build(deps): bump the prod-deps group across 1 directory with 7 updates by dependabot[bot] · Pull Request #160 · not-three/ui

dependabot · 2026-10-17T20:37:19Z

Bumps the prod-deps group with 7 updates in the / directory:

Package	From	To
@pinia/nuxt	`1.0.2`	`1.0.3`
nanoid	`6.0.1`	`6.0.2`
nuxt	`4.5.2`	`4.6.1`
pinia	`4.0.3`	`4.1.0`
prettier	`3.9.9`	`3.9.10`
vue	`3.5.43`	`3.5.44`
vue-router	`5.3.1`	`5.4.0`

Updates @pinia/nuxt from 1.0.2 to 1.0.3

Release notes

Sourced from @pinia/nuxt's releases.

@pinia/nuxt@1.0.3

   🚀 Features

Add getStores() - by @Anoesj in vuejs/pinia#3194 (52fc9)

Warn when disposing a replaced store - by @Anoesj and @posva in vuejs/pinia#3193 (bf7ea)

   🐞 Bug Fixes

Trigger shallow refs patched via object syntax - by @lvyanyan, @posva and JSap0914 in vuejs/pinia#2861 and vuejs/pinia#3177 (a4eb2)

hmr: Preserve runtime state of empty placeholder objects - by @lvyanyan in vuejs/pinia#2931 and vuejs/pinia#3175 (6a359)

nuxt: Resolve default storesDirs against each layer - by @ondrhn in vuejs/pinia#3185 (98587)

testing: Notify shallow refs on initial state - by @sergioperezcheco in vuejs/pinia#3187 (a1581)

    View changes on GitHub

Commits

270a217 release: pinia@4.1.0 @pinia/testing@2.0.2 @pinia/nuxt@1.0.3
bf7ea46 feat: warn when disposing a replaced store (#3193)
fddd7c5 test: unused
52fc965 feat: add getStores() (#3194)
f48737e docs: fix links to heading anchors that use the wrong case (#3189)
668e881 refactor(nuxt): upgrade module for Nuxt 4.6 (#3188)
a158186 fix(testing): notify shallow refs on initial state (#3187)
98587ca fix(nuxt): resolve default storesDirs against each layer (#3185)
f4e0cb7 docs: fix dead Vue Devtools installation link (#3181)
a4eb2c5 fix: trigger shallow refs patched via object syntax (fix #2861) (#3177)
Additional commits viewable in compare view

Updates nanoid from 6.0.1 to 6.0.2

Release notes

Sourced from nanoid's releases.

6.0.2

Reduced JS bundle size (by @bayandin).

Fixed floats in size of customRandom (by @lost-signals).

Fixed performance of customRandom on changes size (by @00200200).

Fixed docs (by @Likio3000 & @lenamonj).

Changelog

Sourced from nanoid's changelog.

6.0.2

Reduced JS bundle size (by @bayandin).

Fixed floats in size of customRandom (by @lost-signals).

Fixed performance of customRandom on changes size (by @00200200).

Fixed docs (by @Likio3000 & @lenamonj).

Commits

3167e10 Release 6.0.2 version
05057d8 Reduce Nano ID size to 117 bytes (#613)
85f50f1 Update size limit
0b2cec5 Fix non-integer size in customRandom() (#616)
ccb0e6e fix: size customRandom's byte request from the ID length (#612)
ac313f9 Update dependencies
5a33c04 Backport changelog changes from v3
bb68abc docs: fix custom generator JSDoc examples (#610)
57009b5 Update Size Limit
8041d7d Update dependencies
Additional commits viewable in compare view

Updates nuxt from 4.5.2 to 4.6.1

Release notes

Sourced from nuxt's releases.

v4.6.1

v4.6.1 is the next patch release.

👉 Changelog

compare changes

🔥 Performance

nitro: build the portable event's web view on first access (cffb182d6)

🩹 Fixes

vite: match vite 8.1+ optimizer messages for deps hint (#36525)

nuxt: accept any baseURL when fetch response type is named (#36523)

nitro: resolve nitropack/types declarations under nodenext (242e1971e)

nuxt: allow false in setPageLayout types (#36506)

nuxt: align Serialize object types with JSON (#36503)

vite: don't abort dep scan on virtual imports in installed packages (#36477)

nuxt: update publishConfig config export extension (64fa191cb)

kit: install the package a missing subpath belongs to (#36507)

vite-server: use the configured outDir as the public directory for non-ssr environment (#36501)

kit,nitro: match dev handler paths on both nitro majors (#36515)

nuxt: preserve onServerPrefetch for useId hydration (#36430)

vite-server: include the request in dev error reports (#36489)

nitro: register each dev server handler once (#36493)

nitro: pass RequestEvent to nuxt dev server handlers (e6beceea2)

nuxt: type the global $fetch with nuxt's TypedFetch (#36492)

vite-server: work with deploy target plugins in dev (#36491)

schema: ignore .wrangler directory (#36487)

vite-server: pass the path to the error page render (#36488)

nuxt,vite: disable dev error broadcast if BroadcastChannel throws (#36480)

kit: align semantic version regexp with nightly version format (#36479)

nuxt: export types reachable from async data composables (#36478)

vite: detect enclosing string delimiter in inline style urls (#36476)

schema: type the nuxt dev server handler variant (452052793)

nitro: inline nuxt runtime when resolved to windows paths (21657c6fc)

nitro: resolve unhead from nuxt in server bundle (dc1e2d6e6)

💅 Refactors

kit: use package-manager-detector workspace + deno handling (1563a6d25)

📖 Documentation

document dev server handlers and nuxt/server scope (7c36a1352)

fix nightly examples (#36486)

🏡 Chore

... (truncated)

Commits

a5c7fa3 v4.6.1 (#36466)
3fd3b19 chore(deps): upgrade all non-major dependencies (#36527)
681ae58 fix(nuxt): accept any baseURL when fetch response type is named (#36523)
e93e210 fix(nuxt): allow false in setPageLayout types (#36506)
c552e04 fix(nuxt): align Serialize object types with JSON (#36503)
6bd3ee3 fix(vite): don't abort dep scan on virtual imports in installed packages (#36...
64fa191 fix(nuxt): update publishConfig config export extension
8f9ee06 fix(nuxt): preserve onServerPrefetch for useId hydration (#36430)
eec3725 fix(nuxt): type the global $fetch with nuxt's TypedFetch (#36492)
890e1c0 fix(nuxt,vite): disable dev error broadcast if BroadcastChannel throws (#36...
Additional commits viewable in compare view

Updates pinia from 4.0.3 to 4.1.0

Commits

270a217 release: pinia@4.1.0 @pinia/testing@2.0.2 @pinia/nuxt@1.0.3
bf7ea46 feat: warn when disposing a replaced store (#3193)
fddd7c5 test: unused
52fc965 feat: add getStores() (#3194)
f48737e docs: fix links to heading anchors that use the wrong case (#3189)
668e881 refactor(nuxt): upgrade module for Nuxt 4.6 (#3188)
a158186 fix(testing): notify shallow refs on initial state (#3187)
98587ca fix(nuxt): resolve default storesDirs against each layer (#3185)
f4e0cb7 docs: fix dead Vue Devtools installation link (#3181)
a4eb2c5 fix: trigger shallow refs patched via object syntax (fix #2861) (#3177)
Additional commits viewable in compare view

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits

1172b82 Release 3.9.10
d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
953b908 Bump Prettier dependency to 3.9.9
ad8a6bf Clean changelog_unreleased
See full diff in compare view

Updates vue from 3.5.43 to 3.5.44

Release notes

Sourced from vue's releases.

v3.5.44

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.44 (2026-10-13)

Bug Fixes

compat: expose _setupProxy for Vue 2.7 compiled script setup (fix #11164) (#15618) (f08059d)

compiler-core: parenthesise v-for key in v-memo cache guard (#15724) (d084b90), closes #15723

compiler-dom: correctly stringify 0 and false in v-html (#15571) (9f3b437)

compiler-dom: inject transition persisted for v-show in production (#15783) (89cb272)

compiler-sfc: error when defineModel prop options reference a destructured prop (#15604) (38012a5), closes #15602

custom-element: skip mounting an async custom element removed while its component loads (#15777) (0f8e7b4), closes #15775

hydration: observe children of a display: contents root in hydrateOnVisible (#15773) (7f688e8)

KeepAlive: unmount pruned current component when its vnode was cloned on mount (#15711) (92798ac), closes #15710

reactivity: avoid mutating native array iterators (#15703) (7f9d45d), closes #15643

reactivity: do not track deps in watcher callbacks run inside another effect (#15782) (db00fe9), closes #5009

reactivity: once watcher should stop when its callback throws (#15755) (ae4bd94)

reactivity: preserve shallow collection semantics (#15793) (b600466), closes #15792

runtime-core: detect new prop keys when comparing full props (#15634) (702fa61), closes #15632

runtime-core: keep async placeholder for block patching and pending component updates (#15554) (05ec25f), closes #15551

runtime-core: only flush jobs queued by the root render itself (#15757) (0bea14b), closes #6728

runtime-core: render nothing for an invalid v-for range in production (#15742) (ad19e7d)

runtime-dom: preserve v-show display for unchanged style strings (#15794) (c0a6d3f)

runtime-dom: treat playsinline as a boolean attribute (#15627) (a084e44)

server-renderer: propagate async setup errors (#15857) (6930374), closes #15716

ssr: honor falsy vnode content overrides (#15769) (c11c5c8)

suspense: mount resolved async component with its own namespace (#15640) (2a086a2), closes #15639

suspense: skip rendering async components unmounted while pending (4ab865a)

teleport: move targetStart and keep children before targetAnchor (#15818) (d3c6e02), closes #15817

transition-group: measure nested groups against their moving outer item (#15848) (1936c87), closes #5385 #1531

transition: handle comment-wrapped component roots (#15853) (ff35014), closes #6080 #5500

Commits

bf5f0dd release: v3.5.44
6930374 fix(server-renderer): propagate async setup errors (#15857)
8e8c547 chore(deps): update all non-major dependencies (#15585)
4cb0ca8 chore(deps): update playground (#15685)
e38478f chore(deps): update dawidd6/action-download-artifact action to v27 (#15768)
1caed5a chore(deps): update compiler (#15586)
a49f451 chore(deps): update lint (#15680)
219b858 chore(deps): update build (#15679)
ff35014 fix(transition): handle comment-wrapped component roots (#15853)
d084b90 fix(compiler-core): parenthesise v-for key in v-memo cache guard (#15724)
Additional commits viewable in compare view

Updates vue-router from 5.3.1 to 5.4.0

Release notes

Sourced from vue-router's releases.

v5.4.0

   🚨 Breaking Changes

experimental: Normalize query values to arrays - by @posva in vuejs/router#2824 (f1fbc)

   🚀 Features

Accept a prebuilt matcher in createRouter - by @danielroe in vuejs/router#2804 (9de96)

UseScrollRestoration and onRouteRendered - by @posva in vuejs/router#2805 (e3dde)

Diagnose experimental beforeEnter migration - by @posva (b695c)

experimental:

Warn about legacy optional param removal - by @posva in vuejs/router#2818 (c2f92)

Extract hash params with definePage - by @posva (dbf2d)

Configure required and default hash params - by @posva (cef5c)

Never decode the hash, protect-only encoding - by @posva in vuejs/router#2760 (aca2c)

Allow custom regexp for path params in definePage - by @posva in vuejs/router#2822 (3a192)

router:

Restore hashes and top by default - by @posva (7c385)

   🐞 Bug Fixes

Resolve experimental guard redirects against target on history navigation - by @posva (2c5fb)

experimental:

Keep declared case of static prefix in MatcherPatternPathStar.build() - by @contactjawad in vuejs/router#2798 (4dc6b)

Make hash params optional and nullable - by @posva (d9a4c)

Exclude defaults from required hash params - by @posva (346e2)

Align hash parameter parsing with queries - by @posva (cf251)

Keep last hash param instead of throwing - by @posva (d1e8a)

Disallow required with a default for query params - by @posva (f60e9)

Make query params with a default optional on push - by @posva (fb604)

Do not inherit params, query, or hash on redirects - by @posva (02a92)

history:

Invalidate obsolete scroll positions - by @posva and @liuly0322 in vuejs/router#2814 (071f1)

unplugin:

Sanitize named view in definePage import - by @giaBaoJS in vuejs/router#2809 (0711d)

Keep hex character codes in param segments regexp - by @kwy404 in vuejs/router#2811 (07663)

   🏎 Performance

unplugin: Cache merged route overrides - by @posva in vuejs/router#2821 (732b7)

    View changes on GitHub

Commits

596d481 release: vue-router@5.4.0
2970e8e chore: fix back extends
16a62f8 chore(deps): upgrade dependencies (#2828)
b810a7e chore: remove unused types
a0efbde docs: adapt
2c5fbd6 fix: resolve experimental guard redirects against target on history navigation
6ef3163 refactor: allow undefined on optional param
8e89a60 chore: comment
72ceb99 refactor: absolute position
57dd1d6 refactor: allow guards to return relative location
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-deps group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@pinia/nuxt](https://github.com/vuejs/pinia) | `1.0.2` | `1.0.3` | | [nanoid](https://github.com/ai/nanoid) | `6.0.1` | `6.0.2` | | [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) | `4.5.2` | `4.6.1` | | [pinia](https://github.com/vuejs/pinia) | `4.0.3` | `4.1.0` | | [prettier](https://github.com/prettier/prettier) | `3.9.9` | `3.9.10` | | [vue](https://github.com/vuejs/core) | `3.5.43` | `3.5.44` | | [vue-router](https://github.com/vuejs/router) | `5.3.1` | `5.4.0` | Updates `@pinia/nuxt` from 1.0.2 to 1.0.3 - [Release notes](https://github.com/vuejs/pinia/releases) - [Commits](https://github.com/vuejs/pinia/compare/@pinia/nuxt@1.0.2...@pinia/nuxt@1.0.3) Updates `nanoid` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@6.0.1...6.0.2) Updates `nuxt` from 4.5.2 to 4.6.1 - [Release notes](https://github.com/nuxt/nuxt/releases) - [Commits](https://github.com/nuxt/nuxt/commits/v4.6.1/packages/nuxt) Updates `pinia` from 4.0.3 to 4.1.0 - [Release notes](https://github.com/vuejs/pinia/releases) - [Commits](vuejs/pinia@v4.0.3...v4.1.0) Updates `prettier` from 3.9.9 to 3.9.10 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.9...3.9.10) Updates `vue` from 3.5.43 to 3.5.44 - [Release notes](https://github.com/vuejs/core/releases) - [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md) - [Commits](vuejs/core@v3.5.43...v3.5.44) Updates `vue-router` from 5.3.1 to 5.4.0 - [Release notes](https://github.com/vuejs/router/releases) - [Commits](vuejs/router@v5.3.1...v5.4.0) --- updated-dependencies: - dependency-name: "@pinia/nuxt" dependency-version: 1.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: nanoid dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: nuxt dependency-version: 4.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: pinia dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: prettier dependency-version: 3.9.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: vue dependency-version: 3.5.44 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: vue-router dependency-version: 5.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-10-17T20:39:33Z

PR Preview Action v1.8.1
🚀 View preview at https://beta.not-th.re/pr-preview/pr-160/
Built to branch `html-previews` at 2026-10-17 20:39 UTC. Preview will be ready when the GitHub Pages deployment is complete.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 17, 2026

github-actions Bot approved these changes Oct 17, 2026

View reviewed changes

github-actions Bot added the package label Oct 17, 2026

Navigation Menu

Repository navigation

build(deps): bump the prod-deps group across 1 directory with 7 updates - #160

build(deps): bump the prod-deps group across 1 directory with 7 updates#160
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-deps-81069f8344

dependabot Bot commented on behalf of github Oct 17, 2026

Uh oh!

github-actions Bot commented Oct 17, 2026

Built to branch `html-previews` at 2026-10-17 20:39 UTC.
Preview will be ready when the GitHub Pages deployment is complete.

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 17, 2026

@​pinia/nuxt@​1.0.3

🚀 Features

🐞 Bug Fixes

View changes on GitHub

6.0.2

6.0.2

v4.6.1

👉 Changelog

🔥 Performance

🩹 Fixes

💅 Refactors

📖 Documentation

🏡 Chore

3.9.10

3.9.10

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

v3.5.44

3.5.44 (2026-10-13)

Bug Fixes

v5.4.0

🚨 Breaking Changes

🚀 Features

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

Uh oh!

github-actions Bot commented Oct 17, 2026

Built to branch html-previews at 2026-10-17 20:39 UTC. Preview will be ready when the GitHub Pages deployment is complete.

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@pinia/nuxt@1`.0.3

Markdown: Update `micromark-extension-gfm-table` to fix the table parse issue on performance (#20266 by `@fisker`)

Built to branch `html-previews` at 2026-10-17 20:39 UTC.
Preview will be ready when the GitHub Pages deployment is complete.