see a number of key benefits for
nuxt/server.nuxt/serveron 4.6 runs unchanged there, so a module can ship one file for both./appand/server- and the bundler + server that you ultimately want to build your app.... and there are a number of other benefits too, from a single type surface to being able to iterate more quickly on features.
Finally, I want to say a special thank-you to @pi0, whose relentless focus on server agnosticism and work on h3, Nitro and web-standard server primitives over the last few years is what makes a portable
RequestEventpossible at all. Thank you, Pooya. ❤️Almost every feature in this release is already in the Nuxt 5 branch, and most of the remaining Nuxt 5 defaults can be tested today with
future.compatibilityVersion: 5(more details below!).👀 Highlights
🤷 If you've read this far I'm afraid I have bad news for you: there's a lot more still to say! Nuxt 4.6 is one of our biggest minor releases, with over 420 commits since v4.5.2.
... so, you might want to grab a coffee! ☕️
🧩
nuxt/serverIt has been asked for for a long time, and it now exists (#36275)!
nuxt/serveris a new import source for server code: handlers, middleware and utilities - a complement tonuxt/app. Wherenuxt/appis for the part of your application that also runs in the browser,nuxt/serveris for the part that only runs on the server.The utilities use web standards and are typed against a portable
RequestEvent:Under
@nuxt/nitro-serverthey are backed by Nitro and h3, but you never import from either.So the same handler runs under Nitro v2, Nitro v3 or
@nuxt/vite-server, and a module that imports fromnuxt/serverdoesn't need a peer dependency onh3ornitropack.We think this will make a big difference in smoothing out the upgrade to Nuxt v5 and Nitro v3.
There is a typing benefit too. We no longer hoist h3 or Nitro types into your app to type
useRequestEvent,$fetchor route rules, which removes a source of type conflicts when versions differ (#36212, #36214, #36293).The surface is small, and covers what published modules and user code typically need:
defineEventHandler,createError/isNuxtError, request URL, headers, query, body (plain and validated with any Standard Schema library or a function), cookies, redirects, response status,getRouterParam(s),getRequestIP,handleCors,getRouteRules,useRuntimeConfig,useAppConfigand sessions.We encourage you to use web APIs (
event.req.headers, for example), or raise an issue if there's functionality you're missing fromnuxt/server🙏If you do need to step outside
nuxt/serverfor a particular handler, don't worry! Nothing has been taken away: importdefineEventHandlerand the helpers you need fromh3ornitropack/runtimeas before, and that handler works exactly as it did on Nuxt 4.5.A few helpers also behave differently from their h3 v1 namesakes:
sendRedirectreturns the response rather than sending it,createErrortakesstatusandstatusText, and response headers are set throughevent.res.headers. The upgrade guide has a table of the differences.Nothing in this release requires a migration. But if you have server code you'd like to make portable ahead of Nuxt 5, this is the best way.
👉 Read the server imports guide.
🔐
appSecretand sessionsNuxt now has a root application secret:
runtimeConfig.appSecret, set withNUXT_APP_SECRET(#35874, thanks to @onmax). Modules and server features derive purpose-specific secrets from it withderiveSecret(purpose), soNUXT_APP_SECRETis the only secret you need to configure.In development Nuxt generates and persists one if none is configured (and warns the first time a derived secret is used). Builds never generate one.
The first thing to use it is a set of session helpers in
nuxt/server(#36358). Sessions are sealed into a cookie with iron, so there's no server-side storage to configure:🎯 Typed
$fetch, rebuilt$fetchanduseFetchhave been typed from your server routes for a long time. But the types were derived from Nitro'sInternalApiinterface, and past a few hundred routes they hit TypeScript's instantiation limit with the familiarTS2589: Type instantiation is excessively deep and possibly infinite.We've rebuilt typed fetch on top of
fetchdts(#36238). Nuxt compiles your server routes into a route tree with an exact-match table for static paths and accessors specialised to your route set. Resolution cost now scales with call sites, not with route count:TS2589)TS2589)TS2589)Peak memory for the same runs dropped from 946 MB to 140 MB. 🔥
Plus, the route set also carries the
body,queryandheadersa handler validates, so calls are checked more tightly than before:On Nuxt 4 this is opt-in, because there are small changes to type inference, and hand-written
ServerRoutesaugmentations need a small rewrite. It is the default in Nuxt 5.There's also a new
experimental.strictRouteTypesoption to reject calls to paths that don't exist (otherwise these just returnunknown), and an'isomorphic'mode that types your pages asGETroutes too if you want to be able to$fetchfrom the Vue renderer with type safety.👉 Read more in the experimental features docs.
🐛 Better errors in development with
my-badServer-side errors in development used to look like this:
There was no source position or code frame, and the Youch iframe we rendered could not show you the frame in your own source either. Both are now fixed (#36258, nuxt/cli#1518).
Dev SSR stack traces are now mapped before anything reads the error, and the Youch overlay has been replaced with
my-bad. It renders into your app's own error page as an overlay (or as a standalone page when the app can't render one), with the mapped stack trace and a code frame from your source, and the same report is printed in your terminal. We are still working with @atinux, @HugoRCD and @antfu to make these pages nicer still.With Nuxt CLI v4, there is a single live error channel at the CLI level. It survives worker restarts, so (for example) a syntax error in
nuxt.config.tswill live-reload the page once you fix it. Each error is rendered once rather than at every layer it passes through, and the same channel streams build progress and app logs to the dev panel.🎨 A new loading screen, 404 and error pages
@HugoRCD has redrawn the loading screen you see while the dev server starts. It is now a WebGL2 particle field that traces a mountain range behind the Nuxt lockup (#36178), using a single shader and a single draw call. Without WebGL2 it falls back to the static lockup, and with
prefers-reduced-motionthe animation stops. Try hovering over it. 🏔️Hugo also gave the built-in 404 and error pages a neutral palette and lighter type (#36255), and @MirkoJa added a back button to the 404 page (#35688).
<img width="3200" height="2000" alt="404-page-dark" src="https://
Configuration
📅 Schedule: (UTC)
* * * * *)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.