Skip to content

chore(deps): update dependency @nuxt/schema to 4.5.1 - #128

Open
github-actions[bot] wants to merge 1 commit into
mainfrom
buddy-bot/update-major-update-nuxtschema
Open

chore(deps): update dependency @nuxt/schema to 4.5.1#128
github-actions[bot] wants to merge 1 commit into
mainfrom
buddy-bot/update-major-update-nuxtschema

Conversation

@github-actions

@github-actions github-actions Bot commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

npm

Package Change Age Adoption Passing Confidence
@nuxt/schema (source) 3.21.8 -> 4.5.1 age adoption passing confidence

Release Notes

nuxt/nuxt (@nuxt/schema)

3.21.8 -> 4.5.1

v4.5.1

Compare Source

⚠️ This is a security release. We recommend upgrading as soon as possible with npx nuxt upgrade --dedupe.

It fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, cross-user payload disclosure on cached pages, and dev server path disclosure. Refreshing your lockfile also pulls in @nuxt/devtools@3.3.1, which fixes a separate critical development-only RCE.

If you already upgraded for the earlier route rule advisory (CVE-2026-53721), you still need this release: one of the fixes addresses a regression introduced by that fix.

If you use the cache, swr or isr route rules, purge any CDN or edge cache after upgrading; a leaked _payload.json may already be cached upstream.

Full details: Nuxt Security Patch Releases and [GitHub Security Advisories](https://github.com/nuxt/nu...

[View full release notes]

Released by danielroe on 7/27/2026

v3.21.10

Compare Source

⚠️ This is a security release. We recommend upgrading as soon as possible with npx nuxt upgrade --dedupe.

It fixes server-side RCE and unauthorized component instantiation via server island props, a route rule authorization bypass, server component DoS, and dev server path disclosure. Refreshing your lockfile also pulls in @nuxt/devtools@3.3.1, which fixes a separate critical development-only RCE.

If you already upgraded for the earlier route rule advisory (CVE-2026-53721), you still need this release: one of the fixes addresses a regression introduced by that fix.

Full details: Nuxt Security Patch Releases and GitHub Security Advisories.

👉 Changelog

compare changes

🩹 Fixes

[View full release notes]

Released by danielroe on 7/27/2026

v4.5.0

Compare Source

4.5.0 is the next minor release.

📣 Some News

Preparing for Nuxt 5

A good chunk of this release is (hopefully) invisible plumbing for Nuxt 5. We've moved onto the latest major versions of several core dependencies (unhead v3, unctx v3, and Vite 8), switched the framework's own build over to tsdown, and introduced a stable nuxt/* build output contract with dev exports so that type-checking in the Nuxt monorepo works without a build step (#35463, #35605).

Much of this is working to shrink the gap between v4 and v5 internally, so that the migration will be as boring as possible.

[!TIP]
If you want to test some of the breaking changes of Nuxt v5, you can already opt in with future.compatibilityVersion: 5. Keep an eye on the Upgrade Guide for details as they land.

With the release of Nuxt v4.5, our focus as a team will turn to stabilising Nuxt v5 and creating compatibility utilities to ma...

[View full release notes]

Released by danielroe on 7/18/2026


📊 Package Statistics

  • @nuxt/schema: 2,368,769 weekly downloads

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Buddy 🤖

@github-actions github-actions Bot changed the title chore(deps): update dependency @nuxt/schema to 4.4.8 chore(deps): update dependency @nuxt/schema to 4.5.0 Jul 18, 2026
@github-actions
github-actions Bot force-pushed the buddy-bot/update-major-update-nuxtschema branch from ec3ff2a to ec67216 Compare July 18, 2026 20:54
@github-actions github-actions Bot changed the title chore(deps): update dependency @nuxt/schema to 4.5.0 chore(deps): update dependency @nuxt/schema to 4.5.1 Jul 27, 2026
@github-actions
github-actions Bot force-pushed the buddy-bot/update-major-update-nuxtschema branch from ec67216 to 96e5011 Compare July 27, 2026 11:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants