Skip to content

Conversation

@adrienZ
Copy link
Owner

@adrienZ adrienZ commented Oct 1, 2025

snyk-top-banner

Snyk has created this PR to upgrade @nuxt/kit from 3.16.2 to 3.19.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 12 versions ahead of your current version.

  • The recommended version was released 25 days ago.

Release notes
Package name: @nuxt/kit
  • 3.19.1 - 2025-09-05

    v3.19.1 is a regularly scheduled patch release

    ✅ Upgrading

    Our recommendation for upgrading is to run:

    npx nuxt upgrade --dedupe

    This will deduplicate your lockfile as well, and help ensure that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.

    👉 Changelog

    compare changes

    🩹 Fixes

    • nuxt: Correct relative path of auto imported components (#33122)
    • nuxt: Prefer accessing globalThis over window (#33125)
    • nuxt: Migrate to AST-aware tree-shaking + route injection (#33128)
    • nuxt: Ignore #components import mapping inside packages that use it internally (#33049)
    • vite: Remove explicit vite-node configuration of deps.inline (#33133)
    • nuxt: Include trace in dev-time useRoute usage warning (#33039)
    • nuxt: Print route middleware path in warning (#33136)
    • nuxt: Include core auto-imports from imports:sources in override warning (#33050)
    • nuxt: Render relative importmap entry path if required (#33146)

    📖 Documentation

    • Add documentation for module lifecycle hooks (#33115)
    • Add -- to bun create command (ab6aa8ee5)
    • Add JSDoc for navigateTo (#21442)

    🏡 Chore

    ✅ Tests

    🤖 CI

    • Remove default discord reactions from thread (more noise than it's worth) (2e3c91e0c)
    • Rewrite release workflow in ts + support multiple tags (478c64342)
    • Pass correct flag (a954f383f)
    • Pass tag via env variable (dcfc82688)
    • Drop 4x tags from releases (e3aa50d11)

    ❤️ Contributors

  • 3.19.0 - 2025-09-02

    👀 Highlights

    Please see the release notes for Nuxt v4.1 for full details on the features and fixes in Nuxt v3.19.

    ✅ Upgrading

    As usual, our recommendation for upgrading is to run:

    npx nuxt upgrade --dedupe

    This will refresh your lockfile and pull in all the latest dependencies that Nuxt relies on, especially from the unjs ecosystem.

    👉 Changelog

    compare changes

    🚀 Enhancements

    • kit: Add ignore option to resolveFiles (#32858)
    • kit: Add onInstall and onUpgrade module hooks (#32397)
    • nuxt,vite: Add experimental support for rolldown-vite (#31812)
    • nuxt: Extract defineRouteRules to page rules property (#32897)
    • nuxt,vite: Use importmap to increase chunk stability (#33075)
    • nuxt: Lazy hydration macros without auto-imports (#33037)
    • kit,nuxt,schema: Allow modules to specify dependencies (#33063)
    • kit,nuxt: Add getLayerDirectories util and refactor to use it (#33098)

    🔥 Performance

    • nuxt: Clear inline route rules cache when pages change (#32877)
    • nuxt: Stop watching app manifest once a change has been detected (#32880)

    🩹 Fixes

    • nuxt: Handle satisfies in page augmentation (#32902)
    • nuxt: Type response in useFetch hooks (#32891)
    • nuxt: Add TS parenthesis and as expression for page meta extraction (#32914)
    • nuxt: Use correct unit thresholds for relative time (#32893)
    • nuxt: Handle uncached current build manifests (#32913)
    • kit: Resolve directories in resolvePath and normalize file extensions (#32857)
    • schema,vite: Bump requestTimeout + allow configuration (#32874)
    • nuxt: Deep merge extracted route meta (#32887)
    • nuxt: Do not expose app components until fully resolved (#32993)
    • kit: Only exclude node_modules/ if no custom srcDir (#32987)
    • nuxt: Compare final matched routes when syncing route object (#32899)
    • nuxt: Make vue server warnings much less verbose in dev mode (#33018)
    • schema: Allow disabling cssnano/autoprefixer postcss plugins (#33016)
    • kit: Ensure local layers are prioritised alphabetically (#33030)
    • kit,nuxt: Expose global types to vue compiler (#33026)
    • nuxt: Support config type inference for defineNuxtModule().with() (#33081)
    • nuxt: Search for colliding names in route children (31a9282c2)
    • nuxt: Delete nuxtApp._runningTransition on resolve (#33025)
    • nuxt: Add validation for nuxt island reviver key (#33069)
    • kit: Prioritise local layers over extended layers (ae8b0d2b8)
    • kit: Address merge conflict (89ccbbebb)
    • kit: Do not resolve public dir aliases (5d87d3a80)

    💅 Refactors

    • nuxt: Simplify page segment parsing (#32901)
    • nuxt: Remove unnecessary async/await in afterEach (#32999)
    • vite: Simplify inline chunk iteration (9ea90fc33)
    • kit,nuxt,ui-templates,vite: Address deprecations + improve regexp perf (#33093)

    📖 Documentation

    • Add a section about augmenting types with TS project references (#32843)
    • Switch example to use vitest projects (#32863)
    • Update testing setupTimeout and add teardownTimeout (#32868)
    • Add middleware to layers guide (fa516d440)
    • Add documentation for --nightly command (#32907)
    • Update package information in roadmap section (#32881)
    • Add more info about nuxt spa loader element attributes (#32871)
    • Correct filename in example (#33000)
    • Add more information about using useRoute and accessing route in middleware (#33004)
    • Avoid variable shadowing in locale example (#33031)

    🏡 Chore

    • Remove stray test file (42fd247a4)
    • Ignore webpagetest.org when scanning links (cb18f4960)
    • Add type: 'module' in playground (#33099)

    ✅ Tests

    • Add failing test for link component duplication (#32792)
    • Simplify module hook tests (#32950)
    • Refactor stubbing of import.meta.dev (#33023)
    • Use findWorkspaceDir rather than relative paths to repo root (c4c3ada96)
    • Improve router test for global transitions (7e6a6fc35)
    • Use expect.poll (f4354203a)
    • Use expect.poll instead of expectWithPolling (15ca5be95)
    • Use vi.waitUntil instead of custom retry logic (4c8c13090)
    • Update test for app creation (9a3b44515)
    • Update bundle size snapshot (76988ce97)

    🤖 CI

    • Remove double set of tests for docs prs (14c006ac4)
    • Add workflow for discord team discussion threads (f14854fc3)
    • Fix some syntax issues with discord + github integrations (c059f7cd1)
    • Use token for adding issue to project (51661bac3)
    • Use discord bot to create thread automatically (37f9eb27b)
    • Only use discord bot (38ce2dcbb)
    • Update format of discord message (0047b3059)
    • Try bolding entire line (6e9f40eb9)
    • Oops (8b044cad2)
    • Add delay after adding each reaction (37b7e2108)
    • Use last lts node version for testing (98719c065)
    • Try npm trusted publisher (ea33502c3)
    • Use npm trusted publisher for main releases (31a55437f)
    • Change wording (#32979)
    • Add github ai moderator (#33077)

    ❤️ Contributors

  • 3.18.1 - 2025-08-05

    3.18.1 is a regularly scheduled patch release.

    👉 Changelog

    compare changes

    🔥 Performance

    • kit: Get absolute path from tinyglobby in resolveFiles (#32846)

    🩹 Fixes

    • nuxt: Do not throw undefined error variable (#32807)
    • vite: Include tsconfig references during typeCheck (#32835)
    • nuxt: Add sourcemap path transformation for client builds (#32313)
    • nuxt: Add warning for lazy-hydration missing prefix (#32832)
    • nuxt: Trigger call once navigation even when no suspense (#32827)
    • webpack: Handle null result from webpack call (65aa17158)
    • kit,nuxt: Use reverseResolveAlias for better errors (#32853)

    📖 Documentation

    • Update nightly version references (#32776)
    • Improve explanation of global middleware (#32855)

    🏡 Chore

    • Update reproduction help text links (#32803)
    • Update pnpm ignored build scripts (#32849)
    • Improve internal types (f271c66c4)

    ✅ Tests

    • Move tests for defineNuxtComponent out of e2e test (#32848)

    🤖 CI

    • Move nightly releases into different concurrency group (26f9baa6a)

    ❤️ Contributors

  • 3.18.0 - 2025-07-29

    3.18.0 is the next minor release.

    👀 Highlights

    A huge thank you to everyone who's been a part of this release, which is mostly about backporting features + bugfixes from Nuxt v4.

    Over the next six months, we'll continue backporting compatible v4 features and bug fixes, so please keep the feedback coming! ❤️

    🧪 Lazy Hydration Macros

    Building on the delayed hydration support from v3.16, we now support lazy hydration macros (#31192)! These provide a more ergonomic way to control component hydration:

    <script setup lang="ts">
    const LazyHydrationMyComponent = defineLazyHydrationComponent(
      'visible',
      () => import('./components/MyComponent.vue')
    )
    </script>
    <template>
      <div>
        <!-- 
          Hydration will be triggered when
          the element(s) is 100px away from entering the viewport.
        -->
        <LazyHydrationMyComponent :hydrate-on-visible="{ rootMargin: '100px' }" />
      </div>
    </template>

    These macros make it possible to use Nuxt's lazy hydration utilities alongside explicit component imports.

    ♿️ Accessibility Improvements

    We've enhanced accessibility by including <NuxtRouteAnnouncer> in the built-in app.vue (#32621). This means page changes will be announced to screen readers, making navigation more accessible for users with visual impairments. (This only applies if you do not have an app.vue in your project. If you do, please keep <NuxtRouteAnnouncer> in your app.vue!)

    🛠️ Enhanced Development Experience

    Chrome DevTools Workspace Integration

    We've added Chrome DevTools workspace integration (#32084), allowing you to edit your Nuxt source files directly from Chrome DevTools. This creates a better debugging experience where changes made in DevTools are reflected in your actual source files.

    Better Component Type Safety

    Component type safety has been improved with:

    • Typed slots for <ClientOnly> and <DevOnly> (#32707) - better IntelliSense and error checking
    • Exported <NuxtTime> prop types (#32547) - easier to extend and customize

    New Auto-Import: onWatcherCleanup

    The onWatcherCleanup function from vue is now available as an auto-import (#32396), making it easier to clean up watchers and prevent memory leaks:

    const { data } = useAsyncData('users', fetchUsers)

    watch(data, (newData) => {
    const interval = setInterval(() => {
    // Some periodic task
    }, 1000)

    // Clean up when the watcher is stopped
    onWatcherCleanup(() => {
    clearInterval(interval)
    })
    })

    📊 Observability Enhancements

    Page routes are now exposed to Nitro for observability (#32617), enabling better monitoring and analytics integration with supported platforms. This allows observability tools to track page-level metrics more effectively.

    🔧 Module Development Improvements

    Module authors get several quality-of-life improvements:

    Simplified Server Imports

    The addServerImports kit utility now supports single imports (#32289), making it easier to add individual server utilities:

    // Before: had to wrap in array
    addServerImports([{ from: 'my-package', name: 'myUtility' }])

    // Now: can pass directly
    addServerImports({ from: 'my-package', name: 'myUtility' })

    TypeScript Configuration

    Modules can now add to typescript.hoist (#32601), giving them more control over TypeScript configuration and type generation.

    ⚡️ Performance Improvements

    We've made several performance optimizations:

    • Improved Vite-node communication via internal socket (#32417) for faster development builds
    • Migration to oxc-walker (#32250) and oxc for onPrehydrate transforms (#32045) for faster code transformations

    🐛 Bug Fixes

    This release also includes several important fixes:

    • Improved data fetching: When computed keys change, old data is now properly retained (#32616)
    • Better scroll behavior: scrollBehaviorType is now only used for hash scrolling (#32622)
    • Fixed directory aliases: Added trailing slashes to some directory aliases for better consistency (#32755)

    ✅ Upgrading

    As usual, our recommendation for upgrading is to run:

    npx nuxi@latest upgrade --dedupe

    This refreshes your lockfile and pulls in all the latest dependencies that Nuxt relies on, especially from the unjs ecosystem.

    👉 Changelog

    compare changes

    🚀 Enhancements

    • nuxt: Expose page routes to nitro for o11y (#32617)
    • nuxt: Export <NuxtTime> prop types (#32547)
    • nuxt: Add integration with chrome devtools workspaces (#32084)
    • kit: Support single import in addServerImports (#32289)
    • nuxt: Add onWatcherCleanup to imports presets (#32396)
    • nuxt: Add route announcer to default app.vue (#32621)
    • nuxt: Support lazy hydration macros (#31192)

    🔥 Performance

    • vite: Communicate with vite-node via internal socket (#32417)
    • kit: Update env expansion regex to match nitro (#30766)

    🩹 Fixes

    • nuxt: Allow modules to add to typescript.hoist (#32601)
    • nuxt: Retain old data when computed key changes (#32616)
    • nuxt: Only use scrollBehaviorType for hash scrolling (#32622)
    • nuxt: Add missing async (fd312af03)
    • nuxt: Fix transform/minify types + bump oxc-transform (d2ba19963)
    • nuxt: Provide typed slots for <ClientOnly> and <DevOnly> (#32707)
    • kit,nuxt,schema: Add trailing slash to some dir aliases (#32755)
    • nuxt: Include source base url for remote islands (#32772)
    • vite: Use vite node server to transform requests (#32791)
    • kit: Use mlly to parse module paths (#32386)
    • nuxt: Execute all plugins after error rendering error.vue (#32744)

    💅 Refactors

    • nuxt: Migrate to oxc-walker (#32250)
    • nuxt,schema: Use oxc for onPrehydrate transform (#32045)
    • nuxt: Pass file language directly to parser options (#32665)
    • nuxt: Use direct import of installNuxtModule (228e3585e)

    📖 Documentation

    • Pass v3 template to create nuxt examples (03182202f)
    • Add reference to useNuxtData in data fetching composable pages (#32589)
    • Document the --modules flag in the init command (#32599)
    • Added new Shared folder to the example of v4 folder structure (#32630)
    • Improve grammar (#32640)
    • Typos (#32567)
    • Fix abbreviation (#32613)
    • Reference noUncheckedIndexedAccess rule change in v4 guide (#32643)
    • Fix links to Nitro docs (#32691)
    • Add best practices section (#31609)
    • Correct alias for local fonts in styling guide (#32680)
    • Update nuxt.new links to v4 (#32639)
    • Set correct default value for deep option in usefetch (#32724)
    • Fix link to issue (ca03f533f)
    • Add AI-assisted contribution guidelines (#32725)
    • Update Nuxt installation command to use npm create nuxt@latest (#32726)
    • Hydration best practice (#32746)
    • Add example for module .with() (#32757)
    • Replace dead Vue Router docs links (#32779)

    🏡 Chore

    • Handle missing commit details (0af98763d)
    • Update reproduction links for bug-report template (#32722)
    • Update unbuild and use absolute path in dev stubs (#32759)

    ✅ Tests

    🤖 CI

    • Trigger website redeploy on main branch (#32695)
    • Release pkg.pr.new for main/3.x branches as well (ca4f0b1da)
    • Apply 3x tag to latest v3 release (5e8dfc150)

    ❤️ Contributors

  • 3.17.7 - 2025-07-13

    3.17.7 is the last patch release before v3.18.

    ✅ Upgrading

    Our recommendation for upgrading is to run:

    npx nuxt upgrade --dedupe

    This will deduplicate your lockfile as well, and help ensure that you pull in updates from other dependencies that Nuxt relies on, particularly in the unjs ecosystem.

    👉 Changelog

    compare changes

    🩹 Fixes

    • nuxt: Safe-guard extraPageMetaExtractionKeys (#32510)
    • nuxt: Expose loadBuilder error cause (

Snyk has created this PR to upgrade @nuxt/kit from 3.16.2 to 3.19.1.

See this package in npm:
@nuxt/kit

See this project in Snyk:
https://app.snyk.io/org/adrienz/project/2dc6dd5d-8b29-483b-b7d9-5f3a245b9f2b?utm_source=github&utm_medium=referral&page=upgrade-pr
@codecov
Copy link

codecov bot commented Oct 1, 2025

⚠️ JUnit XML file not found

The CLI was unable to find any JUnit XML files to upload.
For more help, visit our troubleshooting guide.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants