Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 7, 2025

This PR contains the following updates:

Package Change Age Confidence
@nuxt/devtools (source) ^1.6.0 -> ^2.0.0 age confidence

GitHub Vulnerability Alerts

CVE-2025-52662

A vulnerability in Nuxt DevTools has been fixed in version 2.6.4*. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade.


Release Notes

nuxt/devtools (@​nuxt/devtools)

v2.6.4

Compare Source

Bug Fixes
  • using textContent instead of innerHtml for auth pagechore: update lock (7cadbbe)

v2.6.3

Compare Source

v2.6.2

Compare Source

Bug Fixes

v2.6.1

Compare Source

Bug Fixes

v2.6.0

Compare Source

Bug Fixes
Features

v2.5.0

Compare Source

v2.4.1

Compare Source

Bug Fixes
Features
  • improve modules view (807405f)
  • show docs link for components (9ab0ec8)

v2.4.0

Compare Source

Bug Fixes
  • devtools-kit: fix useDevtoolsClient return type (#​845) (5ce9b47)
  • module setup times are multiplied by 1000 (#​838) (d16aa96)
  • ui-kit: add [@unocss-include](https://redirect.github.com/unocss-include) magic string in NButton (#​852) (f18de78)
  • watch() typeof check on array is always false (#​850) (a873199)

2.3.2 (2025-03-26)

Bug Fixes

2.3.1 (2025-03-20)

Bug Fixes
  • downgrade execa to be compatible with Node v18, fix #​821 (f15c7dc)

v2.3.2

Compare Source

Bug Fixes

v2.3.1

Compare Source

Bug Fixes
  • downgrade execa to be compatible with Node v18, fix #​821 (f15c7dc)

v2.3.0

Compare Source

Features

2.2.1 (2025-03-05)

Bug Fixes
  • inspector: do not register instapector events if there is already any (db01e1b)

v2.2.1

Compare Source

Bug Fixes
  • inspector: do not register instapector events if there is already any (db01e1b)

v2.2.0

Compare Source

Features

2.1.3 (2025-03-03)

2.1.2 (2025-03-03)

2.1.1 (2025-02-28)

Bug Fixes
  • use shiki js engine instead of precompiled (d018045)
Features

v2.1.3

Compare Source

v2.1.1

Compare Source

Bug Fixes
  • use shiki js engine instead of precompiled (d018045)
Features

v2.1.0

Compare Source

Bug Fixes
  • hide inspector button when not available (684897f)
Features
  • allow override component inspector with __NUXT_INSPECTOR__ (9f3c8bf)
  • filter out installed modules in search result, closes #​780 (#​786) (fc8ced3)
  • option to disable vueDevTools (3e5251c)

v2.0.0

Compare Source

Features

v1.7.0

Compare Source

Features
  • improves vscode integration, support multiple backends (#​763) (463f6ad)

1.6.4 (2024-12-12)

Bug Fixes

1.6.3 (2024-12-03)

Bug Fixes

1.6.2 (2024-12-03)

Bug Fixes
  • add v4 compatibility version handeling for pages tab (#​758) (bd8651c)
Features
  • support vite-plugin-inspect for both Vite 5 and 6 (#​757) (cfcbc24)

1.6.1 (2024-11-20)

Bug Fixes
Features
  • apply lint, use explict import (2c6d2d3)

v1.6.4

Compare Source

Bug Fixes

v1.6.3

Compare Source

Bug Fixes

v1.6.2

Compare Source

Bug Fixes
  • add v4 compatibility version handeling for pages tab (#​758) (bd8651c)
Features
  • support vite-plugin-inspect for both Vite 5 and 6 (#​757) (cfcbc24)

v1.6.1

Compare Source

Bug Fixes
Features
  • apply lint, use explict import (2c6d2d3)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@changeset-bot
Copy link

changeset-bot bot commented Nov 7, 2025

⚠️ No Changeset found

Latest commit: 3891118

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@netlify
Copy link

netlify bot commented Nov 7, 2025

Deploy Preview for vintl-nuxt failed. Why did it fail? →

Name Link
🔨 Latest commit 3891118
🔍 Latest deploy log https://app.netlify.com/projects/vintl-nuxt/deploys/691c615bceeee80008716980

@renovate renovate bot force-pushed the renovate/npm-nuxt-devtools-vulnerability branch from 09829f9 to be2f07b Compare November 11, 2025 02:29
@renovate renovate bot force-pushed the renovate/npm-nuxt-devtools-vulnerability branch from be2f07b to 3891118 Compare November 18, 2025 12:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant