chore(deps): bump the npm-version-updates group across 1 directory with 13 updates

[dependabot]

Bumps the npm-version-updates group with 12 updates in the / directory:

Package	From	To
@auth/core	0.40.0	0.41.1
@nuxt/image	1.11.0	2.0.0
nuxt	4.2.1	4.4.2
openid-client	6.8.1	6.8.2
vue-router	4.6.3	5.0.4
@nuxt/eslint	1.10.0	1.15.2
@playwright/test	1.56.1	1.59.0
@types/node	22.19.15	25.5.0
eslint	9.39.1	10.1.0
knip	5.70.1	6.1.1
prettier	3.6.2	3.8.1
typescript	5.9.3	6.0.2

Updates @auth/core from 0.40.0 to 0.41.1

Release notes

Sourced from @​auth/core's releases.

@​auth/core@​0.41.1

Bugfixes

• security issue from nodemailer (#13305)

Other

• update links for Credentials-based Authentication (#13258)

@​auth/core@​0.41.0

Features

• providers: support custom baseURL for Gitlab (#13260) (745751e9)

Other

• fix build
• adjust default fusionauth provider details (#10868)

Commits

• 089f0e3 chore(release): bump package version(s) [skip ci]
• 2824fa1 feat: add next 16 support (#13298)
• 8f3b2c7 fix: security issue from nodemailer (#13305)
• 240e343 docs: update the Prisma ORM page to use Prisma Postgres (#13299)
• 0bcd32d chore(drizzle): migrate sqliteTable to array API (#13280)
• 90188fa ci: enable merge queue (#13288)
• 8d02b3d docs: remove carbon developer ads widget from docs sidebar (#13286)
• c8cd9b1 chore: remove unused script (#13279)
• 3a7c669 docs: update links for Credentials-based Authentication (#13258)
• e9e2b50 chore(release): bump package version(s) [skip ci]
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by bekacru, a new releaser for @​auth/core since your current version.

Updates @nuxt/image from 1.11.0 to 2.0.0

Release notes

Sourced from @​nuxt/image's releases.

v2.0.0

We're excited to announce Nuxt Image v2! 🎉 This release focuses on TypeScript support, performance improvements, and better developer experience.

👀 Highlights

[!NOTE] Nuxt Image v2 requires Nuxt 3.1+. If you're on Nuxt 3.0.x, you'll need to upgrade to at least 3.1 first.

🎯 TypeScript support

The biggest change in v2 is full TypeScript support throughout the module (#1802).

Typed providers

Image providers now use defineProvider for type-safe configuration:

// Before (v1)
export const getImage = (src, { modifiers, baseURL }) => {
  // ...
  return { url }
}
// After (v2)
import { defineProvider } from '@​nuxt/image/runtime'
export default defineProvider({
getImage(src, { modifiers, baseURL }) {
// Fully typed modifiers
// ...
return { url }
}
})

Type-safe configuration

Module options are now fully typed. For example, providers that require a baseURL will enforce it at the type level in your nuxt.config.ts:

export default defineNuxtConfig({
  image: {
    provider: 'cloudinary',
    cloudinary: {
      baseURL: 'https://res.cloudinary.com/...' // TypeScript error if missing!
    }
  }
})

... (truncated)

Commits

• 27f9989 ci: disable git checks
• 9dba924 docs: add migration guide (#2007)
• eb9ab8d v2.0.0
• b7f4a95 chore: update redirected URL (#2006)
• 99a0278 perf(nuxt-img): call decode before swapping from placeholder (#2008)
• 62998ab build: update ambient type hint
• 533b927 build: pull in types from index
• 195cec0 ci: use push of tag as release trigger
• 30eb4a3 ci: always release on pkg.pr.new
• dfc3ee3 chore(deps): update all non-major dependencies (#2003)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​nuxt/image since your current version.

Updates nuxt from 4.2.1 to 4.4.2

Release notes

Sourced from nuxt's releases.

v4.3.1

4.3.1 is a regularly scheduled patch release.

👉 Changelog

compare changes

🩹 Fixes

• nuxt: Correct reference format of server builder (#34177)
• nuxt: Add status/statusText getters to NuxtError (#34188)
• nuxt: Don't inject shared types for differing auto-imports (#34191)
• schema: Add direnv and vendor to default ignore (#34190)
• nuxt: Focus hash links after navigation (#34193)
• nuxt: Exclude head runtime from unhead imports transform (#34195)
• kit: Include prereleases in semver satisfy check (#34210)
• nitro: Encode unicode paths in x-nitro-prerender header (#34202)
• nuxt: Watch server/ for builder:watch hook (#34208)
• nitro: Preserve error.message for fatal errors (#34226)
• Only enable dynamic imports when ts plugin (#34205)
• webpack: Use H3Error for 403 in dev server (#34233)
• nuxt: Ensure NuxtError extends Error type (#34242)
• vite: Use H3Error for 404 in dev server (#34225)
• nuxt: Add backwards compat for #app barrel export in keyed functions (#34199)
• nuxt: Track + re-add custom routes on hmr (#32044)
• nuxt: Keep vnode when leaving deeper nested route (#33778)
• vite: Prevent CSS flickering in dev mode after config changes (#33856)
• nuxt: Do not start view transition if there is no route (#33723)
• nuxt: Call deferHydration done on NuxtPage unmount (#34152)
• nuxt: Handle invalid datetime in ` (#33992)
• nuxt: Preserve middleware error status in 404 fallback (#34148)
• nitro: Do not augment nuxt/schema (#34255)
• nuxt: Cache manifest files to preserve buildId (#34002)
• nuxt: Don't decode query string in SSR context URL (#34252)
• nuxt: Allow specifying moduleDependencies by meta.name (#34263)
• nuxt: Resolve #components import mapping conflict for packages outside rootDir (#34139)
• vite,webpack: Use node.res to send 403/404 (#34266)
• nitro,nuxt: Align path encoding with vue-router (#34265)
• nitro: Augment nuxt/schema once more (552bbd8d1)

💅 Refactors

• nuxt: Prefer genObjectKey to omit unnecessary quotes (#34245)
• nuxt: Use ComponentProps helper to extract layout props (#34248)

📖 Documentation

• Update roadmap dates (#34166)
• Correct default value of nitroAutoImports (#34182)
• Clarify shared type context limitations for custom imports (#34194)
• Fix broken links (#34223)
• Document payload extraction for ISR/SWR routes (#34222)
• Update default aliases in configuration reference (#34237)

... (truncated)

Commits

• d042505 v4.4.2
• 7781701 v4.4.1
• 5c3ca59 v4.4.0
• 31028d2 chore: lint
• df7ef5d feat(nuxt,kit,schema): add a factory function for useFetch and `useAsyncDat...
• 2dc5255 fix(nuxt): handle rejected promise in view transition abort (#34515)
• cf3e2ad fix(nuxt): fix cookie expiration timeout for long-lived cookies (#34513)
• 3b9d0bc fix(nuxt): pass deleteCount to splice in preloadRouteComponents (#34514)
• 414a283 fix(nuxt): never preload manifest (#34511)
• d586631 fix(nuxt): check file freshness before truncating in cache restore (#34509)
• Additional commits viewable in compare view

Updates openid-client from 6.8.1 to 6.8.2

Release notes

Sourced from openid-client's releases.

v6.8.2

Fixes

• use duplex: half for fetchProtectedResource with ReadableStream body input (f6f84e2)

Changelog

Sourced from openid-client's changelog.

6.8.2 (2026-02-07)

Fixes

• use duplex: half for fetchProtectedResource with ReadableStream body input (f6f84e2)

Commits

• b14e51c chore(release): 6.8.2
• f6f84e2 fix: use duplex: half for fetchProtectedResource with ReadableStream body input
• f879890 chore: bump packages
• b506e1a build(deps): bump the actions group with 4 updates (#853)
• 0baa958 chore: bump packages
• c5d4931 chore: bump packages
• 7cf3c12 test: revert undici for the time being
• 8b2e360 chore: bump packages
• 79386b7 build(deps): bump lodash from 4.17.21 to 4.17.23 (#849)
• 950e199 build(deps-dev): bump tar from 7.5.3 to 7.5.6 (#848)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for openid-client since your current version.

Updates vue from 3.5.24 to 3.5.31

Release notes

Sourced from vue's releases.

v3.5.31

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.30

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.29

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.28

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.27

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.26

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.25

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.31 (2026-03-25)

Bug Fixes

• compiler-sfc: allow Node.js subpath imports patterns in asset urls (#13045) (95c3356), closes #9919
• compiler-sfc: support template literal as defineModel name (#14622) (bd7eef0), closes #14621
• reactivity: normalize toRef property keys before dep lookup + improve types (#14625) (1bb28d0), closes #12427 #12431
• runtime-core: invalidate detached v-for memo vnodes after unmount (#14624) (560def4), closes #12708 #12710
• runtime-core: preserve nullish event handlers in mergeProps (#14550) (5725222)
• runtime-core: prevent merging model listener when value is null or undefined (#14629) (b39e032)
• runtime-dom: defer teleport mount/update until suspense resolves (#8619) (88ed045), closes #8603
• runtime-dom: handle activeElement check in Shadow DOM for v-model (#14196) (959ded2)
• server-renderer: cleanup component effect scopes after SSR render (#14548) (862f11e)
• suspense: avoid unmount activeBranch twice if wrapped in transition (#9392) (908c6ad), closes #7966
• suspense: update suspense vnode's el during branch self-update (#12922) (a2c1700), closes #12920
• transition: skip enter guard while hmr updating (#14611) (be0a2f1), closes #14608
• types: prevent shallowReactive marker from leaking into value unions (#14493) (3b561db), closes #14490

3.5.30 (2026-03-09)

Bug Fixes

• compat: add entities to @​vue/compat deps to fix CJS edge cases (#12514) (e725a67), closes #10609
• custom-element: ensure child component styles are injected in correct order before parent styles (#13374) (1398bf8), closes #13029
• custom-element: properly locate parent when slotted in shadow dom (#12480) (f06c81a), closes #12479
• custom-element: should properly patch as props for vue custom elements (#12409) (740983e), closes #12408
• reactivity: avoid duplicate raw/proxy entries in Set.add (#14545) (d943612)
• reactivity: fix reduce on reactive arrays to preserve reactivity (#12737) (16ef165), closes #12735
• reactivity: handle Set with initial reactive values edge case (#12393) (5dc27ca), closes #8647
• runtime-core: warn about negative number in v-for (#12308) (9438cc5)
• ssr: prevent watch from firing after async setup await (#14547) (6cda71d), closes #14546
• types: make generics with runtime props in defineComponent work (fix #11374) (#13119) (cea3cf7), closes #13763
• types: narrow useAttrs class/style typing for TSX (#14492) (bbb8977), closes #14489

3.5.29 (2026-02-24)

Bug Fixes

• runtime-core: prevent instance leak in withAsyncContext (#14445) (702284f), closes nuxt/nuxt#33644
• server-renderer: render className as escaped string (#14469) (da6690c)
• transition: prevent enter if leave is in progress (#14443) (df059f8), closes #12091 #12133

... (truncated)

Commits

• 81615d3 release: v3.5.31
• 3b561db fix(types): prevent shallowReactive marker from leaking into value unions (#1...
• 1b2aca4 chore: ignore entities updates in renovate (#14630)
• 51675b4 chore(deps): update dependency jsdom to v29 (#14580)
• b147482 chore(deps): update build (#14572)
• 7a4bf3c chore(deps): update all non-major dependencies (#14577)
• fe6e5fe chore(deps): update test (#14578)
• 5ad623a chore(deps): update pnpm/action-setup action to v5 (#14616)
• bf033b8 chore(deps): update dawidd6/action-download-artifact action to v19 (#14614)
• e41a589 chore(deps): update dependency @​babel/parser to ^7.29.2 (#14613)
• Additional commits viewable in compare view

Updates vue-router from 4.6.3 to 5.0.4

Release notes

Sourced from vue-router's releases.

v5.0.4

   🐞 Bug Fixes

• Avoid iterator helpers for Node 20 compat  -  by @​cwandev in vuejs/router#2635 (47130)
• Escape backslahes in string literals  -  by @​posva (71fdb)
• Avoid false duplicate route warning for named views  -  by @​posva (72012)
• Allow pushing to auto routes  -  by @​posva (47f03)
• loaders: Restore context in sequential awaits  -  by @​posva (fce5d)

    View changes on GitHub

v5.0.3

   🚨 Breaking Changes

• experimental:
  • Make miss() throw internally and return never  -  by @​posva (077e1)
  • Add reroute() and deprecate NavigationResult  -  by @​posva (308db)
  • Remove selectNavigationResult  -  by @​posva (9e88a)

   🚀 Features

• Support _parent in nested folders  -  by @​posva (0a37f)
• Warn on _parent conflict  -  by @​posva (182fe)
• Set _parent as non matchable by default  -  by @​posva (8f91c)
• Warn on conflicting components for routes  -  by @​posva (34ace)
• Use type module  -  by @​posva (dc9ff)
• Add deprecation warning for next() callback in navigation guards  -  by @​posva (797f5)
• Extract alias from definePage  -  by @​posva (835df)
• Display aliases in logs  -  by @​posva (7aa60)
• Deprecate new NavigationResult(to) in favor of reroute(to)  -  by @​posva (382e3)
• experimental:
  • Handle aliasOf in resolvers  -  by @​posva (8fe45)
  • Generate aliases from override in resolver  -  by @​posva (a00ac)
  • Warn against non absolute aliases  -  by @​posva (476c6)

   🐞 Bug Fixes

• Avoid non matchable routes in auto-routes  -  by @​posva (48649)
• Handle quotes in d.ts  -  by @​posva (d7764)
• Avoid route entry in map for _parent  -  by @​posva (1dfcc)
• Handle nested groups  -  by @​posva (4a4be)
• Stable route ordering for group folders with same path  -  by @​posva (1db94)
• Correct route ordering for group nodes with inflated scores  -  by @​posva (515f4)
• Cleanup old route overrides  -  by @​posva (b28a7)
• Remove name from _parent.vue files  -  by @​posva (6e8f1)
• ci:
  • Format sponsor files before change detection  -  by @​posva (f68d6)
  • Use manual git commit in update-sponsors  -  by @​posva (8ee99)
• experimental:
  • Resolve TS errors in resolver/router type hierarchy  -  by @​posva (a86f1)

... (truncated)

Commits

• 7f32e99 release: vue-router@5.0.4
• 9036228 docs: typos (#2651)
• 47f0334 fix: allow pushing to auto routes
• ad6ba73 docs: no auto import section
• f6923a5 build: include link and view in size computation
• fce5d1e fix(loaders): restore context in sequential awaits
• 9ab4cbf refactor: rename var
• d030f2a chore: playground
• 7b3dc27 docs(zh): add file-based routing related configuration documentation (#2643)
• 0a01948 chore: hide route details in playground
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vue-router since your current version.

Updates @nuxt/eslint from 1.10.0 to 1.15.2

Commits

• f852ae5 chore: release v1.15.2
• 69aa40e fix: prevent race condition of running checker module before eslint config is...
• 8961807 chore: release v1.15.1
• b554991 chore: release v1.15.0
• 305a9bb feat: relax peer deps range to support ESLint v10, fix #642
• 997aa95 chore: release v1.14.0
• bc637da chore: release v1.13.0
• 34fa12b chore: release v1.12.1
• 657fcb4 chore: release v1.12.0
• 1c5ca6a docs: fix Nuxt badge icon (#632)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​nuxt/eslint since your current version.

Updates @playwright/test from 1.56.1 to 1.59.0

Release notes

Sourced from @​playwright/test's releases.

v1.59.0

🎬 Screencast

New page.screencast API provides a unified interface for capturing page content with:

• Screencast recordings
• Action annotations
• Visual overlays
• Real-time frame capture
• Agentic video receipts

Screencast recording — record video with precise start/stop control, as an alternative to the recordVideo option:

await page.screencast.start({ path: 'video.webm' });
// ... perform actions ...
await page.screencast.stop();

Action annotations — enable built-in visual annotations that highlight interacted elements and display action titles during recording:

await page.screencast.showActions({ position: 'top-right' });

screencast.showActions() accepts position ('top-left', 'top', 'top-right', 'bottom-left', 'bottom', 'bottom-right'), duration (ms per annotation), and fontSize (px). Returns a disposable to stop showing actions.

Action annotations can also be enabled in test fixtures via the video option:

// playwright.config.ts
export default defineConfig({
  use: {
    video: {
      mode: 'on',
      show: {
        actions: { position: 'top-left' },
        test: { position: 'top-right' },
      },
    },
  },
});

Visual overlays — add chapter titles and custom HTML overlays on top of the page for richer narration:

... (truncated)

Commits

• 01b2b15 cherry-pick(#39980): chore: more release notes fixes
• a5cb6c9 cherry-pick(#39972): chore: expose browser.bind and browser.unbind APIs
• 99a17b5 cherry-pick(#39975): chore: support opening .trace files via .link indirection
• 43607c3 cherry-pick(#39974): chore(webkit): update Safari user-agent version to 26.4
• 62cabe1 cherry-pick(#39969): chore(npm): include all *.md from lib (#39970)
• 0c65a75 cherry-pick(#39968): chore: screencast.showActions api
• f04155b cherry-pick(#39958): chore: release notes for langs v1.59
• 5a842ee cherry-pick(#39957): fix(dashboard): light mode styles (#39959)
• 32f6a31 cherry-pick(#39953): fix(trace): redirect output to file via --filename (#39956)
• c23fe70 cherry-pick(#39930): fix: trace request should show bodies from resource (#39...
• Additional commits viewable in compare view

Updates @types/node from 22.19.15 to 25.5.0

Commits

• See full diff in compare view

Updates eslint from 9.39.1 to 10.1.0

Release notes

Sourced from eslint's releases.

v10.1.0

Features

• ff4382b feat: apply fix for no-var in TSModuleBlock (#20638) (Tanuj Kanti)
• 0916995 feat: Implement api support for bulk-suppressions (#20565) (Blake Sager)

Bug Fixes

• 2b8824e fix: Prevent no-var autofix when a variable is used before declaration (#20464) (Amaresh S M)
• e58b4bf fix: update eslint (#20597) (renovate[bot])

Documentation

• b7b57fe docs: use correct JSDoc link in require-jsdoc.md (#20641) (mkemna-clb)
• 58e4cfc docs: add deprecation notice partial (#20639) (Milos Djermanovic)
• 7143dbf docs: update v9 migration guide for @eslint/js usage (#20540) (fnx)
• 035fc4f docs: note that globalReturn applies only with sourceType: "script" (#20630) (Milos Djermanovic)
• e972c88 docs: merge ESLint option descriptions into type definitions (#20608) (Francesco Trotta)
• 7f10d84 docs: Update README (GitHub Actions Bot)
• aeed007 docs: open playground link in new tab (#20602) (Tanuj Kanti)
• a0d1a37 docs: Add AI Usage Policy (#20510) (Nicholas C. Zakas)

Chores

• a9f9cce chore: update dependency eslint-plugin-unicorn to ^63.0.0 (#20584) (Milos Djermanovic)
• 1f42bd7 chore: update prettier to 3.8.1 (#20651) (루밀LuMir)
• c0a6f4a chore: update dependency @​eslint/json to ^1.2.0 (#20652) (renovate[bot])
• cc43f79 chore: update dependency c8 to v11 (#20650) (renovate[bot])
• 2ce4635 chore: update dependency @​eslint/json to v1 (#20649) (renovate[bot])
• f0406ee chore: update dependency markdownlint-cli2 to ^0.21.0 (#20646) (renovate[bot])
• dbb4c95 chore: remove trunk (#20478) (sethamus)
• c672a2a test: fix CLI test for empty output file (#20640) (kuldeep kumar)
• c7ada24 ci: bump pnpm/action-setup from 4.3.0 to 4.4.0 (#20636) (dependabot[bot])
• 07c4b8b test: fix RuleTester test without test runners (#20631) (Francesco Trotta)
• 079bba7 test: Add tests for isValidWithUnicodeFlag (#20601) (Manish chaudhary)
• 5885ae6 ci: unpin Node.js 25.x in CI (#20615) (Copilot)
• f65e5d3 chore: update pnpm/action-setup digest to b906aff (#20610) (renovate[bot])

v10.0.3

Bug Fixes

• e511b58 fix: update eslint (#20595) (renovate[bot])
• f4c9cf9 fix: include variable name in no-useless-assignment message (#20581) (sethamus)
• ee9ff31 fix: update dependency minimatch to ^10.2.4 (#20562) (Milos Djermanovic)

Documentation

• 9fc31b0 docs: Update README (GitHub Actions Bot)
• 4efaa36 docs: add info box for eslint-plugin-eslint-comments (#20570) (DesselBane)
• 23b2759 docs: add v10 migration guide link to Use docs index (#20577) (Pixel998)
• 80259a9 docs: Remove deprecated eslintrc documentation files (#20472) (Copilot)
• 9b9b4ba docs: fix typo in no-await-in-loop documentation (#20575) (Pixel998)
• e7d72a7 docs: document TypeScript 5.3 minimum supported version (#20547) (sethamus)

Chores

• ef8fb92 chore: package.json update for eslint-config-eslint release (Jenkins)

... (truncated)

Commits

• 8351ec7 10.1.0
• 3270bc1 Build: changelog update for 10.1.0
• a9f9cce chore: update dependency eslint-plugin-unicorn to ^63.0.0 (#20584)
• 1f42bd7 chore: update prettier to 3.8.1 (#20651)
• c0a6f4a chore: update dependency @​eslint/json to ^1.2.0 (#20652)
• cc43f79 chore: update dependency c8 to v11 (#20650)
• 2ce4635 chore: update dependency @​eslint/json to v1 (#20649)
• f0406eeDescription has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.