chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@iconify-json/carbon	^1.2.10 -> ^1.2.11
@iconify-json/simple-icons	^1.2.43 -> ^1.2.45
@nuxt/eslint-config (source)	^1.5.2 -> ^1.7.1
@nuxt/image (source)	^1.10.0 -> ^1.11.0
@nuxt/module-builder	^1.0.1 -> ^1.0.2
@nuxt/ui-pro (source)	^3.2.0 -> ^3.3.0
@stripe/stripe-js (source)	^7.0.0 -> ^7.8.0
@types/youtube (source)	^0.1.0 -> ^0.1.2
@typescript-eslint/typescript-estree (source)	^8.37.0 -> ^8.38.0
@unhead/vue (source)	^2.0.3 -> ^2.0.13
@vueuse/core (source)	^13.5.0 -> ^13.6.0
@vueuse/nuxt (source)	^13.5.0 -> ^13.6.0
bumpp	^10.2.0 -> ^10.2.2
eslint (source)	9.31.0 -> 9.32.0
eslint-plugin-n	^17.21.0 -> ^17.21.3
h3	^1.15.3 -> ^1.15.4
playwright-core (source)	^1.54.1 -> ^1.54.2
pnpm (source)	10.13.1 -> 10.14.0
shiki (source)	3.8.0 -> 3.9.1
shiki (source)	^3.8.0 -> ^3.9.1
typescript (source)	5.8.3 -> 5.9.2
vue (source)	^3.5.17 -> ^3.5.18
vue-tsc (source)	^3.0.1 -> ^3.0.5

---

Release Notes

nuxt/eslint (@​nuxt/eslint-config)

v1.7.1

Compare Source

   🐞 Bug Fixes

• Include eslint-typegen.d.ts in nuxt.node.d.ts, close #​596  -  by @​antfu in https://github.com/nuxt/eslint/issues/596 (ab74e)

    View changes on GitHub

v1.7.0

Compare Source

   🚀 Features

• Upgrade eslint-plugin-unicorn  -  by @​antfu (b3b7d)

    View changes on GitHub

v1.6.0

Compare Source

   🐞 Bug Fixes

• Bring back eslint-plugin-import-x as default, close #​590  -  by @​antfu in https://github.com/nuxt/eslint/issues/590 (e43d6)

    View changes on GitHub

nuxt/image (@​nuxt/image)

v1.11.0

Compare Source

compare changes

🚀 Enhancements

• Add support for image helpers in nitro endpoints (#​1473)
• ipx: Log the architecture of the build (#​1808)

🩹 Fixes

• Remove layer0 and edgio providers (#​1763)
• Add back layer0 and edgio providers (without) tests (a99ce09)
• cloudflare: Don't add baseURL if there are no operations (#​1790)
• ipx: Always use ipx provider if external baseURL is provided (#​1800)
• ipxStatic: Strip repeated slashes from image path (#​1801)
• Avoid deep type instantiation (12b37a2)

📖 Documentation

• Fix typo (#​1762)
• Fix link to runtime/providers (#​1819)

🏡 Chore

• Disable shamefully-hoist (#​1795)
• Do not ignore typescript upgrades (0809991)
• Switch to using typesVersions field (b4af05a)
• Allow major bumps in changelog (d486587)
• Enable oxc-resolver build (4be31c7)
• Release v1.11.0 (3123997)

✅ Tests

• Exclude layer0 + edgio from unit tests (3682a90)

🤖 CI

• Run tests against 1.x branch (0c83646)
• Add release workflow and add pkg.pr.new (#​1791)
• Set fetch-depth (18ae6c7)
• Test vs node 20 (e6babef)

❤️ Contributors

• Daniel Roe (@​danielroe)
• Matis (@​matisbag)
• Amir Afshar (@​Afshar07)
• Sébastien Chopin (@​atinux)
• Nicolas Großmann (@​grossmann94)

nuxt/module-builder (@​nuxt/module-builder)

v1.0.2

Compare Source

compare changes

🩹 Fixes

• Use absolute path for jiti stub (#​648)

🏡 Chore

• Add explicit semver dep (ddb5a65)
• Add semver types (50e3f6b)

✅ Tests

• Add snapshots for v3 + v4 wrapped fetch (270779b)

🤖 CI

• Remove forced corepack installation (9be288b)
• Run tests on node 20 (97e3f47)

❤️ Contributors

• Bobbie Goede [email protected]
• Daniel Roe (@​danielroe)

nuxt/ui-pro (@​nuxt/ui-pro)

v3.3.0

Compare Source

stripe/stripe-js (@​stripe/stripe-js)

v7.8.0

Compare Source

New features

• chore: add fonts types (#​795)
• Adding SPM option to StripeCheckoutElementsOptions (#​793)

Changed

• removes double github token check (#​794)

v7.7.0

Compare Source

New features

• Add types for new issuingAddToWalletButton (#​792)
• Add types for allowed_payment_method_types and excluded_payment_method_types (#​790)

Changed

• Delete Webpack example (#​791)
• Bump pbkdf2 from 3.1.1 to 3.1.3 in /examples/parcel (#​771)

v7.6.1

Compare Source

New features

Fixes

• Add missing tax id types (#​789)

Changed

v7.6.0

Compare Source

New features

• Add public types for Tax Id Element (#​788)

Fixes

Changed

v7.5.0

Compare Source

New features

• Add typings for confirmBilliePayment function (#​773)
• Add cancel event to ewcs ece (#​777)
• add billing details to pe change event (#​770)

Fixes

• migrate to stale action from stable bot (#​776)
• adds check for prerequisites (#​765)

Changed

v7.4.0

Compare Source

New features

• Add currency to elements group option (#​769)
• Add reject param to ECE click callback (#​767)
• Add cardFunding to applePay paymentRequest option (#​768)

v7.3.1

Compare Source

Changed

• Add missing link PaymentWalletsOption type (#​759)

v7.3.0

Compare Source

New features

• add klarna to ece public types (#​753)
• Add syncAddressCheckbox type to BaseStripeElementOptions (#​752)

Fixes

Changed

v7.2.0

Compare Source

Changed

• Update PMME currency and countryCode types (#​750)

v7.1.0

Compare Source

New features

• Remove CPM beta references, add CPM to elements.update types (#​747)

typescript-eslint/typescript-eslint (@​typescript-eslint/typescript-estree)

v8.38.0

Compare Source

🚀 Features

• typescript-estree: forbid optional chain in TemplateTaggedLiteral (#​11391)

🩹 Fixes

• typescript-estree: ensure the token type of the property name is Identifier (#​11329)

❤️ Thank You

• MK @​asdf93074
• tao

You can read about our versioning strategy and releases on our website.

unjs/unhead (@​unhead/vue)

v2.0.13

Compare Source

   🐞 Bug Fixes

• unhead:
  • Canonical plugin modifying non-url properties  -  by @​paraboul (ee8fd)
  • Avoid normalizing template param input  -  by @​harlan-zw (1d205)
  • Safer removal of leading / trailing separators  -  by @​harlan-zw (d4501)

    View changes on GitHub

v2.0.12

Compare Source

   🐞 Bug Fixes

• react: Force invalidation on entry disposal  -  by @​harlan-zw in https://github.com/unjs/unhead/issues/559 (4ee5e)

    View changes on GitHub

v2.0.11

Compare Source

   🐞 Bug Fixes

• Allow non-standard meta tags to be intentionally duped  -  by @​harlan-zw (9a899)

    View changes on GitHub

v2.0.10

Compare Source

   🐞 Bug Fixes

• Safer meta array deduping  -  by @​harlan-zw (32486)

    View changes on GitHub

v2.0.9

Compare Source

   🏎 Performance

• unhead: Normalize canonicalHost only once in canonical plugin  -  by @​negezor in https://github.com/unjs/unhead/issues/550 (92713)

    View changes on GitHub

v2.0.8

Compare Source

No significant changes

    View changes on GitHub

v2.0.7

Compare Source

   🐞 Bug Fixes

• schema-org: unhead hoisting issue  -  by @​harlan-zw (bb0e4)

    View changes on GitHub

v2.0.6

Compare Source

   🐞 Bug Fixes

• ssr: Less aggressive encoding of non-title tags  -  by @​harlan-zw (f4d4f)

    View changes on GitHub

v2.0.5

Compare Source

   🐞 Bug Fixes

• vue: Use setTimeout as render's debounced delayer  -  by @​kricsleo in https://github.com/unjs/unhead/issues/540 (8f7c5)

    View changes on GitHub

v2.0.4

Compare Source

   🐞 Bug Fixes

• InferSeoMetaPlugin: Template param replacement broken  -  by @​harlan-zw (4e1c8)

    View changes on GitHub

vueuse/vueuse (@​vueuse/core)

v13.6.0

Compare Source

   🚀 Features

• Mark templateRef as deprecated  -  by @​ilyaliao in https://github.com/vueuse/vueuse/issues/4894 (0271e)
• useFileDialog: Add MaybRef to multiple, accept, capture, reset, and directory  -  by @​hunterwilhelm, Anthony Fu and @​antfu in https://github.com/vueuse/vueuse/issues/4813 (a44bd)
• useFocusTrap: Expose updateContainerElements for dynamic contai…  -  by @​PeikyLiu and @​ilyaliao in https://github.com/vueuse/vueuse/issues/4849 (3d5e5)
• useIDBKeyval: Add options.serializer  -  by @​matthewjumpsoffbuildings, @​OrbisK and @​43081j in https://github.com/vueuse/vueuse/issues/4781 (bb831)
• useStorageAsync: Add onReady option and Promise return  -  by @​asika32764, Fernando Fernández, @​OrbisK and Anthony Fu in https://github.com/vueuse/vueuse/issues/4158 (3a2df)
• useTransition: Support custom window  -  by @​byronogis and Anthony Fu in https://github.com/vueuse/vueuse/issues/4850 (a75f4)

   🐞 Bug Fixes

• onClickOutside: The order of overload signatures  -  by @​whiteyebrw, @​ilyaliao and Anthony Fu in https://github.com/vueuse/vueuse/issues/4839 (d5812)
• types: Use Vue's native MaybeRef and MaybeRefOrGetter instead  -  by @​RYGRIT in https://github.com/vueuse/vueuse/issues/4913 (2d179)
• useDraggable: Add capture prop to component  -  by @​wgh970312 in https://github.com/vueuse/vueuse/issues/4911 (547f8)
• useMagicKeys: Prevent incorrect clearing of other keys after releasing shift  -  by @​keeplearning66 in https://github.com/vueuse/vueuse/issues/4916 (d7f28)
• useMouseInElement: Correctly update elementX and elementY  -  by @​cszhjh and @​ilyaliao in https://github.com/vueuse/vueuse/issues/4846 (cf02b)
• useVirtualList: Resolve invalid watch source  -  by @​cszhjh and @​OrbisK in https://github.com/vueuse/vueuse/issues/4857 (d2381)

    View changes on GitHub

antfu-collective/bumpp (bumpp)

v10.2.2

Compare Source

   🐞 Bug Fixes

• Improve workspace handling in normalizeOptions #​90  -  by @​Vanisper in https://github.com/antfu-collective/bumpp/issues/91 and https://github.com/antfu-collective/bumpp/issues/90 (5dc8c)

    View changes on GitHub

v10.2.1

Compare Source

   🐞 Bug Fixes

• Respect custom cwd, close #​87  -  by @​pot-code in https://github.com/antfu-collective/bumpp/issues/89 and https://github.com/antfu-collective/bumpp/issues/87 (08137)

    View changes on GitHub

eslint/eslint (eslint)

v9.32.0

Compare Source

eslint-community/eslint-plugin-n (eslint-plugin-n)

v17.21.3

Compare Source

🩹 Fixes

• no-missing-import: Support data imports (#​465) (69ea12b)

v17.21.2

Compare Source

🧹 Chores

• remove minimatch dependency (#​462) (92a24ac)

v17.21.1

Compare Source

🩹 Fixes

• ci: Ignore type test failures for types present in ESLint 8 that we removed in ESLint 9.31.0 (#​460) (76f8150)
• no-restricted-require: Handle .. paths (#​458) (34719e8)

h3js/h3 (h3)

v1.15.4

Compare Source

compare changes

🩹 Fixes

• getRequestHost: Return first host from x-forwarded-host (#​1175)

💅 Refactors

• useSession: Backport SessionManager interface to fix types (#​1058)

🏡 Chore

• docs: Fix typos (#​1108)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Kricsleo (@​kricsleo)
• Izoukhai (@​izoukhai)

microsoft/playwright (playwright-core)

v1.54.2

Compare Source

Highlights

https://github.com/microsoft/playwright/issues/36714 - [Regression]: Codegen is not able to launch in Administrator Terminal on Windows (ProtocolError: Protocol error)https://github.com/microsoft/playwright/issues/368288 - [Regression]: Playwright Codegen keeps spamming with selected optiohttps://github.com/microsoft/playwright/issues/3681010 - [Regression]: Starting Codegen with target language doesn't work anymore

Browser Versions

• Chromium 139.0.7258.5
• Mozilla Firefox 140.0.2
• WebKit 26.0

This version was also tested against the following stable channels:

• Google Chrome 140
• Microsoft Edge 140

pnpm/pnpm (pnpm)

v10.14.0

Compare Source

Minor Changes

• Added support for JavaScript runtime resolution

  Declare Node.js, Deno, or Bun in devEngines.runtime (inside package.json) and let pnpm download and pin it automatically.

  Usage example:

  {
    "devEngines": {
      "runtime": {
        "name": "node",
        "version": "^24.4.0",
        "onFail": "download" (we only support the "download" value for now)
      }
    }
  }

  How it works:

  1. pnpm install resolves your specified range to the latest matching runtime version.
  2. The exact version (and checksum) is saved in the lockfile.
  3. Scripts use the local runtime, ensuring consistency across environments.

  Why this is better:

  1. This new setting supports also Deno and Bun (vs. our Node-only settings useNodeVersion and executionEnv.nodeVersion)
  2. Supports version ranges (not just a fixed version).
  3. The resolved version is stored in the pnpm lockfile, along with an integrity checksum for future validation of the Node.js content's validity.
  4. It can be used on any workspace project (like executionEnv.nodeVersion). So, different projects in a workspace can use different runtimes.
  5. For now devEngines.runtime setting will install the runtime locally, which we will improve in future versions of pnpm by using a shared location on the computer.

  Related PR: #​9755.

• Add --cpu, --libc, and --os to pnpm install, pnpm add, and pnpm dlx to customize supportedArchitectures via the CLI #​7510.

Patch Changes

• Fix a bug in which pnpm add downloads packages whose libc differ from pnpm.supportedArchitectures.libc.
• The integrities of the downloaded Node.js artifacts are verified #​9750.
• Allow dlx to parse CLI flags and options between the dlx command and the command to run or between the dlx command and -- #​9719.
• pnpm install --prod should removing hoisted dev dependencies #​9782.
• Fix an edge case bug causing local tarballs to not re-link into the virtual store. This bug would happen when changing the contents of the tarball without renaming the file and running a filtered install.
• Fix a bug causing pnpm install to incorrectly assume the lockfile is up to date after changing a local tarball that has peers dependencies.

shikijs/shiki (shiki)

v3.9.1

Compare Source

   🚀 Features

• Update grammars  -  by @​antfu (e7eea)

    View changes on GitHub

v3.9.0

Compare Source

   🐞 Bug Fixes

• twoslash: Pass-through unrecognized options.lang to codeToHast  -  by @​topolarity in https://github.com/shikijs/shiki/issues/1047 (c586e)

    View changes on GitHub

v3.8.1

Compare Source

   🐞 Bug Fixes

• Support for adjacent empty decorations  -  by @​AndreasArvidsson and Anthony Fu in https://github.com/shikijs/shiki/issues/1042 (18dd7)

    View changes on GitHub

microsoft/TypeScript (typescript)

v5.9.2

Compare Source

vuejs/core (vue)

v3.5.18

Compare Source

Bug Fixes

• compiler-core: avoid cached text vnodes retaining detached DOM nodes (#​13662) (00695a5), closes #​13661
• compiler-core: avoid self updates of v-pre (#​12556) (21b685a)
• compiler-core: identifiers in function parameters should not be inferred as references (#​13548) (9b02923)
• compiler-core: recognize empty string as non-identifier (#​12553) (ce93339)
• compiler-core: transform empty v-bind dynamic argument content correctly (#​12554) (d3af67e)
• compiler-sfc: transform empty srcset w/ includeAbsolute: true (#​13639) (d8e40ef), closes vitejs/vite-plugin-vue#631
• css-vars: nullish v-bind in style should not lead to unexpected inheritance (#​12461) (c85f1b5), closes #​12434 #​12439 #​7474 #​7475
• custom-element: ensure exposed methods are accessible from custom elements by making them enumerable (#​13634) (90573b0), closes #​13632
• hydration: prevent lazy hydration for updated components (#​13511) (a9269c6), closes #​13510
• runtime-core: ensure correct anchor el for unresolved async components (#​13560) (7f29943), closes #​13559
• slots: refine internal key checking to support slot names starting with an underscore (#​13612) (c5f7db1), closes #​13611
• ssr: ensure empty slots render as a comment node in Transition (#​13396) (8cfc10a), closes #​13394

vuejs/language-tools (vue-tsc)

v3.0.5

Compare Source

v3.0.4

Compare Source

Features

• feat(language-service): check casing when dropping component into template - Thanks to @​KazariEX!
• feat(language-service): native completion experience for slot names (#​5552) - Thanks to @​KazariEX!

Bug Fixes

• fix(language-core): avoid clearing global types path when local compiler options is present - Thanks to @​KazariEX!
• fix(language-core): do not evaluate skipTemplateCodegen when exposing $slots - Thanks to @​KazariEX!
• fix(language-service): correct kind and order of component completion items - Thanks to @​KazariEX!
• fix(component-meta): filter events out of props (#​5547) - Thanks to @​Akryum!

Other Changes

• refactor(language-core): allow configuring checkUnknownEvents and checkUnknownComponents in sfc (#​5537) - Thanks to @​KazariEX!
• chore(language-service): add restart server hint to global types warning - Thanks to @​KazariEX!

v3.0.3

Compare Source

Bug Fixes

• fix(language-core): find node_modules based on file's directory (#​5525) - Thanks to @​KazariEX!
• fix(language-core): do not spread exposed object (#​5526) - Thanks to @​KazariEX!
• fix(vscode): prompt manual reload in remote envs (#​5530)

Other Changes

• refactor(tsc): return the result of runTsc (#​5517) - Thanks to @​escaton!

v3.0.2

Compare Source

Features

• feat(language-core): introduce globalTypesPath option for non-npm like environment (#​5505) - Thanks to @​KazariEX!
• feat: forward tsserver's semantic tokens via language server (#​5512) - Thanks to @​KazariEX!

Bug Fixes

• fix(vscode): correct syntax highlight of control directives ending with / or ) - Thanks to @​KazariEX!
• fix(language-core): infer parameter type of union slots to be union instead of intersection (#​5475) - Thanks to @​KazariEX!
• fix(vscode): remove colorizedBracketPairs config for plaintext
• fix(language-core): avoid early access to local types to skip unnecessary type generation - Thanks to @​KazariEX!
• fix(language-core): treat <component> without is prop as normal component - Thanks to @​KazariEX!
• fix(vscode): make sure tsserver loads @vue/typescript-plugin last (#​5483)
• fix(language-core): only keep navigation code feature on static name value of <slot> - Thanks to @​KazariEX!
• fix(language-server): add allowJs to reactivity analyze host - Thanks to @​KazariEX!
• fix(language-core): do not set template lang to md for markdown (#​5497) - Thanks to @​KazariEX!
• fix(typescript-plugin): exclude items of kind module from template completion - Thanks to @​KazariEX!
• fix(language-core): walk identifiers correctly within type nodes in interpolation (#​5501) - Thanks to @​KazariEX!
• fix(language-service): correct position calculation of twoslash queries (#​5503) - Thanks to @​KazariEX!
• fix(language-core): avoid redundant increment of block variable depth (#​5511) - Thanks to @​KazariEX!
• fix(language-service): re-implement twoslash queries in script - Thanks to @​KazariEX!

Other Changes

• refactor(vscode): make welcome page code public - Thanks to @​KazariEX!
• refactor(vscode): add premium feature settings
• chore: migrate from minimatch to picomatch (#​5499) - Thanks to @​KazariEX!
• chore: update volar to 2.4.19
  • fix(typescript): skip source file search when .d.${ext}.ts file exists (volarjs/volar.js#277)
• revert: type support of slot children (#​5137) (#​5514) - Thanks to @​KazariEX!

---

Configuration

📅 Schedule: Branch creation - "on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
scripts-docs	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Aug 2, 2025 0:05am
scripts-playground	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Aug 2, 2025 0:05am