chore(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@antfu/eslint-config	^6.1.0 → ^6.7.3			pnpm.catalog.dev	minor
@commitlint/cli (source)	^20.1.0 → ^20.4.3			pnpm.catalog.dev	minor
@commitlint/config-conventional (source)	^20.0.0 → ^20.4.3			pnpm.catalog.dev	minor
@iconify-json/fluent	^1.2.34 → ^1.2.40			pnpm.catalog.dev	patch
@iconify-json/lucide	^1.2.71 → ^1.2.96			pnpm.catalog.dev	patch
@iconify-json/simple-icons	^1.2.56 → ^1.2.73			pnpm.catalog.dev	patch
@internationalized/date (source)	^3.10.0 → ^3.12.0			pnpm.catalog.integrations	minor
@nuxt/devtools (source)	^3.1.1 → ^3.2.3			pnpm.catalog.dev	minor
@nuxt/ui (source)	^4.2.1 → ^4.5.1			pnpm.catalog.integrations	minor
@nuxtjs/i18n (source)	^10.2.1 → ^10.2.3			pnpm.catalog.dev	patch
@openai/agents (source)	^0.2.1 → ^0.6.0			pnpm.catalog.integrations	minor
@paralleldrive/cuid2	2.2.2 → 2.3.1			pnpm.catalog.integrations	minor
@pinia/nuxt (source)	^0.11.2 → ^0.11.3			pnpm.catalog.integrations	patch
@tma.js/sdk-vue (source)	^1.0.8 → ^1.0.16			pnpm.catalog.integrations	patch
@types/node (source)	^24.9.2 → ^24.12.0			pnpm.catalog.types	minor
@types/pg (source)	8.15.5 → 8.18.0			devDependencies	minor
@unovis/ts (source)	^1.6.1 → ^1.6.4			pnpm.catalog.integrations	patch
@unovis/vue (source)	^1.6.1 → ^1.6.4			pnpm.catalog.integrations	patch
@vitest/browser-playwright (source)	^4.0.5 → ^4.0.18			pnpm.catalog.test	patch
@vitest/coverage-v8 (source)	^4.0.5 → ^4.0.18			pnpm.catalog.test	patch
arktype (source)	^2.1.22 → ^2.2.0			pnpm.catalog.integrations	minor
bumpp	^10.3.1 → ^10.4.1			pnpm.catalog.dev	minor
dotenv	^17.2.3 → ^17.3.1			pnpm.catalog.dev	minor
drizzle-cuid2	2.1.0 → 2.2.0			dependencies	minor
drizzle-kit (source)	0.31.5 → 0.31.9			devDependencies	patch
drizzle-orm (source)	0.44.6 → 0.45.1			dependencies	minor
eslint (source)	^9.39.2 → ^9.39.4			pnpm.catalog.dev	patch
grammy (source)	^1.38.3 → ^1.41.1			pnpm.catalog.integrations	minor
ioredis	^5.8.2 → ^5.10.0			pnpm.catalog.integrations	minor
libphonenumber-js	^1.12.25 → ^1.12.39			pnpm.catalog.integrations	patch
lint-staged	^16.2.7 → ^16.3.3			pnpm.catalog.dev	minor
nitropack	^2.12.9 → ^2.13.1			pnpm.catalog.dev	minor
node (source)	>=24.11.0 → >=24.14.0			engines	minor
node	24.11.0-alpine → 24.14.0-alpine			final	minor
node	24.11.0-slim → 24.14.0-slim			final	minor
nuxt (source)	^4.2.2 → ^4.3.1			pnpm.catalog.dev	minor
nuxt-auth-utils	^0.5.26 → ^0.5.29			pnpm.catalog.dev	patch
openai	^6.7.0 → ^6.27.0			pnpm.catalog.integrations	minor
pg (source)	8.16.3 → 8.20.0			dependencies	minor
pinia (source)	^3.0.3 → ^3.0.4			pnpm.catalog.integrations	patch
playwright (source)	^1.56.1 → ^1.58.2			pnpm.catalog.test	minor
pnpm (source)	10.20.0 → 10.32.1			packageManager	minor
pnpm (source)	>=10.20.0 → >=10.32.1			engines	minor
sharp (source, changelog)	^0.34.4 → ^0.34.5			pnpm.catalog.integrations	patch
sortablejs	^1.15.6 → ^1.15.7			pnpm.catalog.integrations	patch
vite (source)	^7.3.0 → ^7.3.1			pnpm.catalog.dev	patch
vitest (source)	^4.0.5 → ^4.0.18			pnpm.catalog.test	patch
vitest-browser-vue	^2.0.1 → ^2.0.2			pnpm.catalog.test	patch
vue-tsc (source)	^3.1.8 → ^3.2.5			pnpm.catalog.dev	minor

---

Release Notes

antfu/eslint-config (@​antfu/eslint-config)

v6.7.3

Compare Source

   🐞 Bug Fixes

• pnpm: Remove catalogMode in the enforced settings  -  by @​antfu (4fc09)

    View changes on GitHub

v6.7.2

Compare Source

   🐞 Bug Fixes

• Update react rules to match eslint-react v2  -  by @​Rel1cx in #​795 (6b425)
• pnpm: Add ignore for @​types/vscode in json-enforce-catalog  -  by @​jinghaihan in #​794 (95685)

    View changes on GitHub

v6.7.1

Compare Source

   🐞 Bug Fixes

• pnpm: Do not set catalogMode when catalogs is not enabled  -  by @​antfu (0471e)

    View changes on GitHub

v6.7.0

Compare Source

   🚀 Features

• Add more options to toggle configs  -  by @​antfu (203b8)

   🐞 Bug Fixes

• pnpm: Respect yaml and jsonc config in the factory, close #​791  -  by @​antfu in #​791 (3e0c5)

    View changes on GitHub

v6.6.1

Compare Source

   🐞 Bug Fixes

• pnpm: Detection  -  by @​antfu (e649f)

    View changes on GitHub

v6.6.0

Compare Source

   🐞 Bug Fixes

• pnpm: Enforce catalog usage based on smart detection  -  by @​antfu (654c0)

    View changes on GitHub

v6.5.1

Compare Source

   🐞 Bug Fixes

• Adopt to tsdown extension change, close #​786, close #​787  -  by @​antfu in #​786 and #​787 (c16d3)

    View changes on GitHub

v6.5.0

Compare Source

   🚀 Features

• react: React compiler preset  -  by @​hyoban in #​784 (663e0)

   🐞 Bug Fixes

• Spelling of required-scrpts  -  by @​christopher-buss in #​785 (26185)
• pnpm: Remove cleanupUnusedCatalogs setting  -  by @​antfu (f712a)

    View changes on GitHub

v6.4.2

Compare Source

   🐞 Bug Fixes

• pnpm: Move pnpm-workspace.yaml sorting config from yaml to pnpm  -  by @​antfu (fc2b1)

    View changes on GitHub

v6.4.1

Compare Source

No significant changes

    View changes on GitHub

v6.3.0

Compare Source

   🚀 Features

• Update deps  -  by @​antfu (2d2b6)

   🐞 Bug Fixes

• Ts error from cb29b1a  -  by @​daflyinbed in #​782 (b4e49)

    View changes on GitHub

v6.2.0

Compare Source

   🚀 Features

• Accepting functions for ignores, close #​776  -  by @​antfu in #​776 (63b13)

    View changes on GitHub

conventional-changelog/commitlint (@​commitlint/cli)

v20.4.3

Compare Source

Bug Fixes

• footer parser does not escape special chars for regex #​4560 (#​4634) (8ff7c7f)

v20.4.2

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.4.1

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.4.0

Compare Source

Features

• upgrade conventional commit packages #​4082 (#​4597) (3aaf0a6)

20.3.1 (2026-01-08)

Note: Version bump only for package @​commitlint/cli

v20.3.1

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.3.0

Compare Source

Note: Version bump only for package @​commitlint/cli

v20.2.0

Compare Source

Note: Version bump only for package @​commitlint/cli

conventional-changelog/commitlint (@​commitlint/config-conventional)

v20.4.3

Compare Source

Bug Fixes

• footer parser does not escape special chars for regex #​4560 (#​4634) (8ff7c7f)

v20.4.2

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.4.1

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.4.0

Compare Source

Features

• upgrade conventional commit packages #​4082 (#​4597) (3aaf0a6)

20.3.1 (2026-01-08)

Note: Version bump only for package @​commitlint/config-conventional

v20.3.1

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.3.0

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

v20.2.0

Compare Source

Note: Version bump only for package @​commitlint/config-conventional

adobe/react-spectrum (@​internationalized/date)

v3.12.0

Compare Source

v3.11.0

Compare Source

v3.10.1

Compare Source

nuxt/devtools (@​nuxt/devtools)

v3.2.3

Compare Source

Bug Fixes

• devtools: add zeditor option for Zed on Arch Linux (#​932) (4d481d5)
• unocss config, close #​937 (0edaf99)

v3.2.2

Compare Source

Bug Fixes

• attributes error penetration warning (#​930) (706a760)
• devtools: scope storage watchers to avoid EMFILE (#​934) (902c60c)
• wizard: typos (#​931) (0216c08)

Features

• replace prompts with @clack/prompts (#​935) (1aa3d2d)

v3.2.1

Compare Source

Bug Fixes

• inspect panel position (2f93070)

v3.2.0

Compare Source

Bug Fixes

• devtools: call devtools:initialized hook after all modules run (#​919) (3662836)

Features

• enhance inspect panel, add copy visual info for agents (#​928) (6bb2565)
• upgrade vite-devtools (5c4a0b0)

3.1.1 (2025-11-25)

Bug Fixes

• ui: remove flash when switching to dark (#​909) (75a814f)

Features

• support passing additional permissions to the iframe (#​911) (bc1d11c)

nuxt/ui (@​nuxt/ui)

v4.5.1

Compare Source

Bug Fixes

• components: improve arrow styling with stroke-default and fill-bg (#​6095) (0e9198e)
• components: improve slots return types and tests (#​6109) (7d1e863)
• components: prevent transformUI from mutating cached useComponentUI value (286738a), closes #​6104 #​4387
• ContentToc: add relative positioning to content slot (fcdb231), closes #​6117
• ContentToc: use rem units for indicator size calculation (d631853)
• NavigationMenu: prevent navigation when clicking trailing area in horizontal orientation (8f84c90), closes #​6083
• Page: make slot presence reactive for variant computation (082ea41)
• types: resolve isArrayOfArray type return (#​6097) (04292d9)
• useResizable: use function declaration to prevent false auto-import (c22ecf4)

v4.5.0

Compare Source

Features

• DashboardSidebar/Header: add autoClose prop (#​6089) (2663deb)
• EditorDragHandle: proxy nested / nestedOptions props and emit hover event (#​5960) (ed60193)
• Form: add HTML5 validation to programmatic submit (#​6002) (ed552fc)
• locale: add Belarusian language (#​5972) (ac9e7b3)
• module: add support for taupe / mauve / mist / olive neutral colors (#​6081) (bc49d3f)
• NavigationMenu: allow tooltip usage in horizontal orientation (#​5682) (f46b504)
• NavigationMenu: handle chip in items (#​6064) (401a2c0)
• ScrollArea: add skipMeasurement virtualize option (#​5721) (548b711)
• Select/SelectMenu: add hover effects on outline and subtle variants (94b0c31)
• Theme: new component (#​4387) (c97047d)
• Toaster: prevent duplicate toasts and add pulse animation (3f6581a)

Bug Fixes

• BlogPost/ChangelogVersion: use ImgHTMLAttributes type for image prop (#​6007) (0185856)
• ChatMessages: allow message props to override role defaults (#​6000) (f64ec17)
• ChatMessages: prevent flash at top before scrolling to bottom on mount (4bdcb83)
• Checkbox/Switch: prevent data-state conflict when used inside Tooltip (2bb1a8b), closes #​3599
• CheckboxGroup: update update:modelValue emit type (#​5927) (64d2e88)
• ColorModeImage: add baseURL support for public paths (#​6006) (db510f3)
• components: add fixed prop to prevent responsive text size reduction (#​6074) (8f5f44c)
• components: nullable and optional type support (#​6060) (cd3432b)
• components: prevent iOS auto-zoom on input fields with font-size below 16px (#​6040) (1262016)
• ContentNavigation: pass nested child data to slots (#​6043) (e67f77e)
• defineShortcuts: add alt key guard (#​6020) (8451f45)
• defineShortcuts: allow shifted special character shortcuts (08facc0)
• Drawer/Modal/Popover/Slideover: prevent unexpected close on touch when interacting with other overlays (#​5695) (e2c038c)
• Editor: handle placeholder in RTL mode (#​5977) (3cc16e3)
• EditorMentionMenu: use char prop as mention prefix instead of always @ (0b9b097), closes #​6035
• EditorToolbar: proxy size prop to dropdown menu (8f8d989)
• InputMenu/InputNumber/SelectMenu: proxy size to buttons (1ec1698), closes #​5958
• InputMenu/Select/SelectMenu: exclude cosmetic items from model value type (#​6044) (22cf1ea)
• InputMenu/SelectMenu: sort filtered items by match relevance (058c66b), closes #​4672
• InputMenu: prevent focus on trailing button (88073b6)
• module: update icon cssLayer option from components to base (#​6076) (e8bc322)
• NavigationMenu: allow clicking trailing slot in horizontal orientation (7f9996f), closes #​5192 #​6083
• NavigationMenu: unique auto-generated item values for grouped items (7b317d9)
• PricingPlan: truncate title (#​6041) (8e86c51)
• Select: remove useless by prop (14dceaf)
• Table: improve perfs with shallowRef when watch deep is disabled (#​6023) (bc06ce2)
• Toast: allow update to keep toast open and reset duration (82afa0a)
• Toast: improve animation smoothness (#​6065) (ee2c0a5)
• types: improve DotPathKeys accuracy and GetItemKeys performance (#​6077) (6f7af3e)
• useEditorMenu: rank filtered results by relevance (f53484a)

v4.4.0

Compare Source

Features

• Calendar: add weekNumbers prop (#​4555) (7a1a71b)
• ChangelogVersions: handle scroll options in indicator prop (#​5257) (6a925cd)
• CommandPalette/InputMenu/SelectMenu/Tree: handle virtualizer estimateSize as function (#​5748) (d51b424)
• CommandPalette: add input prop (#​5736) (12052e8)
• CommandPalette: add size prop (#​5878) (3ae04c6)
• components: add by prop (#​5906) (36cd5e5)
• components: add valueKey prop (#​5905) (55646ea)
• Editor: add placeholder.mode prop (d90acb3), closes #​5785
• Editor: add size prop in menus (#​5889) (571d50d)
• Editor: add taskList handler (#​5837) (db04197)
• Editor: add support for code inside links (2ed2d5d)
• Editor: handle boolean in image and mention props (b6fa83a), closes #​5820
• EditorMentionMenu: handle async search with ignoreFilter prop (#​5880) (f8d1883)
• InputMenu/Select/SelectMenu: expose viewportRef for infinite scroll (#​5836) (f4a945c)
• InputMenu/SelectMenu: add clear prop (#​5643) (ec6b8ec)
• Link: support custom navigate function in vue (#​5860) (f51e58a)
• ProseTd/ProseTh: handle align prop (859390e), closes #​5795
• Timeline/Stepper: add wrapper slot and fix dynamic slot conditions (#​5868) (8610d4d)
• Timeline: add select event (#​5826) (8e431be)

Bug Fixes

• Banner: isolate banner visibility using per-instance CSS variables (#​5751) (c7332eb)
• Banner: prevent XSS via id prop injection (4e334a0)
• CommandPalette/ContextMenu/DropdownMenu: keyboard selection on link items (3f5bdb3)
• CommandPalette: prevent XSS in search highlight (e12ceb6)
• ContentSurround: align next link to right on tablet without prev (#​5833) (b3adccc)
• defineShortcuts: check shift modifier for special character shortcuts (bd344d7), closes #​5911
• Editor: set contentType when updating value (c37d6f7), closes #​5709
• **

---

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​tma.js/​sdk-vue@​1.0.8 ⏵ 1.0.16	+2		-1	+2
	@​vitest/​coverage-v8@​4.0.5 ⏵ 4.0.18	+1
	@​commitlint/​cli@​20.1.0 ⏵ 20.4.3				+2
	@​types/​pg@​8.15.5 ⏵ 8.18.0	+1		+1	-1
	openai@​6.27.0
	@​iconify-json/​simple-icons@​1.2.56 ⏵ 1.2.73				+1
	@​iconify-json/​fluent@​1.2.34 ⏵ 1.2.40	+5			-1
	@​iconify-json/​lucide@​1.2.71 ⏵ 1.2.96	+1		+1	+1
	@​types/​node@​24.9.2 ⏵ 24.12.0			+1
	bumpp@​10.3.1 ⏵ 10.4.1	-2			+1
	@​unovis/​vue@​1.6.1 ⏵ 1.6.4			-8	+2
	@​pinia/​nuxt@​0.11.2 ⏵ 0.11.3	+1		+11
	@​vitest/​browser-playwright@​4.0.5 ⏵ 4.0.18			+1	+2
	@​internationalized/​date@​3.10.0 ⏵ 3.12.0	+1		+1
	arktype@​2.1.22 ⏵ 2.2.0			+1	+2
	@​nuxtjs/​i18n@​10.2.1 ⏵ 10.2.3			+1	+4
	@​openai/​agents@​0.2.1 ⏵ 0.6.0	+1		-5
	@​antfu/​eslint-config@​6.1.0 ⏵ 6.7.3	-2
	@​unovis/​ts@​1.6.1 ⏵ 1.6.4	-1		+1	+3
	@​commitlint/​config-conventional@​20.0.0 ⏵ 20.4.3				+2
	@​nuxt/​ui@​4.2.1 ⏵ 4.5.1				+2
	@​nuxt/​devtools@​3.2.3

View full report

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud