chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@nuxt/test-utils	^3.22.0 → ^3.23.0
@types/node (source)	^24.10.4 → ^24.10.7
deno (source)	2.6.3 → 2.6.4
eslint-plugin-jsdoc	61.5.0 → 61.7.1
knip (source)	^5.80.0 → ^5.80.2
nitropack	^2.12.9 → ^2.13.0
pnpm (source)	10.27.0 → 10.28.0
tsdown (source)	^0.18.4 → ^0.19.0
ufo	^1.6.1 → ^1.6.2
undici (source)	^7.17.0 → ^7.18.2

---

Release Notes

nuxt/test-utils (@​nuxt/test-utils)

v3.23.0

Compare Source

3.23.0 is the next minor release.

👉 Changelog

compare changes

🚀 Enhancements

• runtime-utils: Support h3 v2 (#​1515)
• module: Add install wizard when freshly installed (#​1538)

🩹 Fixes

• e2e: Ensure $fetch is not typed as any (1f4754ea9)

🏡 Chore

• Remove leftover console.log (aef693340)

✅ Tests

• Add cleanup to resolve-config tests (#​1537)

🤖 CI

• Prepare build environment in autofix workflow (2c0864ed6)

❤️ Contributors

• Daniel Roe (@​danielroe)
• yamachi4416 (@​yamachi4416)

denoland/deno (deno)

v2.6.4

Compare Source

• fix(compile): make compile work with --unstable-npm-lazy-caching (#​31704)
• fix(ext/node): enable keepAlive connection reuse for HTTP Agent (#​31709)
• fix(ext/node): handle errors in sqlite session filter callback (#​31756)
• fix(ext/node): support TypedArray and DataView targets in Buffer.copy()
  (#​31734)
• fix(ext/node): support for inspector.url() (#​31705)
• fix(ext/node): support numbered positional parameters in node:sqlite (#​31722)
• fix(ext/websocket): prevent sending multiple close frames (#​31747)
• fix(install): wait for package installations before applying patches (#​31711)
• fix(node/crypto): integrate async_hooks for domain error handling (#​31751)
• fix(serve): net permissions in config file (#​31718)
• fix(task): prioritize member package.json when deno.json only in root
  (#​31736)
• fix(webgpu): update wgpu to 28.0.0 (#​31163)
• fix: deno cross compile for intel mac target (#​31714)
• fix: update urlpattern to 0.4.2 (#​31193)

gajus/eslint-plugin-jsdoc (eslint-plugin-jsdoc)

v61.7.1

Compare Source

webpro-nl/knip (knip)

v5.80.2: Release 5.80.2

Compare Source

• Add astro-og-canvas plugin (#​1445) (bb93a2b) - thanks @​JoshuaKGoldberg!
• Small performance optimization on bun commands (#​1453) (af0d736) - thanks @​ClementValot!
• Accept cwdOrPath in isDirectory and isFile (2d0bb0c)
• Improve hasRefsInFile (86bde97)
• Rename find-internal-references.ts → has-refs-in-file.ts (307c37b)
• Move pos from exported default keyword to identifier (8e74ec7)
• Fix release script (71206b7)

v5.80.1: Release 5.80.1

Compare Source

• Minor lints/formats (26a6f7b)
• Resolve _partial.scss in compiler (close #​1439) (ee09aa3)
• Add tip re. Knip editor extension early on (88c488a)
• Add more deterministic workspace mapping to remedy test flakiness (4d000e7)
• Remove ignoreExportsUsedInFile from default config (f3eddf3)
• Update docs (29e5f17)
• Show link to docs for module load errors in CLI (31ce18a)
• Bump release-it (64ad7b4)
• Improved TanStack Router Configs (#​1449) (3e0b847)- thanks @​AlexanderKaran!
• Add warning about invalid tag characters to docs (#​1448) (de508e3) - thanks @​solomonhawk!
• Housekeep a few thingies around resolve in plugins (5b98269)
• Improve react-router appDir + fix glob escaper (f993591)
• Extended the NX plugins (#​1443) (b9dc80e) - thanks @​AlexanderKaran!
• Remove mention of editor plugins from FAQ (#​1444) (d8fa043) - thanks @​sebacardello!
• Fix remaining broken links (a8d0bfd)
• Bump md/mdx presets (a4d6b1e)
• Fix quoting in release script (2f663e3)

nitrojs/nitro (nitropack)

v2.13.0

Compare Source

compare changes

🚀 Enhancements

• vercel: Add support for skew protection (#​3850)
• bun: Support NITRO_BUN_IDLE_TIMEOUT env variable (#​3294)

🔥 Performance

• Process static assets in parallel (#​3910)
• Limit concurrency for compressing public assets (#​3384)

🩹 Fixes

• firebase: Update gen 1 import to match latest sdk (28406449)
• Correct crypto polyfill (5caca6c0)
• vercel: Handle ISR requests with passQuery: true (#​3539)
• dev: Automatically use Content-Encoding: gzip for .gz static files (#​3381)
• static: Add vary: accept-encoding for assets with compressed version (#​3443)
• dev: Respect opts.json when false for error handler (#​3920)
• dev: Apply headers from route rules for static assets (c74d7a17, f059e4ba, be316b49)
• vercel: Avoid adding o11y links for prerendered paths (#​3927)
• cloudflare-durable: Expose env bindings in durable handler (#​3931)

💅 Refactors

q

• Update firebase-functions type import (d27fbe86)

📖 Documentation

• Add versions select (#​3855)
• Fix compatibilityDate value (#​3570)

📦 Dependencies

• Update esbuild to 0.27 (a0176dfa)
• Update unwasm to 0.5 (85b057b8)
• Update @vercel/nft to v1 (5aeb9f89)
• Update @rollup/plugin-commonjs to v29 (58d2ff13)
• Update @rollup/plugin-alias to v6 (3f493325)
• Update globby to v16 (7b8da4c0)

🤖 CI

• Avoid bumping h3 to nightly (0b5a9c37)
• Correct ref check for nightly (de8d24c4)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Ori (@​oritwoen)
• Dmitry Istomin (@​tirojal)
• Typed SIGTERM (@​typed-sigterm)
• Daniel Roe (@​danielroe)
• Oyama Michinoku (@​yamanoku)
• WIP (@​paulcrussell)
• Kricsleo (@​kricsleo)
• Jamaluddin Rumi (@​jamaluddinrumi)
• Sébastien Chopin (@​Atinux)

pnpm/pnpm (pnpm)

v10.28.0

Compare Source

rolldown/tsdown (tsdown)

v0.19.0

Compare Source

   🚨 Breaking Changes

• Rename debugLogs to debug  -  by @​sxzz (bb4e7)
• Remove deprecated silent option  -  by @​sxzz (59015)
• devtools:
  • Rename debug to devtools, rename debug.devtools to devtools.ui  -  by @​sxzz (63e6f)
• exports:
  • Add legacy option, remove main & module fields if pure ESM  -  by @​sxzz (16841)
  • Exclude extension name for exports.exclude  -  by @​sxzz (53d38)
  • Only auto-fill types when exports.legacy  -  by @​lishaduck and @​sxzz in #​685 (7be6b)

   🚀 Features

• Add typeAssert util back  -  by @​sxzz (1d385)
• Generate CSS exports when css.splitting is disabled  -  by @​jinghaihan and @​sxzz in #​680 (b737c)
• Upgrade rolldown to 1.0.0-beta.58  -  by @​sxzz (48036)
• Expose enableDebug  -  by @​sxzz (2d922)
• Expose resolveUserConfig  -  by @​sxzz (c9acb)
• Upgrade rolldown to 1.0.0-beta.59  -  by @​sxzz (d564f)
• Clear console on rebuild start  -  by @​sxzz (78efd)
• migrate: Add monorepo support  -  by @​lauigi and @​sxzz in #​659 (efba2)

   🐞 Bug Fixes

• Print blank line only when the log level is info  -  by @​tomgao365 in #​689 (96d82)
• attw: Add --ignore-scripts to avoid lifecycle output  -  by @​Doctor-wu in #​661 (1c8b1)
• cjs: Update version check for require ESM support  -  by @​sxzz (beeff)

   🏎 Performance

• Optimize hot paths  -  by @​sxzz (7925d)

    View changes on GitHub

unjs/ufo (ufo)

v1.6.2

Compare Source

compare changes

🩹 Fixes

• Fix parsePath return type (#​293)

📖 Documentation

• Add more examples in jsdoc (#​291)

📦 Build

• Fix exports condition order to prefer esm with default fallback (8457581)

🏡 Chore

• release: V1.6.1 (b83cbea)
• Update deps (9d1833b)
• Lint (0181677)

❤️ Contributors

• Daedalus (@​ComfortablyCoding)
• Pooya Parsa (@​pi0)
• Alex Liu (@​Mini-ghost)

nodejs/undici (undici)

v7.18.2

Compare Source

What's Changed

• fix(decompress): limit Content-Encoding chain to 5 to prevent resourc… by @​mcollina in #​4729

Full Changelog: nodejs/undici@v7.18.1...v7.18.2

v7.18.1

Compare Source

What's Changed

• Test and Fix running without SSL by @​mcollina in #​4727
• docs: add security warning for strictContentLength option by @​mcollina in #​4726
• build(deps): bump step-security/harden-runner from 2.13.1 to 2.14.0 by @​dependabot[bot] in #​4718
• build(deps): bump actions/checkout from 6.0.0 to 6.0.1 by @​dependabot[bot] in #​4719

Full Changelog: nodejs/undici@v7.18.0...v7.18.1

v7.18.0

Compare Source

What's Changed

Full Changelog: nodejs/undici@v7.17.0...v7.18.0

---

Configuration

📅 Schedule: Branch creation - "on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[pkg-pr-new]

• nuxt-cli-playground

  npm i https://pkg.pr.new/create-nuxt@1181
  

  npm i https://pkg.pr.new/nuxi@1181
  

  npm i https://pkg.pr.new/@nuxt/cli@1181
  

commit: 9e25eec

[github-actions]

📦 Bundle Size Comparison

📉 nuxi

Metric	Base	Head	Diff
Rendered	4439.72 KB	4439.64 KB	-0.07 KB (-0.00%)

➡️ nuxt-cli

Metric	Base	Head	Diff
Rendered	137.28 KB	137.28 KB	0.00 KB (0.00%)

📉 create-nuxt

Metric	Base	Head	Diff
Rendered	2369.15 KB	2369.05 KB	-0.09 KB (-0.00%)

[codspeed-hq]

Merging this PR will improve performance by 10.47%

⚡ 1 improved benchmark
✅ 1 untouched benchmark

Performance Changes

	Benchmark	BASE	HEAD	Efficiency
⚡	makes requests to dev server	60.5 ms	54.7 ms	+10.47%

---

_{Comparing renovate/all-minor-patch (9e25eec) with main (8bcd09b)}