chore(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@ai-sdk/anthropic (source)	^4.0.14 → ^4.0.19
@ai-sdk/gateway (source)	^4.0.19 → ^4.0.28
@ai-sdk/mcp (source)	^2.0.12 → ^2.0.16
@ai-sdk/vue (source)	^4.0.26 → ^4.0.37
@comark/vue (source)	^0.5.0 → ^0.5.1
@iconify-json/lucide	^1.2.117 → ^1.2.119
@iconify-json/simple-icons	^1.2.90 → ^1.2.91
@nuxt/content (source)	^3.15.0 → ^3.15.2
@nuxt/module-builder	^1.0.2 → ^1.0.3
@nuxtjs/mdc	^0.22.1 → ^0.22.2
@regle/core (source)	^1.28.3 → ^1.28.4
@regle/rules (source)	^1.28.3 → ^1.28.4
@tailwindcss/postcss (source)	^4.3.2 → ^4.3.3
@tailwindcss/vite (source)	^4.3.2 → ^4.3.3
@tanstack/vue-virtual (source)	^3.13.32 → ^3.13.34
@unhead/vue (source)	^2.1.15 → ^2.1.16
@vitejs/plugin-vue (source)	^6.0.7 → ^6.0.8
ai (source)	^7.0.26 → ^7.0.37
happy-dom	^20.10.6 → ^20.11.1
nuxt-og-image (source)	^6.7.2 → ^6.7.4
nuxt-schema-org (source)	^6.2.3 → ^6.2.7
pnpm (source)	11.13.0 → 11.17.0
prettier (source)	^3.9.5 → ^3.9.6
tailwindcss (source)	^4.3.2 → ^4.3.3
vue (source)	^3.5.39 → ^3.5.40
vue-component-meta (source)	^3.3.7 → ^3.3.8
vue-component-type-helpers (source)	^3.3.7 → ^3.3.8
vue-router (source)	^5.1.0 → ^5.2.0
vue-tsc (source)	^3.3.7 → ^3.3.8

---

Release Notes

vercel/ai (@​ai-sdk/anthropic)

v4.0.19

Compare Source

Patch Changes

• 01a596a: fix (provider/anthropic): use current-generation capability defaults for unrecognized Claude model IDs while retaining conservative defaults for legacy Claude and non-Claude models.

v4.0.18

Compare Source

Patch Changes

• 97de198: Warn when an unknown model uses the default 4096 max output token limit.

v4.0.17

Compare Source

Patch Changes

• b72fc7c: fix(amazon-bedrock): sanitize unsupported JSON Schema constraints in native Anthropic structured output
• 9218ebe: fix(provider/anthropic): warn when parallel tool use is requested with JSON tool structured output
• Updated dependencies [02ffdcb]
• Updated dependencies [76cb673]
  • @​ai-sdk/provider-utils@​5.0.12

v4.0.16

Compare Source

Patch Changes

• afcf19c: fix(provider/anthropic): preserve web search citations when replaying assistant messages
• Updated dependencies [cd06458]
  • @​ai-sdk/provider-utils@​5.0.11

v4.0.15

Compare Source

Patch Changes

• Updated dependencies [31c7be8]
  • @​ai-sdk/provider-utils@​5.0.10

vercel/ai (@​ai-sdk/gateway)

v4.0.28

Compare Source

Patch Changes

• 0a7c7f4: chore(provider/gateway): update gateway model settings files

v4.0.27

Compare Source

Patch Changes

• 2112ff1: chore(provider/gateway): update gateway model settings files

v4.0.26

Compare Source

Patch Changes

• 7c16f21: feat(google): add gemini-3.6-flash and gemini-3.5-flash-lite models

v4.0.25

Compare Source

Patch Changes

• Updated dependencies [02ffdcb]
• Updated dependencies [76cb673]
  • @​ai-sdk/provider-utils@​5.0.12

v4.0.24

Compare Source

Patch Changes

• cefa3b1: chore(provider/gateway): remove hipaaCompliant provider option
• 8fbb89c: chore(provider/gateway): update gateway model settings files

v4.0.23

Compare Source

Patch Changes

• Updated dependencies [cd06458]
  • @​ai-sdk/provider-utils@​5.0.11

v4.0.22

Compare Source

Patch Changes

• 341616a: feat: add kimi-k3 model and reasoningEffort provider option
• 70fc45c: chore(provider/gateway): update gateway model settings files

v4.0.21

Compare Source

Patch Changes

• 7069785: chore(provider/gateway): update gateway model settings files
• 4bf9ac2: feat (provider/gateway): add gateway.experimental_transcription.getToken for minting transcription-bound client secrets

v4.0.20

Compare Source

Patch Changes

• 4d096f6: chore(provider/gateway): update gateway model settings files
• Updated dependencies [31c7be8]
  • @​ai-sdk/provider-utils@​5.0.10

vercel/ai (@​ai-sdk/mcp)

v2.0.16

Compare Source

Patch Changes

• Updated dependencies [02ffdcb]
• Updated dependencies [76cb673]
  • @​ai-sdk/provider-utils@​5.0.12

v2.0.15

Compare Source

Patch Changes

• d84ea43: fix(mcp): accept OAuth metadata without code challenge methods
• Updated dependencies [cd06458]
  • @​ai-sdk/provider-utils@​5.0.11

v2.0.14

Compare Source

Patch Changes

• 48e7e78: Harden MCP Apps handling of server-supplied resource metadata and the host/iframe bridge:

  • Runtime-validate _meta.ui and drop malformed or non-string fields.
  • Gate iframe permissions deny-by-default via a new sandbox.allowedPermissions allowlist.
  • Derive a concrete postMessage target origin and validate inbound message origins.
  • Validate inbound bridge params: limit resources/read to ui:// resources and allow only https/http/mailto in ui/open-link.
  • Add fingerprintMCPAppResource / detectMCPAppResourceDrift for pinning and comparing app resources.

v2.0.13

Compare Source

Patch Changes

• Updated dependencies [31c7be8]
  • @​ai-sdk/provider-utils@​5.0.10

vercel/ai (@​ai-sdk/vue)

v4.0.37

Compare Source

Patch Changes

• ai@​7.0.37

v4.0.36

Compare Source

Patch Changes

• Updated dependencies [7fa85b2]
  • ai@​7.0.36

v4.0.35

Compare Source

Patch Changes

• Updated dependencies [7f6650b]
• Updated dependencies [106ea59]
  • ai@​7.0.35

v4.0.34

Compare Source

Patch Changes

• ai@​7.0.34

v4.0.33

Compare Source

Patch Changes

• Updated dependencies [02ffdcb]
• Updated dependencies [76cb673]
• Updated dependencies [e808fa5]
• Updated dependencies [33647d7]
  • @​ai-sdk/provider-utils@​5.0.12
  • ai@​7.0.33

v4.0.32

Compare Source

Patch Changes

• Updated dependencies [6cd7c74]
• Updated dependencies [e35bcae]
• Updated dependencies [a4eb3f3]
  • ai@​7.0.32

v4.0.31

Compare Source

Patch Changes

• Updated dependencies [70f18c3]
• Updated dependencies [cd06458]
  • ai@​7.0.31
  • @​ai-sdk/provider-utils@​5.0.11

v4.0.30

Compare Source

Patch Changes

• ai@​7.0.30

v4.0.29

Compare Source

Patch Changes

• ai@​7.0.29

v4.0.28

Compare Source

Patch Changes

• Updated dependencies [0bc8d4f]
  • ai@​7.0.28

v4.0.27

Compare Source

Patch Changes

• Updated dependencies [ac01b79]
• Updated dependencies [31c7be8]
• Updated dependencies [2696562]
  • ai@​7.0.27
  • @​ai-sdk/provider-utils@​5.0.10

comarkdown/comark (@​comark/vue)

v0.5.1: @​comark/nuxt v0.5.1

Compare Source

0.5.1 (2026-07-14)

nuxt/content (@​nuxt/content)

v3.15.2

Compare Source

Bug Fixes

• dev: ignore temporary files in content source paths (#​3784) (a019e70)
• security: reject SQL function calls in query WHERE clauses (#​3819) (847d523)

v3.15.1

Compare Source

Bug Fixes

• dev: preserve SQL hashes in HMR dumps (#​3816) (b6796e9)

nuxt/module-builder (@​nuxt/module-builder)

v1.0.3

Compare Source

v1.0.3 is the next patch release.

👉 Changelog

compare changes

🩹 Fixes

• update command defaults and descriptions (#​677)

📦 Build

• migrate to tsdown (#​765)

🏡 Chore

• migrate to pnpm v11 (#​738)
• remove shamefully-hoist (#​580)
• migrate resolutions/pnpm.overrides to pnpm-workspace.yaml (cfb45fb)
• migrate npm badges and links to npmx.dev (afcf2fa)
• revert pnpm trust policy and restore provenance action (aeb1d38)
• update pnpm to 10.21 and enable trust policy (92eb2af)

✅ Tests

• accept nuxt/app specifier for NuxtError in snapshot (809c89f)
• update v4.5 error type as well (9412c91)
• accept either #app or nuxt/app in generated declarations (#​727)

🤖 CI

• use uppt release workflow (604d5b3)
• add agent-scan workflow to flag bot-authored PRs (4442a14)
• rename workflow (f7be1a6)
• avoid checkout in reproduction (57e7ce9)
• pin github actions to full-length commit shas (c3c8e72)
• add provenance action to check for downgrades in provenance (d87d217)
• run tests on node 20 (54c5f13)

🎉 New Contributors

• Damian Głowala (@​DamianGlowala)

❤️ Contributors

• Daniel Roe (@​danielroe)
• Damian Głowala (@​DamianGlowala)
• Bobbie Goede (@​BobbieGoede)

nuxt-content/mdc (@​nuxtjs/mdc)

v0.22.2

Compare Source

compare changes

🩹 Fixes

• security: All attributes should validate (#​496)

❤️ Contributors

• Farnabaz farnabaz@gmail.com

victorgarciaesgi/regle (@​regle/core)

v1.28.4

Compare Source

   🐞 Bug Fixes

• core: Fixed RegleRoot generic type to support collections #​378  -  by @​victorgarciaesgi in #​378 (fcf70)

    View changes on GitHub

tailwindlabs/tailwindcss (@​tailwindcss/postcss)

v4.3.3

Compare Source

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#​20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#​20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#​20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#​20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#​20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#​20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#​20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#​20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#​20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#​20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#​20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#​20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#​20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#​20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#​20336)

tailwindlabs/tailwindcss (@​tailwindcss/vite)

v4.3.3

Compare Source

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#​20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#​20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#​20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#​20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#​20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#​20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#​20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#​20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#​20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#​20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#​20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#​20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#​20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#​20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#​20336)

TanStack/virtual (@​tanstack/vue-virtual)

v3.13.34

Compare Source

Patch Changes

• Updated dependencies [7ae32b5]:
  • @​tanstack/virtual-core@​3.17.6

v3.13.33

Compare Source

Patch Changes

• Updated dependencies [1e3b908, 7dcfc07]:
  • @​tanstack/virtual-core@​3.17.5

unjs/unhead (@​unhead/vue)

v2.1.16

Compare Source

   🐞 Bug Fixes

• vue: Expose v2 legacy plugins  -  by @​harlan-zw in #​861 (3023d)

    View changes on GitHub

vitejs/vite-plugin-vue (@​vitejs/plugin-vue)

v6.0.8

Features

• plugin-vue: add forced vapor mode option (#​766) (d59c3c0)

Bug Fixes

• deps: update all non-major dependencies (#​781) (d369e5a)

vercel/ai (ai)

v7.0.37

Compare Source

Patch Changes

• Updated dependencies [0a7c7f4]
  • @​ai-sdk/gateway@​4.0.28

v7.0.36

Compare Source

Patch Changes

• 7fa85b2: fix(ai): use injective serialization for tool approval HMAC payload

  The tool approval signature (experimental_toolApprovalSecret) built its HMAC
  payload by joining fields with \n. Because fields such as toolName and
  toolCallId can themselves contain a newline, distinct field tuples could
  serialize to identical bytes, allowing a signed approval to verify against a
  different tuple. The payload is now serialized with JSON.stringify (with a
  versioned domain-separation prefix), which escapes delimiter/control characters
  and makes the encoding injective.

  Verification remains backwards compatible: a signature in the old format still
  verifies, but only when no field contains the \n delimiter (the condition
  that made the old format ambiguous), so a pending approval that straddles an
  upgrade is not rejected while the collision stays closed.

v7.0.35

Compare Source

Patch Changes

• 7f6650b: Return response piping promises so callers can catch stream read and write errors.
• 106ea59: feat(ai): add per-step first content timeout for streaming generations
• Updated dependencies [2112ff1]
  • @​ai-sdk/gateway@​4.0.27

v7.0.34

Compare Source

Patch Changes

• Updated dependencies [7c16f21]
  • @​ai-sdk/gateway@​4.0.26

v7.0.33

Compare Source

Patch Changes

• 76cb673: fix: detect MP4 audio from its ftyp box during transcription
• e808fa5: fix(ai): preserve tool parts when tool call IDs repeat across steps
• 33647d7: Preserve provider options when combining consecutive tool messages.
• Updated dependencies [02ffdcb]
• Updated dependencies [76cb673]
  • @​ai-sdk/provider-utils@​5.0.12
  • @​ai-sdk/gateway@​4.0.25

v7.0.32

Compare Source

Patch Changes

• 6cd7c74: fix: correct the onToolCall callback result documentation
• e35bcae: Allow UI message chunks to include fields added by newer server versions.
• a4eb3f3: Propagate abort reasons when generation is cancelled during tool execution.
• Updated dependencies [cefa3b1]
• Updated dependencies [8fbb89c]
  • @​ai-sdk/gateway@​4.0.24

v7.0.31

Compare Source

Patch Changes

• 70f18c3: fix(ai): emit denied tool output state for client-rejected approvals
• cd06458: fix(ai): call onInputStart before onInputAvailable during non-streaming tool calls
• Updated dependencies [cd06458]
  • @​ai-sdk/provider-utils@​5.0.11
  • @​ai-sdk/gateway@​4.0.23

v7.0.30

Compare Source

Patch Changes

• Updated dependencies [341616a]
• Updated dependencies [70fc45c]
  • @​ai-sdk/gateway@​4.0.22

v7.0.29

Compare Source

Patch Changes

• Updated dependencies [7069785]
• Updated dependencies [4bf9ac2]
  • @​ai-sdk/gateway@​4.0.21

v7.0.28

Compare Source

Patch Changes

• 0bc8d4f: Fix chat onFinish handling when overlapping requests clear the active response before a resume stream finishes.

v7.0.27

Compare Source

Patch Changes

• ac01b79: Allow validating assistant UI messages with empty parts so persisted errored responses remain loadable.
• 2696562: experimental_streamTranscribe result promises now resolve without consuming fullStream: accessing any result promise consumes the stream internally. Previously await result.text alone deadlocked on transform backpressure. Because live transcription streams can be unbounded, fullStream is explicitly single-consumer (no replay buffering): access it once, before any result promise, when both stream parts and final results are needed.
• Updated dependencies [31c7be8]
• Updated dependencies [4d096f6]
  • @​ai-sdk/provider-utils@​5.0.10
  • @​ai-sdk/gateway@​4.0.20

capricorn86/happy-dom (happy-dom)

v20.11.1

Compare Source

v20.11.0

Compare Source

🎨 Features

• Adds support for CookieStore API - By @​TrevorBurnham in task #​1864
• Adds support for Element.checkVisibility() - By @​capricorn86 in task #​1506

nuxt-modules/og-image (nuxt-og-image)

v6.7.4

Compare Source

   🐞 Bug Fixes

• Parse queries from event paths  -  by @​harlan-zw in #​642 (78dd8)

    View changes on GitHub

v6.7.3

Compare Source

compare changes

🩹 Fixes

• Parse queries from event paths (#​642)

🏡 Chore

• Bump deps (5bd2bdb3)

❤️ Contributors

• Harlan Wilton (@​harlan-zw)

harlan-zw/nuxt-schema-org (nuxt-schema-org)

v6.2.7

Compare Source

   🐞 Bug Fixes

• Broken plugin order  -  by @​harlan-zw (9cb81)

    View changes on GitHub

v6.2.6

Compare Source

   🐞 Bug Fixes

• Broken bundle  -  by @​harlan-zw (82127)

    View changes on GitHub

v6.2.5

Compare Source

compare changes

🩹 Fixes

• Broken bundle (821272c)

❤️ Contributors

• Harlan Wilton (@​harlan-zw)

v6.2.4

Compare Source

compare changes

🏡 Chore

• Bump deps (53e596b)
• Type (7e2f207)

❤️ Contributors

• Harlan Wilton (@​harlan-zw)

pnpm/pnpm (pnpm)

v11.17.0: pnpm 11.17

Compare Source

Minor Changes

• Added a new setting, update.githubActionsServer, for specifying the base URL of the GitHub server that hosts the repositories of the GitHub Actions referenced by the workflow files (for example, a GitHub Enterprise Server). When the setting is not defined, the URL is read from the GITHUB_SERVER_URL environment variable, falling back to https://github.com. The URL must use the https:// or http:// protocol #​13220.

  pnpm outdated and pnpm update no longer fail when the refs of a GitHub Action's repository cannot be read (for example, when the action's repository is private or hosted on a different GitHub server). Such actions are now skipped with a warning.

  Setting update.githubActions to false now makes pnpm outdated and the interactive pnpm update skip GitHub Actions dependencies.

Patch Changes

• The token poll for web-based authentication no longer reads the body of non-OK or still-pending (HTTP 202) responses, and caps the token response body it does read at 64 KiB, so a malicious or compromised registry cannot exhaust memory through the poll pnpm/pnpm#12721.

• Fixed catalog: references in dependencies and overrides failing to resolve when installing through a pnpr server, which errored with "No catalog entry '' was found for catalog 'default'." even though the catalog entry existed. Also fixed a crash on Windows when installing a nested workspace member (e.g. packages/foo) through a pnpr server #​13232.

• Republished every package: the tarballs published by the v11.13.1 through v11.16.0 releases were missing most of their compiled files due to a packing bug #​13164.

• Revert script ordering change for pnpm run --sequential /regex/

• Support the from-git argument in the pnpm version command.

• When the authentication URL cannot be rendered as a QR code (for example when it exceeds the maximum QR data capacity), web-based login now displays the URL alone with a warning instead of aborting authentication pnpm/pnpm#12721.

Platinum Sponsors

✂ Note PR body was truncated to here. Configuration 📅 Schedule: (in timezone Europe/Paris) Branch creation Between 06:00 AM and 09:59 AM, only on Monday (* 6-9 * * 1) Automerge At any time (no schedule defined) 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired. If you want to rebase/retry this PR, check this box This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	happy-dom@​20.11.1
	@​tanstack/​vue-virtual@​3.13.34
	@​ai-sdk/​gateway@​4.0.28
	@​ai-sdk/​anthropic@​4.0.19
	@​ai-sdk/​vue@​4.0.37
	@​comark/​vue@​0.5.1
	@​iconify-json/​simple-icons@​1.2.91
	@​iconify-json/​lucide@​1.2.119
	tailwindcss@​4.3.3
	@​regle/​rules@​1.28.4
	@​regle/​core@​1.28.4
	@​nuxt/​module-builder@​1.0.3
	@​tailwindcss/​vite@​4.3.3
	@​nuxt/​content@​3.15.2
	@​ai-sdk/​mcp@​2.0.16
	vue@​3.5.40
	vue-router@​5.2.0
	vue-tsc@​3.3.8
	@​vitejs/​plugin-vue@​6.0.8
	@​nuxtjs/​mdc@​0.22.2
	nuxt-schema-org@​6.2.7
	nuxt-og-image@​6.7.4
	@​unhead/​vue@​2.1.16
	prettier@​3.9.6
	vue-component-meta@​3.3.8
	vue-component-type-helpers@​3.3.8
	@​tailwindcss/​postcss@​4.3.3
	ai@​7.0.37

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm happy-dom is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package.json → npm/happy-dom@20.11.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/happy-dom@20.11.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[pkg-pr-new]

npm i https://pkg.pr.new/@nuxt/ui@6753

commit: a71f3b6