Skip to content

Update pnpm dependencies (major)#75

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/major-pnpm-dependencies
Open

Update pnpm dependencies (major)#75
renovate[bot] wants to merge 1 commit intomainfrom
renovate/major-pnpm-dependencies

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Mar 22, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@faker-js/faker (source) ^9.9.0^10.4.0 age confidence devDependencies major
@fastify/cors ^10.1.0^11.2.0 age confidence dependencies major
@fastify/mongodb ^9.0.2^10.0.0 age confidence dependencies major
@nuxt/test-utils ^3.23.0^4.0.0 age confidence devDependencies major
@nuxtjs/sitemap ^7.6.0^8.0.9 age confidence devDependencies major
@sentry/node (source) ^9.47.1^10.46.0 age confidence dependencies major
@types/node (source) ^22.19.13^24.12.0 age confidence devDependencies major
bson ^6.10.4^7.2.0 age confidence dependencies major
dotenv ^16.6.1^17.3.1 age confidence dependencies major
fastify-blipp 3.1.04.0.0 age confidence dependencies major
fastify-type-provider-zod ^5.1.0^6.1.0 age confidence dependencies major
mongodb ^6.21.0^7.1.1 age confidence devDependencies major
node (source) 22.21.124.14.1 age confidence volta major
typescript (source) ^5.9.3^6.0.2 age confidence devDependencies major
vitest (source) ^3.2.4^4.1.2 age confidence devDependencies major

Release Notes

faker-js/faker (@​faker-js/faker)

v10.4.0

Compare Source

New Locales
Features
Changed Locales
  • locale: filter and cleanup PersonEntryDefintions data (#​3266) (67defc8)
Bug Fixes
  • locales: correct typos and capitalization in es_MX street names (#​3737) (2b32c28)

v10.3.0

Compare Source

New Locales
Features
Changed Locales
Bug Fixes

v10.2.0

Compare Source

New Locales
Features
Bug Fixes

v10.1.0

Compare Source

New Locales
Bug Fixes

v10.0.0

Compare Source

New Locales
Features
  • locales: add animal vocabulary(bear, bird, cat, rabbit, pet_name) in Korean (#​3535) (0d2143c)
Changed Locales
fastify/fastify-cors (@​fastify/cors)

v11.2.0

Compare Source

What's Changed
New Contributors

Full Changelog: fastify/fastify-cors@v11.1.0...v11.2.0

v11.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: fastify/fastify-cors@v11.0.1...v11.1.0

v11.0.1

Compare Source

What's Changed
New Contributors

Full Changelog: fastify/fastify-cors@v11.0.0...v11.0.1

v11.0.0

Compare Source

Breaking Change

In order to provides safer default, we change the methods to the CORS-safelisted methods.
If you want to resume the previous behaviour, you need to explicitly specify the methods,

import Fastify from 'fastify'
import cors from '@​fastify/cors'

const fastify = Fastify()
await fastify.register(cors, {
  methods: "GET,HEAD,PUT,PATCH,POST,DELETE"
})
What's Changed

Full Changelog: fastify/fastify-cors@v10.1.0...v11.0.0

fastify/fastify-mongodb (@​fastify/mongodb)

v10.0.0

Compare Source

What's Changed

Full Changelog: fastify/fastify-mongodb@v9.0.2...v10.0.0

nuxt/test-utils (@​nuxt/test-utils)

v4.0.0

Compare Source

4.0.0 is the next major release.

👀 Highlights

We're releasing Nuxt Test Utils v4, with support for Vitest v4. 🚀

Better mocking support

The biggest improvement in this release is how mocking works. Nuxt initialization has been moved from setupFiles to the beforeAll hook (#​1516), which means vi.mock and mockNuxtImport calls now take effect before Nuxt starts. This fixes a long-standing issue where mocks for composables used in middleware or plugins wouldn't apply reliably (#​750, #​836, #​1496).

On top of that, mockNuxtImport now passes the original implementation to the factory function (#​1552), making partial mocking much more natural:

mockNuxtImport('useRoute', original => vi.fn(original))

it('my test', async () => {
  vi.mocked(useRoute).mockImplementation(
    (...args) => ({ ...vi.mocked(useRoute).getMockImplementation()!(...args), path: '/mocked' }),
  )

  const wrapper = await mountSuspended(MyComponent)
  expect(wrapper.find('#path').text()).toBe('/mocked')
})
registerEndpoint improvements

registerEndpoint now works correctly with query parameters in URLs (#​1560), and endpoints registered in setup files are no longer lost when modules reset (#​1549).

🚧 Migration

@nuxt/test-utils v4 contains a few breaking changes, almost all related to requiring at least vitest v4 as a peer dependency (if you are using vitest). It replaces vite-node with Vite's native Module Runner and simplifies pool configuration.

This will mean improvements for test performance and mocking, but does require some changes to your test code.

[!TIP]
Most of the changes below are straightforward. The biggest thing to watch out for is code that runs at the top level of a describe block — see below.

Update your dependencies

Update vitest and its companion packages together:

{
  "devDependencies": {
-   "@​nuxt/test-utils": "^3.x",
-   "vitest": "^3.x",
-   "@​vitest/coverage-v8": "^3.x"
+   "@​nuxt/test-utils": "^4.0",
+   "vitest": "^4.0",
+   "@​vitest/coverage-v8": "^4.0"
  }
}
Peer dependencies

We've tightened peer dependency ranges. You may need to update some of these:

Dependency v3 v4
vitest ^3.2.0 ^4.0.2
happy-dom * >=20.0.11
jsdom * >=27.4.0
@jest/globals ^29.5.0 || >=30.0.0 >=30.0.0
@cucumber/cucumber ^10.3.1 || >=11.0.0 >=11.0.0
@testing-library/vue ^7.0.0 || ^8.0.1 ^8.0.1
Later environment setup

This is the change that might require most change in your tests. Because we've moved the nuxt environment setup into beforeAll, this means composables called at the top level of a describe block will fail with [nuxt] instance unavailable.

// Before (worked in vitest v3)
describe('my test', () => {
  const router = useRouter() // ran lazily, after environment setup
  // ...
})

// After (vitest v4)
describe('my test', () => {
  let router: ReturnType<typeof useRouter>

  beforeAll(() => {
    router = useRouter() // runs after environment setup
  })
  // ...
})

This applies to useRouter(), useNuxtApp(), useRoute(), and any other Nuxt composable or auto-import.

[!TIP]
If you only need the value within individual tests, beforeEach or directly within the test works too.

Stricter mock exports

If you use vi.mock with a factory function, accessing an export that the factory doesn't return will now throw an error instead of silently returning undefined.

// Before: accessing `bar` would silently return undefined
vi.mock('./module', () => ({ foo: 'mocked' }))

// After: accessing `bar` throws
// Fix: use importOriginal to include all exports
vi.mock('./module', async (importOriginal) => ({
  ...await importOriginal(),
  foo: 'mocked',
}))

[!NOTE]
If you're mocking a virtual module (like #build/nuxt.config.mjs) where importOriginal can't resolve the real module, you might need to explicitly list all accessed exports in your mock factory.

Other changes

For the full list, see the vitest v4 migration guide.

👉 Changelog

compare changes

🚀 Enhancements
  • deps: ⚠️ Upgrade to vitest v4 (#​1481)
  • deps: ⚠️ Drop official support for older versions of test runners + dom environments (31fdc262a)
  • runtime-utils: Pass original to mockNuxtImport factory (#​1552)
  • runtime: ⚠️ Change nuxt start timing to beforeAll hook (#​1516)
  • e2e: Support setup and teardown timeouts in setupBun (#​1578)
🩹 Fixes
  • runtime: Handle optional chaining vueWrapper plugin installed check (#​1547)
  • runtime-utils: Keep endpoints from registerEndpoint in setup file (#​1549)
  • runtime-utils: Support registerEndpoint with query params (#​1560)
  • runtime-utils: Avoid local variable in mockNuxtImport macro (#​1564)
  • runtime-utils: Add missing nextTick import (#​1563)
  • Pin h3-next to patch (1ff3bbb91)
  • playwright: Bump windows timeout (63e39b7c9)
  • config: Respect include options in non nuxt environment simple setup (#​1570)
💅 Refactors
  • module: Use @nuxt/devtools-kit for devtools hooks (426e0b537)
  • runtime: Remove unnecessary querySelector (#​1577)
📖 Documentation
🏡 Chore
  • Allow changelog update util to return major bump (9e86cadab)
  • Make app-vitest follow advised setup guidelines (#​1542)
  • Update lockfile (6d798b5e1)
  • config: Migrate Renovate config (#​1568)
  • Add test utils setup to .nuxtrc (b4021dee4)
✅ Tests
  • Avoid running root test script twice (44f6bd396)
⚠️ Breaking Changes
  • deps: ⚠️ Upgrade to vitest v4 (#​1481)
  • deps: ⚠️ Drop official support for older versions of test runners + dom environments (31fdc262a)
  • runtime: ⚠️ Change nuxt start timing to beforeAll hook (#​1516)
❤️ Contributors
nuxt-modules/sitemap (@​nuxtjs/sitemap)

v8.0.9

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v8.0.8

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v8.0.7

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v8.0.6

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v8.0.5

Compare Source

No significant changes

    View changes on GitHub

v8.0.4

Compare Source

No significant changes

    View changes on GitHub

v8.0.3

Compare Source

No significant changes

    View changes on GitHub

v8.0.2

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v8.0.1

Compare Source

   🐞 Bug Fixes
    View changes on GitHub

v8.0.0

Compare Source

The v8 release focuses on a fully rewritten devtools experience and several quality of life improvements for Nuxt Content v3 and i18n users.

⚠️ Breaking Changes

Site Config v4

Nuxt Site Config is a module used internally by Nuxt Sitemap.

The major update to v4.0.0 shouldn't have any direct effect on your site, however, you may want to double-check
the breaking changes.

asSitemapCollection() Deprecated

The asSitemapCollection() composable has been replaced by defineSitemapSchema(). The old API still works but will log a deprecation warning.

import { defineCollection, z } from '#content/collections'
- import { asSitemapCollection } from '#sitemap/content'
+ import { defineSitemapSchema } from '#sitemap/content'

export const collections = {
-  content: defineCollection(asSitemapCollection({
-    type: 'page',
-    source: '**/*.md',
-    schema: z.object({ title: z.string() })
-  }))
+  content: defineCollection({
+    type: 'page',
+    source: '**/*.md',
+    schema: z.object({
+      title: z.string(),
+      sitemap: defineSitemapSchema()
+    })
+  })
}

🚀 New Features

defineSitemapSchema() Composable

A new composable for Nuxt Content v3 that provides a cleaner API for integrating sitemap configuration into your content collections. Supports filter, onUrl, and name options.

import { defineCollection, z } from '#content/collections'
import { defineSitemapSchema } from '#sitemap/content'

export const collections = {
  content: defineCollection({
    type: 'page',
    source: '**/*.md',
    schema: z.object({
      title: z.string(),
      sitemap: defineSitemapSchema({
        filter: entry => !entry.path?.startsWith('/draft'),
        onUrl: (url) => {
          // customize URL entries
          return url
        }
      })
    })
  })
}
definePageMeta Sitemap Configuration

You can now configure sitemap options directly in your page components using definePageMeta.

<script setup>
definePageMeta({
  sitemap: {
    changefreq: 'daily',
    priority: 0.8
  }
})
</script>
i18n Multi-Sitemap with Custom Sitemaps

Custom sitemaps with includeAppSources: true are now automatically expanded per locale, generating {locale}-{name} formatted sitemaps.

Debug Production Endpoint

A new /__sitemap__/debug-production.json endpoint is available in development mode, allowing you to inspect what the production sitemap output will look like during development.

🐛 Bug Fixes

  • Content v3: Filter .navigation paths from sitemap URL generation
  • Content v3: Guard afterParse hook to prevent silent HMR failures
  • i18n: Include base URL in multi-sitemap redirect
  • i18n: Fix exclude filters when base URL and i18n prefixes are present
  • i18n: Respect autoI18n: false to generate single sitemap instead of per-locale sitemaps
  • Types: Use robots instead of index in route rules type definition
  • Chunked sitemaps: Fix path resolution with sitemapsPathPrefix: '/'

⚡ Performance

  • Replaced chalk with consola/utils for a smaller bundle
  • Use URL.canParse() instead of try/catch new URL() for URL validation
  • Use addPrerenderRoutes() API instead of manual route pushing
   🚀 Features
   🐞 Bug Fixes
   🏎 Performance
    View changes on GitHub
getsentry/sentry-javascript (@​sentry/node)

v10.46.0

Compare Source

Important Changes
  • feat(elysia): @sentry/elysia - Alpha Release (#​19509)

    New Sentry SDK for the Elysia web framework, supporting both Bun and Node.js runtimes.

    Note: This is an alpha release. Please report any issues or feedback on GitHub.

    Features

    • Automatic error capturing — 5xx errors captured via global onError hook; 3xx/4xx ignored by default. Customizable with shouldHandleError.
    • Automatic tracing — Lifecycle spans for every Elysia phase (Request, Parse, Transform, BeforeHandle, Handle, AfterHandle, MapResponse, AfterResponse, Error) with parameterized route names (e.g. GET /users/:id).
    • Distributed tracingsentry-trace and baggage headers propagated automatically on incoming/outgoing requests.

    Usage

    import * as Sentry from '@&#8203;sentry/elysia';
    import { Elysia } from 'elysia';
    
    Sentry.init({ dsn: '__DSN__', tracesSampleRate: 1.0 });
    
    const app = Sentry.withElysia(new Elysia());
    app.get('/', () => 'Hello World');
    app.listen(3000);
Other Changes
  • feat(nuxt): Conditionally use plugins based on Nitro version (v2/v3) (#​19955)
  • fix(cloudflare): Forward ctx argument to Workflow.do user callback (#​19891)
  • fix(cloudflare): Send correct events in local development (#​19900)
  • fix(core): Do not overwrite user provided conversation id in Vercel (#​19903)
  • fix(core): Preserve .withResponse() on Anthropic instrumentation (#​19935)
  • fix(core): Send internal_error as span status for Vercel error spans (#​19921)
  • fix(core): Truncate content array format in Vercel (#​19911)
  • fix(deps): bump fast-xml-parser to 5.5.8 in @​azure/core-xml chain (#​19918)
  • fix(deps): bump socket.io-parser to 4.2.6 to fix CVE-2026-33151 (#​19880)
  • fix(nestjs): Add node to nest metadata (#​19875)
  • fix(serverless): Add node to metadata (#​19878)
Internal Changes
  • chore(ci): Fix "Gatbsy" typo in issue package label workflow (#​19905)
  • chore(claude): Enable Claude Code Intelligence (LSP) (#​19930)
  • chore(deps): bump mongodb-memory-server-global from 10.1.4 to 11.0.1 (#​19888)
  • chore(deps-dev): bump @​react-router/node from 7.13.0 to 7.13.1 (#​19544)
  • chore(deps-dev): bump effect from 3.19.19 to 3.20.0 (#​19926)
  • chore(deps-dev): bump qunit-dom from 3.2.1 to 3.5.0 (#​19546)
  • chore(node-integration-tests): Remove unnecessary file-type dependency (#​19824)
  • chore(remix): Replace glob with native recursive fs walk (#​19531)
  • feat(deps): bump stacktrace-parser from 0.1.10 to 0.1.11 (#​19887)
  • fix(craft): Add missing mainDocsUrl for @​sentry/effect SDK (#​19860)
  • fix(deps): bump next to 15.5.14 in nextjs-15 and nextjs-15-intl E2E test apps (#​19917)
  • fix(deps): update lockfile to resolve h3@​1.15.10 (#​19933)
  • ref(core): Remove duplicate buildMethodPath utility from openai (#​19969)
  • ref(elysia): Drop @elysiajs/opentelemetry dependency (#​19947)
  • ref(nuxt): Extract core logic for storage/database to prepare for Nuxt v5 (#​19920)
  • ref(nuxt): Extract handler patching to extra plugin for Nitro v2/v3 (#​19915)
  • ref(sveltekit): Replace recast + @​babel/parser with acorn (#​19533)
  • test(astro): Re-enable server island tracing e2e test in Astro 6 (#​19872)
  • test(cloudflare): Enable multi-worker tests for CF integration tests (#​19938)

Work in this release was contributed by @​roli-lpci. Thank you for your contributions!

Bundle size 📦

Path Size
@​sentry/browser 25.08 KB
@​sentry/browser - with treeshaking flags 23.6 KB
@​sentry/browser (incl. Tracing) 41.67 KB
@​sentry/browser (incl. Tracing, Profiling) 46.22 KB
@​sentry/browser (incl. Tracing, Replay) 79.57 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 69.4 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 84.15 KB
[@​sentry/browser](https://redirect.github.com/sentry/brows

@renovate renovate bot force-pushed the renovate/major-pnpm-dependencies branch from 9384b84 to 93bb1f0 Compare March 22, 2026 16:06
@renovate renovate bot force-pushed the renovate/major-pnpm-dependencies branch 2 times, most recently from de08254 to d4fbebd Compare March 23, 2026 23:36
@renovate renovate bot force-pushed the renovate/major-pnpm-dependencies branch from d4fbebd to eb1f601 Compare March 24, 2026 10:02
@renovate renovate bot force-pushed the renovate/major-pnpm-dependencies branch from eb1f601 to 4d6137c Compare March 24, 2026 18:01
@renovate renovate bot force-pushed the renovate/major-pnpm-dependencies branch from 4d6137c to cb74454 Compare March 24, 2026 22:11
@renovate renovate bot force-pushed the renovate/major-pnpm-dependencies branch from cb74454 to ffbec44 Compare March 25, 2026 17:44
@renovate renovate bot force-pushed the renovate/major-pnpm-dependencies branch from ffbec44 to 4037458 Compare March 26, 2026 01:41
@renovate renovate bot force-pushed the renovate/major-pnpm-dependencies branch from 4037458 to 7fd583e Compare March 26, 2026 09:44
@renovate renovate bot force-pushed the renovate/major-pnpm-dependencies branch from 7fd583e to c2d2aef Compare March 26, 2026 19:01
@renovate renovate bot force-pushed the renovate/major-pnpm-dependencies branch from c2d2aef to da1afa1 Compare March 27, 2026 04:35
@renovate renovate bot force-pushed the renovate/major-pnpm-dependencies branch from da1afa1 to 1595e94 Compare March 27, 2026 13:05
@renovate renovate bot force-pushed the renovate/major-pnpm-dependencies branch from 1595e94 to 954357a Compare March 27, 2026 17:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants